@xoxoai/checkmate 0.4.28 → 0.5.0

package/dist/evidence/retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../../src/evidence/retention.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,CAAA;AAC/C,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE7C,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAKjH"}

package/dist/evidence/retention.js

@@ -0,0 +1,10 @@
+export function retainsEvidence(policy, outcome, content) {
+    if (content === 'opaque' && !policy.allowOpaque)
+        return false;
+    if (policy.retention === 'off')
+        return false;
+    if (policy.retention === 'on')
+        return true;
+    return outcome === 'failed';
+}
+//# sourceMappingURL=retention.js.map

package/dist/evidence/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../src/evidence/retention.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,eAAe,CAAC,MAAwB,EAAE,OAAoB,EAAE,OAAwB;IACvG,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAC7D,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAC5C,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1C,OAAO,OAAO,KAAK,QAAQ,CAAA;AAC5B,CAAC"}

package/dist/evidence/store.d.ts

@@ -0,0 +1,101 @@
+import type { Diagnostic, DriverDescriptorV1, EvidencePolicyV1, EvidenceReference, ExecutedStepResult, ExecutionResultV1, RunRequestV1 } from '../contracts/types.js';
+import { type RunIdentity } from './layout.js';
+import { type StepOutcome } from './retention.js';
+export declare const EVIDENCE_CAPTURE_LIMITS: Readonly<{
+    maxCandidateBytes: number;
+    maxInvocationBytes: number;
+}>;
+type AtomicWriter = (path: string, content: string | Uint8Array) => Promise<void>;
+export type EvidenceStoreOptions = Readonly<{
+    invocationRoot: string;
+    identity: RunIdentity;
+    policy: EvidencePolicyV1;
+    stepIds: readonly string[];
+    driverDescriptor: DriverDescriptorV1;
+    exactSecrets?: Iterable<string>;
+    writeFile?: AtomicWriter;
+    now?: () => Date;
+}>;
+export type HarnessEvidenceCandidate = Readonly<{
+    stepId: string;
+    kind: 'transcript' | 'turn-snapshot';
+    mediaType: 'text/markdown' | 'application/yaml';
+    content: string | Uint8Array;
+    turn?: number;
+}>;
+export type DriverEvidenceCandidate = Readonly<{
+    stepId?: string;
+    kind: string;
+    mediaType: string;
+    content: string | Uint8Array;
+}>;
+export type FinalizedStepEvidence = Readonly<{
+    references: readonly EvidenceReference[];
+    diagnostics: readonly Diagnostic[];
+}>;
+export type CheckpointState = Readonly<{
+    completedSteps: readonly ExecutedStepResult[];
+    diagnostics?: readonly Diagnostic[];
+}>;
+export type PreparedTerminalResult = Readonly<{
+    result: ExecutionResultV1;
+    bytes: string;
+}>;
+export type CommittedResult = Readonly<{
+    result: ExecutionResultV1;
+    bytes: string;
+    path: string;
+}>;
+export declare class EvidenceStore {
+    private readonly invocationRoot;
+    private readonly identity;
+    private readonly policy;
+    private readonly driverDescriptor;
+    private readonly stepOrdinals;
+    private readonly redactor;
+    private readonly writeFile;
+    private readonly now;
+    private readonly pending;
+    private readonly references;
+    private readonly allocatedPaths;
+    private readonly finalizedSteps;
+    private readonly persistenceDiagnostics;
+    private lifecycle;
+    private bufferedBytes;
+    private evidencePartial;
+    private driverCandidateOrdinal;
+    private scenarioId;
+    constructor({ invocationRoot, identity, policy, stepIds, driverDescriptor, exactSecrets, writeFile, now, }: EvidenceStoreOptions);
+    get runIdentity(): RunIdentity;
+    get state(): 'complete' | 'partial';
+    get committedReferences(): readonly EvidenceReference[];
+    get acceptedBufferBytes(): number;
+    markPartial(): void;
+    writeInvocation(request: RunRequestV1): Promise<void>;
+    captureHarnessStep(candidate: HarnessEvidenceCandidate): void;
+    captureDriver(candidate: DriverEvidenceCandidate): void;
+    finalizeStep(stepId: string, outcome: StepOutcome): Promise<FinalizedStepEvidence>;
+    finalizeScenario(outcome: StepOutcome): Promise<FinalizedStepEvidence>;
+    recordCaptureFailure(artifact: string, error: unknown): Diagnostic;
+    private finalizeCandidates;
+    replaceCheckpoint(state: CheckpointState): Promise<Diagnostic | undefined>;
+    writeResult(prepared: PreparedTerminalResult): Promise<CommittedResult>;
+    prepareResult(candidate: ExecutionResultV1): PreparedTerminalResult;
+    sanitizeDiagnosticText(value: string): string;
+    dispose(): void;
+    private capture;
+    private redactTextBytes;
+    private assertCandidateSize;
+    private stepOrdinal;
+    private release;
+    private removeCandidates;
+    private assertActive;
+    private writeDiagnostic;
+    private recordPersistenceDiagnostic;
+}
+export declare class EvidenceCaptureError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export {};
+//# sourceMappingURL=store.d.ts.map

package/dist/evidence/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/evidence/store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,MAAM,uBAAuB,CAAA;AAK9B,OAAO,EAQN,KAAK,WAAW,EAChB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAyC,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAExF,eAAO,MAAM,uBAAuB;;;EAGlC,CAAA;AAEF,KAAK,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;AAEjF,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,WAAW,CAAA;IACrB,MAAM,EAAE,gBAAgB,CAAA;IACxB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B,gBAAgB,EAAE,kBAAkB,CAAA;IACpC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/B,SAAS,CAAC,EAAE,YAAY,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAChB,CAAC,CAAA;AAEF,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,YAAY,GAAG,eAAe,CAAA;IACpC,SAAS,EAAE,eAAe,GAAG,kBAAkB,CAAA;IAC/C,OAAO,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAA;CACb,CAAC,CAAA;AAEF,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAA;CAC5B,CAAC,CAAA;AAEF,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC5C,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACxC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAA;CAClC,CAAC,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACtC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC7C,WAAW,CAAC,EAAE,SAAS,UAAU,EAAE,CAAA;CACnC,CAAC,CAAA;AAEF,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC7C,MAAM,EAAE,iBAAiB,CAAA;IACzB,KAAK,EAAE,MAAM,CAAA;CACb,CAAC,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAA;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACZ,CAAC,CAAA;AAiBF,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAa;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoB;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAmB;IAC1D,OAAO,CAAC,SAAS,CAAmD;IACpE,OAAO,CAAC,aAAa,CAAI;IACzB,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,sBAAsB,CAAI;IAClC,OAAO,CAAC,UAAU,CAAoB;gBAE1B,EACX,cAAc,EACd,QAAQ,EACR,MAAM,EACN,OAAO,EACP,gBAAgB,EAChB,YAAY,EACZ,SAA2B,EAC3B,GAAsB,GACtB,EAAE,oBAAoB;IAavB,IAAI,WAAW,IAAI,WAAW,CAE7B;IAED,IAAI,KAAK,IAAI,UAAU,GAAG,SAAS,CAElC;IAED,IAAI,mBAAmB,IAAI,SAAS,iBAAiB,EAAE,CAEtD;IAED,IAAI,mBAAmB,IAAI,MAAM,CAEhC;IAED,WAAW,IAAI,IAAI;IAIb,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB3D,kBAAkB,CAAC,SAAS,EAAE,wBAAwB,GAAG,IAAI;IA4B7D,aAAa,CAAC,SAAS,EAAE,uBAAuB,GAAG,IAAI;IA6BjD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASlF,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAK5E,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,UAAU;YAQpD,kBAAkB;IAkC1B,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAsB1E,WAAW,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC,eAAe,CAAC;IAY7E,aAAa,CAAC,SAAS,EAAE,iBAAiB,GAAG,sBAAsB;IAiBnE,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAI7C,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,OAAO;IA8Cf,OAAO,CAAC,eAAe;IAiCvB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,OAAO;IAKf,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,2BAA2B;CAGnC;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAE7C,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKhB"}

package/dist/evidence/store.js

@@ -0,0 +1,375 @@
+import { Buffer } from 'node:buffer';
+import { dirname } from 'node:path';
+import { serializeJson } from '../contracts/serialize.js';
+import { Redactor } from '../redaction/redactor.js';
+import { parseDocument, stringify as stringifyYaml } from 'yaml';
+import { AtomicWriteError, writeAtomicFile } from './atomic-file.js';
+import { ensurePrivateDirectory, driverEvidenceDirectory, evidenceExtension, harnessEvidencePath, resolveInside, safeSlug, toInvocationRelative, } from './layout.js';
+import { retainsEvidence } from './retention.js';
+export const EVIDENCE_CAPTURE_LIMITS = Object.freeze({
+    maxCandidateBytes: 10 * 1024 * 1024,
+    maxInvocationBytes: 64 * 1024 * 1024,
+});
+const harnessKinds = {
+    transcript: { mediaType: 'text/markdown', content: 'text' },
+    'turn-snapshot': { mediaType: 'application/yaml', content: 'text' },
+};
+export class EvidenceStore {
+    invocationRoot;
+    identity;
+    policy;
+    driverDescriptor;
+    stepOrdinals;
+    redactor;
+    writeFile;
+    now;
+    pending = [];
+    references = [];
+    allocatedPaths = new Set();
+    finalizedSteps = new Set();
+    persistenceDiagnostics = [];
+    lifecycle = 'allocated';
+    bufferedBytes = 0;
+    evidencePartial = false;
+    driverCandidateOrdinal = 0;
+    scenarioId;
+    constructor({ invocationRoot, identity, policy, stepIds, driverDescriptor, exactSecrets, writeFile = writeAtomicFile, now = () => new Date(), }) {
+        if (new Set(stepIds).size !== stepIds.length)
+            throw new Error('Evidence store step IDs must be unique');
+        this.invocationRoot = invocationRoot;
+        this.identity = identity;
+        this.policy = { ...policy };
+        this.driverDescriptor = structuredClone(driverDescriptor);
+        this.stepOrdinals = new Map(stepIds.map((id, index) => [id, index + 1]));
+        this.redactor = new Redactor({ mode: policy.redaction, exactSecrets });
+        this.writeFile = writeFile;
+        this.now = now;
+        toInvocationRelative(invocationRoot, identity.runDirectory);
+    }
+    get runIdentity() {
+        return this.identity;
+    }
+    get state() {
+        return this.evidencePartial ? 'partial' : 'complete';
+    }
+    get committedReferences() {
+        return this.references.map((reference) => ({ ...reference }));
+    }
+    get acceptedBufferBytes() {
+        return this.bufferedBytes;
+    }
+    markPartial() {
+        this.evidencePartial = true;
+    }
+    async writeInvocation(request) {
+        if (this.lifecycle !== 'allocated')
+            throw new Error('Invocation metadata has already been written');
+        const requestStepIds = request.scenario.steps.map((step) => step.id);
+        if (requestStepIds.length !== this.stepOrdinals.size ||
+            requestStepIds.some((stepId, index) => this.stepOrdinals.get(stepId) !== index + 1)) {
+            throw new Error('Invocation steps do not match the evidence store');
+        }
+        this.scenarioId = request.scenario.id;
+        this.lifecycle = 'active';
+        const path = resolveInside(this.identity.runDirectory, 'invocation.json');
+        const payload = this.redactor.redactInvocation({
+            layoutVersion: 1,
+            runId: this.identity.runId,
+            startedAt: this.identity.startedAt,
+            request,
+        });
+        await this.writeFile(path, serializeJson(payload));
+    }
+    captureHarnessStep(candidate) {
+        this.assertActive();
+        const declaration = harnessKinds[candidate.kind];
+        if (!declaration) {
+            throw new EvidenceCaptureError('evidence.undeclared-kind', `Harness evidence kind '${candidate.kind}' is not declared`);
+        }
+        if (candidate.mediaType !== declaration.mediaType) {
+            throw new EvidenceCaptureError('evidence.media-type-mismatch', `Harness evidence '${candidate.kind}' has an invalid media type`);
+        }
+        const ordinal = this.stepOrdinal(candidate.stepId);
+        let path;
+        try {
+            path = harnessEvidencePath(this.identity, ordinal, candidate.stepId, candidate.kind, candidate.turn);
+        }
+        catch (error) {
+            throw new EvidenceCaptureError('evidence.invalid-turn', error instanceof Error ? error.message : String(error));
+        }
+        this.capture({ ...candidate, producer: 'harness', contentType: declaration.content, path });
+    }
+    captureDriver(candidate) {
+        this.assertActive();
+        const declaration = this.driverDescriptor.evidenceKinds.find((entry) => entry.kind === candidate.kind);
+        if (!declaration) {
+            throw new EvidenceCaptureError('evidence.undeclared-kind', `Driver '${this.driverDescriptor.id}' does not declare evidence kind '${candidate.kind}'`);
+        }
+        if (declaration.mediaType !== candidate.mediaType) {
+            throw new EvidenceCaptureError('evidence.media-type-mismatch', `Driver evidence '${candidate.kind}' has an invalid media type`);
+        }
+        const fileOrdinal = ++this.driverCandidateOrdinal;
+        const filename = `${String(fileOrdinal).padStart(3, '0')}-${safeSlug(candidate.kind)}.${evidenceExtension(candidate.mediaType)}`;
+        const directory = candidate.stepId
+            ? driverEvidenceDirectory(this.identity, this.driverDescriptor.id, this.stepOrdinal(candidate.stepId), candidate.stepId)
+            : driverEvidenceDirectory(this.identity, this.driverDescriptor.id);
+        const path = resolveInside(directory, filename);
+        this.capture({ ...candidate, producer: this.driverDescriptor.id, contentType: declaration.content, path });
+    }
+    async finalizeStep(stepId, outcome) {
+        this.assertActive();
+        this.stepOrdinal(stepId);
+        if (this.finalizedSteps.has(stepId))
+            throw new Error(`Evidence for step '${stepId}' has already been finalized`);
+        this.finalizedSteps.add(stepId);
+        const candidates = this.pending.filter((candidate) => candidate.stepId === stepId);
+        return this.finalizeCandidates(candidates, outcome);
+    }
+    async finalizeScenario(outcome) {
+        this.assertActive();
+        return this.finalizeCandidates([...this.pending], outcome);
+    }
+    recordCaptureFailure(artifact, error) {
+        this.assertActive();
+        this.evidencePartial = true;
+        const diagnostic = this.writeDiagnostic('evidence.capture-failed', artifact, error);
+        this.recordPersistenceDiagnostic(diagnostic);
+        return diagnostic;
+    }
+    async finalizeCandidates(candidates, outcome) {
+        const newReferences = [];
+        const diagnostics = [];
+        for (const candidate of candidates) {
+            try {
+                if (!retainsEvidence(this.policy, outcome, candidate.contentType))
+                    continue;
+                await ensurePrivateDirectory(this.identity.runDirectory, dirname(candidate.path));
+                await this.writeFile(candidate.path, candidate.bytes);
+                const reference = {
+                    kind: candidate.kind,
+                    mediaType: candidate.mediaType,
+                    path: toInvocationRelative(this.invocationRoot, candidate.path),
+                    producer: candidate.producer,
+                    ...(candidate.stepId === undefined ? {} : { stepId: candidate.stepId }),
+                };
+                this.references.push(reference);
+                newReferences.push({ ...reference });
+            }
+            catch (error) {
+                this.evidencePartial = true;
+                const diagnostic = this.writeDiagnostic('evidence.write-failed', candidate.kind, error);
+                this.recordPersistenceDiagnostic(diagnostic);
+                diagnostics.push(diagnostic);
+            }
+            finally {
+                this.release(candidate);
+            }
+        }
+        this.removeCandidates(candidates);
+        return { references: newReferences, diagnostics };
+    }
+    async replaceCheckpoint(state) {
+        this.assertActive();
+        const path = resolveInside(this.identity.runDirectory, 'checkpoint.json');
+        try {
+            const payload = this.redactor.redactCheckpoint({
+                layoutVersion: 1,
+                runId: this.identity.runId,
+                updatedAt: this.now().toISOString(),
+                state: 'partial',
+                completedSteps: state.completedSteps,
+                evidenceReferences: this.references,
+                diagnostics: mergeDiagnostics(state.diagnostics ?? [], this.persistenceDiagnostics),
+            });
+            await this.writeFile(path, serializeJson(payload));
+            return undefined;
+        }
+        catch (error) {
+            const diagnostic = this.writeDiagnostic('checkpoint.write-failed', 'checkpoint', error);
+            this.recordPersistenceDiagnostic(diagnostic);
+            return diagnostic;
+        }
+    }
+    async writeResult(prepared) {
+        this.assertActive();
+        const absolutePath = resolveInside(this.identity.runDirectory, 'result.json');
+        await this.writeFile(absolutePath, prepared.bytes);
+        this.lifecycle = 'terminal';
+        return {
+            result: prepared.result,
+            bytes: prepared.bytes,
+            path: toInvocationRelative(this.invocationRoot, absolutePath),
+        };
+    }
+    prepareResult(candidate) {
+        this.assertActive();
+        if (this.pending.length > 0)
+            throw new Error('Cannot commit a result while evidence candidates are pending');
+        if (candidate.runId !== this.identity.runId || candidate.startedAt !== this.identity.startedAt) {
+            throw new Error('Execution result identity does not match the evidence store');
+        }
+        if (candidate.scenarioId !== this.scenarioId) {
+            throw new Error('Execution result scenario does not match the evidence store');
+        }
+        const result = this.redactor.redactExecutionResult({
+            ...candidate,
+            evidence: { state: this.state, references: [...this.committedReferences] },
+            diagnostics: mergeDiagnostics(candidate.diagnostics, this.persistenceDiagnostics),
+        });
+        return { result, bytes: serializeJson(result) };
+    }
+    sanitizeDiagnosticText(value) {
+        return this.redactor.redactDiagnosticText(value);
+    }
+    dispose() {
+        for (const candidate of this.pending)
+            this.release(candidate);
+        this.pending.length = 0;
+        this.lifecycle = 'terminal';
+    }
+    capture(input) {
+        if (input.stepId !== undefined && this.finalizedSteps.has(input.stepId)) {
+            throw new EvidenceCaptureError('evidence.step-finalized', `Evidence for step '${input.stepId}' is already finalized`);
+        }
+        if (this.allocatedPaths.has(input.path)) {
+            throw new EvidenceCaptureError('evidence.duplicate-destination', 'Evidence destination is already allocated');
+        }
+        const inputBytes = candidateByteLength(input.content);
+        this.assertCandidateSize(inputBytes);
+        const raw = ownBytes(input.content);
+        const bytes = input.contentType === 'text' ? this.redactTextBytes(raw, input.mediaType) : raw;
+        this.assertCandidateSize(bytes.byteLength);
+        if (this.bufferedBytes + bytes.byteLength > EVIDENCE_CAPTURE_LIMITS.maxInvocationBytes) {
+            throw new EvidenceCaptureError('evidence.invocation-buffer-too-large', `Accepted evidence buffers must not exceed ${EVIDENCE_CAPTURE_LIMITS.maxInvocationBytes} bytes per invocation`);
+        }
+        this.pending.push({
+            stepId: input.stepId,
+            kind: input.kind,
+            mediaType: input.mediaType,
+            producer: input.producer,
+            contentType: input.contentType,
+            path: input.path,
+            bytes,
+        });
+        this.allocatedPaths.add(input.path);
+        this.bufferedBytes += bytes.byteLength;
+    }
+    redactTextBytes(raw, mediaType) {
+        if (this.policy.redaction === 'off')
+            return raw;
+        let value;
+        try {
+            value = new TextDecoder('utf-8', { fatal: true }).decode(raw);
+        }
+        catch {
+            throw new EvidenceCaptureError('evidence.invalid-text', 'Text evidence must contain valid UTF-8');
+        }
+        try {
+            const format = structuredFormat(mediaType);
+            if (format === 'json') {
+                const parsed = JSON.parse(value);
+                assertJsonValue(parsed);
+                return Buffer.from(serializeJson(this.redactor.redactContent(parsed)), 'utf8');
+            }
+            if (format === 'yaml') {
+                const document = parseDocument(value, { uniqueKeys: true });
+                if (document.errors.length > 0)
+                    throw document.errors[0];
+                const parsed = document.toJS({ maxAliasCount: 100 });
+                assertJsonValue(parsed);
+                const redacted = this.redactor.redactContent(parsed);
+                return Buffer.from(stringifyYaml(redacted, { sortMapEntries: true }), 'utf8');
+            }
+            return Buffer.from(this.redactor.redactText(value), 'utf8');
+        }
+        catch (error) {
+            if (error instanceof EvidenceCaptureError)
+                throw error;
+            throw new EvidenceCaptureError('evidence.invalid-structured-content', `Structured ${mediaType} evidence could not be safely redacted`);
+        }
+    }
+    assertCandidateSize(bytes) {
+        if (bytes > EVIDENCE_CAPTURE_LIMITS.maxCandidateBytes) {
+            throw new EvidenceCaptureError('evidence.candidate-too-large', `An evidence candidate must not exceed ${EVIDENCE_CAPTURE_LIMITS.maxCandidateBytes} bytes`);
+        }
+    }
+    stepOrdinal(stepId) {
+        const ordinal = this.stepOrdinals.get(stepId);
+        if (ordinal === undefined) {
+            throw new EvidenceCaptureError('evidence.unknown-step', `Evidence references unknown step '${stepId}'`);
+        }
+        return ordinal;
+    }
+    release(candidate) {
+        this.bufferedBytes -= candidate.bytes.byteLength;
+        candidate.bytes = Buffer.alloc(0);
+    }
+    removeCandidates(candidates) {
+        const removed = new Set(candidates);
+        for (let index = this.pending.length - 1; index >= 0; index--) {
+            if (removed.has(this.pending[index]))
+                this.pending.splice(index, 1);
+        }
+    }
+    assertActive() {
+        if (this.lifecycle !== 'active')
+            throw new Error('Evidence store is not accepting evidence');
+    }
+    writeDiagnostic(code, artifact, error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        const durability = error instanceof AtomicWriteError && error.durability === 'uncertain'
+            ? ' The destination was renamed, but durability was not confirmed; no reference was published.'
+            : '';
+        return {
+            code,
+            path: '/evidence',
+            message: this.redactor.redactDiagnosticText(`Could not commit ${artifact} evidence: ${detail}.${durability}`.trim()),
+        };
+    }
+    recordPersistenceDiagnostic(diagnostic) {
+        this.persistenceDiagnostics.push(diagnostic);
+    }
+}
+export class EvidenceCaptureError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'EvidenceCaptureError';
+    }
+}
+function ownBytes(content) {
+    return typeof content === 'string' ? Buffer.from(content, 'utf8') : Buffer.from(content);
+}
+function candidateByteLength(content) {
+    return typeof content === 'string' ? Buffer.byteLength(content, 'utf8') : content.byteLength;
+}
+function structuredFormat(mediaType) {
+    const normalized = mediaType.split(';', 1)[0].trim().toLowerCase();
+    if (normalized === 'application/json' || normalized.endsWith('+json'))
+        return 'json';
+    if (['application/yaml', 'application/x-yaml', 'text/yaml', 'text/x-yaml'].includes(normalized))
+        return 'yaml';
+    return undefined;
+}
+function assertJsonValue(value) {
+    try {
+        serializeJson(value);
+    }
+    catch {
+        throw new EvidenceCaptureError('evidence.invalid-structured-content', 'Structured evidence must contain only JSON-compatible values');
+    }
+}
+function mergeDiagnostics(left, right) {
+    const merged = [];
+    const seen = new Set();
+    for (const diagnostic of [...left, ...right]) {
+        const key = `${diagnostic.code}\0${diagnostic.path}\0${diagnostic.message}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        merged.push({ ...diagnostic });
+    }
+    return merged;
+}
+//# sourceMappingURL=store.js.map

package/dist/evidence/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/evidence/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAUnC,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EACN,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,QAAQ,EACR,oBAAoB,GAEpB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,eAAe,EAA0C,MAAM,gBAAgB,CAAA;AAExF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,iBAAiB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IACnC,kBAAkB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;CACpC,CAAC,CAAA;AA6DF,MAAM,YAAY,GAAG;IACpB,UAAU,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3D,eAAe,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE;CAC1D,CAAA;AAEV,MAAM,OAAO,aAAa;IACR,cAAc,CAAQ;IACtB,QAAQ,CAAa;IACrB,MAAM,CAAkB;IACxB,gBAAgB,CAAoB;IACpC,YAAY,CAA6B;IACzC,QAAQ,CAAU;IAClB,SAAS,CAAc;IACvB,GAAG,CAAY;IACf,OAAO,GAAwB,EAAE,CAAA;IACjC,UAAU,GAAwB,EAAE,CAAA;IACpC,cAAc,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,cAAc,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,sBAAsB,GAAiB,EAAE,CAAA;IAClD,SAAS,GAAwC,WAAW,CAAA;IAC5D,aAAa,GAAG,CAAC,CAAA;IACjB,eAAe,GAAG,KAAK,CAAA;IACvB,sBAAsB,GAAG,CAAC,CAAA;IAC1B,UAAU,CAAoB;IAEtC,YAAY,EACX,cAAc,EACd,QAAQ,EACR,MAAM,EACN,OAAO,EACP,gBAAgB,EAChB,YAAY,EACZ,SAAS,GAAG,eAAe,EAC3B,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,GACA;QACtB,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QACvG,IAAI,CAAC,cAAc,GAAG,cAAc,CAAA;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAA;QAC3B,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAA;QACzD,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACxE,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAA;QACtE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,oBAAoB,CAAC,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;IAC5D,CAAC;IAED,IAAI,WAAW;QACd,OAAO,IAAI,CAAC,QAAQ,CAAA;IACrB,CAAC;IAED,IAAI,KAAK;QACR,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IACrD,CAAC;IAED,IAAI,mBAAmB;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,mBAAmB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAA;IAC1B,CAAC;IAED,WAAW;QACV,IAAI,CAAC,eAAe,GAAG,IAAI,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAqB;QAC1C,IAAI,IAAI,CAAC,SAAS,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACnG,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACpE,IACC,cAAc,CAAC,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,IAAI;YAChD,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,EAClF,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAA;QACrC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;QACzB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAA;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC9C,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;YAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,OAAO;SACP,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;IACnD,CAAC;IAED,kBAAkB,CAAC,SAAmC;QACrD,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,oBAAoB,CAC7B,0BAA0B,EAC1B,0BAA0B,SAAS,CAAC,IAAI,mBAAmB,CAC3D,CAAA;QACF,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,WAAW,CAAC,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,oBAAoB,CAC7B,8BAA8B,EAC9B,qBAAqB,SAAS,CAAC,IAAI,6BAA6B,CAChE,CAAA;QACF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACJ,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QACrG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,oBAAoB,CAC7B,uBAAuB,EACvB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD,CAAA;QACF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,aAAa,CAAC,SAAkC;QAC/C,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAA;QACtG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,oBAAoB,CAC7B,0BAA0B,EAC1B,WAAW,IAAI,CAAC,gBAAgB,CAAC,EAAE,qCAAqC,SAAS,CAAC,IAAI,GAAG,CACzF,CAAA;QACF,CAAC;QACD,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,oBAAoB,CAC7B,8BAA8B,EAC9B,oBAAoB,SAAS,CAAC,IAAI,6BAA6B,CAC/D,CAAA;QACF,CAAC;QACD,MAAM,WAAW,GAAG,EAAE,IAAI,CAAC,sBAAsB,CAAA;QACjD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAA;QAChI,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM;YACjC,CAAC,CAAC,uBAAuB,CACvB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,CAAC,EAAE,EACxB,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,EAClC,SAAS,CAAC,MAAM,CAChB;YACF,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;QACnE,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QAC/C,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3G,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,OAAoB;QACtD,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACxB,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,8BAA8B,CAAC,CAAA;QAChH,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QAClF,OAAO,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAoB;QAC1C,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;IAC3D,CAAC;IAED,oBAAoB,CAAC,QAAgB,EAAE,KAAc;QACpD,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAA;QAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,yBAAyB,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;QACnF,IAAI,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAA;QAC5C,OAAO,UAAU,CAAA;IAClB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC/B,UAAwC,EACxC,OAAoB;QAEpB,MAAM,aAAa,GAAwB,EAAE,CAAA;QAC7C,MAAM,WAAW,GAAiB,EAAE,CAAA;QAEpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC;gBACJ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC;oBAAE,SAAQ;gBAC3E,MAAM,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;gBACjF,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;gBACrD,MAAM,SAAS,GAAsB;oBACpC,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC;oBAC/D,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;iBACvE,CAAA;gBACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBAC/B,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAA;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAA;gBAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,uBAAuB,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gBACvF,IAAI,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAA;gBAC5C,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC7B,CAAC;oBAAS,CAAC;gBACV,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YACxB,CAAC;QACF,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;QACjC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAsB;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAA;QACzE,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAC9C,aAAa,EAAE,CAAC;gBAChB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;gBAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;gBACnC,KAAK,EAAE,SAAS;gBAChB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,kBAAkB,EAAE,IAAI,CAAC,UAAU;gBACnC,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,CAAC,sBAAsB,CAAC;aACnF,CAAC,CAAA;YACF,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;YAClD,OAAO,SAAS,CAAA;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,yBAAyB,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;YACvF,IAAI,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAA;YAC5C,OAAO,UAAU,CAAA;QAClB,CAAC;IACF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAgC;QACjD,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;QAC7E,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAA;QAC3B,OAAO;YACN,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC;SAC7D,CAAA;IACF,CAAC;IAED,aAAa,CAAC,SAA4B;QACzC,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;QAC5G,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAC/E,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAClD,GAAG,SAAS;YACZ,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE;YAC1E,WAAW,EAAE,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,sBAAsB,CAAC;SACjF,CAAC,CAAA;QACF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAA;IAChD,CAAC;IAED,sBAAsB,CAAC,KAAa;QACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC;IAED,OAAO;QACN,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAA;QACvB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAA;IAC5B,CAAC;IAEO,OAAO,CAAC,KAQf;QACA,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,oBAAoB,CAC7B,yBAAyB,EACzB,sBAAsB,KAAK,CAAC,MAAM,wBAAwB,CAC1D,CAAA;QACF,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,oBAAoB,CAC7B,gCAAgC,EAChC,2CAA2C,CAC3C,CAAA;QACF,CAAC;QACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACrD,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;QAC7F,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAC1C,IAAI,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,UAAU,GAAG,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;YACxF,MAAM,IAAI,oBAAoB,CAC7B,sCAAsC,EACtC,6CAA6C,uBAAuB,CAAC,kBAAkB,uBAAuB,CAC9G,CAAA;QACF,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK;SACL,CAAC,CAAA;QACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,UAAU,CAAA;IACvC,CAAC;IAEO,eAAe,CAAC,GAAW,EAAE,SAAiB;QACrD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK;YAAE,OAAO,GAAG,CAAA;QAC/C,IAAI,KAAa,CAAA;QACjB,IAAI,CAAC;YACJ,KAAK,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC9D,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,oBAAoB,CAAC,uBAAuB,EAAE,wCAAwC,CAAC,CAAA;QAClG,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAC1C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAA;gBAC3C,eAAe,CAAC,MAAM,CAAC,CAAA;gBACvB,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YAC/E,CAAC;YACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC3D,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAY,CAAA;gBAC/D,eAAe,CAAC,MAAM,CAAC,CAAA;gBACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;gBACpD,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;YAC9E,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAA;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,oBAAoB;gBAAE,MAAM,KAAK,CAAA;YACtD,MAAM,IAAI,oBAAoB,CAC7B,qCAAqC,EACrC,cAAc,SAAS,wCAAwC,CAC/D,CAAA;QACF,CAAC;IACF,CAAC;IAEO,mBAAmB,CAAC,KAAa;QACxC,IAAI,KAAK,GAAG,uBAAuB,CAAC,iBAAiB,EAAE,CAAC;YACvD,MAAM,IAAI,oBAAoB,CAC7B,8BAA8B,EAC9B,yCAAyC,uBAAuB,CAAC,iBAAiB,QAAQ,CAC1F,CAAA;QACF,CAAC;IACF,CAAC;IAEO,WAAW,CAAC,MAAc;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC7C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,oBAAoB,CAAC,uBAAuB,EAAE,qCAAqC,MAAM,GAAG,CAAC,CAAA;QACxG,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC;IAEO,OAAO,CAAC,SAA4B;QAC3C,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC,KAAK,CAAC,UAAU,CAAA;QAChD,SAAS,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC;IAEO,gBAAgB,CAAC,UAAwC;QAChE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;QACnC,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACpE,CAAC;IACF,CAAC;IAEO,YAAY;QACnB,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7F,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAc;QACrE,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,UAAU,GACf,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW;YACpE,CAAC,CAAC,6FAA6F;YAC/F,CAAC,CAAC,EAAE,CAAA;QACN,OAAO;YACN,IAAI;YACJ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAC1C,oBAAoB,QAAQ,cAAc,MAAM,IAAI,UAAU,EAAE,CAAC,IAAI,EAAE,CACvE;SACD,CAAA;IACF,CAAC;IAEO,2BAA2B,CAAC,UAAsB;QACzD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC7C,CAAC;CACD;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAEpC;IADV,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;IACnC,CAAC;CACD;AAED,SAAS,QAAQ,CAAC,OAA4B;IAC7C,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACzF,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA4B;IACxD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAA;AAC7F,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IAC1C,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAClE,IAAI,UAAU,KAAK,kBAAkB,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAA;IACpF,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAA;IAC9G,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,IAAI,CAAC;QACJ,aAAa,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,oBAAoB,CAC7B,qCAAqC,EACrC,8DAA8D,CAC9D,CAAA;IACF,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA2B,EAAE,KAA4B;IAClF,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,UAAU,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAA;QAC3E,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC"}

package/dist/evidence/terminal-finalizer.d.ts

@@ -0,0 +1,19 @@
+import type { ExecutionResultV1 } from '../contracts/types.js';
+import type { EvidenceStore } from './store.js';
+export type TerminalResult = Readonly<{
+    committed: true;
+    result: ExecutionResultV1;
+    bytes: string;
+    path: string;
+}> | Readonly<{
+    committed: false;
+    result: ExecutionResultV1;
+    bytes: string;
+}>;
+export declare class TerminalFinalizer {
+    private readonly store;
+    constructor(store: EvidenceStore);
+    finalize(candidate: ExecutionResultV1): Promise<TerminalResult>;
+    private failureDiagnostic;
+}
+//# sourceMappingURL=terminal-finalizer.d.ts.map

package/dist/evidence/terminal-finalizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-finalizer.d.ts","sourceRoot":"","sources":["../../src/evidence/terminal-finalizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAI1E,OAAO,KAAK,EAAmB,aAAa,EAA0B,MAAM,YAAY,CAAA;AAExF,MAAM,MAAM,cAAc,GACvB,QAAQ,CAAC;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACrF,QAAQ,CAAC;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAE3E,qBAAa,iBAAiB;IACjB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,aAAa;IAE3C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC;IAerE,OAAO,CAAC,iBAAiB;CAYzB"}

package/dist/evidence/terminal-finalizer.js

@@ -0,0 +1,56 @@
+import { serializeJson } from '../contracts/serialize.js';
+import { validateRunResult } from '../contracts/validator.js';
+import { AtomicWriteError } from './atomic-file.js';
+export class TerminalFinalizer {
+    store;
+    constructor(store) {
+        this.store = store;
+    }
+    async finalize(candidate) {
+        assertExecutionResult(candidate);
+        const prepared = this.store.prepareResult(candidate);
+        assertExecutionResult(prepared.result);
+        try {
+            const committed = await this.store.writeResult(prepared);
+            return { committed: true, ...committed, result: parseExecutionResult(committed.bytes) };
+        }
+        catch (error) {
+            const failure = resultWriteFailure(prepared, this.failureDiagnostic(error));
+            assertExecutionResult(failure);
+            const bytes = serializeJson(failure);
+            return { committed: false, result: parseExecutionResult(bytes), bytes };
+        }
+    }
+    failureDiagnostic(error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        const durability = error instanceof AtomicWriteError && error.durability === 'uncertain'
+            ? ' The destination was renamed, but durability was not confirmed; no committed terminal result was accepted.'
+            : '';
+        return {
+            code: 'result.write-failed',
+            path: '',
+            message: this.store.sanitizeDiagnosticText(`Could not commit result.json: ${detail}.${durability}`.trim()),
+        };
+    }
+}
+function parseExecutionResult(bytes) {
+    const result = JSON.parse(bytes);
+    assertExecutionResult(result);
+    return result;
+}
+function resultWriteFailure(prepared, diagnostic) {
+    return {
+        ...prepared.result,
+        status: 'failed',
+        category: 'infra',
+        reason: 'result-write-failed',
+        diagnostics: [...prepared.result.diagnostics, diagnostic],
+    };
+}
+function assertExecutionResult(result) {
+    const validation = validateRunResult(result);
+    if (validation.ok === false) {
+        throw new TypeError(`Invalid execution result: ${validation.diagnostics.map((item) => item.message).join('; ')}`);
+    }
+}
+//# sourceMappingURL=terminal-finalizer.js.map

package/dist/evidence/terminal-finalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-finalizer.js","sourceRoot":"","sources":["../../src/evidence/terminal-finalizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAOnD,MAAM,OAAO,iBAAiB;IACA;IAA7B,YAA6B,KAAoB;QAApB,UAAK,GAAL,KAAK,CAAe;IAAG,CAAC;IAErD,KAAK,CAAC,QAAQ,CAAC,SAA4B;QAC1C,qBAAqB,CAAC,SAAS,CAAC,CAAA;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;QACpD,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACtC,IAAI,CAAC;YACJ,MAAM,SAAS,GAAoB,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;YACzE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAA;YAC3E,qBAAqB,CAAC,OAAO,CAAC,CAAA;YAC9B,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;YACpC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAA;QACxE,CAAC;IACF,CAAC;IAEO,iBAAiB,CAAC,KAAc;QACvC,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,UAAU,GACf,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW;YACpE,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,EAAE,CAAA;QACN,OAAO;YACN,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,iCAAiC,MAAM,IAAI,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC;SAC1G,CAAA;IACF,CAAC;CACD;AAED,SAAS,oBAAoB,CAAC,KAAa;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAsB,CAAA;IACrD,qBAAqB,CAAC,MAAM,CAAC,CAAA;IAC7B,OAAO,MAAM,CAAA;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgC,EAAE,UAAsB;IACnF,OAAO;QACN,GAAG,QAAQ,CAAC,MAAM;QAClB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,qBAAqB;QAC7B,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC;KACzD,CAAA;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyB;IACvD,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAC5C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAClB,6BAA6B,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAA;IACF,CAAC;AACF,CAAC"}

package/dist/index.d.ts

@@ -1,2 +1,9 @@
-export * from './core.js';
+import type { CheckmateOptions } from './api/index.js';
+import type { DescribeResultV1, ExecutionResultV1, InvalidInvocationResultV1, ValidationResultV1 } from './contracts/types.js';
+export { CheckmateOperationalError } from './api/index.js';
+export type { CheckmateOptions } from './api/index.js';
+export type * from './contracts/types.js';
+export declare function run(request: unknown, options?: CheckmateOptions): Promise<ExecutionResultV1 | InvalidInvocationResultV1>;
+export declare function validate(request: unknown, options?: Omit<CheckmateOptions, 'signal'>): Promise<ValidationResultV1>;
+export declare function describe(options?: Omit<CheckmateOptions, 'signal'>): Promise<DescribeResultV1>;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EACX,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAA;AAC1D,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,mBAAmB,sBAAsB,CAAA;AAEzC,wBAAgB,GAAG,CAClB,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,iBAAiB,GAAG,yBAAyB,CAAC,CAExD;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAElH;AAED,wBAAgB,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAE9F"}

package/dist/index.js

@@ -1,2 +1,12 @@
-export * from './core.js';
+import { run as runInProcess, validate as validateRequest, describe as describeEnvironment } from './api/index.js';
+export { CheckmateOperationalError } from './api/index.js';
+export function run(request, options) {
+    return runInProcess(request, options);
+}
+export function validate(request, options) {
+    return validateRequest(request, options);
+}
+export function describe(options) {
+    return describeEnvironment(options);
+}
 //# sourceMappingURL=index.js.map