@xoxoai/checkmate 0.4.28 → 0.5.0

package/dist/cli/main.js

@@ -0,0 +1,166 @@
+import { resolve } from 'node:path';
+import { readFile } from 'node:fs/promises';
+import { serializeJson } from '../contracts/serialize.js';
+import { normalizeSingleLine } from '../config/ingestion.js';
+import { scrub } from '../redaction/scrub.js';
+import { describeStaticEnvironment, describeError, unexpectedDescribeError, unexpectedValidationError, validateStaticSource, validationError, } from './static-commands.js';
+import { runFromParent } from './run-parent.js';
+const defaultDependencies = {
+    stdout: process.stdout,
+    stderr: process.stderr,
+    stdin: process.stdin,
+    getCwd: () => process.cwd(),
+};
+export async function runCli(argv, dependencies = defaultDependencies) {
+    const [command, ...rest] = argv;
+    if (!command || command === '--help' || command === '-h' || command === 'help') {
+        dependencies.stdout.write(`${buildUsage()}\n`);
+        return command ? 0 : 1;
+    }
+    if (command === '--version' || command === '-v') {
+        dependencies.stdout.write(`${await (dependencies.getVersion ?? packageVersion)()}\n`);
+        return 0;
+    }
+    if (command === 'describe')
+        return runDescribe(rest, dependencies);
+    if (command === 'validate')
+        return runValidate(rest, dependencies);
+    if (command === 'run')
+        return runScenario(rest, dependencies);
+    dependencies.stderr.write(`Unknown command '${stderrField(scrub(command))}'.\n\n${buildUsage()}\n`);
+    return 1;
+}
+async function runScenario(args, dependencies) {
+    const parsed = parseStaticArgs(args, true, 'run');
+    if (parsed.ok === false) {
+        return (dependencies.runCommand ?? runFromParent)({
+            source: { kind: 'value', value: {} },
+            cwd: dependencies.getCwd(),
+            stdout: dependencies.stdout,
+            stderr: dependencies.stderr,
+        }, {
+            ...dependencies.runParentDependencies,
+            prepare: async () => ({ ok: false, status: 'invalid', diagnostics: [parsed.diagnostic] }),
+        });
+    }
+    const source = parsed.positional === '-'
+        ? { kind: 'stdin', stream: dependencies.stdin ?? EMPTY_INPUT }
+        : { kind: 'file', path: resolve(dependencies.getCwd(), parsed.positional) };
+    return (dependencies.runCommand ?? runFromParent)({
+        source,
+        cwd: dependencies.getCwd(),
+        configPath: parsed.configPath,
+        stdout: dependencies.stdout,
+        stderr: dependencies.stderr,
+    }, dependencies.runParentDependencies);
+}
+async function runDescribe(args, dependencies) {
+    const parsed = parseStaticArgs(args, false);
+    if (parsed.ok === false) {
+        return writeStaticResult(describeError(parsed.diagnostic), dependencies);
+    }
+    try {
+        const commands = dependencies.staticCommands ?? defaultStaticCommands;
+        const result = await commands.describe({ cwd: dependencies.getCwd(), configPath: parsed.configPath });
+        return writeStaticResult(result, dependencies);
+    }
+    catch {
+        return writeStaticResult(unexpectedDescribeError(), dependencies);
+    }
+}
+async function runValidate(args, dependencies) {
+    const parsed = parseStaticArgs(args, true, 'validate');
+    if (parsed.ok === false)
+        return writeStaticResult(validationError(parsed.diagnostic), dependencies);
+    try {
+        const commands = dependencies.staticCommands ?? defaultStaticCommands;
+        const source = parsed.positional === '-'
+            ? { kind: 'stdin', stream: dependencies.stdin ?? EMPTY_INPUT }
+            : { kind: 'file', path: resolve(dependencies.getCwd(), parsed.positional) };
+        const result = await commands.validate(source, {
+            cwd: dependencies.getCwd(),
+            configPath: parsed.configPath,
+        });
+        return writeStaticResult(result, dependencies);
+    }
+    catch {
+        return writeStaticResult(unexpectedValidationError(), dependencies);
+    }
+}
+const defaultStaticCommands = {
+    describe: describeStaticEnvironment,
+    validate: validateStaticSource,
+};
+function writeStaticResult(result, dependencies) {
+    dependencies.stdout.write(serializeJson(result));
+    if (result.status !== 'available' && result.status !== 'valid')
+        writeDiagnostics(result.diagnostics, dependencies);
+    if (result.status === 'available' || result.status === 'valid')
+        return 0;
+    return result.status === 'invalid' ? 4 : 3;
+}
+function writeDiagnostics(diagnostics, dependencies) {
+    for (const diagnostic of diagnostics) {
+        dependencies.stderr.write(`${stderrField(diagnostic.code)} ${stderrField(diagnostic.path || '/')}: ${stderrField(scrub(diagnostic.message))}\n`);
+    }
+}
+function parseStaticArgs(args, requiresPositional, command = 'describe') {
+    const positional = [];
+    let configPath;
+    for (let index = 0; index < args.length; index++) {
+        const argument = args[index];
+        if (argument === '--config') {
+            const value = args[++index];
+            if (!value || value.startsWith('--'))
+                return argumentError("'--config' requires a path");
+            if (configPath !== undefined)
+                return argumentError("'--config' may be supplied only once");
+            configPath = value;
+        }
+        else if (argument.startsWith('-') && argument !== '-') {
+            return argumentError(`unknown option '${argument}'`);
+        }
+        else {
+            positional.push(argument);
+        }
+    }
+    if (requiresPositional && positional.length !== 1) {
+        return argumentError(`${command} requires exactly one request JSON file or '-'`);
+    }
+    if (!requiresPositional && positional.length > 0) {
+        return argumentError('describe does not accept a positional argument');
+    }
+    return { ok: true, positional: positional[0], configPath };
+}
+function argumentError(message) {
+    return { ok: false, diagnostic: { code: 'invocation.invalid-arguments', path: '', message } };
+}
+function buildUsage() {
+    return [
+        'Usage: checkmate <command>',
+        '',
+        'Commands:',
+        '  describe          Describe contracts, policies, and registered drivers as JSON',
+        '  validate <file|-> Validate a file or stdin request without starting a driver',
+        '  run <file|->      Execute a file or stdin scenario in an isolated worker',
+        '',
+        'Options:',
+        '  --config <path>   Use an explicit manifest path for describe, validate, or run',
+        '  --version         Print the installed Checkmate version',
+    ].join('\n');
+}
+function stderrField(value) {
+    return normalizeSingleLine(value);
+}
+const EMPTY_INPUT = {
+    [Symbol.asyncIterator]() {
+        return { next: async () => ({ done: true, value: undefined }) };
+    },
+};
+async function packageVersion() {
+    const packageJson = JSON.parse(await readFile(new URL('../../package.json', import.meta.url), 'utf8'));
+    if (typeof packageJson.version !== 'string')
+        throw new Error('Installed package version is unavailable');
+    return packageJson.version;
+}
+//# sourceMappingURL=main.js.map

package/dist/cli/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAC7C,OAAO,EACN,yBAAyB,EACzB,aAAa,EACb,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,GACf,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,aAAa,EAA8B,MAAM,iBAAiB,CAAA;AAgB3E,MAAM,mBAAmB,GAAoB;IAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,KAAK,EAAE,OAAO,CAAC,KAAK;IACpB,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;CAC3B,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,eAAgC,mBAAmB;IAC/F,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IAE/B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAChF,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,EAAE,IAAI,CAAC,CAAA;QAC9C,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACjD,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,IAAI,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;QACrF,OAAO,CAAC,CAAA;IACT,CAAC;IAED,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAClE,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAClE,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAE7D,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,UAAU,EAAE,IAAI,CAAC,CAAA;IACnG,OAAO,CAAC,CAAA;AACT,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAc,EAAE,YAA6B;IACvE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IACjD,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,YAAY,CAAC,UAAU,IAAI,aAAa,CAAC,CAChD;YACC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACpC,GAAG,EAAE,YAAY,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,MAAM,EAAE,YAAY,CAAC,MAAM;SAC3B,EACD;YACC,GAAG,YAAY,CAAC,qBAAqB;YACrC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;SACzF,CACD,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GACX,MAAM,CAAC,UAAU,KAAK,GAAG;QACxB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,IAAI,WAAW,EAAE;QACvE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,UAAW,CAAC,EAAE,CAAA;IACvF,OAAO,CAAC,YAAY,CAAC,UAAU,IAAI,aAAa,CAAC,CAChD;QACC,MAAM;QACN,GAAG,EAAE,YAAY,CAAC,MAAM,EAAE;QAC1B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,MAAM,EAAE,YAAY,CAAC,MAAM;KAC3B,EACD,YAAY,CAAC,qBAAqB,CAClC,CAAA;AACF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAc,EAAE,YAA6B;IACvE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC3C,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,iBAAiB,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAA;IACzE,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,IAAI,qBAAqB,CAAA;QACrE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;QACrG,OAAO,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,iBAAiB,CAAC,uBAAuB,EAAE,EAAE,YAAY,CAAC,CAAA;IAClE,CAAC;AACF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAc,EAAE,YAA6B;IACvE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IACtD,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAA;IAEnG,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,IAAI,qBAAqB,CAAA;QACrE,MAAM,MAAM,GACX,MAAM,CAAC,UAAU,KAAK,GAAG;YACxB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,IAAI,WAAW,EAAE;YACvE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,UAAW,CAAC,EAAE,CAAA;QACvF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC9C,GAAG,EAAE,YAAY,CAAC,MAAM,EAAE;YAC1B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC,CAAA;QACF,OAAO,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,iBAAiB,CAAC,yBAAyB,EAAE,EAAE,YAAY,CAAC,CAAA;IACpE,CAAC;AACF,CAAC;AAED,MAAM,qBAAqB,GAAG;IAC7B,QAAQ,EAAE,yBAAyB;IACnC,QAAQ,EAAE,oBAAoB;CAC9B,CAAA;AAED,SAAS,iBAAiB,CAAC,MAA6C,EAAE,YAA6B;IACtG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAClH,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,CAAC,CAAA;IACxE,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAkC,EAAE,YAA6B;IAC1F,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACtC,YAAY,CAAC,MAAM,CAAC,KAAK,CACxB,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CACrH,CAAA;IACF,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CACvB,IAAc,EACd,kBAA2B,EAC3B,OAAO,GAAG,UAAU;IAEpB,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,IAAI,UAA8B,CAAA;IAElC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5B,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;YAC3B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,aAAa,CAAC,4BAA4B,CAAC,CAAA;YACxF,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,aAAa,CAAC,sCAAsC,CAAC,CAAA;YAC1F,UAAU,GAAG,KAAK,CAAA;QACnB,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACzD,OAAO,aAAa,CAAC,mBAAmB,QAAQ,GAAG,CAAC,CAAA;QACrD,CAAC;aAAM,CAAC;YACP,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC1B,CAAC;IACF,CAAC;IAED,IAAI,kBAAkB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,aAAa,CAAC,GAAG,OAAO,gDAAgD,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,CAAC,kBAAkB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,aAAa,CAAC,gDAAgD,CAAC,CAAA;IACvE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAA;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAA;AAC9F,CAAC;AAED,SAAS,UAAU;IAClB,OAAO;QACN,4BAA4B;QAC5B,EAAE;QACF,WAAW;QACX,kFAAkF;QAClF,gFAAgF;QAChF,4EAA4E;QAC5E,EAAE;QACF,UAAU;QACV,kFAAkF;QAClF,2DAA2D;KAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IACjC,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,WAAW,GAA8B;IAC9C,CAAC,MAAM,CAAC,aAAa,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IAChE,CAAC;CACD,CAAA;AAED,KAAK,UAAU,cAAc;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAEpG,CAAA;IACD,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IACxG,OAAO,WAAW,CAAC,OAAO,CAAA;AAC3B,CAAC"}

package/dist/cli/protocol.d.ts

@@ -0,0 +1,57 @@
+import type { PreparedRun } from '../api/prepare-run.js';
+import type { Diagnostic } from '../contracts/types.js';
+import type { RunIdentity } from '../evidence/layout.js';
+export declare const MAX_IPC_FRAME_BYTES: number;
+export type ParentMessage = {
+    type: 'start';
+    identity: RunIdentity;
+    prepared: PreparedRun;
+} | {
+    type: 'abort';
+    signal: 'SIGINT' | 'SIGTERM';
+};
+export type TerminalDigest = {
+    byteLength: number;
+    sha256: string;
+};
+export type WorkerMessage = {
+    type: 'terminal-inline';
+    runId: string;
+    committed: true;
+    resultJson: string;
+    digest: TerminalDigest;
+} | {
+    type: 'terminal-file';
+    runId: string;
+    committed: true;
+    digest: TerminalDigest;
+} | {
+    type: 'terminal-inline';
+    runId: string;
+    committed: false;
+    resultJson: string;
+} | {
+    type: 'diagnostic';
+    runId: string;
+    diagnostic: Diagnostic;
+} | {
+    type: 'cleanup-started';
+    runId: string;
+} | {
+    type: 'fatal';
+    runId: string;
+    diagnostic: Diagnostic;
+};
+export declare class IpcProtocolError extends Error {
+    readonly code: 'ipc-frame-too-large' | 'ipc-invalid-frame';
+    constructor(code: 'ipc-frame-too-large' | 'ipc-invalid-frame', message: string);
+}
+export declare function ipcFrameBytes(message: unknown): number;
+export declare function assertIpcFrameSize(message: unknown): void;
+export declare function sendIpcFrame(send: (message: ParentMessage | WorkerMessage) => boolean, message: ParentMessage | WorkerMessage): boolean;
+export declare function terminalDigest(bytes: string): TerminalDigest;
+export declare function digestMatches(bytes: string, digest: TerminalDigest): boolean;
+export declare function parseParentMessage(message: unknown): ParentMessage;
+export declare function parseWorkerMessage(message: unknown): WorkerMessage;
+export declare function diagnosticFrame(runId: string, diagnostic: Diagnostic): WorkerMessage;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/cli/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/cli/protocol.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAEvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAExD,eAAO,MAAM,mBAAmB,QAAc,CAAA;AAE9C,MAAM,MAAM,aAAa,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,CAAA;AAElH,MAAM,MAAM,cAAc,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEnE,MAAM,MAAM,aAAa,GACtB;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,IAAI,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,cAAc,CAAA;CACrB,GACD;IACA,IAAI,EAAE,eAAe,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,IAAI,CAAA;IACf,MAAM,EAAE,cAAc,CAAA;CACrB,GACD;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,KAAK,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;CACjB,GACD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAA;AAE3D,qBAAa,gBAAiB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,mBAAmB;gBAAjD,IAAI,EAAE,qBAAqB,GAAG,mBAAmB,EAC1D,OAAO,EAAE,MAAM;CAKhB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEtD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAIzD;AAED,wBAAgB,YAAY,CAC3B,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,KAAK,OAAO,EACzD,OAAO,EAAE,aAAa,GAAG,aAAa,GACpC,OAAO,CAGT;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAK5D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAG5E;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAUlE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAgBlE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,aAAa,CAgBpF"}

package/dist/cli/protocol.js

@@ -0,0 +1,116 @@
+import { createHash } from 'node:crypto';
+import { Buffer } from 'node:buffer';
+import { serializeJson } from '../contracts/serialize.js';
+export const MAX_IPC_FRAME_BYTES = 1024 * 1024;
+export class IpcProtocolError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'IpcProtocolError';
+    }
+}
+export function ipcFrameBytes(message) {
+    return Buffer.byteLength(serializeJson(message), 'utf8');
+}
+export function assertIpcFrameSize(message) {
+    if (ipcFrameBytes(message) > MAX_IPC_FRAME_BYTES) {
+        throw new IpcProtocolError('ipc-frame-too-large', `IPC frame exceeds ${MAX_IPC_FRAME_BYTES} bytes`);
+    }
+}
+export function sendIpcFrame(send, message) {
+    assertIpcFrameSize(message);
+    return send(message);
+}
+export function terminalDigest(bytes) {
+    return {
+        byteLength: Buffer.byteLength(bytes, 'utf8'),
+        sha256: createHash('sha256').update(bytes, 'utf8').digest('hex'),
+    };
+}
+export function digestMatches(bytes, digest) {
+    const actual = terminalDigest(bytes);
+    return actual.byteLength === digest.byteLength && actual.sha256 === digest.sha256;
+}
+export function parseParentMessage(message) {
+    assertIpcFrameSize(message);
+    if (!isRecord(message))
+        throw invalidFrame();
+    if (message.type === 'abort' && (message.signal === 'SIGINT' || message.signal === 'SIGTERM')) {
+        return message;
+    }
+    if (message.type === 'start' && isRunIdentity(message.identity) && isRecord(message.prepared)) {
+        return message;
+    }
+    throw invalidFrame();
+}
+export function parseWorkerMessage(message) {
+    assertIpcFrameSize(message);
+    if (!isRecord(message) || !isRunId(message.runId) || typeof message.type !== 'string')
+        throw invalidFrame();
+    if (message.type === 'cleanup-started')
+        return message;
+    if ((message.type === 'diagnostic' || message.type === 'fatal') && isDiagnostic(message.diagnostic)) {
+        return message;
+    }
+    if (message.type === 'terminal-file' && message.committed === true && isDigest(message.digest)) {
+        return message;
+    }
+    if (message.type === 'terminal-inline' && typeof message.resultJson === 'string') {
+        if (message.committed === false)
+            return message;
+        if (message.committed === true && isDigest(message.digest))
+            return message;
+    }
+    throw invalidFrame();
+}
+export function diagnosticFrame(runId, diagnostic) {
+    const frame = { type: 'diagnostic', runId, diagnostic };
+    try {
+        assertIpcFrameSize(frame);
+        return frame;
+    }
+    catch {
+        return {
+            type: 'diagnostic',
+            runId,
+            diagnostic: {
+                code: 'diagnostic.frame-too-large',
+                path: '',
+                message: 'A worker diagnostic was omitted because its IPC frame exceeded the limit',
+            },
+        };
+    }
+}
+function isRunIdentity(value) {
+    return (isRecord(value) &&
+        isRunId(value.runId) &&
+        typeof value.startedAt === 'string' &&
+        typeof value.runDirectory === 'string' &&
+        typeof value.relativeRunDirectory === 'string');
+}
+function isDigest(value) {
+    return (isRecord(value) &&
+        Number.isSafeInteger(value.byteLength) &&
+        value.byteLength >= 0 &&
+        typeof value.sha256 === 'string' &&
+        /^[0-9a-f]{64}$/.test(value.sha256));
+}
+function isDiagnostic(value) {
+    return (isRecord(value) &&
+        typeof value.code === 'string' &&
+        value.code.length > 0 &&
+        typeof value.path === 'string' &&
+        typeof value.message === 'string' &&
+        value.message.length > 0);
+}
+function isRunId(value) {
+    return typeof value === 'string' && /^[0-9a-f]{16}$/.test(value);
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function invalidFrame() {
+    return new IpcProtocolError('ipc-invalid-frame', 'IPC frame does not match the Checkmate worker protocol');
+}
+//# sourceMappingURL=protocol.js.map

package/dist/cli/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/cli/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGpC,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAGzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAA;AA+B9C,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEhC;IADV,YACU,IAAiD,EAC1D,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,SAAI,GAAJ,IAAI,CAA6C;QAI1D,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAC/B,CAAC;CACD;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IAClD,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,mBAAmB,EAAE,CAAC;QAClD,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,EAAE,qBAAqB,mBAAmB,QAAQ,CAAC,CAAA;IACpG,CAAC;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAC3B,IAAyD,EACzD,OAAsC;IAEtC,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC3C,OAAO;QACN,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAC5C,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAChE,CAAA;AACF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,MAAsB;IAClE,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IAClD,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC3B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,YAAY,EAAE,CAAA;IAC5C,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QAC/F,OAAO,OAAwB,CAAA;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/F,OAAO,OAAwB,CAAA;IAChC,CAAC;IACD,MAAM,YAAY,EAAE,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IAClD,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC3B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,YAAY,EAAE,CAAA;IAE3G,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,OAAwB,CAAA;IACvE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACrG,OAAO,OAAwB,CAAA;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChG,OAAO,OAAwB,CAAA;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClF,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;YAAE,OAAO,OAAwB,CAAA;QAChE,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,OAAwB,CAAA;IAC5F,CAAC;IACD,MAAM,YAAY,EAAE,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,UAAsB;IACpE,MAAM,KAAK,GAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;IACtE,IAAI,CAAC;QACJ,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACzB,OAAO,KAAK,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;YACN,IAAI,EAAE,YAAY;YAClB,KAAK;YACL,UAAU,EAAE;gBACX,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,0EAA0E;aACnF;SACD,CAAA;IACF,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QACpB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,OAAO,KAAK,CAAC,oBAAoB,KAAK,QAAQ,CAC9C,CAAA;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC;QACf,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;QACrC,KAAK,CAAC,UAAqB,IAAI,CAAC;QACjC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CACnC,CAAA;AACF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACrB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CACxB,CAAA;AACF,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,YAAY;IACpB,OAAO,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,wDAAwD,CAAC,CAAA;AAC3G,CAAC"}

package/dist/cli/reconcile-result.d.ts

@@ -0,0 +1,13 @@
+import type { PreparedRun } from '../api/prepare-run.js';
+import type { ExecutionResultV1 } from '../contracts/types.js';
+import { type RunIdentity } from '../evidence/layout.js';
+export type ReconciledExecutionResult = Readonly<{
+    result: ExecutionResultV1;
+    bytes: string;
+}>;
+export declare class ResultReconciliationError extends Error {
+    constructor(message: string);
+}
+export declare function reconcileExecutionResult(bytes: string, identity: RunIdentity, prepared: PreparedRun): Promise<ReconciledExecutionResult>;
+export declare function readAllocatedResult(identity: RunIdentity): Promise<string>;
+//# sourceMappingURL=reconcile-result.d.ts.map

package/dist/cli/reconcile-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-result.d.ts","sourceRoot":"","sources":["../../src/cli/reconcile-result.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAExD,OAAO,KAAK,EAGX,iBAAiB,EAIjB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAMN,KAAK,WAAW,EAChB,MAAM,uBAAuB,CAAA;AA8B9B,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAE9F,qBAAa,yBAA0B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAI3B;AAED,wBAAsB,wBAAwB,CAC7C,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,WAAW,EACrB,QAAQ,EAAE,WAAW,GACnB,OAAO,CAAC,yBAAyB,CAAC,CAQpC;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAKhF"}