@xoxoai/checkmate 0.4.28 → 0.5.0

package/dist/cli/static-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-commands.d.ts","sourceRoot":"","sources":["../../src/cli/static-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC7F,OAAO,EAAoB,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,EAAqD,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAElH,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,kBAAuB,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AAED,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,eAAe,EACvB,OAAO,GAAE,kBAAuB,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AA6BD,wBAAsB,yBAAyB,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAE3G;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,kBAAkB,CAO1E;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,gBAAgB,CAOtE;AAED,wBAAgB,yBAAyB,IAAI,kBAAkB,CAa9D;AAED,wBAAgB,uBAAuB,IAAI,gBAAgB,CAa1D"}

package/dist/cli/static-commands.js

@@ -0,0 +1,83 @@
+import { boundDiagnostics } from '../config/ingestion.js';
+import { describeEnvironment, prepareRun, prepareRunSource } from '../api/prepare-run.js';
+export async function validateStaticRequest(request, options = {}) {
+    const preparation = await prepareRun(request, options);
+    return validationResult(preparation);
+}
+export async function validateStaticSource(source, options = {}) {
+    const preparation = await prepareRunSource(source, options);
+    return validationResult(preparation);
+}
+function validationResult(preparation) {
+    if (preparation.ok === false) {
+        return {
+            kind: 'validation-result',
+            schemaVersion: 1,
+            status: preparation.status,
+            diagnostics: preparation.diagnostics,
+        };
+    }
+    return {
+        kind: 'validation-result',
+        schemaVersion: 1,
+        status: 'valid',
+        scenarioId: preparation.prepared.request.scenario.id,
+        policy: {
+            id: preparation.prepared.policy.id,
+            effectiveLimits: { ...preparation.prepared.effectiveLimits },
+        },
+        driver: {
+            id: preparation.prepared.driver.id,
+            contractVersion: preparation.prepared.driver.descriptor.driverContractVersion,
+        },
+        diagnostics: [],
+    };
+}
+export async function describeStaticEnvironment(options = {}) {
+    return describeEnvironment(options);
+}
+export function validationError(diagnostic) {
+    return {
+        kind: 'validation-result',
+        schemaVersion: 1,
+        status: 'invalid',
+        diagnostics: boundDiagnostics([diagnostic]),
+    };
+}
+export function describeError(diagnostic) {
+    return {
+        kind: 'describe-result',
+        schemaVersion: 1,
+        status: 'invalid',
+        diagnostics: boundDiagnostics([diagnostic]),
+    };
+}
+export function unexpectedValidationError() {
+    return {
+        kind: 'validation-result',
+        schemaVersion: 1,
+        status: 'error',
+        diagnostics: boundDiagnostics([
+            {
+                code: 'internal-error',
+                path: '',
+                message: 'validation failed because of an unexpected operational error',
+            },
+        ]),
+    };
+}
+export function unexpectedDescribeError() {
+    return {
+        kind: 'describe-result',
+        schemaVersion: 1,
+        status: 'error',
+        diagnostics: boundDiagnostics([
+            {
+                code: 'internal-error',
+                path: '',
+                message: 'description failed because of an unexpected operational error',
+            },
+        ]),
+    };
+}
+//# sourceMappingURL=static-commands.js.map

package/dist/cli/static-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-commands.js","sourceRoot":"","sources":["../../src/cli/static-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAwB,MAAM,wBAAwB,CAAA;AAC/E,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,gBAAgB,EAA2B,MAAM,uBAAuB,CAAA;AAElH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAAgB,EAChB,UAA8B,EAAE;IAEhC,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACtD,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,MAAuB,EACvB,UAA8B,EAAE;IAEhC,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3D,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAA;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmD;IAC5E,IAAI,WAAW,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,aAAa,EAAE,CAAC;YAChB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,WAAW,EAAE,WAAW,CAAC,WAAW;SACpC,CAAA;IACF,CAAC;IAED,OAAO;QACN,IAAI,EAAE,mBAAmB;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;QACpD,MAAM,EAAE;YACP,EAAE,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;YAClC,eAAe,EAAE,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,eAAe,EAAE;SAC5D;QACD,MAAM,EAAE;YACP,EAAE,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;YAClC,eAAe,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,qBAAqB;SAC7E;QACD,WAAW,EAAE,EAAE;KACf,CAAA;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAA8B,EAAE;IAC/E,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAsB;IACrD,OAAO;QACN,IAAI,EAAE,mBAAmB;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,gBAAgB,CAAC,CAAC,UAAU,CAAC,CAAC;KAC3C,CAAA;AACF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAsB;IACnD,OAAO;QACN,IAAI,EAAE,iBAAiB;QACvB,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,gBAAgB,CAAC,CAAC,UAAU,CAAC,CAAC;KAC3C,CAAA;AACF,CAAC;AAED,MAAM,UAAU,yBAAyB;IACxC,OAAO;QACN,IAAI,EAAE,mBAAmB;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,gBAAgB,CAAC;YAC7B;gBACC,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,8DAA8D;aACvE;SACD,CAAC;KACF,CAAA;AACF,CAAC;AAED,MAAM,UAAU,uBAAuB;IACtC,OAAO;QACN,IAAI,EAAE,iBAAiB;QACvB,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,gBAAgB,CAAC;YAC7B;gBACC,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,+DAA+D;aACxE;SACD,CAAC;KACF,CAAA;AACF,CAAC"}

package/dist/cli/worker-stream-guard.d.ts

@@ -0,0 +1,20 @@
+import type { Readable } from 'node:stream';
+export declare const MAX_WORKER_STREAM_BYTES: number;
+export type WorkerStreamSummary = Readonly<{
+    stream: 'stdout' | 'stderr';
+    bytes: number;
+    truncated: boolean;
+}>;
+export declare class WorkerStreamGuard {
+    private readonly name;
+    private readonly onActivity?;
+    private bytes;
+    private truncated;
+    private attached;
+    constructor(name: WorkerStreamSummary['stream'], onActivity?: (summary: WorkerStreamSummary) => void);
+    attach(stream: Readable | null): void;
+    dispose(stream: Readable | null): void;
+    summary(): WorkerStreamSummary;
+    private readonly onData;
+}
+//# sourceMappingURL=worker-stream-guard.d.ts.map

package/dist/cli/worker-stream-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-stream-guard.d.ts","sourceRoot":"","sources":["../../src/cli/worker-stream-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,eAAO,MAAM,uBAAuB,QAAY,CAAA;AAEhD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAC1C,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,OAAO,CAAA;CAClB,CAAC,CAAA;AAEF,qBAAa,iBAAiB;IAM5B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAN7B,OAAO,CAAC,KAAK,CAAI;IACjB,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,QAAQ,CAAQ;gBAGN,IAAI,EAAE,mBAAmB,CAAC,QAAQ,CAAC,EACnC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI;IAGrE,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,GAAG,IAAI;IAOrC,OAAO,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,GAAG,IAAI;IAOtC,OAAO,IAAI,mBAAmB;IAI9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAStB;CACD"}

package/dist/cli/worker-stream-guard.js

@@ -0,0 +1,41 @@
+export const MAX_WORKER_STREAM_BYTES = 64 * 1024;
+export class WorkerStreamGuard {
+    name;
+    onActivity;
+    bytes = 0;
+    truncated = false;
+    attached = false;
+    constructor(name, onActivity) {
+        this.name = name;
+        this.onActivity = onActivity;
+    }
+    attach(stream) {
+        if (!stream || this.attached)
+            return;
+        this.attached = true;
+        stream.on('data', this.onData);
+        stream.resume();
+    }
+    dispose(stream) {
+        if (!stream || !this.attached)
+            return;
+        stream.off('data', this.onData);
+        stream.destroy();
+        this.attached = false;
+    }
+    summary() {
+        return { stream: this.name, bytes: this.bytes, truncated: this.truncated };
+    }
+    onData = (chunk) => {
+        const size = typeof chunk === 'string' ? Buffer.byteLength(chunk, 'utf8') : chunk.byteLength;
+        const previous = this.bytes;
+        const wasTruncated = this.truncated;
+        this.bytes = Math.min(Number.MAX_SAFE_INTEGER, this.bytes + size);
+        if (this.bytes > MAX_WORKER_STREAM_BYTES)
+            this.truncated = true;
+        if (previous === 0 || (!wasTruncated && this.truncated)) {
+            this.onActivity?.(this.summary());
+        }
+    };
+}
+//# sourceMappingURL=worker-stream-guard.js.map

package/dist/cli/worker-stream-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-stream-guard.js","sourceRoot":"","sources":["../../src/cli/worker-stream-guard.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAA;AAQhD,MAAM,OAAO,iBAAiB;IAMX;IACA;IANV,KAAK,GAAG,CAAC,CAAA;IACT,SAAS,GAAG,KAAK,CAAA;IACjB,QAAQ,GAAG,KAAK,CAAA;IAExB,YACkB,IAAmC,EACnC,UAAmD;QADnD,SAAI,GAAJ,IAAI,CAA+B;QACnC,eAAU,GAAV,UAAU,CAAyC;IAClE,CAAC;IAEJ,MAAM,CAAC,MAAuB;QAC7B,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAM;QACpC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,EAAE,CAAA;IAChB,CAAC;IAED,OAAO,CAAC,MAAuB;QAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,CAAC,OAAO,EAAE,CAAA;QAChB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAA;IACtB,CAAC;IAED,OAAO;QACN,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;IAC3E,CAAC;IAEgB,MAAM,GAAG,CAAC,KAAsB,EAAQ,EAAE;QAC1D,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAA;QAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAA;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAA;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;QACjE,IAAI,IAAI,CAAC,KAAK,GAAG,uBAAuB;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QAC/D,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QAClC,CAAC;IACF,CAAC,CAAA;CACD"}

package/dist/cli/worker.d.ts

@@ -0,0 +1,3 @@
+export type WorkerProcess = Pick<NodeJS.Process, 'on' | 'send' | 'disconnect'>;
+export declare function runWorkerProcess(workerProcess?: WorkerProcess): void;
+//# sourceMappingURL=worker.d.ts.map

package/dist/cli/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/cli/worker.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,GAAG,YAAY,CAAC,CAAA;AAE9E,wBAAgB,gBAAgB,CAAC,aAAa,GAAE,aAAuB,GAAG,IAAI,CA6B7E"}

package/dist/cli/worker.js

@@ -0,0 +1,111 @@
+import { fileURLToPath } from 'node:url';
+import { resolve } from 'node:path';
+import { executePreparedRun } from '../api/execute-prepared-run.js';
+import { serializeJson } from '../contracts/serialize.js';
+import { scrub } from '../redaction/scrub.js';
+import { assertIpcFrameSize, diagnosticFrame, parseParentMessage, sendIpcFrame, terminalDigest, } from './protocol.js';
+export function runWorkerProcess(workerProcess = process) {
+    const controller = new AbortController();
+    let started = false;
+    let runId;
+    workerProcess.on('message', (raw) => {
+        let message;
+        try {
+            message = parseParentMessage(raw);
+        }
+        catch {
+            return;
+        }
+        if (message.type === 'abort') {
+            controller.abort(message.signal);
+            return;
+        }
+        if (started)
+            return;
+        started = true;
+        runId = message.identity.runId;
+        void execute(message, controller, workerProcess).catch((error) => {
+            if (!runId)
+                return;
+            send(workerProcess, {
+                type: 'fatal',
+                runId,
+                diagnostic: fatalDiagnostic(error),
+            });
+            workerProcess.disconnect?.();
+        });
+    });
+}
+async function execute(message, controller, workerProcess) {
+    const runId = message.identity.runId;
+    const logger = workerLogger(runId, workerProcess);
+    const result = await executePreparedRun(message.prepared, message.identity, {
+        signal: controller.signal,
+        logger,
+        onCleanupStarted: () => send(workerProcess, { type: 'cleanup-started', runId }),
+    });
+    const resultJson = serializeJson(result);
+    const committed = result.reason !== 'result-write-failed';
+    if (!committed) {
+        const terminal = { type: 'terminal-inline', runId, committed: false, resultJson };
+        try {
+            assertIpcFrameSize(terminal);
+            send(workerProcess, terminal);
+        }
+        catch {
+            send(workerProcess, {
+                type: 'fatal',
+                runId,
+                diagnostic: {
+                    code: 'worker.result-unavailable',
+                    path: '',
+                    message: 'The uncommitted terminal result exceeded the IPC frame limit',
+                },
+            });
+        }
+        workerProcess.disconnect?.();
+        return;
+    }
+    const digest = terminalDigest(resultJson);
+    const inline = { type: 'terminal-inline', runId, committed: true, resultJson, digest };
+    try {
+        assertIpcFrameSize(inline);
+        send(workerProcess, inline);
+    }
+    catch {
+        send(workerProcess, { type: 'terminal-file', runId, committed: true, digest });
+    }
+    workerProcess.disconnect?.();
+}
+function workerLogger(runId, workerProcess) {
+    const write = (level, message) => {
+        send(workerProcess, diagnosticFrame(runId, { code: `worker.log.${level}`, path: '', message }));
+    };
+    return {
+        debug: (message) => write('debug', message),
+        info: (message) => write('info', message),
+        warn: (message) => write('warn', message),
+        error: (message) => write('error', message),
+    };
+}
+function send(workerProcess, message) {
+    if (!workerProcess.send)
+        return;
+    try {
+        sendIpcFrame((frame) => workerProcess.send(frame), message);
+    }
+    catch {
+        return;
+    }
+}
+function fatalDiagnostic(error) {
+    return {
+        code: 'worker.fatal',
+        path: '',
+        message: scrub(error instanceof Error ? error.message : String(error)),
+    };
+}
+const entry = process.argv[1] ? resolve(process.argv[1]) : '';
+if (entry === resolve(fileURLToPath(import.meta.url)))
+    runWorkerProcess();
+//# sourceMappingURL=worker.js.map

package/dist/cli/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/cli/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAGzD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAC7C,OAAO,EACN,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,cAAc,GAGd,MAAM,eAAe,CAAA;AAItB,MAAM,UAAU,gBAAgB,CAAC,gBAA+B,OAAO;IACtE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,KAAyB,CAAA;IAE7B,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;QAC5C,IAAI,OAAsB,CAAA;QAC1B,IAAI,CAAC;YACJ,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC;YACR,OAAM;QACP,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAChC,OAAM;QACP,CAAC;QACD,IAAI,OAAO;YAAE,OAAM;QACnB,OAAO,GAAG,IAAI,CAAA;QACd,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAA;QAC9B,KAAK,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAChE,IAAI,CAAC,KAAK;gBAAE,OAAM;YAClB,IAAI,CAAC,aAAa,EAAE;gBACnB,IAAI,EAAE,OAAO;gBACb,KAAK;gBACL,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC;aAClC,CAAC,CAAA;YACF,aAAa,CAAC,UAAU,EAAE,EAAE,CAAA;QAC7B,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACrB,OAAkD,EAClD,UAA2B,EAC3B,aAA4B;IAE5B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAA;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;QAC3E,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,MAAM;QACN,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;KAC/E,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,KAAK,qBAAqB,CAAA;IAEzD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAkB,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;QAChG,IAAI,CAAC;YACJ,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YAC5B,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,aAAa,EAAE;gBACnB,IAAI,EAAE,OAAO;gBACb,KAAK;gBACL,UAAU,EAAE;oBACX,IAAI,EAAE,2BAA2B;oBACjC,IAAI,EAAE,EAAE;oBACR,OAAO,EAAE,8DAA8D;iBACvE;aACD,CAAC,CAAA;QACH,CAAC;QACD,aAAa,CAAC,UAAU,EAAE,EAAE,CAAA;QAC5B,OAAM;IACP,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;IACzC,MAAM,MAAM,GAAkB,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;IACrG,IAAI,CAAC;QACJ,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,aAAa,CAAC,UAAU,EAAE,EAAE,CAAA;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,aAA4B;IAChE,MAAM,KAAK,GAAG,CAAC,KAA0C,EAAE,OAAe,EAAQ,EAAE;QACnF,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;IAChG,CAAC,CAAA;IACD,OAAO;QACN,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;QAC3C,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;QACzC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;QACzC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;KAC3C,CAAA;AACF,CAAC;AAED,SAAS,IAAI,CAAC,aAA4B,EAAE,OAAsB;IACjE,IAAI,CAAC,aAAa,CAAC,IAAI;QAAE,OAAM;IAC/B,IAAI,CAAC;QACJ,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACR,OAAM;IACP,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,OAAO;QACN,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACtE,CAAA;AACF,CAAC;AAED,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7D,IAAI,KAAK,KAAK,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAAE,gBAAgB,EAAE,CAAA"}

package/dist/config/ingestion.d.ts

@@ -0,0 +1,58 @@
+import type { Diagnostic } from '../contracts/types.js';
+export declare const INGESTION_LIMITS: Readonly<{
+    documentBytes: number;
+    maxDepth: 64;
+    maxValues: 10000;
+    maxSteps: 100;
+    maxIdCharacters: 128;
+    maxNameCharacters: 256;
+    maxStepTextBytes: number;
+    maxDiagnostics: 100;
+    maxDiagnosticBytes: number;
+    maxPreparedRunBytes: number;
+}>;
+export type InputFailureStatus = 'invalid' | 'error';
+export type InputResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    status: InputFailureStatus;
+    diagnostics: [Diagnostic, ...Diagnostic[]];
+};
+export type JsonInputSource = {
+    kind: 'value';
+    value: unknown;
+} | {
+    kind: 'file';
+    path: string;
+} | {
+    kind: 'stdin';
+    stream: AsyncIterable<string | Uint8Array>;
+};
+export declare function acquireJsonInput(source: JsonInputSource, path?: string): Promise<InputResult<unknown>>;
+export declare function readJsonDocument(filePath: string, path?: string): Promise<InputResult<unknown>>;
+export declare function readJsonStream(stream: AsyncIterable<string | Uint8Array>, path?: string): Promise<InputResult<unknown>>;
+export declare function parseJsonDocument(bytes: Uint8Array, path?: string): InputResult<unknown>;
+export declare function inspectJsonStructure(value: unknown, path?: string): InputResult<unknown>;
+export declare function requestLimitDiagnostics(input: {
+    scenario: {
+        id: string;
+        name?: string;
+        driver: {
+            id: string;
+        };
+        policy?: string;
+        steps: Array<{
+            id: string;
+            action: string;
+            expect: string;
+        }>;
+    };
+}): Diagnostic[];
+export declare function rawRequestLimitDiagnostics(input: unknown): Diagnostic[];
+export declare function boundDiagnostics(diagnostics: readonly Diagnostic[]): [Diagnostic, ...Diagnostic[]];
+export declare function appendPointer(path: string, member: string): string;
+export declare function combineFailureStatus(...statuses: InputFailureStatus[]): InputFailureStatus;
+export declare function normalizeSingleLine(value: string): string;
+//# sourceMappingURL=ingestion.d.ts.map

package/dist/config/ingestion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingestion.d.ts","sourceRoot":"","sources":["../../src/config/ingestion.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAGvD,eAAO,MAAM,gBAAgB;;;;;;;;;;;EAW3B,CAAA;AAEF,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAA;AAEpD,MAAM,MAAM,WAAW,CAAC,CAAC,IACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,WAAW,EAAE,CAAC,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC,CAAA;CAAE,CAAA;AAE/G,MAAM,MAAM,eAAe,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC,MAAM,GAAG,UAAU,CAAC,CAAA;CAAE,CAAA;AAEhE,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,SAAK,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAIxG;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,SAAK,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAsBjG;AAED,wBAAsB,cAAc,CACnC,MAAM,EAAE,aAAa,CAAC,MAAM,GAAG,UAAU,CAAC,EAC1C,IAAI,SAAK,GACP,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAc/B;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,SAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAkBpF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAoCpF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC9C,QAAQ,EAAE;QACT,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAA;QACtB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAC5D,CAAA;CACD,GAAG,UAAU,EAAE,CAWf;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,EAAE,CA8BvE;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC,CA4BlG;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,QAAQ,EAAE,kBAAkB,EAAE,GAAG,kBAAkB,CAE1F;AAcD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAezD"}

package/dist/config/ingestion.js

@@ -0,0 +1,283 @@
+import { Buffer } from 'node:buffer';
+import { open } from 'node:fs/promises';
+import { serializeJson } from '../contracts/serialize.js';
+import { ownValue } from './record.js';
+export const INGESTION_LIMITS = Object.freeze({
+    documentBytes: 256 * 1024,
+    maxDepth: 64,
+    maxValues: 10_000,
+    maxSteps: 100,
+    maxIdCharacters: 128,
+    maxNameCharacters: 256,
+    maxStepTextBytes: 16 * 1024,
+    maxDiagnostics: 100,
+    maxDiagnosticBytes: 64 * 1024,
+    maxPreparedRunBytes: 1024 * 1024,
+});
+export async function acquireJsonInput(source, path = '') {
+    if (source.kind === 'value')
+        return inspectJsonStructure(source.value, path);
+    if (source.kind === 'file')
+        return readJsonDocument(source.path, path);
+    return readJsonStream(source.stream, path);
+}
+export async function readJsonDocument(filePath, path = '') {
+    let file;
+    try {
+        file = await open(filePath, 'r');
+    }
+    catch (error) {
+        return fileFailure(error, path);
+    }
+    try {
+        const stat = await file.stat();
+        if (!stat.isFile())
+            return invalidFailure('input.unreadable', path, 'path must identify a regular file');
+        if (stat.size > INGESTION_LIMITS.documentBytes)
+            return tooLarge(path);
+        const buffer = Buffer.alloc(INGESTION_LIMITS.documentBytes + 1);
+        const { bytesRead } = await file.read(buffer, 0, buffer.length, 0);
+        if (bytesRead > INGESTION_LIMITS.documentBytes)
+            return tooLarge(path);
+        return parseJsonDocument(buffer.subarray(0, bytesRead), path);
+    }
+    catch (error) {
+        return fileFailure(error, path);
+    }
+    finally {
+        await file.close().catch(() => undefined);
+    }
+}
+export async function readJsonStream(stream, path = '') {
+    const chunks = [];
+    let bytes = 0;
+    try {
+        for await (const chunk of stream) {
+            const buffer = typeof chunk === 'string' ? Buffer.from(chunk) : Buffer.from(chunk);
+            bytes += buffer.byteLength;
+            if (bytes > INGESTION_LIMITS.documentBytes)
+                return tooLarge(path);
+            chunks.push(buffer);
+        }
+    }
+    catch {
+        return operationalFailure('input.read-failed', path, 'input stream could not be read');
+    }
+    return parseJsonDocument(Buffer.concat(chunks, bytes), path);
+}
+export function parseJsonDocument(bytes, path = '') {
+    if (bytes.byteLength > INGESTION_LIMITS.documentBytes)
+        return tooLarge(path);
+    let text;
+    try {
+        text = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+    }
+    catch {
+        return invalidFailure('input.invalid-utf8', path, 'must be valid UTF-8');
+    }
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch {
+        return invalidFailure('input.invalid-json', path, 'must be valid JSON');
+    }
+    return inspectJsonStructure(value, path);
+}
+export function inspectJsonStructure(value, path = '') {
+    const pending = [{ value, depth: 1, path }];
+    const visited = new WeakSet();
+    let values = 0;
+    while (pending.length > 0) {
+        const current = pending.pop();
+        values++;
+        if (values > INGESTION_LIMITS.maxValues) {
+            return invalidFailure('input.too-many-values', path, `must contain at most ${INGESTION_LIMITS.maxValues} values`);
+        }
+        if (current.depth > INGESTION_LIMITS.maxDepth) {
+            return invalidFailure('input.too-deep', current.path, `must not exceed depth ${INGESTION_LIMITS.maxDepth}`);
+        }
+        if (current.value === null || typeof current.value !== 'object')
+            continue;
+        if (visited.has(current.value))
+            continue;
+        visited.add(current.value);
+        if (!Array.isArray(current.value) && Object.getPrototypeOf(current.value) !== Object.prototype) {
+            return invalidFailure('input.non-json', current.path, 'must contain only JSON values');
+        }
+        const entries = Array.isArray(current.value)
+            ? current.value.map((entry, index) => [String(index), entry])
+            : Object.entries(current.value);
+        for (let index = entries.length - 1; index >= 0; index--) {
+            const [key, entry] = entries[index];
+            pending.push({ value: entry, depth: current.depth + 1, path: appendPointer(current.path, key) });
+        }
+    }
+    return { ok: true, value };
+}
+export function requestLimitDiagnostics(input) {
+    const diagnostics = [];
+    if (input.scenario.steps.length > INGESTION_LIMITS.maxSteps) {
+        diagnostics.push(limitDiagnostic('/scenario/steps', `${INGESTION_LIMITS.maxSteps} steps`));
+    }
+    for (const [index, step] of input.scenario.steps.entries()) {
+        const base = `/scenario/steps/${index}`;
+        checkText(diagnostics, step.action, `${base}/action`);
+        checkText(diagnostics, step.expect, `${base}/expect`);
+    }
+    return diagnostics;
+}
+export function rawRequestLimitDiagnostics(input) {
+    if (!isRecord(input))
+        return [];
+    const scenario = ownValue(input, 'scenario');
+    if (!isRecord(scenario))
+        return [];
+    const diagnostics = [];
+    checkRawId(diagnostics, ownValue(scenario, 'id'), '/scenario/id');
+    checkRawId(diagnostics, ownValue(scenario, 'policy'), '/scenario/policy');
+    const name = ownValue(scenario, 'name');
+    if (typeof name === 'string' && name.length > INGESTION_LIMITS.maxNameCharacters) {
+        diagnostics.push(limitDiagnostic('/scenario/name', `${INGESTION_LIMITS.maxNameCharacters} characters`));
+    }
+    const driver = ownValue(scenario, 'driver');
+    if (isRecord(driver))
+        checkRawId(diagnostics, ownValue(driver, 'id'), '/scenario/driver/id');
+    const steps = ownValue(scenario, 'steps');
+    if (!Array.isArray(steps))
+        return diagnostics;
+    if (steps.length > INGESTION_LIMITS.maxSteps) {
+        diagnostics.push(limitDiagnostic('/scenario/steps', `${INGESTION_LIMITS.maxSteps} steps`));
+    }
+    for (const [index, step] of steps.entries()) {
+        if (!isRecord(step))
+            continue;
+        const base = `/scenario/steps/${index}`;
+        checkRawId(diagnostics, ownValue(step, 'id'), `${base}/id`);
+        const action = ownValue(step, 'action');
+        const expectation = ownValue(step, 'expect');
+        if (typeof action === 'string')
+            checkText(diagnostics, action, `${base}/action`);
+        if (typeof expectation === 'string')
+            checkText(diagnostics, expectation, `${base}/expect`);
+    }
+    return diagnostics;
+}
+export function boundDiagnostics(diagnostics) {
+    const marker = {
+        code: 'diagnostics.truncated',
+        path: '',
+        message: 'additional diagnostics were omitted because the diagnostic limit was reached',
+    };
+    const accepted = [];
+    for (const diagnostic of diagnostics) {
+        const normalized = normalizeDiagnostic(diagnostic);
+        const candidate = [...accepted, normalized];
+        const countExceeded = candidate.length > INGESTION_LIMITS.maxDiagnostics;
+        const bytesExceeded = diagnosticBytes(candidate) > INGESTION_LIMITS.maxDiagnosticBytes;
+        if (countExceeded || bytesExceeded) {
+            while (accepted.length > 0 &&
+                (accepted.length + 1 > INGESTION_LIMITS.maxDiagnostics ||
+                    diagnosticBytes([...accepted, marker]) > INGESTION_LIMITS.maxDiagnosticBytes)) {
+                accepted.pop();
+            }
+            accepted.push(marker);
+            break;
+        }
+        accepted.push(normalized);
+    }
+    return (accepted.length > 0 ? accepted : [marker]);
+}
+export function appendPointer(path, member) {
+    return `${path}/${member.replaceAll('~', '~0').replaceAll('/', '~1')}`;
+}
+export function combineFailureStatus(...statuses) {
+    return statuses.includes('error') ? 'error' : 'invalid';
+}
+function normalizeDiagnostic(diagnostic) {
+    return {
+        code: normalizeSingleLine(diagnostic.code) || 'diagnostic.invalid',
+        path: validPointer(diagnostic.path) ? diagnostic.path : '',
+        message: normalizeSingleLine(diagnostic.message) || 'diagnostic message was empty',
+    };
+}
+function diagnosticBytes(diagnostics) {
+    return Buffer.byteLength(serializeJson(diagnostics), 'utf8');
+}
+export function normalizeSingleLine(value) {
+    let normalized = '';
+    let replacingControls = false;
+    for (const character of value) {
+        const code = character.codePointAt(0);
+        const control = code <= 0x1f || (code >= 0x7f && code <= 0x9f);
+        if (control) {
+            if (!replacingControls)
+                normalized += ' ';
+            replacingControls = true;
+        }
+        else {
+            normalized += character;
+            replacingControls = false;
+        }
+    }
+    return normalized.trim();
+}
+function validPointer(path) {
+    if (path === '')
+        return true;
+    if (!path.startsWith('/'))
+        return false;
+    for (let index = 0; index < path.length; index++) {
+        if (path[index] !== '~')
+            continue;
+        if (path[index + 1] !== '0' && path[index + 1] !== '1')
+            return false;
+        index++;
+    }
+    for (const character of path) {
+        const code = character.codePointAt(0);
+        if (code <= 0x1f || (code >= 0x7f && code <= 0x9f))
+            return false;
+    }
+    return true;
+}
+function checkText(diagnostics, value, path) {
+    if (Buffer.byteLength(value, 'utf8') > INGESTION_LIMITS.maxStepTextBytes) {
+        diagnostics.push(limitDiagnostic(path, `${INGESTION_LIMITS.maxStepTextBytes} UTF-8 bytes`));
+    }
+}
+function checkRawId(diagnostics, value, path) {
+    if (typeof value === 'string' && value.length > INGESTION_LIMITS.maxIdCharacters) {
+        diagnostics.push(limitDiagnostic(path, `${INGESTION_LIMITS.maxIdCharacters} characters`));
+    }
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function limitDiagnostic(path, maximum) {
+    return { code: 'input.limit-exceeded', path, message: `must not exceed ${maximum}` };
+}
+function tooLarge(path) {
+    return invalidFailure('input.too-large', path, `must not exceed ${INGESTION_LIMITS.documentBytes} bytes`);
+}
+function fileFailure(error, path) {
+    const code = errorCode(error);
+    if (code === 'ENOENT')
+        return invalidFailure('input.unreadable', path, 'file does not exist');
+    if (code === 'EACCES' || code === 'EPERM' || code === 'EISDIR') {
+        return invalidFailure('input.unreadable', path, 'file could not be read');
+    }
+    return operationalFailure('input.read-failed', path, 'file could not be read because of an operational error');
+}
+function errorCode(error) {
+    if (!error || typeof error !== 'object' || !Object.prototype.hasOwnProperty.call(error, 'code'))
+        return undefined;
+    return typeof error.code === 'string' ? error.code : undefined;
+}
+function invalidFailure(code, path, message) {
+    return { ok: false, status: 'invalid', diagnostics: [{ code, path, message }] };
+}
+function operationalFailure(code, path, message) {
+    return { ok: false, status: 'error', diagnostics: [{ code, path, message }] };
+}
+//# sourceMappingURL=ingestion.js.map