@xoxoai/checkmate 0.6.7 → 0.7.0

package/dist/evidence/layout.js

@@ -1,152 +0,0 @@
-import { randomBytes } from 'node:crypto';
-import { mkdir } from 'node:fs/promises';
-import { isAbsolute, relative, resolve, sep } from 'node:path';
-import { syncDirectoryWhenSupported } from './atomic-file.js';
-const DIRECTORY_MODE = 0o700;
-const ID_ATTEMPTS = 100;
-const defaultDirectoryOperations = {
-    mkdir: (path, options) => mkdir(path, options),
-    syncDirectory: syncDirectoryWhenSupported,
-};
-export async function allocateRunIdentity({ invocationRoot, outputDirectory, scenarioId, now = () => new Date(), random = () => randomBytes(8), directoryOperations, }) {
-    const root = resolve(invocationRoot);
-    const output = resolve(outputDirectory);
-    const operations = { ...defaultDirectoryOperations, ...directoryOperations };
-    assertContained(root, output);
-    await ensurePrivateDirectory(root, output, operations);
-    const startedAt = now().toISOString();
-    const prefix = `${utcPathTime(startedAt)}-${safeSlug(scenarioId)}`;
-    for (let attempt = 0; attempt < ID_ATTEMPTS; attempt++) {
-        const runId = Buffer.from(random()).toString('hex');
-        if (!/^[0-9a-f]{16}$/.test(runId)) {
-            throw new Error('Run identity source must return exactly eight bytes');
-        }
-        const runDirectory = resolveInside(output, `${prefix}-${runId}`);
-        try {
-            await operations.mkdir(runDirectory, { mode: DIRECTORY_MODE });
-        }
-        catch (error) {
-            if (isErrorCode(error, 'EEXIST'))
-                continue;
-            throw error;
-        }
-        await operations.syncDirectory(output);
-        return {
-            runId,
-            startedAt,
-            runDirectory,
-            relativeRunDirectory: toInvocationRelative(root, runDirectory),
-        };
-    }
-    throw new Error('Unable to allocate a unique run directory');
-}
-export async function ensurePrivateDirectory(root, path, directoryOperations = {}) {
-    const resolvedRoot = resolve(root);
-    const target = resolve(path);
-    const operations = { ...defaultDirectoryOperations, ...directoryOperations };
-    assertContained(resolvedRoot, target);
-    const members = relative(resolvedRoot, target).split(sep).filter(Boolean);
-    let parent = resolvedRoot;
-    for (const member of members) {
-        const child = resolveInside(parent, member);
-        try {
-            await operations.mkdir(child, { mode: DIRECTORY_MODE });
-        }
-        catch (error) {
-            if (!isErrorCode(error, 'EEXIST'))
-                throw error;
-        }
-        await operations.syncDirectory(parent);
-        parent = child;
-    }
-}
-export function resolveInside(root, ...segments) {
-    for (const segment of segments)
-        assertSafeSegment(segment);
-    const resolvedRoot = resolve(root);
-    const path = resolve(resolvedRoot, ...segments);
-    assertContained(resolvedRoot, path);
-    return path;
-}
-export function toInvocationRelative(invocationRoot, path) {
-    const root = resolve(invocationRoot);
-    const target = resolve(path);
-    assertContained(root, target);
-    const reference = relative(root, target);
-    if (!reference)
-        throw new Error('A file reference cannot point at the invocation root');
-    return reference.split(sep).join('/');
-}
-export function safeSlug(value) {
-    const slug = value
-        .normalize('NFKD')
-        .replace(/[\u0300-\u036f]/g, '')
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, '-')
-        .replace(/^-+|-+$/g, '')
-        .slice(0, 64)
-        .replace(/-+$/g, '');
-    return slug || 'item';
-}
-export function stepDirectoryName(ordinal, stepId) {
-    if (!Number.isSafeInteger(ordinal) || ordinal < 1)
-        throw new Error('Step ordinal must be a positive integer');
-    return `${String(ordinal).padStart(3, '0')}-${safeSlug(stepId)}`;
-}
-export function harnessEvidencePath(identity, ordinal, stepId, kind, turn) {
-    const directory = resolveInside(identity.runDirectory, 'evidence', 'harness', 'steps', stepDirectoryName(ordinal, stepId));
-    if (kind === 'transcript') {
-        if (turn !== undefined)
-            throw new Error('A transcript has no turn number');
-        return resolveInside(directory, 'transcript.md');
-    }
-    if (!Number.isSafeInteger(turn) || turn < 1)
-        throw new Error('A turn snapshot requires a positive turn number');
-    return resolveInside(directory, 'turns', `${String(turn).padStart(3, '0')}.yml`);
-}
-export function driverEvidenceDirectory(identity, driverId, ordinal, stepId) {
-    const directory = resolveInside(identity.runDirectory, 'evidence', 'driver', safeSlug(driverId));
-    if (ordinal === undefined && stepId === undefined)
-        return directory;
-    if (ordinal === undefined || stepId === undefined)
-        throw new Error('Driver step evidence needs an ordinal and step ID');
-    return resolveInside(directory, 'steps', stepDirectoryName(ordinal, stepId));
-}
-export function evidenceExtension(mediaType) {
-    switch (mediaType) {
-        case 'application/json':
-            return 'json';
-        case 'application/yaml':
-            return 'yml';
-        case 'image/jpeg':
-            return 'jpg';
-        case 'image/png':
-            return 'png';
-        case 'text/markdown':
-            return 'md';
-        case 'text/plain':
-            return 'txt';
-        default:
-            return 'bin';
-    }
-}
-function assertSafeSegment(segment) {
-    if (!segment || segment === '.' || segment === '..' || segment.includes('/') || segment.includes('\\')) {
-        throw new Error(`Unsafe evidence path segment '${segment}'`);
-    }
-    if (segment.includes('\0') || isAbsolute(segment))
-        throw new Error(`Unsafe evidence path segment '${segment}'`);
-}
-function assertContained(root, path) {
-    const candidate = relative(root, path);
-    if (candidate === '..' || candidate.startsWith(`..${sep}`) || isAbsolute(candidate)) {
-        throw new Error(`Path '${path}' escapes '${root}'`);
-    }
-}
-function utcPathTime(iso) {
-    return iso.replaceAll(/[-:.]/g, '');
-}
-function isErrorCode(error, code) {
-    return error instanceof Error && 'code' in error && error.code === code;
-}
-//# sourceMappingURL=layout.js.map

package/dist/evidence/layout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"layout.js","sourceRoot":"","sources":["../../src/evidence/layout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAE7D,MAAM,cAAc,GAAG,KAAK,CAAA;AAC5B,MAAM,WAAW,GAAG,GAAG,CAAA;AAuBvB,MAAM,0BAA0B,GAAwB;IACvD,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;IAC9C,aAAa,EAAE,0BAA0B;CACzC,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACzC,cAAc,EACd,eAAe,EACf,UAAU,EACV,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACtB,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAC7B,mBAAmB,GACS;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACvC,MAAM,UAAU,GAAG,EAAE,GAAG,0BAA0B,EAAE,GAAG,mBAAmB,EAAE,CAAA;IAC5E,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7B,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAA;IACrC,MAAM,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAA;IAElE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACnD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACvE,CAAC;QACD,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAA;QAChE,IAAI,CAAC;YACJ,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,SAAQ;YAC1C,MAAM,KAAK,CAAA;QACZ,CAAC;QACD,MAAM,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QACtC,OAAO;YACN,KAAK;YACL,SAAS;YACT,YAAY;YACZ,oBAAoB,EAAE,oBAAoB,CAAC,IAAI,EAAE,YAAY,CAAC;SAC9D,CAAA;IACF,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,IAAY,EACZ,IAAY,EACZ,sBAAoD,EAAE;IAEtD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,UAAU,GAAG,EAAE,GAAG,0BAA0B,EAAE,GAAG,mBAAmB,EAAE,CAAA;IAC5E,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACzE,IAAI,MAAM,GAAG,YAAY,CAAA;IAEzB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC3C,IAAI,CAAC;YACJ,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAA;QAC/C,CAAC;QACD,MAAM,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,GAAG,KAAK,CAAA;IACf,CAAC;AACF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAG,QAAkB;IAChE,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,QAAQ,CAAC,CAAA;IAC/C,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IACnC,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,cAAsB,EAAE,IAAY;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACvF,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa;IACrC,MAAM,IAAI,GAAG,KAAK;SAChB,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACrB,OAAO,IAAI,IAAI,MAAM,CAAA;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,MAAc;IAChE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC7G,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAClC,QAAqB,EACrB,OAAe,EACf,MAAc,EACd,IAAoC,EACpC,IAAa;IAEb,MAAM,SAAS,GAAG,aAAa,CAC9B,QAAQ,CAAC,YAAY,EACrB,UAAU,EACV,SAAS,EACT,OAAO,EACP,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAClC,CAAA;IACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QAC1E,OAAO,aAAa,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IACjD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IAChH,OAAO,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;AACjF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,QAAqB,EACrB,QAAgB,EAChB,OAAgB,EAChB,MAAe;IAEf,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;IAChG,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACnE,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAChD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACrE,OAAO,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IAClD,QAAQ,SAAS,EAAE,CAAC;QACnB,KAAK,kBAAkB;YACtB,OAAO,MAAM,CAAA;QACd,KAAK,kBAAkB;YACtB,OAAO,KAAK,CAAA;QACb,KAAK,YAAY;YAChB,OAAO,KAAK,CAAA;QACb,KAAK,WAAW;YACf,OAAO,KAAK,CAAA;QACb,KAAK,eAAe;YACnB,OAAO,IAAI,CAAA;QACZ,KAAK,YAAY;YAChB,OAAO,KAAK,CAAA;QACb;YACC,OAAO,KAAK,CAAA;IACd,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACzC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,GAAG,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,GAAG,CAAC,CAAA;AAChH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACtC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,cAAc,IAAI,GAAG,CAAC,CAAA;IACpD,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAChD,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAA;AACxE,CAAC"}

package/dist/evidence/retention.d.ts

@@ -1,5 +0,0 @@
-import type { EvidencePolicyV1 } from '../contracts/types.js';
-export type EvidenceContent = 'text' | 'opaque';
-export type StepOutcome = 'passed' | 'failed';
-export declare function retainsEvidence(policy: EvidencePolicyV1, outcome: StepOutcome, content: EvidenceContent): boolean;
-//# sourceMappingURL=retention.d.ts.map

package/dist/evidence/retention.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../../src/evidence/retention.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,CAAA;AAC/C,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE7C,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAKjH"}

package/dist/evidence/retention.js

@@ -1,10 +0,0 @@
-export function retainsEvidence(policy, outcome, content) {
-    if (content === 'opaque' && !policy.allowOpaque)
-        return false;
-    if (policy.retention === 'off')
-        return false;
-    if (policy.retention === 'on')
-        return true;
-    return outcome === 'failed';
-}
-//# sourceMappingURL=retention.js.map

package/dist/evidence/retention.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../src/evidence/retention.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,eAAe,CAAC,MAAwB,EAAE,OAAoB,EAAE,OAAwB;IACvG,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAC7D,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAC5C,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1C,OAAO,OAAO,KAAK,QAAQ,CAAA;AAC5B,CAAC"}

package/dist/evidence/store.d.ts

@@ -1,101 +0,0 @@
-import type { Diagnostic, DriverDescriptorV1, EvidencePolicyV1, EvidenceReference, ExecutedStepResult, ExecutionResultV1, RunRequestV1 } from '../contracts/types.js';
-import { type RunIdentity } from './layout.js';
-import { type StepOutcome } from './retention.js';
-export declare const EVIDENCE_CAPTURE_LIMITS: Readonly<{
-    maxCandidateBytes: number;
-    maxInvocationBytes: number;
-}>;
-type AtomicWriter = (path: string, content: string | Uint8Array) => Promise<void>;
-export type EvidenceStoreOptions = Readonly<{
-    invocationRoot: string;
-    identity: RunIdentity;
-    policy: EvidencePolicyV1;
-    stepIds: readonly string[];
-    driverDescriptor: DriverDescriptorV1;
-    exactSecrets?: Iterable<string>;
-    writeFile?: AtomicWriter;
-    now?: () => Date;
-}>;
-export type HarnessEvidenceCandidate = Readonly<{
-    stepId: string;
-    kind: 'transcript' | 'turn-snapshot';
-    mediaType: 'text/markdown' | 'application/yaml';
-    content: string | Uint8Array;
-    turn?: number;
-}>;
-export type DriverEvidenceCandidate = Readonly<{
-    stepId?: string;
-    kind: string;
-    mediaType: string;
-    content: string | Uint8Array;
-}>;
-export type FinalizedStepEvidence = Readonly<{
-    references: readonly EvidenceReference[];
-    diagnostics: readonly Diagnostic[];
-}>;
-export type CheckpointState = Readonly<{
-    completedSteps: readonly ExecutedStepResult[];
-    diagnostics?: readonly Diagnostic[];
-}>;
-export type PreparedTerminalResult = Readonly<{
-    result: ExecutionResultV1;
-    bytes: string;
-}>;
-export type CommittedResult = Readonly<{
-    result: ExecutionResultV1;
-    bytes: string;
-    path: string;
-}>;
-export declare class EvidenceStore {
-    private readonly invocationRoot;
-    private readonly identity;
-    private readonly policy;
-    private readonly driverDescriptor;
-    private readonly stepOrdinals;
-    private readonly redactor;
-    private readonly writeFile;
-    private readonly now;
-    private readonly pending;
-    private readonly references;
-    private readonly allocatedPaths;
-    private readonly finalizedSteps;
-    private readonly persistenceDiagnostics;
-    private lifecycle;
-    private bufferedBytes;
-    private evidencePartial;
-    private driverCandidateOrdinal;
-    private scenarioId;
-    constructor({ invocationRoot, identity, policy, stepIds, driverDescriptor, exactSecrets, writeFile, now, }: EvidenceStoreOptions);
-    get runIdentity(): RunIdentity;
-    get state(): 'complete' | 'partial';
-    get committedReferences(): readonly EvidenceReference[];
-    get acceptedBufferBytes(): number;
-    markPartial(): void;
-    writeInvocation(request: RunRequestV1): Promise<void>;
-    captureHarnessStep(candidate: HarnessEvidenceCandidate): void;
-    captureDriver(candidate: DriverEvidenceCandidate): void;
-    finalizeStep(stepId: string, outcome: StepOutcome): Promise<FinalizedStepEvidence>;
-    finalizeScenario(outcome: StepOutcome): Promise<FinalizedStepEvidence>;
-    recordCaptureFailure(artifact: string, error: unknown): Diagnostic;
-    private finalizeCandidates;
-    replaceCheckpoint(state: CheckpointState): Promise<Diagnostic | undefined>;
-    writeResult(prepared: PreparedTerminalResult): Promise<CommittedResult>;
-    prepareResult(candidate: ExecutionResultV1): PreparedTerminalResult;
-    sanitizeDiagnosticText(value: string): string;
-    dispose(): void;
-    private capture;
-    private redactTextBytes;
-    private assertCandidateSize;
-    private stepOrdinal;
-    private release;
-    private removeCandidates;
-    private assertActive;
-    private writeDiagnostic;
-    private recordPersistenceDiagnostic;
-}
-export declare class EvidenceCaptureError extends Error {
-    readonly code: string;
-    constructor(code: string, message: string);
-}
-export {};
-//# sourceMappingURL=store.d.ts.map

package/dist/evidence/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/evidence/store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,MAAM,uBAAuB,CAAA;AAK9B,OAAO,EAQN,KAAK,WAAW,EAChB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAyC,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAExF,eAAO,MAAM,uBAAuB;;;EAGlC,CAAA;AAEF,KAAK,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;AAEjF,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,WAAW,CAAA;IACrB,MAAM,EAAE,gBAAgB,CAAA;IACxB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B,gBAAgB,EAAE,kBAAkB,CAAA;IACpC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/B,SAAS,CAAC,EAAE,YAAY,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAChB,CAAC,CAAA;AAEF,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,YAAY,GAAG,eAAe,CAAA;IACpC,SAAS,EAAE,eAAe,GAAG,kBAAkB,CAAA;IAC/C,OAAO,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAA;CACb,CAAC,CAAA;AAEF,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAA;CAC5B,CAAC,CAAA;AAEF,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC5C,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACxC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAA;CAClC,CAAC,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACtC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC7C,WAAW,CAAC,EAAE,SAAS,UAAU,EAAE,CAAA;CACnC,CAAC,CAAA;AAEF,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC7C,MAAM,EAAE,iBAAiB,CAAA;IACzB,KAAK,EAAE,MAAM,CAAA;CACb,CAAC,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAA;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACZ,CAAC,CAAA;AAiBF,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAa;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoB;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAmB;IAC1D,OAAO,CAAC,SAAS,CAAmD;IACpE,OAAO,CAAC,aAAa,CAAI;IACzB,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,sBAAsB,CAAI;IAClC,OAAO,CAAC,UAAU,CAAoB;gBAE1B,EACX,cAAc,EACd,QAAQ,EACR,MAAM,EACN,OAAO,EACP,gBAAgB,EAChB,YAAY,EACZ,SAA2B,EAC3B,GAAsB,GACtB,EAAE,oBAAoB;IAavB,IAAI,WAAW,IAAI,WAAW,CAE7B;IAED,IAAI,KAAK,IAAI,UAAU,GAAG,SAAS,CAElC;IAED,IAAI,mBAAmB,IAAI,SAAS,iBAAiB,EAAE,CAEtD;IAED,IAAI,mBAAmB,IAAI,MAAM,CAEhC;IAED,WAAW,IAAI,IAAI;IAIb,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB3D,kBAAkB,CAAC,SAAS,EAAE,wBAAwB,GAAG,IAAI;IA4B7D,aAAa,CAAC,SAAS,EAAE,uBAAuB,GAAG,IAAI;IA6BjD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASlF,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAK5E,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,UAAU;YAQpD,kBAAkB;IAkC1B,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAsB1E,WAAW,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC,eAAe,CAAC;IAY7E,aAAa,CAAC,SAAS,EAAE,iBAAiB,GAAG,sBAAsB;IAiBnE,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAI7C,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,OAAO;IA8Cf,OAAO,CAAC,eAAe;IAiCvB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,OAAO;IAKf,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,2BAA2B;CAGnC;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAE7C,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKhB"}

package/dist/evidence/store.js

@@ -1,375 +0,0 @@
-import { Buffer } from 'node:buffer';
-import { dirname } from 'node:path';
-import { serializeJson } from '../contracts/serialize.js';
-import { Redactor } from '../redaction/redactor.js';
-import { parseDocument, stringify as stringifyYaml } from 'yaml';
-import { AtomicWriteError, writeAtomicFile } from './atomic-file.js';
-import { ensurePrivateDirectory, driverEvidenceDirectory, evidenceExtension, harnessEvidencePath, resolveInside, safeSlug, toInvocationRelative, } from './layout.js';
-import { retainsEvidence } from './retention.js';
-export const EVIDENCE_CAPTURE_LIMITS = Object.freeze({
-    maxCandidateBytes: 10 * 1024 * 1024,
-    maxInvocationBytes: 64 * 1024 * 1024,
-});
-const harnessKinds = {
-    transcript: { mediaType: 'text/markdown', content: 'text' },
-    'turn-snapshot': { mediaType: 'application/yaml', content: 'text' },
-};
-export class EvidenceStore {
-    invocationRoot;
-    identity;
-    policy;
-    driverDescriptor;
-    stepOrdinals;
-    redactor;
-    writeFile;
-    now;
-    pending = [];
-    references = [];
-    allocatedPaths = new Set();
-    finalizedSteps = new Set();
-    persistenceDiagnostics = [];
-    lifecycle = 'allocated';
-    bufferedBytes = 0;
-    evidencePartial = false;
-    driverCandidateOrdinal = 0;
-    scenarioId;
-    constructor({ invocationRoot, identity, policy, stepIds, driverDescriptor, exactSecrets, writeFile = writeAtomicFile, now = () => new Date(), }) {
-        if (new Set(stepIds).size !== stepIds.length)
-            throw new Error('Evidence store step IDs must be unique');
-        this.invocationRoot = invocationRoot;
-        this.identity = identity;
-        this.policy = { ...policy };
-        this.driverDescriptor = structuredClone(driverDescriptor);
-        this.stepOrdinals = new Map(stepIds.map((id, index) => [id, index + 1]));
-        this.redactor = new Redactor({ mode: policy.redaction, exactSecrets });
-        this.writeFile = writeFile;
-        this.now = now;
-        toInvocationRelative(invocationRoot, identity.runDirectory);
-    }
-    get runIdentity() {
-        return this.identity;
-    }
-    get state() {
-        return this.evidencePartial ? 'partial' : 'complete';
-    }
-    get committedReferences() {
-        return this.references.map((reference) => ({ ...reference }));
-    }
-    get acceptedBufferBytes() {
-        return this.bufferedBytes;
-    }
-    markPartial() {
-        this.evidencePartial = true;
-    }
-    async writeInvocation(request) {
-        if (this.lifecycle !== 'allocated')
-            throw new Error('Invocation metadata has already been written');
-        const requestStepIds = request.scenario.steps.map((step) => step.id);
-        if (requestStepIds.length !== this.stepOrdinals.size ||
-            requestStepIds.some((stepId, index) => this.stepOrdinals.get(stepId) !== index + 1)) {
-            throw new Error('Invocation steps do not match the evidence store');
-        }
-        this.scenarioId = request.scenario.id;
-        this.lifecycle = 'active';
-        const path = resolveInside(this.identity.runDirectory, 'invocation.json');
-        const payload = this.redactor.redactInvocation({
-            layoutVersion: 1,
-            runId: this.identity.runId,
-            startedAt: this.identity.startedAt,
-            request,
-        });
-        await this.writeFile(path, serializeJson(payload));
-    }
-    captureHarnessStep(candidate) {
-        this.assertActive();
-        const declaration = harnessKinds[candidate.kind];
-        if (!declaration) {
-            throw new EvidenceCaptureError('evidence.undeclared-kind', `Harness evidence kind '${candidate.kind}' is not declared`);
-        }
-        if (candidate.mediaType !== declaration.mediaType) {
-            throw new EvidenceCaptureError('evidence.media-type-mismatch', `Harness evidence '${candidate.kind}' has an invalid media type`);
-        }
-        const ordinal = this.stepOrdinal(candidate.stepId);
-        let path;
-        try {
-            path = harnessEvidencePath(this.identity, ordinal, candidate.stepId, candidate.kind, candidate.turn);
-        }
-        catch (error) {
-            throw new EvidenceCaptureError('evidence.invalid-turn', error instanceof Error ? error.message : String(error));
-        }
-        this.capture({ ...candidate, producer: 'harness', contentType: declaration.content, path });
-    }
-    captureDriver(candidate) {
-        this.assertActive();
-        const declaration = this.driverDescriptor.evidenceKinds.find((entry) => entry.kind === candidate.kind);
-        if (!declaration) {
-            throw new EvidenceCaptureError('evidence.undeclared-kind', `Driver '${this.driverDescriptor.id}' does not declare evidence kind '${candidate.kind}'`);
-        }
-        if (declaration.mediaType !== candidate.mediaType) {
-            throw new EvidenceCaptureError('evidence.media-type-mismatch', `Driver evidence '${candidate.kind}' has an invalid media type`);
-        }
-        const fileOrdinal = ++this.driverCandidateOrdinal;
-        const filename = `${String(fileOrdinal).padStart(3, '0')}-${safeSlug(candidate.kind)}.${evidenceExtension(candidate.mediaType)}`;
-        const directory = candidate.stepId
-            ? driverEvidenceDirectory(this.identity, this.driverDescriptor.id, this.stepOrdinal(candidate.stepId), candidate.stepId)
-            : driverEvidenceDirectory(this.identity, this.driverDescriptor.id);
-        const path = resolveInside(directory, filename);
-        this.capture({ ...candidate, producer: this.driverDescriptor.id, contentType: declaration.content, path });
-    }
-    async finalizeStep(stepId, outcome) {
-        this.assertActive();
-        this.stepOrdinal(stepId);
-        if (this.finalizedSteps.has(stepId))
-            throw new Error(`Evidence for step '${stepId}' has already been finalized`);
-        this.finalizedSteps.add(stepId);
-        const candidates = this.pending.filter((candidate) => candidate.stepId === stepId);
-        return this.finalizeCandidates(candidates, outcome);
-    }
-    async finalizeScenario(outcome) {
-        this.assertActive();
-        return this.finalizeCandidates([...this.pending], outcome);
-    }
-    recordCaptureFailure(artifact, error) {
-        this.assertActive();
-        this.evidencePartial = true;
-        const diagnostic = this.writeDiagnostic('evidence.capture-failed', artifact, error);
-        this.recordPersistenceDiagnostic(diagnostic);
-        return diagnostic;
-    }
-    async finalizeCandidates(candidates, outcome) {
-        const newReferences = [];
-        const diagnostics = [];
-        for (const candidate of candidates) {
-            try {
-                if (!retainsEvidence(this.policy, outcome, candidate.contentType))
-                    continue;
-                await ensurePrivateDirectory(this.identity.runDirectory, dirname(candidate.path));
-                await this.writeFile(candidate.path, candidate.bytes);
-                const reference = {
-                    kind: candidate.kind,
-                    mediaType: candidate.mediaType,
-                    path: toInvocationRelative(this.invocationRoot, candidate.path),
-                    producer: candidate.producer,
-                    ...(candidate.stepId === undefined ? {} : { stepId: candidate.stepId }),
-                };
-                this.references.push(reference);
-                newReferences.push({ ...reference });
-            }
-            catch (error) {
-                this.evidencePartial = true;
-                const diagnostic = this.writeDiagnostic('evidence.write-failed', candidate.kind, error);
-                this.recordPersistenceDiagnostic(diagnostic);
-                diagnostics.push(diagnostic);
-            }
-            finally {
-                this.release(candidate);
-            }
-        }
-        this.removeCandidates(candidates);
-        return { references: newReferences, diagnostics };
-    }
-    async replaceCheckpoint(state) {
-        this.assertActive();
-        const path = resolveInside(this.identity.runDirectory, 'checkpoint.json');
-        try {
-            const payload = this.redactor.redactCheckpoint({
-                layoutVersion: 1,
-                runId: this.identity.runId,
-                updatedAt: this.now().toISOString(),
-                state: 'partial',
-                completedSteps: state.completedSteps,
-                evidenceReferences: this.references,
-                diagnostics: mergeDiagnostics(state.diagnostics ?? [], this.persistenceDiagnostics),
-            });
-            await this.writeFile(path, serializeJson(payload));
-            return undefined;
-        }
-        catch (error) {
-            const diagnostic = this.writeDiagnostic('checkpoint.write-failed', 'checkpoint', error);
-            this.recordPersistenceDiagnostic(diagnostic);
-            return diagnostic;
-        }
-    }
-    async writeResult(prepared) {
-        this.assertActive();
-        const absolutePath = resolveInside(this.identity.runDirectory, 'result.json');
-        await this.writeFile(absolutePath, prepared.bytes);
-        this.lifecycle = 'terminal';
-        return {
-            result: prepared.result,
-            bytes: prepared.bytes,
-            path: toInvocationRelative(this.invocationRoot, absolutePath),
-        };
-    }
-    prepareResult(candidate) {
-        this.assertActive();
-        if (this.pending.length > 0)
-            throw new Error('Cannot commit a result while evidence candidates are pending');
-        if (candidate.runId !== this.identity.runId || candidate.startedAt !== this.identity.startedAt) {
-            throw new Error('Execution result identity does not match the evidence store');
-        }
-        if (candidate.scenarioId !== this.scenarioId) {
-            throw new Error('Execution result scenario does not match the evidence store');
-        }
-        const result = this.redactor.redactExecutionResult({
-            ...candidate,
-            evidence: { state: this.state, references: [...this.committedReferences] },
-            diagnostics: mergeDiagnostics(candidate.diagnostics, this.persistenceDiagnostics),
-        });
-        return { result, bytes: serializeJson(result) };
-    }
-    sanitizeDiagnosticText(value) {
-        return this.redactor.redactDiagnosticText(value);
-    }
-    dispose() {
-        for (const candidate of this.pending)
-            this.release(candidate);
-        this.pending.length = 0;
-        this.lifecycle = 'terminal';
-    }
-    capture(input) {
-        if (input.stepId !== undefined && this.finalizedSteps.has(input.stepId)) {
-            throw new EvidenceCaptureError('evidence.step-finalized', `Evidence for step '${input.stepId}' is already finalized`);
-        }
-        if (this.allocatedPaths.has(input.path)) {
-            throw new EvidenceCaptureError('evidence.duplicate-destination', 'Evidence destination is already allocated');
-        }
-        const inputBytes = candidateByteLength(input.content);
-        this.assertCandidateSize(inputBytes);
-        const raw = ownBytes(input.content);
-        const bytes = input.contentType === 'text' ? this.redactTextBytes(raw, input.mediaType) : raw;
-        this.assertCandidateSize(bytes.byteLength);
-        if (this.bufferedBytes + bytes.byteLength > EVIDENCE_CAPTURE_LIMITS.maxInvocationBytes) {
-            throw new EvidenceCaptureError('evidence.invocation-buffer-too-large', `Accepted evidence buffers must not exceed ${EVIDENCE_CAPTURE_LIMITS.maxInvocationBytes} bytes per invocation`);
-        }
-        this.pending.push({
-            stepId: input.stepId,
-            kind: input.kind,
-            mediaType: input.mediaType,
-            producer: input.producer,
-            contentType: input.contentType,
-            path: input.path,
-            bytes,
-        });
-        this.allocatedPaths.add(input.path);
-        this.bufferedBytes += bytes.byteLength;
-    }
-    redactTextBytes(raw, mediaType) {
-        if (this.policy.redaction === 'off')
-            return raw;
-        let value;
-        try {
-            value = new TextDecoder('utf-8', { fatal: true }).decode(raw);
-        }
-        catch {
-            throw new EvidenceCaptureError('evidence.invalid-text', 'Text evidence must contain valid UTF-8');
-        }
-        try {
-            const format = structuredFormat(mediaType);
-            if (format === 'json') {
-                const parsed = JSON.parse(value);
-                assertJsonValue(parsed);
-                return Buffer.from(serializeJson(this.redactor.redactContent(parsed)), 'utf8');
-            }
-            if (format === 'yaml') {
-                const document = parseDocument(value, { uniqueKeys: true });
-                if (document.errors.length > 0)
-                    throw document.errors[0];
-                const parsed = document.toJS({ maxAliasCount: 100 });
-                assertJsonValue(parsed);
-                const redacted = this.redactor.redactContent(parsed);
-                return Buffer.from(stringifyYaml(redacted, { sortMapEntries: true }), 'utf8');
-            }
-            return Buffer.from(this.redactor.redactText(value), 'utf8');
-        }
-        catch (error) {
-            if (error instanceof EvidenceCaptureError)
-                throw error;
-            throw new EvidenceCaptureError('evidence.invalid-structured-content', `Structured ${mediaType} evidence could not be safely redacted`);
-        }
-    }
-    assertCandidateSize(bytes) {
-        if (bytes > EVIDENCE_CAPTURE_LIMITS.maxCandidateBytes) {
-            throw new EvidenceCaptureError('evidence.candidate-too-large', `An evidence candidate must not exceed ${EVIDENCE_CAPTURE_LIMITS.maxCandidateBytes} bytes`);
-        }
-    }
-    stepOrdinal(stepId) {
-        const ordinal = this.stepOrdinals.get(stepId);
-        if (ordinal === undefined) {
-            throw new EvidenceCaptureError('evidence.unknown-step', `Evidence references unknown step '${stepId}'`);
-        }
-        return ordinal;
-    }
-    release(candidate) {
-        this.bufferedBytes -= candidate.bytes.byteLength;
-        candidate.bytes = Buffer.alloc(0);
-    }
-    removeCandidates(candidates) {
-        const removed = new Set(candidates);
-        for (let index = this.pending.length - 1; index >= 0; index--) {
-            if (removed.has(this.pending[index]))
-                this.pending.splice(index, 1);
-        }
-    }
-    assertActive() {
-        if (this.lifecycle !== 'active')
-            throw new Error('Evidence store is not accepting evidence');
-    }
-    writeDiagnostic(code, artifact, error) {
-        const detail = error instanceof Error ? error.message : String(error);
-        const durability = error instanceof AtomicWriteError && error.durability === 'uncertain'
-            ? ' The destination was renamed, but durability was not confirmed; no reference was published.'
-            : '';
-        return {
-            code,
-            path: '/evidence',
-            message: this.redactor.redactDiagnosticText(`Could not commit ${artifact} evidence: ${detail}.${durability}`.trim()),
-        };
-    }
-    recordPersistenceDiagnostic(diagnostic) {
-        this.persistenceDiagnostics.push(diagnostic);
-    }
-}
-export class EvidenceCaptureError extends Error {
-    code;
-    constructor(code, message) {
-        super(message);
-        this.code = code;
-        this.name = 'EvidenceCaptureError';
-    }
-}
-function ownBytes(content) {
-    return typeof content === 'string' ? Buffer.from(content, 'utf8') : Buffer.from(content);
-}
-function candidateByteLength(content) {
-    return typeof content === 'string' ? Buffer.byteLength(content, 'utf8') : content.byteLength;
-}
-function structuredFormat(mediaType) {
-    const normalized = mediaType.split(';', 1)[0].trim().toLowerCase();
-    if (normalized === 'application/json' || normalized.endsWith('+json'))
-        return 'json';
-    if (['application/yaml', 'application/x-yaml', 'text/yaml', 'text/x-yaml'].includes(normalized))
-        return 'yaml';
-    return undefined;
-}
-function assertJsonValue(value) {
-    try {
-        serializeJson(value);
-    }
-    catch {
-        throw new EvidenceCaptureError('evidence.invalid-structured-content', 'Structured evidence must contain only JSON-compatible values');
-    }
-}
-function mergeDiagnostics(left, right) {
-    const merged = [];
-    const seen = new Set();
-    for (const diagnostic of [...left, ...right]) {
-        const key = `${diagnostic.code}\0${diagnostic.path}\0${diagnostic.message}`;
-        if (seen.has(key))
-            continue;
-        seen.add(key);
-        merged.push({ ...diagnostic });
-    }
-    return merged;
-}
-//# sourceMappingURL=store.js.map