@zxyycom/vibe-check 0.0.1

package/dist/esm/check-settlement/session.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.mjs","sourceRoot":"","sources":["../../../src/check-settlement/session.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,EAIhB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAyCnE,iFAAiF;AACjF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAmB,OAAe;QAChC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAaD,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,aAA+C;IAClE,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC9D,aAAa,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,aAAa,CAAC,+CAA+C,CAAC,CAAC;QACnF,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,aAAa,CAAC,iDAAiD,CAAC,CAAC;QACnE,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO;YACjC,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,WAAW,EAAE,IAAI,GAAG,EAAE;YACtB,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;YACjC,SAAS,EAAE,IAAI,GAAG,EAAE;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAChC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,MAAM,oBAAoB;IACf,MAAM,CAAa;IACnB,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,SAAS,CAA2B;IAEpC,YAAmB,aAA+C;QAChE,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC;IAEM,cAAc,CAAC,OAAe;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACzE,aAAa,CAAC,mCAAmC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;gBACrB,MAAM,EAAE,CAAC,QAAiB,EAAE,IAAa,EAA0B,EAAE;oBACnE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM;wBAAE,OAAO,UAAU,CAAC;oBACtF,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACxD,CAAC;aACF,CAAC;YACF,MAAM,EAAE,CAAC,OAAgB,EAAyB,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC;YAC1F,aAAa,EAAE,CAAC,OAAqB,EAAgB,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;SAC9F,CAAC,CAAC;IACL,CAAC;IAEM,uBAAuB,CAAC,OAAe;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,aAAa,CAAC,qCAAqC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;IAChC,CAAC;IAEM,0BAA0B;QAC/B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,aAAa,CAAC,wDAAwD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,IAAI,EACJ,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,CAAC,EACjF,IAAI,CACL,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAEM,MAAM;QACX,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QACxD,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,aAAa,CAAC,4DAA4D,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7B,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE;SACrD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,aAAa,CAAC,qCAAqC,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACvF,OAAO,IAAI,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IAC7E,CAAC;IAED,SAAS;QACP,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,WAAW,CAAC,IAAc,EAAE,OAAgB,EAAE,cAAuB;QACnE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACnE,OAAO,aAAa,CAAC,mEAAmE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC7D,CAAC;IAED,iBAAiB,CAAC,IAAc,EAAE,QAAiB;QACjD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACnE,OAAO,aAAa,CAAC,mEAAmE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,UAAU,GACd,UAAU,KAAK,SAAS;YACtB,CAAC,CAAC,qBAAqB,CAAC;gBACpB,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE;gBAC/B,cAAc,EAAE,KAAK;gBACrB,KAAK,EAAE,QAAQ;aAChB,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,UAAU,IAAI,WAAW,CAAC,UAAU,IAAI,0BAA0B,CAAC,CAAC;QACpF,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,oBAAoB,EAAE,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;YAC1E,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,IAAc,EAAE,QAAiB,EAAE,cAAc,GAAG,KAAK;QACvE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,aAAa,CAAC,0CAA0C,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GACX,UAAU,KAAK,SAAS;YACtB,CAAC,CAAC,CAAC,qBAAqB,CAAC;gBACrB,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE;gBAC/B,cAAc;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,IAAI,WAAW,CAAC,0BAA0B,CAAC,CAAC;YAChD,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,IAAc;IACxC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACtE,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,IAAc;IAClC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,aAAa,CAAC,yCAAyC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;QAChC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;QACxC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,aAA+C;IAE/C,OAAO,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;AACjD,CAAC","sourcesContent":["import type { CheckDescriptor } from \"../check/descriptor.ts\";\nimport type { CheckOutcome } from \"../check/check.ts\";\nimport {\n  CoreRecordStore,\n  type CoreRecordSlot,\n  type RecordDiagnostic,\n  type RecordSubmissionResult\n} from \"./record-store.ts\";\nimport type { CoreCheck, CoreSnapshot } from \"./facts.ts\";\nimport { validateCheckDescriptor } from \"../check/descriptor-validation.ts\";\nimport { normalizeCheckOutcome } from \"./outcome-normalization.ts\";\n\nexport type { RecordSubmissionResult } from \"./record-store.ts\";\n\nexport interface CoreCheckRegistration {\n  readonly definition: CheckDescriptor;\n}\n\n/** Internal Record port bound to one currently executing Check. */\nexport interface RecordSink {\n  report(identity: unknown, data: unknown): RecordSubmissionResult;\n}\n\n/** Only the Product Task adapter receives this Core lifecycle capability. */\nexport interface TrustedCheckScope {\n  readonly records: RecordSink;\n  /** Core is the only author-result validation/canonicalization boundary. */\n  readonly settle: (outcome: unknown) => AuthorCheckSettlement;\n  /** Private Product lifecycle outcomes may include contained prerequisite IDs. */\n  readonly settleProduct: (outcome: CheckOutcome) => CheckOutcome;\n}\n\n/** Core's private marker for an author result that survived every settlement guard. */\nexport interface AuthorCheckSettlement {\n  readonly authorResultAccepted: boolean;\n  readonly outcome: CheckOutcome;\n}\n\nexport interface CoreCheckSession {\n  openCheckScope(checkId: string): TrustedCheckScope;\n  readSettledCheckOutcome(checkId: string): CheckOutcome;\n  closeUnresolvedAsCancelled(): readonly CancelledCheckClosure[];\n  freeze(): CoreSnapshot;\n}\n\n/** Product-private cancellation facts emitted at the exact Core closure boundary. */\nexport interface CancelledCheckClosure {\n  readonly checkId: string;\n  readonly outcome: CheckOutcome;\n}\n\n/** A trusted integration bug is fatal to the invocation, not a Check outcome. */\nexport class CoreInvariantFailure extends Error {\n  public constructor(message: string) {\n    super(message);\n    this.name = \"CoreInvariantFailure\";\n  }\n}\n\ntype CoreSlotLifecycle = Readonly<\n  | { readonly kind: \"registered\" }\n  | { readonly kind: \"open\" }\n  | { readonly kind: \"settled\"; readonly outcome: CheckOutcome }\n>;\n\ninterface CoreSlot extends CoreRecordSlot {\n  readonly definition: CheckDescriptor;\n  lifecycle: CoreSlotLifecycle;\n}\n\nfunction compareText(left: string, right: string): number {\n  if (left < right) return -1;\n  if (left > right) return 1;\n  return 0;\n}\n\nfunction coreInvariant(message: string): never {\n  throw new CoreInvariantFailure(message);\n}\n\nfunction createSlots(registrations: readonly CoreCheckRegistration[]): CoreSlot[] {\n  const slots: CoreSlot[] = [];\n  const checkIds = new Set<string>();\n  for (const registration of registrations) {\n    if (registration === null || typeof registration !== \"object\") {\n      coreInvariant(\"Core Check registration is invalid\");\n    }\n    const definition = validateCheckDescriptor(registration.definition);\n    if (!definition.ok) coreInvariant(\"Core Check registration definition is invalid\");\n    if (checkIds.has(definition.value.checkId)) {\n      coreInvariant(\"Core Check registration has a duplicate checkId\");\n    }\n    checkIds.add(definition.value.checkId);\n    slots.push({\n      checkId: definition.value.checkId,\n      definition: definition.value,\n      diagnostics: new Set(),\n      lifecycle: { kind: \"registered\" },\n      recordIds: new Set()\n    });\n  }\n  return slots.sort((left, right) =>\n    compareText(left.definition.checkId, right.definition.checkId)\n  );\n}\n\nclass CoreCheckSessionImpl implements CoreCheckSession {\n  readonly #slots: CoreSlot[];\n  readonly #recordStore = new CoreRecordStore();\n  #snapshot: CoreSnapshot | undefined;\n\n  public constructor(registrations: readonly CoreCheckRegistration[]) {\n    this.#slots = createSlots(registrations);\n  }\n\n  public openCheckScope(checkId: string): TrustedCheckScope {\n    const slot = this.#slotFor(checkId);\n    if (this.#snapshot !== undefined || slot.lifecycle.kind !== \"registered\") {\n      coreInvariant(\"Core Check scope is not available\");\n    }\n    slot.lifecycle = Object.freeze({ kind: \"open\" });\n    return Object.freeze({\n      records: Object.freeze({\n        report: (identity: unknown, data: unknown): RecordSubmissionResult => {\n          if (this.#snapshot !== undefined || slot.lifecycle.kind !== \"open\") return \"rejected\";\n          return this.#recordStore.report(slot, identity, data);\n        }\n      }),\n      settle: (outcome: unknown): AuthorCheckSettlement => this.#settleAuthorSlot(slot, outcome),\n      settleProduct: (outcome: CheckOutcome): CheckOutcome => this.#settleSlot(slot, outcome, true)\n    });\n  }\n\n  public readSettledCheckOutcome(checkId: string): CheckOutcome {\n    const slot = this.#slotFor(checkId);\n    if (slot.lifecycle.kind !== \"settled\") {\n      coreInvariant(\"Core settled Check is not available\");\n    }\n    return slot.lifecycle.outcome;\n  }\n\n  public closeUnresolvedAsCancelled(): readonly CancelledCheckClosure[] {\n    if (this.#snapshot !== undefined) {\n      coreInvariant(\"Cancelled closure cannot mutate a frozen Core snapshot\");\n    }\n    const closures: CancelledCheckClosure[] = [];\n    for (const slot of this.#slots) {\n      if (slot.lifecycle.kind !== \"settled\") {\n        const outcome = this.#commitTerminal(\n          slot,\n          Object.freeze({ status: \"unavailable\", reason: { code: \"execution-cancelled\" } }),\n          true\n        );\n        closures.push(Object.freeze({ checkId: slot.checkId, outcome }));\n      }\n    }\n    return Object.freeze(closures);\n  }\n\n  public freeze(): CoreSnapshot {\n    if (this.#snapshot !== undefined) return this.#snapshot;\n    const checks: CoreCheck[] = [];\n    for (const slot of this.#slots) {\n      if (slot.lifecycle.kind !== \"settled\") {\n        return coreInvariant(\"Core snapshot cannot freeze before every Check slot closes\");\n      }\n      checks.push(coreCheckFor(slot));\n    }\n    this.#snapshot = Object.freeze({\n      checks: Object.freeze(checks),\n      records: this.#recordStore.recordsInCanonicalOrder()\n    });\n    return this.#snapshot;\n  }\n\n  #slotFor(checkId: string): CoreSlot {\n    if (typeof checkId !== \"string\") coreInvariant(\"Core Check scope requires a checkId\");\n    const slot = this.#slots.find((candidate) => candidate.definition.checkId === checkId);\n    return slot ?? coreInvariant(\"Core Check scope does not own this checkId\");\n  }\n\n  #checkIds(): ReadonlySet<string> {\n    return new Set(this.#slots.map((candidate) => candidate.checkId));\n  }\n\n  #settleSlot(slot: CoreSlot, outcome: unknown, productOutcome: boolean): CheckOutcome {\n    if (this.#snapshot !== undefined || slot.lifecycle.kind !== \"open\") {\n      return coreInvariant(\"Trusted Core Check settlement is duplicate, late, or out of scope\");\n    }\n    return this.#commitTerminal(slot, outcome, productOutcome);\n  }\n\n  #settleAuthorSlot(slot: CoreSlot, terminal: unknown): AuthorCheckSettlement {\n    if (this.#snapshot !== undefined || slot.lifecycle.kind !== \"open\") {\n      return coreInvariant(\"Trusted Core Check settlement is duplicate, late, or out of scope\");\n    }\n    const diagnostic = terminalDiagnostic(slot);\n    const normalized =\n      diagnostic === undefined\n        ? normalizeCheckOutcome({\n            knownCheckIds: this.#checkIds(),\n            productOutcome: false,\n            value: terminal\n          })\n        : undefined;\n    const outcome = normalized ?? unavailable(diagnostic ?? \"invalid-execution-result\");\n    slot.lifecycle = Object.freeze({ kind: \"settled\", outcome });\n    return Object.freeze({\n      authorResultAccepted: diagnostic === undefined && normalized !== undefined,\n      outcome\n    });\n  }\n\n  #commitTerminal(slot: CoreSlot, terminal: unknown, productOutcome = false): CheckOutcome {\n    if (slot.lifecycle.kind === \"settled\") {\n      coreInvariant(\"Core Check terminal closure is duplicate\");\n    }\n    const diagnostic = terminalDiagnostic(slot);\n    const outcome =\n      diagnostic === undefined\n        ? (normalizeCheckOutcome({\n            knownCheckIds: this.#checkIds(),\n            productOutcome,\n            value: terminal\n          }) ?? unavailable(\"invalid-execution-result\"))\n        : unavailable(diagnostic);\n    slot.lifecycle = Object.freeze({ kind: \"settled\", outcome });\n    return outcome;\n  }\n}\n\nfunction terminalDiagnostic(slot: CoreSlot): RecordDiagnostic | undefined {\n  if (slot.diagnostics.has(\"record-conflict\")) return \"record-conflict\";\n  if (slot.diagnostics.has(\"record-invalid\")) return \"record-invalid\";\n  return undefined;\n}\n\nfunction coreCheckFor(slot: CoreSlot): CoreCheck {\n  if (slot.lifecycle.kind !== \"settled\") {\n    coreInvariant(\"Core Check fact requires a settled slot\");\n  }\n  return Object.freeze({\n    checkId: slot.definition.checkId,\n    displayName: slot.definition.displayName,\n    outcome: slot.lifecycle.outcome\n  });\n}\n\nfunction unavailable(code: string): CheckOutcome {\n  return Object.freeze({ status: \"unavailable\", reason: Object.freeze({ code }) });\n}\n\nexport function createCoreCheckSession(\n  registrations: readonly CoreCheckRegistration[]\n): CoreCheckSession {\n  return new CoreCheckSessionImpl(registrations);\n}\n"]}

package/dist/esm/data-boundary/canonical-data.mjs

@@ -0,0 +1,159 @@
+const encoder = new TextEncoder();
+/**
+ * Materializes arbitrary author data without property reads or JSON hooks.
+ * The returned graph is detached, prototype-safe, and deeply frozen before it
+ * becomes a Core fact. Canonical text order is applied explicitly at serialization.
+ */
+export function canonicalizeJsonObject(value) {
+    const canonical = canonicalize(value, new Set());
+    return canonical !== undefined && isCanonicalJsonObject(canonical) ? canonical : undefined;
+}
+export function canonicalizeJsonValue(value) {
+    return canonicalize(value, new Set());
+}
+/** Serializes detached canonical JSON with explicit lexical object-key ordering. */
+export function canonicalJsonText(value) {
+    const canonical = canonicalizeJsonValue(value);
+    if (canonical === undefined) {
+        throw new TypeError("Canonical JSON could not safely materialize the input");
+    }
+    return canonicalText(canonical);
+}
+/** Emits canonical UTF-8 JSON without invoking author getters or `toJSON`. */
+export function canonicalJsonBytes(value) {
+    return encoder.encode(canonicalJsonText(value));
+}
+function canonicalize(value, ancestors) {
+    if (value === null)
+        return null;
+    const primitive = canonicalPrimitive(value);
+    if (primitive !== undefined)
+        return primitive;
+    if (typeof value !== "object")
+        return undefined;
+    if (!admitCanonicalObject(value, ancestors))
+        return undefined;
+    try {
+        return Array.isArray(value)
+            ? canonicalizeArray(value, ancestors)
+            : canonicalizeObject(value, ancestors);
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        ancestors.delete(value);
+    }
+}
+function canonicalPrimitive(value) {
+    if (typeof value === "boolean" || typeof value === "string")
+        return value;
+    if (typeof value !== "number" || !Number.isFinite(value))
+        return undefined;
+    return Object.is(value, -0) ? 0 : value;
+}
+function admitCanonicalObject(value, ancestors) {
+    if (ancestors.has(value))
+        return false;
+    ancestors.add(value);
+    return true;
+}
+function canonicalizeArray(value, ancestors) {
+    const length = denseCanonicalArrayLength(value);
+    if (length === undefined)
+        return undefined;
+    return canonicalArrayElements(value, length, ancestors);
+}
+function denseCanonicalArrayLength(value) {
+    if (Object.getPrototypeOf(value) !== Array.prototype)
+        return undefined;
+    const keys = Reflect.ownKeys(value);
+    const lengthDescriptor = Object.getOwnPropertyDescriptor(value, "length");
+    if (!isDataDescriptor(lengthDescriptor) || lengthDescriptor.enumerable)
+        return undefined;
+    const length = lengthDescriptor.value;
+    if (typeof length !== "number" ||
+        !Number.isSafeInteger(length) ||
+        length < 0 ||
+        keys.length !== length + 1)
+        return undefined;
+    if (!keys.includes("length"))
+        return undefined;
+    return length;
+}
+function canonicalArrayElements(value, length, ancestors) {
+    const values = [];
+    for (let index = 0; index < length; index += 1) {
+        const key = String(index);
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (!isEnumerableDataDescriptor(descriptor))
+            return undefined;
+        const item = canonicalize(descriptor.value, ancestors);
+        if (item === undefined)
+            return undefined;
+        values.push(item);
+    }
+    return Object.freeze(values);
+}
+function canonicalizeObject(value, ancestors) {
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null)
+        return undefined;
+    const keys = [];
+    for (const key of Reflect.ownKeys(value)) {
+        if (typeof key !== "string")
+            return undefined;
+        keys.push(key);
+    }
+    const snapshot = {};
+    Object.setPrototypeOf(snapshot, null);
+    for (const key of keys.sort(compareText)) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (!isEnumerableDataDescriptor(descriptor))
+            return undefined;
+        const item = canonicalize(descriptor.value, ancestors);
+        if (item === undefined)
+            return undefined;
+        Object.defineProperty(snapshot, key, {
+            configurable: false,
+            enumerable: true,
+            value: item,
+            writable: false
+        });
+    }
+    return Object.freeze(snapshot);
+}
+function isDataDescriptor(descriptor) {
+    return (descriptor !== undefined &&
+        descriptor.get === undefined &&
+        descriptor.set === undefined &&
+        Object.hasOwn(descriptor, "value"));
+}
+function isEnumerableDataDescriptor(descriptor) {
+    return isDataDescriptor(descriptor) && descriptor.enumerable === true;
+}
+function isCanonicalJsonObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function canonicalText(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value);
+    if (isCanonicalJsonArray(value)) {
+        return `[${value.map((entry) => canonicalText(entry)).join(",")}]`;
+    }
+    return `{${Object.keys(value)
+        .sort(compareText)
+        .map((key) => `${JSON.stringify(key)}:${canonicalText(value[key])}`)
+        .join(",")}}`;
+}
+function isCanonicalJsonArray(value) {
+    return Array.isArray(value);
+}
+function compareText(left, right) {
+    if (left < right)
+        return -1;
+    if (left > right)
+        return 1;
+    return 0;
+}
+//# sourceMappingURL=canonical-data.mjs.map

package/dist/esm/data-boundary/canonical-data.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-data.mjs","sourceRoot":"","sources":["../../../src/data-boundary/canonical-data.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;IACzD,OAAO,SAAS,KAAK,SAAS,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;AAChD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,SAAsB;IAC1D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9D,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC;YACrC,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,SAAsB;IACjE,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAyB,EACzB,SAAsB;IAEtB,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAyB;IAC1D,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,gBAAgB,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IACzF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC;IACtC,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAC7B,MAAM,GAAG,CAAC;QACV,IAAI,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC;QAE1B,OAAO,SAAS,CAAC;IACnB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAyB,EACzB,MAAc,EACd,SAAsB;IAEtB,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAa,EACb,SAAsB;IAEtB,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC3E,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAuC,EAAE,CAAC;IACxD,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE;YACnC,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AASD,SAAS,gBAAgB,CACvB,UAA0C;IAE1C,OAAO,CACL,UAAU,KAAK,SAAS;QACxB,UAAU,CAAC,GAAG,KAAK,SAAS;QAC5B,UAAU,CAAC,GAAG,KAAK,SAAS;QAC5B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,UAA0C;IAE1C,OAAO,gBAAgB,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAyB;IACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1B,IAAI,CAAC,WAAW,CAAC;SACjB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;SACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAyB;IACrD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC","sourcesContent":["import type { CanonicalJsonObject, CanonicalJsonValue } from \"./canonical-json.ts\";\n\nexport type {\n  CanonicalJsonObject,\n  CanonicalJsonPrimitive,\n  CanonicalJsonValue\n} from \"./canonical-json.ts\";\n\nconst encoder = new TextEncoder();\n\n/**\n * Materializes arbitrary author data without property reads or JSON hooks.\n * The returned graph is detached, prototype-safe, and deeply frozen before it\n * becomes a Core fact. Canonical text order is applied explicitly at serialization.\n */\nexport function canonicalizeJsonObject(value: unknown): CanonicalJsonObject | undefined {\n  const canonical = canonicalize(value, new Set<object>());\n  return canonical !== undefined && isCanonicalJsonObject(canonical) ? canonical : undefined;\n}\n\nexport function canonicalizeJsonValue(value: unknown): CanonicalJsonValue | undefined {\n  return canonicalize(value, new Set<object>());\n}\n\n/** Serializes detached canonical JSON with explicit lexical object-key ordering. */\nexport function canonicalJsonText(value: unknown): string {\n  const canonical = canonicalizeJsonValue(value);\n  if (canonical === undefined) {\n    throw new TypeError(\"Canonical JSON could not safely materialize the input\");\n  }\n  return canonicalText(canonical);\n}\n\n/** Emits canonical UTF-8 JSON without invoking author getters or `toJSON`. */\nexport function canonicalJsonBytes(value: unknown): Uint8Array {\n  return encoder.encode(canonicalJsonText(value));\n}\n\nfunction canonicalize(value: unknown, ancestors: Set<object>): CanonicalJsonValue | undefined {\n  if (value === null) return null;\n  const primitive = canonicalPrimitive(value);\n  if (primitive !== undefined) return primitive;\n  if (typeof value !== \"object\") return undefined;\n  if (!admitCanonicalObject(value, ancestors)) return undefined;\n\n  try {\n    return Array.isArray(value)\n      ? canonicalizeArray(value, ancestors)\n      : canonicalizeObject(value, ancestors);\n  } catch {\n    return undefined;\n  } finally {\n    ancestors.delete(value);\n  }\n}\n\nfunction canonicalPrimitive(value: unknown): CanonicalJsonValue | undefined {\n  if (typeof value === \"boolean\" || typeof value === \"string\") return value;\n  if (typeof value !== \"number\" || !Number.isFinite(value)) return undefined;\n  return Object.is(value, -0) ? 0 : value;\n}\n\nfunction admitCanonicalObject(value: object, ancestors: Set<object>): boolean {\n  if (ancestors.has(value)) return false;\n  ancestors.add(value);\n  return true;\n}\n\nfunction canonicalizeArray(\n  value: readonly unknown[],\n  ancestors: Set<object>\n): readonly CanonicalJsonValue[] | undefined {\n  const length = denseCanonicalArrayLength(value);\n  if (length === undefined) return undefined;\n  return canonicalArrayElements(value, length, ancestors);\n}\n\nfunction denseCanonicalArrayLength(value: readonly unknown[]): number | undefined {\n  if (Object.getPrototypeOf(value) !== Array.prototype) return undefined;\n  const keys = Reflect.ownKeys(value);\n  const lengthDescriptor = Object.getOwnPropertyDescriptor(value, \"length\");\n  if (!isDataDescriptor(lengthDescriptor) || lengthDescriptor.enumerable) return undefined;\n  const length = lengthDescriptor.value;\n  if (\n    typeof length !== \"number\" ||\n    !Number.isSafeInteger(length) ||\n    length < 0 ||\n    keys.length !== length + 1\n  )\n    return undefined;\n  if (!keys.includes(\"length\")) return undefined;\n  return length;\n}\n\nfunction canonicalArrayElements(\n  value: readonly unknown[],\n  length: number,\n  ancestors: Set<object>\n): readonly CanonicalJsonValue[] | undefined {\n  const values: CanonicalJsonValue[] = [];\n  for (let index = 0; index < length; index += 1) {\n    const key = String(index);\n    const descriptor = Object.getOwnPropertyDescriptor(value, key);\n    if (!isEnumerableDataDescriptor(descriptor)) return undefined;\n    const item = canonicalize(descriptor.value, ancestors);\n    if (item === undefined) return undefined;\n    values.push(item);\n  }\n  return Object.freeze(values);\n}\n\nfunction canonicalizeObject(\n  value: object,\n  ancestors: Set<object>\n): CanonicalJsonObject | undefined {\n  const prototype: unknown = Object.getPrototypeOf(value);\n  if (prototype !== Object.prototype && prototype !== null) return undefined;\n  const keys: string[] = [];\n  for (const key of Reflect.ownKeys(value)) {\n    if (typeof key !== \"string\") return undefined;\n    keys.push(key);\n  }\n\n  const snapshot: Record<string, CanonicalJsonValue> = {};\n  Object.setPrototypeOf(snapshot, null);\n  for (const key of keys.sort(compareText)) {\n    const descriptor = Object.getOwnPropertyDescriptor(value, key);\n    if (!isEnumerableDataDescriptor(descriptor)) return undefined;\n    const item = canonicalize(descriptor.value, ancestors);\n    if (item === undefined) return undefined;\n    Object.defineProperty(snapshot, key, {\n      configurable: false,\n      enumerable: true,\n      value: item,\n      writable: false\n    });\n  }\n  return Object.freeze(snapshot);\n}\n\ntype DataDescriptor = Omit<PropertyDescriptor, \"get\" | \"set\" | \"value\"> &\n  Readonly<{\n    get?: undefined;\n    set?: undefined;\n    value: unknown;\n  }>;\n\nfunction isDataDescriptor(\n  descriptor: PropertyDescriptor | undefined\n): descriptor is DataDescriptor {\n  return (\n    descriptor !== undefined &&\n    descriptor.get === undefined &&\n    descriptor.set === undefined &&\n    Object.hasOwn(descriptor, \"value\")\n  );\n}\n\nfunction isEnumerableDataDescriptor(\n  descriptor: PropertyDescriptor | undefined\n): descriptor is DataDescriptor {\n  return isDataDescriptor(descriptor) && descriptor.enumerable === true;\n}\n\nfunction isCanonicalJsonObject(value: CanonicalJsonValue): value is CanonicalJsonObject {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction canonicalText(value: CanonicalJsonValue): string {\n  if (value === null || typeof value !== \"object\") return JSON.stringify(value);\n  if (isCanonicalJsonArray(value)) {\n    return `[${value.map((entry) => canonicalText(entry)).join(\",\")}]`;\n  }\n  return `{${Object.keys(value)\n    .sort(compareText)\n    .map((key) => `${JSON.stringify(key)}:${canonicalText(value[key])}`)\n    .join(\",\")}}`;\n}\n\nfunction isCanonicalJsonArray(value: CanonicalJsonValue): value is readonly CanonicalJsonValue[] {\n  return Array.isArray(value);\n}\n\nfunction compareText(left: string, right: string): number {\n  if (left < right) return -1;\n  if (left > right) return 1;\n  return 0;\n}\n"]}

package/dist/esm/data-boundary/canonical-json.mjs

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=canonical-json.mjs.map

package/dist/esm/data-boundary/canonical-json.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.mjs","sourceRoot":"","sources":["../../../src/data-boundary/canonical-json.ts"],"names":[],"mappings":"","sourcesContent":["/** Package-private static shape for Product's detached canonical JSON facts. */\nexport type CanonicalJsonPrimitive = boolean | null | number | string;\n\nexport type CanonicalJsonValue =\n  | CanonicalJsonPrimitive\n  | readonly CanonicalJsonValue[]\n  | CanonicalJsonObject;\n\nexport interface CanonicalJsonObject {\n  readonly [key: string]: CanonicalJsonValue;\n}\n"]}

package/dist/esm/data-boundary/closed-values.mjs

@@ -0,0 +1,98 @@
+function ownDataShape(value) {
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    const ownKeys = Reflect.ownKeys(descriptors);
+    const keys = [];
+    for (const key of ownKeys) {
+        if (typeof key !== "string")
+            return undefined;
+        keys.push(key);
+    }
+    if (keys.some((key) => {
+        const descriptor = descriptors[key];
+        return descriptor.get !== undefined || descriptor.set !== undefined;
+    }))
+        return undefined;
+    return { descriptors, keys };
+}
+export function snapshotPlainRecord(value) {
+    try {
+        if (value === null || typeof value !== "object" || Array.isArray(value)) {
+            return undefined;
+        }
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null) {
+            return undefined;
+        }
+        const descriptors = Object.getOwnPropertyDescriptors(value);
+        if (Object.values(descriptors).some((descriptor) => descriptor.get !== undefined || descriptor.set !== undefined)) {
+            return undefined;
+        }
+        return Object.fromEntries(Object.entries(descriptors)
+            .filter(([, descriptor]) => descriptor.enumerable === true)
+            .map(([key, descriptor]) => [key, descriptor.value]));
+    }
+    catch {
+        return undefined;
+    }
+}
+export function snapshotClosedRecord(value) {
+    try {
+        if (value === null || typeof value !== "object" || Array.isArray(value))
+            return undefined;
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null)
+            return undefined;
+        const shape = ownDataShape(value);
+        if (shape === undefined ||
+            shape.keys.some((key) => shape.descriptors[key].enumerable !== true)) {
+            return undefined;
+        }
+        return Object.freeze(Object.fromEntries(shape.keys.map((key) => [key, shape.descriptors[key].value])));
+    }
+    catch {
+        return undefined;
+    }
+}
+function closedArrayLength(shape) {
+    const descriptor = shape.descriptors.length;
+    if (typeof descriptor?.value !== "number" || descriptor.enumerable !== false)
+        return undefined;
+    const length = descriptor.value;
+    return Number.isSafeInteger(length) && length >= 0 && shape.keys.length === length + 1
+        ? length
+        : undefined;
+}
+function closedArrayItems(shape, length) {
+    const items = [];
+    for (let index = 0; index < length; index += 1) {
+        const descriptor = shape.descriptors[String(index)];
+        if (descriptor === undefined || descriptor.enumerable !== true)
+            return undefined;
+        items.push(descriptor.value);
+    }
+    return Object.freeze(items);
+}
+export function snapshotClosedArray(value) {
+    try {
+        if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype)
+            return undefined;
+        const shape = ownDataShape(value);
+        if (shape === undefined)
+            return undefined;
+        const length = closedArrayLength(shape);
+        return length === undefined ? undefined : closedArrayItems(shape, length);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function hasExactPlainRecordKeys(value, keys) {
+    const actualKeys = Object.keys(value);
+    return actualKeys.length === keys.length && actualKeys.every((key) => keys.includes(key));
+}
+export function hasRequiredAndOptionalRecordKeys(value, keys) {
+    const supportedKeys = new Set([...keys.required, ...keys.optional]);
+    return (keys.required.every((key) => Object.hasOwn(value, key)) &&
+        Object.keys(value).every((key) => supportedKeys.has(key)));
+}
+//# sourceMappingURL=closed-values.mjs.map

package/dist/esm/data-boundary/closed-values.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"closed-values.mjs","sourceRoot":"","sources":["../../../src/data-boundary/closed-values.ts"],"names":[],"mappings":"AAKA,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,WAAW,GACf,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,IACE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAChB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,CAAC;IACtE,CAAC,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,WAAW,GACf,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC1C,IACE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAC7B,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,CAC7E,EACD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC;aAC1D,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAgB,CAAC,CAAC,CAClE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc;IAEd,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1F,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC3E,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAClC,IACE,KAAK,KAAK,SAAS;YACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,EACpE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAgB,CAAC,CAAC,CAAC,CAC5F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAmB;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;IAC5C,IAAI,OAAO,UAAU,EAAE,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC/F,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC;QACpF,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB,EAAE,MAAc;IAC3D,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAgB,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QAChG,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAwC,EACxC,IAAuB;IAEvB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAwC,EACxC,IAGE;IAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpE,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC","sourcesContent":["interface OwnDataShape {\n  readonly descriptors: Readonly<Record<string, PropertyDescriptor>>;\n  readonly keys: readonly string[];\n}\n\nfunction ownDataShape(value: object): OwnDataShape | undefined {\n  const descriptors: Readonly<Record<string, PropertyDescriptor>> =\n    Object.getOwnPropertyDescriptors(value);\n  const ownKeys = Reflect.ownKeys(descriptors);\n  const keys: string[] = [];\n  for (const key of ownKeys) {\n    if (typeof key !== \"string\") return undefined;\n    keys.push(key);\n  }\n  if (\n    keys.some((key) => {\n      const descriptor = descriptors[key];\n      return descriptor.get !== undefined || descriptor.set !== undefined;\n    })\n  )\n    return undefined;\n  return { descriptors, keys };\n}\n\nexport function snapshotPlainRecord(value: unknown): Readonly<Record<string, unknown>> | undefined {\n  try {\n    if (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n      return undefined;\n    }\n    const prototype: unknown = Object.getPrototypeOf(value);\n    if (prototype !== Object.prototype && prototype !== null) {\n      return undefined;\n    }\n    const descriptors: Readonly<Record<string, PropertyDescriptor>> =\n      Object.getOwnPropertyDescriptors(value);\n    if (\n      Object.values(descriptors).some(\n        (descriptor) => descriptor.get !== undefined || descriptor.set !== undefined\n      )\n    ) {\n      return undefined;\n    }\n    return Object.fromEntries(\n      Object.entries(descriptors)\n        .filter(([, descriptor]) => descriptor.enumerable === true)\n        .map(([key, descriptor]) => [key, descriptor.value as unknown])\n    );\n  } catch {\n    return undefined;\n  }\n}\n\nexport function snapshotClosedRecord(\n  value: unknown\n): Readonly<Record<string, unknown>> | undefined {\n  try {\n    if (value === null || typeof value !== \"object\" || Array.isArray(value)) return undefined;\n    const prototype: unknown = Object.getPrototypeOf(value);\n    if (prototype !== Object.prototype && prototype !== null) return undefined;\n    const shape = ownDataShape(value);\n    if (\n      shape === undefined ||\n      shape.keys.some((key) => shape.descriptors[key].enumerable !== true)\n    ) {\n      return undefined;\n    }\n    return Object.freeze(\n      Object.fromEntries(shape.keys.map((key) => [key, shape.descriptors[key].value as unknown]))\n    );\n  } catch {\n    return undefined;\n  }\n}\n\nfunction closedArrayLength(shape: OwnDataShape): number | undefined {\n  const descriptor = shape.descriptors.length;\n  if (typeof descriptor?.value !== \"number\" || descriptor.enumerable !== false) return undefined;\n  const length = descriptor.value;\n  return Number.isSafeInteger(length) && length >= 0 && shape.keys.length === length + 1\n    ? length\n    : undefined;\n}\n\nfunction closedArrayItems(shape: OwnDataShape, length: number): readonly unknown[] | undefined {\n  const items: unknown[] = [];\n  for (let index = 0; index < length; index += 1) {\n    const descriptor = shape.descriptors[String(index)];\n    if (descriptor === undefined || descriptor.enumerable !== true) return undefined;\n    items.push(descriptor.value as unknown);\n  }\n  return Object.freeze(items);\n}\n\nexport function snapshotClosedArray(value: unknown): readonly unknown[] | undefined {\n  try {\n    if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype) return undefined;\n    const shape = ownDataShape(value);\n    if (shape === undefined) return undefined;\n    const length = closedArrayLength(shape);\n    return length === undefined ? undefined : closedArrayItems(shape, length);\n  } catch {\n    return undefined;\n  }\n}\n\nexport function hasExactPlainRecordKeys(\n  value: Readonly<Record<string, unknown>>,\n  keys: readonly string[]\n): boolean {\n  const actualKeys = Object.keys(value);\n  return actualKeys.length === keys.length && actualKeys.every((key) => keys.includes(key));\n}\n\nexport function hasRequiredAndOptionalRecordKeys(\n  value: Readonly<Record<string, unknown>>,\n  keys: Readonly<{\n    readonly optional: readonly string[];\n    readonly required: readonly string[];\n  }>\n): boolean {\n  const supportedKeys = new Set([...keys.required, ...keys.optional]);\n  return (\n    keys.required.every((key) => Object.hasOwn(value, key)) &&\n    Object.keys(value).every((key) => supportedKeys.has(key))\n  );\n}\n"]}

package/dist/esm/data-boundary/value-shapes.mjs

@@ -0,0 +1,13 @@
+export function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+export function isNonArrayRecord(value) {
+    return isRecord(value) && !Array.isArray(value);
+}
+export function isUnknownArray(value) {
+    return Array.isArray(value);
+}
+export function isStringArray(value) {
+    return isUnknownArray(value) && value.every((item) => typeof item === "string");
+}
+//# sourceMappingURL=value-shapes.mjs.map

package/dist/esm/data-boundary/value-shapes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"value-shapes.mjs","sourceRoot":"","sources":["../../../src/data-boundary/value-shapes.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AAClF,CAAC","sourcesContent":["export function isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nexport function isNonArrayRecord(value: unknown): value is Record<string, unknown> {\n  return isRecord(value) && !Array.isArray(value);\n}\n\nexport function isUnknownArray(value: unknown): value is unknown[] {\n  return Array.isArray(value);\n}\n\nexport function isStringArray(value: unknown): value is string[] {\n  return isUnknownArray(value) && value.every((item) => typeof item === \"string\");\n}\n"]}

package/dist/esm/finding-waivers/reconciliation.mjs

@@ -0,0 +1,84 @@
+import { canonicalizeJsonValue, canonicalJsonText } from "../data-boundary/canonical-data.mjs";
+/**
+ * 按调用方定义的语义身份对完整 finding 集合和 waiver 配置做 canonical structural reconciliation。
+ *
+ * 每项 waiver 必须有唯一、可 canonicalize 的 identity 和非空 reason。匹配零项时产生 `unused` 审计；
+ * 匹配一项时该 finding 为 `waived`；匹配多项时产生 `overmatched` 审计，相关 finding 保持待处理。
+ */
+export function reconcileFindingWaivers(options) {
+    const waivers = materializeWaivers(options.waivers);
+    const matchCounts = new Array(waivers.length).fill(0);
+    const waiverIndexesByIdentity = new Map();
+    for (const [index, waiver] of waivers.entries()) {
+        const identity = canonicalIdentity(waiver.identity, "waiver identity");
+        if (waiverIndexesByIdentity.has(identity)) {
+            throw new TypeError("Finding waivers must not declare duplicate canonical identities");
+        }
+        waiverIndexesByIdentity.set(identity, index);
+    }
+    const matchedWaiverIndexes = options.findings.map((finding) => {
+        const identity = canonicalIdentity(options.identify(finding), "finding identity");
+        const waiverIndex = waiverIndexesByIdentity.get(identity);
+        if (waiverIndex !== undefined)
+            matchCounts[waiverIndex] += 1;
+        return waiverIndex;
+    });
+    const waiverAudits = Object.freeze(waivers.map((waiver, index) => Object.freeze({
+        matchCount: matchCounts[index] ?? 0,
+        status: waiverAuditStatus(matchCounts[index] ?? 0),
+        waiver
+    })));
+    const findings = Object.freeze(options.findings.map((finding, index) => {
+        const waiverIndex = matchedWaiverIndexes[index];
+        const audit = waiverIndex === undefined ? undefined : waiverAudits[waiverIndex];
+        return reconciledFinding(finding, audit);
+    }));
+    return Object.freeze({ findings, waiverAudits });
+}
+function materializeWaivers(waivers) {
+    const canonicalWaivers = canonicalizeJsonValue(waivers);
+    if (canonicalWaivers === undefined || !isCanonicalArray(canonicalWaivers)) {
+        throw new TypeError("Finding waivers must be canonical JSON arrays");
+    }
+    return Object.freeze(canonicalWaivers.map(materializeWaiver));
+}
+function materializeWaiver(value) {
+    if (!isCanonicalObject(value) ||
+        !Object.hasOwn(value, "identity") ||
+        !Object.hasOwn(value, "reason")) {
+        throw new TypeError("Finding waivers must declare canonical identity and reason fields");
+    }
+    const reason = value.reason;
+    if (typeof reason !== "string" || reason.length === 0) {
+        throw new TypeError("Finding waiver reasons must be non-empty strings");
+    }
+    return Object.freeze({ identity: value.identity, reason });
+}
+function isCanonicalObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isCanonicalArray(value) {
+    return Array.isArray(value);
+}
+function canonicalIdentity(identity, kind) {
+    try {
+        return canonicalJsonText(identity);
+    }
+    catch {
+        throw new TypeError(`Finding ${kind} must be canonical JSON`);
+    }
+}
+function waiverAuditStatus(matchCount) {
+    if (matchCount === 0)
+        return "unused";
+    return matchCount === 1 ? "applied" : "overmatched";
+}
+function reconciledFinding(finding, audit) {
+    if (audit === undefined)
+        return Object.freeze({ disposition: "actionable", finding });
+    if (audit.status === "applied") {
+        return Object.freeze({ disposition: "waived", finding, waiver: audit.waiver });
+    }
+    return Object.freeze({ disposition: "overmatched", finding });
+}
+//# sourceMappingURL=reconciliation.mjs.map

package/dist/esm/finding-waivers/reconciliation.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation.mjs","sourceRoot":"","sources":["../../../src/finding-waivers/reconciliation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EAGlB,MAAM,oCAAoC,CAAC;AAsE5C;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAA0D;IAE1D,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,KAAK,CAAS,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1D,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACvE,IAAI,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;QACzF,CAAC;QACD,uBAAuB,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,WAAW,KAAK,SAAS;YAAE,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAChC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAC5B,MAAM,CAAC,MAAM,CAAC;QACZ,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;QACnC,MAAM,EAAE,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM;KACP,CAAC,CACH,CACF,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACtC,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAChF,OAAO,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CACH,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA2C;IAE3C,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,gBAAgB,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IACE,CAAC,iBAAiB,CAAC,KAAK,CAAC;QACzB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC;QACjC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAiB,EAAE,IAAY;IACxD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,yBAAyB,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtC,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAgB,EAChB,KAAqC;IAErC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;AAChE,CAAC","sourcesContent":["import {\n  canonicalizeJsonValue,\n  canonicalJsonText,\n  type CanonicalJsonObject,\n  type CanonicalJsonValue\n} from \"../data-boundary/canonical-data.ts\";\n\n/** 由采用方声明、用于匹配一个 finding 的语义身份与豁免理由。 */\nexport interface FindingWaiver<Identity> {\n  /** 调用方定义的稳定 finding 身份；匹配时按 canonical JSON 结构比较。 */\n  readonly identity: Identity;\n  /** 解释该 finding 在当前范围内可被豁免的非空理由。 */\n  readonly reason: string;\n}\n\n/** helper 安全 materialize 后保留的 waiver evidence；identity 是 detached canonical JSON。 */\nexport interface MaterializedFindingWaiver {\n  /** 从 authored identity materialize 的 detached、deep-frozen canonical JSON。 */\n  readonly identity: CanonicalJsonValue;\n  /** 从 authored reason materialize 的非空理由。 */\n  readonly reason: string;\n}\n\n/** 一项 finding waiver 的配置与匹配次数审计。 */\nexport interface FindingWaiverAudit {\n  /** 被审计的 materialized authored waiver evidence，而非调用方可变输入引用。 */\n  readonly waiver: MaterializedFindingWaiver;\n  /** 该 waiver identity 在完整 finding 集合中匹配到的数量。 */\n  readonly matchCount: number;\n  /** 未使用、正常应用，或因过宽而没有应用。 */\n  readonly status: \"unused\" | \"applied\" | \"overmatched\";\n}\n\n/** reconciliation 后单个 finding 的可执行处置；只有 `waived` branch 携带 matched waiver。 */\nexport type ReconciledFinding<Finding> = Readonly<\n  | {\n      /** 原始 finding；helper 不解释或改写它的领域字段。 */\n      readonly finding: Finding;\n      /** 没有匹配 waiver 的正常待处理 finding。 */\n      readonly disposition: \"actionable\";\n    }\n  | {\n      /** 原始 finding；helper 不解释或改写它的领域字段。 */\n      readonly finding: Finding;\n      /** 恰好匹配一项 waiver 的 finding。 */\n      readonly disposition: \"waived\";\n      /** applied waiver 的身份和理由。 */\n      readonly waiver: MaterializedFindingWaiver;\n    }\n  | {\n      /** 原始 finding；helper 不解释或改写它的领域字段。 */\n      readonly finding: Finding;\n      /** `overmatched` 保持为待处理，避免宽泛 waiver 静默覆盖多个 finding。 */\n      readonly disposition: \"overmatched\";\n    }\n>;\n\n/** 调用方提供完整候选集、身份识别器和 waiver 配置的输入。 */\nexport interface ReconcileFindingWaiversOptions<Finding, Identity> {\n  /** 必须是完整 finding 候选集合，helper 才能审计每项 waiver 的匹配次数。 */\n  readonly findings: readonly Finding[];\n  /** 从完整 finding 提取调用方选择的稳定语义身份。 */\n  readonly identify: (finding: Finding) => Identity;\n  /** 要与识别器输出进行 canonical structural matching 的 waiver。 */\n  readonly waivers: readonly FindingWaiver<Identity>[];\n}\n\n/** 独立 waiver reconciliation 的完整输出，保留 finding 处置和每项配置审计。 */\nexport interface FindingWaiverReconciliation<Finding> {\n  /** 与 input finding 顺序相同的 reconciliation 结果。 */\n  readonly findings: readonly ReconciledFinding<Finding>[];\n  /** 与 input waiver 顺序相同的完整配置审计。 */\n  readonly waiverAudits: readonly FindingWaiverAudit[];\n}\n\n/**\n * 按调用方定义的语义身份对完整 finding 集合和 waiver 配置做 canonical structural reconciliation。\n *\n * 每项 waiver 必须有唯一、可 canonicalize 的 identity 和非空 reason。匹配零项时产生 `unused` 审计；\n * 匹配一项时该 finding 为 `waived`；匹配多项时产生 `overmatched` 审计，相关 finding 保持待处理。\n */\nexport function reconcileFindingWaivers<Finding, Identity>(\n  options: ReconcileFindingWaiversOptions<Finding, Identity>\n): FindingWaiverReconciliation<Finding> {\n  const waivers = materializeWaivers(options.waivers);\n  const matchCounts = new Array<number>(waivers.length).fill(0);\n  const waiverIndexesByIdentity = new Map<string, number>();\n  for (const [index, waiver] of waivers.entries()) {\n    const identity = canonicalIdentity(waiver.identity, \"waiver identity\");\n    if (waiverIndexesByIdentity.has(identity)) {\n      throw new TypeError(\"Finding waivers must not declare duplicate canonical identities\");\n    }\n    waiverIndexesByIdentity.set(identity, index);\n  }\n\n  const matchedWaiverIndexes = options.findings.map((finding) => {\n    const identity = canonicalIdentity(options.identify(finding), \"finding identity\");\n    const waiverIndex = waiverIndexesByIdentity.get(identity);\n    if (waiverIndex !== undefined) matchCounts[waiverIndex] += 1;\n    return waiverIndex;\n  });\n  const waiverAudits = Object.freeze(\n    waivers.map((waiver, index) =>\n      Object.freeze({\n        matchCount: matchCounts[index] ?? 0,\n        status: waiverAuditStatus(matchCounts[index] ?? 0),\n        waiver\n      })\n    )\n  );\n  const findings = Object.freeze(\n    options.findings.map((finding, index) => {\n      const waiverIndex = matchedWaiverIndexes[index];\n      const audit = waiverIndex === undefined ? undefined : waiverAudits[waiverIndex];\n      return reconciledFinding(finding, audit);\n    })\n  );\n  return Object.freeze({ findings, waiverAudits });\n}\n\nfunction materializeWaivers<Identity>(\n  waivers: readonly FindingWaiver<Identity>[]\n): readonly MaterializedFindingWaiver[] {\n  const canonicalWaivers = canonicalizeJsonValue(waivers);\n  if (canonicalWaivers === undefined || !isCanonicalArray(canonicalWaivers)) {\n    throw new TypeError(\"Finding waivers must be canonical JSON arrays\");\n  }\n  return Object.freeze(canonicalWaivers.map(materializeWaiver));\n}\n\nfunction materializeWaiver(value: CanonicalJsonValue): MaterializedFindingWaiver {\n  if (\n    !isCanonicalObject(value) ||\n    !Object.hasOwn(value, \"identity\") ||\n    !Object.hasOwn(value, \"reason\")\n  ) {\n    throw new TypeError(\"Finding waivers must declare canonical identity and reason fields\");\n  }\n  const reason = value.reason;\n  if (typeof reason !== \"string\" || reason.length === 0) {\n    throw new TypeError(\"Finding waiver reasons must be non-empty strings\");\n  }\n  return Object.freeze({ identity: value.identity, reason });\n}\n\nfunction isCanonicalObject(value: CanonicalJsonValue): value is CanonicalJsonObject {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isCanonicalArray(value: CanonicalJsonValue): value is readonly CanonicalJsonValue[] {\n  return Array.isArray(value);\n}\n\nfunction canonicalIdentity(identity: unknown, kind: string): string {\n  try {\n    return canonicalJsonText(identity);\n  } catch {\n    throw new TypeError(`Finding ${kind} must be canonical JSON`);\n  }\n}\n\nfunction waiverAuditStatus(matchCount: number): FindingWaiverAudit[\"status\"] {\n  if (matchCount === 0) return \"unused\";\n  return matchCount === 1 ? \"applied\" : \"overmatched\";\n}\n\nfunction reconciledFinding<Finding>(\n  finding: Finding,\n  audit: FindingWaiverAudit | undefined\n): ReconciledFinding<Finding> {\n  if (audit === undefined) return Object.freeze({ disposition: \"actionable\", finding });\n  if (audit.status === \"applied\") {\n    return Object.freeze({ disposition: \"waived\", finding, waiver: audit.waiver });\n  }\n  return Object.freeze({ disposition: \"overmatched\", finding });\n}\n"]}

package/dist/esm/index.mjs

@@ -0,0 +1,26 @@
+/**
+ * Vibe Check 是由项目在 Bun runtime 中调用的 TypeScript API，用于定义并执行项目质量 Check。
+ * 所有公开能力从 package root 导入；package `README.md` 说明 consumer authoring、结果读取和分发范围。
+ *
+ * @packageDocumentation
+ */
+export { duplicateDetection } from "./package-checks/duplicate-detection/default-check.mjs";
+export { parseDuplicateDetectionData } from "./package-checks/duplicate-detection/final-data.mjs";
+export { fileMetrics } from "./package-checks/file-metrics/constructor.mjs";
+export { parseFileMetricsData } from "./package-checks/file-metrics/final-data.mjs";
+export { functionMetrics } from "./package-checks/function-metrics/constructor.mjs";
+export { parseFunctionMetricsData } from "./package-checks/function-metrics/final-data.mjs";
+export { jsonSchemaValidation } from "./package-checks/json-schema-validation/default-check.mjs";
+export { parseJsonSchemaValidationData } from "./package-checks/json-schema-validation/final-data.mjs";
+export { jsonValidation } from "./package-checks/json-validation/default-check.mjs";
+export { parseJsonValidationData } from "./package-checks/json-validation/final-data.mjs";
+export { maintenanceReminders } from "./package-checks/maintenance-reminders/maintenance-reminders.mjs";
+export { parseMaintenanceRemindersData } from "./package-checks/maintenance-reminders/final-data.mjs";
+export { markdownLinkValidation } from "./package-checks/markdown-link-validation/default-check.mjs";
+export { parseMarkdownLinkValidationData } from "./package-checks/markdown-link-validation/final-data.mjs";
+export { reconcileFindingWaivers } from "./finding-waivers/reconciliation.mjs";
+export { defaultProjectFileSelection } from "./package-checks/project-files/configuration.mjs";
+export { defineCheck, inherit } from "./check/check.mjs";
+export { defineConfig } from "./project-definition/project-definition.mjs";
+export { run } from "./project-run/run.mjs";
+//# sourceMappingURL=index.mjs.map

package/dist/esm/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAQjG,OAAO,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAUnF,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAQ3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,0DAA0D,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AAYtG,OAAO,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAWzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iEAAiE,CAAC;AAMvG,OAAO,EAAE,6BAA6B,EAAE,MAAM,sDAAsD,CAAC;AAMrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,4DAA4D,CAAC;AACpG,OAAO,EAAE,+BAA+B,EAAE,MAAM,yDAAyD,CAAC;AAU1G,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAS9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAM9F,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAYxD,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAW1E,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC","sourcesContent":["/**\n * Vibe Check 是由项目在 Bun runtime 中调用的 TypeScript API，用于定义并执行项目质量 Check。\n * 所有公开能力从 package root 导入；package `README.md` 说明 consumer authoring、结果读取和分发范围。\n *\n * @packageDocumentation\n */\nexport { duplicateDetection } from \"./package-checks/duplicate-detection/default-check.ts\";\nexport { parseDuplicateDetectionData } from \"./package-checks/duplicate-detection/final-data.ts\";\nexport type { DuplicateDetectionFinalData } from \"./package-checks/duplicate-detection/final-data.ts\";\nexport type {\n  DuplicateDetectionOptions,\n  ResolvedDuplicateDetectionOptions\n} from \"./package-checks/duplicate-detection/options.ts\";\nexport type { DuplicateDetectionUnavailableReasonCode } from \"./package-checks/duplicate-detection/execution.ts\";\nexport type { DuplicateDetectionRecordData } from \"./package-checks/duplicate-detection/records.ts\";\nexport { fileMetrics } from \"./package-checks/file-metrics/constructor.ts\";\nexport { parseFileMetricsData } from \"./package-checks/file-metrics/final-data.ts\";\nexport type { FileMetricsFinalData } from \"./package-checks/file-metrics/final-data.ts\";\nexport type {\n  FileMetricsFindingIdentity,\n  FileMetricsFindingWaiver,\n  FileMetricsOptions,\n  ResolvedFileMetricsOptions\n} from \"./package-checks/file-metrics/options.ts\";\nexport type { FileMetricsUnavailableReasonCode } from \"./package-checks/file-metrics/execution.ts\";\nexport type { FileMetricsRecordData } from \"./package-checks/file-metrics/records.ts\";\nexport { functionMetrics } from \"./package-checks/function-metrics/constructor.ts\";\nexport { parseFunctionMetricsData } from \"./package-checks/function-metrics/final-data.ts\";\nexport type { FunctionMetricsFinalData } from \"./package-checks/function-metrics/final-data.ts\";\nexport type {\n  FunctionMetricsOptions,\n  ResolvedFunctionMetricsOptions\n} from \"./package-checks/function-metrics/options.ts\";\nexport type { FunctionMetricsUnavailableReasonCode } from \"./package-checks/function-metrics/execution.ts\";\nexport type { FunctionMetricsRecordData } from \"./package-checks/function-metrics/records.ts\";\nexport { jsonSchemaValidation } from \"./package-checks/json-schema-validation/default-check.ts\";\nexport { parseJsonSchemaValidationData } from \"./package-checks/json-schema-validation/final-data.ts\";\nexport type { JsonSchemaValidationFinalData } from \"./package-checks/json-schema-validation/final-data.ts\";\nexport type {\n  JsonSchemaValidationOptions,\n  ResolvedJsonSchemaValidationOptions\n} from \"./package-checks/json-schema-validation/options.ts\";\nexport type {\n  JsonSchemaDocumentReason,\n  JsonSchemaValidationRecordData,\n  JsonSchemaValidationRecordReason,\n  JsonSchemaValidationUnavailableCode\n} from \"./package-checks/json-schema-validation/json-schema-validation.ts\";\nexport { jsonValidation } from \"./package-checks/json-validation/default-check.ts\";\nexport { parseJsonValidationData } from \"./package-checks/json-validation/final-data.ts\";\nexport type { JsonValidationFinalData } from \"./package-checks/json-validation/final-data.ts\";\nexport type {\n  JsonValidationOptions,\n  ResolvedJsonValidationOptions\n} from \"./package-checks/json-validation/options.ts\";\nexport type {\n  JsonValidationRecordData,\n  JsonValidationRecordReason,\n  JsonValidationUnavailableCode\n} from \"./package-checks/json-validation/json-validation.ts\";\nexport { maintenanceReminders } from \"./package-checks/maintenance-reminders/maintenance-reminders.ts\";\nexport type {\n  MaintenanceReminder,\n  MaintenanceReminderOptions,\n  MaintenanceRemindersUnavailableCode\n} from \"./package-checks/maintenance-reminders/maintenance-reminders.ts\";\nexport { parseMaintenanceRemindersData } from \"./package-checks/maintenance-reminders/final-data.ts\";\nexport type {\n  MaintenanceReminderAssessment,\n  MaintenanceReminderUnavailableReason,\n  MaintenanceRemindersFinalData\n} from \"./package-checks/maintenance-reminders/final-data.ts\";\nexport { markdownLinkValidation } from \"./package-checks/markdown-link-validation/default-check.ts\";\nexport { parseMarkdownLinkValidationData } from \"./package-checks/markdown-link-validation/final-data.ts\";\nexport type { MarkdownLinkValidationFinalData } from \"./package-checks/markdown-link-validation/final-data.ts\";\nexport type {\n  MarkdownLinkValidationOptions,\n  ResolvedMarkdownLinkValidationOptions\n} from \"./package-checks/markdown-link-validation/options.ts\";\nexport type { MarkdownLinkValidationUnavailableReason } from \"./package-checks/markdown-link-validation/execution.ts\";\nexport type { MarkdownLinkValidationRecordData } from \"./package-checks/markdown-link-validation/records.ts\";\nexport type { MarkdownLinkFindingReason } from \"./package-checks/markdown-link-validation/local-resolver.ts\";\nexport type { FindingPolicy } from \"./package-checks/code-quality-findings/policy.ts\";\nexport { reconcileFindingWaivers } from \"./finding-waivers/reconciliation.ts\";\nexport type {\n  FindingWaiver,\n  FindingWaiverAudit,\n  FindingWaiverReconciliation,\n  MaterializedFindingWaiver,\n  ReconciledFinding,\n  ReconcileFindingWaiversOptions\n} from \"./finding-waivers/reconciliation.ts\";\nexport { defaultProjectFileSelection } from \"./package-checks/project-files/configuration.ts\";\nexport type {\n  ProjectFileSelection,\n  ProjectFileSelectionOptions,\n  ProjectFileSource\n} from \"./package-checks/project-files/configuration.ts\";\nexport { defineCheck, inherit } from \"./check/check.ts\";\nexport type {\n  Check,\n  CheckExecution,\n  CheckExecutionContext,\n  CheckPreflight,\n  CheckPreflightResult,\n  CheckOutcome,\n  CheckResult,\n  CheckUnavailableReason,\n  InheritableCheckCollection\n} from \"./check/check.ts\";\nexport { defineConfig } from \"./project-definition/project-definition.ts\";\nexport type {\n  ProjectOutputs,\n  ProjectDefinition,\n  SchedulerPolicy\n} from \"./project-definition/project-definition.ts\";\nexport type {\n  CheckAggregate,\n  CheckAggregation,\n  RunControls\n} from \"./project-run/controls/contract.ts\";\nexport { run } from \"./project-run/run.ts\";\nexport type { RunResult } from \"./project-run/result.ts\";\n"]}

package/dist/esm/machine-output/v4/atomic-publication.mjs

@@ -0,0 +1,102 @@
+import { randomUUID } from "node:crypto";
+import fs from "node:fs";
+import { join } from "node:path";
+const CANONICAL_NAMES = ["records.ndjson", "run.json"];
+const RETIRED_NAMES = [
+    "metrics.json",
+    "report.md",
+    "warnings-all.ndjson",
+    "warnings.ndjson"
+];
+const OWNED_TEMP_PREFIX = ".vibe-check-publication-";
+/** Writes an already validated two-file candidate set through owned temporary paths. */
+export function publishPublicationCandidatesV4(artifactDir, candidates) {
+    fs.mkdirSync(artifactDir, { recursive: true });
+    const files = publicationCandidatePaths(artifactDir, randomUUID(), candidates);
+    let hasReplacedCanonicalPath = false;
+    try {
+        cleanupOwnedTemps(artifactDir);
+        for (const file of files) {
+            fs.writeFileSync(file.temp, file.contents, { encoding: "utf8", flag: "wx" });
+        }
+        for (const file of files) {
+            fs.renameSync(file.temp, file.canonical);
+            hasReplacedCanonicalPath = true;
+        }
+        cleanupRetiredArtifacts(artifactDir);
+    }
+    catch (error) {
+        if (hasReplacedCanonicalPath)
+            cleanupPublicationV4BestEffort(artifactDir);
+        else
+            cleanupOwnedTempsBestEffort(artifactDir);
+        throw error;
+    }
+}
+export function cleanupPublicationV4(artifactDir) {
+    removePaths([
+        ...artifactPaths(artifactDir, CANONICAL_NAMES),
+        ...artifactPaths(artifactDir, RETIRED_NAMES),
+        ...ownedTempPaths(artifactDir)
+    ]);
+}
+export function cleanupPublicationV4BestEffort(artifactDir) {
+    try {
+        cleanupPublicationV4(artifactDir);
+    }
+    catch {
+        // Failure cleanup cannot conceal the original publication failure.
+    }
+}
+function publicationCandidatePaths(artifactDir, token, candidates) {
+    return [
+        {
+            canonical: join(artifactDir, "run.json"),
+            contents: candidates.runJson,
+            temp: join(artifactDir, `.vibe-check-publication-${token}-run.json.tmp`)
+        },
+        {
+            canonical: join(artifactDir, "records.ndjson"),
+            contents: candidates.recordsNdjson,
+            temp: join(artifactDir, `.vibe-check-publication-${token}-records.ndjson.tmp`)
+        }
+    ];
+}
+function cleanupOwnedTemps(artifactDir) {
+    removePaths(ownedTempPaths(artifactDir));
+}
+function cleanupOwnedTempsBestEffort(artifactDir) {
+    try {
+        cleanupOwnedTemps(artifactDir);
+    }
+    catch {
+        // Failure cleanup cannot conceal the original publication failure.
+    }
+}
+function cleanupRetiredArtifacts(artifactDir) {
+    removePaths(artifactPaths(artifactDir, RETIRED_NAMES));
+}
+function artifactPaths(artifactDir, names) {
+    return names.map((name) => join(artifactDir, name));
+}
+function ownedTempPaths(artifactDir) {
+    return fs
+        .readdirSync(artifactDir, { withFileTypes: true })
+        .filter((entry) => entry.name.startsWith(OWNED_TEMP_PREFIX))
+        .map((entry) => join(artifactDir, entry.name))
+        .sort();
+}
+function removePaths(paths) {
+    let firstFailure;
+    for (const path of paths) {
+        try {
+            fs.rmSync(path, { force: true, recursive: true });
+        }
+        catch (error) {
+            firstFailure ??= error;
+        }
+    }
+    if (firstFailure !== undefined)
+        throw firstFailure;
+}
+//# sourceMappingURL=atomic-publication.mjs.map