@zxyycom/vibe-check 0.0.1

package/dist/esm/machine-output/v4/atomic-publication.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-publication.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/atomic-publication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,eAAe,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAU,CAAC;AAChE,MAAM,aAAa,GAAG;IACpB,cAAc;IACd,WAAW;IACX,qBAAqB;IACrB,iBAAiB;CACT,CAAC;AACX,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAarD,wFAAwF;AACxF,MAAM,UAAU,8BAA8B,CAC5C,WAAmB,EACnB,UAAiC;IAEjC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,yBAAyB,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/E,IAAI,wBAAwB,GAAG,KAAK,CAAC;IACrC,IAAI,CAAC;QACH,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACzC,wBAAwB,GAAG,IAAI,CAAC;QAClC,CAAC;QACD,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,wBAAwB;YAAE,8BAA8B,CAAC,WAAW,CAAC,CAAC;;YACrE,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,WAAW,CAAC;QACV,GAAG,aAAa,CAAC,WAAW,EAAE,eAAe,CAAC;QAC9C,GAAG,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC;QAC5C,GAAG,cAAc,CAAC,WAAW,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,WAAmB;IAChE,IAAI,CAAC;QACH,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,WAAmB,EACnB,KAAa,EACb,UAAiC;IAEjC,OAAO;QACL;YACE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC;YACxC,QAAQ,EAAE,UAAU,CAAC,OAAO;YAC5B,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,2BAA2B,KAAK,eAAe,CAAC;SACzE;QACD;YACE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC;YAC9C,QAAQ,EAAE,UAAU,CAAC,aAAa;YAClC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,2BAA2B,KAAK,qBAAqB,CAAC;SAC/E;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,WAAW,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,2BAA2B,CAAC,WAAmB;IACtD,IAAI,CAAC;QACH,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,WAAmB;IAClD,WAAW,CAAC,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,KAAwB;IAClE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB;IACzC,OAAO,EAAE;SACN,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SACjD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;SAC3D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;SAC7C,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB;IAC3C,IAAI,YAAqB,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,YAAY,KAAK,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,YAAY,CAAC;AACrD,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport fs from \"node:fs\";\nimport { join } from \"node:path\";\n\nconst CANONICAL_NAMES = [\"records.ndjson\", \"run.json\"] as const;\nconst RETIRED_NAMES = [\n  \"metrics.json\",\n  \"report.md\",\n  \"warnings-all.ndjson\",\n  \"warnings.ndjson\"\n] as const;\nconst OWNED_TEMP_PREFIX = \".vibe-check-publication-\";\n\ninterface PublicationCandidatePath {\n  readonly canonical: string;\n  readonly contents: string;\n  readonly temp: string;\n}\n\ninterface PublicationCandidates {\n  readonly recordsNdjson: string;\n  readonly runJson: string;\n}\n\n/** Writes an already validated two-file candidate set through owned temporary paths. */\nexport function publishPublicationCandidatesV4(\n  artifactDir: string,\n  candidates: PublicationCandidates\n): void {\n  fs.mkdirSync(artifactDir, { recursive: true });\n  const files = publicationCandidatePaths(artifactDir, randomUUID(), candidates);\n  let hasReplacedCanonicalPath = false;\n  try {\n    cleanupOwnedTemps(artifactDir);\n    for (const file of files) {\n      fs.writeFileSync(file.temp, file.contents, { encoding: \"utf8\", flag: \"wx\" });\n    }\n    for (const file of files) {\n      fs.renameSync(file.temp, file.canonical);\n      hasReplacedCanonicalPath = true;\n    }\n    cleanupRetiredArtifacts(artifactDir);\n  } catch (error: unknown) {\n    if (hasReplacedCanonicalPath) cleanupPublicationV4BestEffort(artifactDir);\n    else cleanupOwnedTempsBestEffort(artifactDir);\n    throw error;\n  }\n}\n\nexport function cleanupPublicationV4(artifactDir: string): void {\n  removePaths([\n    ...artifactPaths(artifactDir, CANONICAL_NAMES),\n    ...artifactPaths(artifactDir, RETIRED_NAMES),\n    ...ownedTempPaths(artifactDir)\n  ]);\n}\n\nexport function cleanupPublicationV4BestEffort(artifactDir: string): void {\n  try {\n    cleanupPublicationV4(artifactDir);\n  } catch {\n    // Failure cleanup cannot conceal the original publication failure.\n  }\n}\n\nfunction publicationCandidatePaths(\n  artifactDir: string,\n  token: string,\n  candidates: PublicationCandidates\n): readonly PublicationCandidatePath[] {\n  return [\n    {\n      canonical: join(artifactDir, \"run.json\"),\n      contents: candidates.runJson,\n      temp: join(artifactDir, `.vibe-check-publication-${token}-run.json.tmp`)\n    },\n    {\n      canonical: join(artifactDir, \"records.ndjson\"),\n      contents: candidates.recordsNdjson,\n      temp: join(artifactDir, `.vibe-check-publication-${token}-records.ndjson.tmp`)\n    }\n  ];\n}\n\nfunction cleanupOwnedTemps(artifactDir: string): void {\n  removePaths(ownedTempPaths(artifactDir));\n}\n\nfunction cleanupOwnedTempsBestEffort(artifactDir: string): void {\n  try {\n    cleanupOwnedTemps(artifactDir);\n  } catch {\n    // Failure cleanup cannot conceal the original publication failure.\n  }\n}\n\nfunction cleanupRetiredArtifacts(artifactDir: string): void {\n  removePaths(artifactPaths(artifactDir, RETIRED_NAMES));\n}\n\nfunction artifactPaths(artifactDir: string, names: readonly string[]): readonly string[] {\n  return names.map((name) => join(artifactDir, name));\n}\n\nfunction ownedTempPaths(artifactDir: string): readonly string[] {\n  return fs\n    .readdirSync(artifactDir, { withFileTypes: true })\n    .filter((entry) => entry.name.startsWith(OWNED_TEMP_PREFIX))\n    .map((entry) => join(artifactDir, entry.name))\n    .sort();\n}\n\nfunction removePaths(paths: readonly string[]): void {\n  let firstFailure: unknown;\n  for (const path of paths) {\n    try {\n      fs.rmSync(path, { force: true, recursive: true });\n    } catch (error: unknown) {\n      firstFailure ??= error;\n    }\n  }\n  if (firstFailure !== undefined) throw firstFailure;\n}\n"]}

package/dist/esm/machine-output/v4/freeze-publication-value.mjs

@@ -0,0 +1,14 @@
+/**
+ * Output projections are validated or freshly constructed plain data. Freeze
+ * them before they cross a publication boundary so later consumers cannot
+ * drift from the one validated model.
+ */
+export function freezePublicationValue(value) {
+    if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
+        Object.freeze(value);
+        for (const child of Object.values(value))
+            freezePublicationValue(child);
+    }
+    return value;
+}
+//# sourceMappingURL=freeze-publication-value.mjs.map

package/dist/esm/machine-output/v4/freeze-publication-value.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"freeze-publication-value.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/freeze-publication-value.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAI,KAAQ;IAChD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["/**\n * Output projections are validated or freshly constructed plain data. Freeze\n * them before they cross a publication boundary so later consumers cannot\n * drift from the one validated model.\n */\nexport function freezePublicationValue<T>(value: T): T {\n  if (value !== null && typeof value === \"object\" && !Object.isFrozen(value)) {\n    Object.freeze(value);\n    for (const child of Object.values(value)) freezePublicationValue(child);\n  }\n  return value;\n}\n"]}

package/dist/esm/machine-output/v4/projection.mjs

@@ -0,0 +1,23 @@
+import { MACHINE_RECORD_V4_IDENTITY, MACHINE_RUN_V4_IDENTITY } from "./schema-identities.mjs";
+import { createRecordsFingerprintV4 } from "./records-fingerprint.mjs";
+import { freezePublicationValue } from "./freeze-publication-value.mjs";
+export function projectMachinePublicationV4(model) {
+    const records = Object.freeze(model.snapshot.records.map((record) => freezePublicationValue({
+        checkId: record.checkId,
+        data: record.data,
+        id: record.id,
+        schemaVersion: MACHINE_RECORD_V4_IDENTITY
+    })));
+    const run = {
+        checks: model.snapshot.checks.map((check) => ({
+            checkId: check.checkId,
+            displayName: check.displayName,
+            outcome: check.outcome
+        })),
+        invocation: { ...model.invocation },
+        recordsFingerprint: createRecordsFingerprintV4(records),
+        schemaVersion: MACHINE_RUN_V4_IDENTITY
+    };
+    return Object.freeze({ records, run: freezePublicationValue(run) });
+}
+//# sourceMappingURL=projection.mjs.map

package/dist/esm/machine-output/v4/projection.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAOvE,MAAM,UAAU,2BAA2B,CACzC,KAAgC;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAmB,EAAE,CACrD,sBAAsB,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,aAAa,EAAE,0BAA0B;KAC1C,CAAC,CACH,CACF,CAAC;IACF,MAAM,GAAG,GAAiB;QACxB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAkC,EAAE,CAAC,CAAC;YAC5E,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,UAAU,EAAE,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE;QACnC,kBAAkB,EAAE,0BAA0B,CAAC,OAAO,CAAC;QACvD,aAAa,EAAE,uBAAuB;KACvC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC","sourcesContent":["import { MACHINE_RECORD_V4_IDENTITY, MACHINE_RUN_V4_IDENTITY } from \"./schema-identities.ts\";\nimport type { TrustedPublicationModelV4 } from \"./publication-model.ts\";\nimport { createRecordsFingerprintV4 } from \"./records-fingerprint.ts\";\nimport type { MachineRecordV4, MachineRunV4 } from \"./schema.ts\";\nimport { freezePublicationValue } from \"./freeze-publication-value.ts\";\n\nexport interface MachinePublicationV4 {\n  readonly records: readonly MachineRecordV4[];\n  readonly run: MachineRunV4;\n}\n\nexport function projectMachinePublicationV4(\n  model: TrustedPublicationModelV4\n): MachinePublicationV4 {\n  const records = Object.freeze(\n    model.snapshot.records.map((record): MachineRecordV4 =>\n      freezePublicationValue({\n        checkId: record.checkId,\n        data: record.data,\n        id: record.id,\n        schemaVersion: MACHINE_RECORD_V4_IDENTITY\n      })\n    )\n  );\n  const run: MachineRunV4 = {\n    checks: model.snapshot.checks.map((check): MachineRunV4[\"checks\"][number] => ({\n      checkId: check.checkId,\n      displayName: check.displayName,\n      outcome: check.outcome\n    })),\n    invocation: { ...model.invocation },\n    recordsFingerprint: createRecordsFingerprintV4(records),\n    schemaVersion: MACHINE_RUN_V4_IDENTITY\n  };\n  return Object.freeze({ records, run: freezePublicationValue(run) });\n}\n"]}

package/dist/esm/machine-output/v4/publication-invariants.mjs

@@ -0,0 +1,59 @@
+import { validateCoreSnapshot } from "../../check-settlement/fact-validation.mjs";
+import { createRecordsFingerprintV4 } from "./records-fingerprint.mjs";
+import { setInvariantFailure } from "./validation-result.mjs";
+export function validatePublicationInvariants(run, records) {
+    const checkOrder = validateCheckOrder(run);
+    if (checkOrder !== null)
+        return checkOrder;
+    const recordOrder = validateRecordOrder(records);
+    if (recordOrder !== null)
+        return recordOrder;
+    const ownership = validateRecordOwnership(run, records);
+    if (ownership !== null)
+        return ownership;
+    const core = validateProjectedCore(run, records);
+    if (core !== null)
+        return core;
+    return createRecordsFingerprintV4(records) === run.recordsFingerprint
+        ? null
+        : setInvariantFailure("records-fingerprint", "records.ndjson", "Records fingerprint must match the complete canonical Record row set.");
+}
+function validateCheckOrder(run) {
+    let previous;
+    for (const check of run.checks) {
+        if (previous !== undefined && previous >= check.checkId) {
+            return setInvariantFailure("check-canonical-order", "run.json", "Checks must be uniquely sorted by checkId.");
+        }
+        previous = check.checkId;
+    }
+    return null;
+}
+function validateRecordOrder(records) {
+    let previous;
+    for (const [index, record] of records.entries()) {
+        const current = [record.checkId, record.id];
+        if (previous !== undefined &&
+            (previous[0] > current[0] || (previous[0] === current[0] && previous[1] >= current[1]))) {
+            return setInvariantFailure("record-canonical-order", "records.ndjson", "Records must be uniquely sorted by the composite { checkId, id } identity.", index);
+        }
+        previous = current;
+    }
+    return null;
+}
+function validateRecordOwnership(run, records) {
+    const knownChecks = new Set(run.checks.map((check) => check.checkId));
+    const unknownIndex = records.findIndex((record) => !knownChecks.has(record.checkId));
+    return unknownIndex === -1
+        ? null
+        : setInvariantFailure("record-check-ownership", "records.ndjson", "Every Record must name a published owning Check.", unknownIndex);
+}
+function validateProjectedCore(run, records) {
+    const snapshot = validateCoreSnapshot({
+        checks: run.checks,
+        records: records.map(({ schemaVersion: _schemaVersion, ...record }) => record)
+    });
+    return snapshot.ok
+        ? null
+        : setInvariantFailure("core-snapshot", "run.json", "Published Core facts are invalid.");
+}
+//# sourceMappingURL=publication-invariants.mjs.map

package/dist/esm/machine-output/v4/publication-invariants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-invariants.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/publication-invariants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,wBAAwB,CAAC;AAErF,MAAM,UAAU,6BAA6B,CAC3C,GAAiB,EACjB,OAAmC;IAEnC,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAC3C,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IAC7C,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,0BAA0B,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,kBAAkB;QACnE,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,mBAAmB,CACjB,qBAAqB,EACrB,gBAAgB,EAChB,uEAAuE,CACxE,CAAC;AACR,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAiB;IAC3C,IAAI,QAA4B,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACxD,OAAO,mBAAmB,CACxB,uBAAuB,EACvB,UAAU,EACV,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAmC;IAC9D,IAAI,QAA+C,CAAC;IACpD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAU,CAAC;QACrD,IACE,QAAQ,KAAK,SAAS;YACtB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EACvF,CAAC;YACD,OAAO,mBAAmB,CACxB,wBAAwB,EACxB,gBAAgB,EAChB,4EAA4E,EAC5E,KAAK,CACN,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAAiB,EACjB,OAAmC;IAEnC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACrF,OAAO,YAAY,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,mBAAmB,CACjB,wBAAwB,EACxB,gBAAgB,EAChB,kDAAkD,EAClD,YAAY,CACb,CAAC;AACR,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAiB,EACjB,OAAmC;IAEnC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC;KAC/E,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,EAAE;QAChB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,mBAAmB,CAAC,eAAe,EAAE,UAAU,EAAE,mCAAmC,CAAC,CAAC;AAC5F,CAAC","sourcesContent":["import { validateCoreSnapshot } from \"../../check-settlement/fact-validation.ts\";\nimport { createRecordsFingerprintV4 } from \"./records-fingerprint.ts\";\nimport type { MachineRecordV4, MachineRunV4 } from \"./schema.ts\";\nimport { setInvariantFailure, type ValidationFailure } from \"./validation-result.ts\";\n\nexport function validatePublicationInvariants(\n  run: MachineRunV4,\n  records: readonly MachineRecordV4[]\n): ValidationFailure | null {\n  const checkOrder = validateCheckOrder(run);\n  if (checkOrder !== null) return checkOrder;\n  const recordOrder = validateRecordOrder(records);\n  if (recordOrder !== null) return recordOrder;\n  const ownership = validateRecordOwnership(run, records);\n  if (ownership !== null) return ownership;\n  const core = validateProjectedCore(run, records);\n  if (core !== null) return core;\n  return createRecordsFingerprintV4(records) === run.recordsFingerprint\n    ? null\n    : setInvariantFailure(\n        \"records-fingerprint\",\n        \"records.ndjson\",\n        \"Records fingerprint must match the complete canonical Record row set.\"\n      );\n}\n\nfunction validateCheckOrder(run: MachineRunV4): ValidationFailure | null {\n  let previous: string | undefined;\n  for (const check of run.checks) {\n    if (previous !== undefined && previous >= check.checkId) {\n      return setInvariantFailure(\n        \"check-canonical-order\",\n        \"run.json\",\n        \"Checks must be uniquely sorted by checkId.\"\n      );\n    }\n    previous = check.checkId;\n  }\n  return null;\n}\n\nfunction validateRecordOrder(records: readonly MachineRecordV4[]): ValidationFailure | null {\n  let previous: readonly [string, string] | undefined;\n  for (const [index, record] of records.entries()) {\n    const current = [record.checkId, record.id] as const;\n    if (\n      previous !== undefined &&\n      (previous[0] > current[0] || (previous[0] === current[0] && previous[1] >= current[1]))\n    ) {\n      return setInvariantFailure(\n        \"record-canonical-order\",\n        \"records.ndjson\",\n        \"Records must be uniquely sorted by the composite { checkId, id } identity.\",\n        index\n      );\n    }\n    previous = current;\n  }\n  return null;\n}\n\nfunction validateRecordOwnership(\n  run: MachineRunV4,\n  records: readonly MachineRecordV4[]\n): ValidationFailure | null {\n  const knownChecks = new Set(run.checks.map((check) => check.checkId));\n  const unknownIndex = records.findIndex((record) => !knownChecks.has(record.checkId));\n  return unknownIndex === -1\n    ? null\n    : setInvariantFailure(\n        \"record-check-ownership\",\n        \"records.ndjson\",\n        \"Every Record must name a published owning Check.\",\n        unknownIndex\n      );\n}\n\nfunction validateProjectedCore(\n  run: MachineRunV4,\n  records: readonly MachineRecordV4[]\n): ValidationFailure | null {\n  const snapshot = validateCoreSnapshot({\n    checks: run.checks,\n    records: records.map(({ schemaVersion: _schemaVersion, ...record }) => record)\n  });\n  return snapshot.ok\n    ? null\n    : setInvariantFailure(\"core-snapshot\", \"run.json\", \"Published Core facts are invalid.\");\n}\n"]}

package/dist/esm/machine-output/v4/publication-model.mjs

@@ -0,0 +1,19 @@
+import { MACHINE_V4_TIMESTAMP_PATTERN } from "./schema-identities.mjs";
+const machineV4TimestampPattern = new RegExp(MACHINE_V4_TIMESTAMP_PATTERN);
+export function createPublicationModelV4(input) {
+    validateInvocation(input.invocation);
+    return Object.freeze({
+        invocation: Object.freeze({ ...input.invocation }),
+        snapshot: input.snapshot
+    });
+}
+function validateInvocation(invocation) {
+    if (typeof invocation.invocationId !== "string" ||
+        invocation.invocationId.length === 0 ||
+        invocation.projectRoot !== "." ||
+        typeof invocation.timestamp !== "string" ||
+        !machineV4TimestampPattern.test(invocation.timestamp)) {
+        throw new TypeError("Publication invocation metadata is invalid");
+    }
+}
+//# sourceMappingURL=publication-model.mjs.map

package/dist/esm/machine-output/v4/publication-model.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-model.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/publication-model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAEtE,MAAM,yBAAyB,GAAG,IAAI,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAc3E,MAAM,UAAU,wBAAwB,CACtC,KAAgF;IAEhF,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAmC;IAC7D,IACE,OAAO,UAAU,CAAC,YAAY,KAAK,QAAQ;QAC3C,UAAU,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QACpC,UAAU,CAAC,WAAW,KAAK,GAAG;QAC9B,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;QACxC,CAAC,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EACrD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;AACH,CAAC","sourcesContent":["import type { CoreSnapshot } from \"../../check-settlement/facts.ts\";\nimport { MACHINE_V4_TIMESTAMP_PATTERN } from \"./schema-identities.ts\";\n\nconst machineV4TimestampPattern = new RegExp(MACHINE_V4_TIMESTAMP_PATTERN);\n\nexport interface PublicationInvocationV4 {\n  readonly invocationId: string;\n  readonly projectRoot: \".\";\n  readonly timestamp: string;\n}\n\n/** Trusted Core facts and validated invocation metadata for v4 candidate projection. */\nexport interface TrustedPublicationModelV4 {\n  readonly invocation: PublicationInvocationV4;\n  readonly snapshot: CoreSnapshot;\n}\n\nexport function createPublicationModelV4(\n  input: Readonly<{ invocation: PublicationInvocationV4; snapshot: CoreSnapshot }>\n): TrustedPublicationModelV4 {\n  validateInvocation(input.invocation);\n  return Object.freeze({\n    invocation: Object.freeze({ ...input.invocation }),\n    snapshot: input.snapshot\n  });\n}\n\nfunction validateInvocation(invocation: PublicationInvocationV4): void {\n  if (\n    typeof invocation.invocationId !== \"string\" ||\n    invocation.invocationId.length === 0 ||\n    invocation.projectRoot !== \".\" ||\n    typeof invocation.timestamp !== \"string\" ||\n    !machineV4TimestampPattern.test(invocation.timestamp)\n  ) {\n    throw new TypeError(\"Publication invocation metadata is invalid\");\n  }\n}\n"]}

package/dist/esm/machine-output/v4/publish.mjs

@@ -0,0 +1,20 @@
+import { projectMachinePublicationV4 } from "./projection.mjs";
+import { serializeMachinePublicationV4 } from "./serializers.mjs";
+import { validateMachinePublicationSetV4 } from "./validation.mjs";
+import {} from "./publication-model.mjs";
+import { publishPublicationCandidatesV4 } from "./atomic-publication.mjs";
+export { cleanupPublicationV4, cleanupPublicationV4BestEffort } from "./atomic-publication.mjs";
+/** Publishes only the validated two-file machine set; human projection is not a v4 concern. */
+export function publishScanV4(input) {
+    const machine = projectMachinePublicationV4(input.model);
+    const candidates = serializeMachinePublicationV4(machine);
+    const validation = validateMachinePublicationSetV4({
+        recordsNdjson: Buffer.from(candidates.recordsNdjson, "utf8"),
+        runJson: Buffer.from(candidates.runJson, "utf8")
+    });
+    if (!validation.ok) {
+        throw new Error(`Machine publication v4 validation failed: ${validation.diagnostic.message}`);
+    }
+    publishPublicationCandidatesV4(input.artifactDir, candidates);
+}
+//# sourceMappingURL=publish.mjs.map

package/dist/esm/machine-output/v4/publish.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/publish.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAkC,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAEzE,OAAO,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAE/F,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAC3B,KAA0E;IAE1E,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,+BAA+B,CAAC;QACjD,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;QAC5D,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,6CAA6C,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,8BAA8B,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AAChE,CAAC","sourcesContent":["import { projectMachinePublicationV4 } from \"./projection.ts\";\nimport { serializeMachinePublicationV4 } from \"./serializers.ts\";\nimport { validateMachinePublicationSetV4 } from \"./validation.ts\";\nimport { type TrustedPublicationModelV4 } from \"./publication-model.ts\";\nimport { publishPublicationCandidatesV4 } from \"./atomic-publication.ts\";\n\nexport { cleanupPublicationV4, cleanupPublicationV4BestEffort } from \"./atomic-publication.ts\";\n\n/** Publishes only the validated two-file machine set; human projection is not a v4 concern. */\nexport function publishScanV4(\n  input: Readonly<{ artifactDir: string; model: TrustedPublicationModelV4 }>\n): void {\n  const machine = projectMachinePublicationV4(input.model);\n  const candidates = serializeMachinePublicationV4(machine);\n  const validation = validateMachinePublicationSetV4({\n    recordsNdjson: Buffer.from(candidates.recordsNdjson, \"utf8\"),\n    runJson: Buffer.from(candidates.runJson, \"utf8\")\n  });\n  if (!validation.ok) {\n    throw new Error(`Machine publication v4 validation failed: ${validation.diagnostic.message}`);\n  }\n  publishPublicationCandidatesV4(input.artifactDir, candidates);\n}\n"]}

package/dist/esm/machine-output/v4/records-fingerprint.mjs

@@ -0,0 +1,9 @@
+import { createHash } from "node:crypto";
+import { canonicalJsonBytes } from "../../data-boundary/canonical-data.mjs";
+export const MACHINE_RECORDS_V4_FINGERPRINT_PREFIX = "check-record/v2/records/sha256:";
+/** Binds the complete, canonically ordered v4 Record row set, including empty. */
+export function createRecordsFingerprintV4(records) {
+    const bytes = canonicalJsonBytes(records);
+    return `${MACHINE_RECORDS_V4_FINGERPRINT_PREFIX}${createHash("sha256").update(bytes).digest("hex")}`;
+}
+//# sourceMappingURL=records-fingerprint.mjs.map

package/dist/esm/machine-output/v4/records-fingerprint.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"records-fingerprint.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/records-fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAG3E,MAAM,CAAC,MAAM,qCAAqC,GAAG,iCAAiC,CAAC;AAEvF,kFAAkF;AAClF,MAAM,UAAU,0BAA0B,CAAC,OAAmC;IAC5E,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,GAAG,qCAAqC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACvG,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\n\nimport { canonicalJsonBytes } from \"../../data-boundary/canonical-data.ts\";\nimport type { MachineRecordV4 } from \"./schema.ts\";\n\nexport const MACHINE_RECORDS_V4_FINGERPRINT_PREFIX = \"check-record/v2/records/sha256:\";\n\n/** Binds the complete, canonically ordered v4 Record row set, including empty. */\nexport function createRecordsFingerprintV4(records: readonly MachineRecordV4[]): string {\n  const bytes = canonicalJsonBytes(records);\n  return `${MACHINE_RECORDS_V4_FINGERPRINT_PREFIX}${createHash(\"sha256\").update(bytes).digest(\"hex\")}`;\n}\n"]}

package/dist/esm/machine-output/v4/schema-identities.mjs

@@ -0,0 +1,8 @@
+export const MACHINE_RUN_V4_SCHEMA_ID = "urn:vibe-check:schema:run:v4";
+export const MACHINE_RECORD_V4_SCHEMA_ID = "urn:vibe-check:schema:record:v4";
+export const MACHINE_RUN_V4_IDENTITY = "vibe-check.run.v4";
+export const MACHINE_RECORD_V4_IDENTITY = "vibe-check.record.v4";
+export const MACHINE_V4_TIMESTAMP_PATTERN = "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\\.[0-9]{3}Z$";
+export const MACHINE_RUN_V4_SCHEMA_PATH = "docs/schemas/vibe-check-run.schema.json";
+export const MACHINE_RECORD_V4_SCHEMA_PATH = "docs/schemas/vibe-check-record.schema.json";
+//# sourceMappingURL=schema-identities.mjs.map

package/dist/esm/machine-output/v4/schema-identities.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-identities.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/schema-identities.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG,8BAA8B,CAAC;AACvE,MAAM,CAAC,MAAM,2BAA2B,GAAG,iCAAiC,CAAC;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAC3D,MAAM,CAAC,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AACjE,MAAM,CAAC,MAAM,4BAA4B,GACvC,qEAAqE,CAAC;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,yCAAyC,CAAC;AACpF,MAAM,CAAC,MAAM,6BAA6B,GAAG,4CAA4C,CAAC","sourcesContent":["export const MACHINE_RUN_V4_SCHEMA_ID = \"urn:vibe-check:schema:run:v4\";\nexport const MACHINE_RECORD_V4_SCHEMA_ID = \"urn:vibe-check:schema:record:v4\";\nexport const MACHINE_RUN_V4_IDENTITY = \"vibe-check.run.v4\";\nexport const MACHINE_RECORD_V4_IDENTITY = \"vibe-check.record.v4\";\nexport const MACHINE_V4_TIMESTAMP_PATTERN =\n  \"^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\\\\.[0-9]{3}Z$\";\nexport const MACHINE_RUN_V4_SCHEMA_PATH = \"docs/schemas/vibe-check-run.schema.json\";\nexport const MACHINE_RECORD_V4_SCHEMA_PATH = \"docs/schemas/vibe-check-record.schema.json\";\n"]}

package/dist/esm/machine-output/v4/schema.mjs

@@ -0,0 +1,50 @@
+import Type from "typebox";
+import { MACHINE_RECORD_V4_IDENTITY, MACHINE_RECORD_V4_SCHEMA_ID, MACHINE_RUN_V4_IDENTITY, MACHINE_RUN_V4_SCHEMA_ID, MACHINE_V4_TIMESTAMP_PATTERN } from "./schema-identities.mjs";
+const NonEmptyString = Type.String({ minLength: 1 });
+const NonEmptyCheckId = Type.String({ minLength: 1 });
+const CanonicalJsonObject = Type.Record(Type.String(), Type.Any());
+const NotApplicableReason = Type.Object({ code: NonEmptyString }, { additionalProperties: false });
+const UnavailableReason = Type.Object({
+    checkIds: Type.Optional(Type.Array(NonEmptyCheckId, { minItems: 1 })),
+    code: NonEmptyString
+}, { additionalProperties: false });
+const CheckOutcomeSchema = Type.Union([
+    Type.Object({ data: CanonicalJsonObject, status: Type.Literal("passed") }, { additionalProperties: false }),
+    Type.Object({ data: CanonicalJsonObject, status: Type.Literal("failed") }, { additionalProperties: false }),
+    Type.Object({ reason: Type.Optional(NotApplicableReason), status: Type.Literal("not-applicable") }, { additionalProperties: false }),
+    Type.Object({ reason: UnavailableReason, status: Type.Literal("unavailable") }, { additionalProperties: false })
+]);
+const PublishedCheckSchema = Type.Object({
+    checkId: NonEmptyCheckId,
+    displayName: NonEmptyString,
+    outcome: CheckOutcomeSchema
+}, { additionalProperties: false });
+export const MACHINE_RECORD_V4_SCHEMA = Type.Object({
+    checkId: NonEmptyCheckId,
+    data: CanonicalJsonObject,
+    id: NonEmptyString,
+    schemaVersion: Type.Literal(MACHINE_RECORD_V4_IDENTITY)
+}, {
+    $id: MACHINE_RECORD_V4_SCHEMA_ID,
+    $schema: "https://json-schema.org/draft/2020-12/schema",
+    additionalProperties: false,
+    title: "Vibe Check machine record v4"
+});
+export const MACHINE_RUN_V4_SCHEMA = Type.Object({
+    checks: Type.Array(PublishedCheckSchema),
+    invocation: Type.Object({
+        invocationId: NonEmptyString,
+        projectRoot: Type.Literal("."),
+        timestamp: Type.String({ pattern: MACHINE_V4_TIMESTAMP_PATTERN })
+    }, { additionalProperties: false }),
+    recordsFingerprint: Type.String({
+        pattern: "^check-record/v2/records/sha256:[a-f0-9]{64}$"
+    }),
+    schemaVersion: Type.Literal(MACHINE_RUN_V4_IDENTITY)
+}, {
+    $id: MACHINE_RUN_V4_SCHEMA_ID,
+    $schema: "https://json-schema.org/draft/2020-12/schema",
+    additionalProperties: false,
+    title: "Vibe Check machine run v4"
+});
+//# sourceMappingURL=schema.mjs.map

package/dist/esm/machine-output/v4/schema.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/schema.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,SAAS,CAAC;AAE3B,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,EACxB,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AACrD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AACtD,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACnE,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AACnG,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CACnC;IACE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,IAAI,EAAE,cAAc;CACrB,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC;IACpC,IAAI,CAAC,MAAM,CACT,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAC7D,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC;IACD,IAAI,CAAC,MAAM,CACT,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAC7D,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC;IACD,IAAI,CAAC,MAAM,CACT,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EACtF,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC;IACD,IAAI,CAAC,MAAM,CACT,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAClE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC;CACF,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CACtC;IACE,OAAO,EAAE,eAAe;IACxB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,kBAAkB;CAC5B,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CACjD;IACE,OAAO,EAAE,eAAe;IACxB,IAAI,EAAE,mBAAmB;IACzB,EAAE,EAAE,cAAc;IAClB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC;CACxD,EACD;IACE,GAAG,EAAE,2BAA2B;IAChC,OAAO,EAAE,8CAA8C;IACvD,oBAAoB,EAAE,KAAK;IAC3B,KAAK,EAAE,8BAA8B;CACtC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAC9C;IACE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACxC,UAAU,EAAE,IAAI,CAAC,MAAM,CACrB;QACE,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAC9B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;KAClE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC;IACD,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC;QAC9B,OAAO,EAAE,+CAA+C;KACzD,CAAC;IACF,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC;CACrD,EACD;IACE,GAAG,EAAE,wBAAwB;IAC7B,OAAO,EAAE,8CAA8C;IACvD,oBAAoB,EAAE,KAAK;IAC3B,KAAK,EAAE,2BAA2B;CACnC,CACF,CAAC","sourcesContent":["import Type from \"typebox\";\n\nimport {\n  MACHINE_RECORD_V4_IDENTITY,\n  MACHINE_RECORD_V4_SCHEMA_ID,\n  MACHINE_RUN_V4_IDENTITY,\n  MACHINE_RUN_V4_SCHEMA_ID,\n  MACHINE_V4_TIMESTAMP_PATTERN\n} from \"./schema-identities.ts\";\n\nconst NonEmptyString = Type.String({ minLength: 1 });\nconst NonEmptyCheckId = Type.String({ minLength: 1 });\nconst CanonicalJsonObject = Type.Record(Type.String(), Type.Any());\nconst NotApplicableReason = Type.Object({ code: NonEmptyString }, { additionalProperties: false });\nconst UnavailableReason = Type.Object(\n  {\n    checkIds: Type.Optional(Type.Array(NonEmptyCheckId, { minItems: 1 })),\n    code: NonEmptyString\n  },\n  { additionalProperties: false }\n);\n\nconst CheckOutcomeSchema = Type.Union([\n  Type.Object(\n    { data: CanonicalJsonObject, status: Type.Literal(\"passed\") },\n    { additionalProperties: false }\n  ),\n  Type.Object(\n    { data: CanonicalJsonObject, status: Type.Literal(\"failed\") },\n    { additionalProperties: false }\n  ),\n  Type.Object(\n    { reason: Type.Optional(NotApplicableReason), status: Type.Literal(\"not-applicable\") },\n    { additionalProperties: false }\n  ),\n  Type.Object(\n    { reason: UnavailableReason, status: Type.Literal(\"unavailable\") },\n    { additionalProperties: false }\n  )\n]);\n\nconst PublishedCheckSchema = Type.Object(\n  {\n    checkId: NonEmptyCheckId,\n    displayName: NonEmptyString,\n    outcome: CheckOutcomeSchema\n  },\n  { additionalProperties: false }\n);\n\nexport const MACHINE_RECORD_V4_SCHEMA = Type.Object(\n  {\n    checkId: NonEmptyCheckId,\n    data: CanonicalJsonObject,\n    id: NonEmptyString,\n    schemaVersion: Type.Literal(MACHINE_RECORD_V4_IDENTITY)\n  },\n  {\n    $id: MACHINE_RECORD_V4_SCHEMA_ID,\n    $schema: \"https://json-schema.org/draft/2020-12/schema\",\n    additionalProperties: false,\n    title: \"Vibe Check machine record v4\"\n  }\n);\n\nexport const MACHINE_RUN_V4_SCHEMA = Type.Object(\n  {\n    checks: Type.Array(PublishedCheckSchema),\n    invocation: Type.Object(\n      {\n        invocationId: NonEmptyString,\n        projectRoot: Type.Literal(\".\"),\n        timestamp: Type.String({ pattern: MACHINE_V4_TIMESTAMP_PATTERN })\n      },\n      { additionalProperties: false }\n    ),\n    recordsFingerprint: Type.String({\n      pattern: \"^check-record/v2/records/sha256:[a-f0-9]{64}$\"\n    }),\n    schemaVersion: Type.Literal(MACHINE_RUN_V4_IDENTITY)\n  },\n  {\n    $id: MACHINE_RUN_V4_SCHEMA_ID,\n    $schema: \"https://json-schema.org/draft/2020-12/schema\",\n    additionalProperties: false,\n    title: \"Vibe Check machine run v4\"\n  }\n);\n\ntype DeepReadonly<Value> = Value extends readonly (infer Item)[]\n  ? readonly DeepReadonly<Item>[]\n  : Value extends object\n    ? { readonly [Key in keyof Value]: DeepReadonly<Value[Key]> }\n    : Value;\n\nexport type MachineRecordV4 = DeepReadonly<Type.Static<typeof MACHINE_RECORD_V4_SCHEMA>>;\nexport type MachineRunV4 = DeepReadonly<Type.Static<typeof MACHINE_RUN_V4_SCHEMA>>;\n"]}

package/dist/esm/machine-output/v4/serializers.mjs

@@ -0,0 +1,9 @@
+export function serializeMachinePublicationV4(publication) {
+    return Object.freeze({
+        runJson: JSON.stringify(publication.run, null, 2),
+        recordsNdjson: publication.records.length === 0
+            ? ""
+            : `${publication.records.map((record) => JSON.stringify(record)).join("\n")}\n`
+    });
+}
+//# sourceMappingURL=serializers.mjs.map

package/dist/esm/machine-output/v4/serializers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializers.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/serializers.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,6BAA6B,CAC3C,WAAiC;IAEjC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,aAAa,EACX,WAAW,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;KACpF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { MachinePublicationV4 } from \"./projection.ts\";\n\nexport interface MachinePublicationCandidatesV4 {\n  readonly recordsNdjson: string;\n  readonly runJson: string;\n}\n\nexport function serializeMachinePublicationV4(\n  publication: MachinePublicationV4\n): MachinePublicationCandidatesV4 {\n  return Object.freeze({\n    runJson: JSON.stringify(publication.run, null, 2),\n    recordsNdjson:\n      publication.records.length === 0\n        ? \"\"\n        : `${publication.records.map((record) => JSON.stringify(record)).join(\"\\n\")}\\n`\n  });\n}\n"]}

package/dist/esm/machine-output/v4/validation-result.mjs

@@ -0,0 +1,16 @@
+export function validationSuccess(value) {
+    return { ok: true, value };
+}
+export function validationFailure(diagnostic) {
+    return { ok: false, diagnostic };
+}
+export function setInvariantFailure(relationship, logicalArtifact, message, index) {
+    return validationFailure({
+        category: "set-invariant",
+        ...(index === undefined ? {} : { index, line: index + 1 }),
+        logicalArtifact,
+        message,
+        relationship
+    });
+}
+//# sourceMappingURL=validation-result.mjs.map

package/dist/esm/machine-output/v4/validation-result.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-result.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/validation-result.ts"],"names":[],"mappings":"AAmCA,MAAM,UAAU,iBAAiB,CAAQ,KAAY;IACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,UAAkD;IAElD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,YAA+C,EAC/C,eAA0E,EAC1E,OAAe,EACf,KAAc;IAEd,OAAO,iBAAiB,CAAC;QACvB,QAAQ,EAAE,eAAe;QACzB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1D,eAAe;QACf,OAAO;QACP,YAAY;KACb,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { MachinePublicationV4 } from \"./projection.ts\";\n\nexport type MachinePublicationValidationCategory =\n  | \"decoding\"\n  | \"framing\"\n  | \"schema\"\n  | \"set-invariant\"\n  | \"syntax\";\n\nexport type MachinePublicationSetRelationship =\n  | \"check-canonical-order\"\n  | \"core-snapshot\"\n  | \"record-canonical-order\"\n  | \"record-check-ownership\"\n  | \"records-fingerprint\";\n\nexport interface MachinePublicationValidationDiagnostic {\n  readonly category: MachinePublicationValidationCategory;\n  readonly index?: number;\n  readonly line?: number;\n  readonly logicalArtifact: \"records.ndjson\" | \"run.json\";\n  readonly message: string;\n  readonly pointer?: string;\n  readonly relationship?: MachinePublicationSetRelationship;\n}\n\nexport type MachinePublicationValidationResult = Readonly<\n  ValidationFailure | { ok: true; value: MachinePublicationV4 }\n>;\n\nexport interface ValidationFailure {\n  readonly ok: false;\n  readonly diagnostic: MachinePublicationValidationDiagnostic;\n}\n\nexport function validationSuccess<Value>(value: Value): { ok: true; value: Value } {\n  return { ok: true, value };\n}\n\nexport function validationFailure(\n  diagnostic: MachinePublicationValidationDiagnostic\n): ValidationFailure {\n  return { ok: false, diagnostic };\n}\n\nexport function setInvariantFailure(\n  relationship: MachinePublicationSetRelationship,\n  logicalArtifact: MachinePublicationValidationDiagnostic[\"logicalArtifact\"],\n  message: string,\n  index?: number\n): ValidationFailure {\n  return validationFailure({\n    category: \"set-invariant\",\n    ...(index === undefined ? {} : { index, line: index + 1 }),\n    logicalArtifact,\n    message,\n    relationship\n  });\n}\n"]}

package/dist/esm/machine-output/v4/validation.mjs

@@ -0,0 +1,131 @@
+import Value from "typebox/value";
+import { freezePublicationValue } from "./freeze-publication-value.mjs";
+import { validatePublicationInvariants } from "./publication-invariants.mjs";
+import { MACHINE_RECORD_V4_SCHEMA, MACHINE_RUN_V4_SCHEMA } from "./schema.mjs";
+import { validationFailure, validationSuccess } from "./validation-result.mjs";
+export function validateMachinePublicationSetV4(input) {
+    const runResult = parseRun(input.runJson);
+    if (!runResult.ok)
+        return runResult;
+    const recordsResult = parseRecords(input.recordsNdjson);
+    if (!recordsResult.ok)
+        return recordsResult;
+    const invariant = validatePublicationInvariants(runResult.value, recordsResult.value);
+    return (invariant ??
+        validationSuccess(Object.freeze({
+            run: freezePublicationValue(runResult.value),
+            records: freezePublicationValue(recordsResult.value)
+        })));
+}
+function parseRun(bytes) {
+    const decoded = decode(bytes, "run.json");
+    if (!decoded.ok)
+        return decoded;
+    const parsed = parseJson(decoded.value, {
+        logicalArtifact: "run.json",
+        message: "Run artifact must contain exactly one JSON value."
+    });
+    if (!parsed.ok)
+        return parsed;
+    if (!Value.Check(MACHINE_RUN_V4_SCHEMA, parsed.value)) {
+        const error = Value.Errors(MACHINE_RUN_V4_SCHEMA, parsed.value)[0];
+        return validationFailure({
+            category: "schema",
+            logicalArtifact: "run.json",
+            message: "Run artifact does not match the machine run v4 schema.",
+            pointer: error?.instancePath ?? ""
+        });
+    }
+    return validationSuccess(parsed.value);
+}
+function parseRecords(bytes) {
+    if (bytes.byteLength === 0)
+        return validationSuccess([]);
+    if (bytes[bytes.byteLength - 1] !== 0x0a) {
+        return validationFailure({
+            category: "framing",
+            line: countLf(bytes) + 1,
+            logicalArtifact: "records.ndjson",
+            message: "Non-empty record stream must end with exactly one LF."
+        });
+    }
+    const decoded = decode(bytes, "records.ndjson");
+    if (!decoded.ok)
+        return decoded;
+    return parseRecordSegments(decoded.value.slice(0, -1).split("\n"));
+}
+function parseRecordSegments(segments) {
+    const records = [];
+    for (const [index, segment] of segments.entries()) {
+        const framingFailure = validateRecordSegment(segment, index);
+        if (framingFailure !== null)
+            return framingFailure;
+        const parsed = parseJson(segment, {
+            index,
+            line: index + 1,
+            logicalArtifact: "records.ndjson",
+            message: "Record segment must contain exactly one JSON value."
+        });
+        if (!parsed.ok)
+            return parsed;
+        if (!Value.Check(MACHINE_RECORD_V4_SCHEMA, parsed.value)) {
+            const error = Value.Errors(MACHINE_RECORD_V4_SCHEMA, parsed.value)[0];
+            return validationFailure({
+                category: "schema",
+                index,
+                line: index + 1,
+                logicalArtifact: "records.ndjson",
+                message: "Record does not match the machine record v4 schema.",
+                pointer: error?.instancePath ?? ""
+            });
+        }
+        records.push(parsed.value);
+    }
+    return validationSuccess(records);
+}
+function validateRecordSegment(segment, index) {
+    if (segment.length > 0 && !/^[\t\r ]+$/.test(segment))
+        return null;
+    return validationFailure({
+        category: "framing",
+        index,
+        line: index + 1,
+        logicalArtifact: "records.ndjson",
+        message: "Record segment must not be empty or whitespace-only."
+    });
+}
+function parseJson(text, diagnostic) {
+    try {
+        return validationSuccess(JSON.parse(text));
+    }
+    catch {
+        return validationFailure({ category: "syntax", ...diagnostic });
+    }
+}
+function decode(bytes, logicalArtifact) {
+    if (bytes[0] === 0xef && bytes[1] === 0xbb && bytes[2] === 0xbf) {
+        return validationFailure({
+            category: "decoding",
+            logicalArtifact,
+            message: "Leading UTF-8 BOM is not allowed."
+        });
+    }
+    try {
+        return validationSuccess(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    }
+    catch {
+        return validationFailure({
+            category: "decoding",
+            logicalArtifact,
+            message: "Input is not valid UTF-8."
+        });
+    }
+}
+function countLf(bytes) {
+    let count = 0;
+    for (const byte of bytes)
+        if (byte === 0x0a)
+            count += 1;
+    return count;
+}
+//# sourceMappingURL=validation.mjs.map

package/dist/esm/machine-output/v4/validation.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.mjs","sourceRoot":"","sources":["../../../../src/machine-output/v4/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,eAAe,CAAC;AAGlC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EAGtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EAGlB,MAAM,wBAAwB,CAAC;AAahC,MAAM,UAAU,+BAA+B,CAC7C,KAGE;IAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,CAAC,aAAa,CAAC,EAAE;QAAE,OAAO,aAAa,CAAC;IAC5C,MAAM,SAAS,GAAG,6BAA6B,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC;IACtF,OAAO,CACL,SAAS;QACT,iBAAiB,CACf,MAAM,CAAC,MAAM,CAAC;YACZ,GAAG,EAAE,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC;YAC5C,OAAO,EAAE,sBAAsB,CAAC,aAAa,CAAC,KAAK,CAAC;SACrD,CAAgC,CAClC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE;QACtC,eAAe,EAAE,UAAU;QAC3B,OAAO,EAAE,mDAAmD;KAC7D,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,iBAAiB,CAAC;YACvB,QAAQ,EAAE,QAAQ;YAClB,eAAe,EAAE,UAAU;YAC3B,OAAO,EAAE,wDAAwD;YACjE,OAAO,EAAE,KAAK,EAAE,YAAY,IAAI,EAAE;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzC,OAAO,iBAAiB,CAAC;YACvB,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YACxB,eAAe,EAAE,gBAAgB;YACjC,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA2B;IACtD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,cAAc,KAAK,IAAI;YAAE,OAAO,cAAc,CAAC;QACnD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE;YAChC,KAAK;YACL,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,eAAe,EAAE,gBAAgB;YACjC,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,OAAO,iBAAiB,CAAC;gBACvB,QAAQ,EAAE,QAAQ;gBAClB,KAAK;gBACL,IAAI,EAAE,KAAK,GAAG,CAAC;gBACf,eAAe,EAAE,gBAAgB;gBACjC,OAAO,EAAE,qDAAqD;gBAC9D,OAAO,EAAE,KAAK,EAAE,YAAY,IAAI,EAAE;aACnC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe,EACf,KAAa;IAEb,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO,iBAAiB,CAAC;QACvB,QAAQ,EAAE,SAAS;QACnB,KAAK;QACL,IAAI,EAAE,KAAK,GAAG,CAAC;QACf,eAAe,EAAE,gBAAgB;QACjC,OAAO,EAAE,sDAAsD;KAChE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAChB,IAAY,EACZ,UAAoE;IAEpE,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CACb,KAAiB,EACjB,eAA0E;IAE1E,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChE,OAAO,iBAAiB,CAAC;YACvB,QAAQ,EAAE,UAAU;YACpB,eAAe;YACf,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC;YACvB,QAAQ,EAAE,UAAU;YACpB,eAAe;YACf,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAiB;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,IAAI,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import Value from \"typebox/value\";\n\nimport type { MachinePublicationV4 } from \"./projection.ts\";\nimport { freezePublicationValue } from \"./freeze-publication-value.ts\";\nimport { validatePublicationInvariants } from \"./publication-invariants.ts\";\nimport {\n  MACHINE_RECORD_V4_SCHEMA,\n  MACHINE_RUN_V4_SCHEMA,\n  type MachineRecordV4,\n  type MachineRunV4\n} from \"./schema.ts\";\nimport {\n  validationFailure,\n  validationSuccess,\n  type MachinePublicationValidationDiagnostic,\n  type MachinePublicationValidationResult\n} from \"./validation-result.ts\";\n\nexport type {\n  MachinePublicationSetRelationship,\n  MachinePublicationValidationCategory,\n  MachinePublicationValidationDiagnostic,\n  MachinePublicationValidationResult\n} from \"./validation-result.ts\";\n\ntype Parsed<Value> = Readonly<\n  { ok: false; diagnostic: MachinePublicationValidationDiagnostic } | { ok: true; value: Value }\n>;\n\nexport function validateMachinePublicationSetV4(\n  input: Readonly<{\n    recordsNdjson: Uint8Array;\n    runJson: Uint8Array;\n  }>\n): MachinePublicationValidationResult {\n  const runResult = parseRun(input.runJson);\n  if (!runResult.ok) return runResult;\n  const recordsResult = parseRecords(input.recordsNdjson);\n  if (!recordsResult.ok) return recordsResult;\n  const invariant = validatePublicationInvariants(runResult.value, recordsResult.value);\n  return (\n    invariant ??\n    validationSuccess(\n      Object.freeze({\n        run: freezePublicationValue(runResult.value),\n        records: freezePublicationValue(recordsResult.value)\n      }) satisfies MachinePublicationV4\n    )\n  );\n}\n\nfunction parseRun(bytes: Uint8Array): Parsed<MachineRunV4> {\n  const decoded = decode(bytes, \"run.json\");\n  if (!decoded.ok) return decoded;\n  const parsed = parseJson(decoded.value, {\n    logicalArtifact: \"run.json\",\n    message: \"Run artifact must contain exactly one JSON value.\"\n  });\n  if (!parsed.ok) return parsed;\n  if (!Value.Check(MACHINE_RUN_V4_SCHEMA, parsed.value)) {\n    const error = Value.Errors(MACHINE_RUN_V4_SCHEMA, parsed.value)[0];\n    return validationFailure({\n      category: \"schema\",\n      logicalArtifact: \"run.json\",\n      message: \"Run artifact does not match the machine run v4 schema.\",\n      pointer: error?.instancePath ?? \"\"\n    });\n  }\n  return validationSuccess(parsed.value);\n}\n\nfunction parseRecords(bytes: Uint8Array): Parsed<MachineRecordV4[]> {\n  if (bytes.byteLength === 0) return validationSuccess([]);\n  if (bytes[bytes.byteLength - 1] !== 0x0a) {\n    return validationFailure({\n      category: \"framing\",\n      line: countLf(bytes) + 1,\n      logicalArtifact: \"records.ndjson\",\n      message: \"Non-empty record stream must end with exactly one LF.\"\n    });\n  }\n  const decoded = decode(bytes, \"records.ndjson\");\n  if (!decoded.ok) return decoded;\n  return parseRecordSegments(decoded.value.slice(0, -1).split(\"\\n\"));\n}\n\nfunction parseRecordSegments(segments: readonly string[]): Parsed<MachineRecordV4[]> {\n  const records: MachineRecordV4[] = [];\n  for (const [index, segment] of segments.entries()) {\n    const framingFailure = validateRecordSegment(segment, index);\n    if (framingFailure !== null) return framingFailure;\n    const parsed = parseJson(segment, {\n      index,\n      line: index + 1,\n      logicalArtifact: \"records.ndjson\",\n      message: \"Record segment must contain exactly one JSON value.\"\n    });\n    if (!parsed.ok) return parsed;\n    if (!Value.Check(MACHINE_RECORD_V4_SCHEMA, parsed.value)) {\n      const error = Value.Errors(MACHINE_RECORD_V4_SCHEMA, parsed.value)[0];\n      return validationFailure({\n        category: \"schema\",\n        index,\n        line: index + 1,\n        logicalArtifact: \"records.ndjson\",\n        message: \"Record does not match the machine record v4 schema.\",\n        pointer: error?.instancePath ?? \"\"\n      });\n    }\n    records.push(parsed.value);\n  }\n  return validationSuccess(records);\n}\n\nfunction validateRecordSegment(\n  segment: string,\n  index: number\n): Extract<Parsed<never>, { ok: false }> | null {\n  if (segment.length > 0 && !/^[\\t\\r ]+$/.test(segment)) return null;\n  return validationFailure({\n    category: \"framing\",\n    index,\n    line: index + 1,\n    logicalArtifact: \"records.ndjson\",\n    message: \"Record segment must not be empty or whitespace-only.\"\n  });\n}\n\nfunction parseJson(\n  text: string,\n  diagnostic: Omit<MachinePublicationValidationDiagnostic, \"category\">\n): Parsed<unknown> {\n  try {\n    return validationSuccess(JSON.parse(text) as unknown);\n  } catch {\n    return validationFailure({ category: \"syntax\", ...diagnostic });\n  }\n}\n\nfunction decode(\n  bytes: Uint8Array,\n  logicalArtifact: MachinePublicationValidationDiagnostic[\"logicalArtifact\"]\n): Parsed<string> {\n  if (bytes[0] === 0xef && bytes[1] === 0xbb && bytes[2] === 0xbf) {\n    return validationFailure({\n      category: \"decoding\",\n      logicalArtifact,\n      message: \"Leading UTF-8 BOM is not allowed.\"\n    });\n  }\n  try {\n    return validationSuccess(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes));\n  } catch {\n    return validationFailure({\n      category: \"decoding\",\n      logicalArtifact,\n      message: \"Input is not valid UTF-8.\"\n    });\n  }\n}\n\nfunction countLf(bytes: Uint8Array): number {\n  let count = 0;\n  for (const byte of bytes) if (byte === 0x0a) count += 1;\n  return count;\n}\n"]}

package/dist/esm/package-checks/code-quality-findings/policy.mjs

@@ -0,0 +1,49 @@
+export const FINDING_POLICIES = Object.freeze(["blocking", "non-blocking"]);
+export const DEFAULT_FINDING_POLICY = "non-blocking";
+export function resolveFindingPolicy(value, fallback = DEFAULT_FINDING_POLICY) {
+    if (value === undefined)
+        return fallback;
+    return FINDING_POLICIES.find((policy) => policy === value);
+}
+export function validFindingPolicy(value) {
+    return FINDING_POLICIES.some((policy) => policy === value);
+}
+export function isBlockingFinding(policies) {
+    return policies.some((policy) => policy === "blocking");
+}
+export function settleFindings(findings) {
+    const blockingFindingCount = findings.filter((finding) => finding.actionable && finding.blocking).length;
+    const findingCount = findings.length;
+    const actionableNonBlockingFindingCount = findings.filter((finding) => finding.actionable && !finding.blocking).length;
+    const messages = findingMessages({ actionableNonBlockingFindingCount, blockingFindingCount });
+    return Object.freeze({
+        status: blockingFindingCount > 0 ? "failed" : "passed",
+        data: Object.freeze({
+            blockingFindingCount,
+            findingCount
+        }),
+        ...(messages.length === 0 ? {} : { messages })
+    });
+}
+function findingMessages(summary) {
+    if (summary.blockingFindingCount > 0) {
+        return Object.freeze([
+            Object.freeze({
+                code: "blocking-findings",
+                level: "error",
+                message: `${summary.blockingFindingCount} blocking finding(s) require attention; inspect this Check's Records for affected paths and measurements, then update the code or policy.`
+            })
+        ]);
+    }
+    if (summary.actionableNonBlockingFindingCount > 0) {
+        return Object.freeze([
+            Object.freeze({
+                code: "non-blocking-findings",
+                level: "warning",
+                message: `${summary.actionableNonBlockingFindingCount} non-blocking finding(s) were recorded; inspect this Check's Records for affected paths and measurements, then update the code or policy.`
+            })
+        ]);
+    }
+    return Object.freeze([]);
+}
+//# sourceMappingURL=policy.mjs.map

package/dist/esm/package-checks/code-quality-findings/policy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.mjs","sourceRoot":"","sources":["../../../../src/package-checks/code-quality-findings/policy.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,cAAc,CAAU,CAAC,CAAC;AAKrF,MAAM,CAAC,MAAM,sBAAsB,GAAkB,cAAc,CAAC;AAepE,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,QAAQ,GAAkB,sBAAsB;IAEhD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAkC;IAClE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAsC;IAEtC,MAAM,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CACpD,CAAC,MAAM,CAAC;IACT,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC;IACrC,MAAM,iCAAiC,GAAG,QAAQ,CAAC,MAAM,CACvD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,CACrD,CAAC,MAAM,CAAC;IACT,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,iCAAiC,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACtD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YAClB,oBAAoB;YACpB,YAAY;SACb,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;KAC/C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,OAGE;IAEF,IAAI,OAAO,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,2IAA2I;aACpL,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,iCAAiC,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,GAAG,OAAO,CAAC,iCAAiC,2IAA2I;aACjM,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["import type { CheckMessage, CheckResult } from \"../../check/check.ts\";\n\nexport const FINDING_POLICIES = Object.freeze([\"blocking\", \"non-blocking\"] as const);\n\n/** package-provided Check 用于结算 normal finding 的阻断策略。 */\nexport type FindingPolicy = (typeof FINDING_POLICIES)[number];\n\nexport const DEFAULT_FINDING_POLICY: FindingPolicy = \"non-blocking\";\n\n/** 三个代码质量 Check 正常完成时返回的精确 finding 计数。 */\nexport interface FindingSummary {\n  readonly blockingFindingCount: number;\n  readonly findingCount: number;\n}\n\n/** 一项 finding 在 Check 自己结算前的领域中性处置。 */\nexport interface FindingSettlement {\n  /** 该 finding 是否仍需要进入该 Check 的正常 finding 结算。 */\n  readonly actionable: boolean;\n  readonly blocking: boolean;\n}\n\nexport function resolveFindingPolicy(\n  value: unknown,\n  fallback: FindingPolicy = DEFAULT_FINDING_POLICY\n): FindingPolicy | undefined {\n  if (value === undefined) return fallback;\n  return FINDING_POLICIES.find((policy) => policy === value);\n}\n\nexport function validFindingPolicy(value: unknown): value is FindingPolicy {\n  return FINDING_POLICIES.some((policy) => policy === value);\n}\n\nexport function isBlockingFinding(policies: readonly FindingPolicy[]): boolean {\n  return policies.some((policy) => policy === \"blocking\");\n}\n\nexport function settleFindings(\n  findings: readonly FindingSettlement[]\n): CheckResult<FindingSummary> {\n  const blockingFindingCount = findings.filter(\n    (finding) => finding.actionable && finding.blocking\n  ).length;\n  const findingCount = findings.length;\n  const actionableNonBlockingFindingCount = findings.filter(\n    (finding) => finding.actionable && !finding.blocking\n  ).length;\n  const messages = findingMessages({ actionableNonBlockingFindingCount, blockingFindingCount });\n  return Object.freeze({\n    status: blockingFindingCount > 0 ? \"failed\" : \"passed\",\n    data: Object.freeze({\n      blockingFindingCount,\n      findingCount\n    }),\n    ...(messages.length === 0 ? {} : { messages })\n  });\n}\n\nfunction findingMessages(\n  summary: Readonly<{\n    readonly actionableNonBlockingFindingCount: number;\n    readonly blockingFindingCount: number;\n  }>\n): readonly CheckMessage[] {\n  if (summary.blockingFindingCount > 0) {\n    return Object.freeze([\n      Object.freeze({\n        code: \"blocking-findings\",\n        level: \"error\",\n        message: `${summary.blockingFindingCount} blocking finding(s) require attention; inspect this Check's Records for affected paths and measurements, then update the code or policy.`\n      })\n    ]);\n  }\n  if (summary.actionableNonBlockingFindingCount > 0) {\n    return Object.freeze([\n      Object.freeze({\n        code: \"non-blocking-findings\",\n        level: \"warning\",\n        message: `${summary.actionableNonBlockingFindingCount} non-blocking finding(s) were recorded; inspect this Check's Records for affected paths and measurements, then update the code or policy.`\n      })\n    ]);\n  }\n  return Object.freeze([]);\n}\n"]}