@zxyycom/vibe-check 0.0.2 → 0.0.3

package/dist/esm/package-checks/command-check/execution.mjs

@@ -0,0 +1,134 @@
+import { isAbsolute, resolve } from "node:path";
+import { runProcess } from "../host-environment/process.mjs";
+import { isValidResolvedCommandCheckOptions, resolveCommandCheckEnvironment } from "./options.mjs";
+import { closedTranscript, runningTranscript, writeCommandTranscript } from "./transcript.mjs";
+/** Executes one validated no-shell command and releases all child material after optional transcript persistence. */
+export async function executeCommandCheck(context, executionExtensions = {}) {
+    if (!isValidResolvedCommandCheckOptions(context.options))
+        return unavailable("invalid-options");
+    const environment = await resolveExecutionEnvironment(context, executionExtensions.resolveEnvironment);
+    if (environment === undefined)
+        return unavailable("command-environment-resolution-failed");
+    return executeResolvedCommand(context, environment, executionExtensions.afterCommand);
+}
+/** Runs one resolved command, preserving requested transcripts before caller-owned settlement. */
+async function executeResolvedCommand(context, environment, afterCommand) {
+    const { options } = context;
+    if (!(await writeRunningCommandTranscript(context.artifactDirectory, options.output.mode))) {
+        return unavailable("command-transcript-unavailable");
+    }
+    const result = await runProcess({
+        args: options.arguments,
+        cancelSignal: context.signal,
+        command: options.executable,
+        cwd: resolveWorkingDirectory(options.workingDirectory, context.project.root),
+        env: executionEnvironment(environment),
+        extendEnv: false,
+        label: "command Check",
+        maxBuffer: options.outputByteLimit,
+        timeout: options.timeoutMs
+    });
+    const terminal = terminalResult(result);
+    if (!(await writeClosedCommandTranscript(context.artifactDirectory, options.output.mode, terminal.status, result))) {
+        return unavailable("command-transcript-unavailable");
+    }
+    return settleCommandResult(context, result, terminal.result, afterCommand);
+}
+/** Writes the running marker only where output policy and artifact capability both allow it. */
+async function writeRunningCommandTranscript(artifactDirectory, outputMode) {
+    if (outputMode === "discard")
+        return true;
+    return (artifactDirectory !== null && writeCommandTranscript(artifactDirectory, runningTranscript()));
+}
+/** Replaces the running marker with final child material before any caller-owned callback observes it. */
+async function writeClosedCommandTranscript(artifactDirectory, outputMode, status, result) {
+    if (outputMode === "discard")
+        return true;
+    return (artifactDirectory !== null &&
+        writeCommandTranscript(artifactDirectory, closedTranscript({ status, stderr: result.stderr, stdout: result.stdout })));
+}
+/** Lets the caller settle only complete numeric exits; all other terminal causes remain Product-owned. */
+function settleCommandResult(context, result, defaultResult, afterCommand) {
+    if (afterCommand === undefined || !isCompleteCommandResult(result))
+        return defaultResult;
+    return afterCommand.execute(Object.freeze({
+        ...context,
+        command: Object.freeze({
+            exitCode: result.status,
+            stderr: result.stderr,
+            stdout: result.stdout
+        })
+    }));
+}
+async function resolveExecutionEnvironment(context, resolver) {
+    if (resolver === undefined)
+        return context.options.environment;
+    try {
+        const environment = await resolver(Object.freeze({
+            dependencies: context.dependencies,
+            options: context.options,
+            project: context.project,
+            signal: context.signal
+        }));
+        return resolveCommandCheckEnvironment(environment);
+    }
+    catch {
+        return undefined;
+    }
+}
+function resolveWorkingDirectory(workingDirectory, projectRoot) {
+    if (workingDirectory === null)
+        return projectRoot;
+    if (isAbsolute(workingDirectory))
+        return workingDirectory;
+    return resolve(projectRoot, workingDirectory);
+}
+function executionEnvironment(environment) {
+    if (environment.mode === "exact")
+        return { ...environment.variables };
+    const inherited = { ...process.env };
+    for (const [name, value] of Object.entries(environment.overrides)) {
+        if (value === null)
+            delete inherited[name];
+        else
+            inherited[name] = value;
+    }
+    return inherited;
+}
+function isCompleteCommandResult(result) {
+    return (typeof result.status === "number" &&
+        result.isCanceled !== true &&
+        result.isMaxBuffer !== true &&
+        result.timedOut !== true &&
+        result.signal === null);
+}
+function terminalResult(result) {
+    if (typeof result.status === "number" && result.status !== 0) {
+        return completedTerminal("failed", result.status);
+    }
+    if (result.isCanceled === true)
+        return unavailableTerminal("command-terminated-by-signal");
+    if (result.timedOut === true)
+        return unavailableTerminal("command-timeout");
+    if (result.isMaxBuffer === true)
+        return unavailableTerminal("command-output-limit-exceeded");
+    if (result.signal !== null)
+        return unavailableTerminal("command-terminated-by-signal");
+    if (result.status === 0) {
+        return completedTerminal("passed", 0);
+    }
+    return unavailableTerminal("command-start-failed");
+}
+function completedTerminal(status, exitCode) {
+    const result = status === "passed"
+        ? Object.freeze({ status: "passed", data: Object.freeze({ exitCode }) })
+        : Object.freeze({ status: "failed", data: Object.freeze({ exitCode }) });
+    return Object.freeze({ result, status });
+}
+function unavailableTerminal(code) {
+    return Object.freeze({ result: unavailable(code), status: "unavailable" });
+}
+function unavailable(code) {
+    return Object.freeze({ status: "unavailable", reason: Object.freeze({ code }) });
+}
+//# sourceMappingURL=execution.mjs.map

package/dist/esm/package-checks/command-check/execution.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.mjs","sourceRoot":"","sources":["../../../../src/package-checks/command-check/execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAY9F,qHAAqH;AACrH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA2D,EAC3D,mBAAmB,GAGd,EAAE;IAEP,IAAI,CAAC,kCAAkC,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAEhG,MAAM,WAAW,GAAG,MAAM,2BAA2B,CACnD,OAAO,EACP,mBAAmB,CAAC,kBAAkB,CACvC,CAAC;IACF,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC,uCAAuC,CAAC,CAAC;IAE3F,OAAO,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;AACxF,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,sBAAsB,CACnC,OAA2D,EAC3D,WAAuD,EACvD,YAAsC;IAEtC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,6BAA6B,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3F,OAAO,WAAW,CAAC,gCAAgC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;QAC9B,IAAI,EAAE,OAAO,CAAC,SAAS;QACvB,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,OAAO,EAAE,OAAO,CAAC,UAAU;QAC3B,GAAG,EAAE,uBAAuB,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5E,GAAG,EAAE,oBAAoB,CAAC,WAAW,CAAC;QACtC,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,OAAO,CAAC,eAAe;QAClC,OAAO,EAAE,OAAO,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,IACE,CAAC,CAAC,MAAM,4BAA4B,CAClC,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,MAAM,CAAC,IAAI,EACnB,QAAQ,CAAC,MAAM,EACf,MAAM,CACP,CAAC,EACF,CAAC;QACD,OAAO,WAAW,CAAC,gCAAgC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC7E,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,6BAA6B,CAC1C,iBAAgC,EAChC,UAAyD;IAEzD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,CACL,iBAAiB,KAAK,IAAI,IAAI,sBAAsB,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,KAAK,UAAU,4BAA4B,CACzC,iBAAgC,EAChC,UAAyD,EACzD,MAA2C,EAC3C,MAA4B;IAE5B,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,CACL,iBAAiB,KAAK,IAAI;QAC1B,sBAAsB,CACpB,iBAAiB,EACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAC3E,CACF,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,SAAS,mBAAmB,CAC1B,OAA2D,EAC3D,MAA4B,EAC5B,aAAiD,EACjD,YAAsC;IAEtC,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC;QAAE,OAAO,aAAa,CAAC;IACzF,OAAO,YAAY,CAAC,OAAO,CACzB,MAAM,CAAC,MAAM,CAAC;QACZ,GAAG,OAAO;QACV,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,QAAQ,EAAE,MAAM,CAAC,MAAM;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;KACH,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,OAA2D,EAC3D,QAAgD;IAEhD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,QAAQ,CAChC,MAAM,CAAC,MAAM,CAAC;YACZ,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CACH,CAAC;QACF,OAAO,8BAA8B,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,gBAA+B,EAAE,WAAmB;IACnF,IAAI,gBAAgB,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IAClD,IAAI,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC1D,OAAO,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,oBAAoB,CAC3B,WAAuD;IAEvD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IACtE,MAAM,SAAS,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;;YACtC,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,MAA4B;IAG3D,OAAO,CACL,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,MAAM,CAAC,WAAW,KAAK,IAAI;QAC3B,MAAM,CAAC,QAAQ,KAAK,IAAI;QACxB,MAAM,CAAC,MAAM,KAAK,IAAI,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAA4B;IAIlD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA2B,EAC3B,QAAgB;IAKhB,MAAM,MAAM,GACV,MAAM,KAAK,QAAQ;QACjB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAiB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACjF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAiB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAuC;IAIlE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,IAAuC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC","sourcesContent":["import { isAbsolute, resolve } from \"node:path\";\n\nimport type { CheckExecutionContext, CheckResult } from \"../../check/check.ts\";\nimport { runProcess } from \"../host-environment/process.ts\";\nimport { isValidResolvedCommandCheckOptions, resolveCommandCheckEnvironment } from \"./options.ts\";\nimport { closedTranscript, runningTranscript, writeCommandTranscript } from \"./transcript.ts\";\nimport type {\n  AfterCommand,\n  CommandCheckFinalData,\n  CommandEnvironmentResolver,\n  CommandCheckUnavailableReasonCode,\n  ResolvedCommandCheckOptions\n} from \"./contract.ts\";\n\ntype CommandProcessResult = Awaited<ReturnType<typeof runProcess>> &\n  Readonly<{ readonly isCanceled?: true; readonly isMaxBuffer?: true; readonly timedOut?: true }>;\n\n/** Executes one validated no-shell command and releases all child material after optional transcript persistence. */\nexport async function executeCommandCheck(\n  context: CheckExecutionContext<ResolvedCommandCheckOptions>,\n  executionExtensions: Readonly<{\n    readonly afterCommand?: AfterCommand | undefined;\n    readonly resolveEnvironment?: CommandEnvironmentResolver | undefined;\n  }> = {}\n): Promise<CheckResult> {\n  if (!isValidResolvedCommandCheckOptions(context.options)) return unavailable(\"invalid-options\");\n\n  const environment = await resolveExecutionEnvironment(\n    context,\n    executionExtensions.resolveEnvironment\n  );\n  if (environment === undefined) return unavailable(\"command-environment-resolution-failed\");\n\n  return executeResolvedCommand(context, environment, executionExtensions.afterCommand);\n}\n\n/** Runs one resolved command, preserving requested transcripts before caller-owned settlement. */\nasync function executeResolvedCommand(\n  context: CheckExecutionContext<ResolvedCommandCheckOptions>,\n  environment: ResolvedCommandCheckOptions[\"environment\"],\n  afterCommand: AfterCommand | undefined\n): Promise<CheckResult> {\n  const { options } = context;\n  if (!(await writeRunningCommandTranscript(context.artifactDirectory, options.output.mode))) {\n    return unavailable(\"command-transcript-unavailable\");\n  }\n\n  const result = await runProcess({\n    args: options.arguments,\n    cancelSignal: context.signal,\n    command: options.executable,\n    cwd: resolveWorkingDirectory(options.workingDirectory, context.project.root),\n    env: executionEnvironment(environment),\n    extendEnv: false,\n    label: \"command Check\",\n    maxBuffer: options.outputByteLimit,\n    timeout: options.timeoutMs\n  });\n  const terminal = terminalResult(result);\n  if (\n    !(await writeClosedCommandTranscript(\n      context.artifactDirectory,\n      options.output.mode,\n      terminal.status,\n      result\n    ))\n  ) {\n    return unavailable(\"command-transcript-unavailable\");\n  }\n  return settleCommandResult(context, result, terminal.result, afterCommand);\n}\n\n/** Writes the running marker only where output policy and artifact capability both allow it. */\nasync function writeRunningCommandTranscript(\n  artifactDirectory: string | null,\n  outputMode: ResolvedCommandCheckOptions[\"output\"][\"mode\"]\n): Promise<boolean> {\n  if (outputMode === \"discard\") return true;\n  return (\n    artifactDirectory !== null && writeCommandTranscript(artifactDirectory, runningTranscript())\n  );\n}\n\n/** Replaces the running marker with final child material before any caller-owned callback observes it. */\nasync function writeClosedCommandTranscript(\n  artifactDirectory: string | null,\n  outputMode: ResolvedCommandCheckOptions[\"output\"][\"mode\"],\n  status: \"passed\" | \"failed\" | \"unavailable\",\n  result: CommandProcessResult\n): Promise<boolean> {\n  if (outputMode === \"discard\") return true;\n  return (\n    artifactDirectory !== null &&\n    writeCommandTranscript(\n      artifactDirectory,\n      closedTranscript({ status, stderr: result.stderr, stdout: result.stdout })\n    )\n  );\n}\n\n/** Lets the caller settle only complete numeric exits; all other terminal causes remain Product-owned. */\nfunction settleCommandResult(\n  context: CheckExecutionContext<ResolvedCommandCheckOptions>,\n  result: CommandProcessResult,\n  defaultResult: CheckResult<CommandCheckFinalData>,\n  afterCommand: AfterCommand | undefined\n): CheckResult | Promise<CheckResult> {\n  if (afterCommand === undefined || !isCompleteCommandResult(result)) return defaultResult;\n  return afterCommand.execute(\n    Object.freeze({\n      ...context,\n      command: Object.freeze({\n        exitCode: result.status,\n        stderr: result.stderr,\n        stdout: result.stdout\n      })\n    })\n  );\n}\n\nasync function resolveExecutionEnvironment(\n  context: CheckExecutionContext<ResolvedCommandCheckOptions>,\n  resolver: CommandEnvironmentResolver | undefined\n): Promise<ResolvedCommandCheckOptions[\"environment\"] | undefined> {\n  if (resolver === undefined) return context.options.environment;\n  try {\n    const environment = await resolver(\n      Object.freeze({\n        dependencies: context.dependencies,\n        options: context.options,\n        project: context.project,\n        signal: context.signal\n      })\n    );\n    return resolveCommandCheckEnvironment(environment);\n  } catch {\n    return undefined;\n  }\n}\n\nfunction resolveWorkingDirectory(workingDirectory: string | null, projectRoot: string): string {\n  if (workingDirectory === null) return projectRoot;\n  if (isAbsolute(workingDirectory)) return workingDirectory;\n  return resolve(projectRoot, workingDirectory);\n}\n\nfunction executionEnvironment(\n  environment: ResolvedCommandCheckOptions[\"environment\"]\n): NodeJS.ProcessEnv {\n  if (environment.mode === \"exact\") return { ...environment.variables };\n  const inherited: NodeJS.ProcessEnv = { ...process.env };\n  for (const [name, value] of Object.entries(environment.overrides)) {\n    if (value === null) delete inherited[name];\n    else inherited[name] = value;\n  }\n  return inherited;\n}\n\nfunction isCompleteCommandResult(result: CommandProcessResult): result is CommandProcessResult & {\n  readonly status: number;\n} {\n  return (\n    typeof result.status === \"number\" &&\n    result.isCanceled !== true &&\n    result.isMaxBuffer !== true &&\n    result.timedOut !== true &&\n    result.signal === null\n  );\n}\n\nfunction terminalResult(result: CommandProcessResult): Readonly<{\n  readonly result: CheckResult<CommandCheckFinalData>;\n  readonly status: \"passed\" | \"failed\" | \"unavailable\";\n}> {\n  if (typeof result.status === \"number\" && result.status !== 0) {\n    return completedTerminal(\"failed\", result.status);\n  }\n  if (result.isCanceled === true) return unavailableTerminal(\"command-terminated-by-signal\");\n  if (result.timedOut === true) return unavailableTerminal(\"command-timeout\");\n  if (result.isMaxBuffer === true) return unavailableTerminal(\"command-output-limit-exceeded\");\n  if (result.signal !== null) return unavailableTerminal(\"command-terminated-by-signal\");\n  if (result.status === 0) {\n    return completedTerminal(\"passed\", 0);\n  }\n  return unavailableTerminal(\"command-start-failed\");\n}\n\nfunction completedTerminal(\n  status: \"passed\" | \"failed\",\n  exitCode: number\n): Readonly<{\n  readonly result: CheckResult<CommandCheckFinalData>;\n  readonly status: \"passed\" | \"failed\";\n}> {\n  const result: CheckResult<CommandCheckFinalData> =\n    status === \"passed\"\n      ? Object.freeze({ status: \"passed\" as const, data: Object.freeze({ exitCode }) })\n      : Object.freeze({ status: \"failed\" as const, data: Object.freeze({ exitCode }) });\n  return Object.freeze({ result, status });\n}\n\nfunction unavailableTerminal(code: CommandCheckUnavailableReasonCode): Readonly<{\n  readonly result: CheckResult<CommandCheckFinalData>;\n  readonly status: \"unavailable\";\n}> {\n  return Object.freeze({ result: unavailable(code), status: \"unavailable\" });\n}\n\nfunction unavailable(code: CommandCheckUnavailableReasonCode): CheckResult<CommandCheckFinalData> {\n  return Object.freeze({ status: \"unavailable\", reason: Object.freeze({ code }) });\n}\n"]}

package/dist/esm/package-checks/command-check/options.mjs

@@ -0,0 +1,284 @@
+import { snapshotClosedArray, snapshotClosedPolicyRecord, snapshotClosedRecord, snapshotExactClosedRecord } from "../../data-boundary/closed-values.mjs";
+import { isNonEmptyString, isPositiveSafeInteger } from "../../data-boundary/value-shapes.mjs";
+const COMMAND_INPUT_OPTIONAL_KEYS = [
+    "admissionPriority",
+    "afterCommand",
+    "arguments",
+    "checks",
+    "dependsOn",
+    "enabledByFlags",
+    "environment",
+    "maxParallel",
+    "mutex",
+    "observes",
+    "omitQuietPassedRow",
+    "output",
+    "resourceClaims",
+    "resolveEnvironment",
+    "workingDirectory"
+];
+const COMMAND_INPUT_REQUIRED_KEYS = [
+    "checkId",
+    "displayName",
+    "executable",
+    "outputByteLimit",
+    "timeoutMs"
+];
+const RESOLVED_OPTION_KEYS = [
+    "arguments",
+    "environment",
+    "executable",
+    "output",
+    "outputByteLimit",
+    "timeoutMs",
+    "workingDirectory"
+];
+/** Snapshots one closed constructor input and materializes every command-owned omission. */
+export function resolveCommandCheckInput(input) {
+    const snapshot = snapshotClosedPolicyRecord(input, {
+        optional: COMMAND_INPUT_OPTIONAL_KEYS,
+        required: COMMAND_INPUT_REQUIRED_KEYS
+    });
+    if (snapshot === undefined)
+        return undefined;
+    const afterCommand = resolveAfterCommand(snapshot.afterCommand);
+    const environmentResolver = resolveEnvironmentResolver(snapshot.resolveEnvironment);
+    if ((snapshot.afterCommand !== undefined && afterCommand === undefined) ||
+        (snapshot.resolveEnvironment !== undefined && environmentResolver === undefined) ||
+        (snapshot.environment !== undefined && snapshot.resolveEnvironment !== undefined)) {
+        return undefined;
+    }
+    const options = resolveCommandOptions(snapshot);
+    return options === undefined
+        ? undefined
+        : Object.freeze({
+            afterCommand,
+            options,
+            resolveEnvironment: environmentResolver
+        });
+}
+/** Resolves one callback-produced environment to the same complete closed shape as static input. */
+export function resolveCommandCheckEnvironment(value) {
+    if (value === undefined)
+        return undefined;
+    return resolveEnvironment(value);
+}
+/** Revalidates the complete resolved shape before execution. */
+export function isValidResolvedCommandCheckOptions(value) {
+    const options = snapshotExactClosedRecord(value, RESOLVED_OPTION_KEYS);
+    return (options !== undefined &&
+        validCommandText(options.executable) &&
+        validArguments(options.arguments) &&
+        validWorkingDirectory(options.workingDirectory) &&
+        validEnvironment(options.environment) &&
+        validOutput(options.output) &&
+        isPositiveSafeInteger(options.timeoutMs) &&
+        isPositiveSafeInteger(options.outputByteLimit));
+}
+function resolveCommandOptions(input) {
+    if (!isNonEmptyString(input.checkId) || !isNonEmptyString(input.displayName))
+        return undefined;
+    const options = resolveCommandExecutionOptions(input);
+    if (options === undefined)
+        return undefined;
+    return isValidResolvedCommandCheckOptions(options) ? options : undefined;
+}
+function resolveAfterCommand(value) {
+    if (value === undefined)
+        return undefined;
+    const afterCommand = snapshotClosedPolicyRecord(value, {
+        optional: ["parseData"],
+        required: ["execute"]
+    });
+    if (afterCommand === undefined || !isAfterCommandExecution(afterCommand.execute))
+        return undefined;
+    if (afterCommand.parseData !== undefined && !isCheckDataParser(afterCommand.parseData)) {
+        return undefined;
+    }
+    return Object.freeze({
+        execute: afterCommand.execute,
+        ...(afterCommand.parseData === undefined ? {} : { parseData: afterCommand.parseData })
+    });
+}
+function resolveEnvironmentResolver(value) {
+    return isCommandEnvironmentResolver(value) ? value : undefined;
+}
+function isAfterCommandExecution(value) {
+    return typeof value === "function";
+}
+function isCheckDataParser(value) {
+    return typeof value === "function";
+}
+function isCommandEnvironmentResolver(value) {
+    return typeof value === "function";
+}
+/** Resolves command-owned execution fields after the ordinary Check identity is known valid. */
+function resolveCommandExecutionOptions(input) {
+    const argumentsSnapshot = resolveArguments(input.arguments);
+    const environment = resolveEnvironment(input.environment);
+    const output = resolveOutput(input.output);
+    const workingDirectory = resolveWorkingDirectory(input.workingDirectory);
+    if (!validCommandText(input.executable) ||
+        argumentsSnapshot === undefined ||
+        environment === undefined ||
+        output === undefined ||
+        workingDirectory === undefined ||
+        !isPositiveSafeInteger(input.timeoutMs) ||
+        !isPositiveSafeInteger(input.outputByteLimit)) {
+        return undefined;
+    }
+    return Object.freeze({
+        arguments: argumentsSnapshot,
+        environment,
+        executable: input.executable,
+        output,
+        outputByteLimit: input.outputByteLimit,
+        timeoutMs: input.timeoutMs,
+        workingDirectory
+    });
+}
+function resolveArguments(value) {
+    if (value === undefined)
+        return Object.freeze([]);
+    const argumentsSnapshot = snapshotClosedArray(value);
+    if (argumentsSnapshot === undefined)
+        return undefined;
+    const argumentsCopy = [];
+    for (const argument of argumentsSnapshot) {
+        if (!validArgument(argument))
+            return undefined;
+        argumentsCopy.push(argument);
+    }
+    return Object.freeze(argumentsCopy);
+}
+function validArguments(value) {
+    const argumentsSnapshot = snapshotClosedArray(value);
+    return argumentsSnapshot?.every(validArgument) === true;
+}
+function validArgument(value) {
+    return typeof value === "string" && !value.includes("\0");
+}
+function resolveWorkingDirectory(value) {
+    if (value === undefined)
+        return null;
+    return validCommandText(value) ? value : undefined;
+}
+function validWorkingDirectory(value) {
+    return value === null || validCommandText(value);
+}
+function validCommandText(value) {
+    return isNonEmptyString(value) && !value.includes("\0");
+}
+function resolveEnvironment(value) {
+    if (value === undefined)
+        return Object.freeze({ mode: "exact", variables: Object.freeze({}) });
+    const environment = snapshotClosedRecord(value);
+    if (environment === undefined || typeof environment.mode !== "string")
+        return undefined;
+    if (environment.mode === "exact")
+        return resolveExactEnvironment(environment);
+    if (environment.mode === "inherit")
+        return resolveInheritedEnvironment(environment);
+    return undefined;
+}
+function resolveExactEnvironment(environment) {
+    const exact = snapshotClosedPolicyRecord(environment, {
+        optional: ["variables"],
+        required: ["mode"]
+    });
+    if (exact === undefined)
+        return undefined;
+    const variables = Object.hasOwn(exact, "variables")
+        ? resolveExactVariables(exact.variables)
+        : Object.freeze({});
+    if (variables === undefined)
+        return undefined;
+    return Object.freeze({ mode: "exact", variables });
+}
+function resolveInheritedEnvironment(environment) {
+    const inherited = snapshotClosedPolicyRecord(environment, {
+        optional: ["overrides"],
+        required: ["mode"]
+    });
+    if (inherited === undefined)
+        return undefined;
+    const overrides = Object.hasOwn(inherited, "overrides")
+        ? resolveOverrides(inherited.overrides)
+        : Object.freeze({});
+    if (overrides === undefined)
+        return undefined;
+    return Object.freeze({ mode: "inherit", overrides });
+}
+function validEnvironment(value) {
+    const environment = snapshotClosedRecord(value);
+    if (environment === undefined || typeof environment.mode !== "string")
+        return false;
+    if (environment.mode === "exact") {
+        const exact = snapshotExactClosedRecord(environment, ["mode", "variables"]);
+        return exact !== undefined && validVariableMap(exact.variables, false);
+    }
+    if (environment.mode === "inherit") {
+        const inherited = snapshotExactClosedRecord(environment, ["mode", "overrides"]);
+        return inherited !== undefined && validVariableMap(inherited.overrides, true);
+    }
+    return false;
+}
+function resolveExactVariables(value) {
+    const variables = snapshotClosedRecord(value);
+    if (variables === undefined)
+        return undefined;
+    const copied = {};
+    for (const [name, variable] of Object.entries(variables)) {
+        if (name.includes("\0") || typeof variable !== "string" || variable.includes("\0"))
+            return undefined;
+        Object.defineProperty(copied, name, {
+            configurable: false,
+            enumerable: true,
+            value: variable,
+            writable: false
+        });
+    }
+    return Object.freeze(copied);
+}
+function resolveOverrides(value) {
+    const overrides = snapshotClosedRecord(value);
+    if (overrides === undefined)
+        return undefined;
+    const copied = {};
+    for (const [name, override] of Object.entries(overrides)) {
+        if (name.includes("\0") ||
+            (override !== null && (typeof override !== "string" || override.includes("\0")))) {
+            return undefined;
+        }
+        Object.defineProperty(copied, name, {
+            configurable: false,
+            enumerable: true,
+            value: override,
+            writable: false
+        });
+    }
+    return Object.freeze(copied);
+}
+function validVariableMap(value, acceptsNull) {
+    const variables = snapshotClosedRecord(value);
+    return variables !== undefined && validVariableEntries(variables, acceptsNull);
+}
+function validVariableEntries(variables, acceptsNull) {
+    return Object.entries(variables).every(([name, variable]) => !name.includes("\0") &&
+        (typeof variable === "string" ? !variable.includes("\0") : acceptsNull && variable === null));
+}
+function resolveOutput(value) {
+    if (value === undefined)
+        return Object.freeze({ mode: "discard" });
+    const output = snapshotExactClosedRecord(value, ["mode"]);
+    if (output === undefined)
+        return undefined;
+    if (output.mode !== "discard" && output.mode !== "transcript")
+        return undefined;
+    return Object.freeze({ mode: output.mode });
+}
+function validOutput(value) {
+    const output = snapshotExactClosedRecord(value, ["mode"]);
+    return output !== undefined && (output.mode === "discard" || output.mode === "transcript");
+}
+//# sourceMappingURL=options.mjs.map

package/dist/esm/package-checks/command-check/options.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.mjs","sourceRoot":"","sources":["../../../../src/package-checks/command-check/options.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAO9F,MAAM,2BAA2B,GAAG;IAClC,mBAAmB;IACnB,cAAc;IACd,WAAW;IACX,QAAQ;IACR,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,aAAa;IACb,OAAO;IACP,UAAU;IACV,oBAAoB;IACpB,QAAQ;IACR,gBAAgB;IAChB,oBAAoB;IACpB,kBAAkB;CACV,CAAC;AACX,MAAM,2BAA2B,GAAG;IAClC,SAAS;IACT,aAAa;IACb,YAAY;IACZ,iBAAiB;IACjB,WAAW;CACH,CAAC;AACX,MAAM,oBAAoB,GAAG;IAC3B,WAAW;IACX,aAAa;IACb,YAAY;IACZ,QAAQ;IACR,iBAAiB;IACjB,WAAW;IACX,kBAAkB;CACV,CAAC;AAEX,4FAA4F;AAC5F,MAAM,UAAU,wBAAwB,CAAC,KAAc;IAOrD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,EAAE;QACjD,QAAQ,EAAE,2BAA2B;QACrC,QAAQ,EAAE,2BAA2B;KACtC,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACpF,IACE,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,CAAC;QACnE,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS,IAAI,mBAAmB,KAAK,SAAS,CAAC;QAChF,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC,EACjF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACZ,YAAY;YACZ,OAAO;YACP,kBAAkB,EAAE,mBAAmB;SACxC,CAAC,CAAC;AACT,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,8BAA8B,CAC5C,KAAc;IAEd,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACvE,OAAO,CACL,OAAO,KAAK,SAAS;QACrB,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC;QACpC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC;QACjC,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC/C,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3B,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC;QACxC,qBAAqB,CAAC,OAAO,CAAC,eAAe,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAwC;IAExC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/F,MAAM,OAAO,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,kCAAkC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,YAAY,GAAG,0BAA0B,CAAC,KAAK,EAAE;QACrD,QAAQ,EAAE,CAAC,WAAW,CAAC;QACvB,QAAQ,EAAE,CAAC,SAAS,CAAC;KACtB,CAAC,CAAC;IACH,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,OAAO,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,GAAG,CAAC,YAAY,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC;KACvF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,OAAO,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAc;IAClD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,gGAAgG;AAChG,SAAS,8BAA8B,CACrC,KAAwC;IAExC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzE,IACE,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;QACnC,iBAAiB,KAAK,SAAS;QAC/B,WAAW,KAAK,SAAS;QACzB,MAAM,KAAK,SAAS;QACpB,gBAAgB,KAAK,SAAS;QAC9B,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC;QACvC,CAAC,qBAAqB,CAAC,KAAK,CAAC,eAAe,CAAC,EAC7C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,iBAAiB;QAC5B,WAAW;QACX,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM;QACN,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,iBAAiB,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,KAAK,KAAK,IAAI,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc;IAEd,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxF,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAC9E,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACpF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAC9B,WAA8C;IAE9C,MAAM,KAAK,GAAG,0BAA0B,CAAC,WAAW,EAAE;QACpD,QAAQ,EAAE,CAAC,WAAW,CAAC;QACvB,QAAQ,EAAE,CAAC,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC;QACjD,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtB,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,2BAA2B,CAClC,WAA8C;IAE9C,MAAM,SAAS,GAAG,0BAA0B,CAAC,WAAW,EAAE;QACxD,QAAQ,EAAE,CAAC,WAAW,CAAC;QACvB,QAAQ,EAAE,CAAC,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;QACrD,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,SAAS,CAAC;QACvC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtB,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,yBAAyB,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QAC5E,OAAO,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,yBAAyB,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QAChF,OAAO,SAAS,KAAK,SAAS,IAAI,gBAAgB,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAChF,OAAO,SAAS,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE;YAClC,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAkC,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,IACE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAChF,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE;YAClC,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,WAAoB;IAC5D,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,SAAS,KAAK,SAAS,IAAI,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAA4C,EAC5C,WAAoB;IAEpB,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CACpC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CACnB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,QAAQ,KAAK,IAAI,CAAC,CAC/F,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;AAC7F,CAAC","sourcesContent":["import {\n  snapshotClosedArray,\n  snapshotClosedPolicyRecord,\n  snapshotClosedRecord,\n  snapshotExactClosedRecord\n} from \"../../data-boundary/closed-values.ts\";\nimport { isNonEmptyString, isPositiveSafeInteger } from \"../../data-boundary/value-shapes.ts\";\nimport type {\n  AfterCommand,\n  CommandEnvironmentResolver,\n  ResolvedCommandCheckOptions\n} from \"./contract.ts\";\n\nconst COMMAND_INPUT_OPTIONAL_KEYS = [\n  \"admissionPriority\",\n  \"afterCommand\",\n  \"arguments\",\n  \"checks\",\n  \"dependsOn\",\n  \"enabledByFlags\",\n  \"environment\",\n  \"maxParallel\",\n  \"mutex\",\n  \"observes\",\n  \"omitQuietPassedRow\",\n  \"output\",\n  \"resourceClaims\",\n  \"resolveEnvironment\",\n  \"workingDirectory\"\n] as const;\nconst COMMAND_INPUT_REQUIRED_KEYS = [\n  \"checkId\",\n  \"displayName\",\n  \"executable\",\n  \"outputByteLimit\",\n  \"timeoutMs\"\n] as const;\nconst RESOLVED_OPTION_KEYS = [\n  \"arguments\",\n  \"environment\",\n  \"executable\",\n  \"output\",\n  \"outputByteLimit\",\n  \"timeoutMs\",\n  \"workingDirectory\"\n] as const;\n\n/** Snapshots one closed constructor input and materializes every command-owned omission. */\nexport function resolveCommandCheckInput(input: unknown):\n  | Readonly<{\n      readonly afterCommand: AfterCommand | undefined;\n      readonly options: ResolvedCommandCheckOptions;\n      readonly resolveEnvironment: CommandEnvironmentResolver | undefined;\n    }>\n  | undefined {\n  const snapshot = snapshotClosedPolicyRecord(input, {\n    optional: COMMAND_INPUT_OPTIONAL_KEYS,\n    required: COMMAND_INPUT_REQUIRED_KEYS\n  });\n  if (snapshot === undefined) return undefined;\n  const afterCommand = resolveAfterCommand(snapshot.afterCommand);\n  const environmentResolver = resolveEnvironmentResolver(snapshot.resolveEnvironment);\n  if (\n    (snapshot.afterCommand !== undefined && afterCommand === undefined) ||\n    (snapshot.resolveEnvironment !== undefined && environmentResolver === undefined) ||\n    (snapshot.environment !== undefined && snapshot.resolveEnvironment !== undefined)\n  ) {\n    return undefined;\n  }\n  const options = resolveCommandOptions(snapshot);\n  return options === undefined\n    ? undefined\n    : Object.freeze({\n        afterCommand,\n        options,\n        resolveEnvironment: environmentResolver\n      });\n}\n\n/** Resolves one callback-produced environment to the same complete closed shape as static input. */\nexport function resolveCommandCheckEnvironment(\n  value: unknown\n): ResolvedCommandCheckOptions[\"environment\"] | undefined {\n  if (value === undefined) return undefined;\n  return resolveEnvironment(value);\n}\n\n/** Revalidates the complete resolved shape before execution. */\nexport function isValidResolvedCommandCheckOptions(\n  value: unknown\n): value is ResolvedCommandCheckOptions {\n  const options = snapshotExactClosedRecord(value, RESOLVED_OPTION_KEYS);\n  return (\n    options !== undefined &&\n    validCommandText(options.executable) &&\n    validArguments(options.arguments) &&\n    validWorkingDirectory(options.workingDirectory) &&\n    validEnvironment(options.environment) &&\n    validOutput(options.output) &&\n    isPositiveSafeInteger(options.timeoutMs) &&\n    isPositiveSafeInteger(options.outputByteLimit)\n  );\n}\n\nfunction resolveCommandOptions(\n  input: Readonly<Record<string, unknown>>\n): ResolvedCommandCheckOptions | undefined {\n  if (!isNonEmptyString(input.checkId) || !isNonEmptyString(input.displayName)) return undefined;\n  const options = resolveCommandExecutionOptions(input);\n  if (options === undefined) return undefined;\n  return isValidResolvedCommandCheckOptions(options) ? options : undefined;\n}\n\nfunction resolveAfterCommand(value: unknown): AfterCommand | undefined {\n  if (value === undefined) return undefined;\n  const afterCommand = snapshotClosedPolicyRecord(value, {\n    optional: [\"parseData\"],\n    required: [\"execute\"]\n  });\n  if (afterCommand === undefined || !isAfterCommandExecution(afterCommand.execute))\n    return undefined;\n  if (afterCommand.parseData !== undefined && !isCheckDataParser(afterCommand.parseData)) {\n    return undefined;\n  }\n  return Object.freeze({\n    execute: afterCommand.execute,\n    ...(afterCommand.parseData === undefined ? {} : { parseData: afterCommand.parseData })\n  });\n}\n\nfunction resolveEnvironmentResolver(value: unknown): CommandEnvironmentResolver | undefined {\n  return isCommandEnvironmentResolver(value) ? value : undefined;\n}\n\nfunction isAfterCommandExecution(value: unknown): value is AfterCommand[\"execute\"] {\n  return typeof value === \"function\";\n}\n\nfunction isCheckDataParser(value: unknown): value is NonNullable<AfterCommand[\"parseData\"]> {\n  return typeof value === \"function\";\n}\n\nfunction isCommandEnvironmentResolver(value: unknown): value is CommandEnvironmentResolver {\n  return typeof value === \"function\";\n}\n\n/** Resolves command-owned execution fields after the ordinary Check identity is known valid. */\nfunction resolveCommandExecutionOptions(\n  input: Readonly<Record<string, unknown>>\n): ResolvedCommandCheckOptions | undefined {\n  const argumentsSnapshot = resolveArguments(input.arguments);\n  const environment = resolveEnvironment(input.environment);\n  const output = resolveOutput(input.output);\n  const workingDirectory = resolveWorkingDirectory(input.workingDirectory);\n  if (\n    !validCommandText(input.executable) ||\n    argumentsSnapshot === undefined ||\n    environment === undefined ||\n    output === undefined ||\n    workingDirectory === undefined ||\n    !isPositiveSafeInteger(input.timeoutMs) ||\n    !isPositiveSafeInteger(input.outputByteLimit)\n  ) {\n    return undefined;\n  }\n  return Object.freeze({\n    arguments: argumentsSnapshot,\n    environment,\n    executable: input.executable,\n    output,\n    outputByteLimit: input.outputByteLimit,\n    timeoutMs: input.timeoutMs,\n    workingDirectory\n  });\n}\n\nfunction resolveArguments(value: unknown): readonly string[] | undefined {\n  if (value === undefined) return Object.freeze([]);\n  const argumentsSnapshot = snapshotClosedArray(value);\n  if (argumentsSnapshot === undefined) return undefined;\n  const argumentsCopy: string[] = [];\n  for (const argument of argumentsSnapshot) {\n    if (!validArgument(argument)) return undefined;\n    argumentsCopy.push(argument);\n  }\n  return Object.freeze(argumentsCopy);\n}\n\nfunction validArguments(value: unknown): boolean {\n  const argumentsSnapshot = snapshotClosedArray(value);\n  return argumentsSnapshot?.every(validArgument) === true;\n}\n\nfunction validArgument(value: unknown): value is string {\n  return typeof value === \"string\" && !value.includes(\"\\0\");\n}\n\nfunction resolveWorkingDirectory(value: unknown): string | null | undefined {\n  if (value === undefined) return null;\n  return validCommandText(value) ? value : undefined;\n}\n\nfunction validWorkingDirectory(value: unknown): value is string | null {\n  return value === null || validCommandText(value);\n}\n\nfunction validCommandText(value: unknown): value is string {\n  return isNonEmptyString(value) && !value.includes(\"\\0\");\n}\n\nfunction resolveEnvironment(\n  value: unknown\n): ResolvedCommandCheckOptions[\"environment\"] | undefined {\n  if (value === undefined) return Object.freeze({ mode: \"exact\", variables: Object.freeze({}) });\n  const environment = snapshotClosedRecord(value);\n  if (environment === undefined || typeof environment.mode !== \"string\") return undefined;\n  if (environment.mode === \"exact\") return resolveExactEnvironment(environment);\n  if (environment.mode === \"inherit\") return resolveInheritedEnvironment(environment);\n  return undefined;\n}\n\nfunction resolveExactEnvironment(\n  environment: Readonly<Record<string, unknown>>\n): ResolvedCommandCheckOptions[\"environment\"] | undefined {\n  const exact = snapshotClosedPolicyRecord(environment, {\n    optional: [\"variables\"],\n    required: [\"mode\"]\n  });\n  if (exact === undefined) return undefined;\n  const variables = Object.hasOwn(exact, \"variables\")\n    ? resolveExactVariables(exact.variables)\n    : Object.freeze({});\n  if (variables === undefined) return undefined;\n  return Object.freeze({ mode: \"exact\", variables });\n}\n\nfunction resolveInheritedEnvironment(\n  environment: Readonly<Record<string, unknown>>\n): ResolvedCommandCheckOptions[\"environment\"] | undefined {\n  const inherited = snapshotClosedPolicyRecord(environment, {\n    optional: [\"overrides\"],\n    required: [\"mode\"]\n  });\n  if (inherited === undefined) return undefined;\n  const overrides = Object.hasOwn(inherited, \"overrides\")\n    ? resolveOverrides(inherited.overrides)\n    : Object.freeze({});\n  if (overrides === undefined) return undefined;\n  return Object.freeze({ mode: \"inherit\", overrides });\n}\n\nfunction validEnvironment(value: unknown): boolean {\n  const environment = snapshotClosedRecord(value);\n  if (environment === undefined || typeof environment.mode !== \"string\") return false;\n  if (environment.mode === \"exact\") {\n    const exact = snapshotExactClosedRecord(environment, [\"mode\", \"variables\"]);\n    return exact !== undefined && validVariableMap(exact.variables, false);\n  }\n  if (environment.mode === \"inherit\") {\n    const inherited = snapshotExactClosedRecord(environment, [\"mode\", \"overrides\"]);\n    return inherited !== undefined && validVariableMap(inherited.overrides, true);\n  }\n  return false;\n}\n\nfunction resolveExactVariables(value: unknown): Readonly<Record<string, string>> | undefined {\n  const variables = snapshotClosedRecord(value);\n  if (variables === undefined) return undefined;\n  const copied: Record<string, string> = {};\n  for (const [name, variable] of Object.entries(variables)) {\n    if (name.includes(\"\\0\") || typeof variable !== \"string\" || variable.includes(\"\\0\"))\n      return undefined;\n    Object.defineProperty(copied, name, {\n      configurable: false,\n      enumerable: true,\n      value: variable,\n      writable: false\n    });\n  }\n  return Object.freeze(copied);\n}\n\nfunction resolveOverrides(value: unknown): Readonly<Record<string, string | null>> | undefined {\n  const overrides = snapshotClosedRecord(value);\n  if (overrides === undefined) return undefined;\n  const copied: Record<string, string | null> = {};\n  for (const [name, override] of Object.entries(overrides)) {\n    if (\n      name.includes(\"\\0\") ||\n      (override !== null && (typeof override !== \"string\" || override.includes(\"\\0\")))\n    ) {\n      return undefined;\n    }\n    Object.defineProperty(copied, name, {\n      configurable: false,\n      enumerable: true,\n      value: override,\n      writable: false\n    });\n  }\n  return Object.freeze(copied);\n}\n\nfunction validVariableMap(value: unknown, acceptsNull: boolean): boolean {\n  const variables = snapshotClosedRecord(value);\n  return variables !== undefined && validVariableEntries(variables, acceptsNull);\n}\n\nfunction validVariableEntries(\n  variables: Readonly<Record<string, unknown>>,\n  acceptsNull: boolean\n): boolean {\n  return Object.entries(variables).every(\n    ([name, variable]) =>\n      !name.includes(\"\\0\") &&\n      (typeof variable === \"string\" ? !variable.includes(\"\\0\") : acceptsNull && variable === null)\n  );\n}\n\nfunction resolveOutput(value: unknown): ResolvedCommandCheckOptions[\"output\"] | undefined {\n  if (value === undefined) return Object.freeze({ mode: \"discard\" });\n  const output = snapshotExactClosedRecord(value, [\"mode\"]);\n  if (output === undefined) return undefined;\n  if (output.mode !== \"discard\" && output.mode !== \"transcript\") return undefined;\n  return Object.freeze({ mode: output.mode });\n}\n\nfunction validOutput(value: unknown): boolean {\n  const output = snapshotExactClosedRecord(value, [\"mode\"]);\n  return output !== undefined && (output.mode === \"discard\" || output.mode === \"transcript\");\n}\n"]}

package/dist/esm/package-checks/command-check/transcript.mjs

@@ -0,0 +1,26 @@
+import { randomUUID } from "node:crypto";
+import { promises as fs } from "node:fs";
+import { join } from "node:path";
+const TRANSCRIPT_FILE_NAME = "process.log";
+/** Atomically replaces this Check-local fixed transcript without exposing command inputs or native errors. */
+export async function writeCommandTranscript(artifactDirectory, contents) {
+    const targetPath = join(artifactDirectory, TRANSCRIPT_FILE_NAME);
+    const temporaryPath = join(artifactDirectory, `.process-${randomUUID()}.tmp`);
+    try {
+        await fs.mkdir(artifactDirectory, { recursive: true });
+        await fs.writeFile(temporaryPath, contents, { encoding: "utf8", flag: "wx" });
+        await fs.rename(temporaryPath, targetPath);
+        return true;
+    }
+    catch {
+        await fs.rm(temporaryPath, { force: true }).catch(() => undefined);
+        return false;
+    }
+}
+export function runningTranscript() {
+    return "status=running\n";
+}
+export function closedTranscript(input) {
+    return `status=${input.status}\nstdout:\n${input.stdout}\nstderr:\n${input.stderr}`;
+}
+//# sourceMappingURL=transcript.mjs.map

package/dist/esm/package-checks/command-check/transcript.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript.mjs","sourceRoot":"","sources":["../../../../src/package-checks/command-check/transcript.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAE3C,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,iBAAyB,EACzB,QAAgB;IAEhB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,EAAE,YAAY,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAIhC;IACC,OAAO,UAAU,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,MAAM,EAAE,CAAC;AACtF,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { promises as fs } from \"node:fs\";\nimport { join } from \"node:path\";\n\nconst TRANSCRIPT_FILE_NAME = \"process.log\";\n\n/** Atomically replaces this Check-local fixed transcript without exposing command inputs or native errors. */\nexport async function writeCommandTranscript(\n  artifactDirectory: string,\n  contents: string\n): Promise<boolean> {\n  const targetPath = join(artifactDirectory, TRANSCRIPT_FILE_NAME);\n  const temporaryPath = join(artifactDirectory, `.process-${randomUUID()}.tmp`);\n  try {\n    await fs.mkdir(artifactDirectory, { recursive: true });\n    await fs.writeFile(temporaryPath, contents, { encoding: \"utf8\", flag: \"wx\" });\n    await fs.rename(temporaryPath, targetPath);\n    return true;\n  } catch {\n    await fs.rm(temporaryPath, { force: true }).catch(() => undefined);\n    return false;\n  }\n}\n\nexport function runningTranscript(): string {\n  return \"status=running\\n\";\n}\n\nexport function closedTranscript(input: {\n  readonly status: \"passed\" | \"failed\" | \"unavailable\";\n  readonly stderr: string;\n  readonly stdout: string;\n}): string {\n  return `status=${input.status}\\nstdout:\\n${input.stdout}\\nstderr:\\n${input.stderr}`;\n}\n"]}

package/dist/esm/package-checks/duplicate-detection/default-check.mjs

@@ -1,25 +1,23 @@
 import { defineCheck } from "../../check/check.mjs";
+import { resolvePackageCheckAuthoringInput } from "../check-authoring.mjs";
 import { DUPLICATE_DETECTION_CHECK_DEFINITION, executeDuplicateDetection } from "./execution.mjs";
 import { parseDuplicateDetectionData } from "./final-data.mjs";
 import { resolveDuplicateDetectionOptions } from "./options-resolution.mjs";
 import { validResolvedDuplicateDetectionOptions } from "./options-validation.mjs";
-/**
- * 使用可省略的区域、cache 与 scanner policy 构造一个完整 duplicate-detection Check。
- *
- * @param options - 省略字段由 package 补齐；显式 files 数组作为对应字段的完整替换值。
- * @returns 固定 `duplicate-detection` identity、完整冻结 options、preflight 与 execution。
- * @throws {TypeError} input 含未知字段、空 area、非法阈值、非法 cache 或 scanner policy 时抛出。
- */
 export function duplicateDetection(options = {}) {
-    const resolvedOptions = resolveDuplicateDetectionOptions(options);
+    const input = resolvePackageCheckAuthoringInput(options, ["codeAreas", "cache", "findingPolicy", "findingWaivers", "scanner"], DUPLICATE_DETECTION_CHECK_DEFINITION);
+    if (input === undefined) {
+        throw new TypeError("duplicateDetection options are invalid; use the documented closed constructor policy including exact finding waivers");
+    }
+    const resolvedOptions = resolveDuplicateDetectionOptions(input.domainOptions);
     if (resolvedOptions === undefined) {
         throw new TypeError("duplicateDetection options are invalid; use the documented closed constructor policy including exact finding waivers");
     }
     return defineCheck({
-        ...DUPLICATE_DETECTION_CHECK_DEFINITION,
-        execution: executeDuplicateDetection,
+        ...input.definition,
+        execute: executeDuplicateDetection,
         parseData: parseDuplicateDetectionData,
-        preflight: (preparedOptions) => validResolvedDuplicateDetectionOptions(preparedOptions)
+        prepare: (preparedOptions) => validResolvedDuplicateDetectionOptions(preparedOptions)
             ? { status: "success", preparedOptions }
             : {
                 status: "failure",

package/dist/esm/package-checks/duplicate-detection/default-check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"default-check.mjs","sourceRoot":"","sources":["../../../../src/package-checks/duplicate-detection/default-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8B,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,oCAAoC,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AACjG,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,yBAAyB,CAAC;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAO,GAA8B,EAAE;IAMvC,MAAM,eAAe,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CACjB,sHAAsH,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;QACjB,GAAG,oCAAoC;QACvC,SAAS,EAAE,yBAAyB;QACpC,SAAS,EAAE,2BAA2B;QACtC,SAAS,EAAE,CAAC,eAAe,EAAE,EAAE,CAC7B,sCAAsC,CAAC,eAAe,CAAC;YACrD,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE;YACxC,CAAC,CAAC;gBACE,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACnC,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EAAE,OAAO;wBACd,OAAO,EACL,uIAAuI;qBAC1I;iBACF;aACF;QACP,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineCheck, type TypedCheckWithOptions } from \"../../check/check.ts\";\nimport { DUPLICATE_DETECTION_CHECK_DEFINITION, executeDuplicateDetection } from \"./execution.ts\";\nimport { parseDuplicateDetectionData } from \"./final-data.ts\";\nimport type { DuplicateDetectionOptions, ResolvedDuplicateDetectionOptions } from \"./options.ts\";\nimport { resolveDuplicateDetectionOptions } from \"./options-resolution.ts\";\nimport { validResolvedDuplicateDetectionOptions } from \"./options-validation.ts\";\n\n/**\n * 使用可省略的区域、cache 与 scanner policy 构造一个完整 duplicate-detection Check。\n *\n * @param options - 省略字段由 package 补齐；显式 files 数组作为对应字段的完整替换值。\n * @returns 固定 `duplicate-detection` identity、完整冻结 options、preflight 与 execution。\n * @throws {TypeError} input 含未知字段、空 area、非法阈值、非法 cache 或 scanner policy 时抛出。\n */\nexport function duplicateDetection(\n  options: DuplicateDetectionOptions = {}\n): TypedCheckWithOptions<\n  \"duplicate-detection\",\n  ResolvedDuplicateDetectionOptions,\n  typeof parseDuplicateDetectionData\n> {\n  const resolvedOptions = resolveDuplicateDetectionOptions(options);\n  if (resolvedOptions === undefined) {\n    throw new TypeError(\n      \"duplicateDetection options are invalid; use the documented closed constructor policy including exact finding waivers\"\n    );\n  }\n  return defineCheck({\n    ...DUPLICATE_DETECTION_CHECK_DEFINITION,\n    execution: executeDuplicateDetection,\n    parseData: parseDuplicateDetectionData,\n    preflight: (preparedOptions) =>\n      validResolvedDuplicateDetectionOptions(preparedOptions)\n        ? { status: \"success\", preparedOptions }\n        : {\n            status: \"failure\",\n            action: \"block\",\n            reason: { code: \"invalid-options\" },\n            messages: [\n              {\n                code: \"invalid-options\",\n                level: \"error\",\n                message:\n                  \"duplicateDetection options are invalid; recreate the Check with duplicateDetection(options) or restore its complete resolved options.\"\n              }\n            ]\n          },\n    options: resolvedOptions\n  });\n}\n"]}
+{"version":3,"file":"default-check.mjs","sourceRoot":"","sources":["../../../../src/package-checks/duplicate-detection/default-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8B,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EACL,iCAAiC,EAElC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oCAAoC,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AACjG,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,yBAAyB,CAAC;AA0BjF,MAAM,UAAU,kBAAkB,CAChC,OAAO,GAA8B,EAAE;IAMvC,MAAM,KAAK,GAAG,iCAAiC,CAC7C,OAAO,EACP,CAAC,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,CAAC,EACpE,oCAAoC,CACrC,CAAC;IACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CACjB,sHAAsH,CACvH,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,gCAAgC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9E,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CACjB,sHAAsH,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;QACjB,GAAG,KAAK,CAAC,UAAU;QACnB,OAAO,EAAE,yBAAyB;QAClC,SAAS,EAAE,2BAA2B;QACtC,OAAO,EAAE,CAAC,eAAe,EAAE,EAAE,CAC3B,sCAAsC,CAAC,eAAe,CAAC;YACrD,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE;YACxC,CAAC,CAAC;gBACE,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACnC,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EAAE,OAAO;wBACd,OAAO,EACL,uIAAuI;qBAC1I;iBACF;aACF;QACP,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineCheck, type TypedCheckWithOptions } from \"../../check/check.ts\";\nimport {\n  resolvePackageCheckAuthoringInput,\n  type PackageCheckIdentityInput\n} from \"../check-authoring.ts\";\nimport { DUPLICATE_DETECTION_CHECK_DEFINITION, executeDuplicateDetection } from \"./execution.ts\";\nimport { parseDuplicateDetectionData } from \"./final-data.ts\";\nimport type { DuplicateDetectionOptions, ResolvedDuplicateDetectionOptions } from \"./options.ts\";\nimport { resolveDuplicateDetectionOptions } from \"./options-resolution.ts\";\nimport { validResolvedDuplicateDetectionOptions } from \"./options-validation.ts\";\n\n/**\n * 使用可省略的区域、cache 与 scanner policy 构造一个完整 duplicate-detection Check。\n *\n * @param options - 省略字段由 package 补齐；显式 files 数组作为对应字段的完整替换值。\n * @returns 固定 `duplicate-detection` identity、完整冻结 options、preparation 与 execution。\n * @throws {TypeError} input 含未知字段、空 area、非法阈值、非法 cache 或 scanner policy 时抛出。\n */\nexport function duplicateDetection(\n  options?: DuplicateDetectionOptions<\"duplicate-detection\">\n): TypedCheckWithOptions<\n  \"duplicate-detection\",\n  ResolvedDuplicateDetectionOptions,\n  typeof parseDuplicateDetectionData\n>;\nexport function duplicateDetection<const Id extends string>(\n  options: DuplicateDetectionOptions<Id> & PackageCheckIdentityInput<Id>\n): TypedCheckWithOptions<Id, ResolvedDuplicateDetectionOptions, typeof parseDuplicateDetectionData>;\nexport function duplicateDetection(\n  options: DuplicateDetectionOptions\n): TypedCheckWithOptions<\n  string,\n  ResolvedDuplicateDetectionOptions,\n  typeof parseDuplicateDetectionData\n>;\nexport function duplicateDetection(\n  options: DuplicateDetectionOptions = {}\n): TypedCheckWithOptions<\n  string,\n  ResolvedDuplicateDetectionOptions,\n  typeof parseDuplicateDetectionData\n> {\n  const input = resolvePackageCheckAuthoringInput(\n    options,\n    [\"codeAreas\", \"cache\", \"findingPolicy\", \"findingWaivers\", \"scanner\"],\n    DUPLICATE_DETECTION_CHECK_DEFINITION\n  );\n  if (input === undefined) {\n    throw new TypeError(\n      \"duplicateDetection options are invalid; use the documented closed constructor policy including exact finding waivers\"\n    );\n  }\n  const resolvedOptions = resolveDuplicateDetectionOptions(input.domainOptions);\n  if (resolvedOptions === undefined) {\n    throw new TypeError(\n      \"duplicateDetection options are invalid; use the documented closed constructor policy including exact finding waivers\"\n    );\n  }\n  return defineCheck({\n    ...input.definition,\n    execute: executeDuplicateDetection,\n    parseData: parseDuplicateDetectionData,\n    prepare: (preparedOptions) =>\n      validResolvedDuplicateDetectionOptions(preparedOptions)\n        ? { status: \"success\", preparedOptions }\n        : {\n            status: \"failure\",\n            action: \"block\",\n            reason: { code: \"invalid-options\" },\n            messages: [\n              {\n                code: \"invalid-options\",\n                level: \"error\",\n                message:\n                  \"duplicateDetection options are invalid; recreate the Check with duplicateDetection(options) or restore its complete resolved options.\"\n              }\n            ]\n          },\n    options: resolvedOptions\n  });\n}\n"]}

package/dist/esm/package-checks/duplicate-detection/execution.mjs

@@ -1,10 +1,10 @@
 import { resolve } from "node:path";
-import { reconcileFindingWaivers } from "../../finding-waivers/reconciliation.mjs";
+import { reconcileFindingWaivers } from "../../package-tools/finding-waivers/reconciliation.mjs";
 import { collectProjectFileSets, requireProjectFileSet } from "../project-files/collection.mjs";
 import { fingerprintProjectFiles } from "../project-files/file-fingerprint.mjs";
 import { settleFindings } from "../code-quality-findings/policy.mjs";
 import { reportFindingWaiverAudits, reportReconciledCodeQualityFindingRecords } from "../code-quality-findings/finding-waiver-evidence.mjs";
-import { appendCheckMessages } from "../../check/finding-presentation.mjs";
+import { appendCheckMessages } from "../../package-tools/finding-presentation/finding-presentation.mjs";
 import { duplicateFindingMessages, duplicateWaiverMessages } from "./finding-messages.mjs";
 import { getGitSha } from "./project-revision.mjs";
 import { measureDuplicateDetection } from "./measurement.mjs";
@@ -119,8 +119,6 @@ function directMeasurementFailure(measurement) {
         case "unavailable":
             return unavailable("external-dependency-unavailable");
     }
-    const exhaustiveMeasurement = measurement;
-    return exhaustiveMeasurement;
 }
 function unavailable(code) {
     return Object.freeze({