agentskeptic 0.1.1

package/dist/ciLockWorkflow.js

@@ -0,0 +1,278 @@
+/**
+ * Shared batch/quick verification + ci-lock-v1 write/compare (no license preflight).
+ * Callers must run runLicensePreflightIfNeeded("enforce") before these when using lock flags.
+ */
+import { readFileSync } from "fs";
+import path from "path";
+import { CLI_OPERATIONAL_CODES, cliErrorEnvelope, formatOperationalMessage, } from "./failureCatalog.js";
+import { verifyWorkflow } from "./pipeline.js";
+import { runBatchVerifyToValidatedResult } from "./standardVerifyWorkflowCli.js";
+import { TruthLayerError } from "./truthLayerError.js";
+import { writeRunBundleCli, isBundlePrivateKeyTruthError } from "./writeRunBundleCli.js";
+import { argValue, removeArgPair, parseBatchVerifyCliArgs, parseQuickCliArgs } from "./cliArgv.js";
+import { workflowResultToCiLockV1, quickReportToCiLockV1, parseCiLockFromUtf8File, assertCiLockSchemaValid, ciLocksEqualStable, } from "./ciLock.js";
+import { stableStringify } from "./jsonStableStringify.js";
+import { atomicWriteUtf8File } from "./quickVerify/atomicWrite.js";
+import { runQuickVerifyToValidatedReport } from "./quickVerify/runQuickVerify.js";
+import { formatQuickVerifyHumanReport } from "./quickVerify/formatQuickVerifyHumanReport.js";
+import { buildQuickContractEventsNdjson } from "./quickVerify/buildQuickContractEventsNdjson.js";
+function writeCliError(code, message) {
+    console.error(cliErrorEnvelope(code, message));
+}
+export function stripLockFlagsFromArgs(args) {
+    return removeArgPair(removeArgPair(args, "--expect-lock"), "--output-lock");
+}
+export async function runBatchCiLockFromRestArgs(restArgs) {
+    const expectLock = argValue(restArgs, "--expect-lock");
+    const outputLock = argValue(restArgs, "--output-lock");
+    const hasExpect = expectLock !== undefined;
+    const hasOutput = outputLock !== undefined;
+    if (hasExpect === hasOutput) {
+        writeCliError(CLI_OPERATIONAL_CODES.ENFORCE_USAGE, "batch verify requires exactly one of --expect-lock <path> or --output-lock <path> when using CI lock flags.");
+        process.exit(3);
+    }
+    let parsed;
+    try {
+        parsed = parseBatchVerifyCliArgs(stripLockFlagsFromArgs(restArgs));
+    }
+    catch (e) {
+        if (e instanceof TruthLayerError) {
+            writeCliError(e.code, e.message);
+            process.exit(3);
+        }
+        throw e;
+    }
+    if (parsed.shareReportOrigin !== undefined) {
+        writeCliError(CLI_OPERATIONAL_CODES.ENFORCE_USAGE, "--share-report-origin is not supported with enforce batch.");
+        process.exit(3);
+    }
+    const runVerify = () => verifyWorkflow({
+        workflowId: parsed.workflowId,
+        eventsPath: parsed.eventsPath,
+        registryPath: parsed.registryPath,
+        database: parsed.database,
+        verificationPolicy: parsed.verificationPolicy,
+        ...(parsed.noTruthReport ? { truthReport: () => { } } : {}),
+    });
+    let result;
+    try {
+        result = await runBatchVerifyToValidatedResult(runVerify);
+    }
+    catch (e) {
+        if (e instanceof TruthLayerError) {
+            writeCliError(e.code, e.message);
+            process.exit(3);
+        }
+        const msg = e instanceof Error ? e.message : String(e);
+        writeCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(msg));
+        process.exit(3);
+    }
+    const actualLock = workflowResultToCiLockV1(result);
+    assertCiLockSchemaValid(actualLock);
+    if (hasOutput) {
+        const outPath = path.resolve(outputLock);
+        try {
+            atomicWriteUtf8File(outPath, stableStringify(actualLock) + "\n");
+            parseCiLockFromUtf8File(outPath);
+        }
+        catch (e) {
+            if (e instanceof TruthLayerError) {
+                writeCliError(e.code, e.message);
+                process.exit(3);
+            }
+            const msg = e instanceof Error ? e.message : String(e);
+            writeCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(msg));
+            process.exit(3);
+        }
+    }
+    else {
+        let expected;
+        try {
+            expected = parseCiLockFromUtf8File(path.resolve(expectLock));
+        }
+        catch (e) {
+            if (e instanceof TruthLayerError) {
+                writeCliError(e.code, e.message);
+                process.exit(3);
+            }
+            throw e;
+        }
+        if (expected.kind !== "batch") {
+            writeCliError(CLI_OPERATIONAL_CODES.ENFORCE_USAGE, "--expect-lock file must be a batch ci-lock (kind=batch).");
+            process.exit(3);
+        }
+        if (!ciLocksEqualStable(actualLock, expected)) {
+            console.log(JSON.stringify(result));
+            writeCliError(CLI_OPERATIONAL_CODES.VERIFICATION_OUTPUT_LOCK_MISMATCH, "Lock fixture does not match verification output.");
+            process.exit(4);
+        }
+    }
+    if (parsed.writeRunBundleDir !== undefined) {
+        try {
+            writeRunBundleCli(parsed.writeRunBundleDir, readFileSync(path.resolve(parsed.eventsPath)), result, parsed.signPrivateKeyPath);
+        }
+        catch (e) {
+            if (isBundlePrivateKeyTruthError(e)) {
+                writeCliError(e.code, e.message);
+                process.exit(3);
+            }
+            const msg = e instanceof Error ? e.message : String(e);
+            writeCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(msg));
+            process.exit(3);
+        }
+    }
+    console.log(JSON.stringify(result));
+    if (result.status === "complete")
+        process.exit(0);
+    if (result.status === "inconsistent")
+        process.exit(1);
+    process.exit(2);
+}
+export async function runQuickCiLockFromRestArgs(restArgs) {
+    const expectLock = argValue(restArgs, "--expect-lock");
+    const outputLock = argValue(restArgs, "--output-lock");
+    const hasExpect = expectLock !== undefined;
+    const hasOutput = outputLock !== undefined;
+    if (hasExpect === hasOutput) {
+        writeCliError(CLI_OPERATIONAL_CODES.ENFORCE_USAGE, "quick verify requires exactly one of --expect-lock <path> or --output-lock <path> when using CI lock flags.");
+        process.exit(3);
+    }
+    let pq;
+    try {
+        pq = parseQuickCliArgs(stripLockFlagsFromArgs(restArgs));
+    }
+    catch (e) {
+        if (e instanceof TruthLayerError) {
+            writeCliError(e.code, e.message);
+            process.exit(3);
+        }
+        throw e;
+    }
+    if (pq.shareReportOrigin !== undefined) {
+        writeCliError(CLI_OPERATIONAL_CODES.ENFORCE_USAGE, "--share-report-origin is not supported with enforce quick.");
+        process.exit(3);
+    }
+    let inputUtf8;
+    try {
+        inputUtf8 = pq.inputPath === "-" ? readFileSync(0, "utf8") : readFileSync(path.resolve(pq.inputPath), "utf8");
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        writeCliError(CLI_OPERATIONAL_CODES.CLI_USAGE, `Cannot read --input: ${msg}`);
+        process.exit(3);
+    }
+    let report;
+    let registryUtf8;
+    let contractExports;
+    try {
+        const out = await runQuickVerifyToValidatedReport({
+            inputUtf8,
+            postgresUrl: pq.postgresUrl ?? undefined,
+            sqlitePath: pq.dbPath ?? undefined,
+        });
+        report = out.report;
+        registryUtf8 = out.registryUtf8;
+        contractExports = out.contractExports;
+    }
+    catch (e) {
+        if (e instanceof TruthLayerError) {
+            writeCliError(e.code, e.message);
+            process.exit(3);
+        }
+        const msg = e instanceof Error ? e.message : String(e);
+        writeCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(msg));
+        process.exit(3);
+    }
+    const actualLock = quickReportToCiLockV1(report);
+    assertCiLockSchemaValid(actualLock);
+    if (hasOutput) {
+        const outPath = path.resolve(outputLock);
+        try {
+            atomicWriteUtf8File(outPath, stableStringify(actualLock) + "\n");
+            parseCiLockFromUtf8File(outPath);
+        }
+        catch (e) {
+            if (e instanceof TruthLayerError) {
+                writeCliError(e.code, e.message);
+                process.exit(3);
+            }
+            const msg = e instanceof Error ? e.message : String(e);
+            writeCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(msg));
+            process.exit(3);
+        }
+    }
+    else {
+        let expected;
+        try {
+            expected = parseCiLockFromUtf8File(path.resolve(expectLock));
+        }
+        catch (e) {
+            if (e instanceof TruthLayerError) {
+                writeCliError(e.code, e.message);
+                process.exit(3);
+            }
+            throw e;
+        }
+        if (expected.kind !== "quick") {
+            writeCliError(CLI_OPERATIONAL_CODES.ENFORCE_USAGE, "--expect-lock file must be a quick ci-lock (kind=quick).");
+            process.exit(3);
+        }
+        if (!ciLocksEqualStable(actualLock, expected)) {
+            process.stdout.write(stableStringify(report) + "\n");
+            const human = formatQuickVerifyHumanReport(report, {
+                workflowId: pq.workflowIdQuick,
+                eventsPath: pq.emitEventsPath !== undefined ? pq.emitEventsPath : undefined,
+                registryPath: pq.exportPath,
+                dbFlag: pq.dbPath ?? undefined,
+                postgresUrl: pq.postgresUrl !== undefined,
+            });
+            console.error(human);
+            writeCliError(CLI_OPERATIONAL_CODES.VERIFICATION_OUTPUT_LOCK_MISMATCH, "Lock fixture does not match verification output.");
+            process.exit(4);
+        }
+    }
+    try {
+        atomicWriteUtf8File(path.resolve(pq.exportPath), registryUtf8);
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        writeCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(`export-registry: ${msg}`));
+        process.exit(3);
+    }
+    if (pq.emitEventsPath !== undefined) {
+        const eventsUtf8 = buildQuickContractEventsNdjson({
+            workflowId: pq.workflowIdQuick,
+            exports: contractExports,
+        });
+        try {
+            atomicWriteUtf8File(path.resolve(pq.emitEventsPath), eventsUtf8);
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            writeCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(`emit-events: ${msg}`));
+            process.exit(3);
+        }
+    }
+    try {
+        process.stdout.write(stableStringify(report) + "\n");
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        writeCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(`stdout: ${msg}`));
+        process.exit(3);
+    }
+    const human = formatQuickVerifyHumanReport(report, {
+        workflowId: pq.workflowIdQuick,
+        eventsPath: pq.emitEventsPath !== undefined ? pq.emitEventsPath : undefined,
+        registryPath: pq.exportPath,
+        dbFlag: pq.dbPath ?? undefined,
+        postgresUrl: pq.postgresUrl !== undefined,
+    });
+    console.error(human);
+    if (report.verdict === "pass")
+        process.exit(0);
+    if (report.verdict === "fail")
+        process.exit(1);
+    process.exit(2);
+}
+//# sourceMappingURL=ciLockWorkflow.js.map

package/dist/ciLockWorkflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ciLockWorkflow.js","sourceRoot":"","sources":["../src/ciLockWorkflow.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACnG,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,8BAA8B,EAAE,MAAM,iDAAiD,CAAC;AAGjG,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAc;IACnD,OAAO,aAAa,CAAC,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,QAAkB;IACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC;IAC3C,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC;IAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,aAAa,CACX,qBAAqB,CAAC,aAAa,EACnC,6GAA6G,CAC9G,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,uBAAuB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,aAAa,CACX,qBAAqB,CAAC,aAAa,EACnC,4DAA4D,CAC7D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,cAAc,CAAC;QACb,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC;IAEL,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACpD,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAEpC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAW,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;YACjE,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;gBACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAW,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;gBACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,aAAa,CACX,qBAAqB,CAAC,aAAa,EACnC,0DAA0D,CAC3D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACpC,aAAa,CACX,qBAAqB,CAAC,iCAAiC,EACvD,kDAAkD,CACnD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,iBAAiB,CACf,MAAM,CAAC,iBAAiB,EACxB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAC7C,MAAM,EACN,MAAM,CAAC,kBAAkB,CAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,QAAkB;IACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC;IAC3C,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAC;IAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,aAAa,CACX,qBAAqB,CAAC,aAAa,EACnC,6GAA6G,CAC9G,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,iBAAiB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,EAAE,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACvC,aAAa,CACX,qBAAqB,CAAC,aAAa,EACnC,4DAA4D,CAC7D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAChH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,aAAa,CAAC,qBAAqB,CAAC,SAAS,EAAE,wBAAwB,GAAG,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,YAAoB,CAAC;IACzB,IAAI,eAAgG,CAAC;IACrG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,+BAA+B,CAAC;YAChD,SAAS;YACT,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,SAAS;YACxC,UAAU,EAAE,EAAE,CAAC,MAAM,IAAI,SAAS;SACnC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAEpC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAW,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;YACjE,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;gBACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAW,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;gBACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,aAAa,CACX,qBAAqB,CAAC,aAAa,EACnC,0DAA0D,CAC3D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,4BAA4B,CAAC,MAAM,EAAE;gBACjD,UAAU,EAAE,EAAE,CAAC,eAAe;gBAC9B,UAAU,EAAE,EAAE,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;gBAC3E,YAAY,EAAE,EAAE,CAAC,UAAU;gBAC3B,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,SAAS;gBAC9B,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,SAAS;aAC1C,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,aAAa,CACX,qBAAqB,CAAC,iCAAiC,EACvD,kDAAkD,CACnD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC,CAAC;QACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,EAAE,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,8BAA8B,CAAC;YAChD,UAAU,EAAE,EAAE,CAAC,eAAe;YAC9B,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC;YACrG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,4BAA4B,CAAC,MAAM,EAAE;QACjD,UAAU,EAAE,EAAE,CAAC,eAAe;QAC9B,UAAU,EAAE,EAAE,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QAC3E,YAAY,EAAE,EAAE,CAAC,UAAU;QAC3B,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,SAAS;QAC9B,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,SAAS;KAC1C,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.failureExplanationInvariant.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cli.failureExplanationInvariant.test.d.ts.map

package/dist/cli.failureExplanationInvariant.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.failureExplanationInvariant.test.d.ts","sourceRoot":"","sources":["../src/cli.failureExplanationInvariant.test.ts"],"names":[],"mappings":""}

package/dist/cli.failureExplanationInvariant.test.js

@@ -0,0 +1,40 @@
+import { describe, expect, it, vi } from "vitest";
+import { FailureExplanationInvariantError } from "./failureExplanation.js";
+import { runStandardVerifyWorkflowCliFlow } from "./standardVerifyWorkflowCli.js";
+import { verifyWorkflow } from "./pipeline.js";
+vi.mock("./pipeline.js", async (importOriginal) => {
+    const actual = await importOriginal();
+    return { ...actual, verifyWorkflow: vi.fn() };
+});
+describe("CLI standard verify path + FailureExplanationInvariantError", () => {
+    it("exit 3 on INTERNAL_ERROR path, no WorkflowResult JSON on stdout, when verifyWorkflow throws invariant error", async () => {
+        vi.mocked(verifyWorkflow).mockRejectedValue(new FailureExplanationInvariantError("EXPLANATION_VERIFICATION_POLICY_INVALID", "Verification policy is missing or invalid for failure explanation."));
+        const stderrLines = [];
+        const stdoutLines = [];
+        const exitMock = vi.fn((code) => {
+            throw new Error(`TEST_EXIT_${code}`);
+        });
+        await expect(runStandardVerifyWorkflowCliFlow({
+            runVerify: () => verifyWorkflow({
+                workflowId: "w",
+                eventsPath: "/nope",
+                registryPath: "/nope",
+                database: { kind: "sqlite", path: "/nope" },
+            }),
+            io: {
+                consoleLog: (line) => {
+                    stdoutLines.push(line);
+                },
+                stderrLine: (line) => {
+                    stderrLines.push(line);
+                },
+                exit: exitMock,
+            },
+        })).rejects.toThrowError(/TEST_EXIT_3/);
+        expect(exitMock).toHaveBeenCalledWith(3);
+        expect(stdoutLines).toEqual([]);
+        expect(stderrLines.length).toBeGreaterThan(0);
+        expect(stderrLines[0]).toContain('"code"');
+    });
+});
+//# sourceMappingURL=cli.failureExplanationInvariant.test.js.map

package/dist/cli.failureExplanationInvariant.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.failureExplanationInvariant.test.js","sourceRoot":"","sources":["../src/cli.failureExplanationInvariant.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAChD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAkC,CAAC;IACtE,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,EAAE,CAAC,6GAA6G,EAAE,KAAK,IAAI,EAAE;QAC3H,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CACzC,IAAI,gCAAgC,CAClC,yCAAyC,EACzC,oEAAoE,CACrE,CACF,CAAC;QAEF,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;YACtC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,gCAAgC,CAAC;YAC/B,SAAS,EAAE,GAAG,EAAE,CACd,cAAc,CAAC;gBACb,UAAU,EAAE,GAAG;gBACf,UAAU,EAAE,OAAO;gBACnB,YAAY,EAAE,OAAO;gBACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;aAC5C,CAAC;YACJ,EAAE,EAAE;gBACF,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;oBACnB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;gBACD,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;oBACnB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;gBACD,IAAI,EAAE,QAAQ;aACf;SACF,CAAC,CACH,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAEtC,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}