agentskeptic 0.1.9 → 0.2.0

package/README.md

@@ -92,6 +92,8 @@ This is the fastest way to see **`ROW_ABSENT`** versus **verified** on the same
 
 **Fast first run on your own DB (bundled quickstart example):** after `npm install` and `npm run build`, run **`npm run partner-quickstart`** from the repo root (SQLite temp DB). Commands reference: **[`docs/partner-quickstart-commands.md`](docs/partner-quickstart-commands.md)**; narrative: **[`docs/first-run-integration.md`](docs/first-run-integration.md)** and **`/integrate`** on the site.
 
+**Integrator-owned output:** The demo above is pedagogy. Default path: **`agentskeptic crossing`** — see **`docs/crossing-normative.md`**. For verification on **your** NDJSON, registry, and authoritative SQLite or Postgres, follow **[Grounded integrator-owned output](docs/first-run-integration.md#grounded-integrator-owned-output-primary-path)** in **`docs/first-run-integration.md`** after **`npm run build`**. Standalone **`agentskeptic verify-integrator-owned`** remains for explicit pack-led parity and CI (same flags as contract batch verify; rejects shipped example fixture triples with exit **2** and stderr **`INTEGRATOR_OWNED_GATE`**—see **`docs/agentskeptic.md`** Integrator-owned gate).
+
 ```bash
 npm install
 npm start
@@ -250,6 +252,7 @@ Everything beyond core contract verification lives in **[`docs/agentskeptic.md`]
 
 | Doc | Purpose |
 |-----|---------|
+| [`docs/epistemic-contract.md`](docs/epistemic-contract.md) | **Normative epistemic contract** (grounded output vs funnel; ranking limits; telemetry proxies)—single authored source; other docs link or generate from here |
 | [README — Buy vs build](#buy-vs-build-why-not-only-sql-checks) | Canonical **buy vs build** narrative (failure mode, scripts limits, Quick → Contract) |
 | [`docs/agentskeptic.md`](docs/agentskeptic.md) | Authoritative CLI and behavior reference (SSOT) |
 | [`docs/quick-verify-normative.md`](docs/quick-verify-normative.md) | Quick Verify normative contract |

package/dist/bootstrap/bootstrapCliArgs.d.ts

@@ -0,0 +1,8 @@
+export type ParsedBootstrapCli = {
+    inputPath: string;
+    outPath: string;
+    dbPath: string | undefined;
+    postgresUrl: string | undefined;
+};
+export declare function parseBootstrapCliArgs(args: string[]): ParsedBootstrapCli;
+//# sourceMappingURL=bootstrapCliArgs.d.ts.map

package/dist/bootstrap/bootstrapCliArgs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapCliArgs.d.ts","sourceRoot":"","sources":["../../src/bootstrap/bootstrapCliArgs.ts"],"names":[],"mappings":"AAiCA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAiBxE"}

package/dist/bootstrap/bootstrapCliArgs.js

@@ -0,0 +1,47 @@
+import { CLI_OPERATIONAL_CODES } from "../cliOperationalCodes.js";
+import { TruthLayerError } from "../truthLayerError.js";
+import { argValue } from "../cliArgv.js";
+const ALLOWED_BOOTSTRAP_FLAGS = new Set([
+    "--input",
+    "--out",
+    "--db",
+    "--postgres-url",
+    "--help",
+    "-h",
+]);
+function assertBootstrapArgsWellFormed(args) {
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === "-h" || a === "--help")
+            continue;
+        if (!a.startsWith("--")) {
+            throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, `Unexpected argument: ${a}`);
+        }
+        if (!ALLOWED_BOOTSTRAP_FLAGS.has(a)) {
+            throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, `Unknown option: ${a}`);
+        }
+        if (a === "--input" || a === "--out" || a === "--db" || a === "--postgres-url") {
+            const v = args[i + 1];
+            if (v === undefined || v.startsWith("--")) {
+                throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, `Missing value after ${a}.`);
+            }
+            i++;
+        }
+    }
+}
+export function parseBootstrapCliArgs(args) {
+    assertBootstrapArgsWellFormed(args);
+    const inputPath = argValue(args, "--input");
+    const outPath = argValue(args, "--out");
+    const dbPath = argValue(args, "--db");
+    const postgresUrl = argValue(args, "--postgres-url");
+    if (!inputPath || !outPath) {
+        throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, "Missing --input or --out.");
+    }
+    const dbCount = (dbPath ? 1 : 0) + (postgresUrl ? 1 : 0);
+    if (dbCount !== 1) {
+        throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, "Provide exactly one of --db or --postgres-url.");
+    }
+    return { inputPath, outPath, dbPath, postgresUrl };
+}
+//# sourceMappingURL=bootstrapCliArgs.js.map

package/dist/bootstrap/bootstrapCliArgs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapCliArgs.js","sourceRoot":"","sources":["../../src/bootstrap/bootstrapCliArgs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,SAAS;IACT,OAAO;IACP,MAAM;IACN,gBAAgB;IAChB,QAAQ;IACR,IAAI;CACL,CAAC,CAAC;AAEH,SAAS,6BAA6B,CAAC,IAAc;IACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC3C,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,eAAe,EAAE,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,eAAe,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,gBAAgB,EAAE,CAAC;YAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,eAAe,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAChG,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;AACH,CAAC;AASD,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,eAAe,EACrC,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACrD,CAAC"}

package/dist/bootstrap/executeBootstrapPack.d.ts

@@ -0,0 +1,32 @@
+import type { WorkflowResult } from "../types.js";
+import type { ParsedBootstrapCli } from "./bootstrapCliArgs.js";
+export declare function cleanupOutDirFromPath(outResolved: string): void;
+export type ExecuteBootstrapPackSuccess = {
+    kind: "pack_ready";
+    workflowId: string;
+    eventsPath: string;
+    registryPath: string;
+    outResolved: string;
+    exportedToolCount: number;
+};
+export type ExecuteBootstrapPackFailure = {
+    kind: "bootstrap_cli_error";
+    exitCode: 2 | 3;
+    code: string;
+    message: string;
+} | {
+    kind: "verify_terminal";
+    exitCode: 1 | 2;
+    result: WorkflowResult;
+    truthBuffered: string;
+    outResolved: string;
+};
+/**
+ * Core bootstrap pack build + in-process contract verify.
+ * On success (`pack_ready`), leaves `outResolved` on disk.
+ * On `verify_terminal`, leaves `outResolved` on disk until the caller exits (caller must cleanup via exit hook).
+ * On `operational`, cleans up `outResolved` when it was created.
+ */
+export declare function executeBootstrapPack(parsed: ParsedBootstrapCli): Promise<ExecuteBootstrapPackSuccess | ExecuteBootstrapPackFailure>;
+export declare function writeBootstrapOperationalFailure(code: string, message: string): void;
+//# sourceMappingURL=executeBootstrapPack.d.ts.map

package/dist/bootstrap/executeBootstrapPack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeBootstrapPack.d.ts","sourceRoot":"","sources":["../../src/bootstrap/executeBootstrapPack.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AASlD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAM/D;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/E;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEN;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,2BAA2B,GAAG,2BAA2B,CAAC,CAyLpE;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAEpF"}

package/dist/bootstrap/executeBootstrapPack.js

@@ -0,0 +1,208 @@
+import { existsSync, mkdirSync, readFileSync, rmSync } from "node:fs";
+import path from "node:path";
+import { runLicensePreflightIfNeeded } from "../commercial/licensePreflight.js";
+import { CLI_OPERATIONAL_CODES } from "../cliOperationalCodes.js";
+import { cliErrorEnvelope, formatOperationalMessage, } from "../failureCatalog.js";
+import { verifyWorkflow } from "../pipeline.js";
+import { loadSchemaValidator } from "../schemaLoad.js";
+import { TruthLayerError } from "../truthLayerError.js";
+import { atomicWriteUtf8File } from "../quickVerify/atomicWrite.js";
+import { buildQuickContractEventsNdjson } from "../quickVerify/buildQuickContractEventsNdjson.js";
+import { stableStringify } from "../quickVerify/canonicalJson.js";
+import { runQuickVerifyToValidatedReport } from "../quickVerify/runQuickVerify.js";
+import { buildBootstrapReadmeMarkdown } from "./bootstrapReadmeTemplate.js";
+import { parseBootstrapPackInputJson } from "./parseBootstrapPackInput.js";
+import { synthesizeQuickInputUtf8FromOpenAiV1 } from "./synthesizeQuickInputFromOpenAiV1.js";
+export function cleanupOutDirFromPath(outResolved) {
+    try {
+        rmSync(outResolved, { recursive: true, force: true });
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/**
+ * Core bootstrap pack build + in-process contract verify.
+ * On success (`pack_ready`), leaves `outResolved` on disk.
+ * On `verify_terminal`, leaves `outResolved` on disk until the caller exits (caller must cleanup via exit hook).
+ * On `operational`, cleans up `outResolved` when it was created.
+ */
+export async function executeBootstrapPack(parsed) {
+    const outResolved = path.resolve(parsed.outPath);
+    if (existsSync(outResolved)) {
+        return {
+            kind: "bootstrap_cli_error",
+            exitCode: 3,
+            code: CLI_OPERATIONAL_CODES.BOOTSTRAP_OUT_EXISTS,
+            message: `--out already exists: ${outResolved}`,
+        };
+    }
+    let rawInput;
+    try {
+        rawInput = readFileSync(path.resolve(parsed.inputPath), "utf8");
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        return {
+            kind: "bootstrap_cli_error",
+            exitCode: 3,
+            code: CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE,
+            message: `Cannot read --input: ${msg}`,
+        };
+    }
+    let packInput;
+    try {
+        packInput = parseBootstrapPackInputJson(rawInput);
+    }
+    catch (e) {
+        if (e instanceof TruthLayerError) {
+            return { kind: "bootstrap_cli_error", exitCode: 3, code: e.code, message: e.message };
+        }
+        throw e;
+    }
+    try {
+        await runLicensePreflightIfNeeded("verify");
+    }
+    catch (e) {
+        if (e instanceof TruthLayerError) {
+            return { kind: "bootstrap_cli_error", exitCode: 3, code: e.code, message: e.message };
+        }
+        const msg = e instanceof Error ? e.message : String(e);
+        return {
+            kind: "bootstrap_cli_error",
+            exitCode: 3,
+            code: CLI_OPERATIONAL_CODES.INTERNAL_ERROR,
+            message: formatOperationalMessage(msg),
+        };
+    }
+    mkdirSync(outResolved, { recursive: false });
+    const database = parsed.postgresUrl
+        ? { kind: "postgres", connectionString: parsed.postgresUrl }
+        : { kind: "sqlite", path: path.resolve(parsed.dbPath) };
+    const inputUtf8 = synthesizeQuickInputUtf8FromOpenAiV1(packInput);
+    let report;
+    let registryUtf8;
+    let contractExports;
+    try {
+        const out = await runQuickVerifyToValidatedReport({
+            inputUtf8,
+            postgresUrl: parsed.postgresUrl ?? undefined,
+            sqlitePath: parsed.dbPath !== undefined ? path.resolve(parsed.dbPath) : undefined,
+        });
+        report = out.report;
+        registryUtf8 = out.registryUtf8;
+        contractExports = out.contractExports;
+    }
+    catch (e) {
+        cleanupOutDirFromPath(outResolved);
+        if (e instanceof TruthLayerError) {
+            return { kind: "bootstrap_cli_error", exitCode: 3, code: e.code, message: e.message };
+        }
+        const msg = e instanceof Error ? e.message : String(e);
+        return {
+            kind: "bootstrap_cli_error",
+            exitCode: 3,
+            code: CLI_OPERATIONAL_CODES.INTERNAL_ERROR,
+            message: formatOperationalMessage(msg),
+        };
+    }
+    if (report.verdict !== "pass") {
+        cleanupOutDirFromPath(outResolved);
+        return {
+            kind: "bootstrap_cli_error",
+            exitCode: 2,
+            code: CLI_OPERATIONAL_CODES.BOOTSTRAP_QUICK_NOT_PASS,
+            message: `Quick Verify verdict was "${report.verdict}" (expected pass).`,
+        };
+    }
+    if (contractExports.length === 0) {
+        cleanupOutDirFromPath(outResolved);
+        return {
+            kind: "bootstrap_cli_error",
+            exitCode: 2,
+            code: CLI_OPERATIONAL_CODES.BOOTSTRAP_NO_EXPORTABLE_TOOLS,
+            message: "Quick Verify produced zero exportable tools for contract replay.",
+        };
+    }
+    const eventsPath = path.join(outResolved, "events.ndjson");
+    const toolsPath = path.join(outResolved, "tools.json");
+    const quickReportPath = path.join(outResolved, "quick-report.json");
+    const readmePath = path.join(outResolved, "README.bootstrap.md");
+    try {
+        atomicWriteUtf8File(toolsPath, registryUtf8);
+        atomicWriteUtf8File(eventsPath, buildQuickContractEventsNdjson({
+            workflowId: packInput.workflowId,
+            exports: contractExports,
+        }));
+        atomicWriteUtf8File(quickReportPath, `${stableStringify(report)}\n`);
+        atomicWriteUtf8File(readmePath, buildBootstrapReadmeMarkdown(packInput.workflowId));
+    }
+    catch (e) {
+        cleanupOutDirFromPath(outResolved);
+        const msg = e instanceof Error ? e.message : String(e);
+        return {
+            kind: "bootstrap_cli_error",
+            exitCode: 3,
+            code: CLI_OPERATIONAL_CODES.INTERNAL_ERROR,
+            message: formatOperationalMessage(`pack write: ${msg}`),
+        };
+    }
+    let truthBuffered = "";
+    let result;
+    try {
+        result = await verifyWorkflow({
+            workflowId: packInput.workflowId,
+            eventsPath,
+            registryPath: toolsPath,
+            database,
+            truthReport: (r) => {
+                truthBuffered = r;
+            },
+        });
+    }
+    catch (e) {
+        cleanupOutDirFromPath(outResolved);
+        if (e instanceof TruthLayerError) {
+            return { kind: "bootstrap_cli_error", exitCode: 3, code: e.code, message: e.message };
+        }
+        const msg = e instanceof Error ? e.message : String(e);
+        return {
+            kind: "bootstrap_cli_error",
+            exitCode: 3,
+            code: CLI_OPERATIONAL_CODES.INTERNAL_ERROR,
+            message: formatOperationalMessage(msg),
+        };
+    }
+    const validateResult = loadSchemaValidator("workflow-result");
+    if (!validateResult(result)) {
+        cleanupOutDirFromPath(outResolved);
+        return {
+            kind: "bootstrap_cli_error",
+            exitCode: 3,
+            code: CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID,
+            message: JSON.stringify(validateResult.errors ?? []),
+        };
+    }
+    if (result.status === "complete") {
+        return {
+            kind: "pack_ready",
+            workflowId: packInput.workflowId,
+            eventsPath,
+            registryPath: toolsPath,
+            outResolved,
+            exportedToolCount: contractExports.length,
+        };
+    }
+    const exitCode = result.status === "inconsistent" ? 1 : 2;
+    return {
+        kind: "verify_terminal",
+        exitCode,
+        result,
+        truthBuffered,
+        outResolved,
+    };
+}
+export function writeBootstrapOperationalFailure(code, message) {
+    console.error(cliErrorEnvelope(code, formatOperationalMessage(message)));
+}
+//# sourceMappingURL=executeBootstrapPack.js.map

package/dist/bootstrap/executeBootstrapPack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeBootstrapPack.js","sourceRoot":"","sources":["../../src/bootstrap/executeBootstrapPack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EACL,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAIxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kDAAkD,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,oCAAoC,EAAE,MAAM,uCAAuC,CAAC;AAG7F,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,IAAI,CAAC;QACH,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAqBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA0B;IAE1B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,qBAAqB,CAAC,oBAAoB;YAChD,OAAO,EAAE,yBAAyB,WAAW,EAAE;SAChD,CAAC;IACJ,CAAC;IAED,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,qBAAqB,CAAC,eAAe;YAC3C,OAAO,EAAE,wBAAwB,GAAG,EAAE;SACvC,CAAC;IACJ,CAAC;IAED,IAAI,SAAyD,CAAC;IAC9D,IAAI,CAAC;QACH,SAAS,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,qBAAqB,CAAC,cAAc;YAC1C,OAAO,EAAE,wBAAwB,CAAC,GAAG,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAyB,MAAM,CAAC,WAAW;QACvD,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE;QAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAO,CAAC,EAAE,CAAC;IAE3D,MAAM,SAAS,GAAG,oCAAoC,CAAC,SAAS,CAAC,CAAC;IAElE,IAAI,MAA6E,CAAC;IAClF,IAAI,YAAoB,CAAC;IACzB,IAAI,eAA+F,CAAC;IACpG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,+BAA+B,CAAC;YAChD,SAAS;YACT,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS;YAC5C,UAAU,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SAClF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,qBAAqB,CAAC,cAAc;YAC1C,OAAO,EAAE,wBAAwB,CAAC,GAAG,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,qBAAqB,CAAC,wBAAwB;YACpD,OAAO,EAAE,6BAA6B,MAAM,CAAC,OAAO,oBAAoB;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,qBAAqB,CAAC,6BAA6B;YACzD,OAAO,EAAE,kEAAkE;SAC5E,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAEjE,IAAI,CAAC;QACH,mBAAmB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC7C,mBAAmB,CACjB,UAAU,EACV,8BAA8B,CAAC;YAC7B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,OAAO,EAAE,eAAe;SACzB,CAAC,CACH,CAAC;QACF,mBAAmB,CAAC,eAAe,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrE,mBAAmB,CAAC,UAAU,EAAE,4BAA4B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,qBAAqB,CAAC,cAAc;YAC1C,OAAO,EAAE,wBAAwB,CAAC,eAAe,GAAG,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,cAAc,CAAC;YAC5B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU;YACV,YAAY,EAAE,SAAS;YACvB,QAAQ;YACR,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;gBACjB,aAAa,GAAG,CAAC,CAAC;YACpB,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,qBAAqB,CAAC,cAAc;YAC1C,OAAO,EAAE,wBAAwB,CAAC,GAAG,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAC9D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,qBAAqB,CAAC,8BAA8B;YAC1D,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU;YACV,YAAY,EAAE,SAAS;YACvB,WAAW;YACX,iBAAiB,EAAE,eAAe,CAAC,MAAM;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAU,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,QAAQ;QACR,MAAM;QACN,aAAa;QACb,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,IAAY,EAAE,OAAe;IAC5E,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/bootstrap/runBootstrapSubcommand.d.ts

@@ -1,9 +1,5 @@
-export type ParsedBootstrapCli = {
-    inputPath: string;
-    outPath: string;
-    dbPath: string | undefined;
-    postgresUrl: string | undefined;
-};
-export declare function parseBootstrapCliArgs(args: string[]): ParsedBootstrapCli;
+import { type ParsedBootstrapCli } from "./bootstrapCliArgs.js";
+export type { ParsedBootstrapCli };
+export { parseBootstrapCliArgs } from "./bootstrapCliArgs.js";
 export declare function runBootstrapSubcommand(args: string[]): Promise<void>;
 //# sourceMappingURL=runBootstrapSubcommand.d.ts.map

package/dist/bootstrap/runBootstrapSubcommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runBootstrapSubcommand.d.ts","sourceRoot":"","sources":["../../src/bootstrap/runBootstrapSubcommand.ts"],"names":[],"mappings":"AAuEA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAiBxE;AAcD,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmM1E"}
+{"version":3,"file":"runBootstrapSubcommand.d.ts","sourceRoot":"","sources":["../../src/bootstrap/runBootstrapSubcommand.ts"],"names":[],"mappings":"AAUA,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAoBvF,YAAY,EAAE,kBAAkB,EAAE,CAAC;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6D1E"}

package/dist/bootstrap/runBootstrapSubcommand.js

@@ -1,29 +1,10 @@
-import { existsSync, mkdirSync, readFileSync, rmSync } from "node:fs";
-import path from "node:path";
-import { runLicensePreflightIfNeeded } from "../commercial/licensePreflight.js";
 import { CLI_OPERATIONAL_CODES } from "../cliOperationalCodes.js";
-import { cliErrorEnvelope, formatOperationalMessage, } from "../failureCatalog.js";
-import { verifyWorkflow } from "../pipeline.js";
-import { loadSchemaValidator } from "../schemaLoad.js";
-import { TruthLayerError } from "../truthLayerError.js";
+import { formatOperationalMessage } from "../failureCatalog.js";
 import { formatDistributionFooter } from "../distributionFooter.js";
-import { atomicWriteUtf8File } from "../quickVerify/atomicWrite.js";
-import { buildQuickContractEventsNdjson } from "../quickVerify/buildQuickContractEventsNdjson.js";
-import { stableStringify } from "../quickVerify/canonicalJson.js";
-import { runQuickVerifyToValidatedReport } from "../quickVerify/runQuickVerify.js";
 import { emitVerifyWorkflowCliJsonAndExitByStatus } from "../standardVerifyWorkflowCli.js";
-import { buildBootstrapReadmeMarkdown } from "./bootstrapReadmeTemplate.js";
-import { parseBootstrapPackInputJson } from "./parseBootstrapPackInput.js";
-import { synthesizeQuickInputUtf8FromOpenAiV1 } from "./synthesizeQuickInputFromOpenAiV1.js";
-import { argValue } from "../cliArgv.js";
-const ALLOWED_BOOTSTRAP_FLAGS = new Set([
-    "--input",
-    "--out",
-    "--db",
-    "--postgres-url",
-    "--help",
-    "-h",
-]);
+import { TruthLayerError } from "../truthLayerError.js";
+import { cleanupOutDirFromPath, executeBootstrapPack, writeBootstrapOperationalFailure, } from "./executeBootstrapPack.js";
+import { parseBootstrapCliArgs } from "./bootstrapCliArgs.js";
 function usageBootstrap() {
     return `Usage:
   agentskeptic bootstrap --input <path> (--db <sqlitePath> | --postgres-url <url>) --out <path>
@@ -41,52 +22,7 @@ Exit codes:
 
 Normative: docs/bootstrap-pack-normative.md`;
 }
-function assertBootstrapArgsWellFormed(args) {
-    for (let i = 0; i < args.length; i++) {
-        const a = args[i];
-        if (a === "-h" || a === "--help")
-            continue;
-        if (!a.startsWith("--")) {
-            throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, `Unexpected argument: ${a}`);
-        }
-        if (!ALLOWED_BOOTSTRAP_FLAGS.has(a)) {
-            throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, `Unknown option: ${a}`);
-        }
-        if (a === "--input" || a === "--out" || a === "--db" || a === "--postgres-url") {
-            const v = args[i + 1];
-            if (v === undefined || v.startsWith("--")) {
-                throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, `Missing value after ${a}.`);
-            }
-            i++;
-        }
-    }
-}
-export function parseBootstrapCliArgs(args) {
-    assertBootstrapArgsWellFormed(args);
-    const inputPath = argValue(args, "--input");
-    const outPath = argValue(args, "--out");
-    const dbPath = argValue(args, "--db");
-    const postgresUrl = argValue(args, "--postgres-url");
-    if (!inputPath || !outPath) {
-        throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, "Missing --input or --out.");
-    }
-    const dbCount = (dbPath ? 1 : 0) + (postgresUrl ? 1 : 0);
-    if (dbCount !== 1) {
-        throw new TruthLayerError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, "Provide exactly one of --db or --postgres-url.");
-    }
-    return { inputPath, outPath, dbPath, postgresUrl };
-}
-function writeBootstrapCliError(code, message) {
-    console.error(cliErrorEnvelope(code, formatOperationalMessage(message)));
-}
-function cleanupOutDir(outResolved) {
-    try {
-        rmSync(outResolved, { recursive: true, force: true });
-    }
-    catch {
-        /* best-effort */
-    }
-}
+export { parseBootstrapCliArgs } from "./bootstrapCliArgs.js";
 export async function runBootstrapSubcommand(args) {
     if (args.includes("--help") || args.includes("-h")) {
         console.log(usageBootstrap());
@@ -98,162 +34,46 @@ export async function runBootstrapSubcommand(args) {
     }
     catch (e) {
         if (e instanceof TruthLayerError) {
-            writeBootstrapCliError(e.code, e.message);
+            writeBootstrapOperationalFailure(e.code, e.message);
             process.exit(3);
         }
         throw e;
     }
-    const outResolved = path.resolve(parsed.outPath);
-    if (existsSync(outResolved)) {
-        writeBootstrapCliError(CLI_OPERATIONAL_CODES.BOOTSTRAP_OUT_EXISTS, `--out already exists: ${outResolved}`);
-        process.exit(3);
-    }
-    let rawInput;
-    try {
-        rawInput = readFileSync(path.resolve(parsed.inputPath), "utf8");
-    }
-    catch (e) {
-        const msg = e instanceof Error ? e.message : String(e);
-        writeBootstrapCliError(CLI_OPERATIONAL_CODES.BOOTSTRAP_USAGE, `Cannot read --input: ${msg}`);
-        process.exit(3);
-    }
-    let packInput;
-    try {
-        packInput = parseBootstrapPackInputJson(rawInput);
-    }
-    catch (e) {
-        if (e instanceof TruthLayerError) {
-            writeBootstrapCliError(e.code, e.message);
-            process.exit(3);
-        }
-        throw e;
-    }
-    try {
-        await runLicensePreflightIfNeeded("verify");
-    }
-    catch (e) {
-        if (e instanceof TruthLayerError) {
-            writeBootstrapCliError(e.code, e.message);
-            process.exit(3);
-        }
-        const msg = e instanceof Error ? e.message : String(e);
-        writeBootstrapCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(msg));
-        process.exit(3);
-    }
-    mkdirSync(outResolved, { recursive: false });
-    const database = parsed.postgresUrl
-        ? { kind: "postgres", connectionString: parsed.postgresUrl }
-        : { kind: "sqlite", path: path.resolve(parsed.dbPath) };
-    const inputUtf8 = synthesizeQuickInputUtf8FromOpenAiV1(packInput);
-    let report;
-    let registryUtf8;
-    let contractExports;
-    try {
-        const out = await runQuickVerifyToValidatedReport({
-            inputUtf8,
-            postgresUrl: parsed.postgresUrl ?? undefined,
-            sqlitePath: parsed.dbPath !== undefined ? path.resolve(parsed.dbPath) : undefined,
-        });
-        report = out.report;
-        registryUtf8 = out.registryUtf8;
-        contractExports = out.contractExports;
-    }
-    catch (e) {
-        cleanupOutDir(outResolved);
-        if (e instanceof TruthLayerError) {
-            writeBootstrapCliError(e.code, e.message);
-            process.exit(3);
-        }
-        const msg = e instanceof Error ? e.message : String(e);
-        writeBootstrapCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(msg));
-        process.exit(3);
-    }
-    if (report.verdict !== "pass") {
-        cleanupOutDir(outResolved);
-        writeBootstrapCliError(CLI_OPERATIONAL_CODES.BOOTSTRAP_QUICK_NOT_PASS, `Quick Verify verdict was "${report.verdict}" (expected pass).`);
-        process.exit(2);
-    }
-    if (contractExports.length === 0) {
-        cleanupOutDir(outResolved);
-        writeBootstrapCliError(CLI_OPERATIONAL_CODES.BOOTSTRAP_NO_EXPORTABLE_TOOLS, "Quick Verify produced zero exportable tools for contract replay.");
-        process.exit(2);
-    }
-    const eventsPath = path.join(outResolved, "events.ndjson");
-    const toolsPath = path.join(outResolved, "tools.json");
-    const quickReportPath = path.join(outResolved, "quick-report.json");
-    const readmePath = path.join(outResolved, "README.bootstrap.md");
-    try {
-        atomicWriteUtf8File(toolsPath, registryUtf8);
-        atomicWriteUtf8File(eventsPath, buildQuickContractEventsNdjson({
-            workflowId: packInput.workflowId,
-            exports: contractExports,
-        }));
-        atomicWriteUtf8File(quickReportPath, `${stableStringify(report)}\n`);
-        atomicWriteUtf8File(readmePath, buildBootstrapReadmeMarkdown(packInput.workflowId));
-    }
-    catch (e) {
-        cleanupOutDir(outResolved);
-        const msg = e instanceof Error ? e.message : String(e);
-        writeBootstrapCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(`pack write: ${msg}`));
-        process.exit(3);
-    }
-    let truthBuffered = "";
-    let result;
-    try {
-        result = await verifyWorkflow({
-            workflowId: packInput.workflowId,
-            eventsPath,
-            registryPath: toolsPath,
-            database,
-            truthReport: (r) => {
-                truthBuffered = r;
-            },
-        });
-    }
-    catch (e) {
-        cleanupOutDir(outResolved);
-        if (e instanceof TruthLayerError) {
-            writeBootstrapCliError(e.code, e.message);
-            process.exit(3);
-        }
-        const msg = e instanceof Error ? e.message : String(e);
-        writeBootstrapCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(msg));
-        process.exit(3);
-    }
-    const validateResult = loadSchemaValidator("workflow-result");
-    if (!validateResult(result)) {
-        cleanupOutDir(outResolved);
-        writeBootstrapCliError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateResult.errors ?? []));
-        process.exit(3);
-    }
-    if (result.status === "complete") {
+    const outcome = await executeBootstrapPack(parsed);
+    if (outcome.kind === "pack_ready") {
         const envelope = {
             schemaVersion: 1,
             kind: "agentskeptic_bootstrap_result",
-            workflowId: packInput.workflowId,
-            outDir: outResolved,
+            workflowId: outcome.workflowId,
+            outDir: outcome.outResolved,
             quickVerdict: "pass",
             verifyStatus: "complete",
-            exportedToolCount: contractExports.length,
+            exportedToolCount: outcome.exportedToolCount,
         };
         try {
             process.stdout.write(`${JSON.stringify(envelope)}\n`);
         }
         catch (e) {
-            cleanupOutDir(outResolved);
+            cleanupOutDirFromPath(outcome.outResolved);
             const msg = e instanceof Error ? e.message : String(e);
-            writeBootstrapCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(`stdout: ${msg}`));
+            writeBootstrapOperationalFailure(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(`stdout: ${msg}`));
             process.exit(3);
         }
         process.exit(0);
+        return;
+    }
+    if (outcome.kind === "bootstrap_cli_error") {
+        writeBootstrapOperationalFailure(outcome.code, outcome.message);
+        process.exit(outcome.exitCode);
+        return;
     }
-    process.stderr.write(`${truthBuffered}\n`);
+    process.stderr.write(`${outcome.truthBuffered}\n`);
     process.stderr.write(formatDistributionFooter());
     const exitWithCleanup = (code) => {
-        cleanupOutDir(outResolved);
+        cleanupOutDirFromPath(outcome.outResolved);
         process.exit(code);
     };
-    emitVerifyWorkflowCliJsonAndExitByStatus(result, {
+    emitVerifyWorkflowCliJsonAndExitByStatus(outcome.result, {
         consoleLog: (line) => {
             console.log(line);
         },