agentskeptic 0.2.1 → 1.0.1

package/dist/verify/batchVerifyTelemetrySubcommand.js

@@ -2,10 +2,14 @@ import { randomUUID } from "node:crypto";
 import { readFileSync } from "node:fs";
 import path from "node:path";
 import { parseBatchVerifyCliArgs } from "../cliArgv.js";
-import { cliErrorEnvelope, formatOperationalMessage, } from "../failureCatalog.js";
+import { CLI_OPERATIONAL_CODES, cliErrorEnvelope, formatOperationalMessage, } from "../failureCatalog.js";
+import { classifyLangGraphCheckpointTrustEligibility, } from "../langGraphCheckpointTrustGate.js";
+import { validatedLangGraphIneligibleCertificate } from "../langGraphCheckpointTrustIneligibleCertificate.js";
+import { eventsFileHasSchemaV3ToolObservedForWorkflow, loadEventsForWorkflow } from "../loadEvents.js";
 import { verifyWorkflow } from "../pipeline.js";
 import { TruthLayerError } from "../truthLayerError.js";
 import { writeRunBundleCli } from "../writeRunBundleCli.js";
+import { newActivationHttpCorrelationId } from "../commercial/activationCorrelation.js";
 import { runLicensePreflightIfNeeded } from "../commercial/licensePreflight.js";
 import { postVerifyOutcomeBeacon } from "../commercial/postVerifyOutcomeBeacon.js";
 import { classifyBatchVerifyWorkload } from "../commercial/verifyWorkloadClassify.js";
@@ -14,7 +18,18 @@ import { formatDistributionFooter } from "../distributionFooter.js";
 import { maybeEmitOssClaimTicketUrlToStderr } from "../telemetry/maybeEmitOssClaimTicketUrl.js";
 import { classifyWorkflowLineage } from "../funnel/workflowLineageClassify.js";
 import { postProductActivationEvent } from "../telemetry/postProductActivationEvent.js";
-import { CLI_EXITED_AFTER_ERROR, emitVerifyWorkflowCliJsonAndExitByStatus, runStandardVerifyWorkflowCliToTerminalResult, } from "../standardVerifyWorkflowCli.js";
+import { buildOutcomeCertificateLangGraphCheckpointTrustFromWorkflowResult, } from "../outcomeCertificate.js";
+import { loadSchemaValidator } from "../schemaLoad.js";
+import { postPublicVerificationReport } from "../shareReport/postPublicVerificationReport.js";
+import { verifyRunStateFromBufferedRunEvents } from "../verifyRunStateFromBufferedRunEvents.js";
+import { CLI_EXITED_AFTER_ERROR, emitOutcomeCertificateCliAndExitByStateRelation, runStandardVerifyWorkflowCliToTerminalResult, } from "../standardVerifyWorkflowCli.js";
+function terminalStatusFromCertificate(c) {
+    if (c.stateRelation === "matches_expectations")
+        return "complete";
+    if (c.stateRelation === "does_not_match")
+        return "inconsistent";
+    return "incomplete";
+}
 function writeCliError(code, message) {
     console.error(cliErrorEnvelope(code, formatOperationalMessage(message)));
 }
@@ -30,12 +45,21 @@ export async function runBatchVerifyWithTelemetrySubcommand(batchArgs, opts) {
         }
         throw e;
     }
+    if (!parsedBatch.langgraphCheckpointTrust &&
+        eventsFileHasSchemaV3ToolObservedForWorkflow(parsedBatch.eventsPath, parsedBatch.workflowId)) {
+        writeCliError(CLI_OPERATIONAL_CODES.LANGGRAPH_CHECKPOINT_TRUST_GENERIC_MODE_CONFLICT, formatOperationalMessage("Events contain schemaVersion 3 tool_observed for this workflow. Use --langgraph-checkpoint-trust for LangGraph checkpoint trust mode, or emit schemaVersion 1/2 only for generic verify."));
+        process.exit(3);
+    }
     const batchActivationRunId = process.env.AGENTSKEPTIC_RUN_ID?.trim() ||
         process.env.WORKFLOW_VERIFIER_RUN_ID?.trim() ||
         randomUUID();
+    const batchHttpCorrelationId = newActivationHttpCorrelationId();
     let batchPreflight;
     try {
-        batchPreflight = await runLicensePreflightIfNeeded("verify", { runId: batchActivationRunId });
+        batchPreflight = await runLicensePreflightIfNeeded("verify", {
+            runId: batchActivationRunId,
+            xRequestId: batchHttpCorrelationId,
+        });
     }
     catch (e) {
         if (e instanceof TruthLayerError) {
@@ -44,7 +68,6 @@ export async function runBatchVerifyWithTelemetrySubcommand(batchArgs, opts) {
         }
         throw e;
     }
-    const suppressTruthToStderr = parsedBatch.noTruthReport || parsedBatch.shareReportOrigin !== undefined;
     const batchBuildProfile = LICENSE_PREFLIGHT_ENABLED ? "commercial" : "oss";
     const batchWorkloadClass = classifyBatchVerifyWorkload({
         eventsPath: parsedBatch.eventsPath,
@@ -81,29 +104,32 @@ export async function runBatchVerifyWithTelemetrySubcommand(batchArgs, opts) {
             process.exit(code);
         },
     };
-    try {
-        const result = await runStandardVerifyWorkflowCliToTerminalResult({
-            shareReportOrigin: parsedBatch.shareReportOrigin,
-            runVerify: () => verifyWorkflow({
-                workflowId: parsedBatch.workflowId,
-                eventsPath: parsedBatch.eventsPath,
-                registryPath: parsedBatch.registryPath,
-                database: parsedBatch.database,
-                verificationPolicy: parsedBatch.verificationPolicy,
-                ...(suppressTruthToStderr ?
-                    { truthReport: () => { } }
-                    : {
-                        truthReport: (report) => {
-                            process.stderr.write(`${report}\n`);
-                            process.stderr.write(formatDistributionFooter());
-                        },
-                    }),
-            }),
-            maybeWriteBundle: parsedBatch.writeRunBundleDir === undefined
-                ? undefined
-                : (wfResult) => writeRunBundleCli(parsedBatch.writeRunBundleDir, readFileSync(path.resolve(parsedBatch.eventsPath)), wfResult, parsedBatch.signPrivateKeyPath),
-            io: batchIo,
-        });
+    const projectRoot = path.resolve(process.cwd());
+    async function finishCertificateTelemetryAndExit(certificate, workflowResultForStderrHook, humanAndShareMode) {
+        if (humanAndShareMode === "ineligibleCertificateOnly") {
+            const shareOrigin = parsedBatch.shareReportOrigin;
+            if (shareOrigin !== undefined) {
+                const shareRes = await postPublicVerificationReport(shareOrigin, {
+                    schemaVersion: 2,
+                    certificate,
+                });
+                if (!shareRes.ok) {
+                    writeCliError(CLI_OPERATIONAL_CODES.SHARE_REPORT_FAILED, formatOperationalMessage(`share_report_origin=${shareOrigin} http_status=${String(shareRes.status)} detail=${shareRes.bodySnippet}`));
+                    batchIo.exit(3);
+                    throw new Error(CLI_EXITED_AFTER_ERROR);
+                }
+                if (!parsedBatch.noHumanReport) {
+                    batchIo.stderrLine(`${certificate.humanReport}\n${formatDistributionFooter()}`);
+                }
+            }
+            else if (!parsedBatch.noHumanReport) {
+                process.stderr.write(`${certificate.humanReport}\n${formatDistributionFooter()}\n`);
+            }
+        }
+        else if (!parsedBatch.noHumanReport && parsedBatch.shareReportOrigin === undefined) {
+            process.stderr.write(`${certificate.humanReport}\n${formatDistributionFooter()}\n`);
+        }
+        const terminalStatus = terminalStatusFromCertificate(certificate);
         await postProductActivationEvent({
             phase: "verify_outcome",
             run_id: batchActivationRunId,
@@ -112,25 +138,97 @@ export async function runBatchVerifyWithTelemetrySubcommand(batchArgs, opts) {
             workflow_lineage: batchLineage,
             subcommand: opts.telemetrySubcommand,
             build_profile: batchBuildProfile,
-            terminal_status: result.status,
+            terminal_status: terminalStatus,
         });
-        if (!parsedBatch.noTruthReport) {
+        if (!parsedBatch.noHumanReport) {
             await maybeEmitOssClaimTicketUrlToStderr({
                 run_id: batchActivationRunId,
-                terminal_status: result.status,
+                terminal_status: terminalStatus,
                 workload_class: batchWorkloadClass,
                 subcommand: opts.telemetrySubcommand,
                 build_profile: batchBuildProfile,
+                xRequestId: batchHttpCorrelationId,
             });
         }
         await postVerifyOutcomeBeacon({
             runId: batchPreflight.runId,
-            terminal_status: result.status,
+            certificate,
+            terminal_status: terminalStatus,
             workload_class: batchWorkloadClass,
             subcommand: opts.telemetrySubcommand,
+            xRequestId: batchHttpCorrelationId,
+        });
+        if (workflowResultForStderrHook !== undefined) {
+            opts.stderrAppendBeforeStdout?.(workflowResultForStderrHook);
+        }
+        emitOutcomeCertificateCliAndExitByStateRelation(certificate, batchIo);
+    }
+    let langGraphEligibleLoad;
+    if (parsedBatch.langgraphCheckpointTrust) {
+        const load = loadEventsForWorkflow(parsedBatch.eventsPath, parsedBatch.workflowId);
+        const eligibility = classifyLangGraphCheckpointTrustEligibility({
+            runLevelReasons: load.runLevelReasons,
+            toolObservedEvents: load.events,
+        });
+        if (!eligibility.eligible) {
+            try {
+                const certificate = validatedLangGraphIneligibleCertificate(parsedBatch.workflowId, eligibility.certificateReasons);
+                await finishCertificateTelemetryAndExit(certificate, undefined, "ineligibleCertificateOnly");
+            }
+            catch (e) {
+                if (e instanceof Error && e.message === CLI_EXITED_AFTER_ERROR)
+                    return;
+                throw e;
+            }
+            return;
+        }
+        langGraphEligibleLoad = load;
+    }
+    try {
+        const { certificate, workflowResult } = await runStandardVerifyWorkflowCliToTerminalResult({
+            shareReportOrigin: parsedBatch.shareReportOrigin,
+            runVerify: parsedBatch.langgraphCheckpointTrust
+                ? undefined
+                : () => verifyWorkflow({
+                    workflowId: parsedBatch.workflowId,
+                    eventsPath: parsedBatch.eventsPath,
+                    registryPath: parsedBatch.registryPath,
+                    database: parsedBatch.database,
+                    verificationPolicy: parsedBatch.verificationPolicy,
+                    truthReport: () => { },
+                }),
+            runVerifyWithCertificate: parsedBatch.langgraphCheckpointTrust
+                ? async () => {
+                    const load = langGraphEligibleLoad;
+                    const workflowResult = await verifyRunStateFromBufferedRunEvents({
+                        workflowId: parsedBatch.workflowId,
+                        registryPath: parsedBatch.registryPath,
+                        database: parsedBatch.database,
+                        projectRoot,
+                        bufferedRunEvents: load.runEvents,
+                        runLevelReasons: load.runLevelReasons,
+                        verificationPolicy: parsedBatch.verificationPolicy,
+                        logStep: () => { },
+                        truthReport: () => { },
+                    });
+                    const validateWf = loadSchemaValidator("workflow-result");
+                    if (!validateWf(workflowResult)) {
+                        throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateWf.errors ?? []));
+                    }
+                    const certificate = buildOutcomeCertificateLangGraphCheckpointTrustFromWorkflowResult(workflowResult);
+                    const validateCert = loadSchemaValidator("outcome-certificate-v1");
+                    if (!validateCert(certificate)) {
+                        throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateCert.errors ?? []));
+                    }
+                    return { workflowResult, certificate };
+                }
+                : undefined,
+            maybeWriteBundle: parsedBatch.writeRunBundleDir === undefined
+                ? undefined
+                : (wfResult) => writeRunBundleCli(parsedBatch.writeRunBundleDir, readFileSync(path.resolve(parsedBatch.eventsPath)), wfResult, parsedBatch.signPrivateKeyPath),
+            io: batchIo,
         });
-        opts.stderrAppendBeforeStdout?.(result);
-        emitVerifyWorkflowCliJsonAndExitByStatus(result, batchIo);
+        await finishCertificateTelemetryAndExit(certificate, workflowResult, "afterStandardRunner");
     }
     catch (e) {
         if (e instanceof Error && e.message === CLI_EXITED_AFTER_ERROR)

package/dist/verify/batchVerifyTelemetrySubcommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"batchVerifyTelemetrySubcommand.js","sourceRoot":"","sources":["../../src/verify/batchVerifyTelemetrySubcommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAEL,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4CAA4C,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,wCAAwC,EACxC,4CAA4C,GAC7C,MAAM,iCAAiC,CAAC;AAEzC,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,SAAmB,EACnB,IAKC;IAED,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QAC5C,UAAU,EAAE,CAAC;IACf,IAAI,cAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAChG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,MAAM,qBAAqB,GAAG,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,iBAAiB,KAAK,SAAS,CAAC;IACvG,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,CAAC,CAAE,YAAsB,CAAC,CAAC,CAAE,KAAe,CAAC;IACjG,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;QACrD,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;KAC/B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,aAAa,IAAI,kBAAkB,KAAK,kBAAkB,EAAE,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4HAA4H;YAC1H,4JAA4J,CAC/J,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC3C,UAAU,EAAE,IAAI,CAAC,mBAAmB;QACpC,aAAa,EAAE,kBAAkB;QACjC,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAC,CAAC;IACH,MAAM,0BAA0B,CAAC;QAC/B,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,oBAAoB;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,YAAY;QAC9B,UAAU,EAAE,IAAI,CAAC,mBAAmB;QACpC,aAAa,EAAE,iBAAiB;KACjC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;YAC3B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE;YACrB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,4CAA4C,CAAC;YAChE,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;YAChD,SAAS,EAAE,GAAG,EAAE,CACd,cAAc,CAAC;gBACb,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;gBAClD,GAAG,CAAC,qBAAqB,CAAC,CAAC;oBACzB,EAAE,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE;oBAC3B,CAAC,CAAC;wBACE,WAAW,EAAE,CAAC,MAAc,EAAE,EAAE;4BAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;4BACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC,CAAC;wBACnD,CAAC;qBACF,CAAC;aACL,CAAC;YACJ,gBAAgB,EACd,WAAW,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,QAAwB,EAAE,EAAE,CAC3B,iBAAiB,CACf,WAAW,CAAC,iBAAkB,EAC9B,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,EAClD,QAAQ,EACR,WAAW,CAAC,kBAAkB,CAC/B;YACT,EAAE,EAAE,OAAO;SACZ,CAAC,CAAC;QACH,MAAM,0BAA0B,CAAC;YAC/B,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,oBAAoB;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,YAAY;YAC9B,UAAU,EAAE,IAAI,CAAC,mBAAmB;YACpC,aAAa,EAAE,iBAAiB;YAChC,eAAe,EAAE,MAAM,CAAC,MAAM;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,kCAAkC,CAAC;gBACvC,MAAM,EAAE,oBAAoB;gBAC5B,eAAe,EAAE,MAAM,CAAC,MAAM;gBAC9B,cAAc,EAAE,kBAAkB;gBAClC,UAAU,EAAE,IAAI,CAAC,mBAAmB;gBACpC,aAAa,EAAE,iBAAiB;aACjC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,uBAAuB,CAAC;YAC5B,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,eAAe,EAAE,MAAM,CAAC,MAAM;YAC9B,cAAc,EAAE,kBAAkB;YAClC,UAAU,EAAE,IAAI,CAAC,mBAAmB;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,wBAAwB,EAAE,CAAC,MAAM,CAAC,CAAC;QACxC,wCAAwC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,sBAAsB;YAAE,OAAO;QACvE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}
+{"version":3,"file":"batchVerifyTelemetrySubcommand.js","sourceRoot":"","sources":["../../src/verify/batchVerifyTelemetrySubcommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAA6B,MAAM,eAAe,CAAC;AACnF,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2CAA2C,GAC5C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,4CAA4C,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4CAA4C,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EACL,iEAAiE,GAElE,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EACL,sBAAsB,EACtB,+CAA+C,EAC/C,4CAA4C,GAC7C,MAAM,iCAAiC,CAAC;AAEzC,SAAS,6BAA6B,CACpC,CAA0D;IAE1D,IAAI,CAAC,CAAC,aAAa,KAAK,sBAAsB;QAAE,OAAO,UAAU,CAAC;IAClE,IAAI,CAAC,CAAC,aAAa,KAAK,gBAAgB;QAAE,OAAO,cAAc,CAAC;IAChE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,SAAmB,EACnB,IAKC;IAED,IAAI,WAAiC,CAAC;IACtC,IAAI,CAAC;QACH,WAAW,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,IACE,CAAC,WAAW,CAAC,wBAAwB;QACrC,4CAA4C,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,EAC5F,CAAC;QACD,aAAa,CACX,qBAAqB,CAAC,gDAAgD,EACtE,wBAAwB,CACtB,0LAA0L,CAC3L,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QAC5C,UAAU,EAAE,CAAC;IACf,MAAM,sBAAsB,GAAG,8BAA8B,EAAE,CAAC;IAChE,IAAI,cAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE;YAC3D,KAAK,EAAE,oBAAoB;YAC3B,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,CAAC,CAAE,YAAsB,CAAC,CAAC,CAAE,KAAe,CAAC;IACjG,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;QACrD,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;KAC/B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,aAAa,IAAI,kBAAkB,KAAK,kBAAkB,EAAE,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4HAA4H;YAC1H,4JAA4J,CAC/J,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC3C,UAAU,EAAE,IAAI,CAAC,mBAAmB;QACpC,aAAa,EAAE,kBAAkB;QACjC,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAC,CAAC;IACH,MAAM,0BAA0B,CAAC;QAC/B,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,oBAAoB;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,YAAY;QAC9B,UAAU,EAAE,IAAI,CAAC,mBAAmB;QACpC,aAAa,EAAE,iBAAiB;KACjC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;YAC3B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE;YACrB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEhD,KAAK,UAAU,iCAAiC,CAC9C,WAAiC,EACjC,2BAAuD,EACvD,iBAAsE;QAEtE,IAAI,iBAAiB,KAAK,2BAA2B,EAAE,CAAC;YACtD,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAAC;YAClD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,WAAW,EAAE;oBAC/D,aAAa,EAAE,CAAC;oBAChB,WAAW;iBACZ,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,aAAa,CACX,qBAAqB,CAAC,mBAAmB,EACzC,wBAAwB,CACtB,uBAAuB,WAAW,gBAAgB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,QAAQ,CAAC,WAAW,EAAE,CAC3G,CACF,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;oBAC/B,OAAO,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC,WAAW,KAAK,wBAAwB,EAAE,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;gBACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,WAAW,KAAK,wBAAwB,EAAE,IAAI,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,WAAW,KAAK,wBAAwB,EAAE,IAAI,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,cAAc,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,0BAA0B,CAAC;YAC/B,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,oBAAoB;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,YAAY;YAC9B,UAAU,EAAE,IAAI,CAAC,mBAAmB;YACpC,aAAa,EAAE,iBAAiB;YAChC,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,kCAAkC,CAAC;gBACvC,MAAM,EAAE,oBAAoB;gBAC5B,eAAe,EAAE,cAAc;gBAC/B,cAAc,EAAE,kBAAkB;gBAClC,UAAU,EAAE,IAAI,CAAC,mBAAmB;gBACpC,aAAa,EAAE,iBAAiB;gBAChC,UAAU,EAAE,sBAAsB;aACnC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,uBAAuB,CAAC;YAC5B,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,WAAW;YACX,eAAe,EAAE,cAAc;YAC/B,cAAc,EAAE,kBAAkB;YAClC,UAAU,EAAE,IAAI,CAAC,mBAAmB;YACpC,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;QACH,IAAI,2BAA2B,KAAK,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,wBAAwB,EAAE,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;QACD,+CAA+C,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,qBAAmD,CAAC;IACxD,IAAI,WAAW,CAAC,wBAAwB,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,qBAAqB,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;QACnF,MAAM,WAAW,GAAG,2CAA2C,CAAC;YAC9D,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB,EAAE,IAAI,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,uCAAuC,CACzD,WAAW,CAAC,UAAU,EACtB,WAAW,CAAC,kBAAkB,CAC/B,CAAC;gBACF,MAAM,iCAAiC,CAAC,WAAW,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;YAC/F,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,sBAAsB;oBAAE,OAAO;gBACvE,MAAM,CAAC,CAAC;YACV,CAAC;YACD,OAAO;QACT,CAAC;QACD,qBAAqB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,4CAA4C,CAAC;YACzF,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;YAChD,SAAS,EAAE,WAAW,CAAC,wBAAwB;gBAC7C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,GAAG,EAAE,CACH,cAAc,CAAC;oBACb,UAAU,EAAE,WAAW,CAAC,UAAU;oBAClC,UAAU,EAAE,WAAW,CAAC,UAAU;oBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;oBACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;oBAC9B,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;oBAClD,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;iBACtB,CAAC;YACR,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;gBAC5D,CAAC,CAAC,KAAK,IAAI,EAAE;oBACT,MAAM,IAAI,GAAG,qBAAsB,CAAC;oBACpC,MAAM,cAAc,GAAG,MAAM,mCAAmC,CAAC;wBAC/D,UAAU,EAAE,WAAW,CAAC,UAAU;wBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;wBACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;wBAC9B,WAAW;wBACX,iBAAiB,EAAE,IAAI,CAAC,SAAS;wBACjC,eAAe,EAAE,IAAI,CAAC,eAAe;wBACrC,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;wBAClD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;wBACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;qBACtB,CAAC,CAAC;oBACH,MAAM,UAAU,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;oBAC1D,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;wBAChC,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,8BAA8B,EACpD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CACxC,CAAC;oBACJ,CAAC;oBACD,MAAM,WAAW,GAAG,iEAAiE,CAAC,cAAc,CAAC,CAAC;oBACtG,MAAM,YAAY,GAAG,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;oBACnE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC/B,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,8BAA8B,EACpD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC,CAC1C,CAAC;oBACJ,CAAC;oBACD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;gBACzC,CAAC;gBACH,CAAC,CAAC,SAAS;YACb,gBAAgB,EACd,WAAW,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,QAAwB,EAAE,EAAE,CAC3B,iBAAiB,CACf,WAAW,CAAC,iBAAkB,EAC9B,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,EAClD,QAAQ,EACR,WAAW,CAAC,kBAAkB,CAC/B;YACT,EAAE,EAAE,OAAO;SACZ,CAAC,CAAC;QACH,MAAM,iCAAiC,CAAC,WAAW,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,sBAAsB;YAAE,OAAO;QACvE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/verifyAgentskeptic.d.ts

@@ -1,15 +1,11 @@
-import type { WorkflowResult } from "./types.js";
+import type { OutcomeCertificateV1 } from "./outcomeCertificate.js";
 /**
- * Default adoption path: reads `agentskeptic/events.ndjson` and `agentskeptic/tools.json`
- * under `projectRoot`, verifies `workflowId` against `databaseUrl` (SQLite path or postgres URL).
- * For arbitrary paths use `verifyWorkflow` instead.
+ * Thin file-replay alias: reads `agentskeptic/events.ndjson` into a DecisionGate buffer and returns the same Outcome Certificate as batch verify.
+ * Prefer `createDecisionGate` for runtime integration.
  */
 export declare function verifyAgentskeptic(options: {
     workflowId: string;
     databaseUrl: string;
     projectRoot?: string;
-}): Promise<{
-    ok: boolean;
-    result: WorkflowResult;
-}>;
+}): Promise<OutcomeCertificateV1>;
 //# sourceMappingURL=verifyAgentskeptic.d.ts.map

package/dist/verifyAgentskeptic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verifyAgentskeptic.d.ts","sourceRoot":"","sources":["../src/verifyAgentskeptic.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAajD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC,CA0BnD"}
+{"version":3,"file":"verifyAgentskeptic.d.ts","sourceRoot":"","sources":["../src/verifyAgentskeptic.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAIpE;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA2BhC"}

package/dist/verifyAgentskeptic.js

@@ -1,39 +1,34 @@
 import { existsSync } from "node:fs";
 import path from "node:path";
-import { verifyWorkflow } from "./pipeline.js";
+import { createDecisionGate } from "./decisionGate.js";
+import { loadEventsForWorkflow } from "./loadEvents.js";
 import { TruthLayerError } from "./truthLayerError.js";
-const POSTGRES_URL_RE = /^postgres(ql)?:\/\//i;
 const PROJECT_LAYOUT_MISSING = "PROJECT_VERIFICATION_LAYOUT_MISSING";
-function verificationDatabaseFromUrl(databaseUrl, projectRoot) {
-    if (POSTGRES_URL_RE.test(databaseUrl)) {
-        return { kind: "postgres", connectionString: databaseUrl };
-    }
-    return { kind: "sqlite", path: path.resolve(projectRoot, databaseUrl) };
-}
 /**
- * Default adoption path: reads `agentskeptic/events.ndjson` and `agentskeptic/tools.json`
- * under `projectRoot`, verifies `workflowId` against `databaseUrl` (SQLite path or postgres URL).
- * For arbitrary paths use `verifyWorkflow` instead.
+ * Thin file-replay alias: reads `agentskeptic/events.ndjson` into a DecisionGate buffer and returns the same Outcome Certificate as batch verify.
+ * Prefer `createDecisionGate` for runtime integration.
  */
 export async function verifyAgentskeptic(options) {
     const projectRoot = options.projectRoot ?? process.cwd();
     const resolvedRoot = path.resolve(projectRoot);
     const agentskepticDir = path.join(resolvedRoot, "agentskeptic");
     const eventsPath = path.join(agentskepticDir, "events.ndjson");
-    const registryPath = path.join(agentskepticDir, "tools.json");
-    if (!existsSync(eventsPath) || !existsSync(registryPath)) {
-        throw new TruthLayerError(PROJECT_LAYOUT_MISSING, `${eventsPath}, ${registryPath}`);
+    const registryPathRel = path.join("agentskeptic", "tools.json");
+    if (!existsSync(eventsPath) || !existsSync(path.join(resolvedRoot, registryPathRel))) {
+        throw new TruthLayerError(PROJECT_LAYOUT_MISSING, `${eventsPath}, ${path.join(resolvedRoot, registryPathRel)}`);
     }
-    const database = verificationDatabaseFromUrl(options.databaseUrl, resolvedRoot);
-    const result = await verifyWorkflow({
+    const load = loadEventsForWorkflow(eventsPath, options.workflowId);
+    const gate = createDecisionGate({
         workflowId: options.workflowId,
-        eventsPath,
-        registryPath,
-        database,
+        registryPath: registryPathRel,
+        databaseUrl: options.databaseUrl,
+        projectRoot: resolvedRoot,
         logStep: () => { },
         truthReport: () => { },
     });
-    const ok = result.status === "complete";
-    return { ok, result };
+    for (const ev of load.runEvents) {
+        gate.appendRunEvent(ev);
+    }
+    return gate.evaluateCertificate();
 }
 //# sourceMappingURL=verifyAgentskeptic.js.map

package/dist/verifyAgentskeptic.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyAgentskeptic.js","sourceRoot":"","sources":["../src/verifyAgentskeptic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAIvD,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C,MAAM,sBAAsB,GAAG,qCAA8C,CAAC;AAE9E,SAAS,2BAA2B,CAAC,WAAmB,EAAE,WAAmB;IAC3E,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAIxC;IACC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAE9D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,GAAG,UAAU,KAAK,YAAY,EAAE,CACjC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU;QACV,YAAY;QACZ,QAAQ;QACR,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;QACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;KACtB,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;IACxC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACxB,CAAC"}
+{"version":3,"file":"verifyAgentskeptic.js","sourceRoot":"","sources":["../src/verifyAgentskeptic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,MAAM,sBAAsB,GAAG,qCAA8C,CAAC;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAIxC;IACC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC/D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAEhE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,GAAG,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,eAAe;QAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;QACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;KACtB,CAAC,CAAC;IACH,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC;AACpC,CAAC"}

package/dist/verifyAgentskeptic.test.js

@@ -22,37 +22,35 @@ function seedTempProject() {
     return dir;
 }
 describe("verifyAgentskeptic", () => {
-    it("wf_complete: ok true and status complete", async () => {
+    it("wf_complete: contract certificate matches expectations and permits high-stakes reliance", async () => {
         const projectRoot = seedTempProject();
         try {
             const dbPath = join(projectRoot, "demo.db");
-            const { ok, result } = await verifyAgentskeptic({
+            const certificate = await verifyAgentskeptic({
                 workflowId: "wf_complete",
                 databaseUrl: dbPath,
                 projectRoot,
             });
-            expect(result.status).toBe("complete");
-            expect(ok).toBe(true);
-            expect(ok === (result.status === "complete")).toBe(true);
+            expect(certificate.stateRelation).toBe("matches_expectations");
+            expect(certificate.highStakesReliance).toBe("permitted");
+            expect(certificate.runKind).toBe("contract_sql");
         }
         finally {
             rmSync(projectRoot, { recursive: true, force: true });
         }
     });
-    it("wf_missing: ok false and status inconsistent", async () => {
+    it("wf_missing: mismatch and prohibited reliance; explanation cites ROW_ABSENT", async () => {
         const projectRoot = seedTempProject();
         try {
             const dbPath = join(projectRoot, "demo.db");
-            const { ok, result } = await verifyAgentskeptic({
+            const certificate = await verifyAgentskeptic({
                 workflowId: "wf_missing",
                 databaseUrl: dbPath,
                 projectRoot,
             });
-            expect(result.status).toBe("inconsistent");
-            expect(ok).toBe(false);
-            expect(ok === (result.status === "complete")).toBe(true);
-            expect(result.steps[0]?.status).toBe("missing");
-            expect(result.steps[0]?.reasons[0]?.code).toBe("ROW_ABSENT");
+            expect(certificate.stateRelation).toBe("does_not_match");
+            expect(certificate.highStakesReliance).toBe("prohibited");
+            expect(certificate.explanation.details.some((d) => d.code === "ROW_ABSENT")).toBe(true);
         }
         finally {
             rmSync(projectRoot, { recursive: true, force: true });

package/dist/verifyAgentskeptic.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyAgentskeptic.test.js","sourceRoot":"","sources":["../src/verifyAgentskeptic.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAEvC,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAClD,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;IAClG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1E,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,EAAE,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC5C,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC;gBAC9C,UAAU,EAAE,aAAa;gBACzB,WAAW,EAAE,MAAM;gBACnB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC5C,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC;gBAC9C,UAAU,EAAE,YAAY;gBACxB,WAAW,EAAE,MAAM;gBACnB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC3C,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;YAC5D,MAAM,MAAM,CACV,kBAAkB,CAAC;gBACjB,UAAU,EAAE,aAAa;gBACzB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC;gBACzC,WAAW;aACZ,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAEnC,IAAI,CAAC;gBACH,MAAM,kBAAkB,CAAC;oBACvB,UAAU,EAAE,aAAa;oBACzB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC;oBACzC,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;gBAC1C,MAAM,GAAG,GAAG,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;gBACzC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"verifyAgentskeptic.test.js","sourceRoot":"","sources":["../src/verifyAgentskeptic.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAEvC,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAClD,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;IAClG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1E,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,EAAE,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC5C,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC;gBAC3C,UAAU,EAAE,aAAa;gBACzB,WAAW,EAAE,MAAM;gBACnB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAC/D,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC5C,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC;gBAC3C,UAAU,EAAE,YAAY;gBACxB,WAAW,EAAE,MAAM;gBACnB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACzD,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;YAC5D,MAAM,MAAM,CACV,kBAAkB,CAAC;gBACjB,UAAU,EAAE,aAAa;gBACzB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC;gBACzC,WAAW;aACZ,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAEnC,IAAI,CAAC;gBACH,MAAM,kBAAkB,CAAC;oBACvB,UAAU,EAAE,aAAa;oBACzB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC;oBACzC,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;gBAC1C,MAAM,GAAG,GAAG,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;gBACzC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verifyRunStateFromBufferedRunEvents.d.ts

@@ -0,0 +1,18 @@
+import type { Reason, RunEvent, VerificationDatabase, VerificationPolicy, WorkflowResult } from "./types.js";
+export type VerifyRunStateFromBufferedRunEventsInput = {
+    workflowId: string;
+    registryPath: string;
+    database: VerificationDatabase;
+    projectRoot: string;
+    bufferedRunEvents: RunEvent[];
+    runLevelReasons: Reason[];
+    verificationPolicy: VerificationPolicy;
+    logStep?: (line: object) => void;
+    truthReport?: (report: string) => void;
+};
+/**
+ * Single shared path: buffered run events + registry + DB → `WorkflowResult`.
+ * Used by `createDecisionGate` and `createLangGraphCheckpointTrustGate.runCheckpointTrust` (eligible path only).
+ */
+export declare function verifyRunStateFromBufferedRunEvents(input: VerifyRunStateFromBufferedRunEventsInput): Promise<WorkflowResult>;
+//# sourceMappingURL=verifyRunStateFromBufferedRunEvents.d.ts.map

package/dist/verifyRunStateFromBufferedRunEvents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyRunStateFromBufferedRunEvents.d.ts","sourceRoot":"","sources":["../src/verifyRunStateFromBufferedRunEvents.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,MAAM,EACN,QAAQ,EAER,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,wCAAwC,GAAG;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,QAAQ,EAAE,CAAC;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,mCAAmC,CACvD,KAAK,EAAE,wCAAwC,GAC9C,OAAO,CAAC,cAAc,CAAC,CA0DzB"}

package/dist/verifyRunStateFromBufferedRunEvents.js

@@ -0,0 +1,65 @@
+import path from "node:path";
+import { isToolObservedRunEvent } from "./executionTrace.js";
+import { loadToolsRegistry, verifyRunStateFromEvents } from "./pipeline.js";
+import { prepareWorkflowEvents } from "./prepareWorkflowEvents.js";
+/**
+ * Single shared path: buffered run events + registry + DB → `WorkflowResult`.
+ * Used by `createDecisionGate` and `createLangGraphCheckpointTrustGate.runCheckpointTrust` (eligible path only).
+ */
+export async function verifyRunStateFromBufferedRunEvents(input) {
+    const projectRoot = path.resolve(input.projectRoot);
+    const registryPath = path.resolve(projectRoot, input.registryPath);
+    const logStep = input.logStep ?? (() => { });
+    const truthReport = input.truthReport ?? (() => { });
+    if (!input.bufferedRunEvents.length && !input.runLevelReasons.length) {
+        throw new Error("verifyRunStateFromBufferedRunEvents: empty buffer and no run-level reasons");
+    }
+    if (!input.bufferedRunEvents.length) {
+        const registry = loadToolsRegistry(registryPath);
+        return verifyRunStateFromEvents({
+            workflowId: input.workflowId,
+            events: [],
+            runEvents: [],
+            runLevelReasons: [...input.runLevelReasons],
+            eventSequenceIntegrity: { kind: "normal" },
+            eventFileAggregateCounts: {
+                eventFileNonEmptyLines: 0,
+                schemaValidEvents: 0,
+                toolObservedForRequestedWorkflowId: 0,
+                toolObservedForOtherWorkflowIds: 0,
+            },
+            registry,
+            database: input.database,
+            verificationPolicy: input.verificationPolicy,
+            logStep,
+            truthReport,
+        });
+    }
+    const toolCandidates = [];
+    for (const ev of input.bufferedRunEvents) {
+        if (isToolObservedRunEvent(ev)) {
+            toolCandidates.push(ev);
+        }
+    }
+    const { eventsSorted, eventSequenceIntegrity } = prepareWorkflowEvents(toolCandidates);
+    const registry = loadToolsRegistry(registryPath);
+    return verifyRunStateFromEvents({
+        workflowId: input.workflowId,
+        events: eventsSorted,
+        runEvents: input.bufferedRunEvents,
+        runLevelReasons: [...input.runLevelReasons],
+        eventSequenceIntegrity,
+        eventFileAggregateCounts: {
+            eventFileNonEmptyLines: 0,
+            schemaValidEvents: 0,
+            toolObservedForRequestedWorkflowId: toolCandidates.length,
+            toolObservedForOtherWorkflowIds: 0,
+        },
+        registry,
+        database: input.database,
+        verificationPolicy: input.verificationPolicy,
+        logStep,
+        truthReport,
+    });
+}
+//# sourceMappingURL=verifyRunStateFromBufferedRunEvents.js.map

package/dist/verifyRunStateFromBufferedRunEvents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyRunStateFromBufferedRunEvents.js","sourceRoot":"","sources":["../src/verifyRunStateFromBufferedRunEvents.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAsBnE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAA+C;IAE/C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAEpD,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACjD,OAAO,wBAAwB,CAAC;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,EAAE;YACb,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC;YAC3C,sBAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1C,wBAAwB,EAAE;gBACxB,sBAAsB,EAAE,CAAC;gBACzB,iBAAiB,EAAE,CAAC;gBACpB,kCAAkC,EAAE,CAAC;gBACrC,+BAA+B,EAAE,CAAC;aACnC;YACD,QAAQ;YACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,OAAO;YACP,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAwB,EAAE,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACzC,IAAI,sBAAsB,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,sBAAsB,EAAE,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACjD,OAAO,wBAAwB,CAAC;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,KAAK,CAAC,iBAAiB;QAClC,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC;QAC3C,sBAAsB;QACtB,wBAAwB,EAAE;YACxB,sBAAsB,EAAE,CAAC;YACzB,iBAAiB,EAAE,CAAC;YACpB,kCAAkC,EAAE,cAAc,CAAC,MAAM;YACzD,+BAA+B,EAAE,CAAC;SACnC;QACD,QAAQ;QACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,OAAO;QACP,WAAW;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/vitestMonorepoRoot.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Resolves the agentskeptic monorepo root in Vitest.
+ *
+ * `process.cwd()` alone can be wrong (e.g. `website/` with a `package.json`). A strict `..` from
+ * `import.meta.url` is wrong when the test URL is a transformed path. We walk from the test
+ * file upward (and also try `process.cwd()`) for a `package.json#name === "agentskeptic"` root
+ * that still contains the full `examples/debug-corpus` library.
+ */
+export declare function monorepoRootForVitest(importMetaUrl: string): string;
+//# sourceMappingURL=vitestMonorepoRoot.d.ts.map

package/dist/vitestMonorepoRoot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitestMonorepoRoot.d.ts","sourceRoot":"","sources":["../src/vitestMonorepoRoot.ts"],"names":[],"mappings":"AAkDA;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAyCnE"}