agentskeptic 1.0.0 → 1.0.1

package/dist/verify/batchVerifyTelemetrySubcommand.js

@@ -2,10 +2,14 @@ import { randomUUID } from "node:crypto";
 import { readFileSync } from "node:fs";
 import path from "node:path";
 import { parseBatchVerifyCliArgs } from "../cliArgv.js";
-import { cliErrorEnvelope, formatOperationalMessage, } from "../failureCatalog.js";
+import { CLI_OPERATIONAL_CODES, cliErrorEnvelope, formatOperationalMessage, } from "../failureCatalog.js";
+import { classifyLangGraphCheckpointTrustEligibility, } from "../langGraphCheckpointTrustGate.js";
+import { validatedLangGraphIneligibleCertificate } from "../langGraphCheckpointTrustIneligibleCertificate.js";
+import { eventsFileHasSchemaV3ToolObservedForWorkflow, loadEventsForWorkflow } from "../loadEvents.js";
 import { verifyWorkflow } from "../pipeline.js";
 import { TruthLayerError } from "../truthLayerError.js";
 import { writeRunBundleCli } from "../writeRunBundleCli.js";
+import { newActivationHttpCorrelationId } from "../commercial/activationCorrelation.js";
 import { runLicensePreflightIfNeeded } from "../commercial/licensePreflight.js";
 import { postVerifyOutcomeBeacon } from "../commercial/postVerifyOutcomeBeacon.js";
 import { classifyBatchVerifyWorkload } from "../commercial/verifyWorkloadClassify.js";
@@ -14,6 +18,10 @@ import { formatDistributionFooter } from "../distributionFooter.js";
 import { maybeEmitOssClaimTicketUrlToStderr } from "../telemetry/maybeEmitOssClaimTicketUrl.js";
 import { classifyWorkflowLineage } from "../funnel/workflowLineageClassify.js";
 import { postProductActivationEvent } from "../telemetry/postProductActivationEvent.js";
+import { buildOutcomeCertificateLangGraphCheckpointTrustFromWorkflowResult, } from "../outcomeCertificate.js";
+import { loadSchemaValidator } from "../schemaLoad.js";
+import { postPublicVerificationReport } from "../shareReport/postPublicVerificationReport.js";
+import { verifyRunStateFromBufferedRunEvents } from "../verifyRunStateFromBufferedRunEvents.js";
 import { CLI_EXITED_AFTER_ERROR, emitOutcomeCertificateCliAndExitByStateRelation, runStandardVerifyWorkflowCliToTerminalResult, } from "../standardVerifyWorkflowCli.js";
 function terminalStatusFromCertificate(c) {
     if (c.stateRelation === "matches_expectations")
@@ -37,12 +45,21 @@ export async function runBatchVerifyWithTelemetrySubcommand(batchArgs, opts) {
         }
         throw e;
     }
+    if (!parsedBatch.langgraphCheckpointTrust &&
+        eventsFileHasSchemaV3ToolObservedForWorkflow(parsedBatch.eventsPath, parsedBatch.workflowId)) {
+        writeCliError(CLI_OPERATIONAL_CODES.LANGGRAPH_CHECKPOINT_TRUST_GENERIC_MODE_CONFLICT, formatOperationalMessage("Events contain schemaVersion 3 tool_observed for this workflow. Use --langgraph-checkpoint-trust for LangGraph checkpoint trust mode, or emit schemaVersion 1/2 only for generic verify."));
+        process.exit(3);
+    }
     const batchActivationRunId = process.env.AGENTSKEPTIC_RUN_ID?.trim() ||
         process.env.WORKFLOW_VERIFIER_RUN_ID?.trim() ||
         randomUUID();
+    const batchHttpCorrelationId = newActivationHttpCorrelationId();
     let batchPreflight;
     try {
-        batchPreflight = await runLicensePreflightIfNeeded("verify", { runId: batchActivationRunId });
+        batchPreflight = await runLicensePreflightIfNeeded("verify", {
+            runId: batchActivationRunId,
+            xRequestId: batchHttpCorrelationId,
+        });
     }
     catch (e) {
         if (e instanceof TruthLayerError) {
@@ -87,23 +104,29 @@ export async function runBatchVerifyWithTelemetrySubcommand(batchArgs, opts) {
             process.exit(code);
         },
     };
-    try {
-        const { certificate, workflowResult } = await runStandardVerifyWorkflowCliToTerminalResult({
-            shareReportOrigin: parsedBatch.shareReportOrigin,
-            runVerify: () => verifyWorkflow({
-                workflowId: parsedBatch.workflowId,
-                eventsPath: parsedBatch.eventsPath,
-                registryPath: parsedBatch.registryPath,
-                database: parsedBatch.database,
-                verificationPolicy: parsedBatch.verificationPolicy,
-                truthReport: () => { },
-            }),
-            maybeWriteBundle: parsedBatch.writeRunBundleDir === undefined
-                ? undefined
-                : (wfResult) => writeRunBundleCli(parsedBatch.writeRunBundleDir, readFileSync(path.resolve(parsedBatch.eventsPath)), wfResult, parsedBatch.signPrivateKeyPath),
-            io: batchIo,
-        });
-        if (!parsedBatch.noHumanReport && parsedBatch.shareReportOrigin === undefined) {
+    const projectRoot = path.resolve(process.cwd());
+    async function finishCertificateTelemetryAndExit(certificate, workflowResultForStderrHook, humanAndShareMode) {
+        if (humanAndShareMode === "ineligibleCertificateOnly") {
+            const shareOrigin = parsedBatch.shareReportOrigin;
+            if (shareOrigin !== undefined) {
+                const shareRes = await postPublicVerificationReport(shareOrigin, {
+                    schemaVersion: 2,
+                    certificate,
+                });
+                if (!shareRes.ok) {
+                    writeCliError(CLI_OPERATIONAL_CODES.SHARE_REPORT_FAILED, formatOperationalMessage(`share_report_origin=${shareOrigin} http_status=${String(shareRes.status)} detail=${shareRes.bodySnippet}`));
+                    batchIo.exit(3);
+                    throw new Error(CLI_EXITED_AFTER_ERROR);
+                }
+                if (!parsedBatch.noHumanReport) {
+                    batchIo.stderrLine(`${certificate.humanReport}\n${formatDistributionFooter()}`);
+                }
+            }
+            else if (!parsedBatch.noHumanReport) {
+                process.stderr.write(`${certificate.humanReport}\n${formatDistributionFooter()}\n`);
+            }
+        }
+        else if (!parsedBatch.noHumanReport && parsedBatch.shareReportOrigin === undefined) {
             process.stderr.write(`${certificate.humanReport}\n${formatDistributionFooter()}\n`);
         }
         const terminalStatus = terminalStatusFromCertificate(certificate);
@@ -124,17 +147,89 @@ export async function runBatchVerifyWithTelemetrySubcommand(batchArgs, opts) {
                 workload_class: batchWorkloadClass,
                 subcommand: opts.telemetrySubcommand,
                 build_profile: batchBuildProfile,
+                xRequestId: batchHttpCorrelationId,
             });
         }
         await postVerifyOutcomeBeacon({
             runId: batchPreflight.runId,
+            certificate,
             terminal_status: terminalStatus,
             workload_class: batchWorkloadClass,
             subcommand: opts.telemetrySubcommand,
+            xRequestId: batchHttpCorrelationId,
         });
-        opts.stderrAppendBeforeStdout?.(workflowResult);
+        if (workflowResultForStderrHook !== undefined) {
+            opts.stderrAppendBeforeStdout?.(workflowResultForStderrHook);
+        }
         emitOutcomeCertificateCliAndExitByStateRelation(certificate, batchIo);
     }
+    let langGraphEligibleLoad;
+    if (parsedBatch.langgraphCheckpointTrust) {
+        const load = loadEventsForWorkflow(parsedBatch.eventsPath, parsedBatch.workflowId);
+        const eligibility = classifyLangGraphCheckpointTrustEligibility({
+            runLevelReasons: load.runLevelReasons,
+            toolObservedEvents: load.events,
+        });
+        if (!eligibility.eligible) {
+            try {
+                const certificate = validatedLangGraphIneligibleCertificate(parsedBatch.workflowId, eligibility.certificateReasons);
+                await finishCertificateTelemetryAndExit(certificate, undefined, "ineligibleCertificateOnly");
+            }
+            catch (e) {
+                if (e instanceof Error && e.message === CLI_EXITED_AFTER_ERROR)
+                    return;
+                throw e;
+            }
+            return;
+        }
+        langGraphEligibleLoad = load;
+    }
+    try {
+        const { certificate, workflowResult } = await runStandardVerifyWorkflowCliToTerminalResult({
+            shareReportOrigin: parsedBatch.shareReportOrigin,
+            runVerify: parsedBatch.langgraphCheckpointTrust
+                ? undefined
+                : () => verifyWorkflow({
+                    workflowId: parsedBatch.workflowId,
+                    eventsPath: parsedBatch.eventsPath,
+                    registryPath: parsedBatch.registryPath,
+                    database: parsedBatch.database,
+                    verificationPolicy: parsedBatch.verificationPolicy,
+                    truthReport: () => { },
+                }),
+            runVerifyWithCertificate: parsedBatch.langgraphCheckpointTrust
+                ? async () => {
+                    const load = langGraphEligibleLoad;
+                    const workflowResult = await verifyRunStateFromBufferedRunEvents({
+                        workflowId: parsedBatch.workflowId,
+                        registryPath: parsedBatch.registryPath,
+                        database: parsedBatch.database,
+                        projectRoot,
+                        bufferedRunEvents: load.runEvents,
+                        runLevelReasons: load.runLevelReasons,
+                        verificationPolicy: parsedBatch.verificationPolicy,
+                        logStep: () => { },
+                        truthReport: () => { },
+                    });
+                    const validateWf = loadSchemaValidator("workflow-result");
+                    if (!validateWf(workflowResult)) {
+                        throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateWf.errors ?? []));
+                    }
+                    const certificate = buildOutcomeCertificateLangGraphCheckpointTrustFromWorkflowResult(workflowResult);
+                    const validateCert = loadSchemaValidator("outcome-certificate-v1");
+                    if (!validateCert(certificate)) {
+                        throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateCert.errors ?? []));
+                    }
+                    return { workflowResult, certificate };
+                }
+                : undefined,
+            maybeWriteBundle: parsedBatch.writeRunBundleDir === undefined
+                ? undefined
+                : (wfResult) => writeRunBundleCli(parsedBatch.writeRunBundleDir, readFileSync(path.resolve(parsedBatch.eventsPath)), wfResult, parsedBatch.signPrivateKeyPath),
+            io: batchIo,
+        });
+        await finishCertificateTelemetryAndExit(certificate, workflowResult, "afterStandardRunner");
+    }
     catch (e) {
         if (e instanceof Error && e.message === CLI_EXITED_AFTER_ERROR)
             return;

package/dist/verify/batchVerifyTelemetrySubcommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"batchVerifyTelemetrySubcommand.js","sourceRoot":"","sources":["../../src/verify/batchVerifyTelemetrySubcommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAEL,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4CAA4C,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,+CAA+C,EAC/C,4CAA4C,GAC7C,MAAM,iCAAiC,CAAC;AAEzC,SAAS,6BAA6B,CACpC,CAA0D;IAE1D,IAAI,CAAC,CAAC,aAAa,KAAK,sBAAsB;QAAE,OAAO,UAAU,CAAC;IAClE,IAAI,CAAC,CAAC,aAAa,KAAK,gBAAgB;QAAE,OAAO,cAAc,CAAC;IAChE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,SAAmB,EACnB,IAKC;IAED,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QAC5C,UAAU,EAAE,CAAC;IACf,IAAI,cAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAChG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,CAAC,CAAE,YAAsB,CAAC,CAAC,CAAE,KAAe,CAAC;IACjG,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;QACrD,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;KAC/B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,aAAa,IAAI,kBAAkB,KAAK,kBAAkB,EAAE,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4HAA4H;YAC1H,4JAA4J,CAC/J,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC3C,UAAU,EAAE,IAAI,CAAC,mBAAmB;QACpC,aAAa,EAAE,kBAAkB;QACjC,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAC,CAAC;IACH,MAAM,0BAA0B,CAAC;QAC/B,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,oBAAoB;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,YAAY;QAC9B,UAAU,EAAE,IAAI,CAAC,mBAAmB;QACpC,aAAa,EAAE,iBAAiB;KACjC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;YAC3B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE;YACrB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,4CAA4C,CAAC;YACzF,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;YAChD,SAAS,EAAE,GAAG,EAAE,CACd,cAAc,CAAC;gBACb,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;gBAClD,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;aACtB,CAAC;YACJ,gBAAgB,EACd,WAAW,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,QAAwB,EAAE,EAAE,CAC3B,iBAAiB,CACf,WAAW,CAAC,iBAAkB,EAC9B,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,EAClD,QAAQ,EACR,WAAW,CAAC,kBAAkB,CAC/B;YACT,EAAE,EAAE,OAAO;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,WAAW,KAAK,wBAAwB,EAAE,IAAI,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,cAAc,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,0BAA0B,CAAC;YAC/B,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,oBAAoB;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,YAAY;YAC9B,UAAU,EAAE,IAAI,CAAC,mBAAmB;YACpC,aAAa,EAAE,iBAAiB;YAChC,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,kCAAkC,CAAC;gBACvC,MAAM,EAAE,oBAAoB;gBAC5B,eAAe,EAAE,cAAc;gBAC/B,cAAc,EAAE,kBAAkB;gBAClC,UAAU,EAAE,IAAI,CAAC,mBAAmB;gBACpC,aAAa,EAAE,iBAAiB;aACjC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,uBAAuB,CAAC;YAC5B,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,eAAe,EAAE,cAAc;YAC/B,cAAc,EAAE,kBAAkB;YAClC,UAAU,EAAE,IAAI,CAAC,mBAAmB;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,wBAAwB,EAAE,CAAC,cAAc,CAAC,CAAC;QAChD,+CAA+C,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,sBAAsB;YAAE,OAAO;QACvE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}
+{"version":3,"file":"batchVerifyTelemetrySubcommand.js","sourceRoot":"","sources":["../../src/verify/batchVerifyTelemetrySubcommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAA6B,MAAM,eAAe,CAAC;AACnF,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2CAA2C,GAC5C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,4CAA4C,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,kCAAkC,EAAE,MAAM,4CAA4C,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EACL,iEAAiE,GAElE,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EACL,sBAAsB,EACtB,+CAA+C,EAC/C,4CAA4C,GAC7C,MAAM,iCAAiC,CAAC;AAEzC,SAAS,6BAA6B,CACpC,CAA0D;IAE1D,IAAI,CAAC,CAAC,aAAa,KAAK,sBAAsB;QAAE,OAAO,UAAU,CAAC;IAClE,IAAI,CAAC,CAAC,aAAa,KAAK,gBAAgB;QAAE,OAAO,cAAc,CAAC;IAChE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,SAAmB,EACnB,IAKC;IAED,IAAI,WAAiC,CAAC;IACtC,IAAI,CAAC;QACH,WAAW,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,IACE,CAAC,WAAW,CAAC,wBAAwB;QACrC,4CAA4C,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,EAC5F,CAAC;QACD,aAAa,CACX,qBAAqB,CAAC,gDAAgD,EACtE,wBAAwB,CACtB,0LAA0L,CAC3L,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QAC5C,UAAU,EAAE,CAAC;IACf,MAAM,sBAAsB,GAAG,8BAA8B,EAAE,CAAC;IAChE,IAAI,cAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE;YAC3D,KAAK,EAAE,oBAAoB;YAC3B,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,CAAC,CAAE,YAAsB,CAAC,CAAC,CAAE,KAAe,CAAC;IACjG,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;QACrD,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;KAC/B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,aAAa,IAAI,kBAAkB,KAAK,kBAAkB,EAAE,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4HAA4H;YAC1H,4JAA4J,CAC/J,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC3C,UAAU,EAAE,IAAI,CAAC,mBAAmB;QACpC,aAAa,EAAE,kBAAkB;QACjC,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAC,CAAC;IACH,MAAM,0BAA0B,CAAC;QAC/B,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,oBAAoB;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,YAAY;QAC9B,UAAU,EAAE,IAAI,CAAC,mBAAmB;QACpC,aAAa,EAAE,iBAAiB;KACjC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;YAC3B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE;YACrB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEhD,KAAK,UAAU,iCAAiC,CAC9C,WAAiC,EACjC,2BAAuD,EACvD,iBAAsE;QAEtE,IAAI,iBAAiB,KAAK,2BAA2B,EAAE,CAAC;YACtD,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAAC;YAClD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,WAAW,EAAE;oBAC/D,aAAa,EAAE,CAAC;oBAChB,WAAW;iBACZ,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,aAAa,CACX,qBAAqB,CAAC,mBAAmB,EACzC,wBAAwB,CACtB,uBAAuB,WAAW,gBAAgB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,QAAQ,CAAC,WAAW,EAAE,CAC3G,CACF,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;oBAC/B,OAAO,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC,WAAW,KAAK,wBAAwB,EAAE,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;gBACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,WAAW,KAAK,wBAAwB,EAAE,IAAI,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,WAAW,KAAK,wBAAwB,EAAE,IAAI,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,cAAc,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,0BAA0B,CAAC;YAC/B,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,oBAAoB;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,YAAY;YAC9B,UAAU,EAAE,IAAI,CAAC,mBAAmB;YACpC,aAAa,EAAE,iBAAiB;YAChC,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,kCAAkC,CAAC;gBACvC,MAAM,EAAE,oBAAoB;gBAC5B,eAAe,EAAE,cAAc;gBAC/B,cAAc,EAAE,kBAAkB;gBAClC,UAAU,EAAE,IAAI,CAAC,mBAAmB;gBACpC,aAAa,EAAE,iBAAiB;gBAChC,UAAU,EAAE,sBAAsB;aACnC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,uBAAuB,CAAC;YAC5B,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,WAAW;YACX,eAAe,EAAE,cAAc;YAC/B,cAAc,EAAE,kBAAkB;YAClC,UAAU,EAAE,IAAI,CAAC,mBAAmB;YACpC,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;QACH,IAAI,2BAA2B,KAAK,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,wBAAwB,EAAE,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;QACD,+CAA+C,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,qBAAmD,CAAC;IACxD,IAAI,WAAW,CAAC,wBAAwB,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,qBAAqB,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;QACnF,MAAM,WAAW,GAAG,2CAA2C,CAAC;YAC9D,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB,EAAE,IAAI,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,uCAAuC,CACzD,WAAW,CAAC,UAAU,EACtB,WAAW,CAAC,kBAAkB,CAC/B,CAAC;gBACF,MAAM,iCAAiC,CAAC,WAAW,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;YAC/F,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,sBAAsB;oBAAE,OAAO;gBACvE,MAAM,CAAC,CAAC;YACV,CAAC;YACD,OAAO;QACT,CAAC;QACD,qBAAqB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,4CAA4C,CAAC;YACzF,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;YAChD,SAAS,EAAE,WAAW,CAAC,wBAAwB;gBAC7C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,GAAG,EAAE,CACH,cAAc,CAAC;oBACb,UAAU,EAAE,WAAW,CAAC,UAAU;oBAClC,UAAU,EAAE,WAAW,CAAC,UAAU;oBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;oBACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;oBAC9B,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;oBAClD,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;iBACtB,CAAC;YACR,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;gBAC5D,CAAC,CAAC,KAAK,IAAI,EAAE;oBACT,MAAM,IAAI,GAAG,qBAAsB,CAAC;oBACpC,MAAM,cAAc,GAAG,MAAM,mCAAmC,CAAC;wBAC/D,UAAU,EAAE,WAAW,CAAC,UAAU;wBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;wBACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;wBAC9B,WAAW;wBACX,iBAAiB,EAAE,IAAI,CAAC,SAAS;wBACjC,eAAe,EAAE,IAAI,CAAC,eAAe;wBACrC,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;wBAClD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;wBACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;qBACtB,CAAC,CAAC;oBACH,MAAM,UAAU,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;oBAC1D,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;wBAChC,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,8BAA8B,EACpD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CACxC,CAAC;oBACJ,CAAC;oBACD,MAAM,WAAW,GAAG,iEAAiE,CAAC,cAAc,CAAC,CAAC;oBACtG,MAAM,YAAY,GAAG,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;oBACnE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC/B,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,8BAA8B,EACpD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC,CAC1C,CAAC;oBACJ,CAAC;oBACD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;gBACzC,CAAC;gBACH,CAAC,CAAC,SAAS;YACb,gBAAgB,EACd,WAAW,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,QAAwB,EAAE,EAAE,CAC3B,iBAAiB,CACf,WAAW,CAAC,iBAAkB,EAC9B,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,EAClD,QAAQ,EACR,WAAW,CAAC,kBAAkB,CAC/B;YACT,EAAE,EAAE,OAAO;SACZ,CAAC,CAAC;QACH,MAAM,iCAAiC,CAAC,WAAW,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,sBAAsB;YAAE,OAAO;QACvE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/verifyAgentskeptic.d.ts

@@ -1,8 +1,7 @@
-import { type OutcomeCertificateV1 } from "./outcomeCertificate.js";
+import type { OutcomeCertificateV1 } from "./outcomeCertificate.js";
 /**
- * Default adoption path: reads `agentskeptic/events.ndjson` and `agentskeptic/tools.json`
- * under `projectRoot`, verifies `workflowId` against `databaseUrl` (SQLite path or postgres URL).
- * Returns the public Outcome Certificate v1 (contract_sql). For arbitrary paths use `verifyWorkflow`.
+ * Thin file-replay alias: reads `agentskeptic/events.ndjson` into a DecisionGate buffer and returns the same Outcome Certificate as batch verify.
+ * Prefer `createDecisionGate` for runtime integration.
  */
 export declare function verifyAgentskeptic(options: {
     workflowId: string;

package/dist/verifyAgentskeptic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verifyAgentskeptic.d.ts","sourceRoot":"","sources":["../src/verifyAgentskeptic.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6C,KAAK,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAiB/G;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiChC"}
+{"version":3,"file":"verifyAgentskeptic.d.ts","sourceRoot":"","sources":["../src/verifyAgentskeptic.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAIpE;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA2BhC"}

package/dist/verifyAgentskeptic.js

@@ -1,46 +1,34 @@
 import { existsSync } from "node:fs";
 import path from "node:path";
-import { CLI_OPERATIONAL_CODES } from "./failureCatalog.js";
-import { buildOutcomeCertificateFromWorkflowResult } from "./outcomeCertificate.js";
-import { verifyWorkflow } from "./pipeline.js";
-import { loadSchemaValidator } from "./schemaLoad.js";
+import { createDecisionGate } from "./decisionGate.js";
+import { loadEventsForWorkflow } from "./loadEvents.js";
 import { TruthLayerError } from "./truthLayerError.js";
-const POSTGRES_URL_RE = /^postgres(ql)?:\/\//i;
 const PROJECT_LAYOUT_MISSING = "PROJECT_VERIFICATION_LAYOUT_MISSING";
-function verificationDatabaseFromUrl(databaseUrl, projectRoot) {
-    if (POSTGRES_URL_RE.test(databaseUrl)) {
-        return { kind: "postgres", connectionString: databaseUrl };
-    }
-    return { kind: "sqlite", path: path.resolve(projectRoot, databaseUrl) };
-}
 /**
- * Default adoption path: reads `agentskeptic/events.ndjson` and `agentskeptic/tools.json`
- * under `projectRoot`, verifies `workflowId` against `databaseUrl` (SQLite path or postgres URL).
- * Returns the public Outcome Certificate v1 (contract_sql). For arbitrary paths use `verifyWorkflow`.
+ * Thin file-replay alias: reads `agentskeptic/events.ndjson` into a DecisionGate buffer and returns the same Outcome Certificate as batch verify.
+ * Prefer `createDecisionGate` for runtime integration.
  */
 export async function verifyAgentskeptic(options) {
     const projectRoot = options.projectRoot ?? process.cwd();
     const resolvedRoot = path.resolve(projectRoot);
     const agentskepticDir = path.join(resolvedRoot, "agentskeptic");
     const eventsPath = path.join(agentskepticDir, "events.ndjson");
-    const registryPath = path.join(agentskepticDir, "tools.json");
-    if (!existsSync(eventsPath) || !existsSync(registryPath)) {
-        throw new TruthLayerError(PROJECT_LAYOUT_MISSING, `${eventsPath}, ${registryPath}`);
+    const registryPathRel = path.join("agentskeptic", "tools.json");
+    if (!existsSync(eventsPath) || !existsSync(path.join(resolvedRoot, registryPathRel))) {
+        throw new TruthLayerError(PROJECT_LAYOUT_MISSING, `${eventsPath}, ${path.join(resolvedRoot, registryPathRel)}`);
     }
-    const database = verificationDatabaseFromUrl(options.databaseUrl, resolvedRoot);
-    const result = await verifyWorkflow({
+    const load = loadEventsForWorkflow(eventsPath, options.workflowId);
+    const gate = createDecisionGate({
         workflowId: options.workflowId,
-        eventsPath,
-        registryPath,
-        database,
+        registryPath: registryPathRel,
+        databaseUrl: options.databaseUrl,
+        projectRoot: resolvedRoot,
         logStep: () => { },
         truthReport: () => { },
     });
-    const certificate = buildOutcomeCertificateFromWorkflowResult(result, "contract_sql");
-    const validate = loadSchemaValidator("outcome-certificate-v1");
-    if (!validate(certificate)) {
-        throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validate.errors ?? []));
+    for (const ev of load.runEvents) {
+        gate.appendRunEvent(ev);
     }
-    return certificate;
+    return gate.evaluateCertificate();
 }
 //# sourceMappingURL=verifyAgentskeptic.js.map

package/dist/verifyAgentskeptic.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyAgentskeptic.js","sourceRoot":"","sources":["../src/verifyAgentskeptic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,yCAAyC,EAA6B,MAAM,yBAAyB,CAAC;AAC/G,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C,MAAM,sBAAsB,GAAG,qCAA8C,CAAC;AAE9E,SAAS,2BAA2B,CAAC,WAAmB,EAAE,WAAmB;IAC3E,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAIxC;IACC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAE9D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,GAAG,UAAU,KAAK,YAAY,EAAE,CACjC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU;QACV,YAAY;QACZ,QAAQ;QACR,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;QACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;KACtB,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,yCAAyC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,8BAA8B,EACpD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}
+{"version":3,"file":"verifyAgentskeptic.js","sourceRoot":"","sources":["../src/verifyAgentskeptic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,MAAM,sBAAsB,GAAG,qCAA8C,CAAC;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAIxC;IACC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC/D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAEhE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,GAAG,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,eAAe;QAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;QACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;KACtB,CAAC,CAAC;IACH,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC;AACpC,CAAC"}

package/dist/verifyRunStateFromBufferedRunEvents.d.ts

@@ -0,0 +1,18 @@
+import type { Reason, RunEvent, VerificationDatabase, VerificationPolicy, WorkflowResult } from "./types.js";
+export type VerifyRunStateFromBufferedRunEventsInput = {
+    workflowId: string;
+    registryPath: string;
+    database: VerificationDatabase;
+    projectRoot: string;
+    bufferedRunEvents: RunEvent[];
+    runLevelReasons: Reason[];
+    verificationPolicy: VerificationPolicy;
+    logStep?: (line: object) => void;
+    truthReport?: (report: string) => void;
+};
+/**
+ * Single shared path: buffered run events + registry + DB → `WorkflowResult`.
+ * Used by `createDecisionGate` and `createLangGraphCheckpointTrustGate.runCheckpointTrust` (eligible path only).
+ */
+export declare function verifyRunStateFromBufferedRunEvents(input: VerifyRunStateFromBufferedRunEventsInput): Promise<WorkflowResult>;
+//# sourceMappingURL=verifyRunStateFromBufferedRunEvents.d.ts.map

package/dist/verifyRunStateFromBufferedRunEvents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyRunStateFromBufferedRunEvents.d.ts","sourceRoot":"","sources":["../src/verifyRunStateFromBufferedRunEvents.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,MAAM,EACN,QAAQ,EAER,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,wCAAwC,GAAG;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,QAAQ,EAAE,CAAC;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,mCAAmC,CACvD,KAAK,EAAE,wCAAwC,GAC9C,OAAO,CAAC,cAAc,CAAC,CA0DzB"}

package/dist/verifyRunStateFromBufferedRunEvents.js

@@ -0,0 +1,65 @@
+import path from "node:path";
+import { isToolObservedRunEvent } from "./executionTrace.js";
+import { loadToolsRegistry, verifyRunStateFromEvents } from "./pipeline.js";
+import { prepareWorkflowEvents } from "./prepareWorkflowEvents.js";
+/**
+ * Single shared path: buffered run events + registry + DB → `WorkflowResult`.
+ * Used by `createDecisionGate` and `createLangGraphCheckpointTrustGate.runCheckpointTrust` (eligible path only).
+ */
+export async function verifyRunStateFromBufferedRunEvents(input) {
+    const projectRoot = path.resolve(input.projectRoot);
+    const registryPath = path.resolve(projectRoot, input.registryPath);
+    const logStep = input.logStep ?? (() => { });
+    const truthReport = input.truthReport ?? (() => { });
+    if (!input.bufferedRunEvents.length && !input.runLevelReasons.length) {
+        throw new Error("verifyRunStateFromBufferedRunEvents: empty buffer and no run-level reasons");
+    }
+    if (!input.bufferedRunEvents.length) {
+        const registry = loadToolsRegistry(registryPath);
+        return verifyRunStateFromEvents({
+            workflowId: input.workflowId,
+            events: [],
+            runEvents: [],
+            runLevelReasons: [...input.runLevelReasons],
+            eventSequenceIntegrity: { kind: "normal" },
+            eventFileAggregateCounts: {
+                eventFileNonEmptyLines: 0,
+                schemaValidEvents: 0,
+                toolObservedForRequestedWorkflowId: 0,
+                toolObservedForOtherWorkflowIds: 0,
+            },
+            registry,
+            database: input.database,
+            verificationPolicy: input.verificationPolicy,
+            logStep,
+            truthReport,
+        });
+    }
+    const toolCandidates = [];
+    for (const ev of input.bufferedRunEvents) {
+        if (isToolObservedRunEvent(ev)) {
+            toolCandidates.push(ev);
+        }
+    }
+    const { eventsSorted, eventSequenceIntegrity } = prepareWorkflowEvents(toolCandidates);
+    const registry = loadToolsRegistry(registryPath);
+    return verifyRunStateFromEvents({
+        workflowId: input.workflowId,
+        events: eventsSorted,
+        runEvents: input.bufferedRunEvents,
+        runLevelReasons: [...input.runLevelReasons],
+        eventSequenceIntegrity,
+        eventFileAggregateCounts: {
+            eventFileNonEmptyLines: 0,
+            schemaValidEvents: 0,
+            toolObservedForRequestedWorkflowId: toolCandidates.length,
+            toolObservedForOtherWorkflowIds: 0,
+        },
+        registry,
+        database: input.database,
+        verificationPolicy: input.verificationPolicy,
+        logStep,
+        truthReport,
+    });
+}
+//# sourceMappingURL=verifyRunStateFromBufferedRunEvents.js.map

package/dist/verifyRunStateFromBufferedRunEvents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyRunStateFromBufferedRunEvents.js","sourceRoot":"","sources":["../src/verifyRunStateFromBufferedRunEvents.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAsBnE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAA+C;IAE/C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAEpD,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACjD,OAAO,wBAAwB,CAAC;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,EAAE;YACb,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC;YAC3C,sBAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1C,wBAAwB,EAAE;gBACxB,sBAAsB,EAAE,CAAC;gBACzB,iBAAiB,EAAE,CAAC;gBACpB,kCAAkC,EAAE,CAAC;gBACrC,+BAA+B,EAAE,CAAC;aACnC;YACD,QAAQ;YACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,OAAO;YACP,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAwB,EAAE,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACzC,IAAI,sBAAsB,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,sBAAsB,EAAE,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACjD,OAAO,wBAAwB,CAAC;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,KAAK,CAAC,iBAAiB;QAClC,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC;QAC3C,sBAAsB;QACtB,wBAAwB,EAAE;YACxB,sBAAsB,EAAE,CAAC;YACzB,iBAAiB,EAAE,CAAC;YACpB,kCAAkC,EAAE,cAAc,CAAC,MAAM;YACzD,+BAA+B,EAAE,CAAC;SACnC;QACD,QAAQ;QACR,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,OAAO;QACP,WAAW;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/vitestMonorepoRoot.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Resolves the agentskeptic monorepo root in Vitest.
+ *
+ * `process.cwd()` alone can be wrong (e.g. `website/` with a `package.json`). A strict `..` from
+ * `import.meta.url` is wrong when the test URL is a transformed path. We walk from the test
+ * file upward (and also try `process.cwd()`) for a `package.json#name === "agentskeptic"` root
+ * that still contains the full `examples/debug-corpus` library.
+ */
+export declare function monorepoRootForVitest(importMetaUrl: string): string;
+//# sourceMappingURL=vitestMonorepoRoot.d.ts.map

package/dist/vitestMonorepoRoot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitestMonorepoRoot.d.ts","sourceRoot":"","sources":["../src/vitestMonorepoRoot.ts"],"names":[],"mappings":"AAkDA;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAyCnE"}

package/dist/vitestMonorepoRoot.js

@@ -0,0 +1,97 @@
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+/** Sealed runs in examples/debug-corpus/ (see docs/agentskeptic.md). */
+const REQUIRED_DEBUG_CORPUS_RUN_IDS = [
+    "run_ok",
+    "run_value_mismatch",
+    "run_row_absent",
+    "run_path_nonempty",
+    "run_complete_b",
+];
+function hasFullDebugCorpus(repoRoot) {
+    const base = join(repoRoot, "examples", "debug-corpus");
+    if (!existsSync(base))
+        return false;
+    for (const id of REQUIRED_DEBUG_CORPUS_RUN_IDS) {
+        if (!existsSync(join(base, id, "agent-run.json"))) {
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * True for the top-level `agentskeptic` workspace (not `website/`, not the npm-packed stub under `node_modules` without `src/`).
+ */
+function isPrimaryAgentskepticWorkspaceDir(dir) {
+    const pkg = join(dir, "package.json");
+    if (!existsSync(pkg))
+        return false;
+    let name;
+    try {
+        name = JSON.parse(readFileSync(pkg, "utf8")).name;
+    }
+    catch {
+        return false;
+    }
+    if (name !== "agentskeptic")
+        return false;
+    return existsSync(join(dir, "src", "debugCorpus.ts")) || existsSync(join(dir, "src", "cli.ts"));
+}
+function firstRepoRootWithFullCorpus(candidates) {
+    for (const dir of candidates) {
+        if (!dir)
+            continue;
+        if (isPrimaryAgentskepticWorkspaceDir(dir) && hasFullDebugCorpus(dir)) {
+            return dir;
+        }
+    }
+    return null;
+}
+/**
+ * Resolves the agentskeptic monorepo root in Vitest.
+ *
+ * `process.cwd()` alone can be wrong (e.g. `website/` with a `package.json`). A strict `..` from
+ * `import.meta.url` is wrong when the test URL is a transformed path. We walk from the test
+ * file upward (and also try `process.cwd()`) for a `package.json#name === "agentskeptic"` root
+ * that still contains the full `examples/debug-corpus` library.
+ */
+export function monorepoRootForVitest(importMetaUrl) {
+    const fromFile = dirname(fileURLToPath(importMetaUrl));
+    const walk = [];
+    {
+        let dir = fromFile;
+        for (let i = 0; i < 24; i++) {
+            walk.push(dir);
+            const parent = dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+        }
+    }
+    const fromWalk = firstRepoRootWithFullCorpus(walk);
+    if (fromWalk) {
+        return fromWalk;
+    }
+    const cwd = process.cwd();
+    const fromCwd = firstRepoRootWithFullCorpus([cwd, dirname(cwd), join(cwd, "..")]);
+    if (fromCwd) {
+        return fromCwd;
+    }
+    let listed = "(could not list)";
+    try {
+        const b = join(cwd, "examples", "debug-corpus");
+        if (existsSync(b)) {
+            listed = readdirSync(b, { withFileTypes: true })
+                .filter((d) => d.isDirectory())
+                .map((d) => d.name)
+                .sort()
+                .join(", ");
+        }
+    }
+    catch {
+        /* */
+    }
+    throw new Error(`monorepoRootForVitest: no agentskeptic root with all ${REQUIRED_DEBUG_CORPUS_RUN_IDS.length} demo runs. cwd=${cwd} fromFile=${fromFile} subdirs: [${listed}]`);
+}
+//# sourceMappingURL=vitestMonorepoRoot.js.map

package/dist/vitestMonorepoRoot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitestMonorepoRoot.js","sourceRoot":"","sources":["../src/vitestMonorepoRoot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,wEAAwE;AACxE,MAAM,6BAA6B,GAAsB;IACvD,QAAQ;IACR,oBAAoB;IACpB,gBAAgB;IAChB,mBAAmB;IACnB,gBAAgB;CACR,CAAC;AAEX,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,6BAA6B,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,iCAAiC,CAAC,GAAW;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAuB,CAAC,IAAI,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAoB;IACvD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,iCAAiC,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YACtE,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,aAAqB;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,CAAC;QACC,IAAI,GAAG,GAAW,QAAQ,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM;YAC1B,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,2BAA2B,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,GAAG,kBAAkB,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,EAAE;iBACN,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;IAED,MAAM,IAAI,KAAK,CACb,wDAAwD,6BAA6B,CAAC,MAAM,mBAAmB,GAAG,aAAa,QAAQ,cAAc,MAAM,GAAG,CAC/J,CAAC;AACJ,CAAC"}

package/dist/wireReasonCodes.d.ts

@@ -24,6 +24,7 @@ export declare const REGISTRY_RESOLVER_CODE: {
     readonly RELATIONAL_SUM_COLUMN_REQUIRED: "RELATIONAL_SUM_COLUMN_REQUIRED";
     readonly EQUALITY_DUPLICATE_COLUMN: "EQUALITY_DUPLICATE_COLUMN";
     readonly FILTER_EQ_OVERLAPS_IDENTITY: "FILTER_EQ_OVERLAPS_IDENTITY";
+    readonly RELATIONAL_UNSUPPORTED_DIALECT: "RELATIONAL_UNSUPPORTED_DIALECT";
 };
 /** SQL reconciliation / policy / pipeline step `reasons[].code` values (post-resolution verification axis). */
 export declare const SQL_VERIFICATION_OUTCOME_CODE: {
@@ -46,6 +47,26 @@ export declare const SQL_VERIFICATION_OUTCOME_CODE: {
     readonly ROW_PRESENT_WHEN_FORBIDDEN: "ROW_PRESENT_WHEN_FORBIDDEN";
     readonly ORPHAN_ROW_DETECTED: "ORPHAN_ROW_DETECTED";
     readonly FORBIDDEN_ROWS_STILL_PRESENT_WITHIN_WINDOW: "FORBIDDEN_ROWS_STILL_PRESENT_WITHIN_WINDOW";
+    readonly STATE_WITNESS_UNAVAILABLE_IN_SQLITE_FILE_MODE: "STATE_WITNESS_UNAVAILABLE_IN_SQLITE_FILE_MODE";
+    readonly STATE_WITNESS_SETUP_ERROR: "STATE_WITNESS_SETUP_ERROR";
+    readonly VECTOR_NOT_FOUND: "VECTOR_NOT_FOUND";
+    readonly VECTOR_METADATA_MISMATCH: "VECTOR_METADATA_MISMATCH";
+    readonly VECTOR_PAYLOAD_MISMATCH: "VECTOR_PAYLOAD_MISMATCH";
+    readonly VECTOR_PROVIDER_ERROR: "VECTOR_PROVIDER_ERROR";
+    readonly OBJECT_MISSING: "OBJECT_MISSING";
+    readonly OBJECT_DIGEST_MISMATCH: "OBJECT_DIGEST_MISMATCH";
+    readonly OBJECT_SIZE_MISMATCH: "OBJECT_SIZE_MISMATCH";
+    readonly OBJECT_METADATA_MISMATCH: "OBJECT_METADATA_MISMATCH";
+    readonly OBJECT_TOO_LARGE_FOR_HASH: "OBJECT_TOO_LARGE_FOR_HASH";
+    readonly HTTP_WITNESS_STATUS_MISMATCH: "HTTP_WITNESS_STATUS_MISMATCH";
+    readonly HTTP_WITNESS_ASSERTION_MISMATCH: "HTTP_WITNESS_ASSERTION_MISMATCH";
+    readonly HTTP_WITNESS_NETWORK_ERROR: "HTTP_WITNESS_NETWORK_ERROR";
+    readonly MONGO_DOCUMENT_MISSING: "MONGO_DOCUMENT_MISSING";
+    readonly MONGO_VALUE_MISMATCH: "MONGO_VALUE_MISMATCH";
+    readonly RELATIONAL_UNSUPPORTED_DIALECT: "RELATIONAL_UNSUPPORTED_DIALECT";
+    readonly BOUNDED_WINDOW_EXPIRED_WITHOUT_OBSERVATION: "BOUNDED_WINDOW_EXPIRED_WITHOUT_OBSERVATION";
+    readonly BOUNDED_MODE_UNSUPPORTED_FOR_CONNECTOR: "BOUNDED_MODE_UNSUPPORTED_FOR_CONNECTOR";
+    readonly CONNECTOR_UNSUPPORTED_IN_SCOPE: "CONNECTOR_UNSUPPORTED_IN_SCOPE";
 };
 export declare const UNKNOWN_TOOL: "UNKNOWN_TOOL";
 /** Fixed `code` strings on registry validation resolutionIssues / resolutionSkipped. */

package/dist/wireReasonCodes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wireReasonCodes.d.ts","sourceRoot":"","sources":["../src/wireReasonCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2GAA2G;AAC3G,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;CAqBzB,CAAC;AAEX,+GAA+G;AAC/G,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;CAoBhC,CAAC;AAEX,eAAO,MAAM,YAAY,gBAA6C,CAAC;AAEvE,wFAAwF;AACxF,eAAO,MAAM,wBAAwB;;;;CAI3B,CAAC"}
+{"version":3,"file":"wireReasonCodes.d.ts","sourceRoot":"","sources":["../src/wireReasonCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2GAA2G;AAC3G,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;CAsBzB,CAAC;AAEX,+GAA+G;AAC/G,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwChC,CAAC;AAEX,eAAO,MAAM,YAAY,gBAA6C,CAAC;AAEvE,wFAAwF;AACxF,eAAO,MAAM,wBAAwB;;;;CAI3B,CAAC"}

package/dist/wireReasonCodes.js

@@ -24,6 +24,7 @@ export const REGISTRY_RESOLVER_CODE = {
     RELATIONAL_SUM_COLUMN_REQUIRED: "RELATIONAL_SUM_COLUMN_REQUIRED",
     EQUALITY_DUPLICATE_COLUMN: "EQUALITY_DUPLICATE_COLUMN",
     FILTER_EQ_OVERLAPS_IDENTITY: "FILTER_EQ_OVERLAPS_IDENTITY",
+    RELATIONAL_UNSUPPORTED_DIALECT: "RELATIONAL_UNSUPPORTED_DIALECT",
 };
 /** SQL reconciliation / policy / pipeline step `reasons[].code` values (post-resolution verification axis). */
 export const SQL_VERIFICATION_OUTCOME_CODE = {
@@ -46,6 +47,26 @@ export const SQL_VERIFICATION_OUTCOME_CODE = {
     ROW_PRESENT_WHEN_FORBIDDEN: "ROW_PRESENT_WHEN_FORBIDDEN",
     ORPHAN_ROW_DETECTED: "ORPHAN_ROW_DETECTED",
     FORBIDDEN_ROWS_STILL_PRESENT_WITHIN_WINDOW: "FORBIDDEN_ROWS_STILL_PRESENT_WITHIN_WINDOW",
+    STATE_WITNESS_UNAVAILABLE_IN_SQLITE_FILE_MODE: "STATE_WITNESS_UNAVAILABLE_IN_SQLITE_FILE_MODE",
+    STATE_WITNESS_SETUP_ERROR: "STATE_WITNESS_SETUP_ERROR",
+    VECTOR_NOT_FOUND: "VECTOR_NOT_FOUND",
+    VECTOR_METADATA_MISMATCH: "VECTOR_METADATA_MISMATCH",
+    VECTOR_PAYLOAD_MISMATCH: "VECTOR_PAYLOAD_MISMATCH",
+    VECTOR_PROVIDER_ERROR: "VECTOR_PROVIDER_ERROR",
+    OBJECT_MISSING: "OBJECT_MISSING",
+    OBJECT_DIGEST_MISMATCH: "OBJECT_DIGEST_MISMATCH",
+    OBJECT_SIZE_MISMATCH: "OBJECT_SIZE_MISMATCH",
+    OBJECT_METADATA_MISMATCH: "OBJECT_METADATA_MISMATCH",
+    OBJECT_TOO_LARGE_FOR_HASH: "OBJECT_TOO_LARGE_FOR_HASH",
+    HTTP_WITNESS_STATUS_MISMATCH: "HTTP_WITNESS_STATUS_MISMATCH",
+    HTTP_WITNESS_ASSERTION_MISMATCH: "HTTP_WITNESS_ASSERTION_MISMATCH",
+    HTTP_WITNESS_NETWORK_ERROR: "HTTP_WITNESS_NETWORK_ERROR",
+    MONGO_DOCUMENT_MISSING: "MONGO_DOCUMENT_MISSING",
+    MONGO_VALUE_MISMATCH: "MONGO_VALUE_MISMATCH",
+    RELATIONAL_UNSUPPORTED_DIALECT: "RELATIONAL_UNSUPPORTED_DIALECT",
+    BOUNDED_WINDOW_EXPIRED_WITHOUT_OBSERVATION: "BOUNDED_WINDOW_EXPIRED_WITHOUT_OBSERVATION",
+    BOUNDED_MODE_UNSUPPORTED_FOR_CONNECTOR: "BOUNDED_MODE_UNSUPPORTED_FOR_CONNECTOR",
+    CONNECTOR_UNSUPPORTED_IN_SCOPE: "CONNECTOR_UNSUPPORTED_IN_SCOPE",
 };
 export const UNKNOWN_TOOL = SQL_VERIFICATION_OUTCOME_CODE.UNKNOWN_TOOL;
 /** Fixed `code` strings on registry validation resolutionIssues / resolutionSkipped. */

package/dist/wireReasonCodes.js.map

@@ -1 +1 @@
-{"version":3,"file":"wireReasonCodes.js","sourceRoot":"","sources":["../src/wireReasonCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2GAA2G;AAC3G,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,kBAAkB,EAAE,oBAAoB;IACxC,2BAA2B,EAAE,6BAA6B;IAC1D,gBAAgB,EAAE,kBAAkB;IACpC,iBAAiB,EAAE,mBAAmB;IACtC,yBAAyB,EAAE,2BAA2B;IACtD,oBAAoB,EAAE,sBAAsB;IAC5C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,oBAAoB;IACxC,kBAAkB,EAAE,oBAAoB;IACxC,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,+BAA+B,EAAE,iCAAiC;IAClE,gCAAgC,EAAE,kCAAkC;IACpE,6BAA6B,EAAE,+BAA+B;IAC9D,mBAAmB,EAAE,qBAAqB;IAC1C,+BAA+B,EAAE,iCAAiC;IAClE,8BAA8B,EAAE,gCAAgC;IAChE,yBAAyB,EAAE,2BAA2B;IACtD,2BAA2B,EAAE,6BAA6B;CAClD,CAAC;AAEX,+GAA+G;AAC/G,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,kBAAkB,EAAE,oBAAoB;IACxC,gBAAgB,EAAE,kBAAkB;IACpC,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,uBAAuB,EAAE,yBAAyB;IAClD,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,sBAAsB;IAC5C,8BAA8B,EAAE,gCAAgC;IAChE,oCAAoC,EAAE,sCAAsC;IAC5E,YAAY,EAAE,cAAc;IAC5B,0BAA0B,EAAE,4BAA4B;IACxD,mBAAmB,EAAE,qBAAqB;IAC1C,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,0BAA0B,EAAE,4BAA4B;IACxD,mBAAmB,EAAE,qBAAqB;IAC1C,0CAA0C,EAAE,4CAA4C;CAChF,CAAC;AAEX,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAC,YAAY,CAAC;AAEvE,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,qBAAqB,EAAE,uBAAuB;IAC9C,0BAA0B,EAAE,4BAA4B;IACxD,YAAY,EAAE,cAAc;CACpB,CAAC"}
+{"version":3,"file":"wireReasonCodes.js","sourceRoot":"","sources":["../src/wireReasonCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2GAA2G;AAC3G,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,kBAAkB,EAAE,oBAAoB;IACxC,2BAA2B,EAAE,6BAA6B;IAC1D,gBAAgB,EAAE,kBAAkB;IACpC,iBAAiB,EAAE,mBAAmB;IACtC,yBAAyB,EAAE,2BAA2B;IACtD,oBAAoB,EAAE,sBAAsB;IAC5C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,oBAAoB;IACxC,kBAAkB,EAAE,oBAAoB;IACxC,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,+BAA+B,EAAE,iCAAiC;IAClE,gCAAgC,EAAE,kCAAkC;IACpE,6BAA6B,EAAE,+BAA+B;IAC9D,mBAAmB,EAAE,qBAAqB;IAC1C,+BAA+B,EAAE,iCAAiC;IAClE,8BAA8B,EAAE,gCAAgC;IAChE,yBAAyB,EAAE,2BAA2B;IACtD,2BAA2B,EAAE,6BAA6B;IAC1D,8BAA8B,EAAE,gCAAgC;CACxD,CAAC;AAEX,+GAA+G;AAC/G,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,kBAAkB,EAAE,oBAAoB;IACxC,gBAAgB,EAAE,kBAAkB;IACpC,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,uBAAuB,EAAE,yBAAyB;IAClD,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,sBAAsB;IAC5C,8BAA8B,EAAE,gCAAgC;IAChE,oCAAoC,EAAE,sCAAsC;IAC5E,YAAY,EAAE,cAAc;IAC5B,0BAA0B,EAAE,4BAA4B;IACxD,mBAAmB,EAAE,qBAAqB;IAC1C,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,0BAA0B,EAAE,4BAA4B;IACxD,mBAAmB,EAAE,qBAAqB;IAC1C,0CAA0C,EAAE,4CAA4C;IACxF,6CAA6C,EAAE,+CAA+C;IAC9F,yBAAyB,EAAE,2BAA2B;IACtD,gBAAgB,EAAE,kBAAkB;IACpC,wBAAwB,EAAE,0BAA0B;IACpD,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,uBAAuB;IAC9C,cAAc,EAAE,gBAAgB;IAChC,sBAAsB,EAAE,wBAAwB;IAChD,oBAAoB,EAAE,sBAAsB;IAC5C,wBAAwB,EAAE,0BAA0B;IACpD,yBAAyB,EAAE,2BAA2B;IACtD,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,sBAAsB,EAAE,wBAAwB;IAChD,oBAAoB,EAAE,sBAAsB;IAC5C,8BAA8B,EAAE,gCAAgC;IAChE,0CAA0C,EAAE,4CAA4C;IACxF,sCAAsC,EAAE,wCAAwC;IAChF,8BAA8B,EAAE,gCAAgC;CACxD,CAAC;AAEX,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAC,YAAY,CAAC;AAEvE,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,qBAAqB,EAAE,uBAAuB;IAC9C,0BAA0B,EAAE,4BAA4B;IACxD,YAAY,EAAE,cAAc;CACpB,CAAC"}