agentskeptic 3.4.0 → 3.6.0

package/dist/cliOperationalCodes.js

@@ -82,5 +82,9 @@ export const CLI_OPERATIONAL_CODES = {
     EMIT_LANGGRAPH_CHECKPOINT_INVALID: "EMIT_LANGGRAPH_CHECKPOINT_INVALID",
     EMIT_LINT_USAGE: "EMIT_LINT_USAGE",
     EMIT_LINT_FAILED: "EMIT_LINT_FAILED",
+    RECEIPT_SCHEMA_INVALID: "RECEIPT_SCHEMA_INVALID",
+    RECEIPT_PERSIST_FAILED: "RECEIPT_PERSIST_FAILED",
+    EXECUTION_IDENTITY_MISMATCH: "EXECUTION_IDENTITY_MISMATCH",
+    EXECUTION_IDENTITY_USAGE: "EXECUTION_IDENTITY_USAGE",
 };
 //# sourceMappingURL=cliOperationalCodes.js.map

package/dist/cliOperationalCodes.js.map

@@ -1 +1 @@
-{"version":3,"file":"cliOperationalCodes.js","sourceRoot":"","sources":["../src/cliOperationalCodes.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS,EAAE,WAAW;IACtB,oBAAoB,EAAE,sBAAsB;IAC5C,oBAAoB,EAAE,sBAAsB;IAC5C,uBAAuB,EAAE,yBAAyB;IAClD,0BAA0B,EAAE,4BAA4B;IACxD,kBAAkB,EAAE,oBAAoB;IACxC,2BAA2B,EAAE,6BAA6B;IAC1D,4BAA4B,EAAE,8BAA8B;IAC5D,8BAA8B,EAAE,gCAAgC;IAChE,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAE,eAAe;IAC9B,yBAAyB,EAAE,2BAA2B;IACtD,4BAA4B,EAAE,8BAA8B;IAC5D,yBAAyB,EAAE,2BAA2B;IACtD,yBAAyB,EAAE,2BAA2B;IACtD,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,iCAAiC;IAClE,qCAAqC,EAAE,uCAAuC;IAC9E,2BAA2B,EAAE,6BAA6B;IAC1D,2CAA2C,EAAE,6CAA6C;IAC1F,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,uBAAuB;IAC9C,4BAA4B,EAAE,8BAA8B;IAC5D,iCAAiC,EAAE,mCAAmC;IACtE,8BAA8B,EAAE,gCAAgC;IAChE,oCAAoC,EAAE,sCAAsC;IAC5E,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,iCAAiC;IAClE,2BAA2B,EAAE,6BAA6B;IAC1D,0BAA0B,EAAE,4BAA4B;IACxD,mCAAmC,EAAE,qCAAqC;IAC1E,gCAAgC,EAAE,kCAAkC;IACpE,wCAAwC,EAAE,0CAA0C;IACpF,qBAAqB,EAAE,uBAAuB;IAC9C,2BAA2B,EAAE,6BAA6B;IAC1D,0BAA0B,EAAE,4BAA4B;IACxD,uBAAuB,EAAE,yBAAyB;IAClD,yBAAyB,EAAE,2BAA2B;IACtD,+BAA+B,EAAE,iCAAiC;IAClE,4BAA4B,EAAE,8BAA8B;IAC5D,8BAA8B,EAAE,gCAAgC;IAChE,iCAAiC,EAAE,mCAAmC;IACtE,oCAAoC,EAAE,sCAAsC;IAC5E,+BAA+B,EAAE,iCAAiC;IAClE,sBAAsB,EAAE,wBAAwB;IAChD,aAAa,EAAE,eAAe;IAC9B,sBAAsB,EAAE,wBAAwB;IAChD,iCAAiC,EAAE,mCAAmC;IACtE,eAAe,EAAE,iBAAiB;IAClC,8BAA8B,EAAE,gCAAgC;IAChE,8BAA8B,EAAE,gCAAgC;IAChE,iCAAiC,EAAE,mCAAmC;IACtE,6BAA6B,EAAE,+BAA+B;IAC9D,qBAAqB,EAAE,uBAAuB;IAC9C,+BAA+B,EAAE,iCAAiC;IAClE,4BAA4B,EAAE,8BAA8B;IAC5D,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,iCAAiC;IAClE,sCAAsC,EAAE,wCAAwC;IAChF,qBAAqB,EAAE,uBAAuB;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,cAAc,EAAE,gBAAgB;IAChC,yBAAyB,EAAE,2BAA2B;IACtD,8BAA8B,EAAE,gCAAgC;IAChE,kCAAkC,EAAE,oCAAoC;IACxE,iCAAiC,EAAE,mCAAmC;IACtE,mBAAmB,EAAE,qBAAqB;IAC1C,eAAe,EAAE,iBAAiB;IAClC,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,sBAAsB;IAC5C,uBAAuB,EAAE,yBAAyB;IAClD,qCAAqC,EAAE,uCAAuC;IAC9E,wBAAwB,EAAE,0BAA0B;IACpD,6BAA6B,EAAE,+BAA+B;IAC9D,cAAc,EAAE,gBAAgB;IAChC,gDAAgD,EAAE,kDAAkD;IACpG,wBAAwB,EAAE,0BAA0B;IACpD,oBAAoB,EAAE,sBAAsB;IAC5C,6BAA6B,EAAE,+BAA+B;IAC9D,iCAAiC,EAAE,mCAAmC;IACtE,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,kBAAkB;CAC5B,CAAC"}
+{"version":3,"file":"cliOperationalCodes.js","sourceRoot":"","sources":["../src/cliOperationalCodes.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS,EAAE,WAAW;IACtB,oBAAoB,EAAE,sBAAsB;IAC5C,oBAAoB,EAAE,sBAAsB;IAC5C,uBAAuB,EAAE,yBAAyB;IAClD,0BAA0B,EAAE,4BAA4B;IACxD,kBAAkB,EAAE,oBAAoB;IACxC,2BAA2B,EAAE,6BAA6B;IAC1D,4BAA4B,EAAE,8BAA8B;IAC5D,8BAA8B,EAAE,gCAAgC;IAChE,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAE,eAAe;IAC9B,yBAAyB,EAAE,2BAA2B;IACtD,4BAA4B,EAAE,8BAA8B;IAC5D,yBAAyB,EAAE,2BAA2B;IACtD,yBAAyB,EAAE,2BAA2B;IACtD,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,iCAAiC;IAClE,qCAAqC,EAAE,uCAAuC;IAC9E,2BAA2B,EAAE,6BAA6B;IAC1D,2CAA2C,EAAE,6CAA6C;IAC1F,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,uBAAuB;IAC9C,4BAA4B,EAAE,8BAA8B;IAC5D,iCAAiC,EAAE,mCAAmC;IACtE,8BAA8B,EAAE,gCAAgC;IAChE,oCAAoC,EAAE,sCAAsC;IAC5E,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,iCAAiC;IAClE,2BAA2B,EAAE,6BAA6B;IAC1D,0BAA0B,EAAE,4BAA4B;IACxD,mCAAmC,EAAE,qCAAqC;IAC1E,gCAAgC,EAAE,kCAAkC;IACpE,wCAAwC,EAAE,0CAA0C;IACpF,qBAAqB,EAAE,uBAAuB;IAC9C,2BAA2B,EAAE,6BAA6B;IAC1D,0BAA0B,EAAE,4BAA4B;IACxD,uBAAuB,EAAE,yBAAyB;IAClD,yBAAyB,EAAE,2BAA2B;IACtD,+BAA+B,EAAE,iCAAiC;IAClE,4BAA4B,EAAE,8BAA8B;IAC5D,8BAA8B,EAAE,gCAAgC;IAChE,iCAAiC,EAAE,mCAAmC;IACtE,oCAAoC,EAAE,sCAAsC;IAC5E,+BAA+B,EAAE,iCAAiC;IAClE,sBAAsB,EAAE,wBAAwB;IAChD,aAAa,EAAE,eAAe;IAC9B,sBAAsB,EAAE,wBAAwB;IAChD,iCAAiC,EAAE,mCAAmC;IACtE,eAAe,EAAE,iBAAiB;IAClC,8BAA8B,EAAE,gCAAgC;IAChE,8BAA8B,EAAE,gCAAgC;IAChE,iCAAiC,EAAE,mCAAmC;IACtE,6BAA6B,EAAE,+BAA+B;IAC9D,qBAAqB,EAAE,uBAAuB;IAC9C,+BAA+B,EAAE,iCAAiC;IAClE,4BAA4B,EAAE,8BAA8B;IAC5D,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,iCAAiC;IAClE,sCAAsC,EAAE,wCAAwC;IAChF,qBAAqB,EAAE,uBAAuB;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,cAAc,EAAE,gBAAgB;IAChC,yBAAyB,EAAE,2BAA2B;IACtD,8BAA8B,EAAE,gCAAgC;IAChE,kCAAkC,EAAE,oCAAoC;IACxE,iCAAiC,EAAE,mCAAmC;IACtE,mBAAmB,EAAE,qBAAqB;IAC1C,eAAe,EAAE,iBAAiB;IAClC,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,sBAAsB;IAC5C,uBAAuB,EAAE,yBAAyB;IAClD,qCAAqC,EAAE,uCAAuC;IAC9E,wBAAwB,EAAE,0BAA0B;IACpD,6BAA6B,EAAE,+BAA+B;IAC9D,cAAc,EAAE,gBAAgB;IAChC,gDAAgD,EAAE,kDAAkD;IACpG,wBAAwB,EAAE,0BAA0B;IACpD,oBAAoB,EAAE,sBAAsB;IAC5C,6BAA6B,EAAE,+BAA+B;IAC9D,iCAAiC,EAAE,mCAAmC;IACtE,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,kBAAkB;IACpC,sBAAsB,EAAE,wBAAwB;IAChD,sBAAsB,EAAE,wBAAwB;IAChD,2BAA2B,EAAE,6BAA6B;IAC1D,wBAAwB,EAAE,0BAA0B;CAC5C,CAAC"}

package/dist/enforceCli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enforceCli.d.ts","sourceRoot":"","sources":["../src/enforceCli.ts"],"names":[],"mappings":"AASA,wFAAwF;AACxF,eAAO,MAAM,wBAAwB,wXACkV,CAAC;AAuBxX,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB9D"}
+{"version":3,"file":"enforceCli.d.ts","sourceRoot":"","sources":["../src/enforceCli.ts"],"names":[],"mappings":"AAUA,wFAAwF;AACxF,eAAO,MAAM,wBAAwB,wXACkV,CAAC;AAuBxX,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC9D"}

package/dist/enforceCli.js

@@ -1,6 +1,7 @@
 import { CLI_OPERATIONAL_CODES, cliErrorEnvelope, formatOperationalMessage, } from "./failureCatalog.js";
 import { TruthLayerError } from "./truthLayerError.js";
 import { LICENSE_PREFLIGHT_ENABLED } from "./generated/commercialBuildFlags.js";
+import { exitAfterEnforceCliReceipt } from "./cliExecutionFinalize.js";
 import { runStatefulEnforce } from "./enforceStateful.js";
 /** User-facing message for OSS builds when `enforce` is invoked; exported for tests. */
 export const ENFORCE_OSS_GATE_MESSAGE = "The OSS build cannot run agentskeptic enforce (CI lock gating). Install the published npm package agentskeptic, set AGENTSKEPTIC_API_KEY (legacy WORKFLOW_VERIFIER_API_KEY accepted), and point COMMERCIAL_LICENSE_API_BASE_URL at your license server; or run npm run build:commercial with COMMERCIAL_LICENSE_API_BASE_URL set. Policy: docs/commercial-enforce-gate-normative.md";
@@ -30,7 +31,13 @@ export async function runEnforce(args) {
     }
     if (!LICENSE_PREFLIGHT_ENABLED) {
         writeCliError(CLI_OPERATIONAL_CODES.ENFORCE_REQUIRES_COMMERCIAL_BUILD, ENFORCE_OSS_GATE_MESSAGE);
-        process.exit(3);
+        exitAfterEnforceCliReceipt({
+            parsedBatch: null,
+            quick: null,
+            exitCode: 3,
+            operationalCode: CLI_OPERATIONAL_CODES.ENFORCE_REQUIRES_COMMERCIAL_BUILD,
+            certificate: null,
+        });
     }
     try {
         await runStatefulEnforce(args);
@@ -38,11 +45,23 @@ export async function runEnforce(args) {
     catch (e) {
         if (e instanceof TruthLayerError) {
             writeCliError(e.code, e.message);
-            process.exit(3);
+            exitAfterEnforceCliReceipt({
+                parsedBatch: null,
+                quick: null,
+                exitCode: 3,
+                operationalCode: e.code,
+                certificate: null,
+            });
         }
         const msg = e instanceof Error ? e.message : String(e);
         writeCliError(CLI_OPERATIONAL_CODES.INTERNAL_ERROR, formatOperationalMessage(msg));
-        process.exit(3);
+        exitAfterEnforceCliReceipt({
+            parsedBatch: null,
+            quick: null,
+            exitCode: 3,
+            operationalCode: CLI_OPERATIONAL_CODES.INTERNAL_ERROR,
+            certificate: null,
+        });
     }
 }
 //# sourceMappingURL=enforceCli.js.map

package/dist/enforceCli.js.map

@@ -1 +1 @@
-{"version":3,"file":"enforceCli.js","sourceRoot":"","sources":["../src/enforceCli.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GACnC,qXAAqX,CAAC;AAExX,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;;;;;;;;;;;;;4CAamC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC/B,aAAa,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,wBAAwB,CAAC,CAAC;QACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"enforceCli.js","sourceRoot":"","sources":["../src/enforceCli.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GACnC,qXAAqX,CAAC;AAExX,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;;;;;;;;;;;;;4CAamC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC/B,aAAa,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,wBAAwB,CAAC,CAAC;QACjG,0BAA0B,CAAC;YACzB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,CAAC;YACX,eAAe,EAAE,qBAAqB,CAAC,iCAAiC;YACxE,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,0BAA0B,CAAC;gBACzB,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,CAAC;gBACX,eAAe,EAAE,CAAC,CAAC,IAAI;gBACvB,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,aAAa,CAAC,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,0BAA0B,CAAC;YACzB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,CAAC;YACX,eAAe,EAAE,qBAAqB,CAAC,cAAc;YACrD,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/enforceStateful.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enforceStateful.d.ts","sourceRoot":"","sources":["../src/enforceStateful.ts"],"names":[],"mappings":"AAuDA,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsGtE"}
+{"version":3,"file":"enforceStateful.d.ts","sourceRoot":"","sources":["../src/enforceStateful.ts"],"names":[],"mappings":"AAgEA,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+MtE"}

package/dist/enforceStateful.js

@@ -1,16 +1,17 @@
 import { randomUUID } from "node:crypto";
-import { CLI_OPERATIONAL_CODES } from "./cliOperationalCodes.js";
 import { parseBatchVerifyCliArgs, parseQuickCliArgs } from "./cliArgv.js";
-import { verifyWorkflow } from "./pipeline.js";
-import { runBatchVerifyToValidatedResult } from "./standardVerifyWorkflowCli.js";
-import { TruthLayerError } from "./truthLayerError.js";
+import { CLI_OPERATIONAL_CODES } from "./cliOperationalCodes.js";
+import { exitAfterEnforceCliReceipt } from "./cliExecutionFinalize.js";
+import { cliErrorEnvelope, formatOperationalMessage } from "./failureCatalog.js";
+import { canonicalCertificateSha256, materialTruthSha256 } from "./governanceEvidence.js";
+import { buildOutcomeCertificateFromQuickReport, buildOutcomeCertificateFromWorkflowResult, } from "./outcomeCertificate.js";
 import { stableStringify } from "./jsonStableStringify.js";
 import { runLicensePreflightIfNeeded } from "./commercial/licensePreflight.js";
-import { cliErrorEnvelope } from "./failureCatalog.js";
-import { postEnforcementJson } from "./sdk/transport.js";
-import { buildOutcomeCertificateFromQuickReport, buildOutcomeCertificateFromWorkflowResult } from "./outcomeCertificate.js";
+import { verifyWorkflow } from "./pipeline.js";
 import { runQuickVerifyToValidatedReport } from "./quickVerify/runQuickVerify.js";
-import { canonicalCertificateSha256, materialTruthSha256 } from "./governanceEvidence.js";
+import { postEnforcementJson } from "./sdk/transport.js";
+import { runBatchVerifyToValidatedResult } from "./standardVerifyWorkflowCli.js";
+import { TruthLayerError } from "./truthLayerError.js";
 function parseEnforceMode(args) {
     const hasCreate = args.includes("--create-baseline");
     const hasAccept = args.includes("--accept-drift");
@@ -27,8 +28,7 @@ function stripEnforceModeArgs(args) {
     return args.filter((a) => a !== "--create-baseline" && a !== "--accept-drift");
 }
 function apiKeyOrThrow() {
-    const apiKey = process.env.AGENTSKEPTIC_API_KEY?.trim() ||
-        process.env.WORKFLOW_VERIFIER_API_KEY?.trim();
+    const apiKey = process.env.AGENTSKEPTIC_API_KEY?.trim() || process.env.WORKFLOW_VERIFIER_API_KEY?.trim();
     if (!apiKey) {
         throw new TruthLayerError(CLI_OPERATIONAL_CODES.LICENSE_KEY_MISSING, "Commercial agentskeptic enforce requires AGENTSKEPTIC_API_KEY.");
     }
@@ -38,96 +38,184 @@ async function postEnforcementState(path, payload) {
     const apiKey = apiKeyOrThrow();
     return postEnforcementJson({ path, payload, apiKey });
 }
+function writeOperationalErr(code, message) {
+    console.error(cliErrorEnvelope(code, formatOperationalMessage(message)));
+}
 export async function runStatefulEnforce(args) {
-    const mode = parseEnforceMode(args);
-    const stripped = stripEnforceModeArgs(args);
-    const isQuick = stripped.includes("--input") || stripped.includes("--export-registry") || stripped.includes("--emit-events");
-    const runId = process.env.AGENTSKEPTIC_RUN_ID?.trim() ||
-        process.env.WORKFLOW_VERIFIER_RUN_ID?.trim() ||
-        randomUUID();
-    await runLicensePreflightIfNeeded("enforce", { runId, xRequestId: randomUUID() });
-    let terminalStatus;
-    let workflowId;
-    let certificate;
-    if (isQuick) {
-        const pq = parseQuickCliArgs(stripped);
-        const out = await runQuickVerifyToValidatedReport({
-            inputUtf8: pq.inputPath === "-" ? await new Promise((resolve, reject) => {
-                let s = "";
-                process.stdin.setEncoding("utf8");
-                process.stdin.on("data", (d) => {
-                    s += d;
-                });
-                process.stdin.on("end", () => resolve(s));
-                process.stdin.on("error", reject);
-            }) : await import("node:fs/promises").then((m) => m.readFile(pq.inputPath, "utf8")),
-            postgresUrl: pq.postgresUrl ?? undefined,
-            sqlitePath: pq.dbPath ?? undefined,
-        });
-        workflowId = pq.workflowIdQuick;
-        certificate = buildOutcomeCertificateFromQuickReport({
-            report: out.report,
-            workflowId: pq.workflowIdQuick,
-            humanReportOptions: {
-                workflowId: pq.workflowIdQuick,
-                eventsPath: pq.emitEventsPath ?? undefined,
-                registryPath: pq.exportPath,
-                dbFlag: pq.dbPath ?? undefined,
-                postgresUrl: pq.postgresUrl !== undefined,
-            },
+    let parsedBatch = null;
+    let pq = null;
+    let certificate = null;
+    try {
+        const mode = parseEnforceMode(args);
+        const stripped = stripEnforceModeArgs(args);
+        const isQuick = stripped.includes("--input") ||
+            stripped.includes("--export-registry") ||
+            stripped.includes("--emit-events");
+        const runId = process.env.AGENTSKEPTIC_RUN_ID?.trim() ||
+            process.env.WORKFLOW_VERIFIER_RUN_ID?.trim() ||
+            randomUUID();
+        await runLicensePreflightIfNeeded("enforce", { runId, xRequestId: randomUUID() });
+        let terminalStatus;
+        let workflowId;
+        if (isQuick) {
+            const q = parseQuickCliArgs(stripped);
+            pq = q;
+            const out = await runQuickVerifyToValidatedReport({
+                inputUtf8: q.inputPath === "-"
+                    ? await new Promise((resolve, reject) => {
+                        let s = "";
+                        process.stdin.setEncoding("utf8");
+                        process.stdin.on("data", (d) => {
+                            s += d;
+                        });
+                        process.stdin.on("end", () => resolve(s));
+                        process.stdin.on("error", reject);
+                    })
+                    : await import("node:fs/promises").then((m) => m.readFile(q.inputPath, "utf8")),
+                postgresUrl: q.postgresUrl ?? undefined,
+                sqlitePath: q.dbPath ?? undefined,
+            });
+            workflowId = q.workflowIdQuick;
+            certificate = buildOutcomeCertificateFromQuickReport({
+                report: out.report,
+                workflowId: q.workflowIdQuick,
+                humanReportOptions: {
+                    workflowId: q.workflowIdQuick,
+                    eventsPath: q.emitEventsPath ?? undefined,
+                    registryPath: q.exportPath,
+                    dbFlag: q.dbPath ?? undefined,
+                    postgresUrl: q.postgresUrl !== undefined,
+                },
+            });
+            terminalStatus =
+                out.report.verdict === "pass" ? "complete"
+                    : out.report.verdict === "fail" ? "inconsistent"
+                        : "incomplete";
+        }
+        else {
+            const parsed = parseBatchVerifyCliArgs(stripped);
+            parsedBatch = parsed;
+            const wf = await runBatchVerifyToValidatedResult(() => verifyWorkflow({
+                workflowId: parsed.workflowId,
+                eventsPath: parsed.eventsPath,
+                registryPath: parsed.registryPath,
+                database: parsed.database,
+                verificationPolicy: parsed.verificationPolicy,
+                truthReport: parsed.noHumanReport ? () => { } : (report) => process.stderr.write(`${report}\n`),
+            }));
+            workflowId = parsed.workflowId;
+            certificate = buildOutcomeCertificateFromWorkflowResult(wf, "contract_sql");
+            terminalStatus =
+                wf.status === "complete" ? "complete"
+                    : wf.status === "inconsistent" ? "inconsistent"
+                        : "incomplete";
+        }
+        const payload = {
+            schema_version: 2,
+            run_id: runId,
+            workflow_id: workflowId,
+            outcome_certificate_v1: certificate,
+            material_truth_sha256: materialTruthSha256(certificate),
+            certificate_sha256: canonicalCertificateSha256(certificate),
+        };
+        if (mode === "accept-drift") {
+            const expected = process.env.AGENTSKEPTIC_ENFORCE_EXPECTED_PROJECTION_HASH?.trim() ||
+                process.env.WORKFLOW_VERIFIER_ENFORCE_EXPECTED_PROJECTION_HASH?.trim();
+            const verRaw = process.env.AGENTSKEPTIC_ENFORCE_LIFECYCLE_STATE_VERSION?.trim() ||
+                process.env.WORKFLOW_VERIFIER_ENFORCE_LIFECYCLE_STATE_VERSION?.trim();
+            const lifecycle_state_version = verRaw !== undefined && verRaw !== "" ? Number.parseInt(verRaw, 10) : NaN;
+            if (!expected || !Number.isInteger(lifecycle_state_version)) {
+                throw new TruthLayerError(CLI_OPERATIONAL_CODES.ENFORCE_USAGE, "For --accept-drift, set AGENTSKEPTIC_ENFORCE_EXPECTED_PROJECTION_HASH and AGENTSKEPTIC_ENFORCE_LIFECYCLE_STATE_VERSION from the prior hosted enforce POST /check response (fields expected_projection_hash_for_accept and lifecycle_state_version).");
+            }
+            payload.expected_projection_hash = expected;
+            payload.lifecycle_state_version = lifecycle_state_version;
+        }
+        const route = mode === "create-baseline" ? "/api/v1/enforcement/baselines"
+            : mode === "accept-drift" ? "/api/v1/enforcement/accept"
+                : "/api/v1/enforcement/check";
+        const stateRes = await postEnforcementState(route, payload);
+        if (!stateRes.ok) {
+            const o = typeof stateRes.body === "object" && stateRes.body !== null ?
+                stateRes.body
+                : {};
+            const problemCode = typeof o.code === "string" && o.code.trim() ? o.code : `HTTP_${stateRes.status}`;
+            const problemHint = typeof o.message === "string"
+                ? o.message
+                : typeof o.detail === "string"
+                    ? o.detail
+                    : typeof o.next_action === "string"
+                        ? o.next_action
+                        : `HTTP ${stateRes.status}`;
+            throw new TruthLayerError(CLI_OPERATIONAL_CODES.LICENSE_DENIED, `${problemCode}: ${problemHint}${stateRes.requestId ? ` [x-request-id=${stateRes.requestId}]` : ""}`);
+        }
+        process.stdout.write(`${stableStringify({ schemaVersion: 2, enforce: stateRes.body })}\n`);
+        const resBody = typeof stateRes.body === "object" && stateRes.body !== null ?
+            stateRes.body
+            : {};
+        const resultStatus = typeof resBody.result_status === "string" ? String(resBody.result_status) : undefined;
+        if (route === "/api/v1/enforcement/check" && (resultStatus === "drift" || resultStatus === "rerun_fail")) {
+            const msg = resultStatus === "rerun_fail" ? "Hosted enforce reported rerun failure against baseline." : "Drift detected.";
+            console.error(cliErrorEnvelope(CLI_OPERATIONAL_CODES.VERIFICATION_OUTPUT_LOCK_MISMATCH, msg));
+            exitAfterEnforceCliReceipt({
+                parsedBatch,
+                quick: pq,
+                exitCode: 4,
+                operationalCode: null,
+                certificate,
+                enforceExitKindDrift: true,
+            });
+        }
+        /** Legacy envelope (schema_version 1) surfaced `status`; keep for mocks / older gateways. */
+        const legacyStatus = typeof resBody.status === "string" ? String(resBody.status ?? "ok") : "ok";
+        if (legacyStatus === "drift") {
+            console.error(cliErrorEnvelope(CLI_OPERATIONAL_CODES.VERIFICATION_OUTPUT_LOCK_MISMATCH, "Drift detected."));
+            exitAfterEnforceCliReceipt({
+                parsedBatch,
+                quick: pq,
+                exitCode: 4,
+                operationalCode: null,
+                certificate,
+                enforceExitKindDrift: true,
+            });
+        }
+        if (terminalStatus === "complete") {
+            exitAfterEnforceCliReceipt({
+                parsedBatch,
+                quick: pq,
+                exitCode: 0,
+                operationalCode: null,
+                certificate,
+            });
+        }
+        if (terminalStatus === "inconsistent") {
+            exitAfterEnforceCliReceipt({
+                parsedBatch,
+                quick: pq,
+                exitCode: 1,
+                operationalCode: null,
+                certificate,
+            });
+        }
+        exitAfterEnforceCliReceipt({
+            parsedBatch,
+            quick: pq,
+            exitCode: 2,
+            operationalCode: null,
+            certificate,
         });
-        terminalStatus =
-            out.report.verdict === "pass" ? "complete"
-                : out.report.verdict === "fail" ? "inconsistent"
-                    : "incomplete";
-    }
-    else {
-        const parsed = parseBatchVerifyCliArgs(stripped);
-        const wf = await runBatchVerifyToValidatedResult(() => verifyWorkflow({
-            workflowId: parsed.workflowId,
-            eventsPath: parsed.eventsPath,
-            registryPath: parsed.registryPath,
-            database: parsed.database,
-            verificationPolicy: parsed.verificationPolicy,
-            truthReport: parsed.noHumanReport ? () => { } : (report) => process.stderr.write(`${report}\n`),
-        }));
-        workflowId = parsed.workflowId;
-        certificate = buildOutcomeCertificateFromWorkflowResult(wf, "contract_sql");
-        terminalStatus =
-            wf.status === "complete" ? "complete"
-                : wf.status === "inconsistent" ? "inconsistent"
-                    : "incomplete";
-    }
-    const payload = {
-        schema_version: 2,
-        run_id: runId,
-        workflow_id: workflowId,
-        outcome_certificate_v1: certificate,
-        material_truth_sha256: materialTruthSha256(certificate),
-        certificate_sha256: canonicalCertificateSha256(certificate),
-    };
-    const route = mode === "create-baseline" ? "/api/v1/enforcement/baselines"
-        : mode === "accept-drift" ? "/api/v1/enforcement/accept"
-            : "/api/v1/enforcement/check";
-    const stateRes = await postEnforcementState(route, payload);
-    if (!stateRes.ok) {
-        const detail = typeof stateRes.body === "object" && stateRes.body !== null && "detail" in stateRes.body
-            ? String(stateRes.body.detail ?? `HTTP ${stateRes.status}`)
-            : `HTTP ${stateRes.status}`;
-        throw new TruthLayerError(CLI_OPERATIONAL_CODES.LICENSE_DENIED, `${detail}${stateRes.requestId ? ` [x-request-id=${stateRes.requestId}]` : ""}`);
     }
-    const status = typeof stateRes.body === "object" && stateRes.body !== null && "status" in stateRes.body
-        ? String(stateRes.body.status ?? "ok")
-        : "ok";
-    process.stdout.write(`${stableStringify({ schemaVersion: 1, enforce: stateRes.body })}\n`);
-    if (status === "drift") {
-        console.error(cliErrorEnvelope(CLI_OPERATIONAL_CODES.VERIFICATION_OUTPUT_LOCK_MISMATCH, "Drift detected."));
-        process.exit(4);
+    catch (e) {
+        if (e instanceof TruthLayerError) {
+            writeOperationalErr(e.code, e.message);
+            exitAfterEnforceCliReceipt({
+                parsedBatch,
+                quick: pq,
+                exitCode: 3,
+                operationalCode: e.code,
+                certificate,
+            });
+        }
+        throw e;
     }
-    if (terminalStatus === "complete")
-        process.exit(0);
-    if (terminalStatus === "inconsistent")
-        process.exit(1);
-    process.exit(2);
 }
 //# sourceMappingURL=enforceStateful.js.map

package/dist/enforceStateful.js.map

@@ -1 +1 @@
-{"version":3,"file":"enforceStateful.js","sourceRoot":"","sources":["../src/enforceStateful.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,sCAAsC,EAAE,yCAAyC,EAAE,MAAM,yBAAyB,CAAC;AAC5H,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAI1F,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,aAAa,EACnC,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS;QAAE,OAAO,iBAAiB,CAAC;IACxC,IAAI,SAAS;QAAE,OAAO,cAAc,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAc;IAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,mBAAmB,IAAI,CAAC,KAAK,gBAAgB,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE;QACxC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,mBAAmB,EACzC,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAkG,EAClG,OAAgC;IAEhC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,OAAO,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAc;IACrD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE7H,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QAC5C,UAAU,EAAE,CAAC;IACf,MAAM,2BAA2B,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAElF,IAAI,cAA0D,CAAC;IAC/D,IAAI,UAAkB,CAAC;IACvB,IAAI,WAAqI,CAAC;IAC1I,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,+BAA+B,CAAC;YAChD,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC9E,IAAI,CAAC,GAAG,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;oBAC7B,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACnF,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,SAAS;YACxC,UAAU,EAAE,EAAE,CAAC,MAAM,IAAI,SAAS;SACnC,CAAC,CAAC;QACH,UAAU,GAAG,EAAE,CAAC,eAAe,CAAC;QAChC,WAAW,GAAG,sCAAsC,CAAC;YACnD,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,EAAE,CAAC,eAAe;YAC9B,kBAAkB,EAAE;gBAClB,UAAU,EAAE,EAAE,CAAC,eAAe;gBAC9B,UAAU,EAAE,EAAE,CAAC,cAAc,IAAI,SAAS;gBAC1C,YAAY,EAAE,EAAE,CAAC,UAAU;gBAC3B,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,SAAS;gBAC9B,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,SAAS;aAC1C;SACF,CAAC,CAAC;QACH,cAAc;YACZ,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU;gBAC1C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc;oBAChD,CAAC,CAAC,YAAY,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,+BAA+B,CAAC,GAAG,EAAE,CACpD,cAAc,CAAC;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC;SAC/F,CAAC,CACH,CAAC;QACF,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QAC/B,WAAW,GAAG,yCAAyC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC5E,cAAc;YACZ,EAAE,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU;gBACrC,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc;oBAC/C,CAAC,CAAC,YAAY,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,CAAC;QACjB,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,UAAU;QACvB,sBAAsB,EAAE,WAAW;QACnC,qBAAqB,EAAE,mBAAmB,CAAC,WAAW,CAAC;QACvD,kBAAkB,EAAE,0BAA0B,CAAC,WAAW,CAAC;KAC5D,CAAC;IAEF,MAAM,KAAK,GACT,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,+BAA+B;QAC5D,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,4BAA4B;YACxD,CAAC,CAAC,2BAA2B,CAAC;IAEhC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GACV,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI;YACtF,CAAC,CAAC,MAAM,CAAE,QAAQ,CAAC,IAA6B,CAAC,MAAM,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrF,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,cAAc,EACpC,GAAG,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GACV,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI;QACtF,CAAC,CAAC,MAAM,CAAE,QAAQ,CAAC,IAA6B,CAAC,MAAM,IAAI,IAAI,CAAC;QAChE,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3F,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC5G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,cAAc,KAAK,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,cAAc,KAAK,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"enforceStateful.js","sourceRoot":"","sources":["../src/enforceStateful.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EACL,sCAAsC,EACtC,yCAAyC,GAE1C,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAIvD,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,aAAa,EACnC,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS;QAAE,OAAO,iBAAiB,CAAC;IACxC,IAAI,SAAS;QAAE,OAAO,cAAc,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAc;IAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,mBAAmB,IAAI,CAAC,KAAK,gBAAgB,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC5F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,mBAAmB,EACzC,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAkG,EAClG,OAAgC;IAEhC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,OAAO,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAAe;IACxD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAc;IACrD,IAAI,WAAW,GAAgC,IAAI,CAAC;IACpD,IAAI,EAAE,GAA0B,IAAI,CAAC;IACrC,IAAI,WAAW,GAAgC,IAAI,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GACX,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC5B,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACtC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAErC,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;YACvC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;YAC5C,UAAU,EAAE,CAAC;QACf,MAAM,2BAA2B,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAElF,IAAI,cAA0D,CAAC;QAC/D,IAAI,UAAkB,CAAC;QACvB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACtC,EAAE,GAAG,CAAC,CAAC;YACP,MAAM,GAAG,GAAG,MAAM,+BAA+B,CAAC;gBAChD,SAAS,EACP,CAAC,CAAC,SAAS,KAAK,GAAG;oBACjB,CAAC,CAAC,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;wBAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;wBACX,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;wBAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;4BAC7B,CAAC,IAAI,CAAC,CAAC;wBACT,CAAC,CAAC,CAAC;wBACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;wBAC1C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACpC,CAAC,CAAC;oBACJ,CAAC,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACnF,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,SAAS;gBACvC,UAAU,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;aAClC,CAAC,CAAC;YACH,UAAU,GAAG,CAAC,CAAC,eAAe,CAAC;YAC/B,WAAW,GAAG,sCAAsC,CAAC;gBACnD,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,CAAC,CAAC,eAAe;gBAC7B,kBAAkB,EAAE;oBAClB,UAAU,EAAE,CAAC,CAAC,eAAe;oBAC7B,UAAU,EAAE,CAAC,CAAC,cAAc,IAAI,SAAS;oBACzC,YAAY,EAAE,CAAC,CAAC,UAAU;oBAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;oBAC7B,WAAW,EAAE,CAAC,CAAC,WAAW,KAAK,SAAS;iBACzC;aACF,CAAC,CAAC;YACH,cAAc;gBACZ,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU;oBAC1C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc;wBAChD,CAAC,CAAC,YAAY,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;YACjD,WAAW,GAAG,MAAM,CAAC;YACrB,MAAM,EAAE,GAAG,MAAM,+BAA+B,CAAC,GAAG,EAAE,CACpD,cAAc,CAAC;gBACb,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;gBAC7C,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC;aAC/F,CAAC,CACH,CAAC;YACF,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC/B,WAAW,GAAG,yCAAyC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YAC5E,cAAc;gBACZ,EAAE,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU;oBACrC,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc;wBAC/C,CAAC,CAAC,YAAY,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAA4B;YACvC,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,UAAU;YACvB,sBAAsB,EAAE,WAAW;YACnC,qBAAqB,EAAE,mBAAmB,CAAC,WAAW,CAAC;YACvD,kBAAkB,EAAE,0BAA0B,CAAC,WAAW,CAAC;SAC5D,CAAC;QAEF,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,6CAA6C,EAAE,IAAI,EAAE;gBACjE,OAAO,CAAC,GAAG,CAAC,kDAAkD,EAAE,IAAI,EAAE,CAAC;YACzE,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE,IAAI,EAAE;gBAChE,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,IAAI,EAAE,CAAC;YACxE,MAAM,uBAAuB,GAC3B,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5E,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,aAAa,EACnC,qPAAqP,CACtP,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,wBAAwB,GAAG,QAAQ,CAAC;YAC5C,OAAO,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QAC5D,CAAC;QAED,MAAM,KAAK,GACT,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,+BAA+B;YAC5D,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,4BAA4B;gBACxD,CAAC,CAAC,2BAA2B,CAAC;QAEhC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,GACL,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAC1D,QAAQ,CAAC,IAAgC;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,WAAW,GACf,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnF,MAAM,WAAW,GACf,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;gBAC3B,CAAC,CAAC,CAAC,CAAC,OAAO;gBACX,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAC5B,CAAC,CAAC,CAAC,CAAC,MAAM;oBACV,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;wBACjC,CAAC,CAAC,CAAC,CAAC,WAAW;wBACf,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,cAAc,EACpC,GAAG,WAAW,KAAK,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrG,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QAE3F,MAAM,OAAO,GACX,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC1D,QAAQ,CAAC,IAAgC;YAC5C,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAExF,IAAI,KAAK,KAAK,2BAA2B,IAAI,CAAC,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,YAAY,CAAC,EAAE,CAAC;YACzG,MAAM,GAAG,GACP,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,iBAAiB,CAAC;YAChH,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9F,0BAA0B,CAAC;gBACzB,WAAW;gBACX,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,CAAC;gBACX,eAAe,EAAE,IAAI;gBACrB,WAAW;gBACX,oBAAoB,EAAE,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,6FAA6F;QAC7F,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7E,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC5G,0BAA0B,CAAC;gBACzB,WAAW;gBACX,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,CAAC;gBACX,eAAe,EAAE,IAAI;gBACrB,WAAW;gBACX,oBAAoB,EAAE,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;YAClC,0BAA0B,CAAC;gBACzB,WAAW;gBACX,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,CAAC;gBACX,eAAe,EAAE,IAAI;gBACrB,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;QACD,IAAI,cAAc,KAAK,cAAc,EAAE,CAAC;YACtC,0BAA0B,CAAC;gBACzB,WAAW;gBACX,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,CAAC;gBACX,eAAe,EAAE,IAAI;gBACrB,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;QACD,0BAA0B,CAAC;YACzB,WAAW;YACX,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,CAAC;YACX,eAAe,EAAE,IAAI;YACrB,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACvC,0BAA0B,CAAC;gBACzB,WAAW;gBACX,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,CAAC;gBACX,eAAe,EAAE,CAAC,CAAC,IAAI;gBACvB,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/execution-identity.v1.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://agentskeptic.com/schemas/execution-identity-v1.schema.json",
+  "closedDriftPathCount": 24,
+  "identityVersion": "1.0.0",
+  "mergeGateFingerprintSha256": "64b5ae2ed5025c08c7c9d7b601958cc90edc32c0d80ea207fdaa373de5b9c2fc",
+  "nodeEnginesDeclared": "22.x || 24.x",
+  "npmPackageVersion": "3.6.0",
+  "pythonPipExtrasFragment": "dev,postgres",
+  "verificationContractManifest": {
+    "manifestSha256": "c5f23ec43576716c4b9a13e752cd2962a78bb4b4da1f9e521f911e15dfd80268",
+    "url": "https://agentskeptic.com/contract/v1.json",
+    "version": "1.0.1"
+  }
+}

package/dist/executionIdentityVerifyCli.d.ts

@@ -0,0 +1,7 @@
+import type { StandardVerifyWorkflowCliIo } from "./standardVerifyWorkflowCli.js";
+export declare function executionIdentityVerifyUsage(): string;
+/**
+ * Operational exits (3): prints JSON stderr envelope via `stderrLine`; verification exits delegate to `io.exit`.
+ */
+export declare function runExecutionIdentityVerifyCli(argv: string[], io?: Partial<Pick<StandardVerifyWorkflowCliIo, "consoleLog" | "stderrLine" | "exit">>): void;
+//# sourceMappingURL=executionIdentityVerifyCli.d.ts.map

package/dist/executionIdentityVerifyCli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionIdentityVerifyCli.d.ts","sourceRoot":"","sources":["../src/executionIdentityVerifyCli.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAalF,wBAAgB,4BAA4B,IAAI,MAAM,CAYrD;AAOD;;GAEG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,EAAE,EACd,EAAE,GAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE,YAAY,GAAG,YAAY,GAAG,MAAM,CAAC,CAAM,GACxF,IAAI,CA8DN"}

package/dist/executionIdentityVerifyCli.js

@@ -0,0 +1,84 @@
+/**
+ * Compare pinned execution-identity JSON to the bundled dist artifact (`execution-identity verify`).
+ */
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { deepStrictEqual } from "node:assert";
+import { CLI_OPERATIONAL_CODES } from "./cliOperationalCodes.js";
+import { cliErrorEnvelope, formatOperationalMessage } from "./failureCatalog.js";
+import { CLI_EXITED_AFTER_ERROR } from "./standardVerifyWorkflowCli.js";
+import { argValue } from "./cliArgv.js";
+import { npmPackageRootFromHere } from "./verificationReceipt.js";
+const defaultIo = {
+    consoleLog: (line) => {
+        process.stdout.write(`${line}\n`);
+    },
+    stderrLine: (line) => {
+        process.stderr.write(`${line}\n`);
+    },
+    exit: (code) => process.exit(code),
+};
+export function executionIdentityVerifyUsage() {
+    return `Usage:
+  agentskeptic execution-identity verify --expect-json <path>
+
+Compare repo-pinned execution-identity JSON against the bundled dist/artifact (same fields except $schema is ignored).
+
+Exit codes:
+  0  pinned JSON matches dist/execution-identity.v1.json
+  2  field mismatch (${CLI_OPERATIONAL_CODES.EXECUTION_IDENTITY_MISMATCH})
+  3  usage or IO/read failure (${CLI_OPERATIONAL_CODES.EXECUTION_IDENTITY_USAGE} / operational)
+
+  --help, -h  print this message and exit 0`;
+}
+function stripSchema(obj) {
+    const { $schema: _, ...rest } = obj;
+    return rest;
+}
+/**
+ * Operational exits (3): prints JSON stderr envelope via `stderrLine`; verification exits delegate to `io.exit`.
+ */
+export function runExecutionIdentityVerifyCli(argv, io = {}) {
+    const out = { ...defaultIo, ...io };
+    if (argv.includes("--help") || argv.includes("-h")) {
+        out.consoleLog(executionIdentityVerifyUsage());
+        out.exit(0);
+    }
+    if (argv[0] !== "verify") {
+        out.stderrLine(cliErrorEnvelope(CLI_OPERATIONAL_CODES.EXECUTION_IDENTITY_USAGE, formatOperationalMessage("Expected subcommand verify.")));
+        out.exit(3);
+        throw new Error(CLI_EXITED_AFTER_ERROR);
+    }
+    const expectPathRaw = argValue(argv.slice(1), "--expect-json");
+    if (!expectPathRaw?.trim()) {
+        out.stderrLine(cliErrorEnvelope(CLI_OPERATIONAL_CODES.EXECUTION_IDENTITY_USAGE, formatOperationalMessage("Missing --expect-json <path>.")));
+        out.exit(3);
+        throw new Error(CLI_EXITED_AFTER_ERROR);
+    }
+    const packageRoot = npmPackageRootFromHere(import.meta.url);
+    const bundledPath = path.join(packageRoot, "dist", "execution-identity.v1.json");
+    const expectAbs = path.resolve(expectPathRaw);
+    let bundled;
+    let expectDoc;
+    try {
+        bundled = JSON.parse(readFileSync(bundledPath, "utf8"));
+        expectDoc = JSON.parse(readFileSync(expectAbs, "utf8"));
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        out.stderrLine(cliErrorEnvelope(CLI_OPERATIONAL_CODES.EXECUTION_IDENTITY_USAGE, formatOperationalMessage(`Cannot read execution-identity JSON: ${msg}`)));
+        out.exit(3);
+        throw new Error(CLI_EXITED_AFTER_ERROR);
+    }
+    try {
+        deepStrictEqual(stripSchema(bundled), stripSchema(expectDoc));
+    }
+    catch {
+        out.stderrLine(cliErrorEnvelope(CLI_OPERATIONAL_CODES.EXECUTION_IDENTITY_MISMATCH, formatOperationalMessage("Pinned execution-identity JSON does not match dist/execution-identity.v1.json.")));
+        out.exit(2);
+        throw new Error(CLI_EXITED_AFTER_ERROR);
+    }
+    out.exit(0);
+    throw new Error(CLI_EXITED_AFTER_ERROR);
+}
+//# sourceMappingURL=executionIdentityVerifyCli.js.map

package/dist/executionIdentityVerifyCli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionIdentityVerifyCli.js","sourceRoot":"","sources":["../src/executionIdentityVerifyCli.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,SAAS,GAAG;IAChB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;CACuC,CAAC;AAEpF,MAAM,UAAU,4BAA4B;IAC1C,OAAO;;;;;;;uBAOc,qBAAqB,CAAC,2BAA2B;iCACvC,qBAAqB,CAAC,wBAAwB;;4CAEnC,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,GAA4B;IAC/C,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAc,EACd,KAAuF,EAAE;IAEzF,MAAM,GAAG,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,UAAU,CAAC,4BAA4B,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACzB,GAAG,CAAC,UAAU,CACZ,gBAAgB,CACd,qBAAqB,CAAC,wBAAwB,EAC9C,wBAAwB,CAAC,6BAA6B,CAAC,CACxD,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC;QAC3B,GAAG,CAAC,UAAU,CACZ,gBAAgB,CACd,qBAAqB,CAAC,wBAAwB,EAC9C,wBAAwB,CAAC,+BAA+B,CAAC,CAC1D,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,OAAgC,CAAC;IACrC,IAAI,SAAkC,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAA4B,CAAC;QACnF,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAA4B,CAAC;IACrF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,GAAG,CAAC,UAAU,CACZ,gBAAgB,CACd,qBAAqB,CAAC,wBAAwB,EAC9C,wBAAwB,CAAC,wCAAwC,GAAG,EAAE,CAAC,CACxE,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC;QACH,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,UAAU,CACZ,gBAAgB,CACd,qBAAqB,CAAC,2BAA2B,EACjD,wBAAwB,CAAC,gFAAgF,CAAC,CAC3G,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAC1C,CAAC"}

package/dist/mergeGateReceiptFinalize.d.ts

@@ -0,0 +1,16 @@
+export type MergeGatePhaseTimings = {
+    regeneration: number;
+    preflightDriftRoster: number;
+    gitDiffGate: number;
+    structuralGuards: number;
+    postgresDistribution: number;
+    journeyTail: number;
+};
+export declare function finalizeMergeGateReceipt(args: {
+    packageRoot: string;
+    timings: MergeGatePhaseTimings;
+    exitCode: number;
+    outcome: "success" | "failure" | "operational_abort";
+    verificationTruthExitPhase: string | null;
+}): void;
+//# sourceMappingURL=mergeGateReceiptFinalize.d.ts.map

package/dist/mergeGateReceiptFinalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mergeGateReceiptFinalize.d.ts","sourceRoot":"","sources":["../src/mergeGateReceiptFinalize.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,qBAAqB,GAAG;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC;IACrD,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C,GAAG,IAAI,CAgCP"}

package/dist/mergeGateReceiptFinalize.js

@@ -0,0 +1,40 @@
+/**
+ * Loaded dynamically from verification-truth.mjs after `npm run build` in merge gate prelude.
+ */
+import { cliErrorEnvelope, formatOperationalMessage } from "./failureCatalog.js";
+import { CLI_OPERATIONAL_CODES } from "./cliOperationalCodes.js";
+import { writeVerificationReceipt } from "./verificationReceipt.js";
+export function finalizeMergeGateReceipt(args) {
+    const cwd = process.cwd();
+    let outcome = args.outcome;
+    let exitCode = args.exitCode;
+    if (args.exitCode === 0 && outcome !== "success") {
+        outcome = "success";
+    }
+    const r = writeVerificationReceipt({
+        cwd,
+        exitCode,
+        inputIntegrity: {
+            dbKind: "none",
+            eventsSha256: null,
+            npmTestScript: "verification:truth",
+            registrySha256: null,
+            verificationTruthExitPhase: args.verificationTruthExitPhase,
+            workflowId: "merge_gate",
+        },
+        kind: "merge_gate",
+        outcome,
+        packageRoot: args.packageRoot,
+        phaseTimingsMs: args.timings,
+        verificationSummary: {
+            enforceExitKind: null,
+            operationalCode: null,
+            workflowStatus: outcome === "success" ? "complete" : outcome === "failure" ? "inconsistent" : null,
+        },
+    });
+    if (!r.ok) {
+        console.error(cliErrorEnvelope(CLI_OPERATIONAL_CODES.RECEIPT_PERSIST_FAILED, formatOperationalMessage(r.message)));
+        process.exit(3);
+    }
+}
+//# sourceMappingURL=mergeGateReceiptFinalize.js.map