assertledger 1.0.0

package/dist/engine/adapters/node-test-runtime.js

@@ -0,0 +1,173 @@
+import { mkdtemp, open, realpath, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+import { normalizeRuntimeFacts, RUNTIME_FACTS_VERSION } from "./runtime-facts.js";
+const PREFLIGHT_ERROR = "NODE_TEST_PROFILE_PREFLIGHT_FAILED";
+const PREFLIGHT_REPORT_LIMIT_BYTES = 64 * 1024;
+function validCount(value) {
+    return Number.isSafeInteger(value) && value >= 0;
+}
+function parseReporterDocument(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return undefined;
+    const record = value;
+    const keys = [
+        "candidateFailureCount",
+        "candidateFailuresAllAssertions",
+        "candidateSyntaxFailureCount",
+        "candidateTestsDiscovered",
+        "nonCandidateFailureCount",
+        "protocolVersion",
+        "testsDiscovered",
+    ];
+    if (Object.keys(record).sort().join("\0") !== keys.join("\0"))
+        return undefined;
+    if (record.protocolVersion !== "1.0.0" ||
+        !validCount(record.testsDiscovered) ||
+        !validCount(record.candidateTestsDiscovered) ||
+        record.candidateTestsDiscovered > record.testsDiscovered ||
+        !validCount(record.candidateFailureCount) ||
+        !validCount(record.nonCandidateFailureCount) ||
+        !validCount(record.candidateSyntaxFailureCount) ||
+        record.candidateSyntaxFailureCount > record.candidateFailureCount ||
+        typeof record.candidateFailuresAllAssertions !== "boolean") {
+        return undefined;
+    }
+    return record;
+}
+async function readBoundedReporterDocument(reportPath) {
+    const handle = await open(reportPath, "r");
+    try {
+        const buffer = Buffer.alloc(PREFLIGHT_REPORT_LIMIT_BYTES + 1);
+        let bytesRead = 0;
+        while (bytesRead < buffer.byteLength) {
+            const chunk = await handle.read(buffer, bytesRead, buffer.byteLength - bytesRead, null);
+            if (chunk.bytesRead === 0)
+                break;
+            bytesRead += chunk.bytesRead;
+        }
+        if (bytesRead > PREFLIGHT_REPORT_LIMIT_BYTES)
+            throw new Error(PREFLIGHT_ERROR);
+        return JSON.parse(buffer.subarray(0, bytesRead).toString("utf8"));
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function executeProbe(input, root, reporterPath, controlPath, name, body) {
+    const candidatePath = path.join(root, `${name}.test.mjs`);
+    const reportPath = path.join(root, `${name}.json`);
+    await writeFile(candidatePath, body, { flag: "wx" });
+    const processResult = await input.processRunner({
+        executable: input.executable,
+        args: [
+            "--test",
+            `--test-reporter=${pathToFileURL(reporterPath).href}`,
+            `--test-reporter-destination=${reportPath}`,
+            "--",
+            controlPath,
+            candidatePath,
+        ],
+        cwd: root,
+        environment: {
+            ...input.environment,
+            TESTFORGE_NODE_CANDIDATE_FILES: JSON.stringify([candidatePath]),
+        },
+        timeoutMs: Math.min(input.timeoutMs, 5_000),
+        maximumOutputBytes: Math.min(input.maximumOutputBytes, PREFLIGHT_REPORT_LIMIT_BYTES),
+    });
+    if (processResult.outcome !== "PROCESS_CRASH" ||
+        processResult.exitCode === null ||
+        processResult.exitCode === 0) {
+        throw new Error(PREFLIGHT_ERROR);
+    }
+    const document = parseReporterDocument(await readBoundedReporterDocument(reportPath));
+    if (document === undefined)
+        throw new Error(PREFLIGHT_ERROR);
+    const expectedAssertionFacts = name === "assertion";
+    if (document.testsDiscovered !== 2 ||
+        document.candidateTestsDiscovered !== 1 ||
+        document.candidateFailureCount !== 1 ||
+        document.nonCandidateFailureCount !== 0 ||
+        document.candidateSyntaxFailureCount !== 0 ||
+        document.candidateFailuresAllAssertions !== expectedAssertionFacts) {
+        throw new Error(PREFLIGHT_ERROR);
+    }
+    const normalized = normalizeRuntimeFacts({
+        factsVersion: RUNTIME_FACTS_VERSION,
+        reportValid: true,
+        hasCandidate: true,
+        processExitedZero: false,
+        candidateTestsDiscovered: document.candidateTestsDiscovered,
+        nonCandidateFailureCount: document.nonCandidateFailureCount,
+        candidateCollectionFailureCount: 0,
+        candidateCompileFailureCount: document.candidateSyntaxFailureCount,
+        candidateFailureCount: document.candidateFailureCount,
+        candidateFailuresAllAssertions: document.candidateFailuresAllAssertions,
+    });
+    if (document.candidateTestsDiscovered !== 1 ||
+        (normalized.outcome !== "ASSERTION_FAILURE" && normalized.outcome !== "PROCESS_CRASH")) {
+        throw new Error(PREFLIGHT_ERROR);
+    }
+    return {
+        outcome: normalized.outcome,
+        attributed: normalized.attributed,
+        candidateTestsDiscovered: 1,
+        testsDiscovered: 2,
+        candidateFailureCount: 1,
+        nonCandidateFailureCount: 0,
+        candidateSyntaxFailureCount: 0,
+        candidateFailuresAllAssertions: document.candidateFailuresAllAssertions,
+        processExitedNonZero: true,
+    };
+}
+export async function runNodeTestRuntimePreflight(input) {
+    let root;
+    let result;
+    let failure;
+    try {
+        root = await realpath(await mkdtemp(path.join(os.tmpdir(), "assertledger-node-test-preflight-")));
+        const reporterPath = path.join(root, "reporter.mjs");
+        const controlPath = path.join(root, "control.test.mjs");
+        await writeFile(reporterPath, input.reporterSource, { flag: "wx" });
+        await writeFile(controlPath, ['import test from "node:test";', 'test("control", () => {});', ""].join("\n"), { flag: "wx" });
+        const assertionProbe = await executeProbe(input, root, reporterPath, controlPath, "assertion", [
+            'import test from "node:test";',
+            'import assert from "node:assert/strict";',
+            'test("assertion", () => assert.equal(false, true));',
+            "",
+        ].join("\n"));
+        const genericThrowProbe = await executeProbe(input, root, reporterPath, controlPath, "generic-throw", [
+            'import test from "node:test";',
+            'import assert from "node:assert/strict";',
+            'test("generic throw", () => {',
+            '  throw new Error("preflight", { cause: new assert.AssertionError({ message: "nested" }) });',
+            "});",
+            "",
+        ].join("\n"));
+        if (assertionProbe.outcome !== "ASSERTION_FAILURE" ||
+            assertionProbe.attributed !== true ||
+            genericThrowProbe.outcome !== "PROCESS_CRASH" ||
+            genericThrowProbe.attributed !== false) {
+            throw new Error(PREFLIGHT_ERROR);
+        }
+        result = { protocolVersion: "1.0.0", assertionProbe, genericThrowProbe };
+    }
+    catch (error) {
+        failure = error;
+    }
+    if (root !== undefined) {
+        try {
+            await rm(root, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
+        }
+        catch (error) {
+            failure ??= error;
+        }
+    }
+    if (failure !== undefined || result === undefined) {
+        throw new Error(PREFLIGHT_ERROR, { cause: failure });
+    }
+    return result;
+}
+//# sourceMappingURL=node-test-runtime.js.map

package/dist/engine/adapters/node-test-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-test-runtime.js","sourceRoot":"","sources":["../../../src/engine/adapters/node-test-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAElF,MAAM,eAAe,GAAG,oCAAoC,CAAC;AAC7D,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAC;AAqD/C,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG;QACX,uBAAuB;QACvB,gCAAgC;QAChC,6BAA6B;QAC7B,0BAA0B;QAC1B,0BAA0B;QAC1B,iBAAiB;QACjB,iBAAiB;KAClB,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChF,IACE,MAAM,CAAC,eAAe,KAAK,OAAO;QAClC,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC;QACnC,CAAC,UAAU,CAAC,MAAM,CAAC,wBAAwB,CAAC;QAC5C,MAAM,CAAC,wBAAwB,GAAG,MAAM,CAAC,eAAe;QACxD,CAAC,UAAU,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACzC,CAAC,UAAU,CAAC,MAAM,CAAC,wBAAwB,CAAC;QAC5C,CAAC,UAAU,CAAC,MAAM,CAAC,2BAA2B,CAAC;QAC/C,MAAM,CAAC,2BAA2B,GAAG,MAAM,CAAC,qBAAqB;QACjE,OAAO,MAAM,CAAC,8BAA8B,KAAK,SAAS,EAC1D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAqC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,UAAkB;IAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,CAAC,CAAC;QAC9D,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,OAAO,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YACxF,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC;gBAAE,MAAM;YACjC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC;QAC/B,CAAC;QACD,IAAI,SAAS,GAAG,4BAA4B;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IAC/E,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAqB,EACrB,IAAY,EACZ,YAAoB,EACpB,WAAmB,EACnB,IAAY,EACZ,IAAY;IAEZ,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAErD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;QAC9C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE;YACJ,QAAQ;YACR,mBAAmB,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;YACrD,+BAA+B,UAAU,EAAE;YAC3C,IAAI;YACJ,WAAW;YACX,aAAa;SACd;QACD,GAAG,EAAE,IAAI;QACT,WAAW,EAAE;YACX,GAAG,KAAK,CAAC,WAAW;YACpB,8BAA8B,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,CAAC;SAChE;QACD,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;QAC3C,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;KACrF,CAAC,CAAC;IACH,IACE,aAAa,CAAC,OAAO,KAAK,eAAe;QACzC,aAAa,CAAC,QAAQ,KAAK,IAAI;QAC/B,aAAa,CAAC,QAAQ,KAAK,CAAC,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,sBAAsB,GAAG,IAAI,KAAK,WAAW,CAAC;IACpD,IACE,QAAQ,CAAC,eAAe,KAAK,CAAC;QAC9B,QAAQ,CAAC,wBAAwB,KAAK,CAAC;QACvC,QAAQ,CAAC,qBAAqB,KAAK,CAAC;QACpC,QAAQ,CAAC,wBAAwB,KAAK,CAAC;QACvC,QAAQ,CAAC,2BAA2B,KAAK,CAAC;QAC1C,QAAQ,CAAC,8BAA8B,KAAK,sBAAsB,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,UAAU,GAAG,qBAAqB,CAAC;QACvC,YAAY,EAAE,qBAAqB;QACnC,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;QAClB,iBAAiB,EAAE,KAAK;QACxB,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;QAC3D,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;QAC3D,+BAA+B,EAAE,CAAC;QAClC,4BAA4B,EAAE,QAAQ,CAAC,2BAA2B;QAClE,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;QACrD,8BAA8B,EAAE,QAAQ,CAAC,8BAA8B;KACxE,CAAC,CAAC;IACH,IACE,QAAQ,CAAC,wBAAwB,KAAK,CAAC;QACvC,CAAC,UAAU,CAAC,OAAO,KAAK,mBAAmB,IAAI,UAAU,CAAC,OAAO,KAAK,eAAe,CAAC,EACtF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,wBAAwB,EAAE,CAAC;QAC3B,eAAe,EAAE,CAAC;QAClB,qBAAqB,EAAE,CAAC;QACxB,wBAAwB,EAAE,CAAC;QAC3B,2BAA2B,EAAE,CAAC;QAC9B,8BAA8B,EAAE,QAAQ,CAAC,8BAA8B;QACvE,oBAAoB,EAAE,IAAI;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAqB;IAErB,IAAI,IAAwB,CAAC;IAC7B,IAAI,MAA4C,CAAC;IACjD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CACnB,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC,CAC3E,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,SAAS,CACb,WAAW,EACX,CAAC,+BAA+B,EAAE,4BAA4B,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC9E,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,YAAY,CACvC,KAAK,EACL,IAAI,EACJ,YAAY,EACZ,WAAW,EACX,WAAW,EACX;YACE,+BAA+B;YAC/B,0CAA0C;YAC1C,qDAAqD;YACrD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,MAAM,iBAAiB,GAAG,MAAM,YAAY,CAC1C,KAAK,EACL,IAAI,EACJ,YAAY,EACZ,WAAW,EACX,eAAe,EACf;YACE,+BAA+B;YAC/B,0CAA0C;YAC1C,+BAA+B;YAC/B,8FAA8F;YAC9F,KAAK;YACL,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,IACE,cAAc,CAAC,OAAO,KAAK,mBAAmB;YAC9C,cAAc,CAAC,UAAU,KAAK,IAAI;YAClC,iBAAiB,CAAC,OAAO,KAAK,eAAe;YAC7C,iBAAiB,CAAC,UAAU,KAAK,KAAK,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/engine/adapters/runtime-facts.d.ts

@@ -0,0 +1,26 @@
+export declare const RUNTIME_FACTS_VERSION: "1.0.0";
+export type RuntimeOutcome = "PASS" | "ASSERTION_FAILURE" | "COLLECTION_FAILURE" | "COMPILE_FAILURE" | "PROCESS_CRASH" | "INFRA_ERROR" | "NO_TEST_DISCOVERED";
+export interface RuntimeFacts {
+    factsVersion: typeof RUNTIME_FACTS_VERSION;
+    /** False when the report is missing, malformed, or the process reported infrastructure failure. */
+    reportValid: boolean;
+    hasCandidate: boolean;
+    processExitedZero: boolean;
+    candidateTestsDiscovered: number;
+    nonCandidateFailureCount: number;
+    candidateCollectionFailureCount: number;
+    candidateCompileFailureCount: number;
+    candidateFailureCount: number;
+    candidateFailuresAllAssertions: boolean;
+}
+export interface NormalizedRuntimeOutcome {
+    outcome: RuntimeOutcome;
+    attributed: boolean;
+}
+/**
+ * Fail-closed priority: infrastructure/invalid report, collection, compilation,
+ * crash/non-assertion/non-candidate, pure candidate assertion, no test discovered, pass.
+ * TIMEOUT is engine-authoritative and is never produced here.
+ */
+export declare function normalizeRuntimeFacts(facts: RuntimeFacts): NormalizedRuntimeOutcome;
+//# sourceMappingURL=runtime-facts.d.ts.map

package/dist/engine/adapters/runtime-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-facts.d.ts","sourceRoot":"","sources":["../../../src/engine/adapters/runtime-facts.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,qBAAqB,EAAG,OAAgB,CAAC;AAEtD,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,mBAAmB,GACnB,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,GACf,aAAa,GACb,oBAAoB,CAAC;AAEzB,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,OAAO,qBAAqB,CAAC;IAC3C,mGAAmG;IACnG,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,+BAA+B,EAAE,MAAM,CAAC;IACxC,4BAA4B,EAAE,MAAM,CAAC;IACrC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,8BAA8B,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;CACrB;AAMD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,wBAAwB,CAoEnF"}

package/dist/engine/adapters/runtime-facts.js

@@ -0,0 +1,73 @@
+// Pure runtime-fact normalizer shared by every in-process official profile (node:test today;
+// vitest/jest/bun/pytest are prepared for but not wired in this slice). No filesystem, process,
+// network, clock, or candidate-selection logic belongs here.
+export const RUNTIME_FACTS_VERSION = "1.0.0";
+function nonNegativeSafeInteger(value) {
+    return Number.isSafeInteger(value) && value >= 0;
+}
+/**
+ * Fail-closed priority: infrastructure/invalid report, collection, compilation,
+ * crash/non-assertion/non-candidate, pure candidate assertion, no test discovered, pass.
+ * TIMEOUT is engine-authoritative and is never produced here.
+ */
+export function normalizeRuntimeFacts(facts) {
+    if (facts.factsVersion !== RUNTIME_FACTS_VERSION) {
+        throw new TypeError(`Unsupported runtime facts version: ${facts.factsVersion}`);
+    }
+    if (!facts.reportValid)
+        return { outcome: "INFRA_ERROR", attributed: false };
+    const counts = [
+        facts.candidateTestsDiscovered,
+        facts.nonCandidateFailureCount,
+        facts.candidateCollectionFailureCount,
+        facts.candidateCompileFailureCount,
+        facts.candidateFailureCount,
+    ];
+    if (!counts.every(nonNegativeSafeInteger)) {
+        return { outcome: "INFRA_ERROR", attributed: false };
+    }
+    const candidateFailureFacts = facts.candidateCollectionFailureCount +
+        facts.candidateCompileFailureCount +
+        facts.candidateFailureCount;
+    if ((!facts.hasCandidate && (facts.candidateTestsDiscovered > 0 || candidateFailureFacts > 0)) ||
+        (facts.processExitedZero && (candidateFailureFacts > 0 || facts.nonCandidateFailureCount > 0))) {
+        return { outcome: "INFRA_ERROR", attributed: false };
+    }
+    if (!facts.hasCandidate) {
+        const controlClean = facts.processExitedZero && facts.nonCandidateFailureCount === 0;
+        return { outcome: controlClean ? "PASS" : "PROCESS_CRASH", attributed: false };
+    }
+    if (facts.candidateTestsDiscovered === 0) {
+        if (facts.candidateCollectionFailureCount > 0) {
+            return { outcome: "COLLECTION_FAILURE", attributed: false };
+        }
+        if (facts.candidateCompileFailureCount > 0) {
+            return { outcome: "COMPILE_FAILURE", attributed: false };
+        }
+        const crashLike = facts.candidateFailureCount > 0 ||
+            facts.nonCandidateFailureCount > 0 ||
+            !facts.processExitedZero;
+        return { outcome: crashLike ? "PROCESS_CRASH" : "NO_TEST_DISCOVERED", attributed: false };
+    }
+    if (facts.candidateCollectionFailureCount > 0) {
+        return { outcome: "COLLECTION_FAILURE", attributed: false };
+    }
+    if (facts.candidateCompileFailureCount > 0) {
+        return { outcome: "COMPILE_FAILURE", attributed: false };
+    }
+    if (facts.nonCandidateFailureCount > 0) {
+        return { outcome: "PROCESS_CRASH", attributed: false };
+    }
+    if (facts.candidateFailureCount > 0) {
+        const assertionOnly = facts.candidateFailuresAllAssertions;
+        return {
+            outcome: assertionOnly ? "ASSERTION_FAILURE" : "PROCESS_CRASH",
+            attributed: assertionOnly,
+        };
+    }
+    return {
+        outcome: facts.processExitedZero ? "PASS" : "PROCESS_CRASH",
+        attributed: facts.processExitedZero,
+    };
+}
+//# sourceMappingURL=runtime-facts.js.map

package/dist/engine/adapters/runtime-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-facts.js","sourceRoot":"","sources":["../../../src/engine/adapters/runtime-facts.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,gGAAgG;AAChG,6DAA6D;AAE7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAgB,CAAC;AA8BtD,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAmB;IACvD,IAAI,KAAK,CAAC,YAAY,KAAK,qBAAqB,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,sCAAsC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAE7E,MAAM,MAAM,GAAG;QACb,KAAK,CAAC,wBAAwB;QAC9B,KAAK,CAAC,wBAAwB;QAC9B,KAAK,CAAC,+BAA+B;QACrC,KAAK,CAAC,4BAA4B;QAClC,KAAK,CAAC,qBAAqB;KAC5B,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,qBAAqB,GACzB,KAAK,CAAC,+BAA+B;QACrC,KAAK,CAAC,4BAA4B;QAClC,KAAK,CAAC,qBAAqB,CAAC;IAC9B,IACE,CAAC,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC,IAAI,qBAAqB,GAAG,CAAC,CAAC,CAAC;QAC1F,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,qBAAqB,GAAG,CAAC,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,CAAC,CAAC,EAC9F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,CAAC;QACrF,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACjF,CAAC;IAED,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,SAAS,GACb,KAAK,CAAC,qBAAqB,GAAG,CAAC;YAC/B,KAAK,CAAC,wBAAwB,GAAG,CAAC;YAClC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC5F,CAAC;IAED,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,KAAK,CAAC,8BAA8B,CAAC;QAC3D,OAAO;YACL,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,eAAe;YAC9D,UAAU,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe;QAC3D,UAAU,EAAE,KAAK,CAAC,iBAAiB;KACpC,CAAC;AACJ,CAAC"}

package/dist/engine/connection.d.ts

@@ -0,0 +1,22 @@
+export type CodexProjectConfigStatus = "EMITTED" | "CREATED" | "UNCHANGED" | "CONFLICT";
+export interface CodexProjectConfigResult {
+    status: CodexProjectConfigStatus;
+    path: string;
+    content: string;
+}
+export type ConnectionClient = "codex" | "claude-code" | "mcp";
+export type ClientConnectionStatus = "EMITTED" | "CREATED" | "UNCHANGED" | "REMOVED" | "ABSENT" | "CONFLICT";
+export interface ClientConnectionArtifact {
+    kind: "configuration" | "skill" | "descriptor";
+    path: string | null;
+    content: string;
+}
+export interface ClientConnectionResult {
+    client: ConnectionClient;
+    status: ClientConnectionStatus;
+    artifacts: ClientConnectionArtifact[];
+}
+export declare function createCodexProjectConfig(requestedRoot: string, requestedCliEntry: string, write: boolean): Promise<CodexProjectConfigResult>;
+export declare function connectClient(requestedRoot: string, requestedCliEntry: string, client: ConnectionClient, write: boolean): Promise<ClientConnectionResult>;
+export declare function disconnectClient(requestedRoot: string, requestedCliEntry: string, client: Exclude<ConnectionClient, "mcp">, write: boolean): Promise<ClientConnectionResult>;
+//# sourceMappingURL=connection.d.ts.map

package/dist/engine/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/engine/connection.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC;AAExF,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,wBAAwB,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,aAAa,GAAG,KAAK,CAAC;AAC/D,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,SAAS,GACT,WAAW,GACX,SAAS,GACT,QAAQ,GACR,UAAU,CAAC;AAEf,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,eAAe,GAAG,OAAO,GAAG,YAAY,CAAC;IAC/C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,wBAAwB,EAAE,CAAC;CACvC;AAsDD,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,wBAAwB,CAAC,CA4BnC;AA2MD,wBAAsB,aAAa,CACjC,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,sBAAsB,CAAC,CAwCjC;AAED,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,EACxC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,sBAAsB,CAAC,CAkCjC"}

package/dist/engine/connection.js

@@ -0,0 +1,343 @@
+import { lstat, mkdir, readFile, realpath, stat, unlink, writeFile } from "node:fs/promises";
+import path from "node:path";
+const CONFIG_DIRECTORY = ".codex";
+const CONFIG_FILE = "config.toml";
+function tomlString(value) {
+    return JSON.stringify(value);
+}
+function codexConfig(nodeExecutable, cliEntry, root) {
+    const argumentsToml = [cliEntry, "mcp", "--root", root].map(tomlString).join(", ");
+    return [
+        "[mcp_servers.assertledger]",
+        `command = ${tomlString(nodeExecutable)}`,
+        `args = [${argumentsToml}]`,
+        `cwd = ${tomlString(root)}`,
+        "",
+    ].join("\n");
+}
+async function existingConfigStatus(configPath, expectedContent) {
+    try {
+        const metadata = await lstat(configPath);
+        if (!metadata.isFile() || metadata.isSymbolicLink()) {
+            throw new Error("CONNECT_CONFIG_PATH_UNSAFE");
+        }
+        return (await readFile(configPath)).equals(Buffer.from(expectedContent, "utf8"))
+            ? "UNCHANGED"
+            : "CONFLICT";
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return "ABSENT";
+        throw error;
+    }
+}
+async function ensureSafeConfigDirectory(root, directory) {
+    try {
+        const metadata = await lstat(directory);
+        if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
+            throw new Error("CONNECT_CONFIG_PATH_UNSAFE");
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+        await mkdir(directory);
+    }
+    const resolvedDirectory = await realpath(directory);
+    if (path.dirname(resolvedDirectory) !== root ||
+        path.basename(resolvedDirectory) !== CONFIG_DIRECTORY) {
+        throw new Error("CONNECT_CONFIG_PATH_UNSAFE");
+    }
+}
+export async function createCodexProjectConfig(requestedRoot, requestedCliEntry, write) {
+    const root = await realpath(requestedRoot);
+    if (!(await stat(root)).isDirectory())
+        throw new Error("REPOSITORY_ROOT_NOT_DIRECTORY");
+    const cliEntry = await realpath(requestedCliEntry);
+    if (!(await stat(cliEntry)).isFile() ||
+        path.basename(cliEntry) !== "cli.js" ||
+        path.basename(path.dirname(cliEntry)) !== "dist") {
+        throw new Error("CONNECT_BUILD_REQUIRED");
+    }
+    const content = codexConfig(process.execPath, cliEntry, root);
+    const configDirectory = path.join(root, CONFIG_DIRECTORY);
+    const configPath = path.join(configDirectory, CONFIG_FILE);
+    if (!write)
+        return { status: "EMITTED", path: configPath, content };
+    await ensureSafeConfigDirectory(root, configDirectory);
+    const existing = await existingConfigStatus(configPath, content);
+    if (existing !== "ABSENT")
+        return { status: existing, path: configPath, content };
+    try {
+        await writeFile(configPath, content, { encoding: "utf8", flag: "wx" });
+        return { status: "CREATED", path: configPath, content };
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+        const raced = await existingConfigStatus(configPath, content);
+        return { status: raced === "UNCHANGED" ? "UNCHANGED" : "CONFLICT", path: configPath, content };
+    }
+}
+function mcpDescriptor(nodeExecutable, cliEntry, root) {
+    return `${JSON.stringify({
+        transport: "stdio",
+        command: nodeExecutable,
+        args: [cliEntry, "mcp", "--root", root],
+        cwd: root,
+    }, null, 2)}\n`;
+}
+function claudeCodeConfig(nodeExecutable, cliEntry, root) {
+    return `${JSON.stringify({
+        mcpServers: {
+            assertledger: {
+                type: "stdio",
+                command: nodeExecutable,
+                args: [cliEntry, "mcp", "--root", root],
+            },
+        },
+    }, null, 2)}\n`;
+}
+async function resolveBuiltEntry(requestedCliEntry) {
+    const cliEntry = await realpath(requestedCliEntry);
+    const metadata = await stat(cliEntry);
+    if (!metadata.isFile() ||
+        path.basename(cliEntry) !== "cli.js" ||
+        path.basename(path.dirname(cliEntry)) !== "dist") {
+        throw new Error("CONNECT_BUILD_REQUIRED");
+    }
+    return cliEntry;
+}
+async function resolveRepositoryRoot(requestedRoot) {
+    const root = await realpath(requestedRoot);
+    if (!(await stat(root)).isDirectory())
+        throw new Error("REPOSITORY_ROOT_NOT_DIRECTORY");
+    return root;
+}
+async function packagedSkill(cliEntry) {
+    const skillPath = path.join(path.dirname(path.dirname(cliEntry)), "integrations", "skill", "SKILL.md");
+    let metadata;
+    try {
+        metadata = await lstat(skillPath);
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            throw new Error("CONNECT_SKILL_REQUIRED");
+        }
+        throw error;
+    }
+    if (!metadata.isFile() || metadata.isSymbolicLink()) {
+        throw new Error("CONNECT_SKILL_PATH_UNSAFE");
+    }
+    return readFile(skillPath, "utf8");
+}
+function clientArtifacts(client, root, cliEntry, skill) {
+    if (client === "mcp") {
+        return [
+            {
+                kind: "descriptor",
+                path: null,
+                content: mcpDescriptor(process.execPath, cliEntry, root),
+            },
+        ];
+    }
+    if (skill === undefined)
+        throw new Error("CONNECT_SKILL_REQUIRED");
+    if (client === "codex") {
+        return [
+            {
+                kind: "configuration",
+                path: path.join(root, ".codex", "config.toml"),
+                content: codexConfig(process.execPath, cliEntry, root),
+            },
+            {
+                kind: "skill",
+                path: path.join(root, ".agents", "skills", "assertledger", "SKILL.md"),
+                content: skill,
+            },
+        ];
+    }
+    return [
+        {
+            kind: "configuration",
+            path: path.join(root, ".mcp.json"),
+            content: claudeCodeConfig(process.execPath, cliEntry, root),
+        },
+        {
+            kind: "skill",
+            path: path.join(root, ".claude", "skills", "assertledger", "SKILL.md"),
+            content: skill,
+        },
+    ];
+}
+function assertConnectionClient(client) {
+    if (client !== "codex" && client !== "claude-code" && client !== "mcp") {
+        throw new Error("CONNECT_CLIENT_UNSUPPORTED");
+    }
+}
+function assertManagedConnectionClient(client) {
+    if (client !== "codex" && client !== "claude-code") {
+        throw new Error("DISCONNECT_CLIENT_UNSUPPORTED");
+    }
+}
+async function validateParentPath(root, targetPath, errorCode) {
+    const relativeParent = path.relative(root, path.dirname(targetPath));
+    if (relativeParent.startsWith("..") || path.isAbsolute(relativeParent))
+        throw new Error(errorCode);
+    let current = root;
+    for (const component of relativeParent.split(path.sep).filter(Boolean)) {
+        current = path.join(current, component);
+        try {
+            const metadata = await lstat(current);
+            if (!metadata.isDirectory() || metadata.isSymbolicLink())
+                throw new Error(errorCode);
+            if ((await realpath(current)) !== current)
+                throw new Error(errorCode);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return;
+            throw error;
+        }
+    }
+}
+async function inspectArtifact(artifact, errorCode) {
+    if (artifact.path === null)
+        return "ABSENT";
+    try {
+        const metadata = await lstat(artifact.path);
+        if (!metadata.isFile() || metadata.isSymbolicLink())
+            throw new Error(errorCode);
+        return (await readFile(artifact.path)).equals(Buffer.from(artifact.content, "utf8"))
+            ? "UNCHANGED"
+            : "CONFLICT";
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return "ABSENT";
+        throw error;
+    }
+}
+async function createSafeParents(root, targetPath) {
+    const relativeParent = path.relative(root, path.dirname(targetPath));
+    let current = root;
+    for (const component of relativeParent.split(path.sep).filter(Boolean)) {
+        current = path.join(current, component);
+        try {
+            await mkdir(current);
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        const metadata = await lstat(current);
+        if (!metadata.isDirectory() ||
+            metadata.isSymbolicLink() ||
+            (await realpath(current)) !== current) {
+            throw new Error("CONNECT_CONFIG_PATH_UNSAFE");
+        }
+    }
+}
+async function rollbackCreated(artifacts) {
+    for (const artifact of [...artifacts].reverse()) {
+        if (artifact.path === null)
+            continue;
+        try {
+            if ((await inspectArtifact(artifact, "CONNECT_CONFIG_PATH_UNSAFE")) === "UNCHANGED") {
+                await unlink(artifact.path);
+            }
+        }
+        catch {
+            // Preserve the original failure; rollback is best-effort under the trusted local stability model.
+        }
+    }
+}
+export async function connectClient(requestedRoot, requestedCliEntry, client, write) {
+    assertConnectionClient(client);
+    const root = await resolveRepositoryRoot(requestedRoot);
+    const cliEntry = await resolveBuiltEntry(requestedCliEntry);
+    if (client === "mcp") {
+        return {
+            client,
+            status: "EMITTED",
+            artifacts: clientArtifacts(client, root, cliEntry, undefined),
+        };
+    }
+    const artifacts = clientArtifacts(client, root, cliEntry, await packagedSkill(cliEntry));
+    const states = [];
+    for (const artifact of artifacts) {
+        if (artifact.path === null)
+            continue;
+        await validateParentPath(root, artifact.path, "CONNECT_CONFIG_PATH_UNSAFE");
+        states.push(await inspectArtifact(artifact, "CONNECT_CONFIG_PATH_UNSAFE"));
+    }
+    if (states.includes("CONFLICT"))
+        return { client, status: "CONFLICT", artifacts };
+    if (!write)
+        return { client, status: "EMITTED", artifacts };
+    if (states.every((state) => state === "UNCHANGED")) {
+        return { client, status: "UNCHANGED", artifacts };
+    }
+    const created = [];
+    try {
+        for (const [index, artifact] of artifacts.entries()) {
+            if (artifact.path === null || states[index] === "UNCHANGED")
+                continue;
+            await createSafeParents(root, artifact.path);
+        }
+        for (const [index, artifact] of artifacts.entries()) {
+            if (artifact.path === null || states[index] === "UNCHANGED")
+                continue;
+            await writeFile(artifact.path, artifact.content, { encoding: "utf8", flag: "wx" });
+            created.push(artifact);
+        }
+    }
+    catch (error) {
+        await rollbackCreated(created);
+        throw error;
+    }
+    return { client, status: "CREATED", artifacts };
+}
+export async function disconnectClient(requestedRoot, requestedCliEntry, client, write) {
+    assertManagedConnectionClient(client);
+    const root = await resolveRepositoryRoot(requestedRoot);
+    const cliEntry = await resolveBuiltEntry(requestedCliEntry);
+    const artifacts = clientArtifacts(client, root, cliEntry, await packagedSkill(cliEntry));
+    const states = [];
+    for (const artifact of artifacts) {
+        if (artifact.path === null)
+            continue;
+        await validateParentPath(root, artifact.path, "DISCONNECT_PATH_UNSAFE");
+        states.push(await inspectArtifact(artifact, "DISCONNECT_PATH_UNSAFE"));
+    }
+    if (states.includes("CONFLICT"))
+        return { client, status: "CONFLICT", artifacts };
+    if (!write)
+        return { client, status: "EMITTED", artifacts };
+    if (states.every((state) => state === "ABSENT"))
+        return { client, status: "ABSENT", artifacts };
+    const removed = [];
+    try {
+        for (const [index, artifact] of artifacts.entries()) {
+            if (artifact.path === null || states[index] === "ABSENT")
+                continue;
+            await unlink(artifact.path);
+            removed.push(artifact);
+        }
+    }
+    catch (error) {
+        for (const artifact of [...removed].reverse()) {
+            if (artifact.path === null)
+                continue;
+            try {
+                await writeFile(artifact.path, artifact.content, { encoding: "utf8", flag: "wx" });
+            }
+            catch {
+                // Preserve the original failure; rollback is best-effort under the trusted local stability model.
+            }
+        }
+        throw error;
+    }
+    return { client, status: "REMOVED", artifacts };
+}
+//# sourceMappingURL=connection.js.map