clinkx 1.1.0 → 1.1.2

package/dist/project-verification/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/project-verification/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAiB,MAAM,eAAe,CAAC;AAE9D,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAsB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACtF,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,MAAc;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;AAC7F,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,SAAS,GAAG,KAAK;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9G,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACtG,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IAC5E,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC;YACpE,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM;YACtB,KAAK,IAAI,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAChE,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,QAAkB;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC;QACzB,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;IACrD,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AACpG,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc;IAC7D,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AACD,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5F,MAAM,UAAU,aAAa;IAC3B,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,uCAAuC;QAC7H,oCAAoC,EAAE,sCAAsC,EAAE,qCAAqC;QACnH,sCAAsC,EAAE,8BAA8B,EAAE,+BAA+B,EAAE,uBAAuB;QAChI,mDAAmD,EAAE,yCAAyC,EAAE,iCAAiC;QACjI,0DAA0D;QAC1D,6CAA6C,EAAE,kCAAkC,EAAE,mCAAmC,CAAC,CAAC;IAC1H,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/project-verification/process.d.ts

@@ -0,0 +1,7 @@
+import { type Manifest } from "./contract.js";
+export declare function runCommand(project: string, directory: string, check: Manifest["checks"][number], signal: AbortSignal): Promise<{
+    exit_code: number | null;
+    signal: string | null;
+    reason: "passed" | "nonzero_exit" | "spawn_error" | "timeout" | "cancelled" | "capture_limit" | "cleanup_failure";
+    cleanup_ok: boolean;
+}>;

package/dist/project-verification/process.js

@@ -0,0 +1,115 @@
+import { spawn } from "node:child_process";
+import { writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { safePath } from "./files.js";
+const CAPTURE_LIMIT = 1024 * 1024;
+const BASELINE = ["PATH", "HOME", "USER", "LANG", "TMPDIR"];
+function signalGroup(child, signal) {
+    if (child.pid === undefined)
+        return true;
+    try {
+        if (process.platform === "win32")
+            return child.kill(signal);
+        process.kill(-child.pid, signal);
+        return true;
+    }
+    catch (error) {
+        return error.code === "ESRCH";
+    }
+}
+function groupGone(child) {
+    if (child.pid === undefined)
+        return true;
+    try {
+        process.kill(process.platform === "win32" ? child.pid : -child.pid, 0);
+        return false;
+    }
+    catch (error) {
+        return error.code === "ESRCH";
+    }
+}
+export async function runCommand(project, directory, check, signal) {
+    const env = {};
+    for (const key of [...BASELINE, ...check.env_allowlist])
+        if (process.env[key] !== undefined)
+            env[key] = process.env[key];
+    const cwd = safePath(project, check.cwd, true);
+    return new Promise((resolveResult, reject) => {
+        let reason;
+        let exitCode = null;
+        let exitSignal = null;
+        let finishing = false;
+        const stdout = [], stderr = [];
+        let stdoutSize = 0, stderrSize = 0;
+        const child = spawn(check.command, check.args, { cwd, env, shell: false, detached: process.platform !== "win32", stdio: ["ignore", "pipe", "pipe"] });
+        let escalation;
+        const stop = (why) => {
+            reason ??= why;
+            signalGroup(child, "SIGTERM");
+            escalation ??= setTimeout(() => {
+                signalGroup(child, "SIGKILL");
+                child.stdout.destroy();
+                child.stderr.destroy();
+            }, 500);
+        };
+        const onAbort = () => stop("cancelled");
+        const timer = setTimeout(() => stop("timeout"), check.timeout_seconds * 1000);
+        signal.addEventListener("abort", onAbort, { once: true });
+        if (signal.aborted)
+            onAbort();
+        child.stdout.on("data", (chunk) => {
+            const keep = chunk.subarray(0, Math.max(0, CAPTURE_LIMIT - stdoutSize));
+            if (keep.length > 0)
+                stdout.push(keep);
+            stdoutSize += keep.length;
+            if (keep.length !== chunk.length)
+                stop("capture_limit");
+        });
+        child.stderr.on("data", (chunk) => {
+            const keep = chunk.subarray(0, Math.max(0, CAPTURE_LIMIT - stderrSize));
+            if (keep.length > 0)
+                stderr.push(keep);
+            stderrSize += keep.length;
+            if (keep.length !== chunk.length)
+                stop("capture_limit");
+        });
+        child.on("error", () => { reason ??= "spawn_error"; });
+        child.on("exit", (code, sig) => {
+            exitCode = code;
+            exitSignal = sig;
+            signalGroup(child, "SIGTERM");
+            escalation ??= setTimeout(() => {
+                signalGroup(child, "SIGKILL");
+                child.stdout.destroy();
+                child.stderr.destroy();
+            }, 500);
+        });
+        child.on("close", async () => {
+            if (finishing)
+                return;
+            finishing = true;
+            clearTimeout(timer);
+            if (escalation)
+                clearTimeout(escalation);
+            signal.removeEventListener("abort", onAbort);
+            signalGroup(child, "SIGTERM");
+            if (!groupGone(child)) {
+                await new Promise((done) => setTimeout(done, 100));
+                signalGroup(child, "SIGKILL");
+                for (let attempt = 0; attempt < 20 && !groupGone(child); attempt++)
+                    await new Promise((done) => setTimeout(done, 25));
+            }
+            const cleanup_ok = groupGone(child);
+            try {
+                writeFileSync(join(directory, "stdout.log"), Buffer.concat(stdout), { flag: "wx", mode: 0o600 });
+                writeFileSync(join(directory, "stderr.log"), Buffer.concat(stderr), { flag: "wx", mode: 0o600 });
+                resolveResult({ exit_code: exitCode, signal: exitSignal, cleanup_ok,
+                    reason: reason ?? (!cleanup_ok ? "cleanup_failure" : exitCode === 0 && exitSignal === null ? "passed" : "nonzero_exit") });
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+    });
+}
+//# sourceMappingURL=process.js.map

package/dist/project-verification/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/project-verification/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC5D,SAAS,WAAW,CAAC,KAAmB,EAAE,MAAsB;IAC9D,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AAC/E,CAAC;AACD,SAAS,SAAS,CAAC,KAAmB;IACpC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC7F,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,SAAiB,EAAE,KAAiC,EAAE,MAAmB;IACzH,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC;QAAE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO,IAAI,OAAO,CAA8L,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;QACxO,IAAI,MAA6E,CAAC;QAClF,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,MAAM,GAAa,EAAE,EAAE,MAAM,GAAa,EAAE,CAAC;QACnD,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtJ,IAAI,UAAsC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,GAAkB,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,CAAC;YACf,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC9B,UAAU,KAAK,UAAU,CAAC,GAAG,EAAE;gBAC7B,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBAC9B,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjD,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;QAC9E,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAClE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAClE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC7B,QAAQ,GAAG,IAAI,CAAC;YAAC,UAAU,GAAG,GAAG,CAAC;YAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACjE,UAAU,KAAK,UAAU,CAAC,GAAG,EAAE;gBAC7B,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAChF,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAC3B,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,UAAU;gBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;YAC9D,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBACnD,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE;oBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACxH,CAAC;YACD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjG,aAAa,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;oBACjE,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC/H,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/project-verification/runner.d.ts

@@ -0,0 +1,35 @@
+import { type VerificationCoverage } from "../../clinkx-workflows/dist/verification-proof.js";
+export interface Options {
+    project: string;
+    manifest: string;
+    evidence: string;
+}
+type ProjectReason = {
+    code: string;
+    check_id: string;
+};
+export declare function runProject(options: Options, signal: AbortSignal): Promise<{
+    status: import("../../clinkx-workflows/dist/verification-proof.js").VerificationStatus;
+    checks: readonly {
+        check_id: string;
+        status: VerificationCoverage["status"];
+        reasons: readonly ProjectReason[];
+    }[];
+    reasons: readonly ProjectReason[];
+    version: number;
+    evidence_directory: string;
+    expectations_sha256: string;
+}>;
+export declare function inspectProject(options: Options, pin: string): {
+    status: import("../../clinkx-workflows/dist/verification-proof.js").VerificationStatus;
+    checks: readonly {
+        check_id: string;
+        status: VerificationCoverage["status"];
+        reasons: readonly ProjectReason[];
+    }[];
+    reasons: readonly ProjectReason[];
+    version: number;
+    evidence_directory: string;
+    expectations_sha256: string;
+};
+export {};

package/dist/project-verification/runner.js

@@ -0,0 +1,185 @@
+import { mkdirSync, readdirSync, realpathSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
+import { evaluateVerificationCoverage } from "../../clinkx-workflows/dist/verification-proof.js";
+import { CompletionSchema, ExpectedSchema, ObservationsSchema, RelativeFile, ResultSchema } from "./contract.js";
+import { fileFact, inside, json, PACKAGE_ROOT, readBounded, readManifest, runtimeDigest, safePath, save, sha, snapshot } from "./files.js";
+import { runCommand } from "./process.js";
+const EXPECTED_LIMIT = 2 * 1024 * 1024;
+function projectOptions(options) {
+    const project = realpathSync(resolve(options.project));
+    safePath(project, ".", true);
+    const manifest_path = RelativeFile.parse(options.manifest);
+    const captured = readManifest(project, manifest_path);
+    const manifest = captured.manifest;
+    for (const check of manifest.checks)
+        safePath(project, check.cwd, true);
+    const inputs = snapshot(project, manifest);
+    const source_sha256 = sha(json({ inputs, manifest_sha256: captured.sha256 }));
+    return { project, manifest_path, manifest, inputs, source_sha256 };
+}
+function currentSource(project, manifest_path) {
+    try {
+        const captured = readManifest(project, manifest_path);
+        return sha(json({ inputs: snapshot(project, captured.manifest), manifest_sha256: captured.sha256 }));
+    }
+    catch {
+        return null;
+    }
+}
+function note(coverage, code, severity, check_id = "") {
+    const status = coverage.status === "failed" || severity === "failed" ? "failed"
+        : coverage.status === "inapplicable" || severity === "inapplicable" ? "inapplicable" : "incomplete";
+    const reason = { code, check_id };
+    const checks = check_id === "" ? coverage.checks : coverage.checks.map((check) => check.check_id !== check_id ? check : {
+        ...check, status: check.status === "failed" || severity === "failed" ? "failed"
+            : check.status === "inapplicable" || severity === "inapplicable" ? "inapplicable" : "incomplete",
+        reasons: [...check.reasons, reason],
+    });
+    return { ...coverage, status, checks, reasons: [...coverage.reasons, reason] };
+}
+function problem(code, severity = "failed") {
+    return { status: severity, checks: [], reasons: [{ code, check_id: "" }] };
+}
+export async function runProject(options, signal) {
+    if (process.platform === "win32")
+        throw new Error("project verification requires POSIX process-group cleanup");
+    const initial = projectOptions(options);
+    const identity = { source_sha256: initial.source_sha256, build_sha256: runtimeDigest(),
+        procedure_sha256: sha(json(initial.manifest)), boundary: "project-command-v1" };
+    const parent = realpathSync(dirname(resolve(options.evidence)));
+    const evidence = join(parent, basename(resolve(options.evidence)));
+    if (inside(initial.project, evidence) || inside(PACKAGE_ROOT, evidence))
+        throw new Error("evidence must be outside project and package");
+    const attempt = randomUUID();
+    const expectations = { version: 1, identity, superseded_attempts: [], checks: initial.manifest.checks.map((check) => ({
+            check_id: check.id, attempt_id: `${attempt}-${check.id}`, producer: check.id, artifact_path: `checks/${check.id}/result.json`,
+        })) };
+    const expected = ExpectedSchema.parse({ version: 1, project: initial.project, manifest_path: initial.manifest_path,
+        manifest: initial.manifest, inputs: initial.inputs, node_version: process.version, expectations });
+    if (Buffer.byteLength(json(expected)) > EXPECTED_LIMIT)
+        throw new Error("serialized expectations exceed 2 MiB");
+    mkdirSync(evidence, { mode: 0o700 });
+    save(evidence, "expected.json", expected);
+    const expectations_sha256 = fileFact(evidence, "expected.json").sha256;
+    mkdirSync(join(evidence, "checks"), { mode: 0o700 });
+    const observations = [];
+    for (const [index, check] of initial.manifest.checks.entries()) {
+        if (signal.aborted)
+            break;
+        const owner = expectations.checks[index];
+        const directory = join(evidence, "checks", check.id);
+        mkdirSync(directory, { mode: 0o700 });
+        const before = currentSource(initial.project, initial.manifest_path);
+        const result = await runCommand(initial.project, directory, check, signal);
+        const record = ResultSchema.parse({ version: 1, check_id: check.id, attempt_id: owner.attempt_id,
+            source_before_sha256: before ?? "0".repeat(64), source_after_sha256: currentSource(initial.project, initial.manifest_path), ...result,
+            stdout: fileFact(evidence, `checks/${check.id}/stdout.log`), stderr: fileFact(evidence, `checks/${check.id}/stderr.log`) });
+        save(evidence, owner.artifact_path, record);
+        observations.push({ check_id: check.id, attempt_id: owner.attempt_id, producer: check.id, identity,
+            provenance: "trusted_host", result: record.reason === "passed" && record.cleanup_ok ? "passed" : "failed",
+            artifact: fileFact(evidence, owner.artifact_path) });
+    }
+    save(evidence, "observations.json", observations);
+    save(evidence, "completion.json", { version: 1, observations_sha256: fileFact(evidence, "observations.json").sha256,
+        interrupted_signal: signal.aborted ? "cancelled" : null });
+    const result = inspectProject(options, expectations_sha256);
+    save(evidence, "proof.json", result);
+    return result;
+}
+export function inspectProject(options, pin) {
+    const evidence = realpathSync(resolve(options.evidence));
+    const finish = (coverage) => ({ version: 1, evidence_directory: evidence, expectations_sha256: pin, ...coverage });
+    let expected;
+    try {
+        const bytes = readBounded(evidence, "expected.json", EXPECTED_LIMIT);
+        if (sha(bytes) !== pin)
+            return finish(problem("expectations_pin_mismatch"));
+        expected = ExpectedSchema.parse(JSON.parse(bytes.toString("utf8")));
+        if (expected.expectations.identity.boundary !== "project-command-v1")
+            return finish(problem("wrong_procedure_boundary"));
+        const checkIds = expected.manifest.checks.map((check) => check.id);
+        if (expected.expectations.checks.length !== checkIds.length || expected.expectations.checks.some((check, index) => check.check_id !== checkIds[index] || check.producer !== checkIds[index] || check.artifact_path !== `checks/${checkIds[index]}/result.json`)) {
+            return finish(problem("invalid_check_ownership"));
+        }
+    }
+    catch (error) {
+        return finish(problem(error.code === "ENOENT" ? "missing_expectations" : "invalid_expectations", error.code === "ENOENT" ? "incomplete" : "failed"));
+    }
+    let observations = [];
+    let observationsProblem;
+    try {
+        observations = ObservationsSchema.parse(JSON.parse(readBounded(evidence, "observations.json", 256 * 1024).toString("utf8")));
+    }
+    catch (error) {
+        observationsProblem = error.code === "ENOENT" ? "missing_observations" : "invalid_observations";
+    }
+    const facts = expected.expectations.checks.map((check) => {
+        try {
+            return { ...fileFact(evidence, check.artifact_path), status: "readable" };
+        }
+        catch (error) {
+            return { path: check.artifact_path, status: error.code === "ENOENT" ? "missing"
+                    : error.code === "E_PATH_UNSAFE" ? "escaped" : "unreadable" };
+        }
+    });
+    let coverage = evaluateVerificationCoverage(expected.expectations, observations, facts);
+    if (observationsProblem)
+        coverage = note(coverage, observationsProblem, observationsProblem === "missing_observations" ? "incomplete" : "failed");
+    try {
+        const completion = CompletionSchema.parse(JSON.parse(readBounded(evidence, "completion.json", 4096).toString("utf8")));
+        if (completion.observations_sha256 !== fileFact(evidence, "observations.json").sha256)
+            coverage = note(coverage, "observations_integrity", "failed");
+        if (completion.interrupted_signal !== null)
+            coverage = note(coverage, "interrupted", "failed");
+    }
+    catch (error) {
+        coverage = note(coverage, "unpublished_attempt", error.code === "ENOENT" ? "incomplete" : "failed");
+    }
+    try {
+        const allowed = new Set(["expected.json", "observations.json", "completion.json", "checks", "proof.json"]);
+        if (readdirSync(evidence).some((name) => !allowed.has(name)))
+            coverage = note(coverage, "unexpected_evidence", "failed");
+        const checksRoot = safePath(evidence, "checks", true);
+        if (readdirSync(checksRoot).some((name) => !expected.manifest.checks.some((check) => check.id === name)))
+            coverage = note(coverage, "unexpected_evidence", "failed");
+    }
+    catch {
+        coverage = note(coverage, "missing_check_directory", "incomplete");
+    }
+    for (const check of expected.expectations.checks) {
+        try {
+            const record = ResultSchema.parse(JSON.parse(readBounded(evidence, check.artifact_path, 16 * 1024).toString("utf8")));
+            if (record.check_id !== check.check_id || record.attempt_id !== check.attempt_id
+                || record.stdout.path !== `checks/${check.check_id}/stdout.log` || record.stderr.path !== `checks/${check.check_id}/stderr.log`) {
+                coverage = note(coverage, "result_ownership_mismatch", "failed", check.check_id);
+            }
+            if (record.reason !== "passed" || !record.cleanup_ok || record.exit_code !== 0 || record.signal !== null)
+                coverage = note(coverage, "command_failed", "failed", check.check_id);
+            if (record.source_before_sha256 !== expected.expectations.identity.source_sha256 || record.source_after_sha256 !== expected.expectations.identity.source_sha256)
+                coverage = note(coverage, "inputs_changed_during_run", "inapplicable", check.check_id);
+            for (const stream of [record.stdout, record.stderr]) {
+                const actual = fileFact(evidence, stream.path);
+                if (actual.sha256 !== stream.sha256 || actual.size_bytes !== stream.size_bytes)
+                    coverage = note(coverage, "capture_integrity", "failed", check.check_id);
+            }
+            const names = readdirSync(safePath(evidence, `checks/${check.check_id}`, true));
+            if (names.some((name) => !["result.json", "stdout.log", "stderr.log"].includes(name)))
+                coverage = note(coverage, "unexpected_evidence", "failed", check.check_id);
+        }
+        catch (error) {
+            coverage = note(coverage, error.code === "ENOENT" ? "missing_check_evidence" : "invalid_check_evidence", error.code === "ENOENT" ? "incomplete" : "failed", check.check_id);
+        }
+    }
+    try {
+        const project = realpathSync(resolve(options.project));
+        if (project !== expected.project || options.manifest !== expected.manifest_path || currentSource(project, options.manifest) !== expected.expectations.identity.source_sha256
+            || process.version !== expected.node_version || runtimeDigest() !== expected.expectations.identity.build_sha256)
+            coverage = note(coverage, "current_identity_mismatch", "inapplicable");
+    }
+    catch {
+        coverage = note(coverage, "current_identity_unavailable", "inapplicable");
+    }
+    return finish(coverage);
+}
+//# sourceMappingURL=runner.js.map

package/dist/project-verification/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/project-verification/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,4BAA4B,EAA2D,MAAM,mDAAmD,CAAC;AAC1J,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACjH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3I,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAQ1C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM;QAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9E,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACrE,CAAC;AACD,SAAS,aAAa,CAAC,OAAe,EAAE,aAAqB;IAC3D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AACD,SAAS,IAAI,CAAC,QAAyB,EAAE,IAAY,EAAE,QAAkD,EAAE,QAAQ,GAAG,EAAE;IACtH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ;QAC7E,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,cAAc,IAAI,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC;IACtG,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtH,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAiB;YACtF,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc,IAAI,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,cAAuB,CAAC,CAAC,CAAC,YAAqB;QACpH,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;AACjF,CAAC;AACD,SAAS,OAAO,CAAC,IAAY,EAAE,WAAoC,QAAQ;IACzE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAgB,EAAE,MAAmB;IACpE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE;QACpF,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAA6B,EAAE,CAAC;IAC3F,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACzI,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7H,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,OAAO,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,EAAE,cAAc;SAC9H,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa;QAChH,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IACrG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAChH,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,mBAAmB,GAAG,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC;IACvE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,YAAY,GAA8B,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM;QAC1B,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACrD,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;YAC9F,oBAAoB,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,mBAAmB,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,MAAM;YACrI,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,KAAK,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,KAAK,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;QAC9H,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC5C,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ;YAChG,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;YACzG,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,MAAM;QACjH,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,GAAW;IAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,CAAC,QAAyB,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,kBAAkB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;IACpI,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;QACrE,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAC5E,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,oBAAoB;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACzH,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAChH,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,UAAU,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/I,OAAO,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,OAAO,CAAE,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,EACvH,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,YAAY,GAA8B,EAAE,CAAC;IACjD,IAAI,mBAAgF,CAAC;IACrF,IAAI,CAAC;QAAC,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACrI,OAAO,KAAK,EAAE,CAAC;QACb,mBAAmB,GAAI,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IAC7H,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvD,IAAI,CAAC;YAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC;QAAC,CAAC;QAC3F,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAG,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAkB;oBACjI,CAAC,CAAE,KAA+B,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,YAAqB,EAAE,CAAC;QAAC,CAAC;IACjH,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,GAAoB,4BAA4B,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACzG,IAAI,mBAAmB;QAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,mBAAmB,KAAK,sBAAsB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClJ,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvH,IAAI,UAAU,CAAC,mBAAmB,KAAK,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,MAAM;YAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,wBAAwB,EAAE,QAAQ,CAAC,CAAC;QACrJ,IAAI,UAAU,CAAC,kBAAkB,KAAK,IAAI;YAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,EAAG,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IACnJ,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;QAC3G,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QACzH,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;YAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,CAAC,CAAC;IACvK,CAAC;IAAC,MAAM,CAAC;QAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,yBAAyB,EAAE,YAAY,CAAC,CAAC;IAAC,CAAC;IAC/E,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtH,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;mBAC3E,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,KAAK,CAAC,QAAQ,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,KAAK,CAAC,QAAQ,aAAa,EAAE,CAAC;gBAClI,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,2BAA2B,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;gBAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChL,IAAI,MAAM,CAAC,oBAAoB,KAAK,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC,mBAAmB,KAAK,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,aAAa;gBAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,2BAA2B,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxP,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;oBAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3J,CAAC;YACD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YAChF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpK,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAG,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,wBAAwB,EAC/H,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,aAAa,IAAI,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,aAAa;eACvK,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,YAAY,IAAI,aAAa,EAAE,KAAK,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY;YAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,2BAA2B,EAAE,cAAc,CAAC,CAAC;IAC5L,CAAC;IAAC,MAAM,CAAC;QAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,8BAA8B,EAAE,cAAc,CAAC,CAAC;IAAC,CAAC;IACtF,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC"}

package/dist/project-verification/service.d.ts

@@ -0,0 +1,37 @@
+import { attachWorkflowVerification, WORKFLOW_VERIFICATION_VERSION } from "../../clinkx-workflows/dist/workflow-verification.js";
+import { inspectProject, runProject, type Options } from "./runner.js";
+export interface VerificationAttachment {
+    runId: string;
+    requestId: string;
+    pin: string;
+    runsRoot?: string;
+}
+/** Internal operations usable only while their owning service operation is active. */
+export interface NativeVerificationOperations {
+    readonly signal: AbortSignal;
+    run(options: Options): ReturnType<typeof runProject>;
+    inspect(options: Options, originalPin: string): ReturnType<typeof inspectProject>;
+    attach(options: Options, input: VerificationAttachment): Promise<{
+        schema_version: typeof WORKFLOW_VERIFICATION_VERSION;
+        run_id: string;
+        status: ReturnType<typeof inspectProject>["status"];
+        verification: Awaited<ReturnType<typeof attachWorkflowVerification>>;
+    }>;
+}
+export declare function latchVerificationAdmissionForShutdown(): void;
+export declare function shutdownVerificationTools(): Promise<void>;
+/** One fail-fast native-verification slot shared by MCP controls and the repair host. */
+export declare class ProjectVerificationService {
+    private readonly semaphore;
+    private readonly operations;
+    private closed;
+    constructor();
+    assertAdmission(signal?: AbortSignal): void;
+    latch(): void;
+    shutdown(): Promise<void>;
+    /** Await all commands and owned cleanup inside the callback before releasing the slot. */
+    operation<T>(callback: (native: NativeVerificationOperations) => T | Promise<T>, signal?: AbortSignal): Promise<T>;
+    run(options: Options, signal?: AbortSignal): ReturnType<typeof runProject>;
+    inspect(options: Options, originalPin: string, signal?: AbortSignal): Promise<ReturnType<typeof inspectProject>>;
+    attach(options: Options, input: VerificationAttachment, signal?: AbortSignal): ReturnType<NativeVerificationOperations["attach"]>;
+}

package/dist/project-verification/service.js

@@ -0,0 +1,151 @@
+import { realpathSync } from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { isPathWithinAllowedRoots, parseAllowedRootsEnv } from "../allowed-roots.js";
+import { Semaphore } from "../concurrency.js";
+import { CancellationError, ExecutionError, InvalidParamsError } from "../errors.js";
+import { getRunsDir } from "../../clinkx-workflows/dist/config.js";
+import { attachWorkflowVerification, WORKFLOW_VERIFICATION_VERSION } from "../../clinkx-workflows/dist/workflow-verification.js";
+import { ExpectedSchema } from "./contract.js";
+import { inside, PACKAGE_ROOT, readBounded, sha } from "./files.js";
+import { inspectProject, runProject } from "./runner.js";
+function authorizedOptions(input, inspecting) {
+    try {
+        const project = realpathSync(input.project);
+        const evidence = inspecting ? realpathSync(input.evidence)
+            : join(realpathSync(dirname(input.evidence)), basename(input.evidence));
+        const sourceRoots = parseAllowedRootsEnv({ includeArtifactOnly: false, rejectBroadRoots: true });
+        const ioRoots = parseAllowedRootsEnv({ rejectBroadRoots: true });
+        if (!isPathWithinAllowedRoots(project, sourceRoots) || !isPathWithinAllowedRoots(evidence, ioRoots)
+            || inside(project, evidence) || inside(PACKAGE_ROOT, evidence)) {
+            throw new InvalidParamsError("Project/evidence paths are not authorized: use a source allowed root and an I/O allowed root outside the project and installation.");
+        }
+        return { project, manifest: input.manifest, evidence };
+    }
+    catch (error) {
+        if (error instanceof InvalidParamsError)
+            throw error;
+        throw new InvalidParamsError("Project or evidence path is unavailable; use absolute authorized paths and an existing evidence parent.");
+    }
+}
+const services = new Set();
+let shuttingDown = false;
+export function latchVerificationAdmissionForShutdown() {
+    shuttingDown = true;
+    for (const service of services)
+        service.latch();
+}
+export async function shutdownVerificationTools() {
+    latchVerificationAdmissionForShutdown();
+    await Promise.all([...services].map((service) => service.shutdown()));
+}
+/** One fail-fast native-verification slot shared by MCP controls and the repair host. */
+export class ProjectVerificationService {
+    semaphore = new Semaphore(1);
+    operations = new Map();
+    closed = false;
+    constructor() { services.add(this); }
+    assertAdmission(signal) {
+        if (signal?.aborted)
+            throw new CancellationError();
+        if (this.closed || shuttingDown)
+            throw new ExecutionError("Verification controls are shutting down; no new operation was started.");
+    }
+    latch() {
+        this.closed = true;
+        for (const controller of this.operations.keys())
+            controller.abort();
+    }
+    async shutdown() {
+        this.latch();
+        try {
+            await Promise.allSettled(this.operations.values());
+        }
+        finally {
+            services.delete(this);
+        }
+    }
+    /** Await all commands and owned cleanup inside the callback before releasing the slot. */
+    async operation(callback, signal) {
+        this.assertAdmission(signal);
+        this.semaphore.acquire();
+        const controller = new AbortController();
+        const onAbort = () => controller.abort();
+        signal?.addEventListener("abort", onAbort, { once: true });
+        if (signal?.aborted)
+            controller.abort();
+        let active = true;
+        const check = () => {
+            if (controller.signal.aborted)
+                throw new CancellationError();
+            if (!active)
+                throw new ExecutionError("Native verification operation has already finished.");
+        };
+        const native = {
+            signal: controller.signal,
+            run: async (options) => {
+                check();
+                return await runProject(authorizedOptions(options, false), controller.signal);
+            },
+            inspect: (options, pin) => {
+                check();
+                return inspectProject(authorizedOptions(options, true), pin);
+            },
+            attach: async (input, attachment) => {
+                check();
+                const options = authorizedOptions(input, true);
+                const inspected = inspectProject(options, attachment.pin);
+                let identity = null;
+                let requiredChecks = null;
+                try {
+                    const bytes = readBounded(options.evidence, "expected.json", 2 * 1024 * 1024);
+                    if (sha(bytes) === attachment.pin) {
+                        const expected = ExpectedSchema.parse(JSON.parse(bytes.toString("utf8")));
+                        identity = expected.expectations.identity;
+                        requiredChecks = expected.expectations.checks.length;
+                    }
+                }
+                catch { /* Unauthenticated expectations retain unknown identity/counts. */ }
+                const verification = await attachWorkflowVerification({ runsRoot: attachment.runsRoot ?? getRunsDir(),
+                    runId: attachment.runId, requestId: attachment.requestId, pin: attachment.pin, evidence: options.evidence,
+                    coverage: { status: inspected.status, checks: inspected.checks, reasons: inspected.reasons },
+                    identity, requiredChecks, signal: controller.signal });
+                return { schema_version: WORKFLOW_VERIFICATION_VERSION, run_id: attachment.runId,
+                    status: inspected.status, verification };
+            },
+        };
+        // Registration precedes callback dispatch, including synchronous failure and shutdown.
+        const operation = Promise.resolve().then(async () => {
+            check();
+            try {
+                const value = await callback(native);
+                check();
+                return value;
+            }
+            catch (error) {
+                if (controller.signal.aborted || error instanceof CancellationError)
+                    throw new CancellationError();
+                throw error;
+            }
+        });
+        this.operations.set(controller, operation);
+        try {
+            return await operation;
+        }
+        finally {
+            active = false;
+            this.operations.delete(controller);
+            signal?.removeEventListener("abort", onAbort);
+            this.semaphore.release();
+        }
+    }
+    run(options, signal) {
+        return this.operation((native) => native.run(options), signal);
+    }
+    inspect(options, originalPin, signal) {
+        return this.operation((native) => native.inspect(options, originalPin), signal);
+    }
+    attach(options, input, signal) {
+        return this.operation((native) => native.attach(options, input), signal);
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/project-verification/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/project-verification/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,MAAM,sDAAsD,CAAC;AACjI,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAgB,MAAM,aAAa,CAAC;AAsBvE,SAAS,iBAAiB,CAAC,KAAc,EAAE,UAAmB;IAC5D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxD,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1E,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,MAAM,OAAO,GAAG,oBAAoB,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC;eAC9F,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,kBAAkB,CAAC,oIAAoI,CAAC,CAAC;QACrK,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAC;QACrD,MAAM,IAAI,kBAAkB,CAAC,yGAAyG,CAAC,CAAC;IAC1I,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;AACvD,IAAI,YAAY,GAAG,KAAK,CAAC;AAEzB,MAAM,UAAU,qCAAqC;IACnD,YAAY,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,OAAO,CAAC,KAAK,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,qCAAqC,EAAE,CAAC;IACxC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,yFAAyF;AACzF,MAAM,OAAO,0BAA0B;IACpB,SAAS,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7B,UAAU,GAAG,IAAI,GAAG,EAAqC,CAAC;IACnE,MAAM,GAAG,KAAK,CAAC;IAEvB,gBAAgB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAErC,eAAe,CAAC,MAAoB;QAClC,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,IAAI,YAAY;YAAE,MAAM,IAAI,cAAc,CAAC,wEAAwE,CAAC,CAAC;IACtI,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;gBACnD,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACpC,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,SAAS,CAAI,QAAkE,EAAE,MAAoB;QACzG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACxC,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;YAC7D,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,cAAc,CAAC,qDAAqD,CAAC,CAAC;QAC/F,CAAC,CAAC;QACF,MAAM,MAAM,GAAiC;YAC3C,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACrB,KAAK,EAAE,CAAC;gBACR,OAAO,MAAM,UAAU,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;gBACxB,KAAK,EAAE,CAAC;gBACR,OAAO,cAAc,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;gBAClC,KAAK,EAAE,CAAC;gBACR,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC/C,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC1D,IAAI,QAAQ,GAAG,IAAI,CAAC;gBACpB,IAAI,cAAc,GAAG,IAAI,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;oBAC9E,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,GAAG,EAAE,CAAC;wBAClC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;wBAC1E,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC;wBAC1C,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;oBACvD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;gBAC9E,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,UAAU,EAAE;oBACnG,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBACzG,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE;oBAC5F,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzD,OAAO,EAAE,cAAc,EAAE,6BAA6B,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK;oBAC9E,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;YAC7C,CAAC;SACF,CAAC;QACF,uFAAuF;QACvF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAClD,KAAK,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrC,KAAK,EAAE,CAAC;gBACR,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,YAAY,iBAAiB;oBAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACnG,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC;YAAC,OAAO,MAAM,SAAS,CAAC;QAAC,CAAC;gBACvB,CAAC;YACP,MAAM,GAAG,KAAK,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACnC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAgB,EAAE,MAAoB;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,CAAC,OAAgB,EAAE,WAAmB,EAAE,MAAoB;QACjE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,CAAC,OAAgB,EAAE,KAA6B,EAAE,MAAoB;QAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/provider-doctor.d.ts

@@ -0,0 +1,22 @@
+export interface ProviderDoctorAdapter {
+    readonly adapter: string | null;
+    readonly backend: string | null;
+    readonly roles: readonly string[];
+    readonly config: "ok" | "invalid";
+    readonly executable: "ok" | "missing" | "not_run";
+    readonly version: string;
+    readonly auth: "ok" | "failed" | "not_run";
+    readonly startup_required: readonly string[];
+    readonly registry?: "workflow_child";
+    readonly reason?: string;
+}
+export interface ProviderDoctorResult {
+    readonly version: 1;
+    readonly adapters: readonly ProviderDoctorAdapter[];
+    readonly verdict: "ready" | "blocked";
+    readonly blocked: readonly {
+        readonly adapter: string | null;
+        readonly reason: string;
+    }[];
+}
+export declare function runProviderDoctor(probes: readonly string[], signal: AbortSignal): Promise<ProviderDoctorResult>;

package/dist/provider-doctor.js

@@ -0,0 +1,22 @@
+import { CancellationError, InvalidParamsError } from "./errors.js";
+export async function runProviderDoctor(probes, signal) {
+    if (signal.aborted)
+        throw new CancellationError();
+    if (!Array.isArray(probes) || probes.some((name) => typeof name !== "string" || name.trim() === "" || name !== name.trim())
+        || new Set(probes).size !== probes.length) {
+        throw new InvalidParamsError("probes must be an array of unique nonempty adapter names");
+    }
+    const core = await import(new URL("../scripts/provider-doctor-core.mjs", import.meta.url).href);
+    try {
+        return await core.runDoctor(probes, signal);
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw new CancellationError();
+        if (error instanceof core.DoctorInputError) {
+            throw new InvalidParamsError("Requested probe adapter is not configured or does not support synchronous authentication probes; call provider_doctor without probes to inspect configured adapters.");
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=provider-doctor.js.map