configproof 0.3.0

package/dist/analysis/diagnose.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.diagnoseTraces = diagnoseTraces;
+exports.diagnosisText = diagnosisText;
+const analyze_1 = require("../core/analyze");
+const io_1 = require("../core/io");
+const loaderSignature = (events) => JSON.stringify(events.filter(e => e.operation === 'skip'
+    || e.operation === 'write' && ['dotenv', 'native-env'].includes(e.origin?.kind || '')).map(e => [e.operation, e.outcome, (0, analyze_1.originLabel)(e)]));
+const references = (events, run) => {
+    const seen = new Set();
+    return events.filter((e) => !!e && !seen.has(e.id) && !!seen.add(e.id)).slice(0, 10)
+        .map(e => ({ run, processId: e.processId, eventId: e.id }));
+};
+/** Deterministic divergence ranking; never equates correlation with an established root cause. */
+function diagnoseTraces(broken, working, options = {}) {
+    const limit = options.limit ?? 10;
+    if (!Number.isInteger(limit) || limit < 1 || limit > 100)
+        throw new io_1.UserError('Diagnosis limit must be between 1 and 100.');
+    const diff = (0, analyze_1.diffTraces)(broken, working, options);
+    const selected = broken.events.filter(e => e.processId === diff.leftProcess);
+    const marker = selected.find(e => e.operation === 'boundary');
+    if (options.beforeSeq !== undefined && (!Number.isInteger(options.beforeSeq) || !selected.some(e => e.seq === options.beforeSeq)))
+        throw new io_1.UserError('--before-seq must identify an observed event in the selected failing context.', 65);
+    const boundary = options.beforeSeq !== undefined ? { kind: 'manual-sequence', seq: options.beforeSeq }
+        : marker ? { kind: marker.boundaryKind || 'manual', seq: marker.seq } : { kind: 'not-recorded' };
+    let readKeys = 0;
+    const findings = [];
+    for (const row of diff.rows) {
+        const inBoundary = row.left.events.filter(e => boundary.seq === undefined || e.seq <= boundary.seq);
+        const leftReads = inBoundary.filter(e => e.operation === 'read' && e.purpose !== 'loader');
+        if (!leftReads.length)
+            continue;
+        readKeys++;
+        const read = leftReads.at(-1);
+        const leftEvents = inBoundary.filter(e => e.seq <= read.seq);
+        const rightSiteLabels = new Set(row.right.reads.filter(r => r.site).map(analyze_1.siteLabel));
+        const sameSites = leftReads.filter(e => e.site && rightSiteLabels.has((0, analyze_1.siteLabel)(e)));
+        // Align identical call-site occurrences, not unrelated final reads or OS timestamps.
+        const rightSites = new Map();
+        for (const r of row.right.reads) {
+            const label = (0, analyze_1.siteLabel)(r);
+            const list = rightSites.get(label) || [];
+            list.push(r);
+            rightSites.set(label, list);
+        }
+        const occurrence = new Map();
+        let changedRead, comparedRead;
+        for (const r of leftReads) {
+            const label = (0, analyze_1.siteLabel)(r), position = occurrence.get(label) || 0;
+            occurrence.set(label, position + 1);
+            const counterpart = r.site ? rightSites.get(label)?.[position] : undefined;
+            if (counterpart && (0, analyze_1.compareValue)(r.value, counterpart.value, diff.sameDomain) === 'different' && !changedRead) {
+                changedRead = r;
+                comparedRead = counterpart;
+            }
+        }
+        const rightRead = comparedRead || (read.site ? rightSites.get((0, analyze_1.siteLabel)(read))?.at(-1) : undefined) || row.right.lastRead;
+        const rightEvents = row.right.events.filter(e => !rightRead || e.seq <= rightRead.seq);
+        const startupChanged = row.startup === 'different';
+        const originChanged = !!rightRead && (0, analyze_1.originLabel)(changedRead || read) !== (0, analyze_1.originLabel)(rightRead);
+        const loaderOutcomeChanged = loaderSignature(leftEvents) !== loaderSignature(rightEvents);
+        const writes = leftEvents.filter(e => ['write', 'delete'].includes(e.operation));
+        const rightWrites = rightEvents.filter(e => ['write', 'delete'].includes(e.operation));
+        const mutationOnlyInFailing = writes.length > 0 && rightWrites.length === 0;
+        const readSiteSame = sameSites.length > 0;
+        const readPathChanged = !readSiteSame && row.right.reads.length > 0 || row.right.reads.length === 0;
+        if (!startupChanged && !changedRead && !originChanged && !loaderOutcomeChanged && !mutationOnlyInFailing && !readPathChanged)
+            continue;
+        const reasons = [];
+        let score = 0;
+        if (changedRead) {
+            score += 8;
+            reasons.push('Masked read state/value differs at the same captured call-site occurrence.');
+        }
+        if (originChanged) {
+            score += 5;
+            reasons.push('The recorded read-origin descriptions differ.');
+        }
+        if (loaderOutcomeChanged) {
+            score += 4;
+            reasons.push('Candidate application/skip evidence differs before the compared consumption points.');
+        }
+        if (mutationOnlyInFailing) {
+            score += 3;
+            reasons.push('A write/delete was captured only in the failing-side interval.');
+        }
+        if (startupChanged) {
+            score += 2;
+            reasons.push('Startup state or comparable fingerprints differ.');
+        }
+        if (readSiteSame) {
+            score += 2;
+            reasons.push('Both runs consumed the key at a common recorded call site.');
+        }
+        else {
+            score += 1;
+            reasons.push('A matching captured consumption site is absent; coverage or execution paths may differ.');
+        }
+        if (boundary.seq !== undefined) {
+            score += 1;
+            reasons.push('The key was read at or before the selected failure boundary.');
+        }
+        const divergenceSeq = startupChanged ? row.left.baseline?.seq : changedRead?.seq
+            ?? (loaderOutcomeChanged ? leftEvents.find(e => e.operation === 'skip' || e.operation === 'write')?.seq : undefined)
+            ?? (originChanged || readPathChanged ? read.seq : undefined);
+        const positiveQuality = diff.completeStreams && diff.sameDomain && !diff.coverageChanged;
+        findings.push({ key: row.key, classification: originChanged ? 'provenance-divergence' : changedRead || startupChanged ? 'value-divergence'
+                : loaderOutcomeChanged ? 'loader-divergence' : mutationOnlyInFailing ? 'mutation-divergence' : 'read-path-divergence',
+            confidence: positiveQuality && readSiteSame && score >= 12 ? 'high' : positiveQuality ? 'moderate' : 'limited', score, reasons,
+            evidence: { startupChanged, readValueChanged: !!changedRead, readSiteSame, originChanged, loaderOutcomeChanged,
+                mutationOnlyInFailing, beforeKnownBoundary: boundary.seq !== undefined, sameDomain: diff.sameDomain },
+            references: [...references([row.left.baseline, changedRead, read, ...leftEvents.filter(e => e.operation === 'skip'), ...writes], 'broken'),
+                ...references([row.right.baseline, rightRead, ...rightEvents.filter(e => e.operation === 'skip'), ...rightWrites], 'working')],
+            sites: [read.site, rightRead?.site].filter((s) => !!s)
+                .filter((s, i, all) => all.findIndex(x => JSON.stringify(x) === JSON.stringify(s)) === i),
+            firstRelevantSeq: leftReads[0].seq, firstDivergenceSeq: divergenceSeq, rawValuesAvailable: false });
+    }
+    findings.sort((a, b) => b.score - a.score || a.firstRelevantSeq - b.firstRelevantSeq || (a.key < b.key ? -1 : a.key > b.key ? 1 : 0));
+    const earliest = findings.filter(f => f.firstDivergenceSeq !== undefined).sort((a, b) => a.firstDivergenceSeq - b.firstDivergenceSeq || a.key.localeCompare(b.key))[0];
+    const incomplete = !diff.completeStreams || !diff.sameDomain || diff.coverageChanged || !diff.leftProcess || !diff.rightProcess;
+    return { schemaVersion: 'configtrace-diagnosis/1', status: incomplete ? 'incomplete-or-incomparable' : findings.length ? 'divergences-observed' : 'no-divergence-established',
+        brokenId: broken.id, workingId: working.id, leftProcess: diff.leftProcess, rightProcess: diff.rightProcess, boundary,
+        sameDomain: diff.sameDomain, captureComplete: diff.completeStreams, coverageChanged: diff.coverageChanged,
+        totalComparedKeys: diff.rows.length, readKeys, candidateCount: findings.length, omittedCandidates: Math.max(0, findings.length - limit),
+        findings: findings.slice(0, limit), earliestObservedDivergence: earliest ? { key: earliest.key, seq: earliest.firstDivergenceSeq } : undefined,
+        rawValuesAvailable: false, conclusion: findings.length ? 'Ranked observed configuration divergences; no root cause has been proven.' : 'No relevant divergence was established in the selected evidence. This is not proof of equivalence.',
+        caveats: [...diff.caveats,
+            'Scores and confidence labels describe evidence strength, not causal probabilities. The list is ranked and deduplicated by key, not a mathematically minimal causal set.',
+            'Matching call-site occurrences is a deterministic comparison convention, not a causal alignment of concurrent requests.',
+            ...(boundary.seq === undefined ? ['No failure marker was recorded. A nonzero process exit does not identify the first failing database call.'] : ['A boundary limits failing-side relevance; the working side uses corresponding captured consumption points.']),
+            'High evidence confidence does not upgrade inferred provenance edges to directly observed causality.',
+        ] };
+}
+function diagnosisText(result) {
+    const lines = ['CONFIGTRACE / DIAGNOSIS', `${result.status} · ${result.readKeys}/${result.totalComparedKeys} keys read in the selected interval`,
+        `Failure boundary: ${result.boundary.kind}${result.boundary.seq !== undefined ? ' #' + result.boundary.seq : ''}`, ''];
+    for (const [i, f] of result.findings.entries())
+        lines.push(`${i + 1}. ${f.key} — ${f.classification} (${f.confidence} evidence; score ${f.score})`, ...f.reasons.map(r => `   ${r}`), `   Evidence: ${f.references.map(r => `${r.run}:${r.eventId}`).join(', ')}`, '');
+    lines.push(result.conclusion, ...result.caveats.map(c => `Note: ${c}`));
+    return (0, io_1.terminalSafe)(lines.join('\n'), true) + '\n';
+}
+//# sourceMappingURL=diagnose.js.map

package/dist/analysis/diagnose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../../src/analysis/diagnose.ts"],"names":[],"mappings":";;AA+BA,wCAkFC;AACD,sCAOC;AAxHD,6CAAmF;AACnF,mCAAqD;AAqBrD,MAAM,eAAe,GAAG,CAAC,MAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM;OACtG,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,IAAA,qBAAW,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7I,MAAM,UAAU,GAAG,CAAC,MAAsC,EAAE,GAA6B,EAAuB,EAAE;IAChH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACnG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC,CAAC;AACF,kGAAkG;AAClG,SAAgB,cAAc,CAAC,MAAa,EAAE,OAAc,EAAE,UAA4B,EAAE;IAC1F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,cAAS,CAAC,4CAA4C,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,IAAA,oBAAU,EAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,cAAS,CAAC,+EAA+E,EAAE,EAAE,CAAC,CAAC;IAC5O,MAAM,QAAQ,GAA0B,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;QAC3H,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,IAAI,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACnG,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpG,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;QAC3F,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,SAAS;QAChC,QAAQ,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,mBAAS,CAAC,CAAC,CAAC;QACpF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,IAAA,mBAAS,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,qFAAqF;QACrF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,IAAA,mBAAS,EAAC,CAAC,CAAC,CAAC;YAAC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QACrJ,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,IAAI,WAAoC,EAAE,YAAqC,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAA,mBAAS,EAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClE,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;YACpC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3E,IAAI,WAAW,IAAI,IAAA,sBAAY,EAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;gBAAC,WAAW,GAAG,CAAC,CAAC;gBAAC,YAAY,GAAG,WAAW,CAAC;YAAC,CAAC;QAChK,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1H,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC;QACvF,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,KAAK,WAAW,CAAC;QACnD,MAAM,aAAa,GAAG,CAAC,CAAC,SAAS,IAAI,IAAA,qBAAW,EAAC,WAAW,IAAI,IAAI,CAAC,KAAK,IAAA,qBAAW,EAAC,SAAS,CAAC,CAAC;QACjG,MAAM,oBAAoB,GAAG,eAAe,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACvF,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1C,MAAM,eAAe,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QACpG,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,IAAI,CAAC,oBAAoB,IAAI,CAAC,qBAAqB,IAAI,CAAC,eAAe;YAAE,SAAS;QACvI,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,WAAW,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;QAAC,CAAC;QAC5H,IAAI,aAAa,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAAC,CAAC;QACjG,IAAI,oBAAoB,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAAC,CAAC;QAC9I,IAAI,qBAAqB,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAAC,CAAC;QAC1H,IAAI,cAAc,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAAC,CAAC;QACrG,IAAI,YAAY,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAAC,CAAC;aACxG,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;QAAC,CAAC;QAC7H,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAAC,CAAC;QAC7H,MAAM,aAAa,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG;eAC3E,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;eACjH,CAAC,aAAa,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QACzF,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC,CAAC,kBAAkB;gBACxI,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,sBAAsB;YACrH,UAAU,EAAE,eAAe,IAAI,YAAY,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO;YAC9H,QAAQ,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB;gBAC5G,qBAAqB,EAAE,mBAAmB,EAAE,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YACvG,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,QAAQ,CAAC;gBACxI,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;YAChI,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC1F,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3F,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,kBAAkB,EAAE,aAAa,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtI,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAmB,GAAG,CAAC,CAAC,kBAAmB,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzK,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;IAChI,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,2BAA2B;QAC3K,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ;QACpH,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe;QACzG,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;QACvI,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,0BAA0B,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,kBAAmB,EAAE,CAAC,CAAC,CAAC,SAAS;QAC/I,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,2EAA2E,CAAC,CAAC,CAAC,oGAAoG;QAC3O,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO;YACvB,yKAAyK;YACzK,yHAAyH;YACzH,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,2GAA2G,CAAC,CAAC,CAAC,CAAC,CAAC,4GAA4G,CAAC,CAAC;YAChQ,qGAAqG;SACtG,EAAE,CAAC;AACR,CAAC;AACD,SAAgB,aAAa,CAAC,MAAiB;IAC7C,MAAM,KAAK,GAAG,CAAC,yBAAyB,EAAE,GAAG,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,iBAAiB,qCAAqC;QAC9I,qBAAqB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzH,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,UAAU,oBAAoB,CAAC,CAAC,KAAK,GAAG,EAChJ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACrH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,OAAO,IAAA,iBAAY,EAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;AACrD,CAAC"}

package/dist/analysis/history.d.ts

@@ -0,0 +1,52 @@
+import type { Trace } from '../core/schema';
+export interface HistoryEntry {
+    label: string;
+    trace: Trace;
+    processId?: string;
+}
+export interface DriftChange {
+    key: string;
+    changes: string[];
+    newReadSites: string[];
+    newOrigins: string[];
+    newMutationSites: string[];
+    sourceRun: number;
+    targetRun: number;
+}
+export interface HistoryAnalysis {
+    schemaVersion: 'configtrace-history/1';
+    ordering: 'provided' | 'filename' | 'started-at';
+    rawValuesAvailable: false;
+    runs: Array<{
+        index: number;
+        label: string;
+        traceId: string;
+        capture: Trace['capture']['status'];
+    }>;
+    transitions: Array<{
+        from: number;
+        to: number;
+        sameDomain: boolean;
+        complete: boolean;
+        coverageChanged: boolean;
+        changes: DriftChange[];
+    }>;
+    firstDivergence: Array<{
+        key: string;
+        run: number;
+        label: string;
+    }>;
+    coverageRegressions: Array<{
+        run: number;
+        reasons: string[];
+    }>;
+    caveats: string[];
+}
+/** The caller supplies order; this function never infers chronology from an OS PID or mtime. */
+export declare function analyzeHistory(entries: HistoryEntry[], ordering?: HistoryAnalysis['ordering']): HistoryAnalysis;
+export declare function readHistory(directory: string, options?: {
+    maxRuns?: number;
+    order?: 'filename' | 'started-at';
+}): HistoryEntry[];
+export declare function addHistory(file: string, directory: string): string;
+export declare function historyText(result: HistoryAnalysis): string;

package/dist/analysis/history.js

@@ -0,0 +1,119 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyzeHistory = analyzeHistory;
+exports.readHistory = readHistory;
+exports.addHistory = addHistory;
+exports.historyText = historyText;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const analyze_1 = require("../core/analyze");
+const io_1 = require("../core/io");
+/** The caller supplies order; this function never infers chronology from an OS PID or mtime. */
+function analyzeHistory(entries, ordering = 'provided') {
+    if (entries.length < 2 || entries.length > 100)
+        throw new io_1.UserError('History analysis needs 2–100 explicitly ordered traces.');
+    const totalEvents = entries.reduce((n, e) => n + e.trace.events.length, 0);
+    if (totalEvents > 250000)
+        throw new io_1.UserError('History analysis exceeds the 250000 aggregate event budget. Select fewer runs.', 65);
+    const transitions = [];
+    const first = new Map();
+    const regressions = [];
+    const weight = { unsupported: 0, 'not-observed': 1, limited: 2, active: 3 };
+    for (let i = 1; i < entries.length; i++) {
+        const a = entries[i - 1], b = entries[i];
+        const diff = (0, analyze_1.diffTraces)(a.trace, b.trace, { leftProcess: a.processId, rightProcess: b.processId });
+        const changes = [];
+        for (const row of diff.rows) {
+            const oldSites = new Set(row.left.reads.map(analyze_1.siteLabel)), oldOrigins = new Set(row.left.reads.map(analyze_1.originLabel));
+            const newSites = row.right.reads.map(analyze_1.siteLabel).filter(s => !oldSites.has(s));
+            const newOrigins = row.right.reads.map(analyze_1.originLabel).filter(s => !oldOrigins.has(s));
+            const signature = (e) => `${e?.operation}:${(0, analyze_1.siteLabel)(e)}:${(0, analyze_1.originLabel)(e)}`;
+            const oldMutations = new Set(row.left.writes.map(signature));
+            const newMutationSites = row.right.writes.map(signature).filter(s => !oldMutations.has(s));
+            const labels = [...row.changes];
+            if (newMutationSites.length && !labels.includes('new mutation sites'))
+                labels.push('new mutation sites');
+            if (!labels.length)
+                continue;
+            if (!first.has(row.key))
+                first.set(row.key, i);
+            changes.push({ key: row.key, changes: labels, newReadSites: [...new Set(newSites)], newOrigins: [...new Set(newOrigins)],
+                newMutationSites: [...new Set(newMutationSites)], sourceRun: i - 1, targetRun: i });
+        }
+        const reasons = [];
+        if (a.trace.capture.status === 'complete' && b.trace.capture.status !== 'complete')
+            reasons.push('Stream completeness regressed.');
+        for (const old of a.trace.coverage) {
+            const now = b.trace.coverage.find(c => c.feature === old.feature);
+            if (!now || weight[now.status] < weight[old.status])
+                reasons.push(`${old.feature} coverage declaration regressed.`);
+        }
+        if (b.trace.processes.reduce((n, p) => n + p.eventsDropped, 0) > a.trace.processes.reduce((n, p) => n + p.eventsDropped, 0))
+            reasons.push('Recorded dropped-event count increased.');
+        if (reasons.length)
+            regressions.push({ run: i, reasons });
+        transitions.push({ from: i - 1, to: i, sameDomain: diff.sameDomain, complete: diff.completeStreams, coverageChanged: diff.coverageChanged, changes });
+    }
+    return { schemaVersion: 'configtrace-history/1', ordering, rawValuesAvailable: false,
+        runs: entries.map((e, index) => ({ index, label: e.label, traceId: e.trace.id, capture: e.trace.capture.status })), transitions,
+        firstDivergence: [...first].map(([key, run]) => ({ key, run, label: entries[run].label })), coverageRegressions: regressions,
+        caveats: [
+            'First divergence means the first adjacent-run divergence in the supplied ordering, not the first change ever made to the application.',
+            'A shared comparison key is required for equality of present values. Origins/sites and presence changes can remain informative without one.',
+            'Processes and Workers must be selected explicitly by library callers; CLI directory analysis compares root contexts only.',
+            'No backend, secret key, mtime-based chronology, or automatic file deletion is involved.',
+        ] };
+}
+function readHistory(directory, options = {}) {
+    const maxRuns = options.maxRuns ?? 30;
+    if (!Number.isInteger(maxRuns) || maxRuns < 2 || maxRuns > 100)
+        throw new io_1.UserError('--max-runs must be between 2 and 100.');
+    let files;
+    try {
+        const info = node_fs_1.default.lstatSync(directory);
+        if (!info.isDirectory() || info.isSymbolicLink())
+            throw new Error('Invalid directory');
+        files = node_fs_1.default.readdirSync(directory).filter(name => name.endsWith('.ct.json')).sort();
+    }
+    catch {
+        throw new io_1.UserError('History directory is unavailable or is not a regular directory.', 74);
+    }
+    if (files.length > maxRuns)
+        throw new io_1.UserError('History contains more files than --max-runs. Select a smaller directory or raise the explicit limit.', 65);
+    let bytes = 0;
+    const entries = files.map(name => {
+        const file = node_path_1.default.join(directory, name);
+        const stat = node_fs_1.default.lstatSync(file);
+        if (!stat.isFile() || stat.isSymbolicLink())
+            throw new io_1.UserError('History accepts regular, non-symlink .ct.json files only.', 65);
+        bytes += stat.size;
+        if (bytes > 64 * 1024 * 1024)
+            throw new io_1.UserError('History exceeds its 64 MiB aggregate input limit.', 65);
+        return { label: name, trace: (0, io_1.readTrace)(file) };
+    });
+    if (options.order === 'started-at') {
+        const time = (e) => Date.parse(e.trace.processes.find(p => p.role === 'root')?.startedAt || '');
+        if (entries.some(e => !Number.isFinite(time(e))))
+            throw new io_1.UserError('Timestamp ordering requires a valid root startedAt in every trace. Use filename ordering for sanitized exports.', 65);
+        entries.sort((a, b) => time(a) - time(b) || a.label.localeCompare(b.label));
+    }
+    return entries;
+}
+function addHistory(file, directory) {
+    const trace = (0, io_1.readTrace)(file);
+    const target = node_path_1.default.join(directory, `${new Date().toISOString().replace(/[:.]/g, '-')}-${trace.id}.ct.json`);
+    (0, io_1.writeTrace)(target, trace);
+    return target;
+}
+function historyText(result) {
+    return (0, io_1.terminalSafe)(['CONFIGTRACE / LOCAL DRIFT', `${result.runs.length} runs · order: ${result.ordering}`,
+        ...result.transitions.flatMap(t => [`\n${result.runs[t.from].label} → ${result.runs[t.to].label} (${t.sameDomain ? 'shared value domain' : 'values may be incomparable'})`,
+            ...t.changes.map(c => `  ${c.key}: ${c.changes.join(', ')}`)]),
+        '\nFirst observed divergence by key:', ...result.firstDivergence.map(d => `  ${d.key}: ${d.label}`),
+        ...result.coverageRegressions.flatMap(r => r.reasons.map(reason => `Coverage: ${result.runs[r.run].label}: ${reason}`)),
+        ...result.caveats.map(c => `Note: ${c}`)].join('\n'), true) + '\n';
+}
+//# sourceMappingURL=history.js.map

package/dist/analysis/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/analysis/history.ts"],"names":[],"mappings":";;;;;AAoBA,wCA6CC;AACD,kCAyBC;AACD,gCAIC;AACD,kCAOC;AAxGD,sDAAyB;AACzB,0DAA6B;AAE7B,6CAAqE;AACrE,mCAA4E;AAe5E,gGAAgG;AAChG,SAAgB,cAAc,CAAC,OAAuB,EAAE,WAAwC,UAAU;IACxG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,cAAS,CAAC,yDAAyD,CAAC,CAAC;IAC/H,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3E,IAAI,WAAW,GAAG,MAAM;QAAE,MAAM,IAAI,cAAS,CAAC,gFAAgF,EAAE,EAAE,CAAC,CAAC;IACpI,MAAM,WAAW,GAAmC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,WAAW,GAA2C,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAA,oBAAU,EAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACnG,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAS,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAW,CAAC,CAAC,CAAC;YAC/G,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,MAAM,SAAS,GAAG,CAAC,CAAkC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,IAAI,IAAA,mBAAS,EAAC,CAAC,CAAC,IAAI,IAAA,qBAAW,EAAC,CAAC,CAAC,EAAE,CAAC;YAC9G,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,MAAM,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,gBAAgB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACzG,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,SAAS;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;gBACtH,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACnI,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;YAClE,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,kCAAkC,CAAC,CAAC;QACtH,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACrL,IAAI,OAAO,CAAC,MAAM;YAAE,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;IACxJ,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK;QAClF,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,WAAW;QAC/H,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,mBAAmB,EAAE,WAAW;QAC5H,OAAO,EAAE;YACP,uIAAuI;YACvI,4IAA4I;YAC5I,2HAA2H;YAC3H,yFAAyF;SAC1F,EAAE,CAAC;AACR,CAAC;AACD,SAAgB,WAAW,CAAC,SAAiB,EAAE,UAAmE,EAAE;IAClH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,GAAG;QAAE,MAAM,IAAI,cAAS,CAAC,uCAAuC,CAAC,CAAC;IAC7H,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvF,KAAK,GAAG,iBAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,cAAS,CAAC,iEAAiE,EAAE,EAAE,CAAC,CAAC;IAAC,CAAC;IACvG,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO;QAAE,MAAM,IAAI,cAAS,CAAC,sGAAsG,EAAE,EAAE,CAAC,CAAC;IAC5J,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC/B,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,iBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,cAAS,CAAC,2DAA2D,EAAE,EAAE,CAAC,CAAC;QAClI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QACnB,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,cAAS,CAAC,mDAAmD,EAAE,EAAE,CAAC,CAAC;QAC3G,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAA,cAAS,EAAC,IAAI,CAAC,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,CAAe,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QAC9G,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,cAAS,CAAC,iHAAiH,EAAE,EAAE,CAAC,CAAC;QAC7L,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,SAAgB,UAAU,CAAC,IAAY,EAAE,SAAiB;IACxD,MAAM,KAAK,GAAG,IAAA,cAAS,EAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7G,IAAA,eAAU,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAAC,OAAO,MAAM,CAAC;AAC3C,CAAC;AACD,SAAgB,WAAW,CAAC,MAAuB;IACjD,OAAO,IAAA,iBAAY,EAAC,CAAC,2BAA2B,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,kBAAkB,MAAM,CAAC,QAAQ,EAAE;QACxG,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,4BAA4B,GAAG;YACxK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,qCAAqC,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QACnG,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC,CAAC;QACvH,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;AACvE,CAAC"}

package/dist/analysis/policy.d.ts

@@ -0,0 +1,161 @@
+import { z } from 'zod';
+import type { Trace } from '../core/schema';
+export declare const VerificationPolicySchema: z.ZodObject<{
+    version: z.ZodDefault<z.ZodLiteral<1>>;
+    rules: z.ZodDefault<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodObject<{
+        required: z.ZodOptional<z.ZodBoolean>;
+        missing: z.ZodOptional<z.ZodBoolean>;
+        read: z.ZodOptional<z.ZodEnum<["required", "forbidden", "any"]>>;
+        immutableAfterFirstRead: z.ZodOptional<z.ZodBoolean>;
+        allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        forbiddenOrigins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        consistentProvenance: z.ZodOptional<z.ZodBoolean>;
+        noLoaderSkip: z.ZodOptional<z.ZodBoolean>;
+        minimumConfidence: z.ZodDefault<z.ZodEnum<["observed", "derived", "inferred"]>>;
+    }, "strict", z.ZodTypeAny, {
+        minimumConfidence: "observed" | "derived" | "inferred";
+        missing?: boolean | undefined;
+        read?: "required" | "forbidden" | "any" | undefined;
+        required?: boolean | undefined;
+        immutableAfterFirstRead?: boolean | undefined;
+        allowedOrigins?: string[] | undefined;
+        forbiddenOrigins?: string[] | undefined;
+        consistentProvenance?: boolean | undefined;
+        noLoaderSkip?: boolean | undefined;
+    }, {
+        missing?: boolean | undefined;
+        read?: "required" | "forbidden" | "any" | undefined;
+        required?: boolean | undefined;
+        immutableAfterFirstRead?: boolean | undefined;
+        allowedOrigins?: string[] | undefined;
+        forbiddenOrigins?: string[] | undefined;
+        consistentProvenance?: boolean | undefined;
+        noLoaderSkip?: boolean | undefined;
+        minimumConfidence?: "observed" | "derived" | "inferred" | undefined;
+    }>, {
+        minimumConfidence: "observed" | "derived" | "inferred";
+        missing?: boolean | undefined;
+        read?: "required" | "forbidden" | "any" | undefined;
+        required?: boolean | undefined;
+        immutableAfterFirstRead?: boolean | undefined;
+        allowedOrigins?: string[] | undefined;
+        forbiddenOrigins?: string[] | undefined;
+        consistentProvenance?: boolean | undefined;
+        noLoaderSkip?: boolean | undefined;
+    }, {
+        missing?: boolean | undefined;
+        read?: "required" | "forbidden" | "any" | undefined;
+        required?: boolean | undefined;
+        immutableAfterFirstRead?: boolean | undefined;
+        allowedOrigins?: string[] | undefined;
+        forbiddenOrigins?: string[] | undefined;
+        consistentProvenance?: boolean | undefined;
+        noLoaderSkip?: boolean | undefined;
+        minimumConfidence?: "observed" | "derived" | "inferred" | undefined;
+    }>>, Record<string, {
+        minimumConfidence: "observed" | "derived" | "inferred";
+        missing?: boolean | undefined;
+        read?: "required" | "forbidden" | "any" | undefined;
+        required?: boolean | undefined;
+        immutableAfterFirstRead?: boolean | undefined;
+        allowedOrigins?: string[] | undefined;
+        forbiddenOrigins?: string[] | undefined;
+        consistentProvenance?: boolean | undefined;
+        noLoaderSkip?: boolean | undefined;
+    }>, Record<string, {
+        missing?: boolean | undefined;
+        read?: "required" | "forbidden" | "any" | undefined;
+        required?: boolean | undefined;
+        immutableAfterFirstRead?: boolean | undefined;
+        allowedOrigins?: string[] | undefined;
+        forbiddenOrigins?: string[] | undefined;
+        consistentProvenance?: boolean | undefined;
+        noLoaderSkip?: boolean | undefined;
+        minimumConfidence?: "observed" | "derived" | "inferred" | undefined;
+    }>>>;
+    coverage: z.ZodDefault<z.ZodObject<{
+        requireComplete: z.ZodDefault<z.ZodBoolean>;
+        maxDroppedEvents: z.ZodDefault<z.ZodNumber>;
+        requireFeatures: z.ZodDefault<z.ZodArray<z.ZodEnum<["environment", "startup", "dotenv", "source-maps", "children", "native", "native-env", "workers", "adapters"]>, "many">>;
+        forbidNotices: z.ZodDefault<z.ZodArray<z.ZodEnum<["startup_history_unknown", "native_access_unobserved", "workers_unsupported", "original_reference_bypass", "environment_replaced", "early_preloads_possible", "events_dropped", "event_limit", "byte_limit", "key_limit", "recorder_failed", "missing_footer", "invalid_stream", "process_limit", "aggregate_limit", "child_outlived_root", "children_disabled", "children_opt_in", "child_depth_limit", "child_count_limit", "child_shape_unsupported", "child_shell_or_non_node", "child_detached", "sync_children_unobserved", "dotenv_not_seen", "dotenv_attached", "dotenv_version_unverified", "dotenv_custom_target", "dotenv_source_unknown", "dotenv_options_unsupported", "dotenv_eager_load", "adapter_failed", "source_maps_opt_in", "source_maps_requested", "source_map_unavailable", "custom_adapter_loaded", "capture_unverified", "metadata_scrubbed", "comparison_removed", "loader_details_removed", "call_sites_removed", "native_env_attached", "native_env_disabled", "native_env_unavailable", "native_env_early", "native_env_candidates_inferred", "native_env_candidates_unavailable", "native_env_file_changed", "workers_opt_in", "workers_disabled", "worker_attached", "worker_shared_env", "worker_shape_unsupported", "worker_depth_limit", "worker_count_limit", "worker_unconfirmed", "worker_outlived_root", "adapter_manifest_unverified", "failure_boundary_recorded"]>, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        requireComplete: boolean;
+        maxDroppedEvents: number;
+        requireFeatures: ("startup" | "dotenv" | "native-env" | "environment" | "source-maps" | "children" | "native" | "workers" | "adapters")[];
+        forbidNotices: ("startup_history_unknown" | "native_access_unobserved" | "workers_unsupported" | "original_reference_bypass" | "environment_replaced" | "early_preloads_possible" | "events_dropped" | "event_limit" | "byte_limit" | "key_limit" | "recorder_failed" | "missing_footer" | "invalid_stream" | "process_limit" | "aggregate_limit" | "child_outlived_root" | "children_disabled" | "children_opt_in" | "child_depth_limit" | "child_count_limit" | "child_shape_unsupported" | "child_shell_or_non_node" | "child_detached" | "sync_children_unobserved" | "dotenv_not_seen" | "dotenv_attached" | "dotenv_version_unverified" | "dotenv_custom_target" | "dotenv_source_unknown" | "dotenv_options_unsupported" | "dotenv_eager_load" | "adapter_failed" | "source_maps_opt_in" | "source_maps_requested" | "source_map_unavailable" | "custom_adapter_loaded" | "capture_unverified" | "metadata_scrubbed" | "comparison_removed" | "loader_details_removed" | "call_sites_removed" | "native_env_attached" | "native_env_disabled" | "native_env_unavailable" | "native_env_early" | "native_env_candidates_inferred" | "native_env_candidates_unavailable" | "native_env_file_changed" | "workers_opt_in" | "workers_disabled" | "worker_attached" | "worker_shared_env" | "worker_shape_unsupported" | "worker_depth_limit" | "worker_count_limit" | "worker_unconfirmed" | "worker_outlived_root" | "adapter_manifest_unverified" | "failure_boundary_recorded")[];
+    }, {
+        requireComplete?: boolean | undefined;
+        maxDroppedEvents?: number | undefined;
+        requireFeatures?: ("startup" | "dotenv" | "native-env" | "environment" | "source-maps" | "children" | "native" | "workers" | "adapters")[] | undefined;
+        forbidNotices?: ("startup_history_unknown" | "native_access_unobserved" | "workers_unsupported" | "original_reference_bypass" | "environment_replaced" | "early_preloads_possible" | "events_dropped" | "event_limit" | "byte_limit" | "key_limit" | "recorder_failed" | "missing_footer" | "invalid_stream" | "process_limit" | "aggregate_limit" | "child_outlived_root" | "children_disabled" | "children_opt_in" | "child_depth_limit" | "child_count_limit" | "child_shape_unsupported" | "child_shell_or_non_node" | "child_detached" | "sync_children_unobserved" | "dotenv_not_seen" | "dotenv_attached" | "dotenv_version_unverified" | "dotenv_custom_target" | "dotenv_source_unknown" | "dotenv_options_unsupported" | "dotenv_eager_load" | "adapter_failed" | "source_maps_opt_in" | "source_maps_requested" | "source_map_unavailable" | "custom_adapter_loaded" | "capture_unverified" | "metadata_scrubbed" | "comparison_removed" | "loader_details_removed" | "call_sites_removed" | "native_env_attached" | "native_env_disabled" | "native_env_unavailable" | "native_env_early" | "native_env_candidates_inferred" | "native_env_candidates_unavailable" | "native_env_file_changed" | "workers_opt_in" | "workers_disabled" | "worker_attached" | "worker_shared_env" | "worker_shape_unsupported" | "worker_depth_limit" | "worker_count_limit" | "worker_unconfirmed" | "worker_outlived_root" | "adapter_manifest_unverified" | "failure_boundary_recorded")[] | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    coverage: {
+        requireComplete: boolean;
+        maxDroppedEvents: number;
+        requireFeatures: ("startup" | "dotenv" | "native-env" | "environment" | "source-maps" | "children" | "native" | "workers" | "adapters")[];
+        forbidNotices: ("startup_history_unknown" | "native_access_unobserved" | "workers_unsupported" | "original_reference_bypass" | "environment_replaced" | "early_preloads_possible" | "events_dropped" | "event_limit" | "byte_limit" | "key_limit" | "recorder_failed" | "missing_footer" | "invalid_stream" | "process_limit" | "aggregate_limit" | "child_outlived_root" | "children_disabled" | "children_opt_in" | "child_depth_limit" | "child_count_limit" | "child_shape_unsupported" | "child_shell_or_non_node" | "child_detached" | "sync_children_unobserved" | "dotenv_not_seen" | "dotenv_attached" | "dotenv_version_unverified" | "dotenv_custom_target" | "dotenv_source_unknown" | "dotenv_options_unsupported" | "dotenv_eager_load" | "adapter_failed" | "source_maps_opt_in" | "source_maps_requested" | "source_map_unavailable" | "custom_adapter_loaded" | "capture_unverified" | "metadata_scrubbed" | "comparison_removed" | "loader_details_removed" | "call_sites_removed" | "native_env_attached" | "native_env_disabled" | "native_env_unavailable" | "native_env_early" | "native_env_candidates_inferred" | "native_env_candidates_unavailable" | "native_env_file_changed" | "workers_opt_in" | "workers_disabled" | "worker_attached" | "worker_shared_env" | "worker_shape_unsupported" | "worker_depth_limit" | "worker_count_limit" | "worker_unconfirmed" | "worker_outlived_root" | "adapter_manifest_unverified" | "failure_boundary_recorded")[];
+    };
+    version: 1;
+    rules: Record<string, {
+        minimumConfidence: "observed" | "derived" | "inferred";
+        missing?: boolean | undefined;
+        read?: "required" | "forbidden" | "any" | undefined;
+        required?: boolean | undefined;
+        immutableAfterFirstRead?: boolean | undefined;
+        allowedOrigins?: string[] | undefined;
+        forbiddenOrigins?: string[] | undefined;
+        consistentProvenance?: boolean | undefined;
+        noLoaderSkip?: boolean | undefined;
+    }>;
+}, {
+    coverage?: {
+        requireComplete?: boolean | undefined;
+        maxDroppedEvents?: number | undefined;
+        requireFeatures?: ("startup" | "dotenv" | "native-env" | "environment" | "source-maps" | "children" | "native" | "workers" | "adapters")[] | undefined;
+        forbidNotices?: ("startup_history_unknown" | "native_access_unobserved" | "workers_unsupported" | "original_reference_bypass" | "environment_replaced" | "early_preloads_possible" | "events_dropped" | "event_limit" | "byte_limit" | "key_limit" | "recorder_failed" | "missing_footer" | "invalid_stream" | "process_limit" | "aggregate_limit" | "child_outlived_root" | "children_disabled" | "children_opt_in" | "child_depth_limit" | "child_count_limit" | "child_shape_unsupported" | "child_shell_or_non_node" | "child_detached" | "sync_children_unobserved" | "dotenv_not_seen" | "dotenv_attached" | "dotenv_version_unverified" | "dotenv_custom_target" | "dotenv_source_unknown" | "dotenv_options_unsupported" | "dotenv_eager_load" | "adapter_failed" | "source_maps_opt_in" | "source_maps_requested" | "source_map_unavailable" | "custom_adapter_loaded" | "capture_unverified" | "metadata_scrubbed" | "comparison_removed" | "loader_details_removed" | "call_sites_removed" | "native_env_attached" | "native_env_disabled" | "native_env_unavailable" | "native_env_early" | "native_env_candidates_inferred" | "native_env_candidates_unavailable" | "native_env_file_changed" | "workers_opt_in" | "workers_disabled" | "worker_attached" | "worker_shared_env" | "worker_shape_unsupported" | "worker_depth_limit" | "worker_count_limit" | "worker_unconfirmed" | "worker_outlived_root" | "adapter_manifest_unverified" | "failure_boundary_recorded")[] | undefined;
+    } | undefined;
+    version?: 1 | undefined;
+    rules?: Record<string, {
+        missing?: boolean | undefined;
+        read?: "required" | "forbidden" | "any" | undefined;
+        required?: boolean | undefined;
+        immutableAfterFirstRead?: boolean | undefined;
+        allowedOrigins?: string[] | undefined;
+        forbiddenOrigins?: string[] | undefined;
+        consistentProvenance?: boolean | undefined;
+        noLoaderSkip?: boolean | undefined;
+        minimumConfidence?: "observed" | "derived" | "inferred" | undefined;
+    }> | undefined;
+}>;
+export type VerificationPolicy = z.infer<typeof VerificationPolicySchema>;
+export interface VerificationCheck {
+    key?: string;
+    rule: string;
+    status: 'pass' | 'violation' | 'inconclusive';
+    reason: string;
+    evidenceIds: string[];
+}
+export interface VerificationResult {
+    schemaVersion: 'configtrace-verification/1';
+    traceId: string;
+    processId?: string;
+    status: VerificationCheck['status'];
+    exitCode: 0 | 2 | 3;
+    counts: {
+        pass: number;
+        violation: number;
+        inconclusive: number;
+    };
+    checks: VerificationCheck[];
+    rawValuesAvailable: false;
+    caveats: string[];
+}
+export declare function readVerificationPolicy(file: string): VerificationPolicy;
+/** Policies are evaluated over captured evidence. Absence under inadequate coverage is not a pass. */
+export declare function verifyTrace(trace: Trace, supplied: unknown, options?: {
+    processId?: string;
+    reference?: Trace;
+    referenceProcess?: string;
+}): VerificationResult;
+export declare function verificationText(result: VerificationResult): string;