niceeval 0.14.4-canary.67 → 0.15.0

package/dist/coordination/platform/node-process-identity.cjs

@@ -1,11 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeProcessIdentity = makeProcessIdentity;
 exports.currentProcessOwnerIdentity = currentProcessOwnerIdentity;
 exports.exactProcessState = exactProcessState;
+const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = require("node:crypto");
 const node_fs_1 = require("node:fs");
 const node_os_1 = require("node:os");
-function processStartOf(pid) {
+const PROCESS_SESSION_ID = `process-session-v1:${(0, node_crypto_1.randomUUID)()}`;
+function errnoCode(cause) {
+    return typeof cause === "object" && cause !== null ? Reflect.get(cause, "code") : undefined;
+}
+function linuxProcessStartOf(pid) {
     const stat = (0, node_fs_1.readFileSync)(`/proc/${pid}/stat`, "utf8");
     const commandEnd = stat.lastIndexOf(")");
     if (commandEnd < 0)
@@ -16,34 +22,106 @@ function processStartOf(pid) {
         throw new Error(`Could not decode process start for pid ${pid}.`);
     return processStart;
 }
-function bootId() {
+function linuxBootId() {
     const value = (0, node_fs_1.readFileSync)("/proc/sys/kernel/random/boot_id", "utf8").trim();
     if (value.length === 0)
         throw new Error("The local Linux boot ID is empty.");
     return value;
 }
+function darwinBootSessionUuid() {
+    return (0, node_child_process_1.execFileSync)("/usr/sbin/sysctl", ["-n", "kern.bootsessionuuid"], {
+        encoding: "utf8",
+        env: { LANG: "C", LC_ALL: "C", TZ: "UTC" },
+        maxBuffer: 4096,
+        timeout: 1000,
+    });
+}
+function validatedDarwinBootId(readBootSessionUuid) {
+    const value = readBootSessionUuid().trim();
+    if (!/^[0-9A-F]{8}(?:-[0-9A-F]{4}){3}-[0-9A-F]{12}$/iu.test(value)) {
+        throw new Error("The local Darwin boot session UUID is unavailable or malformed.");
+    }
+    return value;
+}
+/** @internal Keeps trust classification separate from the live OS observation boundary. */
+function makeProcessIdentity(runtime) {
+    const current = (ownerId) => {
+        if (runtime.platform !== "linux" && runtime.platform !== "darwin") {
+            throw new Error(`Process identity is unsupported on ${runtime.platform}.`);
+        }
+        const bootId = runtime.platform === "linux"
+            ? runtime.linuxBootId()
+            : validatedDarwinBootId(runtime.darwinBootSessionUuid);
+        const processStart = runtime.platform === "linux"
+            ? runtime.linuxProcessStartOf(runtime.pid)
+            : runtime.processSessionId;
+        return Object.freeze({ ownerId, host: runtime.host(), pid: runtime.pid, bootId, processStart });
+    };
+    const exactState = (owner) => {
+        if (owner.host !== runtime.host())
+            return "unknown";
+        if (runtime.platform === "linux") {
+            let localBootId;
+            try {
+                localBootId = runtime.linuxBootId();
+            }
+            catch {
+                return "unknown";
+            }
+            if (owner.bootId !== localBootId)
+                return "dead";
+            try {
+                const processStart = runtime.linuxProcessStartOf(owner.pid);
+                return processStart === owner.processStart ? "alive" : "unknown";
+            }
+            catch (cause) {
+                return errnoCode(cause) === "ENOENT" ? "dead" : "unknown";
+            }
+        }
+        if (runtime.platform !== "darwin")
+            return "unknown";
+        let localBootId;
+        try {
+            localBootId = validatedDarwinBootId(runtime.darwinBootSessionUuid);
+        }
+        catch {
+            return "unknown";
+        }
+        if (owner.bootId !== localBootId)
+            return "dead";
+        if (!Number.isSafeInteger(owner.pid) || owner.pid <= 0)
+            return "unknown";
+        // A per-process nonce proves only this exact process. It is intentionally
+        // opaque to other processes rather than weakening PID reuse protection.
+        if (owner.pid === runtime.pid && owner.processStart === runtime.processSessionId)
+            return "alive";
+        try {
+            runtime.signalZero(owner.pid);
+            // macOS `ps lstart` is second-granularity presentation data. A present PID
+            // therefore cannot prove that the durable owner, rather than a reuse, lives.
+            return "unknown";
+        }
+        catch (cause) {
+            return errnoCode(cause) === "ESRCH" ? "dead" : "unknown";
+        }
+    };
+    return Object.freeze({ current, exactState });
+}
+const liveProcessIdentity = makeProcessIdentity({
+    platform: process.platform,
+    pid: process.pid,
+    processSessionId: PROCESS_SESSION_ID,
+    host: node_os_1.hostname,
+    linuxBootId,
+    linuxProcessStartOf,
+    darwinBootSessionUuid,
+    signalZero: (pid) => process.kill(pid, 0),
+});
 function currentProcessOwnerIdentity(ownerId = `owner_${(0, node_crypto_1.randomUUID)()}`) {
-    return Object.freeze({ ownerId, host: (0, node_os_1.hostname)(), pid: process.pid, bootId: bootId(), processStart: processStartOf(process.pid) });
+    return liveProcessIdentity.current(ownerId);
 }
 /** Remote owners, read failures, and PID reuse deliberately fail closed. */
 function exactProcessState(owner) {
-    if (owner.host !== (0, node_os_1.hostname)())
-        return "unknown";
-    let localBootId;
-    try {
-        localBootId = bootId();
-    }
-    catch {
-        return "unknown";
-    }
-    if (owner.bootId !== localBootId)
-        return "dead";
-    try {
-        return processStartOf(owner.pid) === owner.processStart ? "alive" : "unknown";
-    }
-    catch (cause) {
-        const code = typeof cause === "object" && cause !== null ? Reflect.get(cause, "code") : undefined;
-        return code === "ENOENT" ? "dead" : "unknown";
-    }
+    return liveProcessIdentity.exactState(owner);
 }
 //# sourceMappingURL=node-process-identity.cjs.map

package/dist/coordination/platform/node-process-identity.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"node-process-identity.js","sourceRoot":"","sources":["node-process-identity.ts"],"names":[],"mappings":";;AAqBA,kEAEC;AAGD,8CAmBC;AA7CD,6CAAyC;AACzC,qCAAuC;AACvC,qCAAmC;AAEnC,SAAS,cAAc,CAAC,GAAW;IAC/B,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,GAAG,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,QAAQ,CAAC,CAAC;IAC3D,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,GAAG,CAAC,CAAC;IACtE,OAAO,YAAY,CAAC;AACxB,CAAC;AACD,SAAS,MAAM;IACX,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAgB,2BAA2B,CAAC,OAAO,GAAG,SAAS,IAAA,wBAAU,GAAE,EAAE;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAA,kBAAQ,GAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACvI,CAAC;AAED,4EAA4E;AAC5E,SAAgB,iBAAiB,CAAC,KAA2B;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAA,kBAAQ,GAAE;QACzB,OAAO,SAAS,CAAC;IACrB,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACD,WAAW,GAAG,MAAM,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,CAAC;QACH,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;QAC5B,OAAO,MAAM,CAAC;IAClB,IAAI,CAAC;QACD,OAAO,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;AACL,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport { hostname } from \"node:os\";\nimport type { ProcessOwnerIdentity } from \"./sqlite-coordination.ts\";\nfunction processStartOf(pid: number): string {\n    const stat = readFileSync(`/proc/${pid}/stat`, \"utf8\");\n    const commandEnd = stat.lastIndexOf(\")\");\n    if (commandEnd < 0)\n        throw new Error(`Could not decode /proc/${pid}/stat.`);\n    const fieldsAfterCommand = stat.slice(commandEnd + 2).trim().split(/\\s+/u);\n    const processStart = fieldsAfterCommand[19];\n    if (processStart === undefined || !/^\\d+$/u.test(processStart))\n        throw new Error(`Could not decode process start for pid ${pid}.`);\n    return processStart;\n}\nfunction bootId(): string {\n    const value = readFileSync(\"/proc/sys/kernel/random/boot_id\", \"utf8\").trim();\n    if (value.length === 0)\n        throw new Error(\"The local Linux boot ID is empty.\");\n    return value;\n}\nexport function currentProcessOwnerIdentity(ownerId = `owner_${randomUUID()}`): ProcessOwnerIdentity {\n    return Object.freeze({ ownerId, host: hostname(), pid: process.pid, bootId: bootId(), processStart: processStartOf(process.pid) });\n}\nexport type ExactProcessState = \"alive\" | \"dead\" | \"unknown\";\n/** Remote owners, read failures, and PID reuse deliberately fail closed. */\nexport function exactProcessState(owner: ProcessOwnerIdentity): ExactProcessState {\n    if (owner.host !== hostname())\n        return \"unknown\";\n    let localBootId: string;\n    try {\n        localBootId = bootId();\n    }\n    catch {\n        return \"unknown\";\n    }\n    if (owner.bootId !== localBootId)\n        return \"dead\";\n    try {\n        return processStartOf(owner.pid) === owner.processStart ? \"alive\" : \"unknown\";\n    }\n    catch (cause) {\n        const code = typeof cause === \"object\" && cause !== null ? Reflect.get(cause, \"code\") : undefined;\n        return code === \"ENOENT\" ? \"dead\" : \"unknown\";\n    }\n}\n"]}
+{"version":3,"file":"node-process-identity.js","sourceRoot":"","sources":["node-process-identity.ts"],"names":[],"mappings":";;AAsDA,kDAiEC;AAWD,kEAEC;AAED,8CAEC;AAxID,2DAAkD;AAClD,6CAAyC;AACzC,qCAAuC;AACvC,qCAAmC;AAEnC,MAAM,kBAAkB,GAAG,sBAAsB,IAAA,wBAAU,GAAE,EAAE,CAAC;AAChE,SAAS,SAAS,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChG,CAAC;AACD,SAAS,mBAAmB,CAAC,GAAW;IACpC,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,GAAG,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,QAAQ,CAAC,CAAC;IAC3D,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,GAAG,CAAC,CAAC;IACtE,OAAO,YAAY,CAAC;AACxB,CAAC;AACD,SAAS,WAAW;IAChB,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,qBAAqB;IAC1B,OAAO,IAAA,iCAAY,EAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE;QACpE,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE;QAC1C,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;KAChB,CAAC,CAAC;AACP,CAAC;AACD,SAAS,qBAAqB,CAAC,mBAAiC;IAC5D,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,iDAAiD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAaD,2FAA2F;AAC3F,SAAgB,mBAAmB,CAAC,OAA+B;IAI/D,MAAM,OAAO,GAAG,CAAC,OAAe,EAAwB,EAAE;QACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YACvC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;YACvB,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC7C,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC;YAC1C,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,KAA2B,EAAqB,EAAE;QAClE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE;YAC7B,OAAO,SAAS,CAAC;QACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC/B,IAAI,WAAmB,CAAC;YACxB,IAAI,CAAC;gBACD,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,CAAC;gBACH,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;gBAC5B,OAAO,MAAM,CAAC;YAClB,IAAI,CAAC;gBACD,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC5D,OAAO,YAAY,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBACX,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC7B,OAAO,SAAS,CAAC;QACrB,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACD,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,CAAC;YACH,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAC5B,OAAO,MAAM,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC;YAClD,OAAO,SAAS,CAAC;QACrB,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,gBAAgB;YAC5E,OAAO,OAAO,CAAC;QACnB,IAAI,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9B,2EAA2E;YAC3E,6EAA6E;YAC7E,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC;IACL,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;AAClD,CAAC;AACD,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;IAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,gBAAgB,EAAE,kBAAkB;IACpC,IAAI,EAAE,kBAAQ;IACd,WAAW;IACX,mBAAmB;IACnB,qBAAqB;IACrB,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;CAC5C,CAAC,CAAC;AACH,SAAgB,2BAA2B,CAAC,OAAO,GAAG,SAAS,IAAA,wBAAU,GAAE,EAAE;IACzE,OAAO,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AACD,4EAA4E;AAC5E,SAAgB,iBAAiB,CAAC,KAA2B;IACzD,OAAO,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC","sourcesContent":["import { execFileSync } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport { hostname } from \"node:os\";\nimport type { ProcessOwnerIdentity } from \"./sqlite-coordination.ts\";\nconst PROCESS_SESSION_ID = `process-session-v1:${randomUUID()}`;\nfunction errnoCode(cause: unknown): unknown {\n    return typeof cause === \"object\" && cause !== null ? Reflect.get(cause, \"code\") : undefined;\n}\nfunction linuxProcessStartOf(pid: number): string {\n    const stat = readFileSync(`/proc/${pid}/stat`, \"utf8\");\n    const commandEnd = stat.lastIndexOf(\")\");\n    if (commandEnd < 0)\n        throw new Error(`Could not decode /proc/${pid}/stat.`);\n    const fieldsAfterCommand = stat.slice(commandEnd + 2).trim().split(/\\s+/u);\n    const processStart = fieldsAfterCommand[19];\n    if (processStart === undefined || !/^\\d+$/u.test(processStart))\n        throw new Error(`Could not decode process start for pid ${pid}.`);\n    return processStart;\n}\nfunction linuxBootId(): string {\n    const value = readFileSync(\"/proc/sys/kernel/random/boot_id\", \"utf8\").trim();\n    if (value.length === 0)\n        throw new Error(\"The local Linux boot ID is empty.\");\n    return value;\n}\nfunction darwinBootSessionUuid(): string {\n    return execFileSync(\"/usr/sbin/sysctl\", [\"-n\", \"kern.bootsessionuuid\"], {\n        encoding: \"utf8\",\n        env: { LANG: \"C\", LC_ALL: \"C\", TZ: \"UTC\" },\n        maxBuffer: 4096,\n        timeout: 1000,\n    });\n}\nfunction validatedDarwinBootId(readBootSessionUuid: () => string): string {\n    const value = readBootSessionUuid().trim();\n    if (!/^[0-9A-F]{8}(?:-[0-9A-F]{4}){3}-[0-9A-F]{12}$/iu.test(value)) {\n        throw new Error(\"The local Darwin boot session UUID is unavailable or malformed.\");\n    }\n    return value;\n}\nexport type ExactProcessState = \"alive\" | \"dead\" | \"unknown\";\n/** @internal Injectable operating-system boundary for deterministic classification tests. */\nexport interface ProcessIdentityRuntime {\n    readonly platform: NodeJS.Platform;\n    readonly pid: number;\n    readonly processSessionId: string;\n    readonly host: () => string;\n    readonly linuxBootId: () => string;\n    readonly linuxProcessStartOf: (pid: number) => string;\n    readonly darwinBootSessionUuid: () => string;\n    readonly signalZero: (pid: number) => void;\n}\n/** @internal Keeps trust classification separate from the live OS observation boundary. */\nexport function makeProcessIdentity(runtime: ProcessIdentityRuntime): Readonly<{\n    current: (ownerId: string) => ProcessOwnerIdentity;\n    exactState: (owner: ProcessOwnerIdentity) => ExactProcessState;\n}> {\n    const current = (ownerId: string): ProcessOwnerIdentity => {\n        if (runtime.platform !== \"linux\" && runtime.platform !== \"darwin\") {\n            throw new Error(`Process identity is unsupported on ${runtime.platform}.`);\n        }\n        const bootId = runtime.platform === \"linux\"\n            ? runtime.linuxBootId()\n            : validatedDarwinBootId(runtime.darwinBootSessionUuid);\n        const processStart = runtime.platform === \"linux\"\n            ? runtime.linuxProcessStartOf(runtime.pid)\n            : runtime.processSessionId;\n        return Object.freeze({ ownerId, host: runtime.host(), pid: runtime.pid, bootId, processStart });\n    };\n    const exactState = (owner: ProcessOwnerIdentity): ExactProcessState => {\n        if (owner.host !== runtime.host())\n            return \"unknown\";\n        if (runtime.platform === \"linux\") {\n            let localBootId: string;\n            try {\n                localBootId = runtime.linuxBootId();\n            }\n            catch {\n                return \"unknown\";\n            }\n            if (owner.bootId !== localBootId)\n                return \"dead\";\n            try {\n                const processStart = runtime.linuxProcessStartOf(owner.pid);\n                return processStart === owner.processStart ? \"alive\" : \"unknown\";\n            }\n            catch (cause) {\n                return errnoCode(cause) === \"ENOENT\" ? \"dead\" : \"unknown\";\n            }\n        }\n        if (runtime.platform !== \"darwin\")\n            return \"unknown\";\n        let localBootId: string;\n        try {\n            localBootId = validatedDarwinBootId(runtime.darwinBootSessionUuid);\n        }\n        catch {\n            return \"unknown\";\n        }\n        if (owner.bootId !== localBootId)\n            return \"dead\";\n        if (!Number.isSafeInteger(owner.pid) || owner.pid <= 0)\n            return \"unknown\";\n        // A per-process nonce proves only this exact process. It is intentionally\n        // opaque to other processes rather than weakening PID reuse protection.\n        if (owner.pid === runtime.pid && owner.processStart === runtime.processSessionId)\n            return \"alive\";\n        try {\n            runtime.signalZero(owner.pid);\n            // macOS `ps lstart` is second-granularity presentation data. A present PID\n            // therefore cannot prove that the durable owner, rather than a reuse, lives.\n            return \"unknown\";\n        }\n        catch (cause) {\n            return errnoCode(cause) === \"ESRCH\" ? \"dead\" : \"unknown\";\n        }\n    };\n    return Object.freeze({ current, exactState });\n}\nconst liveProcessIdentity = makeProcessIdentity({\n    platform: process.platform,\n    pid: process.pid,\n    processSessionId: PROCESS_SESSION_ID,\n    host: hostname,\n    linuxBootId,\n    linuxProcessStartOf,\n    darwinBootSessionUuid,\n    signalZero: (pid) => process.kill(pid, 0),\n});\nexport function currentProcessOwnerIdentity(ownerId = `owner_${randomUUID()}`): ProcessOwnerIdentity {\n    return liveProcessIdentity.current(ownerId);\n}\n/** Remote owners, read failures, and PID reuse deliberately fail closed. */\nexport function exactProcessState(owner: ProcessOwnerIdentity): ExactProcessState {\n    return liveProcessIdentity.exactState(owner);\n}\n"]}

package/dist/coordination/platform/node-process-identity.d.cts

@@ -1,5 +1,21 @@
 import type { ProcessOwnerIdentity } from "./sqlite-coordination.cjs";
-export declare function currentProcessOwnerIdentity(ownerId?: string): ProcessOwnerIdentity;
 export type ExactProcessState = "alive" | "dead" | "unknown";
+/** @internal Injectable operating-system boundary for deterministic classification tests. */
+export interface ProcessIdentityRuntime {
+    readonly platform: NodeJS.Platform;
+    readonly pid: number;
+    readonly processSessionId: string;
+    readonly host: () => string;
+    readonly linuxBootId: () => string;
+    readonly linuxProcessStartOf: (pid: number) => string;
+    readonly darwinBootSessionUuid: () => string;
+    readonly signalZero: (pid: number) => void;
+}
+/** @internal Keeps trust classification separate from the live OS observation boundary. */
+export declare function makeProcessIdentity(runtime: ProcessIdentityRuntime): Readonly<{
+    current: (ownerId: string) => ProcessOwnerIdentity;
+    exactState: (owner: ProcessOwnerIdentity) => ExactProcessState;
+}>;
+export declare function currentProcessOwnerIdentity(ownerId?: string): ProcessOwnerIdentity;
 /** Remote owners, read failures, and PID reuse deliberately fail closed. */
 export declare function exactProcessState(owner: ProcessOwnerIdentity): ExactProcessState;

package/dist/coordination/platform/node-process-identity.d.mts

@@ -1,5 +1,21 @@
 import type { ProcessOwnerIdentity } from "./sqlite-coordination.mjs";
-export declare function currentProcessOwnerIdentity(ownerId?: string): ProcessOwnerIdentity;
 export type ExactProcessState = "alive" | "dead" | "unknown";
+/** @internal Injectable operating-system boundary for deterministic classification tests. */
+export interface ProcessIdentityRuntime {
+    readonly platform: NodeJS.Platform;
+    readonly pid: number;
+    readonly processSessionId: string;
+    readonly host: () => string;
+    readonly linuxBootId: () => string;
+    readonly linuxProcessStartOf: (pid: number) => string;
+    readonly darwinBootSessionUuid: () => string;
+    readonly signalZero: (pid: number) => void;
+}
+/** @internal Keeps trust classification separate from the live OS observation boundary. */
+export declare function makeProcessIdentity(runtime: ProcessIdentityRuntime): Readonly<{
+    current: (ownerId: string) => ProcessOwnerIdentity;
+    exactState: (owner: ProcessOwnerIdentity) => ExactProcessState;
+}>;
+export declare function currentProcessOwnerIdentity(ownerId?: string): ProcessOwnerIdentity;
 /** Remote owners, read failures, and PID reuse deliberately fail closed. */
 export declare function exactProcessState(owner: ProcessOwnerIdentity): ExactProcessState;

package/dist/coordination/platform/node-process-identity.d.ts

@@ -1,5 +1,21 @@
 import type { ProcessOwnerIdentity } from "./sqlite-coordination.js";
-export declare function currentProcessOwnerIdentity(ownerId?: string): ProcessOwnerIdentity;
 export type ExactProcessState = "alive" | "dead" | "unknown";
+/** @internal Injectable operating-system boundary for deterministic classification tests. */
+export interface ProcessIdentityRuntime {
+    readonly platform: NodeJS.Platform;
+    readonly pid: number;
+    readonly processSessionId: string;
+    readonly host: () => string;
+    readonly linuxBootId: () => string;
+    readonly linuxProcessStartOf: (pid: number) => string;
+    readonly darwinBootSessionUuid: () => string;
+    readonly signalZero: (pid: number) => void;
+}
+/** @internal Keeps trust classification separate from the live OS observation boundary. */
+export declare function makeProcessIdentity(runtime: ProcessIdentityRuntime): Readonly<{
+    current: (ownerId: string) => ProcessOwnerIdentity;
+    exactState: (owner: ProcessOwnerIdentity) => ExactProcessState;
+}>;
+export declare function currentProcessOwnerIdentity(ownerId?: string): ProcessOwnerIdentity;
 /** Remote owners, read failures, and PID reuse deliberately fail closed. */
 export declare function exactProcessState(owner: ProcessOwnerIdentity): ExactProcessState;

package/dist/coordination/platform/node-process-identity.js

@@ -5,4 +5,6 @@ const __niceevalExport0 = __niceevalCanonical["currentProcessOwnerIdentity"];
 export { __niceevalExport0 as currentProcessOwnerIdentity };
 const __niceevalExport1 = __niceevalCanonical["exactProcessState"];
 export { __niceevalExport1 as exactProcessState };
+const __niceevalExport2 = __niceevalCanonical["makeProcessIdentity"];
+export { __niceevalExport2 as makeProcessIdentity };
 //# sourceMappingURL=node-process-identity.js.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";;;AAAA,+CAA+C;AAC/C,uEAAuE;AACvE,yCAA2G;AAAlG,uGAAA,UAAU,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AACrF,2CAAoE;AAA3D,2GAAA,aAAa,OAAA;AAAE,mHAAA,qBAAqB,OAAA;AAC7C,kDAAoD;AAA3C,uGAAA,WAAW,OAAA;AAEpB,kDAAyD;AAAhD,4GAAA,gBAAgB,OAAA;AAGzB,0EAA6J;AAApJ,2HAAA,mBAAmB,OAAA;AAG5B,qCAA8D;AAArD,qGAAA,UAAU,OAAA;AAAE,iGAAA,MAAM,OAAA;AAAE,wGAAA,aAAa,OAAA;AAC1C,6CAA6C;AAC7C,6EAA6E;AAC7E,8DAAiG;AAAxF,wHAAA,oBAAoB,OAAA;AAAE,kHAAA,cAAc,OAAA;AAAE,kHAAA,cAAc,OAAA;AAK7D,kEAA4H;AAAnH,2GAAA,OAAO,OAAA;AAAE,8GAAA,UAAU,OAAA;AAAE,gHAAA,YAAY,OAAA;AAAE,wHAAA,oBAAoB,OAAA;AAAE,sHAAA,kBAAkB,OAAA","sourcesContent":["// niceeval 公开导出(import { … } from \"niceeval\")。\n// Agent/Adapter 相关见 \"niceeval/adapter\";Sandbox 相关见 \"niceeval/sandbox\"。\nexport { defineEval, defineScoreEval, defineEvalGroup, defineConfig, defineExperiment } from \"./define.ts\";\nexport { defineAdapter, defineAdapterContract } from \"./adapter.ts\";\nexport { defineJudge } from \"./assertions/judge.ts\";\nexport type { JudgeAnchor, JudgeDefinition, JudgeOptions } from \"./assertions/judge.ts\";\nexport { defineScoreMatch } from \"./assertions/match.ts\";\nexport type { ManagedScoreMatchOptions, ScoreMatch, ScoreMatchAnchor, ScoreMatchContext, ScoreMatchLlmFailure, ScoreMatchResult } from \"./assertions/match.ts\";\nexport type { AssertionEntryId } from \"./assertions/identity.ts\";\nexport { readScoreMatchAudit, type ScoreMatchAudit, type ScoreMatchAuditEnvelope, type ScoreMatchAuditReadResult, } from \"./assertions/score-match-audit.ts\";\nexport type { AgentSendWindowIdentity, AgentWorkspaceDiffEndpoint, AgentWorkspaceDiffHunks, AgentWorkspaceDiffPolicy, AgentWorkspaceDiff, AgentWorkspaceDiffWindow, AgentWorkspaceDiffWindowChange, } from \"./assertions/workspace-diff.ts\";\nexport type { PostRunBooleanAssertionHandle } from \"./assertions/api.ts\";\nexport { requireEnv, getEnv, stripComments } from \"./util.ts\";\n// 执行失败分类:抛出点糖衣类(声明死因波及多远)+ 结构守卫。判据、分类链与止损语义见\n// docs/feature/error-classification/README.md;`niceeval/adapter` 复导出同一份词表类型。\nexport { ExperimentFatalError, EvalFatalError, failureClassOf } from \"./shared/failure-class.ts\";\n// 类型(eval 作者会用到;跑哪个 agent / 用哪个 sandbox 见对应子路径)\nexport type { StreamEvent, ToolName, JsonValue, JsonMatch, Usage, Turn, EvidenceCoverageStatus, EvidenceCoverageEntry, EvidenceCoverage, TurnEvidenceCoverage, TurnInput, InputFile, AnswerValue, InputResponse, RespondAnswer, TurnHandle, SessionHandle, TestContext, ScoreTestContext, Verdict, EvalAuthorFields, EvalInput, ScoreEvalInput, EvalDefinition, AnyEvalDefinition, EvalGroupMember, EvalGroupInput, EvalGroupDefinition, EvaluationKind, EvalDescriptor, ExperimentAuthorFields, SharedStateConfig, ExperimentInput, ExperimentDefinition, ExperimentHook, ExperimentHookContext, Config, LocalizedText, JudgeConfig, Reporter, ReporterEvent, EvalResult, AcceptedDifference, AcceptedResult, RetryAttemptRecord, InvocationSummary, InvocationShape, DiagnosticRecord, ExperimentRunInfo, SandboxRunInfo, ScriptResult, CommandResult, InputRequest, InputRequestFilter, O11ySummary, TraceSpan, SpanKind, DerivedFacts, FailureClass, FailureScope, AttemptFailureInfo, AttemptFailureClassifier, ExternalCause, ExternalCauseFact, ExternalCauseLink, ExternalCauseScalar, } from \"./types.ts\";\nexport type { Adapter, AdapterContract, AdapterCreateContext, AdapterDefinition, AdapterEvalDefinition, AdapterEvalInput, AdapterIdentity, AdapterImplementation, AdapterImplementationInput, AdapterRuntimeDefinition, AdapterScoreEvalInput, EvalContext, ReservedAdapterContextKey, } from \"./adapter.ts\";\nexport type { ParsedTranscript } from \"./o11y/parsers/index.ts\";\nexport { closeQA, factuality, faithfulness, instructionFollowing, pairwisePreference } from \"./assertions/judge-presets.ts\";\nexport type { CloseQAMaterial, JudgePresetOptions, FactualityMaterial, FaithfulnessMaterial, InstructionFollowingMaterial, PairwisePreferenceMaterial } from \"./assertions/judge-presets.ts\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";;;AAAA,+CAA+C;AAC/C,uEAAuE;AACvE,yCAA2G;AAAlG,uGAAA,UAAU,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AACrF,2CAAoE;AAA3D,2GAAA,aAAa,OAAA;AAAE,mHAAA,qBAAqB,OAAA;AAC7C,kDAAoD;AAA3C,uGAAA,WAAW,OAAA;AAEpB,kDAAyD;AAAhD,4GAAA,gBAAgB,OAAA;AAGzB,0EAA6J;AAApJ,2HAAA,mBAAmB,OAAA;AAG5B,qCAA8D;AAArD,qGAAA,UAAU,OAAA;AAAE,iGAAA,MAAM,OAAA;AAAE,wGAAA,aAAa,OAAA;AAC1C,6CAA6C;AAC7C,6EAA6E;AAC7E,8DAAiG;AAAxF,wHAAA,oBAAoB,OAAA;AAAE,kHAAA,cAAc,OAAA;AAAE,kHAAA,cAAc,OAAA;AAK7D,kEAA4H;AAAnH,2GAAA,OAAO,OAAA;AAAE,8GAAA,UAAU,OAAA;AAAE,gHAAA,YAAY,OAAA;AAAE,wHAAA,oBAAoB,OAAA;AAAE,sHAAA,kBAAkB,OAAA","sourcesContent":["// niceeval 公开导出(import { … } from \"niceeval\")。\n// Agent/Adapter 相关见 \"niceeval/adapter\";Sandbox 相关见 \"niceeval/sandbox\"。\nexport { defineEval, defineScoreEval, defineEvalGroup, defineConfig, defineExperiment } from \"./define.ts\";\nexport { defineAdapter, defineAdapterContract } from \"./adapter.ts\";\nexport { defineJudge } from \"./assertions/judge.ts\";\nexport type { JudgeAnchor, JudgeDefinition, JudgeOptions } from \"./assertions/judge.ts\";\nexport { defineScoreMatch } from \"./assertions/match.ts\";\nexport type { ManagedScoreMatchOptions, ScoreMatch, ScoreMatchAnchor, ScoreMatchContext, ScoreMatchLlmFailure, ScoreMatchResult } from \"./assertions/match.ts\";\nexport type { AssertionEntryId } from \"./assertions/identity.ts\";\nexport { readScoreMatchAudit, type ScoreMatchAudit, type ScoreMatchAuditEnvelope, type ScoreMatchAuditReadResult, } from \"./assertions/score-match-audit.ts\";\nexport type { AgentSendWindowIdentity, AgentWorkspaceDiffEndpoint, AgentWorkspaceDiffHunks, AgentWorkspaceDiffPolicy, AgentWorkspaceDiff, AgentWorkspaceDiffWindow, AgentWorkspaceDiffWindowChange, } from \"./assertions/workspace-diff.ts\";\nexport type { AssertionCheck, PolymorphicBooleanAssertionHandle, PolymorphicMeasurementAssertionHandle, PostRunBooleanAssertionHandle, } from \"./assertions/api.ts\";\nexport { requireEnv, getEnv, stripComments } from \"./util.ts\";\n// 执行失败分类:抛出点糖衣类(声明死因波及多远)+ 结构守卫。判据、分类链与止损语义见\n// docs/feature/error-classification/README.md;`niceeval/adapter` 复导出同一份词表类型。\nexport { ExperimentFatalError, EvalFatalError, failureClassOf } from \"./shared/failure-class.ts\";\n// 类型(eval 作者会用到;跑哪个 agent / 用哪个 sandbox 见对应子路径)\nexport type { StreamEvent, ToolName, JsonValue, JsonMatch, Usage, Turn, EvidenceCoverageStatus, EvidenceCoverageEntry, EvidenceCoverage, TurnEvidenceCoverage, TurnInput, InputFile, AnswerValue, InputResponse, RespondAnswer, TurnHandle, SessionHandle, TestContext, ScoreTestContext, Verdict, EvalAuthorFields, EvalInput, ScoreEvalInput, EvalDefinition, AnyEvalDefinition, EvalGroupMember, EvalGroupInput, EvalGroupDefinition, EvaluationKind, EvalDescriptor, ExperimentAuthorFields, SharedStateConfig, ExperimentInput, ExperimentDefinition, ExperimentHook, ExperimentHookContext, Config, LocalizedText, JudgeConfig, Reporter, ReporterEvent, EvalResult, AcceptedDifference, AcceptedResult, RetryAttemptRecord, InvocationSummary, InvocationShape, DiagnosticRecord, ExperimentRunInfo, SandboxRunInfo, ScriptResult, CommandResult, InputRequest, InputRequestFilter, O11ySummary, TraceSpan, SpanKind, DerivedFacts, FailureClass, FailureScope, AttemptFailureInfo, AttemptFailureClassifier, ExternalCause, ExternalCauseFact, ExternalCauseLink, ExternalCauseScalar, } from \"./types.ts\";\nexport type { Adapter, AdapterAssertionsFactory, AdapterAssertionsFactoryContext, AdapterCleanupContext, AdapterContract, AdapterCreateContext, AdapterDefinition, AdapterEvalDefinition, AdapterEvalInput, AdapterIdentity, AdapterImplementation, AdapterImplementationInput, AdapterRuntimeDefinition, AdapterScoreEvalInput, EvalContext, ReservedAdapterContextKey, } from \"./adapter.ts\";\nexport type { ParsedTranscript } from \"./o11y/parsers/index.ts\";\nexport { closeQA, factuality, faithfulness, instructionFollowing, pairwisePreference } from \"./assertions/judge-presets.ts\";\nexport type { CloseQAMaterial, JudgePresetOptions, FactualityMaterial, FaithfulnessMaterial, InstructionFollowingMaterial, PairwisePreferenceMaterial } from \"./assertions/judge-presets.ts\";\n"]}

package/dist/index.d.cts

@@ -7,11 +7,11 @@ export type { ManagedScoreMatchOptions, ScoreMatch, ScoreMatchAnchor, ScoreMatch
 export type { AssertionEntryId } from "./assertions/identity.cjs";
 export { readScoreMatchAudit, type ScoreMatchAudit, type ScoreMatchAuditEnvelope, type ScoreMatchAuditReadResult, } from "./assertions/score-match-audit.cjs";
 export type { AgentSendWindowIdentity, AgentWorkspaceDiffEndpoint, AgentWorkspaceDiffHunks, AgentWorkspaceDiffPolicy, AgentWorkspaceDiff, AgentWorkspaceDiffWindow, AgentWorkspaceDiffWindowChange, } from "./assertions/workspace-diff.cjs";
-export type { PostRunBooleanAssertionHandle } from "./assertions/api.cjs";
+export type { AssertionCheck, PolymorphicBooleanAssertionHandle, PolymorphicMeasurementAssertionHandle, PostRunBooleanAssertionHandle, } from "./assertions/api.cjs";
 export { requireEnv, getEnv, stripComments } from "./util.cjs";
 export { ExperimentFatalError, EvalFatalError, failureClassOf } from "./shared/failure-class.cjs";
 export type { StreamEvent, ToolName, JsonValue, JsonMatch, Usage, Turn, EvidenceCoverageStatus, EvidenceCoverageEntry, EvidenceCoverage, TurnEvidenceCoverage, TurnInput, InputFile, AnswerValue, InputResponse, RespondAnswer, TurnHandle, SessionHandle, TestContext, ScoreTestContext, Verdict, EvalAuthorFields, EvalInput, ScoreEvalInput, EvalDefinition, AnyEvalDefinition, EvalGroupMember, EvalGroupInput, EvalGroupDefinition, EvaluationKind, EvalDescriptor, ExperimentAuthorFields, SharedStateConfig, ExperimentInput, ExperimentDefinition, ExperimentHook, ExperimentHookContext, Config, LocalizedText, JudgeConfig, Reporter, ReporterEvent, EvalResult, AcceptedDifference, AcceptedResult, RetryAttemptRecord, InvocationSummary, InvocationShape, DiagnosticRecord, ExperimentRunInfo, SandboxRunInfo, ScriptResult, CommandResult, InputRequest, InputRequestFilter, O11ySummary, TraceSpan, SpanKind, DerivedFacts, FailureClass, FailureScope, AttemptFailureInfo, AttemptFailureClassifier, ExternalCause, ExternalCauseFact, ExternalCauseLink, ExternalCauseScalar, } from "./types.cjs";
-export type { Adapter, AdapterContract, AdapterCreateContext, AdapterDefinition, AdapterEvalDefinition, AdapterEvalInput, AdapterIdentity, AdapterImplementation, AdapterImplementationInput, AdapterRuntimeDefinition, AdapterScoreEvalInput, EvalContext, ReservedAdapterContextKey, } from "./adapter.cjs";
+export type { Adapter, AdapterAssertionsFactory, AdapterAssertionsFactoryContext, AdapterCleanupContext, AdapterContract, AdapterCreateContext, AdapterDefinition, AdapterEvalDefinition, AdapterEvalInput, AdapterIdentity, AdapterImplementation, AdapterImplementationInput, AdapterRuntimeDefinition, AdapterScoreEvalInput, EvalContext, ReservedAdapterContextKey, } from "./adapter.cjs";
 export type { ParsedTranscript } from "./o11y/parsers/index.cjs";
 export { closeQA, factuality, faithfulness, instructionFollowing, pairwisePreference } from "./assertions/judge-presets.cjs";
 export type { CloseQAMaterial, JudgePresetOptions, FactualityMaterial, FaithfulnessMaterial, InstructionFollowingMaterial, PairwisePreferenceMaterial } from "./assertions/judge-presets.cjs";

package/dist/index.d.mts

@@ -7,11 +7,11 @@ export type { ManagedScoreMatchOptions, ScoreMatch, ScoreMatchAnchor, ScoreMatch
 export type { AssertionEntryId } from "./assertions/identity.mjs";
 export { readScoreMatchAudit, type ScoreMatchAudit, type ScoreMatchAuditEnvelope, type ScoreMatchAuditReadResult, } from "./assertions/score-match-audit.mjs";
 export type { AgentSendWindowIdentity, AgentWorkspaceDiffEndpoint, AgentWorkspaceDiffHunks, AgentWorkspaceDiffPolicy, AgentWorkspaceDiff, AgentWorkspaceDiffWindow, AgentWorkspaceDiffWindowChange, } from "./assertions/workspace-diff.mjs";
-export type { PostRunBooleanAssertionHandle } from "./assertions/api.mjs";
+export type { AssertionCheck, PolymorphicBooleanAssertionHandle, PolymorphicMeasurementAssertionHandle, PostRunBooleanAssertionHandle, } from "./assertions/api.mjs";
 export { requireEnv, getEnv, stripComments } from "./util.mjs";
 export { ExperimentFatalError, EvalFatalError, failureClassOf } from "./shared/failure-class.mjs";
 export type { StreamEvent, ToolName, JsonValue, JsonMatch, Usage, Turn, EvidenceCoverageStatus, EvidenceCoverageEntry, EvidenceCoverage, TurnEvidenceCoverage, TurnInput, InputFile, AnswerValue, InputResponse, RespondAnswer, TurnHandle, SessionHandle, TestContext, ScoreTestContext, Verdict, EvalAuthorFields, EvalInput, ScoreEvalInput, EvalDefinition, AnyEvalDefinition, EvalGroupMember, EvalGroupInput, EvalGroupDefinition, EvaluationKind, EvalDescriptor, ExperimentAuthorFields, SharedStateConfig, ExperimentInput, ExperimentDefinition, ExperimentHook, ExperimentHookContext, Config, LocalizedText, JudgeConfig, Reporter, ReporterEvent, EvalResult, AcceptedDifference, AcceptedResult, RetryAttemptRecord, InvocationSummary, InvocationShape, DiagnosticRecord, ExperimentRunInfo, SandboxRunInfo, ScriptResult, CommandResult, InputRequest, InputRequestFilter, O11ySummary, TraceSpan, SpanKind, DerivedFacts, FailureClass, FailureScope, AttemptFailureInfo, AttemptFailureClassifier, ExternalCause, ExternalCauseFact, ExternalCauseLink, ExternalCauseScalar, } from "./types.mjs";
-export type { Adapter, AdapterContract, AdapterCreateContext, AdapterDefinition, AdapterEvalDefinition, AdapterEvalInput, AdapterIdentity, AdapterImplementation, AdapterImplementationInput, AdapterRuntimeDefinition, AdapterScoreEvalInput, EvalContext, ReservedAdapterContextKey, } from "./adapter.mjs";
+export type { Adapter, AdapterAssertionsFactory, AdapterAssertionsFactoryContext, AdapterCleanupContext, AdapterContract, AdapterCreateContext, AdapterDefinition, AdapterEvalDefinition, AdapterEvalInput, AdapterIdentity, AdapterImplementation, AdapterImplementationInput, AdapterRuntimeDefinition, AdapterScoreEvalInput, EvalContext, ReservedAdapterContextKey, } from "./adapter.mjs";
 export type { ParsedTranscript } from "./o11y/parsers/index.mjs";
 export { closeQA, factuality, faithfulness, instructionFollowing, pairwisePreference } from "./assertions/judge-presets.mjs";
 export type { CloseQAMaterial, JudgePresetOptions, FactualityMaterial, FaithfulnessMaterial, InstructionFollowingMaterial, PairwisePreferenceMaterial } from "./assertions/judge-presets.mjs";

package/dist/index.d.ts

@@ -7,11 +7,11 @@ export type { ManagedScoreMatchOptions, ScoreMatch, ScoreMatchAnchor, ScoreMatch
 export type { AssertionEntryId } from "./assertions/identity.js";
 export { readScoreMatchAudit, type ScoreMatchAudit, type ScoreMatchAuditEnvelope, type ScoreMatchAuditReadResult, } from "./assertions/score-match-audit.js";
 export type { AgentSendWindowIdentity, AgentWorkspaceDiffEndpoint, AgentWorkspaceDiffHunks, AgentWorkspaceDiffPolicy, AgentWorkspaceDiff, AgentWorkspaceDiffWindow, AgentWorkspaceDiffWindowChange, } from "./assertions/workspace-diff.js";
-export type { PostRunBooleanAssertionHandle } from "./assertions/api.js";
+export type { AssertionCheck, PolymorphicBooleanAssertionHandle, PolymorphicMeasurementAssertionHandle, PostRunBooleanAssertionHandle, } from "./assertions/api.js";
 export { requireEnv, getEnv, stripComments } from "./util.js";
 export { ExperimentFatalError, EvalFatalError, failureClassOf } from "./shared/failure-class.js";
 export type { StreamEvent, ToolName, JsonValue, JsonMatch, Usage, Turn, EvidenceCoverageStatus, EvidenceCoverageEntry, EvidenceCoverage, TurnEvidenceCoverage, TurnInput, InputFile, AnswerValue, InputResponse, RespondAnswer, TurnHandle, SessionHandle, TestContext, ScoreTestContext, Verdict, EvalAuthorFields, EvalInput, ScoreEvalInput, EvalDefinition, AnyEvalDefinition, EvalGroupMember, EvalGroupInput, EvalGroupDefinition, EvaluationKind, EvalDescriptor, ExperimentAuthorFields, SharedStateConfig, ExperimentInput, ExperimentDefinition, ExperimentHook, ExperimentHookContext, Config, LocalizedText, JudgeConfig, Reporter, ReporterEvent, EvalResult, AcceptedDifference, AcceptedResult, RetryAttemptRecord, InvocationSummary, InvocationShape, DiagnosticRecord, ExperimentRunInfo, SandboxRunInfo, ScriptResult, CommandResult, InputRequest, InputRequestFilter, O11ySummary, TraceSpan, SpanKind, DerivedFacts, FailureClass, FailureScope, AttemptFailureInfo, AttemptFailureClassifier, ExternalCause, ExternalCauseFact, ExternalCauseLink, ExternalCauseScalar, } from "./types.js";
-export type { Adapter, AdapterContract, AdapterCreateContext, AdapterDefinition, AdapterEvalDefinition, AdapterEvalInput, AdapterIdentity, AdapterImplementation, AdapterImplementationInput, AdapterRuntimeDefinition, AdapterScoreEvalInput, EvalContext, ReservedAdapterContextKey, } from "./adapter.js";
+export type { Adapter, AdapterAssertionsFactory, AdapterAssertionsFactoryContext, AdapterCleanupContext, AdapterContract, AdapterCreateContext, AdapterDefinition, AdapterEvalDefinition, AdapterEvalInput, AdapterIdentity, AdapterImplementation, AdapterImplementationInput, AdapterRuntimeDefinition, AdapterScoreEvalInput, EvalContext, ReservedAdapterContextKey, } from "./adapter.js";
 export type { ParsedTranscript } from "./o11y/parsers/index.js";
 export { closeQA, factuality, faithfulness, instructionFollowing, pairwisePreference } from "./assertions/judge-presets.js";
 export type { CloseQAMaterial, JudgePresetOptions, FactualityMaterial, FaithfulnessMaterial, InstructionFollowingMaterial, PairwisePreferenceMaterial } from "./assertions/judge-presets.js";