oh-my-super-agent 0.1.0

package/dist/src/verification/grade-source.js

@@ -0,0 +1,30 @@
+import { claudeStructuredResultIdentity, } from "../providers/claude-structured.js";
+import { codexStructuredResultIdentity, } from "../providers/codex-exec.js";
+import { isRecord } from "../utils/fs.js";
+export function captureProtectedGradeSource(source) {
+    if (source.engine === "codex") {
+        const identity = codexStructuredResultIdentity(source.result);
+        if (!identity.certifying || identity.role_id !== "oms.grader.codex" || !isRecord(source.result.value)) {
+            throw new Error("protected Codex grade source has the wrong structured role or output");
+        }
+        return Object.freeze({
+            engine: "codex",
+            role_id: "oms.grader.codex",
+            request_id: identity.request_id,
+            fresh_session_id: identity.fresh_session_id,
+            output: source.result.value,
+        });
+    }
+    const identity = claudeStructuredResultIdentity(source.result);
+    if (!identity.certifying || identity.role_id !== "oms.grader.claude" || source.result.evidence_schema !== "grader-output.v1") {
+        throw new Error("protected Claude grade source has the wrong structured role or output");
+    }
+    return Object.freeze({
+        engine: "claude",
+        role_id: "oms.grader.claude",
+        request_id: identity.request_id,
+        fresh_session_id: identity.fresh_session_id,
+        output: source.result.result,
+    });
+}
+//# sourceMappingURL=grade-source.js.map

package/dist/src/verification/grade-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grade-source.js","sourceRoot":"","sources":["../../../src/verification/grade-source.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,GAC/B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EACL,6BAA6B,GAE9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAc1C,MAAM,UAAU,2BAA2B,CAAC,MAA4B;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,6BAA6B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,OAAO,KAAK,kBAAkB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,OAAgB;YACxB,OAAO,EAAE,kBAA2B;YACpC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;YAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,8BAA8B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,OAAO,KAAK,mBAAmB,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,KAAK,kBAAkB,EAAE,CAAC;QAC7H,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,QAAiB;QACzB,OAAO,EAAE,mBAA4B;QACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;KAC7B,CAAC,CAAC;AACL,CAAC"}

package/dist/src/verification/plan.d.ts

@@ -0,0 +1,20 @@
+export interface VerificationStep {
+    id: string;
+    command: "typescript" | "vitest" | "oms";
+    args: readonly string[];
+    timeout_ms: number;
+    max_output_bytes: number;
+}
+export interface VerificationPlan {
+    schema_version: 1;
+    steps: readonly VerificationStep[];
+}
+export interface FrozenVerificationPlan {
+    readonly plan: VerificationPlan;
+    readonly digest: string;
+}
+export declare function freezeTrackedVerificationPlan(packageRoot: string): FrozenVerificationPlan;
+/** Re-establishes the immutable in-process brand from persisted prepare-phase evidence. */
+export declare function rehydrateFrozenVerificationPlan(value: unknown): FrozenVerificationPlan;
+export declare function assertFrozenVerificationPlan(value: FrozenVerificationPlan): VerificationPlan;
+export declare function parseVerificationPlan(value: unknown, label?: string): VerificationPlan;

package/dist/src/verification/plan.js

@@ -0,0 +1,128 @@
+import { createHash } from "node:crypto";
+import { join } from "node:path";
+import { isRecord, readJsonFileNoFollow, validateExistingDirectory } from "../utils/fs.js";
+const FROZEN_PLANS = new WeakSet();
+const SHIPPED_STEPS = Object.freeze([
+    Object.freeze({
+        id: "typecheck",
+        command: "typescript",
+        args: Object.freeze(["-p", "tsconfig.test.json", "--noEmit"]),
+        timeout_ms: 120_000,
+        max_output_bytes: 262_144,
+    }),
+    Object.freeze({
+        id: "test",
+        command: "vitest",
+        args: Object.freeze(["run", "--globals"]),
+        timeout_ms: 180_000,
+        max_output_bytes: 524_288,
+    }),
+    Object.freeze({
+        id: "build",
+        command: "typescript",
+        args: Object.freeze(["-p", "tsconfig.json"]),
+        timeout_ms: 120_000,
+        max_output_bytes: 262_144,
+    }),
+    Object.freeze({
+        id: "offline-verify",
+        command: "oms",
+        args: Object.freeze(["verify"]),
+        timeout_ms: 120_000,
+        max_output_bytes: 262_144,
+    }),
+]);
+export function freezeTrackedVerificationPlan(packageRoot) {
+    const root = validateExistingDirectory(packageRoot, "package root");
+    const agentsRoot = validateExistingDirectory(join(root, ".agents"), "tracked agents root");
+    const configRoot = validateExistingDirectory(join(agentsRoot, "config"), "tracked verification config root");
+    const path = join(configRoot, "verification-plan.json");
+    const parsed = parseVerificationPlan(readJsonFileNoFollow(path, 128 * 1024), path);
+    return freezeParsedPlan(parsed);
+}
+/** Re-establishes the immutable in-process brand from persisted prepare-phase evidence. */
+export function rehydrateFrozenVerificationPlan(value) {
+    assertExactObject(value, ["plan", "digest"], "frozen verification plan evidence");
+    if (typeof value.digest !== "string" || !/^[0-9a-f]{64}$/.test(value.digest)) {
+        throw new Error("frozen verification plan evidence digest is invalid");
+    }
+    const plan = parseVerificationPlan(value.plan, "frozen verification plan evidence plan");
+    return freezeParsedPlan(plan, value.digest);
+}
+function freezeParsedPlan(parsed, expectedDigest) {
+    const plan = Object.freeze({
+        schema_version: 1,
+        steps: Object.freeze(parsed.steps.map((step) => Object.freeze({ ...step, args: Object.freeze([...step.args]) }))),
+    });
+    const digest = createHash("sha256").update(JSON.stringify(plan)).digest("hex");
+    if (expectedDigest !== undefined && expectedDigest !== digest) {
+        throw new Error("frozen verification plan evidence digest mismatch");
+    }
+    const frozen = Object.freeze({
+        plan,
+        digest,
+    });
+    FROZEN_PLANS.add(frozen);
+    return frozen;
+}
+export function assertFrozenVerificationPlan(value) {
+    if (!FROZEN_PLANS.has(value))
+        throw new Error("verification plan was not created by the trusted freeze boundary");
+    if (!Object.isFrozen(value) || !Object.isFrozen(value.plan) || !Object.isFrozen(value.plan.steps)) {
+        throw new Error("verification plan snapshot is not immutable");
+    }
+    const digest = createHash("sha256").update(JSON.stringify(value.plan)).digest("hex");
+    if (digest !== value.digest)
+        throw new Error("verification plan digest mismatch");
+    return value.plan;
+}
+export function parseVerificationPlan(value, label = "verification plan") {
+    assertExactObject(value, ["schema_version", "steps"], label);
+    if (value.schema_version !== 1)
+        throw new Error(`${label} schema_version must be 1`);
+    if (!Array.isArray(value.steps) || value.steps.length !== SHIPPED_STEPS.length) {
+        throw new Error(`${label} must contain the ${SHIPPED_STEPS.length} shipped steps`);
+    }
+    const steps = value.steps.map((candidate, index) => {
+        const stepLabel = `${label} step ${index + 1}`;
+        const expected = SHIPPED_STEPS[index];
+        if (!expected)
+            throw new Error(`${stepLabel} is not shipped`);
+        assertExactObject(candidate, ["id", "command", "args", "timeout_ms", "max_output_bytes"], stepLabel);
+        if (candidate.id !== expected.id)
+            throw new Error(`${stepLabel} id must be ${expected.id}`);
+        if (candidate.command !== expected.command) {
+            throw new Error(`${stepLabel} command must be ${expected.command}`);
+        }
+        if (!Array.isArray(candidate.args)
+            || candidate.args.length !== expected.args.length
+            || candidate.args.some((argument, argumentIndex) => argument !== expected.args[argumentIndex])) {
+            throw new Error(`${stepLabel} args do not match the shipped command`);
+        }
+        if (candidate.timeout_ms !== expected.timeout_ms) {
+            throw new Error(`${stepLabel} timeout_ms must be ${expected.timeout_ms}`);
+        }
+        if (candidate.max_output_bytes !== expected.max_output_bytes) {
+            throw new Error(`${stepLabel} max_output_bytes must be ${expected.max_output_bytes}`);
+        }
+        return {
+            ...expected,
+            args: [...expected.args],
+        };
+    });
+    return { schema_version: 1, steps };
+}
+function assertExactObject(value, keys, label) {
+    if (!isRecord(value))
+        throw new Error(`${label} must be an object`);
+    const expected = new Set(keys);
+    for (const key of keys) {
+        if (!(key in value))
+            throw new Error(`${label} is missing ${key}`);
+    }
+    for (const key of Object.keys(value)) {
+        if (!expected.has(key))
+            throw new Error(`${label} has unexpected property: ${key}`);
+    }
+}
+//# sourceMappingURL=plan.js.map

package/dist/src/verification/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/verification/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAE3F,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU,CAAC;AAe3C,MAAM,aAAa,GAAgC,MAAM,CAAC,MAAM,CAAC;IAC/D,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,WAAW;QACf,OAAO,EAAE,YAAY;QACrB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,oBAAoB,EAAE,UAAU,CAAC,CAAC;QAC7D,UAAU,EAAE,OAAO;QACnB,gBAAgB,EAAE,OAAO;KAC1B,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,MAAM;QACV,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACzC,UAAU,EAAE,OAAO;QACnB,gBAAgB,EAAE,OAAO;KAC1B,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,YAAY;QACrB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC5C,UAAU,EAAE,OAAO;QACnB,gBAAgB,EAAE,OAAO;KAC1B,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/B,UAAU,EAAE,OAAO;QACnB,gBAAgB,EAAE,OAAO;KAC1B,CAAC;CACH,CAAC,CAAC;AAOH,MAAM,UAAU,6BAA6B,CAAC,WAAmB;IAC/D,MAAM,IAAI,GAAG,yBAAyB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,kCAAkC,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,qBAAqB,CAAC,oBAAoB,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACnF,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,iBAAiB,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;IACzF,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAwB,EAAE,cAAuB;IACzE,MAAM,IAAI,GAAqB,MAAM,CAAC,MAAM,CAAC;QAC3C,cAAc,EAAE,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAC5F;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/E,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,IAAI;QACJ,MAAM;KACP,CAAC,CAAC;IACH,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAA6B;IACxE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAClH,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrF,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClF,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,KAAK,GAAG,mBAAmB;IAC/E,iBAAiB,CAAC,KAAK,EAAE,CAAC,gBAAgB,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,aAAa,CAAC,MAAM,gBAAgB,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACjD,MAAM,SAAS,GAAG,GAAG,KAAK,SAAS,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,iBAAiB,CAAC,CAAC;QAC9D,iBAAiB,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,CAAC,EAAE,SAAS,CAAC,CAAC;QACrG,IAAI,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,eAAe,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,oBAAoB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;eAC3B,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM;eAC9C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAC9F,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,wCAAwC,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,uBAAuB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,SAAS,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,6BAA6B,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;YACL,GAAG,QAAQ;YACX,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC;SACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa;IAC/E,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC"}

package/dist/src/verification/protected-runner.d.ts

@@ -0,0 +1,50 @@
+import type { RoleId } from "../domain/role-policy.js";
+import type { EvidenceReference } from "../evidence/store.js";
+import type { FrozenVerificationPlan } from "./plan.js";
+import { type VerificationResult } from "./runner.js";
+export interface ProtectedVerificationBinding {
+    readonly goal_id: string;
+    readonly goal_version: number;
+    readonly dispatch_id: string;
+    readonly dispatch_version: number;
+    readonly ticket_id: string;
+    readonly attempt: number;
+    readonly lease_token: string;
+    readonly session_id: string;
+    readonly worker_record_id: string;
+    readonly worker_id: string;
+    readonly worktree_id: string;
+    readonly worktree_root: string;
+    readonly worktree_branch: string;
+    readonly worktree_base_commit: string;
+    readonly expected_commit: string;
+    readonly executor_role: Extract<RoleId, "oms.ticket-executor" | "oms.goal-long-executor">;
+    readonly executor_engine: "claude" | "codex";
+    readonly executor_evidence: EvidenceReference;
+}
+export interface WorktreeVerificationProof {
+    readonly worktree_root: string;
+    readonly worktree_branch: string;
+    readonly head_commit: string;
+    readonly clean: true;
+}
+export interface ProtectedVerificationRun {
+    readonly binding: ProtectedVerificationBinding;
+    readonly policy_version: number;
+    readonly policy_digest: string;
+    readonly verification: VerificationResult;
+    readonly preflight: WorktreeVerificationProof;
+    readonly postflight: WorktreeVerificationProof;
+}
+export interface RunProtectedVerificationOptions {
+    packageRoot: string;
+    frozenPlan: FrozenVerificationPlan;
+    policyVersion: number;
+    policyDigest: string;
+    binding: ProtectedVerificationBinding;
+}
+/** Certifying path: caller cannot replace the process runner or installed tool paths. */
+export declare function runProtectedVerification(options: RunProtectedVerificationOptions): ProtectedVerificationRun;
+export declare function assertProtectedVerificationRun(value: unknown): asserts value is ProtectedVerificationRun;
+export declare function captureProtectedVerificationBinding(value: ProtectedVerificationBinding): ProtectedVerificationBinding;
+export declare function probeProtectedVerificationWorktree(binding: ProtectedVerificationBinding): WorktreeVerificationProof;

package/dist/src/verification/protected-runner.js

@@ -0,0 +1,171 @@
+import { realpathSync } from "node:fs";
+import { isAbsolute, normalize } from "node:path";
+import { assertLeaseToken, assertOpaqueId, assertRecordId } from "../domain/records.js";
+import { runProcess } from "../providers/process.js";
+import { validateExistingDirectory } from "../utils/fs.js";
+import { runFrozenVerification } from "./runner.js";
+const COMMIT_PATTERN = /^[a-f0-9]{40}(?:[a-f0-9]{24})?$/u;
+const PROTECTED_VERIFICATION_RUNS = new WeakSet();
+/** Certifying path: caller cannot replace the process runner or installed tool paths. */
+export function runProtectedVerification(options) {
+    const packageRoot = validateExistingDirectory(options.packageRoot, "installed OMS package root");
+    const binding = captureProtectedVerificationBinding(options.binding);
+    if (!Number.isSafeInteger(options.policyVersion) || options.policyVersion < 1) {
+        throw new Error("protected verification policy version is invalid");
+    }
+    if (!/^[a-f0-9]{64}$/u.test(options.policyDigest)) {
+        throw new Error("protected verification policy digest is invalid");
+    }
+    const preflight = probeProtectedVerificationWorktree(binding);
+    const verification = runFrozenVerification({
+        packageRoot,
+        frozenPlan: options.frozenPlan,
+        worktreeRoot: binding.worktree_root,
+        runner: runProcess,
+        requireInstalledTools: true,
+    });
+    const postflight = probeProtectedVerificationWorktree(binding);
+    const run = deepFreeze({
+        binding,
+        policy_version: options.policyVersion,
+        policy_digest: options.policyDigest,
+        verification,
+        preflight,
+        postflight,
+    });
+    PROTECTED_VERIFICATION_RUNS.add(run);
+    return run;
+}
+export function assertProtectedVerificationRun(value) {
+    if (typeof value !== "object" || value === null || !PROTECTED_VERIFICATION_RUNS.has(value)) {
+        throw new Error("live deterministic evidence requires a real OMS protected verification run");
+    }
+    if (!Object.isFrozen(value))
+        throw new Error("protected verification run lost its frozen authority boundary");
+}
+export function captureProtectedVerificationBinding(value) {
+    const worktreeRoot = validateExistingDirectory(value.worktree_root, "verification worktree");
+    if (!isAbsolute(value.worktree_root) || normalize(value.worktree_root) !== value.worktree_root || worktreeRoot !== value.worktree_root) {
+        throw new Error("verification worktree binding must be a canonical absolute path");
+    }
+    if (!Number.isSafeInteger(value.attempt) || value.attempt < 1)
+        throw new Error("verification attempt is invalid");
+    if (!Number.isSafeInteger(value.goal_version) || value.goal_version < 0)
+        throw new Error("verification goal version is invalid");
+    if (!Number.isSafeInteger(value.dispatch_version) || value.dispatch_version < 0) {
+        throw new Error("verification dispatch version is invalid");
+    }
+    if (typeof value.worktree_branch !== "string" || value.worktree_branch.length < 1 || value.worktree_branch.length > 255) {
+        throw new Error("verification worktree branch is invalid");
+    }
+    if (!COMMIT_PATTERN.test(value.expected_commit))
+        throw new Error("verification expected commit is invalid");
+    if (!COMMIT_PATTERN.test(value.worktree_base_commit))
+        throw new Error("verification worktree base commit is invalid");
+    if (value.executor_role !== "oms.ticket-executor" && value.executor_role !== "oms.goal-long-executor") {
+        throw new Error("verification executor role is invalid");
+    }
+    const expectedEngine = value.executor_role === "oms.ticket-executor" ? "claude" : "codex";
+    if (value.executor_engine !== expectedEngine)
+        throw new Error("verification executor engine does not match its role");
+    const executorEvidence = captureEvidenceReference(value.executor_evidence);
+    return deepFreeze({
+        goal_id: assertRecordId(value.goal_id, "verification goal id"),
+        goal_version: value.goal_version,
+        dispatch_id: assertRecordId(value.dispatch_id, "verification dispatch id"),
+        dispatch_version: value.dispatch_version,
+        ticket_id: assertRecordId(value.ticket_id, "verification ticket id"),
+        attempt: value.attempt,
+        lease_token: assertLeaseToken(value.lease_token, "verification lease token"),
+        session_id: assertOpaqueId(value.session_id, "verification session id"),
+        worker_record_id: assertRecordId(value.worker_record_id, "verification worker record id"),
+        worker_id: assertOpaqueId(value.worker_id, "verification worker id"),
+        worktree_id: assertOpaqueId(value.worktree_id, "verification worktree id"),
+        worktree_root: worktreeRoot,
+        worktree_branch: value.worktree_branch,
+        worktree_base_commit: value.worktree_base_commit,
+        expected_commit: value.expected_commit,
+        executor_role: value.executor_role,
+        executor_engine: value.executor_engine,
+        executor_evidence: executorEvidence,
+    });
+}
+function captureEvidenceReference(value) {
+    if (typeof value !== "object"
+        || value === null
+        || !/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/u.test(value.evidence_id)
+        || !/^[a-f0-9]{64}$/u.test(value.sha256)
+        || value.file_name !== `${value.evidence_id}.json`) {
+        throw new Error("verification executor evidence reference is invalid");
+    }
+    return Object.freeze({ ...value });
+}
+export function probeProtectedVerificationWorktree(binding) {
+    const env = protectedGitEnvironment(process.env);
+    const identity = requireGitSuccess({
+        command: "git",
+        args: ["rev-parse", "--path-format=absolute", "--show-toplevel", "HEAD"],
+        cwd: binding.worktree_root,
+        env,
+        timeoutMs: 10_000,
+        maxBufferBytes: 64 * 1024,
+    }, "verification worktree identity probe");
+    const [reportedRoot, headCommit, ...extra] = identity.stdout.trim().split(/\r?\n/u);
+    const branch = requireGitSuccess({
+        command: "git",
+        args: ["symbolic-ref", "--short", "HEAD"],
+        cwd: binding.worktree_root,
+        env,
+        timeoutMs: 10_000,
+        maxBufferBytes: 64 * 1024,
+    }, "verification worktree branch probe").stdout.trim();
+    const status = requireGitSuccess({
+        command: "git",
+        args: ["status", "--porcelain=v1", "--untracked-files=all"],
+        cwd: binding.worktree_root,
+        env,
+        timeoutMs: 10_000,
+        maxBufferBytes: 64 * 1024,
+    }, "verification worktree cleanliness probe").stdout.trim();
+    if (!reportedRoot
+        || !headCommit
+        || extra.length > 0
+        || realpathSync.native(reportedRoot) !== binding.worktree_root
+        || branch !== binding.worktree_branch
+        || headCommit !== binding.expected_commit
+        || status !== "") {
+        throw new Error("verification worktree does not match the expected clean branch and commit");
+    }
+    return Object.freeze({
+        worktree_root: binding.worktree_root,
+        worktree_branch: branch,
+        head_commit: headCommit,
+        clean: true,
+    });
+}
+function requireGitSuccess(request, label) {
+    const result = runProcess(request);
+    if (result.error || result.status !== 0 || result.signal !== null) {
+        throw new Error(`${label} failed`);
+    }
+    return result;
+}
+function protectedGitEnvironment(source) {
+    const env = {};
+    for (const key of ["PATH", "HOME", "TMPDIR", "TMP", "TEMP", "LANG", "LC_ALL", "SYSTEMROOT"]) {
+        if (source[key] !== undefined)
+            env[key] = source[key];
+    }
+    env.GIT_TERMINAL_PROMPT = "0";
+    env.GIT_CONFIG_NOSYSTEM = "1";
+    env.GIT_CONFIG_GLOBAL = "/dev/null";
+    return env;
+}
+function deepFreeze(value) {
+    if (typeof value !== "object" || value === null || Object.isFrozen(value))
+        return value;
+    for (const child of Object.values(value))
+        deepFreeze(child);
+    return Object.freeze(value);
+}
+//# sourceMappingURL=protected-runner.js.map

package/dist/src/verification/protected-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-runner.js","sourceRoot":"","sources":["../../../src/verification/protected-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAExF,OAAO,EAAE,UAAU,EAAsB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,qBAAqB,EAA2B,MAAM,aAAa,CAAC;AAE7E,MAAM,cAAc,GAAG,kCAAkC,CAAC;AAC1D,MAAM,2BAA2B,GAAG,IAAI,OAAO,EAAU,CAAC;AA+C1D,yFAAyF;AACzF,MAAM,UAAU,wBAAwB,CAAC,OAAwC;IAC/E,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,mCAAmC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,SAAS,GAAG,kCAAkC,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,qBAAqB,CAAC;QACzC,WAAW;QACX,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,OAAO,CAAC,aAAa;QACnC,MAAM,EAAE,UAAU;QAClB,qBAAqB,EAAE,IAAI;KAC5B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,kCAAkC,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,UAAU,CAAC;QACrB,OAAO;QACP,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,YAAY;QACZ,SAAS;QACT,UAAU;KACX,CAAC,CAAC;IACH,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;AAChH,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAmC;IAEnC,MAAM,YAAY,GAAG,yBAAyB,CAAC,KAAK,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC7F,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,KAAK,CAAC,aAAa,IAAI,YAAY,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QACvI,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAClH,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACjI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxH,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5G,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACtH,IAAI,KAAK,CAAC,aAAa,KAAK,qBAAqB,IAAI,KAAK,CAAC,aAAa,KAAK,wBAAwB,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,aAAa,KAAK,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1F,IAAI,KAAK,CAAC,eAAe,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACtH,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3E,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,sBAAsB,CAAC;QAC9D,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,0BAA0B,CAAC;QAC1E,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,wBAAwB,CAAC;QACpE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,0BAA0B,CAAC;QAC5E,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,yBAAyB,CAAC;QACvE,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,gBAAgB,EAAE,+BAA+B,CAAC;QACzF,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,wBAAwB,CAAC;QACpE,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,0BAA0B,CAAC;QAC1E,aAAa,EAAE,YAAY;QAC3B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,iBAAiB,EAAE,gBAAgB;KACpC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAwB;IACxD,IACE,OAAO,KAAK,KAAK,QAAQ;WACtB,KAAK,KAAK,IAAI;WACd,CAAC,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;WAClE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;WACrC,KAAK,CAAC,SAAS,KAAK,GAAG,KAAK,CAAC,WAAW,OAAO,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAAqC;IAErC,MAAM,GAAG,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,CAAC;QACxE,GAAG,EAAE,OAAO,CAAC,aAAa;QAC1B,GAAG;QACH,SAAS,EAAE,MAAM;QACjB,cAAc,EAAE,EAAE,GAAG,IAAI;KAC1B,EAAE,sCAAsC,CAAC,CAAC;IAC3C,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC;QACzC,GAAG,EAAE,OAAO,CAAC,aAAa;QAC1B,GAAG;QACH,SAAS,EAAE,MAAM;QACjB,cAAc,EAAE,EAAE,GAAG,IAAI;KAC1B,EAAE,oCAAoC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,uBAAuB,CAAC;QAC3D,GAAG,EAAE,OAAO,CAAC,aAAa;QAC1B,GAAG;QACH,SAAS,EAAE,MAAM;QACjB,cAAc,EAAE,EAAE,GAAG,IAAI;KAC1B,EAAE,yCAAyC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAE5D,IACE,CAAC,YAAY;WACV,CAAC,UAAU;WACX,KAAK,CAAC,MAAM,GAAG,CAAC;WAChB,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,aAAa;WAC3D,MAAM,KAAK,OAAO,CAAC,eAAe;WAClC,UAAU,KAAK,OAAO,CAAC,eAAe;WACtC,MAAM,KAAK,EAAE,EAChB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,eAAe,EAAE,MAAM;QACvB,WAAW,EAAE,UAAU;QACvB,KAAK,EAAE,IAAa;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAyC,EAAE,KAAa;IACjF,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAyB;IACxD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5F,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,GAAG,CAAC,iBAAiB,GAAG,WAAW,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/src/verification/result-gate-store.d.ts

@@ -0,0 +1,72 @@
+import { type RuntimeRecord } from "../domain/records.js";
+import type { Engine, RoleId } from "../domain/role-policy.js";
+import type { EvidenceReference } from "../evidence/store.js";
+export type ResultGateState = "checking" | "checked" | "grading" | "graded" | "reflecting" | "finalized" | "blocked";
+export type ResultGateOutcome = "completed" | "retryable" | "blocked";
+export interface ResultGateSubject {
+    readonly goal_id: string;
+    readonly goal_version: number;
+    readonly dispatch_id: string;
+    readonly dispatch_version: number;
+    readonly ticket_id: string;
+    readonly verifying_ticket_version: number;
+    readonly attempt: number;
+    readonly max_attempts: number;
+    readonly lease_token: string;
+    readonly worker_record_id: string;
+    readonly worker_id: string;
+    readonly session_id: string;
+    readonly executor_role: Extract<RoleId, "oms.ticket-executor" | "oms.goal-long-executor">;
+    readonly executor_engine: Engine;
+    readonly worktree_id: string;
+    readonly worktree_root: string;
+    readonly worktree_branch: string;
+    readonly worktree_base_commit: string;
+    readonly expected_commit: string;
+    readonly policy_version: number;
+    readonly policy_digest: string;
+    readonly plan_digest: string;
+    readonly verification_plan_ref: EvidenceReference;
+    readonly executor_evidence: EvidenceReference;
+}
+export interface ResultGateRoleRequest {
+    readonly request_id: string;
+    readonly role_id: "oms.grader.codex" | "oms.grader.claude" | "oms.bounded-dreamer";
+    readonly engine: Engine;
+    readonly evidence_schema: "grader-output.v1" | "reflection.v1";
+    readonly input: Readonly<Record<string, unknown>>;
+    readonly started_at: string | null;
+    readonly session_id: string | null;
+}
+export type ResultGatePayload = Record<string, unknown> & {
+    gate_id: string;
+    subject: ResultGateSubject;
+    created_at: string;
+    updated_at: string;
+    deterministic_evidence: EvidenceReference | null;
+    grade_request: ResultGateRoleRequest | null;
+    grade_evidence: EvidenceReference | null;
+    reflection_request: ResultGateRoleRequest | null;
+    reflection_evidence: EvidenceReference | null;
+    outcome: ResultGateOutcome | null;
+    trust_evidence: EvidenceReference | null;
+    blocked_reason: string | null;
+};
+export type ResultGateRecord = RuntimeRecord<ResultGateState, ResultGatePayload>;
+export interface ResultGateStore {
+    create(gateId: string, subject: ResultGateSubject, at: string): ResultGateRecord;
+    read(gateId: string): ResultGateRecord;
+    readIfExists(gateId: string): ResultGateRecord | undefined;
+    transition(options: {
+        record: ResultGateRecord;
+        step: string;
+        toState: ResultGateState;
+        at: string;
+        update: (payload: ResultGatePayload) => ResultGatePayload;
+    }): ResultGateRecord;
+    list(): readonly ResultGateRecord[];
+}
+export declare function createResultGateStore(options: {
+    packageRoot: string;
+    stateRoot: string;
+}): ResultGateStore;