oh-my-super-agent 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.agents/agents/advisor.md +15 -0
- package/.agents/agents/conductor.md +32 -0
- package/.agents/agents/dreamer.md +13 -0
- package/.agents/agents/executor.md +17 -0
- package/.agents/agents/grader.md +15 -0
- package/.agents/config/endurance-policy.json +8 -0
- package/.agents/config/oms-config.json +119 -0
- package/.agents/config/release-policy.json +12 -0
- package/.agents/config/secret-scan-policy.json +7 -0
- package/.agents/config/verification-plan.json +33 -0
- package/.agents/registry.json +11 -0
- package/.agents/rules/constitution.md +7 -0
- package/.agents/skills/conductor/SKILL.md +23 -0
- package/.agents/skills/dream/SKILL.md +14 -0
- package/.agents/skills/executor/SKILL.md +13 -0
- package/.agents/skills/oms/SKILL.md +52 -0
- package/.agents/skills/quota-aware/SKILL.md +12 -0
- package/.agents/skills/schedule/SKILL.md +13 -0
- package/.agents/skills/team-protocol/SKILL.md +20 -0
- package/LICENSE +21 -0
- package/README.md +146 -0
- package/dist/src/audit/run-ledger.d.ts +183 -0
- package/dist/src/audit/run-ledger.js +1655 -0
- package/dist/src/audit/run-ledger.js.map +1 -0
- package/dist/src/cli.d.ts +61 -0
- package/dist/src/cli.js +2096 -0
- package/dist/src/cli.js.map +1 -0
- package/dist/src/commands/github-queue-probe.d.ts +26 -0
- package/dist/src/commands/github-queue-probe.js +51 -0
- package/dist/src/commands/github-queue-probe.js.map +1 -0
- package/dist/src/commands/trace-fixture.d.ts +20 -0
- package/dist/src/commands/trace-fixture.js +72 -0
- package/dist/src/commands/trace-fixture.js.map +1 -0
- package/dist/src/conductor/activity.d.ts +46 -0
- package/dist/src/conductor/activity.js +224 -0
- package/dist/src/conductor/activity.js.map +1 -0
- package/dist/src/conductor/bridge.d.ts +53 -0
- package/dist/src/conductor/bridge.js +652 -0
- package/dist/src/conductor/bridge.js.map +1 -0
- package/dist/src/conductor/notifications.d.ts +59 -0
- package/dist/src/conductor/notifications.js +381 -0
- package/dist/src/conductor/notifications.js.map +1 -0
- package/dist/src/conductor/recovery.d.ts +29 -0
- package/dist/src/conductor/recovery.js +198 -0
- package/dist/src/conductor/recovery.js.map +1 -0
- package/dist/src/conductor/start.d.ts +73 -0
- package/dist/src/conductor/start.js +519 -0
- package/dist/src/conductor/start.js.map +1 -0
- package/dist/src/conductor/waiter.d.ts +88 -0
- package/dist/src/conductor/waiter.js +427 -0
- package/dist/src/conductor/waiter.js.map +1 -0
- package/dist/src/config.d.ts +9 -0
- package/dist/src/config.js +40 -0
- package/dist/src/config.js.map +1 -0
- package/dist/src/dispatch/advice-source.d.ts +61 -0
- package/dist/src/dispatch/advice-source.js +198 -0
- package/dist/src/dispatch/advice-source.js.map +1 -0
- package/dist/src/dispatch/advice-store.d.ts +41 -0
- package/dist/src/dispatch/advice-store.js +201 -0
- package/dist/src/dispatch/advice-store.js.map +1 -0
- package/dist/src/dispatch/advice.d.ts +34 -0
- package/dist/src/dispatch/advice.js +371 -0
- package/dist/src/dispatch/advice.js.map +1 -0
- package/dist/src/dispatch/authority.d.ts +124 -0
- package/dist/src/dispatch/authority.js +1202 -0
- package/dist/src/dispatch/authority.js.map +1 -0
- package/dist/src/dispatch/intent.d.ts +66 -0
- package/dist/src/dispatch/intent.js +71 -0
- package/dist/src/dispatch/intent.js.map +1 -0
- package/dist/src/dispatch/runtime-authority.d.ts +42 -0
- package/dist/src/dispatch/runtime-authority.js +52 -0
- package/dist/src/dispatch/runtime-authority.js.map +1 -0
- package/dist/src/doctor.d.ts +20 -0
- package/dist/src/doctor.js +85 -0
- package/dist/src/doctor.js.map +1 -0
- package/dist/src/domain/records.d.ts +44 -0
- package/dist/src/domain/records.js +138 -0
- package/dist/src/domain/records.js.map +1 -0
- package/dist/src/domain/role-policy.d.ts +67 -0
- package/dist/src/domain/role-policy.js +547 -0
- package/dist/src/domain/role-policy.js.map +1 -0
- package/dist/src/events/bus.d.ts +32 -0
- package/dist/src/events/bus.js +115 -0
- package/dist/src/events/bus.js.map +1 -0
- package/dist/src/events/kinds.d.ts +126 -0
- package/dist/src/events/kinds.js +14 -0
- package/dist/src/events/kinds.js.map +1 -0
- package/dist/src/evidence/immutable-file.d.ts +12 -0
- package/dist/src/evidence/immutable-file.js +141 -0
- package/dist/src/evidence/immutable-file.js.map +1 -0
- package/dist/src/evidence/store.d.ts +125 -0
- package/dist/src/evidence/store.js +1189 -0
- package/dist/src/evidence/store.js.map +1 -0
- package/dist/src/evidence/verdict.d.ts +17 -0
- package/dist/src/evidence/verdict.js +23 -0
- package/dist/src/evidence/verdict.js.map +1 -0
- package/dist/src/generation/agent.d.ts +5 -0
- package/dist/src/generation/agent.js +34 -0
- package/dist/src/generation/agent.js.map +1 -0
- package/dist/src/generation/frontmatter.d.ts +7 -0
- package/dist/src/generation/frontmatter.js +33 -0
- package/dist/src/generation/frontmatter.js.map +1 -0
- package/dist/src/github/adapter.d.ts +44 -0
- package/dist/src/github/adapter.js +592 -0
- package/dist/src/github/adapter.js.map +1 -0
- package/dist/src/github/dispatch-eligibility.d.ts +9 -0
- package/dist/src/github/dispatch-eligibility.js +94 -0
- package/dist/src/github/dispatch-eligibility.js.map +1 -0
- package/dist/src/github/projector.d.ts +23 -0
- package/dist/src/github/projector.js +181 -0
- package/dist/src/github/projector.js.map +1 -0
- package/dist/src/github/review.d.ts +39 -0
- package/dist/src/github/review.js +1450 -0
- package/dist/src/github/review.js.map +1 -0
- package/dist/src/github/sync.d.ts +21 -0
- package/dist/src/github/sync.js +518 -0
- package/dist/src/github/sync.js.map +1 -0
- package/dist/src/github/types.d.ts +134 -0
- package/dist/src/github/types.js +11 -0
- package/dist/src/github/types.js.map +1 -0
- package/dist/src/goals/artifact-store.d.ts +31 -0
- package/dist/src/goals/artifact-store.js +241 -0
- package/dist/src/goals/artifact-store.js.map +1 -0
- package/dist/src/goals/authority.d.ts +112 -0
- package/dist/src/goals/authority.js +621 -0
- package/dist/src/goals/authority.js.map +1 -0
- package/dist/src/goals/native-snapshot.d.ts +12 -0
- package/dist/src/goals/native-snapshot.js +53 -0
- package/dist/src/goals/native-snapshot.js.map +1 -0
- package/dist/src/goals/runtime-authority.d.ts +7 -0
- package/dist/src/goals/runtime-authority.js +20 -0
- package/dist/src/goals/runtime-authority.js.map +1 -0
- package/dist/src/health/release-assessment.d.ts +11 -0
- package/dist/src/health/release-assessment.js +83 -0
- package/dist/src/health/release-assessment.js.map +1 -0
- package/dist/src/health/release-policy.d.ts +16 -0
- package/dist/src/health/release-policy.js +40 -0
- package/dist/src/health/release-policy.js.map +1 -0
- package/dist/src/hooks/native.d.ts +30 -0
- package/dist/src/hooks/native.js +495 -0
- package/dist/src/hooks/native.js.map +1 -0
- package/dist/src/hooks/provider-runtime.d.ts +55 -0
- package/dist/src/hooks/provider-runtime.js +479 -0
- package/dist/src/hooks/provider-runtime.js.map +1 -0
- package/dist/src/hooks/provider.d.ts +102 -0
- package/dist/src/hooks/provider.js +358 -0
- package/dist/src/hooks/provider.js.map +1 -0
- package/dist/src/live/contact-journal.d.ts +73 -0
- package/dist/src/live/contact-journal.js +439 -0
- package/dist/src/live/contact-journal.js.map +1 -0
- package/dist/src/live-probes/gh-adapter.d.ts +28 -0
- package/dist/src/live-probes/gh-adapter.js +188 -0
- package/dist/src/live-probes/gh-adapter.js.map +1 -0
- package/dist/src/live-probes/github-queue.d.ts +1 -0
- package/dist/src/live-probes/github-queue.js +2 -0
- package/dist/src/live-probes/github-queue.js.map +1 -0
- package/dist/src/notifications/slack-request.d.ts +13 -0
- package/dist/src/notifications/slack-request.js +40 -0
- package/dist/src/notifications/slack-request.js.map +1 -0
- package/dist/src/outbox/processor.d.ts +27 -0
- package/dist/src/outbox/processor.js +63 -0
- package/dist/src/outbox/processor.js.map +1 -0
- package/dist/src/outbox/store.d.ts +158 -0
- package/dist/src/outbox/store.js +834 -0
- package/dist/src/outbox/store.js.map +1 -0
- package/dist/src/package-root.d.ts +1 -0
- package/dist/src/package-root.js +26 -0
- package/dist/src/package-root.js.map +1 -0
- package/dist/src/project.d.ts +12 -0
- package/dist/src/project.js +60 -0
- package/dist/src/project.js.map +1 -0
- package/dist/src/projection/generated-file.d.ts +15 -0
- package/dist/src/projection/generated-file.js +72 -0
- package/dist/src/projection/generated-file.js.map +1 -0
- package/dist/src/projection/project-workspace.d.ts +11 -0
- package/dist/src/projection/project-workspace.js +94 -0
- package/dist/src/projection/project-workspace.js.map +1 -0
- package/dist/src/projection/registry.d.ts +15 -0
- package/dist/src/projection/registry.js +59 -0
- package/dist/src/projection/registry.js.map +1 -0
- package/dist/src/projection/safe-path.d.ts +4 -0
- package/dist/src/projection/safe-path.js +106 -0
- package/dist/src/projection/safe-path.js.map +1 -0
- package/dist/src/providers/claude-interactive.d.ts +38 -0
- package/dist/src/providers/claude-interactive.js +287 -0
- package/dist/src/providers/claude-interactive.js.map +1 -0
- package/dist/src/providers/claude-structured-bridge.d.ts +32 -0
- package/dist/src/providers/claude-structured-bridge.js +215 -0
- package/dist/src/providers/claude-structured-bridge.js.map +1 -0
- package/dist/src/providers/claude-structured-completion.d.ts +23 -0
- package/dist/src/providers/claude-structured-completion.js +229 -0
- package/dist/src/providers/claude-structured-completion.js.map +1 -0
- package/dist/src/providers/claude-structured-pane.d.ts +23 -0
- package/dist/src/providers/claude-structured-pane.js +156 -0
- package/dist/src/providers/claude-structured-pane.js.map +1 -0
- package/dist/src/providers/claude-structured-store.d.ts +48 -0
- package/dist/src/providers/claude-structured-store.js +212 -0
- package/dist/src/providers/claude-structured-store.js.map +1 -0
- package/dist/src/providers/claude-structured.d.ts +56 -0
- package/dist/src/providers/claude-structured.js +250 -0
- package/dist/src/providers/claude-structured.js.map +1 -0
- package/dist/src/providers/codex-exec.d.ts +29 -0
- package/dist/src/providers/codex-exec.js +127 -0
- package/dist/src/providers/codex-exec.js.map +1 -0
- package/dist/src/providers/grading.d.ts +2 -0
- package/dist/src/providers/grading.js +20 -0
- package/dist/src/providers/grading.js.map +1 -0
- package/dist/src/providers/native-dispatch.d.ts +24 -0
- package/dist/src/providers/native-dispatch.js +34 -0
- package/dist/src/providers/native-dispatch.js.map +1 -0
- package/dist/src/providers/preflight.d.ts +65 -0
- package/dist/src/providers/preflight.js +256 -0
- package/dist/src/providers/preflight.js.map +1 -0
- package/dist/src/providers/process.d.ts +18 -0
- package/dist/src/providers/process.js +21 -0
- package/dist/src/providers/process.js.map +1 -0
- package/dist/src/queue/model.d.ts +37 -0
- package/dist/src/queue/model.js +51 -0
- package/dist/src/queue/model.js.map +1 -0
- package/dist/src/queue/service.d.ts +1 -0
- package/dist/src/queue/service.js +2 -0
- package/dist/src/queue/service.js.map +1 -0
- package/dist/src/reflections/store.d.ts +21 -0
- package/dist/src/reflections/store.js +60 -0
- package/dist/src/reflections/store.js.map +1 -0
- package/dist/src/reports/daily-trust.d.ts +11 -0
- package/dist/src/reports/daily-trust.js +98 -0
- package/dist/src/reports/daily-trust.js.map +1 -0
- package/dist/src/runs/controller.d.ts +187 -0
- package/dist/src/runs/controller.js +1182 -0
- package/dist/src/runs/controller.js.map +1 -0
- package/dist/src/runtime/composition.d.ts +9 -0
- package/dist/src/runtime/composition.js +35 -0
- package/dist/src/runtime/composition.js.map +1 -0
- package/dist/src/runtime/endurance-authorities.d.ts +44 -0
- package/dist/src/runtime/endurance-authorities.js +101 -0
- package/dist/src/runtime/endurance-authorities.js.map +1 -0
- package/dist/src/runtime/endurance-policy.d.ts +12 -0
- package/dist/src/runtime/endurance-policy.js +13 -0
- package/dist/src/runtime/endurance-policy.js.map +1 -0
- package/dist/src/runtime/lock.d.ts +63 -0
- package/dist/src/runtime/lock.js +577 -0
- package/dist/src/runtime/lock.js.map +1 -0
- package/dist/src/runtime/process-identity.d.ts +10 -0
- package/dist/src/runtime/process-identity.js +43 -0
- package/dist/src/runtime/process-identity.js.map +1 -0
- package/dist/src/runtime/quota.d.ts +130 -0
- package/dist/src/runtime/quota.js +590 -0
- package/dist/src/runtime/quota.js.map +1 -0
- package/dist/src/runtime/record-store.d.ts +45 -0
- package/dist/src/runtime/record-store.js +272 -0
- package/dist/src/runtime/record-store.js.map +1 -0
- package/dist/src/runtime/schema.d.ts +28 -0
- package/dist/src/runtime/schema.js +194 -0
- package/dist/src/runtime/schema.js.map +1 -0
- package/dist/src/runtime/stable-id.d.ts +3 -0
- package/dist/src/runtime/stable-id.js +27 -0
- package/dist/src/runtime/stable-id.js.map +1 -0
- package/dist/src/runtime/system-clock.d.ts +8 -0
- package/dist/src/runtime/system-clock.js +35 -0
- package/dist/src/runtime/system-clock.js.map +1 -0
- package/dist/src/schedule/service-plan.d.ts +58 -0
- package/dist/src/schedule/service-plan.js +327 -0
- package/dist/src/schedule/service-plan.js.map +1 -0
- package/dist/src/schedule/user-installation.d.ts +62 -0
- package/dist/src/schedule/user-installation.js +701 -0
- package/dist/src/schedule/user-installation.js.map +1 -0
- package/dist/src/schedule/user-plan.d.ts +47 -0
- package/dist/src/schedule/user-plan.js +286 -0
- package/dist/src/schedule/user-plan.js.map +1 -0
- package/dist/src/scheduler/minute.d.ts +31 -0
- package/dist/src/scheduler/minute.js +441 -0
- package/dist/src/scheduler/minute.js.map +1 -0
- package/dist/src/schemas/registry.d.ts +10 -0
- package/dist/src/schemas/registry.js +36 -0
- package/dist/src/schemas/registry.js.map +1 -0
- package/dist/src/security/secret-scan.d.ts +50 -0
- package/dist/src/security/secret-scan.js +384 -0
- package/dist/src/security/secret-scan.js.map +1 -0
- package/dist/src/sessions/registry.d.ts +89 -0
- package/dist/src/sessions/registry.js +443 -0
- package/dist/src/sessions/registry.js.map +1 -0
- package/dist/src/state.d.ts +27 -0
- package/dist/src/state.js +235 -0
- package/dist/src/state.js.map +1 -0
- package/dist/src/status/hud.d.ts +37 -0
- package/dist/src/status/hud.js +88 -0
- package/dist/src/status/hud.js.map +1 -0
- package/dist/src/team/plan.d.ts +31 -0
- package/dist/src/team/plan.js +184 -0
- package/dist/src/team/plan.js.map +1 -0
- package/dist/src/team/projection.d.ts +24 -0
- package/dist/src/team/projection.js +79 -0
- package/dist/src/team/projection.js.map +1 -0
- package/dist/src/tickets/admission.d.ts +34 -0
- package/dist/src/tickets/admission.js +169 -0
- package/dist/src/tickets/admission.js.map +1 -0
- package/dist/src/tickets/materializer.d.ts +1 -0
- package/dist/src/tickets/materializer.js +2 -0
- package/dist/src/tickets/materializer.js.map +1 -0
- package/dist/src/tickets/runtime-authority.d.ts +32 -0
- package/dist/src/tickets/runtime-authority.js +46 -0
- package/dist/src/tickets/runtime-authority.js.map +1 -0
- package/dist/src/tickets/store.d.ts +221 -0
- package/dist/src/tickets/store.js +2025 -0
- package/dist/src/tickets/store.js.map +1 -0
- package/dist/src/tracer/one-ticket.d.ts +58 -0
- package/dist/src/tracer/one-ticket.js +578 -0
- package/dist/src/tracer/one-ticket.js.map +1 -0
- package/dist/src/trust/assessment.d.ts +24 -0
- package/dist/src/trust/assessment.js +124 -0
- package/dist/src/trust/assessment.js.map +1 -0
- package/dist/src/trust/runs.d.ts +13 -0
- package/dist/src/trust/runs.js +46 -0
- package/dist/src/trust/runs.js.map +1 -0
- package/dist/src/types.d.ts +6 -0
- package/dist/src/types.js +2 -0
- package/dist/src/types.js.map +1 -0
- package/dist/src/utils/fs.d.ts +13 -0
- package/dist/src/utils/fs.js +188 -0
- package/dist/src/utils/fs.js.map +1 -0
- package/dist/src/verification/authority.d.ts +28 -0
- package/dist/src/verification/authority.js +153 -0
- package/dist/src/verification/authority.js.map +1 -0
- package/dist/src/verification/grade-source.d.ts +17 -0
- package/dist/src/verification/grade-source.js +30 -0
- package/dist/src/verification/grade-source.js.map +1 -0
- package/dist/src/verification/plan.d.ts +20 -0
- package/dist/src/verification/plan.js +128 -0
- package/dist/src/verification/plan.js.map +1 -0
- package/dist/src/verification/protected-runner.d.ts +50 -0
- package/dist/src/verification/protected-runner.js +171 -0
- package/dist/src/verification/protected-runner.js.map +1 -0
- package/dist/src/verification/result-gate-store.d.ts +72 -0
- package/dist/src/verification/result-gate-store.js +193 -0
- package/dist/src/verification/result-gate-store.js.map +1 -0
- package/dist/src/verification/result-gate.d.ts +41 -0
- package/dist/src/verification/result-gate.js +731 -0
- package/dist/src/verification/result-gate.js.map +1 -0
- package/dist/src/verification/runner.d.ts +38 -0
- package/dist/src/verification/runner.js +143 -0
- package/dist/src/verification/runner.js.map +1 -0
- package/dist/src/verification/sandbox.d.ts +16 -0
- package/dist/src/verification/sandbox.js +199 -0
- package/dist/src/verification/sandbox.js.map +1 -0
- package/dist/src/verify.d.ts +8 -0
- package/dist/src/verify.js +35 -0
- package/dist/src/verify.js.map +1 -0
- package/dist/src/watchdog/reconcile.d.ts +42 -0
- package/dist/src/watchdog/reconcile.js +440 -0
- package/dist/src/watchdog/reconcile.js.map +1 -0
- package/dist/src/workers/bridge.d.ts +35 -0
- package/dist/src/workers/bridge.js +426 -0
- package/dist/src/workers/bridge.js.map +1 -0
- package/dist/src/workers/delivery.d.ts +31 -0
- package/dist/src/workers/delivery.js +876 -0
- package/dist/src/workers/delivery.js.map +1 -0
- package/dist/src/workers/panes.d.ts +32 -0
- package/dist/src/workers/panes.js +212 -0
- package/dist/src/workers/panes.js.map +1 -0
- package/dist/src/workers/registry.d.ts +80 -0
- package/dist/src/workers/registry.js +351 -0
- package/dist/src/workers/registry.js.map +1 -0
- package/dist/src/workers/runtime.d.ts +44 -0
- package/dist/src/workers/runtime.js +21 -0
- package/dist/src/workers/runtime.js.map +1 -0
- package/dist/src/worktrees/manager.d.ts +35 -0
- package/dist/src/worktrees/manager.js +315 -0
- package/dist/src/worktrees/manager.js.map +1 -0
- package/docs/ARCHITECTURE.md +323 -0
- package/docs/PLAN.md +216 -0
- package/docs/REFERENCES.md +42 -0
- package/docs/ROADMAP.md +327 -0
- package/docs/SECURITY.md +242 -0
- package/docs/adr/0001-tracer-first-file-backed-certification.md +41 -0
- package/docs/adr/0002-conductor-first-typed-dispatch.md +102 -0
- package/docs/adr/0003-mandatory-pre-dispatch-advice.md +59 -0
- package/docs/compatibility/claude-code-2.1.207.md +25 -0
- package/loop/contract.md +102 -0
- package/package.json +54 -0
- package/schemas/advisor-evidence.schema.json +54 -0
- package/schemas/advisor-output.schema.json +31 -0
- package/schemas/conductor-activity-payload.schema.json +38 -0
- package/schemas/conductor-decision.schema.json +29 -0
- package/schemas/conductor-dispatch-intent.schema.json +71 -0
- package/schemas/conductor-dispatch-preparation.schema.json +46 -0
- package/schemas/conductor-dispatch-proposal.schema.json +82 -0
- package/schemas/conductor-goal-proposal.schema.json +30 -0
- package/schemas/conductor-manage-worker.schema.json +17 -0
- package/schemas/conductor-notification-payload.schema.json +39 -0
- package/schemas/conductor-process-result.schema.json +14 -0
- package/schemas/conductor-route.schema.json +51 -0
- package/schemas/conductor-start-team.schema.json +16 -0
- package/schemas/conductor-waiter-payload.schema.json +68 -0
- package/schemas/deterministic-check.schema.json +107 -0
- package/schemas/dispatch-acknowledgement.schema.json +15 -0
- package/schemas/dispatch-advice-payload.schema.json +64 -0
- package/schemas/dispatch-payload.schema.json +131 -0
- package/schemas/dispatch-result.schema.json +28 -0
- package/schemas/endurance-policy.schema.json +16 -0
- package/schemas/events/dispatch-delivery-requested.schema.json +17 -0
- package/schemas/events/github-observed.schema.json +28 -0
- package/schemas/events/native-hook-observed.schema.json +35 -0
- package/schemas/events/provider-observed.schema.json +64 -0
- package/schemas/events/run-heartbeat-due.schema.json +10 -0
- package/schemas/events/slack-notification-requested.schema.json +14 -0
- package/schemas/events/structured-role-completed.schema.json +54 -0
- package/schemas/events/ticket-resume-due.schema.json +28 -0
- package/schemas/events/watchdog-lease-expired.schema.json +14 -0
- package/schemas/events/watchdog-outbox-stalled.schema.json +12 -0
- package/schemas/events/watchdog-session-stalled.schema.json +11 -0
- package/schemas/evidence-record.schema.json +37 -0
- package/schemas/executor-result.schema.json +17 -0
- package/schemas/github-observation.schema.json +33 -0
- package/schemas/github-watermark.schema.json +66 -0
- package/schemas/goal-artifact.schema.json +19 -0
- package/schemas/goal-create-input.schema.json +14 -0
- package/schemas/goal-executor-result.schema.json +18 -0
- package/schemas/goal-payload.schema.json +95 -0
- package/schemas/grader-output.schema.json +33 -0
- package/schemas/lease-expiry.schema.json +19 -0
- package/schemas/live-disclosure.schema.json +16 -0
- package/schemas/live-outcome.schema.json +52 -0
- package/schemas/native-goal-snapshot.schema.json +27 -0
- package/schemas/provider-observed.schema.json +64 -0
- package/schemas/quota-observation.schema.json +72 -0
- package/schemas/reflection-evidence.schema.json +61 -0
- package/schemas/reflection.schema.json +13 -0
- package/schemas/regression-request.schema.json +54 -0
- package/schemas/release-assessment.schema.json +34 -0
- package/schemas/release-policy.schema.json +30 -0
- package/schemas/result-gate-payload.schema.json +244 -0
- package/schemas/review-delivery-payload.schema.json +42 -0
- package/schemas/role-policy.schema.json +111 -0
- package/schemas/run-abort-input.schema.json +11 -0
- package/schemas/run-completion-proof.schema.json +62 -0
- package/schemas/run-ledger-entry.schema.json +78 -0
- package/schemas/run-manifest.schema.json +74 -0
- package/schemas/run-start-intent.schema.json +74 -0
- package/schemas/runtime-record.schema.json +111 -0
- package/schemas/service-plan.schema.json +35 -0
- package/schemas/session-payload.schema.json +80 -0
- package/schemas/structured-role-read-request.schema.json +14 -0
- package/schemas/structured-role-request.schema.json +44 -0
- package/schemas/structured-role-result.schema.json +38 -0
- package/schemas/structured-role-submit-result.schema.json +15 -0
- package/schemas/team-checkpoint.schema.json +42 -0
- package/schemas/team-plan.schema.json +30 -0
- package/schemas/ticket-content.schema.json +38 -0
- package/schemas/ticket-queue-payload.schema.json +191 -0
- package/schemas/trust-report.schema.json +68 -0
- package/schemas/trust-run.schema.json +47 -0
- package/schemas/ultragoal-checkpoint.schema.json +49 -0
- package/schemas/user-schedule-installation-v1.schema.json +32 -0
- package/schemas/user-schedule-installation.schema.json +38 -0
- package/schemas/user-schedule-plan.schema.json +39 -0
- package/schemas/verification-plan-evidence.schema.json +37 -0
- package/schemas/worker-acknowledge-dispatch.schema.json +12 -0
- package/schemas/worker-payload.schema.json +47 -0
- package/schemas/worker-read-dispatch.schema.json +11 -0
- package/schemas/worker-record-dispatch-result.schema.json +14 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"result-gate.js","sourceRoot":"","sources":["../../../src/verification/result-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACL,mCAAmC,GAEpC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAA8B,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAsB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EACL,oCAAoC,GAErC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,GAKtB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAClC,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAU,CAAC;AAwBnD,MAAM,UAAU,uBAAuB,CAAC,OAavC;IACC,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,yBAAyB,CAAC,OAAO,CAAC,UAAU,IAAI,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAClH,MAAM,aAAa,GAAG,yBAAyB,CAAC,OAAO,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,8BAA8B,CAAC;QAChE,WAAW;QACX,UAAU;QACV,aAAa;QACb,SAAS;QACT,OAAO,EAAE,eAAe;QACxB,KAAK;KACN,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oCAAoC,CAAC;QAChF,WAAW;QACX,UAAU;QACV,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;KAC7C,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,mCAAmC,CAAC;QACvF,WAAW;QACX,UAAU;QACV,aAAa;QACb,SAAS;QACT,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,GAAG;QACH,KAAK;KACN,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,kBAAkB,CAAC;IACtE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,MAAM,KAAK,GAAG,qBAAqB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,CAAC,IAAsB,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEpG,SAAS,OAAO,CAAC,UAAkB;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,oBAAoB,CAAC;YAChC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;YACnC,MAAM,EAAE,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC;YAC5C,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACtE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,cAAc,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;gBACpD,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;oBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClF,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;oBAAE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;qBAC7C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7B,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,QAAQ,CAAC,OAAO;wBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC9B,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,QAAQ,CAAC,OAAO;wBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,oDAAoD,CAAC,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,SAAS,UAAU,CAAC,QAAwB,EAAE,MAAc;QAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAChD,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAC9E,KAAK,CACN,CAAC,CAAC;IACL,CAAC;IAED,SAAS,cAAc,CAAC,QAAwB;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,IACE,QAAQ,CAAC,KAAK,KAAK,UAAU;eAC1B,QAAQ,CAAC,OAAO,CAAC,UAAU,KAAK,MAAM;eACtC,MAAM,EAAE,MAAM,KAAK,MAAM;eACzB,QAAQ,CAAC,OAAO,CAAC,iBAAiB,KAAK,IAAI;YAC9C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,yBAAyB,CACxC,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,OAAO,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,EAC1G,6BAA6B,CAC9B,CAAC;QACF,IACE,IAAI,CAAC,KAAK,KAAK,QAAQ;eACpB,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,YAAY;eAC9C,IAAI,CAAC,OAAO,CAAC,gBAAgB,KAAK,aAAa;eAC/C,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;eACjC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO;eACpC,MAAM,CAAC,KAAK,KAAK,WAAW;eAC5B,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,OAAO;eAC3C,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;eAC3C,MAAM,CAAC,WAAW,KAAK,IAAI;eAC3B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;eAC3D,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU;eACzD,CAAC,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC;eAC5F,MAAM,CAAC,OAAO,CAAC,qBAAqB,KAAK,IAAI;eAC7C,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,YAAY,CAAC,UAAU;eACtD,MAAM,CAAC,OAAO,CAAC,cAAc,KAAK,YAAY,CAAC,aAAa;eAC5D,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,YAAY,CAAC,YAAY;eAC1D,MAAM,CAAC,KAAK,KAAK,MAAM;eACvB,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU;eACzD,MAAM,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;eACvD,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;eACxD,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,OAAO;eACpD,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM;eAClD,OAAO,CAAC,OAAO,CAAC,kBAAkB,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU;eAClE,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;eACjD,QAAQ,CAAC,eAAe,KAAK,aAAa;eAC1C,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,OAAO,CAAC,aAAa;eACzD,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,eAAe;eACpD,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,OAAO,CAAC,oBAAoB;eAC9D,gBAAgB,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;YAC9D,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAChH,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACtF,IACE,IAAI,CAAC,aAAa,KAAK,mBAAmB;eACvC,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;eACnC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,YAAY,CAAC,UAAU;YAClD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,YAAY,EAAE,IAAI,CAAC,OAAO;YAC1B,WAAW,EAAE,QAAQ,CAAC,SAAS;YAC/B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;YAClC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,wBAAwB,EAAE,MAAM,CAAC,OAAO;YACxC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW;YACzC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,gBAAgB;YACnD,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;YACrC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;YACvC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO;YACvC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;YACxC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW;YACzC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa;YAC7C,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,eAAe;YACjD,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,oBAAoB;YAC3D,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,cAAc,EAAE,YAAY,CAAC,aAAa;YAC1C,aAAa,EAAE,YAAY,CAAC,YAAY;YACxC,WAAW,EAAE,YAAY,CAAC,UAAU;YACpC,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB;YAC3D,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB;SACtD,CAAC,CAAC;IACL,CAAC;IAED,SAAS,KAAK,CAAC,IAAsB;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC,UAAU,CAAC;gBACtB,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,SAAS;gBAClB,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC;gBAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,IAAsB;QACnC,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,OAAO,CAAC,sBAAsB,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC9G,IAAI,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtC,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;oBACzB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,SAAS;oBAClB,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC;oBAC9B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;YAC9C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3D,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO;gBACvC,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC;gBACrC,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3C,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAClG,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpG,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;gBACzB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,QAAQ;gBACjB,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC;gBAC9B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;aACrE,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,SAAS,YAAY,CAAC,IAAsB;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAClE,IAAI,qBAAqB,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,cAAc,EAAE,CAAC;YACjB,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;YACrC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO;YACjC,WAAW,EAAE,QAAQ,CAAC,SAAS;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO;YACjC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW;YACzC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;YACxC,aAAa,EAAE,IAAI,CAAC,MAAM;YAC1B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;YACrC,mBAAmB,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC;YAC9D,sBAAsB,EAAE,qBAAqB;YAC7C,mBAAmB,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO;YACtF,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,cAAc,CAAC,eAAe,EAAE,qBAAqB,CAAC,WAAW,EAAE,qBAAqB,CAAC,MAAM,CAAC;YAC5G,OAAO,EAAE,IAAI,CAAC,OAAmD;YACjE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,eAAe,EAAE,kBAAkB;YACnC,KAAK;YACL,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,SAAS,iBAAiB,CACxB,IAAsB,EACtB,OAA8B;QAQ9B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,0BAA0B,EAAE,GAAG,OAAO,CAAC,UAAU,aAAa,CAAC,CAAC;QACnG,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,uGAAuG,CAAC,CAAC;QAC3H,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;QAChI,CAAC;QACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,SAAS;YAClB,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACpB,GAAG,OAAO;gBACV,aAAa,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;aACrF,CAAC;SACH,CAAC,CAAC;QACH,IAAI,MAAsD,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,GAAG,eAAe,CAA0B;gBAChD,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC;gBACjC,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;gBAClC,SAAS,EAAE,OAAO,CAAC,UAAU;gBAC7B,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa;gBACvC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC;gBAC1D,WAAW;gBACX,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;YACvC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,SAAS,oBAAoB,CAC3B,IAAsB,EACtB,OAA8B;QAQ9B,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,OAAO,CAAC,OAAO,KAAK,mBAAmB,IAAI,OAAO,CAAC,OAAO,KAAK,qBAAqB,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC;gBACxC,SAAS,EAAE,OAAO,CAAC,UAAU;gBAC7B,MAAM,EAAE,OAAO,CAAC,OAAO;gBACvB,cAAc,EAAE,OAAO,CAAC,eAAe;gBACvC,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;gBACzB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,GAAG,OAAO,CAAC,eAAe,iBAAiB;gBACjD,OAAO,EAAE,OAAO,CAAC,KAAK;gBACtB,EAAE,EAAE,SAAS;gBACb,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE;oBACvD,GAAG,OAAO;oBACV,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB;iBAC/C,CAAC;aACH,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;YACpG,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;gBAC7B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;gBACzC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,mBAAmB;oBACzC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE;oBACpE,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrH,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;YAC7B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;YACzC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,mBAAmB;gBACzC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE;gBACpE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,SAAS,UAAU,CACjB,IAAsB,EACtB,OAA8B,EAC9B,KAA8B,EAC9B,SAAiB,EACjB,MAA4B;QAE5B,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAClE,IAAI,qBAAqB,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACnG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,sBAA2C,EAAE,qBAAqB,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC;YACtC,cAAc,EAAE,CAAC;YACjB,WAAW,EAAE,cAAc,CAAC,OAAO,EAAE,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC;YAC3F,aAAa,EAAE,eAAe;YAC9B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS;YACzC,aAAa,EAAE,OAAO,CAAC,OAAO;YAC9B,UAAU,EAAE,kBAAkB,CAAC,SAAS,EAAE,0BAA0B,CAAC;YACrE,OAAO,EAAE,KAAK;SACf,EAAE,MAAM,CAAC,CAAC;QACX,OAAO,OAAO,CAAC,GAAG,CAAC;IACrB,CAAC;IAED,SAAS,MAAM,CAAC,IAAsB;QACpC,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;YAChG,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YAChF,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAChE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACtE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC5E,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACnF,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;gBACtF,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBAChF,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;oBACzB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,YAAY;oBACrB,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC;oBAC9B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;iBACnE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACnD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAChE,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzD,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC;YACzB,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/D,IAAI,CAAC,SAAS,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACpF,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,SAAS,iBAAiB,CACxB,IAAsB,EACtB,eAAkC,EAClC,aAA6B,EAC7B,KAAqB;QAErB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC;YAChG,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,eAAe;YAChC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;gBACnB,cAAc,EAAE,CAAC;gBACjB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS;gBACzC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO;gBACrC,gBAAgB,EAAE,eAAe;gBACjC,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;gBAC3D,mBAAmB,EAAE,aAAa,CAAC,OAAO;gBAC1C,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;gBAC3C,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,SAAS,QAAQ,CACf,IAAsB,EACtB,qBAAwC,EACxC,aAAgC;QAEhC,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC1C,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC5D,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS;gBACvC,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC;gBAC7D,oBAAoB,EAAE,qBAAqB;gBAC3C,aAAa;aACd,CAAC,CAAC,MAAM,CAAC;QACZ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,cAAc,CAAC;YAC3B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;YAC5C,qBAAqB;YACrB,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;SACjD,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,UAAU,CAAC;YACtB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,WAAW;YACpB,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;SACvF,CAAC,CAAC;IACL,CAAC;IAED,SAAS,WAAW,CAAC,IAAsB,EAAE,MAA+B;QAC1E,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;QACrG,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAChF,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC;QACtG,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC;gBAC7C,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;gBACxD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS;gBACvC,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC;gBAC7D,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI;oBAC1C,CAAC,CAAC,mDAAmD;oBACrD,CAAC,CAAC,wCAAwC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC,EAAE;gBACpG,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB;gBACxD,oBAAoB,EAAE,qBAAqB;gBAC3C,aAAa;gBACb,eAAe;aAChB,CAAC,CAAC,MAAM,CAAC;QACZ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC;YACzC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;YAC5C,eAAe;YACf,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;YAChD,MAAM,EAAE;gBACN,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC7B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;aAC1C;SACF,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrH,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC;gBACvD,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,cAAc,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC3D,OAAO,EAAE,YAAY;gBACrB,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC;gBAC7D,kBAAkB,EAAE,UAAU,CAAC,GAAG;aACnC,CAAC,CAAC,MAAM,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK;YAClD,CAAC,CAAC,cAAc,CAAC;gBACf,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;gBAC5C,qBAAqB;gBACrB,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;aACjD,CAAC;YACF,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,KAAK,CAAC,UAAU,CAAC;YACtB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS,MAAM,CAAC,KAAK,EAAE;YAC7B,OAAO,EAAE,WAAW;YACpB,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACpB,GAAG,OAAO;gBACV,mBAAmB,EAAE,UAAU,CAAC,GAAG;gBACnC,cAAc,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,cAAc;gBACpD,OAAO,EAAE,MAAM,CAAC,KAAgC;aACjD,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,SAAS,KAAK,CAAC,IAAsB,EAAE,SAAiB;QACtD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC;gBACnD,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;gBACjE,OAAO,EAAE,YAAY;gBACrB,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC;gBAC7D,KAAK,EAAE,MAAM;gBACb,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvF,CAAC,CAAC,MAAM,CAAC;QACZ,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,KAAK,IAAI;YAChE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,aAAa,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK;YACnD,CAAC,CAAC,cAAc,CAAC;gBACf,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;gBAC5C,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAuB;gBAC3D,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;aACjD,CAAC;YACF,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,KAAK,CAAC,UAAU,CAAC;YACtB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,SAAS;YAClB,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACpB,GAAG,OAAO;gBACV,OAAO,EAAE,SAAS;gBAClB,cAAc,EAAE,MAAM;gBACtB,cAAc,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,cAAc;aACrD,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,SAAS,QAAQ,CAAC,IAAsB;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS;YACrC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW;gBAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAgD;gBAC/D,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY;oBACvD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,UAAU,CAAC;QACnB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,UAAU,EAAE,IAAI,CAAC,KAAK;YACtB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,KAAK;YAC1B,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;YAC3D,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3C,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;YACrD,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3C,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;SACpC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,mBAAmB,CAC1B,IAAsB,EACtB,OAA8B,EAC9B,SAAyD;QAEzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;YACvD,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;YACrC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;SACvC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACnG,MAAM,aAAa,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,mBAAmB,CAAC;YAClB,SAAS;YACT,aAAa;YACb,SAAS;YACT,cAAc,EAAE,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,oBAAoB;YAChF,SAAS,EAAE,OAAO,CAAC,UAAU;YAC7B,OAAO,EAAE;gBACP,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB;YACD,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;SACrC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAsB;QACtC,OAAO;QACP,IAAI,CAAC,UAAU;YACb,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3C,CAAC;QACD,IAAI;YACF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5C,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAwB;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/D,OAAO,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA0B,EAC1B,OAA8B,EAC9B,IAA2B;IAE3B,OAAO,OAAO,CAAC,eAAe,KAAK,kBAAkB;QACnD,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE;QACrC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,KAAwC;IAC3D,OAAO;QACL,qDAAqD;QACrD,2FAA2F;QAC3F,wGAAwG;QACxG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;KACtB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA0B,EAC1B,SAA4B,EAC5B,MAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,CAAC;QACpB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE;YACJ,IAAI,EAAE,+BAA+B;YACrC,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc;YACxD,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,GAAG;SACjE;QACD,GAAG,EAAE,OAAO,CAAC,aAAa;QAC1B,GAAG,EAAE,uBAAuB,CAAC,SAAS,CAAC;QACvC,SAAS,EAAE,MAAM;QACjB,cAAc,EAAE,cAAc;KAC/B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,OAAO,CAAC,oBAAoB;QACzC,WAAW,EAAE,OAAO,CAAC,eAAe;QACpC,KAAK,EAAE,MAAM,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAyB;IACxD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5F,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,GAAG,CAAC,iBAAiB,GAAG,WAAW,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAmC,EAAE,KAAa;IAC1E,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,WAAW,CAAC,CAAC;IAC/E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAA0C,EAC1C,KAA2C;IAE3C,OAAO,IAAI,KAAK,IAAI;WACf,IAAI,KAAK,SAAS;WAClB,KAAK,KAAK,IAAI;WACd,KAAK,KAAK,SAAS;WACnB,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;WACtC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;WAC5B,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAmB;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACjF,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5F,CAAC"}
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
import type { ProcessRunner } from "../providers/process.js";
|
|
2
|
+
import type { FrozenVerificationPlan } from "./plan.js";
|
|
3
|
+
export interface VerificationStepResult {
|
|
4
|
+
id: string;
|
|
5
|
+
status: number | null;
|
|
6
|
+
signal: NodeJS.Signals | null;
|
|
7
|
+
passed: boolean;
|
|
8
|
+
stdout: string;
|
|
9
|
+
stderr: string;
|
|
10
|
+
error: string | null;
|
|
11
|
+
}
|
|
12
|
+
export interface VerificationResult {
|
|
13
|
+
schema_version: 1;
|
|
14
|
+
plan_digest: string;
|
|
15
|
+
passed: boolean;
|
|
16
|
+
failed_step: string | null;
|
|
17
|
+
steps: readonly VerificationStepResult[];
|
|
18
|
+
}
|
|
19
|
+
export interface RunVerificationOptions {
|
|
20
|
+
packageRoot: string;
|
|
21
|
+
configRoot?: string;
|
|
22
|
+
worktreeRoot: string;
|
|
23
|
+
env?: NodeJS.ProcessEnv;
|
|
24
|
+
runner: ProcessRunner;
|
|
25
|
+
}
|
|
26
|
+
/** Loads and validates the tracked plan before any child process is invoked. */
|
|
27
|
+
export declare function runDeterministicVerification(options: RunVerificationOptions): VerificationResult;
|
|
28
|
+
export interface RunFrozenVerificationOptions {
|
|
29
|
+
packageRoot: string;
|
|
30
|
+
frozenPlan: FrozenVerificationPlan;
|
|
31
|
+
worktreeRoot: string;
|
|
32
|
+
env?: NodeJS.ProcessEnv;
|
|
33
|
+
runner: ProcessRunner;
|
|
34
|
+
requireInstalledTools?: boolean;
|
|
35
|
+
}
|
|
36
|
+
/** Runs an immutable plan snapshot that may be frozen before an executor starts. */
|
|
37
|
+
export declare function runFrozenVerification(options: RunFrozenVerificationOptions): VerificationResult;
|
|
38
|
+
export declare function reducedVerificationEnvironment(source: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
|
|
@@ -0,0 +1,143 @@
|
|
|
1
|
+
import { StringDecoder } from "node:string_decoder";
|
|
2
|
+
import { lstatSync } from "node:fs";
|
|
3
|
+
import { delimiter, isAbsolute, join } from "node:path";
|
|
4
|
+
import { validateExistingDirectory } from "../utils/fs.js";
|
|
5
|
+
import { assertFrozenVerificationPlan, freezeTrackedVerificationPlan } from "./plan.js";
|
|
6
|
+
import { createVerificationSandbox } from "./sandbox.js";
|
|
7
|
+
const GENERIC_SECRET_PATTERNS = [
|
|
8
|
+
/\bBearer\s+[A-Za-z0-9._~+/-]+=*/giu,
|
|
9
|
+
/\b(?:sk|key|token)-[A-Za-z0-9_-]{8,}\b/gu,
|
|
10
|
+
/\b[A-Z][A-Z0-9_]*(?:API_KEY|TOKEN|SECRET|PASSWORD)=\S+/gu,
|
|
11
|
+
];
|
|
12
|
+
/** Loads and validates the tracked plan before any child process is invoked. */
|
|
13
|
+
export function runDeterministicVerification(options) {
|
|
14
|
+
const frozenPlan = freezeTrackedVerificationPlan(options.configRoot ?? options.packageRoot);
|
|
15
|
+
return runFrozenVerification({ ...options, frozenPlan });
|
|
16
|
+
}
|
|
17
|
+
/** Runs an immutable plan snapshot that may be frozen before an executor starts. */
|
|
18
|
+
export function runFrozenVerification(options) {
|
|
19
|
+
const plan = assertFrozenVerificationPlan(options.frozenPlan);
|
|
20
|
+
const packageRoot = validateExistingDirectory(options.packageRoot, "installed OMS package root");
|
|
21
|
+
const worktreeRoot = validateExistingDirectory(options.worktreeRoot, "verification worktree");
|
|
22
|
+
const sourceEnv = options.env ?? process.env;
|
|
23
|
+
const env = reducedVerificationEnvironment(sourceEnv);
|
|
24
|
+
const secretValues = collectSecretValues(sourceEnv);
|
|
25
|
+
const results = [];
|
|
26
|
+
const sandbox = options.requireInstalledTools === true
|
|
27
|
+
? createVerificationSandbox({ worktreeRoot, packageRoot })
|
|
28
|
+
: undefined;
|
|
29
|
+
for (const step of plan.steps) {
|
|
30
|
+
const tool = resolveInstalledTool(packageRoot, step, options.requireInstalledTools === true);
|
|
31
|
+
const request = {
|
|
32
|
+
command: process.execPath,
|
|
33
|
+
args: [tool, ...step.args],
|
|
34
|
+
cwd: worktreeRoot,
|
|
35
|
+
env,
|
|
36
|
+
timeoutMs: step.timeout_ms,
|
|
37
|
+
maxBufferBytes: step.max_output_bytes,
|
|
38
|
+
};
|
|
39
|
+
const processResult = invokeRunner(options.runner, sandbox ? sandbox.wrap(request) : request);
|
|
40
|
+
const error = processResult.error ? redactAndBound(processResult.error.message, secretValues, step.max_output_bytes) : null;
|
|
41
|
+
const passed = !processResult.error && processResult.status === 0 && processResult.signal === null;
|
|
42
|
+
results.push({
|
|
43
|
+
id: step.id,
|
|
44
|
+
status: processResult.status,
|
|
45
|
+
signal: processResult.signal,
|
|
46
|
+
passed,
|
|
47
|
+
stdout: redactAndBound(processResult.stdout, secretValues, step.max_output_bytes),
|
|
48
|
+
stderr: redactAndBound(processResult.stderr, secretValues, step.max_output_bytes),
|
|
49
|
+
error,
|
|
50
|
+
});
|
|
51
|
+
if (!passed)
|
|
52
|
+
break;
|
|
53
|
+
}
|
|
54
|
+
const failure = results.find((result) => !result.passed);
|
|
55
|
+
return {
|
|
56
|
+
schema_version: 1,
|
|
57
|
+
plan_digest: options.frozenPlan.digest,
|
|
58
|
+
passed: failure === undefined && results.length === plan.steps.length,
|
|
59
|
+
failed_step: failure?.id ?? null,
|
|
60
|
+
steps: results,
|
|
61
|
+
};
|
|
62
|
+
}
|
|
63
|
+
function resolveInstalledTool(packageRoot, step, requireInstalled) {
|
|
64
|
+
const relativePath = step.command === "typescript"
|
|
65
|
+
? join("node_modules", "typescript", "bin", "tsc")
|
|
66
|
+
: step.command === "vitest"
|
|
67
|
+
? join("node_modules", "vitest", "vitest.mjs")
|
|
68
|
+
: join("dist", "src", "cli.js");
|
|
69
|
+
const path = join(packageRoot, relativePath);
|
|
70
|
+
if (requireInstalled) {
|
|
71
|
+
const entry = lstatSync(path);
|
|
72
|
+
if (entry.isSymbolicLink() || !entry.isFile()) {
|
|
73
|
+
throw new Error(`installed verification tool is not a regular file: ${step.command}`);
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
return path;
|
|
77
|
+
}
|
|
78
|
+
function invokeRunner(runner, request) {
|
|
79
|
+
try {
|
|
80
|
+
return runner(request);
|
|
81
|
+
}
|
|
82
|
+
catch (error) {
|
|
83
|
+
return {
|
|
84
|
+
status: null,
|
|
85
|
+
signal: null,
|
|
86
|
+
stdout: "",
|
|
87
|
+
stderr: "",
|
|
88
|
+
error: error instanceof Error ? error : new Error(String(error)),
|
|
89
|
+
};
|
|
90
|
+
}
|
|
91
|
+
}
|
|
92
|
+
export function reducedVerificationEnvironment(source) {
|
|
93
|
+
const result = {};
|
|
94
|
+
for (const key of ["HOME", "TMPDIR", "TMP", "TEMP", "LANG", "LC_ALL", "SYSTEMROOT"]) {
|
|
95
|
+
if (source[key] !== undefined)
|
|
96
|
+
result[key] = source[key];
|
|
97
|
+
}
|
|
98
|
+
if (source.PATH !== undefined) {
|
|
99
|
+
result.PATH = source.PATH.split(delimiter).filter((entry) => isAbsolute(entry)).join(delimiter);
|
|
100
|
+
}
|
|
101
|
+
result.CI = "1";
|
|
102
|
+
result.NO_COLOR = "1";
|
|
103
|
+
result.GIT_TERMINAL_PROMPT = "0";
|
|
104
|
+
result.npm_config_audit = "false";
|
|
105
|
+
result.npm_config_fund = "false";
|
|
106
|
+
result.npm_config_userconfig = "/dev/null";
|
|
107
|
+
// npm rejects loading the same file as both user and global config. This
|
|
108
|
+
// impossible child path stays distinct without making another config file.
|
|
109
|
+
result.npm_config_globalconfig = "/dev/null/oms-global";
|
|
110
|
+
return result;
|
|
111
|
+
}
|
|
112
|
+
function collectSecretValues(env) {
|
|
113
|
+
return Object.entries(env)
|
|
114
|
+
.filter(([key, value]) => value !== undefined && isSecretKey(key) && value.length >= 4)
|
|
115
|
+
.map(([, value]) => value)
|
|
116
|
+
.sort((left, right) => right.length - left.length);
|
|
117
|
+
}
|
|
118
|
+
function isSecretKey(key) {
|
|
119
|
+
return /(?:API[_-]?KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|ANTHROPIC|OPENAI)/iu.test(key);
|
|
120
|
+
}
|
|
121
|
+
function redactAndBound(value, secretValues, maximumBytes) {
|
|
122
|
+
let redacted = value;
|
|
123
|
+
for (const secret of secretValues)
|
|
124
|
+
redacted = redacted.split(secret).join("[REDACTED]");
|
|
125
|
+
for (const pattern of GENERIC_SECRET_PATTERNS)
|
|
126
|
+
redacted = redacted.replace(pattern, "[REDACTED]");
|
|
127
|
+
return boundUtf8(redacted, maximumBytes);
|
|
128
|
+
}
|
|
129
|
+
function boundUtf8(value, maximumBytes) {
|
|
130
|
+
const bytes = Buffer.from(value, "utf8");
|
|
131
|
+
if (bytes.length <= maximumBytes)
|
|
132
|
+
return value;
|
|
133
|
+
const suffix = "\n[OUTPUT TRUNCATED]\n";
|
|
134
|
+
const suffixBytes = Buffer.byteLength(suffix, "utf8");
|
|
135
|
+
if (maximumBytes <= suffixBytes)
|
|
136
|
+
return utf8Prefix(Buffer.from(suffix), maximumBytes);
|
|
137
|
+
return `${utf8Prefix(bytes, maximumBytes - suffixBytes)}\n[OUTPUT TRUNCATED]\n`;
|
|
138
|
+
}
|
|
139
|
+
function utf8Prefix(bytes, maximumBytes) {
|
|
140
|
+
const decoder = new StringDecoder("utf8");
|
|
141
|
+
return decoder.write(bytes.subarray(0, maximumBytes));
|
|
142
|
+
}
|
|
143
|
+
//# sourceMappingURL=runner.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/verification/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAExD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAC;AAExF,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEzD,MAAM,uBAAuB,GAAG;IAC9B,oCAAoC;IACpC,0CAA0C;IAC1C,0DAA0D;CAClD,CAAC;AA4BX,gFAAgF;AAChF,MAAM,UAAU,4BAA4B,CAAC,OAA+B;IAC1E,MAAM,UAAU,GAAG,6BAA6B,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5F,OAAO,qBAAqB,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;AAC3D,CAAC;AAWD,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,OAAqC;IACzE,MAAM,IAAI,GAAG,4BAA4B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;IACjG,MAAM,YAAY,GAAG,yBAAyB,CAAC,OAAO,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAC7C,MAAM,GAAG,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,qBAAqB,KAAK,IAAI;QACpD,CAAC,CAAC,yBAAyB,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC;IAEd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAmB;YAC9B,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;YAC1B,GAAG,EAAE,YAAY;YACjB,GAAG;YACH,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,cAAc,EAAE,IAAI,CAAC,gBAAgB;SACtC,CAAC;QACF,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5H,MAAM,MAAM,GAAG,CAAC,aAAa,CAAC,KAAK,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,IAAI,CAAC;QACnG,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM;YACN,MAAM,EAAE,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC;YACjF,MAAM,EAAE,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC;YACjF,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM;QACtC,MAAM,EAAE,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;QACrE,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI;QAChC,KAAK,EAAE,OAAO;KACf,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB,EAAE,IAAsB,EAAE,gBAAyB;IAClG,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,KAAK,YAAY;QAChD,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC;QAClD,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ;YACzB,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC7C,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB,EAAE,OAAuB;IAClE,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAyB;IACtE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QACpF,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC;IAChB,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC;IACtB,MAAM,CAAC,mBAAmB,GAAG,GAAG,CAAC;IACjC,MAAM,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC;IACjC,MAAM,CAAC,qBAAqB,GAAG,WAAW,CAAC;IAC3C,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,CAAC,uBAAuB,GAAG,sBAAsB,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAsB;IACjD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;SACtF,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAe,CAAC;SACnC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,qEAAqE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,YAA+B,EAAE,YAAoB;IAC1F,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,YAAY;QAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxF,KAAK,MAAM,OAAO,IAAI,uBAAuB;QAAE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAClG,OAAO,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,YAAoB;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,IAAI,YAAY;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,MAAM,GAAG,wBAAwB,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,YAAY,IAAI,WAAW;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IACtF,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,WAAW,CAAC,wBAAwB,CAAC;AAClF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,YAAoB;IACrD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;AACxD,CAAC"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import type { ProcessRequest } from "../providers/process.js";
|
|
2
|
+
export interface VerificationSandbox {
|
|
3
|
+
wrap(request: ProcessRequest): ProcessRequest;
|
|
4
|
+
}
|
|
5
|
+
/**
|
|
6
|
+
* Candidate checks may write only to their worktree and an isolated temporary
|
|
7
|
+
* directory. OMS state and installed code remain read-only inside the child.
|
|
8
|
+
*/
|
|
9
|
+
export declare function createVerificationSandbox(options: {
|
|
10
|
+
worktreeRoot: string;
|
|
11
|
+
packageRoot: string;
|
|
12
|
+
}): VerificationSandbox;
|
|
13
|
+
export declare function probeVerificationSandboxSupport(): {
|
|
14
|
+
ok: boolean;
|
|
15
|
+
detail: string;
|
|
16
|
+
};
|
|
@@ -0,0 +1,199 @@
|
|
|
1
|
+
import { spawnSync } from "node:child_process";
|
|
2
|
+
import { existsSync, lstatSync, readlinkSync, realpathSync } from "node:fs";
|
|
3
|
+
import { delimiter, isAbsolute, join, relative, sep } from "node:path";
|
|
4
|
+
import { readSecretScanPolicy } from "../security/secret-scan.js";
|
|
5
|
+
import { validateExistingDirectory } from "../utils/fs.js";
|
|
6
|
+
/**
|
|
7
|
+
* Candidate checks may write only to their worktree and an isolated temporary
|
|
8
|
+
* directory. OMS state and installed code remain read-only inside the child.
|
|
9
|
+
*/
|
|
10
|
+
export function createVerificationSandbox(options) {
|
|
11
|
+
const worktreeRoot = validateExistingDirectory(options.worktreeRoot, "verification sandbox worktree");
|
|
12
|
+
const packageRoot = validateExistingDirectory(options.packageRoot, "verification sandbox package root");
|
|
13
|
+
validatePackageArtifacts(packageRoot);
|
|
14
|
+
const secretScanner = resolvePinnedSecretScanner(packageRoot, worktreeRoot);
|
|
15
|
+
const wrap = process.platform === "linux"
|
|
16
|
+
? linuxBubblewrap(worktreeRoot, packageRoot, secretScanner)
|
|
17
|
+
: undefined;
|
|
18
|
+
if (!wrap) {
|
|
19
|
+
throw new Error(`protected verification sandbox is unavailable on ${process.platform}`);
|
|
20
|
+
}
|
|
21
|
+
return Object.freeze({
|
|
22
|
+
wrap(request) {
|
|
23
|
+
if (request.cwd !== worktreeRoot)
|
|
24
|
+
throw new Error("verification sandbox command escaped its worktree");
|
|
25
|
+
return wrap(request);
|
|
26
|
+
},
|
|
27
|
+
});
|
|
28
|
+
}
|
|
29
|
+
export function probeVerificationSandboxSupport() {
|
|
30
|
+
if (process.env.OMS_VERIFICATION_SANDBOX_ACTIVE === "1") {
|
|
31
|
+
return { ok: true, detail: "active native verification sandbox" };
|
|
32
|
+
}
|
|
33
|
+
if (process.platform === "linux") {
|
|
34
|
+
const executable = regularExecutable(["/usr/bin/bwrap", "/bin/bwrap"]);
|
|
35
|
+
if (!executable)
|
|
36
|
+
return { ok: false, detail: "bubblewrap is not installed" };
|
|
37
|
+
const result = spawnSync(executable, [
|
|
38
|
+
"--die-with-parent",
|
|
39
|
+
"--new-session",
|
|
40
|
+
"--unshare-all",
|
|
41
|
+
"--tmpfs", "/",
|
|
42
|
+
"--dir", "/usr",
|
|
43
|
+
...systemCompatibilityMount("/usr/bin"),
|
|
44
|
+
...systemCompatibilityMount("/usr/lib"),
|
|
45
|
+
...systemCompatibilityMount("/usr/lib64"),
|
|
46
|
+
...systemCompatibilityMount("/usr/libexec"),
|
|
47
|
+
...systemCompatibilityMount("/usr/share"),
|
|
48
|
+
...systemCompatibilityMount("/bin"),
|
|
49
|
+
...systemCompatibilityMount("/lib"),
|
|
50
|
+
...systemCompatibilityMount("/lib64"),
|
|
51
|
+
"--dir", "/etc",
|
|
52
|
+
...(existsSync("/etc/ld.so.cache")
|
|
53
|
+
? ["--ro-bind", "/etc/ld.so.cache", "/etc/ld.so.cache"]
|
|
54
|
+
: []),
|
|
55
|
+
"--proc", "/proc",
|
|
56
|
+
"--dev", "/dev",
|
|
57
|
+
"--dir", "/tmp",
|
|
58
|
+
"--",
|
|
59
|
+
"/usr/bin/true",
|
|
60
|
+
], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
|
|
61
|
+
return result.status === 0
|
|
62
|
+
? { ok: true, detail: executable }
|
|
63
|
+
: { ok: false, detail: (result.stderr || result.error?.message || "bubblewrap probe failed").trim() };
|
|
64
|
+
}
|
|
65
|
+
return { ok: false, detail: `unsupported platform: ${process.platform}` };
|
|
66
|
+
}
|
|
67
|
+
function linuxBubblewrap(worktreeRoot, packageRoot, secretScanner) {
|
|
68
|
+
const executable = regularExecutable(["/usr/bin/bwrap", "/bin/bwrap"]);
|
|
69
|
+
if (!executable)
|
|
70
|
+
return undefined;
|
|
71
|
+
return (request) => {
|
|
72
|
+
const args = [
|
|
73
|
+
"--die-with-parent",
|
|
74
|
+
"--new-session",
|
|
75
|
+
"--unshare-all",
|
|
76
|
+
"--tmpfs", "/",
|
|
77
|
+
"--dir", "/usr",
|
|
78
|
+
...systemCompatibilityMount("/usr/bin"),
|
|
79
|
+
...systemCompatibilityMount("/usr/lib"),
|
|
80
|
+
...systemCompatibilityMount("/usr/lib64"),
|
|
81
|
+
...systemCompatibilityMount("/usr/libexec"),
|
|
82
|
+
...systemCompatibilityMount("/usr/share"),
|
|
83
|
+
...systemCompatibilityMount("/bin"),
|
|
84
|
+
...systemCompatibilityMount("/lib"),
|
|
85
|
+
...systemCompatibilityMount("/lib64"),
|
|
86
|
+
"--dir", "/etc",
|
|
87
|
+
...(existsSync("/etc/ld.so.cache")
|
|
88
|
+
? ["--ro-bind", "/etc/ld.so.cache", "/etc/ld.so.cache"]
|
|
89
|
+
: []),
|
|
90
|
+
"--proc", "/proc",
|
|
91
|
+
"--dev", "/dev",
|
|
92
|
+
"--dir", "/tmp",
|
|
93
|
+
"--dir", "/tmp/oms-package",
|
|
94
|
+
"--ro-bind", join(packageRoot, "package.json"), "/tmp/oms-package/package.json",
|
|
95
|
+
...packageDirectoryMount(packageRoot, ".agents"),
|
|
96
|
+
...packageDirectoryMount(packageRoot, "dist"),
|
|
97
|
+
...packageDirectoryMount(packageRoot, "node_modules"),
|
|
98
|
+
...packageDirectoryMount(packageRoot, "schemas"),
|
|
99
|
+
"--dir", "/tmp/node_modules",
|
|
100
|
+
"--ro-bind", join(packageRoot, "node_modules"), "/tmp/node_modules",
|
|
101
|
+
"--dir", "/tmp/oms-worktree",
|
|
102
|
+
"--bind", worktreeRoot, "/tmp/oms-worktree",
|
|
103
|
+
"--dir", "/tmp/oms-bin",
|
|
104
|
+
"--ro-bind", request.command, "/tmp/oms-bin/node",
|
|
105
|
+
"--ro-bind", secretScanner, "/tmp/oms-bin/gitleaks",
|
|
106
|
+
"--dir", "/tmp/oms-home",
|
|
107
|
+
"--dir", "/tmp/oms-cache",
|
|
108
|
+
"--chdir", "/tmp/oms-worktree",
|
|
109
|
+
"--setenv", "HOME", "/tmp/oms-home",
|
|
110
|
+
"--setenv", "TMPDIR", "/tmp",
|
|
111
|
+
"--setenv", "TMP", "/tmp",
|
|
112
|
+
"--setenv", "TEMP", "/tmp",
|
|
113
|
+
"--setenv", "XDG_CACHE_HOME", "/tmp/oms-cache",
|
|
114
|
+
"--setenv", "npm_config_cache", "/tmp/oms-cache",
|
|
115
|
+
"--setenv", "PATH", "/tmp/oms-bin:/usr/bin:/bin:/usr/local/bin",
|
|
116
|
+
"--setenv", "OMS_VERIFICATION_SANDBOX_ACTIVE", "1",
|
|
117
|
+
"--",
|
|
118
|
+
"/tmp/oms-bin/node",
|
|
119
|
+
...request.args.map((argument) => mapPackagePath(argument, packageRoot)),
|
|
120
|
+
];
|
|
121
|
+
return { ...request, command: executable, args, cwd: "/" };
|
|
122
|
+
};
|
|
123
|
+
}
|
|
124
|
+
function resolvePinnedSecretScanner(packageRoot, worktreeRoot) {
|
|
125
|
+
const expectedVersion = readSecretScanPolicy(packageRoot).version;
|
|
126
|
+
const candidates = (process.env.PATH ?? "")
|
|
127
|
+
.split(delimiter)
|
|
128
|
+
.filter((directory) => isAbsolute(directory))
|
|
129
|
+
.map((directory) => join(directory, "gitleaks"));
|
|
130
|
+
for (const candidate of [...new Set(candidates)]) {
|
|
131
|
+
if (!existsSync(candidate))
|
|
132
|
+
continue;
|
|
133
|
+
const resolved = realpathSync.native(candidate);
|
|
134
|
+
const entry = lstatSync(resolved);
|
|
135
|
+
if (!entry.isFile() || (entry.mode & 0o111) === 0)
|
|
136
|
+
continue;
|
|
137
|
+
if (isInside(resolved, packageRoot) || isInside(resolved, worktreeRoot))
|
|
138
|
+
continue;
|
|
139
|
+
const version = spawnSync(resolved, ["version"], {
|
|
140
|
+
encoding: "utf8",
|
|
141
|
+
stdio: ["ignore", "pipe", "pipe"],
|
|
142
|
+
env: { PATH: process.env.PATH, HOME: process.env.HOME, NO_COLOR: "1" },
|
|
143
|
+
});
|
|
144
|
+
const actual = `${version.stdout ?? ""}\n${version.stderr ?? ""}`.trim().replace(/^v/u, "");
|
|
145
|
+
if (!version.error && version.status === 0 && actual === expectedVersion)
|
|
146
|
+
return resolved;
|
|
147
|
+
}
|
|
148
|
+
throw new Error(`protected verification requires gitleaks ${expectedVersion} outside the package and candidate worktree`);
|
|
149
|
+
}
|
|
150
|
+
function isInside(path, root) {
|
|
151
|
+
const suffix = relative(root, path);
|
|
152
|
+
return suffix === "" || (!suffix.startsWith(`..${sep}`) && suffix !== ".." && !isAbsolute(suffix));
|
|
153
|
+
}
|
|
154
|
+
function mapPackagePath(value, packageRoot) {
|
|
155
|
+
if (!isAbsolute(value))
|
|
156
|
+
return value;
|
|
157
|
+
if (value === packageRoot)
|
|
158
|
+
return "/tmp/oms-package";
|
|
159
|
+
const suffix = relative(packageRoot, value);
|
|
160
|
+
return suffix !== "" && !suffix.startsWith(`..${sep}`) && suffix !== ".." && !isAbsolute(suffix)
|
|
161
|
+
? join("/tmp/oms-package", suffix)
|
|
162
|
+
: value;
|
|
163
|
+
}
|
|
164
|
+
function validatePackageArtifacts(packageRoot) {
|
|
165
|
+
for (const directory of [".agents", "dist", "node_modules", "schemas"]) {
|
|
166
|
+
const path = join(packageRoot, directory);
|
|
167
|
+
const entry = lstatSync(path);
|
|
168
|
+
if (!entry.isDirectory() || entry.isSymbolicLink()) {
|
|
169
|
+
throw new Error(`verification sandbox package artifact is not a real directory: ${directory}`);
|
|
170
|
+
}
|
|
171
|
+
}
|
|
172
|
+
const manifest = lstatSync(join(packageRoot, "package.json"));
|
|
173
|
+
if (!manifest.isFile() || manifest.isSymbolicLink()) {
|
|
174
|
+
throw new Error("verification sandbox package manifest is not a real file");
|
|
175
|
+
}
|
|
176
|
+
}
|
|
177
|
+
function packageDirectoryMount(packageRoot, directory) {
|
|
178
|
+
const destination = `/tmp/oms-package/${directory}`;
|
|
179
|
+
return ["--dir", destination, "--ro-bind", join(packageRoot, directory), destination];
|
|
180
|
+
}
|
|
181
|
+
function systemCompatibilityMount(path) {
|
|
182
|
+
if (!existsSync(path))
|
|
183
|
+
return [];
|
|
184
|
+
const entry = lstatSync(path);
|
|
185
|
+
if (entry.isSymbolicLink())
|
|
186
|
+
return ["--symlink", readlinkSync(path), path];
|
|
187
|
+
if (entry.isDirectory())
|
|
188
|
+
return ["--dir", path, "--ro-bind", path, path];
|
|
189
|
+
return [];
|
|
190
|
+
}
|
|
191
|
+
function regularExecutable(paths) {
|
|
192
|
+
return paths.find((path) => {
|
|
193
|
+
if (!existsSync(path))
|
|
194
|
+
return false;
|
|
195
|
+
const entry = lstatSync(path);
|
|
196
|
+
return entry.isFile() && !entry.isSymbolicLink() && (entry.mode & 0o111) !== 0;
|
|
197
|
+
});
|
|
198
|
+
}
|
|
199
|
+
//# sourceMappingURL=sandbox.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/verification/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAM3D;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAGzC;IACC,MAAM,YAAY,GAAG,yBAAyB,CAAC,OAAO,CAAC,YAAY,EAAE,+BAA+B,CAAC,CAAC;IACtG,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;IACxG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,0BAA0B,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QACvC,CAAC,CAAC,eAAe,CAAC,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC;QAC3D,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,oDAAoD,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,CAAC,OAAuB;YAC1B,IAAI,OAAO,CAAC,GAAG,KAAK,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvG,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,GAAG,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE;YACnC,mBAAmB;YACnB,eAAe;YACf,eAAe;YACf,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,MAAM;YACf,GAAG,wBAAwB,CAAC,UAAU,CAAC;YACvC,GAAG,wBAAwB,CAAC,UAAU,CAAC;YACvC,GAAG,wBAAwB,CAAC,YAAY,CAAC;YACzC,GAAG,wBAAwB,CAAC,cAAc,CAAC;YAC3C,GAAG,wBAAwB,CAAC,YAAY,CAAC;YACzC,GAAG,wBAAwB,CAAC,MAAM,CAAC;YACnC,GAAG,wBAAwB,CAAC,MAAM,CAAC;YACnC,GAAG,wBAAwB,CAAC,QAAQ,CAAC;YACrC,OAAO,EAAE,MAAM;YACf,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBAChC,CAAC,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;gBACvD,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,MAAM;YACf,IAAI;YACJ,eAAe;SAChB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;YACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE;YAClC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,yBAAyB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1G,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CACtB,YAAoB,EACpB,WAAmB,EACnB,aAAqB;IAErB,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,CAAC,OAAO,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG;YACX,mBAAmB;YACnB,eAAe;YACf,eAAe;YACf,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,MAAM;YACf,GAAG,wBAAwB,CAAC,UAAU,CAAC;YACvC,GAAG,wBAAwB,CAAC,UAAU,CAAC;YACvC,GAAG,wBAAwB,CAAC,YAAY,CAAC;YACzC,GAAG,wBAAwB,CAAC,cAAc,CAAC;YAC3C,GAAG,wBAAwB,CAAC,YAAY,CAAC;YACzC,GAAG,wBAAwB,CAAC,MAAM,CAAC;YACnC,GAAG,wBAAwB,CAAC,MAAM,CAAC;YACnC,GAAG,wBAAwB,CAAC,QAAQ,CAAC;YACrC,OAAO,EAAE,MAAM;YACf,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBAChC,CAAC,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;gBACvD,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,kBAAkB;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,+BAA+B;YAC/E,GAAG,qBAAqB,CAAC,WAAW,EAAE,SAAS,CAAC;YAChD,GAAG,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC;YAC7C,GAAG,qBAAqB,CAAC,WAAW,EAAE,cAAc,CAAC;YACrD,GAAG,qBAAqB,CAAC,WAAW,EAAE,SAAS,CAAC;YAChD,OAAO,EAAE,mBAAmB;YAC5B,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,mBAAmB;YACnE,OAAO,EAAE,mBAAmB;YAC5B,QAAQ,EAAE,YAAY,EAAE,mBAAmB;YAC3C,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,mBAAmB;YACjD,WAAW,EAAE,aAAa,EAAE,uBAAuB;YACnD,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,gBAAgB;YACzB,SAAS,EAAE,mBAAmB;YAC9B,UAAU,EAAE,MAAM,EAAE,eAAe;YACnC,UAAU,EAAE,QAAQ,EAAE,MAAM;YAC5B,UAAU,EAAE,KAAK,EAAE,MAAM;YACzB,UAAU,EAAE,MAAM,EAAE,MAAM;YAC1B,UAAU,EAAE,gBAAgB,EAAE,gBAAgB;YAC9C,UAAU,EAAE,kBAAkB,EAAE,gBAAgB;YAChD,UAAU,EAAE,MAAM,EAAE,2CAA2C;YAC/D,UAAU,EAAE,iCAAiC,EAAE,GAAG;YAClD,IAAI;YACJ,mBAAmB;YACnB,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;SACzE,CAAC;QACF,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAC7D,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAmB,EAAE,YAAoB;IAC3E,MAAM,eAAe,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;IAClE,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SACxC,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IACnD,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,SAAS;QAC5D,IAAI,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;YAAE,SAAS;QAClF,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;YAC/C,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;SACvE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,KAAK,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,eAAe;YAAE,OAAO,QAAQ,CAAC;IAC5F,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,eAAe,6CAA6C,CAAC,CAAC;AAC5H,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,WAAmB;IACxD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,kBAAkB,CAAC;IACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAC9F,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC;QAClC,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,SAAS,wBAAwB,CAAC,WAAmB;IACnD,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,kEAAkE,SAAS,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAmB,EAAE,SAAiB;IACnE,MAAM,WAAW,GAAG,oBAAoB,SAAS,EAAE,CAAC;IACpD,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,cAAc,EAAE;QAAE,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACzE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAwB;IACjD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import { type DoctorReport } from "./doctor.js";
|
|
2
|
+
export interface VerificationOptions {
|
|
3
|
+
workspaceRoot?: string;
|
|
4
|
+
configRoot?: string;
|
|
5
|
+
doctor?: (root: string) => DoctorReport;
|
|
6
|
+
}
|
|
7
|
+
export declare function validateRepositoryJson(root: string): void;
|
|
8
|
+
export declare function runVerification(packageRoot: string, options?: VerificationOptions): string[];
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
import { existsSync, readdirSync } from "node:fs";
|
|
2
|
+
import { join } from "node:path";
|
|
3
|
+
import { runDoctor } from "./doctor.js";
|
|
4
|
+
import { readJsonFile } from "./utils/fs.js";
|
|
5
|
+
export function validateRepositoryJson(root) {
|
|
6
|
+
for (const directory of [join(root, ".agents"), join(root, "schemas")]) {
|
|
7
|
+
if (!existsSync(directory))
|
|
8
|
+
continue;
|
|
9
|
+
for (const path of findJsonFiles(directory))
|
|
10
|
+
readJsonFile(path);
|
|
11
|
+
}
|
|
12
|
+
}
|
|
13
|
+
export function runVerification(packageRoot, options = {}) {
|
|
14
|
+
validateRepositoryJson(packageRoot);
|
|
15
|
+
if (options.workspaceRoot && options.workspaceRoot !== packageRoot && existsSync(join(options.workspaceRoot, ".agents"))) {
|
|
16
|
+
validateRepositoryJson(options.workspaceRoot);
|
|
17
|
+
}
|
|
18
|
+
const configRoot = options.configRoot ?? packageRoot;
|
|
19
|
+
const doctor = (options.doctor ?? ((root) => runDoctor({ root })))(configRoot);
|
|
20
|
+
if (!doctor.ok)
|
|
21
|
+
throw new Error(doctor.lines.join("\n"));
|
|
22
|
+
return [...doctor.lines, "verify: PASS"];
|
|
23
|
+
}
|
|
24
|
+
function findJsonFiles(directory) {
|
|
25
|
+
const paths = [];
|
|
26
|
+
for (const entry of readdirSync(directory, { withFileTypes: true })) {
|
|
27
|
+
const path = join(directory, entry.name);
|
|
28
|
+
if (entry.isDirectory())
|
|
29
|
+
paths.push(...findJsonFiles(path));
|
|
30
|
+
else if (entry.isFile() && entry.name.endsWith(".json"))
|
|
31
|
+
paths.push(path);
|
|
32
|
+
}
|
|
33
|
+
return paths.sort();
|
|
34
|
+
}
|
|
35
|
+
//# sourceMappingURL=verify.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAqB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQ7C,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,KAAK,MAAM,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,SAAS,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,UAA+B,EAAE;IACpF,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,KAAK,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACzH,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;aACvD,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
import { type RunLedgerStore } from "../audit/run-ledger.js";
|
|
2
|
+
import { type RuntimeEventBus } from "../events/bus.js";
|
|
3
|
+
import { type OutboxProcessor } from "../outbox/processor.js";
|
|
4
|
+
import { type OutboxStore } from "../outbox/store.js";
|
|
5
|
+
import { type SessionRegistry } from "../sessions/registry.js";
|
|
6
|
+
import { type TicketQueueStore } from "../tickets/store.js";
|
|
7
|
+
import type { ConductorRecoveryResult } from "../conductor/recovery.js";
|
|
8
|
+
import type { WorkerPaneAdapter } from "../workers/panes.js";
|
|
9
|
+
import { type WorkerRegistry } from "../workers/registry.js";
|
|
10
|
+
export interface WatchdogReconcileResult {
|
|
11
|
+
readonly at: string;
|
|
12
|
+
readonly recovered_ticket_ids: readonly string[];
|
|
13
|
+
readonly rebound_ticket_ids: readonly string[];
|
|
14
|
+
readonly quarantined_ticket_ids: readonly string[];
|
|
15
|
+
readonly stalled_session_ids: readonly string[];
|
|
16
|
+
readonly stalled_outbox_event_ids: readonly string[];
|
|
17
|
+
readonly superseded_event_ids: readonly string[];
|
|
18
|
+
readonly failed_event_ids: readonly string[];
|
|
19
|
+
readonly failed_subject_ids: readonly string[];
|
|
20
|
+
readonly recovered_structured_request_ids: readonly string[];
|
|
21
|
+
readonly conductor_recovery: ConductorRecoveryResult | null;
|
|
22
|
+
}
|
|
23
|
+
export declare function reconcileWatchdog(options: {
|
|
24
|
+
at: string;
|
|
25
|
+
bus: RuntimeEventBus;
|
|
26
|
+
processor: OutboxProcessor;
|
|
27
|
+
outbox: OutboxStore;
|
|
28
|
+
queue: TicketQueueStore;
|
|
29
|
+
sessions: SessionRegistry;
|
|
30
|
+
workers: WorkerRegistry;
|
|
31
|
+
workerPanes?: Pick<WorkerPaneAdapter, "observe">;
|
|
32
|
+
packageRoot: string;
|
|
33
|
+
configRoot: string;
|
|
34
|
+
stateRoot: string;
|
|
35
|
+
auditLedger: RunLedgerStore;
|
|
36
|
+
stallMs?: number;
|
|
37
|
+
recoverStructuredRoleCompletions?: () => Readonly<{
|
|
38
|
+
recoveredRequestIds: readonly string[];
|
|
39
|
+
failedRequestIds: readonly string[];
|
|
40
|
+
}>;
|
|
41
|
+
recoverConductor?: () => ConductorRecoveryResult;
|
|
42
|
+
}): Promise<WatchdogReconcileResult>;
|