oh-my-super-agent 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (461) hide show
  1. package/.agents/agents/advisor.md +15 -0
  2. package/.agents/agents/conductor.md +32 -0
  3. package/.agents/agents/dreamer.md +13 -0
  4. package/.agents/agents/executor.md +17 -0
  5. package/.agents/agents/grader.md +15 -0
  6. package/.agents/config/endurance-policy.json +8 -0
  7. package/.agents/config/oms-config.json +119 -0
  8. package/.agents/config/release-policy.json +12 -0
  9. package/.agents/config/secret-scan-policy.json +7 -0
  10. package/.agents/config/verification-plan.json +33 -0
  11. package/.agents/registry.json +11 -0
  12. package/.agents/rules/constitution.md +7 -0
  13. package/.agents/skills/conductor/SKILL.md +23 -0
  14. package/.agents/skills/dream/SKILL.md +14 -0
  15. package/.agents/skills/executor/SKILL.md +13 -0
  16. package/.agents/skills/oms/SKILL.md +52 -0
  17. package/.agents/skills/quota-aware/SKILL.md +12 -0
  18. package/.agents/skills/schedule/SKILL.md +13 -0
  19. package/.agents/skills/team-protocol/SKILL.md +20 -0
  20. package/LICENSE +21 -0
  21. package/README.md +146 -0
  22. package/dist/src/audit/run-ledger.d.ts +183 -0
  23. package/dist/src/audit/run-ledger.js +1655 -0
  24. package/dist/src/audit/run-ledger.js.map +1 -0
  25. package/dist/src/cli.d.ts +61 -0
  26. package/dist/src/cli.js +2096 -0
  27. package/dist/src/cli.js.map +1 -0
  28. package/dist/src/commands/github-queue-probe.d.ts +26 -0
  29. package/dist/src/commands/github-queue-probe.js +51 -0
  30. package/dist/src/commands/github-queue-probe.js.map +1 -0
  31. package/dist/src/commands/trace-fixture.d.ts +20 -0
  32. package/dist/src/commands/trace-fixture.js +72 -0
  33. package/dist/src/commands/trace-fixture.js.map +1 -0
  34. package/dist/src/conductor/activity.d.ts +46 -0
  35. package/dist/src/conductor/activity.js +224 -0
  36. package/dist/src/conductor/activity.js.map +1 -0
  37. package/dist/src/conductor/bridge.d.ts +53 -0
  38. package/dist/src/conductor/bridge.js +652 -0
  39. package/dist/src/conductor/bridge.js.map +1 -0
  40. package/dist/src/conductor/notifications.d.ts +59 -0
  41. package/dist/src/conductor/notifications.js +381 -0
  42. package/dist/src/conductor/notifications.js.map +1 -0
  43. package/dist/src/conductor/recovery.d.ts +29 -0
  44. package/dist/src/conductor/recovery.js +198 -0
  45. package/dist/src/conductor/recovery.js.map +1 -0
  46. package/dist/src/conductor/start.d.ts +73 -0
  47. package/dist/src/conductor/start.js +519 -0
  48. package/dist/src/conductor/start.js.map +1 -0
  49. package/dist/src/conductor/waiter.d.ts +88 -0
  50. package/dist/src/conductor/waiter.js +427 -0
  51. package/dist/src/conductor/waiter.js.map +1 -0
  52. package/dist/src/config.d.ts +9 -0
  53. package/dist/src/config.js +40 -0
  54. package/dist/src/config.js.map +1 -0
  55. package/dist/src/dispatch/advice-source.d.ts +61 -0
  56. package/dist/src/dispatch/advice-source.js +198 -0
  57. package/dist/src/dispatch/advice-source.js.map +1 -0
  58. package/dist/src/dispatch/advice-store.d.ts +41 -0
  59. package/dist/src/dispatch/advice-store.js +201 -0
  60. package/dist/src/dispatch/advice-store.js.map +1 -0
  61. package/dist/src/dispatch/advice.d.ts +34 -0
  62. package/dist/src/dispatch/advice.js +371 -0
  63. package/dist/src/dispatch/advice.js.map +1 -0
  64. package/dist/src/dispatch/authority.d.ts +124 -0
  65. package/dist/src/dispatch/authority.js +1202 -0
  66. package/dist/src/dispatch/authority.js.map +1 -0
  67. package/dist/src/dispatch/intent.d.ts +66 -0
  68. package/dist/src/dispatch/intent.js +71 -0
  69. package/dist/src/dispatch/intent.js.map +1 -0
  70. package/dist/src/dispatch/runtime-authority.d.ts +42 -0
  71. package/dist/src/dispatch/runtime-authority.js +52 -0
  72. package/dist/src/dispatch/runtime-authority.js.map +1 -0
  73. package/dist/src/doctor.d.ts +20 -0
  74. package/dist/src/doctor.js +85 -0
  75. package/dist/src/doctor.js.map +1 -0
  76. package/dist/src/domain/records.d.ts +44 -0
  77. package/dist/src/domain/records.js +138 -0
  78. package/dist/src/domain/records.js.map +1 -0
  79. package/dist/src/domain/role-policy.d.ts +67 -0
  80. package/dist/src/domain/role-policy.js +547 -0
  81. package/dist/src/domain/role-policy.js.map +1 -0
  82. package/dist/src/events/bus.d.ts +32 -0
  83. package/dist/src/events/bus.js +115 -0
  84. package/dist/src/events/bus.js.map +1 -0
  85. package/dist/src/events/kinds.d.ts +126 -0
  86. package/dist/src/events/kinds.js +14 -0
  87. package/dist/src/events/kinds.js.map +1 -0
  88. package/dist/src/evidence/immutable-file.d.ts +12 -0
  89. package/dist/src/evidence/immutable-file.js +141 -0
  90. package/dist/src/evidence/immutable-file.js.map +1 -0
  91. package/dist/src/evidence/store.d.ts +125 -0
  92. package/dist/src/evidence/store.js +1189 -0
  93. package/dist/src/evidence/store.js.map +1 -0
  94. package/dist/src/evidence/verdict.d.ts +17 -0
  95. package/dist/src/evidence/verdict.js +23 -0
  96. package/dist/src/evidence/verdict.js.map +1 -0
  97. package/dist/src/generation/agent.d.ts +5 -0
  98. package/dist/src/generation/agent.js +34 -0
  99. package/dist/src/generation/agent.js.map +1 -0
  100. package/dist/src/generation/frontmatter.d.ts +7 -0
  101. package/dist/src/generation/frontmatter.js +33 -0
  102. package/dist/src/generation/frontmatter.js.map +1 -0
  103. package/dist/src/github/adapter.d.ts +44 -0
  104. package/dist/src/github/adapter.js +592 -0
  105. package/dist/src/github/adapter.js.map +1 -0
  106. package/dist/src/github/dispatch-eligibility.d.ts +9 -0
  107. package/dist/src/github/dispatch-eligibility.js +94 -0
  108. package/dist/src/github/dispatch-eligibility.js.map +1 -0
  109. package/dist/src/github/projector.d.ts +23 -0
  110. package/dist/src/github/projector.js +181 -0
  111. package/dist/src/github/projector.js.map +1 -0
  112. package/dist/src/github/review.d.ts +39 -0
  113. package/dist/src/github/review.js +1450 -0
  114. package/dist/src/github/review.js.map +1 -0
  115. package/dist/src/github/sync.d.ts +21 -0
  116. package/dist/src/github/sync.js +518 -0
  117. package/dist/src/github/sync.js.map +1 -0
  118. package/dist/src/github/types.d.ts +134 -0
  119. package/dist/src/github/types.js +11 -0
  120. package/dist/src/github/types.js.map +1 -0
  121. package/dist/src/goals/artifact-store.d.ts +31 -0
  122. package/dist/src/goals/artifact-store.js +241 -0
  123. package/dist/src/goals/artifact-store.js.map +1 -0
  124. package/dist/src/goals/authority.d.ts +112 -0
  125. package/dist/src/goals/authority.js +621 -0
  126. package/dist/src/goals/authority.js.map +1 -0
  127. package/dist/src/goals/native-snapshot.d.ts +12 -0
  128. package/dist/src/goals/native-snapshot.js +53 -0
  129. package/dist/src/goals/native-snapshot.js.map +1 -0
  130. package/dist/src/goals/runtime-authority.d.ts +7 -0
  131. package/dist/src/goals/runtime-authority.js +20 -0
  132. package/dist/src/goals/runtime-authority.js.map +1 -0
  133. package/dist/src/health/release-assessment.d.ts +11 -0
  134. package/dist/src/health/release-assessment.js +83 -0
  135. package/dist/src/health/release-assessment.js.map +1 -0
  136. package/dist/src/health/release-policy.d.ts +16 -0
  137. package/dist/src/health/release-policy.js +40 -0
  138. package/dist/src/health/release-policy.js.map +1 -0
  139. package/dist/src/hooks/native.d.ts +30 -0
  140. package/dist/src/hooks/native.js +495 -0
  141. package/dist/src/hooks/native.js.map +1 -0
  142. package/dist/src/hooks/provider-runtime.d.ts +55 -0
  143. package/dist/src/hooks/provider-runtime.js +479 -0
  144. package/dist/src/hooks/provider-runtime.js.map +1 -0
  145. package/dist/src/hooks/provider.d.ts +102 -0
  146. package/dist/src/hooks/provider.js +358 -0
  147. package/dist/src/hooks/provider.js.map +1 -0
  148. package/dist/src/live/contact-journal.d.ts +73 -0
  149. package/dist/src/live/contact-journal.js +439 -0
  150. package/dist/src/live/contact-journal.js.map +1 -0
  151. package/dist/src/live-probes/gh-adapter.d.ts +28 -0
  152. package/dist/src/live-probes/gh-adapter.js +188 -0
  153. package/dist/src/live-probes/gh-adapter.js.map +1 -0
  154. package/dist/src/live-probes/github-queue.d.ts +1 -0
  155. package/dist/src/live-probes/github-queue.js +2 -0
  156. package/dist/src/live-probes/github-queue.js.map +1 -0
  157. package/dist/src/notifications/slack-request.d.ts +13 -0
  158. package/dist/src/notifications/slack-request.js +40 -0
  159. package/dist/src/notifications/slack-request.js.map +1 -0
  160. package/dist/src/outbox/processor.d.ts +27 -0
  161. package/dist/src/outbox/processor.js +63 -0
  162. package/dist/src/outbox/processor.js.map +1 -0
  163. package/dist/src/outbox/store.d.ts +158 -0
  164. package/dist/src/outbox/store.js +834 -0
  165. package/dist/src/outbox/store.js.map +1 -0
  166. package/dist/src/package-root.d.ts +1 -0
  167. package/dist/src/package-root.js +26 -0
  168. package/dist/src/package-root.js.map +1 -0
  169. package/dist/src/project.d.ts +12 -0
  170. package/dist/src/project.js +60 -0
  171. package/dist/src/project.js.map +1 -0
  172. package/dist/src/projection/generated-file.d.ts +15 -0
  173. package/dist/src/projection/generated-file.js +72 -0
  174. package/dist/src/projection/generated-file.js.map +1 -0
  175. package/dist/src/projection/project-workspace.d.ts +11 -0
  176. package/dist/src/projection/project-workspace.js +94 -0
  177. package/dist/src/projection/project-workspace.js.map +1 -0
  178. package/dist/src/projection/registry.d.ts +15 -0
  179. package/dist/src/projection/registry.js +59 -0
  180. package/dist/src/projection/registry.js.map +1 -0
  181. package/dist/src/projection/safe-path.d.ts +4 -0
  182. package/dist/src/projection/safe-path.js +106 -0
  183. package/dist/src/projection/safe-path.js.map +1 -0
  184. package/dist/src/providers/claude-interactive.d.ts +38 -0
  185. package/dist/src/providers/claude-interactive.js +287 -0
  186. package/dist/src/providers/claude-interactive.js.map +1 -0
  187. package/dist/src/providers/claude-structured-bridge.d.ts +32 -0
  188. package/dist/src/providers/claude-structured-bridge.js +215 -0
  189. package/dist/src/providers/claude-structured-bridge.js.map +1 -0
  190. package/dist/src/providers/claude-structured-completion.d.ts +23 -0
  191. package/dist/src/providers/claude-structured-completion.js +229 -0
  192. package/dist/src/providers/claude-structured-completion.js.map +1 -0
  193. package/dist/src/providers/claude-structured-pane.d.ts +23 -0
  194. package/dist/src/providers/claude-structured-pane.js +156 -0
  195. package/dist/src/providers/claude-structured-pane.js.map +1 -0
  196. package/dist/src/providers/claude-structured-store.d.ts +48 -0
  197. package/dist/src/providers/claude-structured-store.js +212 -0
  198. package/dist/src/providers/claude-structured-store.js.map +1 -0
  199. package/dist/src/providers/claude-structured.d.ts +56 -0
  200. package/dist/src/providers/claude-structured.js +250 -0
  201. package/dist/src/providers/claude-structured.js.map +1 -0
  202. package/dist/src/providers/codex-exec.d.ts +29 -0
  203. package/dist/src/providers/codex-exec.js +127 -0
  204. package/dist/src/providers/codex-exec.js.map +1 -0
  205. package/dist/src/providers/grading.d.ts +2 -0
  206. package/dist/src/providers/grading.js +20 -0
  207. package/dist/src/providers/grading.js.map +1 -0
  208. package/dist/src/providers/native-dispatch.d.ts +24 -0
  209. package/dist/src/providers/native-dispatch.js +34 -0
  210. package/dist/src/providers/native-dispatch.js.map +1 -0
  211. package/dist/src/providers/preflight.d.ts +65 -0
  212. package/dist/src/providers/preflight.js +256 -0
  213. package/dist/src/providers/preflight.js.map +1 -0
  214. package/dist/src/providers/process.d.ts +18 -0
  215. package/dist/src/providers/process.js +21 -0
  216. package/dist/src/providers/process.js.map +1 -0
  217. package/dist/src/queue/model.d.ts +37 -0
  218. package/dist/src/queue/model.js +51 -0
  219. package/dist/src/queue/model.js.map +1 -0
  220. package/dist/src/queue/service.d.ts +1 -0
  221. package/dist/src/queue/service.js +2 -0
  222. package/dist/src/queue/service.js.map +1 -0
  223. package/dist/src/reflections/store.d.ts +21 -0
  224. package/dist/src/reflections/store.js +60 -0
  225. package/dist/src/reflections/store.js.map +1 -0
  226. package/dist/src/reports/daily-trust.d.ts +11 -0
  227. package/dist/src/reports/daily-trust.js +98 -0
  228. package/dist/src/reports/daily-trust.js.map +1 -0
  229. package/dist/src/runs/controller.d.ts +187 -0
  230. package/dist/src/runs/controller.js +1182 -0
  231. package/dist/src/runs/controller.js.map +1 -0
  232. package/dist/src/runtime/composition.d.ts +9 -0
  233. package/dist/src/runtime/composition.js +35 -0
  234. package/dist/src/runtime/composition.js.map +1 -0
  235. package/dist/src/runtime/endurance-authorities.d.ts +44 -0
  236. package/dist/src/runtime/endurance-authorities.js +101 -0
  237. package/dist/src/runtime/endurance-authorities.js.map +1 -0
  238. package/dist/src/runtime/endurance-policy.d.ts +12 -0
  239. package/dist/src/runtime/endurance-policy.js +13 -0
  240. package/dist/src/runtime/endurance-policy.js.map +1 -0
  241. package/dist/src/runtime/lock.d.ts +63 -0
  242. package/dist/src/runtime/lock.js +577 -0
  243. package/dist/src/runtime/lock.js.map +1 -0
  244. package/dist/src/runtime/process-identity.d.ts +10 -0
  245. package/dist/src/runtime/process-identity.js +43 -0
  246. package/dist/src/runtime/process-identity.js.map +1 -0
  247. package/dist/src/runtime/quota.d.ts +130 -0
  248. package/dist/src/runtime/quota.js +590 -0
  249. package/dist/src/runtime/quota.js.map +1 -0
  250. package/dist/src/runtime/record-store.d.ts +45 -0
  251. package/dist/src/runtime/record-store.js +272 -0
  252. package/dist/src/runtime/record-store.js.map +1 -0
  253. package/dist/src/runtime/schema.d.ts +28 -0
  254. package/dist/src/runtime/schema.js +194 -0
  255. package/dist/src/runtime/schema.js.map +1 -0
  256. package/dist/src/runtime/stable-id.d.ts +3 -0
  257. package/dist/src/runtime/stable-id.js +27 -0
  258. package/dist/src/runtime/stable-id.js.map +1 -0
  259. package/dist/src/runtime/system-clock.d.ts +8 -0
  260. package/dist/src/runtime/system-clock.js +35 -0
  261. package/dist/src/runtime/system-clock.js.map +1 -0
  262. package/dist/src/schedule/service-plan.d.ts +58 -0
  263. package/dist/src/schedule/service-plan.js +327 -0
  264. package/dist/src/schedule/service-plan.js.map +1 -0
  265. package/dist/src/schedule/user-installation.d.ts +62 -0
  266. package/dist/src/schedule/user-installation.js +701 -0
  267. package/dist/src/schedule/user-installation.js.map +1 -0
  268. package/dist/src/schedule/user-plan.d.ts +47 -0
  269. package/dist/src/schedule/user-plan.js +286 -0
  270. package/dist/src/schedule/user-plan.js.map +1 -0
  271. package/dist/src/scheduler/minute.d.ts +31 -0
  272. package/dist/src/scheduler/minute.js +441 -0
  273. package/dist/src/scheduler/minute.js.map +1 -0
  274. package/dist/src/schemas/registry.d.ts +10 -0
  275. package/dist/src/schemas/registry.js +36 -0
  276. package/dist/src/schemas/registry.js.map +1 -0
  277. package/dist/src/security/secret-scan.d.ts +50 -0
  278. package/dist/src/security/secret-scan.js +384 -0
  279. package/dist/src/security/secret-scan.js.map +1 -0
  280. package/dist/src/sessions/registry.d.ts +89 -0
  281. package/dist/src/sessions/registry.js +443 -0
  282. package/dist/src/sessions/registry.js.map +1 -0
  283. package/dist/src/state.d.ts +27 -0
  284. package/dist/src/state.js +235 -0
  285. package/dist/src/state.js.map +1 -0
  286. package/dist/src/status/hud.d.ts +37 -0
  287. package/dist/src/status/hud.js +88 -0
  288. package/dist/src/status/hud.js.map +1 -0
  289. package/dist/src/team/plan.d.ts +31 -0
  290. package/dist/src/team/plan.js +184 -0
  291. package/dist/src/team/plan.js.map +1 -0
  292. package/dist/src/team/projection.d.ts +24 -0
  293. package/dist/src/team/projection.js +79 -0
  294. package/dist/src/team/projection.js.map +1 -0
  295. package/dist/src/tickets/admission.d.ts +34 -0
  296. package/dist/src/tickets/admission.js +169 -0
  297. package/dist/src/tickets/admission.js.map +1 -0
  298. package/dist/src/tickets/materializer.d.ts +1 -0
  299. package/dist/src/tickets/materializer.js +2 -0
  300. package/dist/src/tickets/materializer.js.map +1 -0
  301. package/dist/src/tickets/runtime-authority.d.ts +32 -0
  302. package/dist/src/tickets/runtime-authority.js +46 -0
  303. package/dist/src/tickets/runtime-authority.js.map +1 -0
  304. package/dist/src/tickets/store.d.ts +221 -0
  305. package/dist/src/tickets/store.js +2025 -0
  306. package/dist/src/tickets/store.js.map +1 -0
  307. package/dist/src/tracer/one-ticket.d.ts +58 -0
  308. package/dist/src/tracer/one-ticket.js +578 -0
  309. package/dist/src/tracer/one-ticket.js.map +1 -0
  310. package/dist/src/trust/assessment.d.ts +24 -0
  311. package/dist/src/trust/assessment.js +124 -0
  312. package/dist/src/trust/assessment.js.map +1 -0
  313. package/dist/src/trust/runs.d.ts +13 -0
  314. package/dist/src/trust/runs.js +46 -0
  315. package/dist/src/trust/runs.js.map +1 -0
  316. package/dist/src/types.d.ts +6 -0
  317. package/dist/src/types.js +2 -0
  318. package/dist/src/types.js.map +1 -0
  319. package/dist/src/utils/fs.d.ts +13 -0
  320. package/dist/src/utils/fs.js +188 -0
  321. package/dist/src/utils/fs.js.map +1 -0
  322. package/dist/src/verification/authority.d.ts +28 -0
  323. package/dist/src/verification/authority.js +153 -0
  324. package/dist/src/verification/authority.js.map +1 -0
  325. package/dist/src/verification/grade-source.d.ts +17 -0
  326. package/dist/src/verification/grade-source.js +30 -0
  327. package/dist/src/verification/grade-source.js.map +1 -0
  328. package/dist/src/verification/plan.d.ts +20 -0
  329. package/dist/src/verification/plan.js +128 -0
  330. package/dist/src/verification/plan.js.map +1 -0
  331. package/dist/src/verification/protected-runner.d.ts +50 -0
  332. package/dist/src/verification/protected-runner.js +171 -0
  333. package/dist/src/verification/protected-runner.js.map +1 -0
  334. package/dist/src/verification/result-gate-store.d.ts +72 -0
  335. package/dist/src/verification/result-gate-store.js +193 -0
  336. package/dist/src/verification/result-gate-store.js.map +1 -0
  337. package/dist/src/verification/result-gate.d.ts +41 -0
  338. package/dist/src/verification/result-gate.js +731 -0
  339. package/dist/src/verification/result-gate.js.map +1 -0
  340. package/dist/src/verification/runner.d.ts +38 -0
  341. package/dist/src/verification/runner.js +143 -0
  342. package/dist/src/verification/runner.js.map +1 -0
  343. package/dist/src/verification/sandbox.d.ts +16 -0
  344. package/dist/src/verification/sandbox.js +199 -0
  345. package/dist/src/verification/sandbox.js.map +1 -0
  346. package/dist/src/verify.d.ts +8 -0
  347. package/dist/src/verify.js +35 -0
  348. package/dist/src/verify.js.map +1 -0
  349. package/dist/src/watchdog/reconcile.d.ts +42 -0
  350. package/dist/src/watchdog/reconcile.js +440 -0
  351. package/dist/src/watchdog/reconcile.js.map +1 -0
  352. package/dist/src/workers/bridge.d.ts +35 -0
  353. package/dist/src/workers/bridge.js +426 -0
  354. package/dist/src/workers/bridge.js.map +1 -0
  355. package/dist/src/workers/delivery.d.ts +31 -0
  356. package/dist/src/workers/delivery.js +876 -0
  357. package/dist/src/workers/delivery.js.map +1 -0
  358. package/dist/src/workers/panes.d.ts +32 -0
  359. package/dist/src/workers/panes.js +212 -0
  360. package/dist/src/workers/panes.js.map +1 -0
  361. package/dist/src/workers/registry.d.ts +80 -0
  362. package/dist/src/workers/registry.js +351 -0
  363. package/dist/src/workers/registry.js.map +1 -0
  364. package/dist/src/workers/runtime.d.ts +44 -0
  365. package/dist/src/workers/runtime.js +21 -0
  366. package/dist/src/workers/runtime.js.map +1 -0
  367. package/dist/src/worktrees/manager.d.ts +35 -0
  368. package/dist/src/worktrees/manager.js +315 -0
  369. package/dist/src/worktrees/manager.js.map +1 -0
  370. package/docs/ARCHITECTURE.md +323 -0
  371. package/docs/PLAN.md +216 -0
  372. package/docs/REFERENCES.md +42 -0
  373. package/docs/ROADMAP.md +327 -0
  374. package/docs/SECURITY.md +242 -0
  375. package/docs/adr/0001-tracer-first-file-backed-certification.md +41 -0
  376. package/docs/adr/0002-conductor-first-typed-dispatch.md +102 -0
  377. package/docs/adr/0003-mandatory-pre-dispatch-advice.md +59 -0
  378. package/docs/compatibility/claude-code-2.1.207.md +25 -0
  379. package/loop/contract.md +102 -0
  380. package/package.json +54 -0
  381. package/schemas/advisor-evidence.schema.json +54 -0
  382. package/schemas/advisor-output.schema.json +31 -0
  383. package/schemas/conductor-activity-payload.schema.json +38 -0
  384. package/schemas/conductor-decision.schema.json +29 -0
  385. package/schemas/conductor-dispatch-intent.schema.json +71 -0
  386. package/schemas/conductor-dispatch-preparation.schema.json +46 -0
  387. package/schemas/conductor-dispatch-proposal.schema.json +82 -0
  388. package/schemas/conductor-goal-proposal.schema.json +30 -0
  389. package/schemas/conductor-manage-worker.schema.json +17 -0
  390. package/schemas/conductor-notification-payload.schema.json +39 -0
  391. package/schemas/conductor-process-result.schema.json +14 -0
  392. package/schemas/conductor-route.schema.json +51 -0
  393. package/schemas/conductor-start-team.schema.json +16 -0
  394. package/schemas/conductor-waiter-payload.schema.json +68 -0
  395. package/schemas/deterministic-check.schema.json +107 -0
  396. package/schemas/dispatch-acknowledgement.schema.json +15 -0
  397. package/schemas/dispatch-advice-payload.schema.json +64 -0
  398. package/schemas/dispatch-payload.schema.json +131 -0
  399. package/schemas/dispatch-result.schema.json +28 -0
  400. package/schemas/endurance-policy.schema.json +16 -0
  401. package/schemas/events/dispatch-delivery-requested.schema.json +17 -0
  402. package/schemas/events/github-observed.schema.json +28 -0
  403. package/schemas/events/native-hook-observed.schema.json +35 -0
  404. package/schemas/events/provider-observed.schema.json +64 -0
  405. package/schemas/events/run-heartbeat-due.schema.json +10 -0
  406. package/schemas/events/slack-notification-requested.schema.json +14 -0
  407. package/schemas/events/structured-role-completed.schema.json +54 -0
  408. package/schemas/events/ticket-resume-due.schema.json +28 -0
  409. package/schemas/events/watchdog-lease-expired.schema.json +14 -0
  410. package/schemas/events/watchdog-outbox-stalled.schema.json +12 -0
  411. package/schemas/events/watchdog-session-stalled.schema.json +11 -0
  412. package/schemas/evidence-record.schema.json +37 -0
  413. package/schemas/executor-result.schema.json +17 -0
  414. package/schemas/github-observation.schema.json +33 -0
  415. package/schemas/github-watermark.schema.json +66 -0
  416. package/schemas/goal-artifact.schema.json +19 -0
  417. package/schemas/goal-create-input.schema.json +14 -0
  418. package/schemas/goal-executor-result.schema.json +18 -0
  419. package/schemas/goal-payload.schema.json +95 -0
  420. package/schemas/grader-output.schema.json +33 -0
  421. package/schemas/lease-expiry.schema.json +19 -0
  422. package/schemas/live-disclosure.schema.json +16 -0
  423. package/schemas/live-outcome.schema.json +52 -0
  424. package/schemas/native-goal-snapshot.schema.json +27 -0
  425. package/schemas/provider-observed.schema.json +64 -0
  426. package/schemas/quota-observation.schema.json +72 -0
  427. package/schemas/reflection-evidence.schema.json +61 -0
  428. package/schemas/reflection.schema.json +13 -0
  429. package/schemas/regression-request.schema.json +54 -0
  430. package/schemas/release-assessment.schema.json +34 -0
  431. package/schemas/release-policy.schema.json +30 -0
  432. package/schemas/result-gate-payload.schema.json +244 -0
  433. package/schemas/review-delivery-payload.schema.json +42 -0
  434. package/schemas/role-policy.schema.json +111 -0
  435. package/schemas/run-abort-input.schema.json +11 -0
  436. package/schemas/run-completion-proof.schema.json +62 -0
  437. package/schemas/run-ledger-entry.schema.json +78 -0
  438. package/schemas/run-manifest.schema.json +74 -0
  439. package/schemas/run-start-intent.schema.json +74 -0
  440. package/schemas/runtime-record.schema.json +111 -0
  441. package/schemas/service-plan.schema.json +35 -0
  442. package/schemas/session-payload.schema.json +80 -0
  443. package/schemas/structured-role-read-request.schema.json +14 -0
  444. package/schemas/structured-role-request.schema.json +44 -0
  445. package/schemas/structured-role-result.schema.json +38 -0
  446. package/schemas/structured-role-submit-result.schema.json +15 -0
  447. package/schemas/team-checkpoint.schema.json +42 -0
  448. package/schemas/team-plan.schema.json +30 -0
  449. package/schemas/ticket-content.schema.json +38 -0
  450. package/schemas/ticket-queue-payload.schema.json +191 -0
  451. package/schemas/trust-report.schema.json +68 -0
  452. package/schemas/trust-run.schema.json +47 -0
  453. package/schemas/ultragoal-checkpoint.schema.json +49 -0
  454. package/schemas/user-schedule-installation-v1.schema.json +32 -0
  455. package/schemas/user-schedule-installation.schema.json +38 -0
  456. package/schemas/user-schedule-plan.schema.json +39 -0
  457. package/schemas/verification-plan-evidence.schema.json +37 -0
  458. package/schemas/worker-acknowledge-dispatch.schema.json +12 -0
  459. package/schemas/worker-payload.schema.json +47 -0
  460. package/schemas/worker-read-dispatch.schema.json +11 -0
  461. package/schemas/worker-record-dispatch-result.schema.json +14 -0
@@ -0,0 +1 @@
1
+ {"version":3,"file":"result-gate.js","sourceRoot":"","sources":["../../../src/verification/result-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACL,mCAAmC,GAEpC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAA8B,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAsB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EACL,oCAAoC,GAErC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,GAKtB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAClC,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAU,CAAC;AAwBnD,MAAM,UAAU,uBAAuB,CAAC,OAavC;IACC,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,yBAAyB,CAAC,OAAO,CAAC,UAAU,IAAI,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAClH,MAAM,aAAa,GAAG,yBAAyB,CAAC,OAAO,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,8BAA8B,CAAC;QAChE,WAAW;QACX,UAAU;QACV,aAAa;QACb,SAAS;QACT,OAAO,EAAE,eAAe;QACxB,KAAK;KACN,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oCAAoC,CAAC;QAChF,WAAW;QACX,UAAU;QACV,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;KAC7C,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,mCAAmC,CAAC;QACvF,WAAW;QACX,UAAU;QACV,aAAa;QACb,SAAS;QACT,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,GAAG;QACH,KAAK;KACN,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,kBAAkB,CAAC;IACtE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,MAAM,KAAK,GAAG,qBAAqB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,CAAC,IAAsB,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEpG,SAAS,OAAO,CAAC,UAAkB;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,oBAAoB,CAAC;YAChC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;YACnC,MAAM,EAAE,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC;YAC5C,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACtE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,cAAc,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;gBACpD,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;oBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClF,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;oBAAE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;qBAC7C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7B,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,QAAQ,CAAC,OAAO;wBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC9B,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,QAAQ,CAAC,OAAO;wBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,oDAAoD,CAAC,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,SAAS,UAAU,CAAC,QAAwB,EAAE,MAAc;QAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAChD,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAC9E,KAAK,CACN,CAAC,CAAC;IACL,CAAC;IAED,SAAS,cAAc,CAAC,QAAwB;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,IACE,QAAQ,CAAC,KAAK,KAAK,UAAU;eAC1B,QAAQ,CAAC,OAAO,CAAC,UAAU,KAAK,MAAM;eACtC,MAAM,EAAE,MAAM,KAAK,MAAM;eACzB,QAAQ,CAAC,OAAO,CAAC,iBAAiB,KAAK,IAAI;YAC9C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,yBAAyB,CACxC,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,OAAO,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,EAC1G,6BAA6B,CAC9B,CAAC;QACF,IACE,IAAI,CAAC,KAAK,KAAK,QAAQ;eACpB,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,YAAY;eAC9C,IAAI,CAAC,OAAO,CAAC,gBAAgB,KAAK,aAAa;eAC/C,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;eACjC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO;eACpC,MAAM,CAAC,KAAK,KAAK,WAAW;eAC5B,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,OAAO;eAC3C,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;eAC3C,MAAM,CAAC,WAAW,KAAK,IAAI;eAC3B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;eAC3D,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU;eACzD,CAAC,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC;eAC5F,MAAM,CAAC,OAAO,CAAC,qBAAqB,KAAK,IAAI;eAC7C,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,YAAY,CAAC,UAAU;eACtD,MAAM,CAAC,OAAO,CAAC,cAAc,KAAK,YAAY,CAAC,aAAa;eAC5D,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,YAAY,CAAC,YAAY;eAC1D,MAAM,CAAC,KAAK,KAAK,MAAM;eACvB,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU;eACzD,MAAM,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;eACvD,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;eACxD,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,OAAO;eACpD,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM;eAClD,OAAO,CAAC,OAAO,CAAC,kBAAkB,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU;eAClE,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;eACjD,QAAQ,CAAC,eAAe,KAAK,aAAa;eAC1C,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,OAAO,CAAC,aAAa;eACzD,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,eAAe;eACpD,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,OAAO,CAAC,oBAAoB;eAC9D,gBAAgB,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;YAC9D,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAChH,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACtF,IACE,IAAI,CAAC,aAAa,KAAK,mBAAmB;eACvC,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;eACnC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,YAAY,CAAC,UAAU;YAClD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,YAAY,EAAE,IAAI,CAAC,OAAO;YAC1B,WAAW,EAAE,QAAQ,CAAC,SAAS;YAC/B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;YAClC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,wBAAwB,EAAE,MAAM,CAAC,OAAO;YACxC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW;YACzC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,gBAAgB;YACnD,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;YACrC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;YACvC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO;YACvC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;YACxC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW;YACzC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa;YAC7C,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,eAAe;YACjD,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,oBAAoB;YAC3D,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,cAAc,EAAE,YAAY,CAAC,aAAa;YAC1C,aAAa,EAAE,YAAY,CAAC,YAAY;YACxC,WAAW,EAAE,YAAY,CAAC,UAAU;YACpC,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB;YAC3D,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB;SACtD,CAAC,CAAC;IACL,CAAC;IAED,SAAS,KAAK,CAAC,IAAsB;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC,UAAU,CAAC;gBACtB,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,SAAS;gBAClB,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC;gBAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,IAAsB;QACnC,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,OAAO,CAAC,sBAAsB,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC9G,IAAI,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtC,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;oBACzB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,SAAS;oBAClB,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC;oBAC9B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;YAC9C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3D,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO;gBACvC,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC;gBACrC,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3C,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAClG,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpG,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;gBACzB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,QAAQ;gBACjB,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC;gBAC9B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;aACrE,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,SAAS,YAAY,CAAC,IAAsB;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAClE,IAAI,qBAAqB,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,cAAc,EAAE,CAAC;YACjB,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;YACrC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO;YACjC,WAAW,EAAE,QAAQ,CAAC,SAAS;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO;YACjC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW;YACzC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;YACxC,aAAa,EAAE,IAAI,CAAC,MAAM;YAC1B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;YACrC,mBAAmB,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC;YAC9D,sBAAsB,EAAE,qBAAqB;YAC7C,mBAAmB,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO;YACtF,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,cAAc,CAAC,eAAe,EAAE,qBAAqB,CAAC,WAAW,EAAE,qBAAqB,CAAC,MAAM,CAAC;YAC5G,OAAO,EAAE,IAAI,CAAC,OAAmD;YACjE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,eAAe,EAAE,kBAAkB;YACnC,KAAK;YACL,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,SAAS,iBAAiB,CACxB,IAAsB,EACtB,OAA8B;QAQ9B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,0BAA0B,EAAE,GAAG,OAAO,CAAC,UAAU,aAAa,CAAC,CAAC;QACnG,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,uGAAuG,CAAC,CAAC;QAC3H,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;QAChI,CAAC;QACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,SAAS;YAClB,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACpB,GAAG,OAAO;gBACV,aAAa,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;aACrF,CAAC;SACH,CAAC,CAAC;QACH,IAAI,MAAsD,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,GAAG,eAAe,CAA0B;gBAChD,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC;gBACjC,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;gBAClC,SAAS,EAAE,OAAO,CAAC,UAAU;gBAC7B,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa;gBACvC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC;gBAC1D,WAAW;gBACX,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;YACvC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,SAAS,oBAAoB,CAC3B,IAAsB,EACtB,OAA8B;QAQ9B,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,OAAO,CAAC,OAAO,KAAK,mBAAmB,IAAI,OAAO,CAAC,OAAO,KAAK,qBAAqB,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC;gBACxC,SAAS,EAAE,OAAO,CAAC,UAAU;gBAC7B,MAAM,EAAE,OAAO,CAAC,OAAO;gBACvB,cAAc,EAAE,OAAO,CAAC,eAAe;gBACvC,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;gBACzB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,GAAG,OAAO,CAAC,eAAe,iBAAiB;gBACjD,OAAO,EAAE,OAAO,CAAC,KAAK;gBACtB,EAAE,EAAE,SAAS;gBACb,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE;oBACvD,GAAG,OAAO;oBACV,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB;iBAC/C,CAAC;aACH,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;YACpG,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;gBAC7B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;gBACzC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,mBAAmB;oBACzC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE;oBACpE,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrH,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;YAC7B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;YACzC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,mBAAmB;gBACzC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE;gBACpE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,SAAS,UAAU,CACjB,IAAsB,EACtB,OAA8B,EAC9B,KAA8B,EAC9B,SAAiB,EACjB,MAA4B;QAE5B,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAClE,IAAI,qBAAqB,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACnG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,sBAA2C,EAAE,qBAAqB,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC;YACtC,cAAc,EAAE,CAAC;YACjB,WAAW,EAAE,cAAc,CAAC,OAAO,EAAE,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC;YAC3F,aAAa,EAAE,eAAe;YAC9B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS;YACzC,aAAa,EAAE,OAAO,CAAC,OAAO;YAC9B,UAAU,EAAE,kBAAkB,CAAC,SAAS,EAAE,0BAA0B,CAAC;YACrE,OAAO,EAAE,KAAK;SACf,EAAE,MAAM,CAAC,CAAC;QACX,OAAO,OAAO,CAAC,GAAG,CAAC;IACrB,CAAC;IAED,SAAS,MAAM,CAAC,IAAsB;QACpC,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;YAChG,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YAChF,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAChE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACtE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC5E,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACnF,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;gBACtF,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBAChF,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;oBACzB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,YAAY;oBACrB,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC;oBAC9B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;iBACnE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACnD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAChE,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzD,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC;YACzB,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/D,IAAI,CAAC,SAAS,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACpF,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,SAAS,iBAAiB,CACxB,IAAsB,EACtB,eAAkC,EAClC,aAA6B,EAC7B,KAAqB;QAErB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC;YAChG,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,eAAe;YAChC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;gBACnB,cAAc,EAAE,CAAC;gBACjB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS;gBACzC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO;gBACrC,gBAAgB,EAAE,eAAe;gBACjC,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;gBAC3D,mBAAmB,EAAE,aAAa,CAAC,OAAO;gBAC1C,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;gBAC3C,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,SAAS,QAAQ,CACf,IAAsB,EACtB,qBAAwC,EACxC,aAAgC;QAEhC,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC1C,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC5D,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS;gBACvC,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC;gBAC7D,oBAAoB,EAAE,qBAAqB;gBAC3C,aAAa;aACd,CAAC,CAAC,MAAM,CAAC;QACZ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,cAAc,CAAC;YAC3B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;YAC5C,qBAAqB;YACrB,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;SACjD,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,UAAU,CAAC;YACtB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,WAAW;YACpB,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;SACvF,CAAC,CAAC;IACL,CAAC;IAED,SAAS,WAAW,CAAC,IAAsB,EAAE,MAA+B;QAC1E,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;QACrG,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAChF,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC;QACtG,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC;gBAC7C,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;gBACxD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS;gBACvC,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC;gBAC7D,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI;oBAC1C,CAAC,CAAC,mDAAmD;oBACrD,CAAC,CAAC,wCAAwC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC,EAAE;gBACpG,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB;gBACxD,oBAAoB,EAAE,qBAAqB;gBAC3C,aAAa;gBACb,eAAe;aAChB,CAAC,CAAC,MAAM,CAAC;QACZ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC;YACzC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;YAC5C,eAAe;YACf,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;YAChD,MAAM,EAAE;gBACN,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC7B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;aAC1C;SACF,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrH,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC;gBACvD,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,cAAc,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC3D,OAAO,EAAE,YAAY;gBACrB,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC;gBAC7D,kBAAkB,EAAE,UAAU,CAAC,GAAG;aACnC,CAAC,CAAC,MAAM,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK;YAClD,CAAC,CAAC,cAAc,CAAC;gBACf,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;gBAC5C,qBAAqB;gBACrB,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;aACjD,CAAC;YACF,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,KAAK,CAAC,UAAU,CAAC;YACtB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS,MAAM,CAAC,KAAK,EAAE;YAC7B,OAAO,EAAE,WAAW;YACpB,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACpB,GAAG,OAAO;gBACV,mBAAmB,EAAE,UAAU,CAAC,GAAG;gBACnC,cAAc,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,cAAc;gBACpD,OAAO,EAAE,MAAM,CAAC,KAAgC;aACjD,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,SAAS,KAAK,CAAC,IAAsB,EAAE,SAAiB;QACtD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC;gBACnD,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;gBACjE,OAAO,EAAE,YAAY;gBACrB,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC;gBAC7D,KAAK,EAAE,MAAM;gBACb,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7G,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvF,CAAC,CAAC,MAAM,CAAC;QACZ,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,KAAK,IAAI;YAChE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,aAAa,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK;YACnD,CAAC,CAAC,cAAc,CAAC;gBACf,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;gBAC5C,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAuB;gBAC3D,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;aACjD,CAAC;YACF,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,KAAK,CAAC,UAAU,CAAC;YACtB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,SAAS;YAClB,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACpB,GAAG,OAAO;gBACV,OAAO,EAAE,SAAS;gBAClB,cAAc,EAAE,MAAM;gBACtB,cAAc,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,cAAc;aACrD,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,SAAS,QAAQ,CAAC,IAAsB;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS;YACrC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW;gBAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAgD;gBAC/D,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY;oBACvD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,UAAU,CAAC;QACnB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,UAAU,EAAE,IAAI,CAAC,KAAK;YACtB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,KAAK;YAC1B,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;YAC3D,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3C,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;YACrD,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3C,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;SACpC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,mBAAmB,CAC1B,IAAsB,EACtB,OAA8B,EAC9B,SAAyD;QAEzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;YACvD,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;YACrC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;SACvC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACnG,MAAM,aAAa,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,mBAAmB,CAAC;YAClB,SAAS;YACT,aAAa;YACb,SAAS;YACT,cAAc,EAAE,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,oBAAoB;YAChF,SAAS,EAAE,OAAO,CAAC,UAAU;YAC7B,OAAO,EAAE;gBACP,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB;YACD,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;SACrC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAsB;QACtC,OAAO;QACP,IAAI,CAAC,UAAU;YACb,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3C,CAAC;QACD,IAAI;YACF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5C,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAwB;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/D,OAAO,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA0B,EAC1B,OAA8B,EAC9B,IAA2B;IAE3B,OAAO,OAAO,CAAC,eAAe,KAAK,kBAAkB;QACnD,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE;QACrC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,KAAwC;IAC3D,OAAO;QACL,qDAAqD;QACrD,2FAA2F;QAC3F,wGAAwG;QACxG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;KACtB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA0B,EAC1B,SAA4B,EAC5B,MAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,CAAC;QACpB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE;YACJ,IAAI,EAAE,+BAA+B;YACrC,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc;YACxD,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,GAAG;SACjE;QACD,GAAG,EAAE,OAAO,CAAC,aAAa;QAC1B,GAAG,EAAE,uBAAuB,CAAC,SAAS,CAAC;QACvC,SAAS,EAAE,MAAM;QACjB,cAAc,EAAE,cAAc;KAC/B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,OAAO,CAAC,oBAAoB;QACzC,WAAW,EAAE,OAAO,CAAC,eAAe;QACpC,KAAK,EAAE,MAAM,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAyB;IACxD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5F,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,GAAG,CAAC,iBAAiB,GAAG,WAAW,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAmC,EAAE,KAAa;IAC1E,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,WAAW,CAAC,CAAC;IAC/E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAA0C,EAC1C,KAA2C;IAE3C,OAAO,IAAI,KAAK,IAAI;WACf,IAAI,KAAK,SAAS;WAClB,KAAK,KAAK,IAAI;WACd,KAAK,KAAK,SAAS;WACnB,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;WACtC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;WAC5B,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAmB;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACjF,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5F,CAAC"}
@@ -0,0 +1,38 @@
1
+ import type { ProcessRunner } from "../providers/process.js";
2
+ import type { FrozenVerificationPlan } from "./plan.js";
3
+ export interface VerificationStepResult {
4
+ id: string;
5
+ status: number | null;
6
+ signal: NodeJS.Signals | null;
7
+ passed: boolean;
8
+ stdout: string;
9
+ stderr: string;
10
+ error: string | null;
11
+ }
12
+ export interface VerificationResult {
13
+ schema_version: 1;
14
+ plan_digest: string;
15
+ passed: boolean;
16
+ failed_step: string | null;
17
+ steps: readonly VerificationStepResult[];
18
+ }
19
+ export interface RunVerificationOptions {
20
+ packageRoot: string;
21
+ configRoot?: string;
22
+ worktreeRoot: string;
23
+ env?: NodeJS.ProcessEnv;
24
+ runner: ProcessRunner;
25
+ }
26
+ /** Loads and validates the tracked plan before any child process is invoked. */
27
+ export declare function runDeterministicVerification(options: RunVerificationOptions): VerificationResult;
28
+ export interface RunFrozenVerificationOptions {
29
+ packageRoot: string;
30
+ frozenPlan: FrozenVerificationPlan;
31
+ worktreeRoot: string;
32
+ env?: NodeJS.ProcessEnv;
33
+ runner: ProcessRunner;
34
+ requireInstalledTools?: boolean;
35
+ }
36
+ /** Runs an immutable plan snapshot that may be frozen before an executor starts. */
37
+ export declare function runFrozenVerification(options: RunFrozenVerificationOptions): VerificationResult;
38
+ export declare function reducedVerificationEnvironment(source: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
@@ -0,0 +1,143 @@
1
+ import { StringDecoder } from "node:string_decoder";
2
+ import { lstatSync } from "node:fs";
3
+ import { delimiter, isAbsolute, join } from "node:path";
4
+ import { validateExistingDirectory } from "../utils/fs.js";
5
+ import { assertFrozenVerificationPlan, freezeTrackedVerificationPlan } from "./plan.js";
6
+ import { createVerificationSandbox } from "./sandbox.js";
7
+ const GENERIC_SECRET_PATTERNS = [
8
+ /\bBearer\s+[A-Za-z0-9._~+/-]+=*/giu,
9
+ /\b(?:sk|key|token)-[A-Za-z0-9_-]{8,}\b/gu,
10
+ /\b[A-Z][A-Z0-9_]*(?:API_KEY|TOKEN|SECRET|PASSWORD)=\S+/gu,
11
+ ];
12
+ /** Loads and validates the tracked plan before any child process is invoked. */
13
+ export function runDeterministicVerification(options) {
14
+ const frozenPlan = freezeTrackedVerificationPlan(options.configRoot ?? options.packageRoot);
15
+ return runFrozenVerification({ ...options, frozenPlan });
16
+ }
17
+ /** Runs an immutable plan snapshot that may be frozen before an executor starts. */
18
+ export function runFrozenVerification(options) {
19
+ const plan = assertFrozenVerificationPlan(options.frozenPlan);
20
+ const packageRoot = validateExistingDirectory(options.packageRoot, "installed OMS package root");
21
+ const worktreeRoot = validateExistingDirectory(options.worktreeRoot, "verification worktree");
22
+ const sourceEnv = options.env ?? process.env;
23
+ const env = reducedVerificationEnvironment(sourceEnv);
24
+ const secretValues = collectSecretValues(sourceEnv);
25
+ const results = [];
26
+ const sandbox = options.requireInstalledTools === true
27
+ ? createVerificationSandbox({ worktreeRoot, packageRoot })
28
+ : undefined;
29
+ for (const step of plan.steps) {
30
+ const tool = resolveInstalledTool(packageRoot, step, options.requireInstalledTools === true);
31
+ const request = {
32
+ command: process.execPath,
33
+ args: [tool, ...step.args],
34
+ cwd: worktreeRoot,
35
+ env,
36
+ timeoutMs: step.timeout_ms,
37
+ maxBufferBytes: step.max_output_bytes,
38
+ };
39
+ const processResult = invokeRunner(options.runner, sandbox ? sandbox.wrap(request) : request);
40
+ const error = processResult.error ? redactAndBound(processResult.error.message, secretValues, step.max_output_bytes) : null;
41
+ const passed = !processResult.error && processResult.status === 0 && processResult.signal === null;
42
+ results.push({
43
+ id: step.id,
44
+ status: processResult.status,
45
+ signal: processResult.signal,
46
+ passed,
47
+ stdout: redactAndBound(processResult.stdout, secretValues, step.max_output_bytes),
48
+ stderr: redactAndBound(processResult.stderr, secretValues, step.max_output_bytes),
49
+ error,
50
+ });
51
+ if (!passed)
52
+ break;
53
+ }
54
+ const failure = results.find((result) => !result.passed);
55
+ return {
56
+ schema_version: 1,
57
+ plan_digest: options.frozenPlan.digest,
58
+ passed: failure === undefined && results.length === plan.steps.length,
59
+ failed_step: failure?.id ?? null,
60
+ steps: results,
61
+ };
62
+ }
63
+ function resolveInstalledTool(packageRoot, step, requireInstalled) {
64
+ const relativePath = step.command === "typescript"
65
+ ? join("node_modules", "typescript", "bin", "tsc")
66
+ : step.command === "vitest"
67
+ ? join("node_modules", "vitest", "vitest.mjs")
68
+ : join("dist", "src", "cli.js");
69
+ const path = join(packageRoot, relativePath);
70
+ if (requireInstalled) {
71
+ const entry = lstatSync(path);
72
+ if (entry.isSymbolicLink() || !entry.isFile()) {
73
+ throw new Error(`installed verification tool is not a regular file: ${step.command}`);
74
+ }
75
+ }
76
+ return path;
77
+ }
78
+ function invokeRunner(runner, request) {
79
+ try {
80
+ return runner(request);
81
+ }
82
+ catch (error) {
83
+ return {
84
+ status: null,
85
+ signal: null,
86
+ stdout: "",
87
+ stderr: "",
88
+ error: error instanceof Error ? error : new Error(String(error)),
89
+ };
90
+ }
91
+ }
92
+ export function reducedVerificationEnvironment(source) {
93
+ const result = {};
94
+ for (const key of ["HOME", "TMPDIR", "TMP", "TEMP", "LANG", "LC_ALL", "SYSTEMROOT"]) {
95
+ if (source[key] !== undefined)
96
+ result[key] = source[key];
97
+ }
98
+ if (source.PATH !== undefined) {
99
+ result.PATH = source.PATH.split(delimiter).filter((entry) => isAbsolute(entry)).join(delimiter);
100
+ }
101
+ result.CI = "1";
102
+ result.NO_COLOR = "1";
103
+ result.GIT_TERMINAL_PROMPT = "0";
104
+ result.npm_config_audit = "false";
105
+ result.npm_config_fund = "false";
106
+ result.npm_config_userconfig = "/dev/null";
107
+ // npm rejects loading the same file as both user and global config. This
108
+ // impossible child path stays distinct without making another config file.
109
+ result.npm_config_globalconfig = "/dev/null/oms-global";
110
+ return result;
111
+ }
112
+ function collectSecretValues(env) {
113
+ return Object.entries(env)
114
+ .filter(([key, value]) => value !== undefined && isSecretKey(key) && value.length >= 4)
115
+ .map(([, value]) => value)
116
+ .sort((left, right) => right.length - left.length);
117
+ }
118
+ function isSecretKey(key) {
119
+ return /(?:API[_-]?KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|ANTHROPIC|OPENAI)/iu.test(key);
120
+ }
121
+ function redactAndBound(value, secretValues, maximumBytes) {
122
+ let redacted = value;
123
+ for (const secret of secretValues)
124
+ redacted = redacted.split(secret).join("[REDACTED]");
125
+ for (const pattern of GENERIC_SECRET_PATTERNS)
126
+ redacted = redacted.replace(pattern, "[REDACTED]");
127
+ return boundUtf8(redacted, maximumBytes);
128
+ }
129
+ function boundUtf8(value, maximumBytes) {
130
+ const bytes = Buffer.from(value, "utf8");
131
+ if (bytes.length <= maximumBytes)
132
+ return value;
133
+ const suffix = "\n[OUTPUT TRUNCATED]\n";
134
+ const suffixBytes = Buffer.byteLength(suffix, "utf8");
135
+ if (maximumBytes <= suffixBytes)
136
+ return utf8Prefix(Buffer.from(suffix), maximumBytes);
137
+ return `${utf8Prefix(bytes, maximumBytes - suffixBytes)}\n[OUTPUT TRUNCATED]\n`;
138
+ }
139
+ function utf8Prefix(bytes, maximumBytes) {
140
+ const decoder = new StringDecoder("utf8");
141
+ return decoder.write(bytes.subarray(0, maximumBytes));
142
+ }
143
+ //# sourceMappingURL=runner.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/verification/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAExD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAC;AAExF,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEzD,MAAM,uBAAuB,GAAG;IAC9B,oCAAoC;IACpC,0CAA0C;IAC1C,0DAA0D;CAClD,CAAC;AA4BX,gFAAgF;AAChF,MAAM,UAAU,4BAA4B,CAAC,OAA+B;IAC1E,MAAM,UAAU,GAAG,6BAA6B,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5F,OAAO,qBAAqB,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;AAC3D,CAAC;AAWD,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,OAAqC;IACzE,MAAM,IAAI,GAAG,4BAA4B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;IACjG,MAAM,YAAY,GAAG,yBAAyB,CAAC,OAAO,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAC7C,MAAM,GAAG,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,qBAAqB,KAAK,IAAI;QACpD,CAAC,CAAC,yBAAyB,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC;IAEd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAmB;YAC9B,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;YAC1B,GAAG,EAAE,YAAY;YACjB,GAAG;YACH,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,cAAc,EAAE,IAAI,CAAC,gBAAgB;SACtC,CAAC;QACF,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5H,MAAM,MAAM,GAAG,CAAC,aAAa,CAAC,KAAK,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,IAAI,CAAC;QACnG,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM;YACN,MAAM,EAAE,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC;YACjF,MAAM,EAAE,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC;YACjF,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM;QACtC,MAAM,EAAE,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;QACrE,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI;QAChC,KAAK,EAAE,OAAO;KACf,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB,EAAE,IAAsB,EAAE,gBAAyB;IAClG,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,KAAK,YAAY;QAChD,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC;QAClD,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ;YACzB,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC7C,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB,EAAE,OAAuB;IAClE,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAyB;IACtE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QACpF,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC;IAChB,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC;IACtB,MAAM,CAAC,mBAAmB,GAAG,GAAG,CAAC;IACjC,MAAM,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC;IACjC,MAAM,CAAC,qBAAqB,GAAG,WAAW,CAAC;IAC3C,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,CAAC,uBAAuB,GAAG,sBAAsB,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAsB;IACjD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;SACtF,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAe,CAAC;SACnC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,qEAAqE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,YAA+B,EAAE,YAAoB;IAC1F,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,YAAY;QAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxF,KAAK,MAAM,OAAO,IAAI,uBAAuB;QAAE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAClG,OAAO,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,YAAoB;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,IAAI,YAAY;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,MAAM,GAAG,wBAAwB,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,YAAY,IAAI,WAAW;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IACtF,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,WAAW,CAAC,wBAAwB,CAAC;AAClF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,YAAoB;IACrD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;AACxD,CAAC"}
@@ -0,0 +1,16 @@
1
+ import type { ProcessRequest } from "../providers/process.js";
2
+ export interface VerificationSandbox {
3
+ wrap(request: ProcessRequest): ProcessRequest;
4
+ }
5
+ /**
6
+ * Candidate checks may write only to their worktree and an isolated temporary
7
+ * directory. OMS state and installed code remain read-only inside the child.
8
+ */
9
+ export declare function createVerificationSandbox(options: {
10
+ worktreeRoot: string;
11
+ packageRoot: string;
12
+ }): VerificationSandbox;
13
+ export declare function probeVerificationSandboxSupport(): {
14
+ ok: boolean;
15
+ detail: string;
16
+ };
@@ -0,0 +1,199 @@
1
+ import { spawnSync } from "node:child_process";
2
+ import { existsSync, lstatSync, readlinkSync, realpathSync } from "node:fs";
3
+ import { delimiter, isAbsolute, join, relative, sep } from "node:path";
4
+ import { readSecretScanPolicy } from "../security/secret-scan.js";
5
+ import { validateExistingDirectory } from "../utils/fs.js";
6
+ /**
7
+ * Candidate checks may write only to their worktree and an isolated temporary
8
+ * directory. OMS state and installed code remain read-only inside the child.
9
+ */
10
+ export function createVerificationSandbox(options) {
11
+ const worktreeRoot = validateExistingDirectory(options.worktreeRoot, "verification sandbox worktree");
12
+ const packageRoot = validateExistingDirectory(options.packageRoot, "verification sandbox package root");
13
+ validatePackageArtifacts(packageRoot);
14
+ const secretScanner = resolvePinnedSecretScanner(packageRoot, worktreeRoot);
15
+ const wrap = process.platform === "linux"
16
+ ? linuxBubblewrap(worktreeRoot, packageRoot, secretScanner)
17
+ : undefined;
18
+ if (!wrap) {
19
+ throw new Error(`protected verification sandbox is unavailable on ${process.platform}`);
20
+ }
21
+ return Object.freeze({
22
+ wrap(request) {
23
+ if (request.cwd !== worktreeRoot)
24
+ throw new Error("verification sandbox command escaped its worktree");
25
+ return wrap(request);
26
+ },
27
+ });
28
+ }
29
+ export function probeVerificationSandboxSupport() {
30
+ if (process.env.OMS_VERIFICATION_SANDBOX_ACTIVE === "1") {
31
+ return { ok: true, detail: "active native verification sandbox" };
32
+ }
33
+ if (process.platform === "linux") {
34
+ const executable = regularExecutable(["/usr/bin/bwrap", "/bin/bwrap"]);
35
+ if (!executable)
36
+ return { ok: false, detail: "bubblewrap is not installed" };
37
+ const result = spawnSync(executable, [
38
+ "--die-with-parent",
39
+ "--new-session",
40
+ "--unshare-all",
41
+ "--tmpfs", "/",
42
+ "--dir", "/usr",
43
+ ...systemCompatibilityMount("/usr/bin"),
44
+ ...systemCompatibilityMount("/usr/lib"),
45
+ ...systemCompatibilityMount("/usr/lib64"),
46
+ ...systemCompatibilityMount("/usr/libexec"),
47
+ ...systemCompatibilityMount("/usr/share"),
48
+ ...systemCompatibilityMount("/bin"),
49
+ ...systemCompatibilityMount("/lib"),
50
+ ...systemCompatibilityMount("/lib64"),
51
+ "--dir", "/etc",
52
+ ...(existsSync("/etc/ld.so.cache")
53
+ ? ["--ro-bind", "/etc/ld.so.cache", "/etc/ld.so.cache"]
54
+ : []),
55
+ "--proc", "/proc",
56
+ "--dev", "/dev",
57
+ "--dir", "/tmp",
58
+ "--",
59
+ "/usr/bin/true",
60
+ ], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
61
+ return result.status === 0
62
+ ? { ok: true, detail: executable }
63
+ : { ok: false, detail: (result.stderr || result.error?.message || "bubblewrap probe failed").trim() };
64
+ }
65
+ return { ok: false, detail: `unsupported platform: ${process.platform}` };
66
+ }
67
+ function linuxBubblewrap(worktreeRoot, packageRoot, secretScanner) {
68
+ const executable = regularExecutable(["/usr/bin/bwrap", "/bin/bwrap"]);
69
+ if (!executable)
70
+ return undefined;
71
+ return (request) => {
72
+ const args = [
73
+ "--die-with-parent",
74
+ "--new-session",
75
+ "--unshare-all",
76
+ "--tmpfs", "/",
77
+ "--dir", "/usr",
78
+ ...systemCompatibilityMount("/usr/bin"),
79
+ ...systemCompatibilityMount("/usr/lib"),
80
+ ...systemCompatibilityMount("/usr/lib64"),
81
+ ...systemCompatibilityMount("/usr/libexec"),
82
+ ...systemCompatibilityMount("/usr/share"),
83
+ ...systemCompatibilityMount("/bin"),
84
+ ...systemCompatibilityMount("/lib"),
85
+ ...systemCompatibilityMount("/lib64"),
86
+ "--dir", "/etc",
87
+ ...(existsSync("/etc/ld.so.cache")
88
+ ? ["--ro-bind", "/etc/ld.so.cache", "/etc/ld.so.cache"]
89
+ : []),
90
+ "--proc", "/proc",
91
+ "--dev", "/dev",
92
+ "--dir", "/tmp",
93
+ "--dir", "/tmp/oms-package",
94
+ "--ro-bind", join(packageRoot, "package.json"), "/tmp/oms-package/package.json",
95
+ ...packageDirectoryMount(packageRoot, ".agents"),
96
+ ...packageDirectoryMount(packageRoot, "dist"),
97
+ ...packageDirectoryMount(packageRoot, "node_modules"),
98
+ ...packageDirectoryMount(packageRoot, "schemas"),
99
+ "--dir", "/tmp/node_modules",
100
+ "--ro-bind", join(packageRoot, "node_modules"), "/tmp/node_modules",
101
+ "--dir", "/tmp/oms-worktree",
102
+ "--bind", worktreeRoot, "/tmp/oms-worktree",
103
+ "--dir", "/tmp/oms-bin",
104
+ "--ro-bind", request.command, "/tmp/oms-bin/node",
105
+ "--ro-bind", secretScanner, "/tmp/oms-bin/gitleaks",
106
+ "--dir", "/tmp/oms-home",
107
+ "--dir", "/tmp/oms-cache",
108
+ "--chdir", "/tmp/oms-worktree",
109
+ "--setenv", "HOME", "/tmp/oms-home",
110
+ "--setenv", "TMPDIR", "/tmp",
111
+ "--setenv", "TMP", "/tmp",
112
+ "--setenv", "TEMP", "/tmp",
113
+ "--setenv", "XDG_CACHE_HOME", "/tmp/oms-cache",
114
+ "--setenv", "npm_config_cache", "/tmp/oms-cache",
115
+ "--setenv", "PATH", "/tmp/oms-bin:/usr/bin:/bin:/usr/local/bin",
116
+ "--setenv", "OMS_VERIFICATION_SANDBOX_ACTIVE", "1",
117
+ "--",
118
+ "/tmp/oms-bin/node",
119
+ ...request.args.map((argument) => mapPackagePath(argument, packageRoot)),
120
+ ];
121
+ return { ...request, command: executable, args, cwd: "/" };
122
+ };
123
+ }
124
+ function resolvePinnedSecretScanner(packageRoot, worktreeRoot) {
125
+ const expectedVersion = readSecretScanPolicy(packageRoot).version;
126
+ const candidates = (process.env.PATH ?? "")
127
+ .split(delimiter)
128
+ .filter((directory) => isAbsolute(directory))
129
+ .map((directory) => join(directory, "gitleaks"));
130
+ for (const candidate of [...new Set(candidates)]) {
131
+ if (!existsSync(candidate))
132
+ continue;
133
+ const resolved = realpathSync.native(candidate);
134
+ const entry = lstatSync(resolved);
135
+ if (!entry.isFile() || (entry.mode & 0o111) === 0)
136
+ continue;
137
+ if (isInside(resolved, packageRoot) || isInside(resolved, worktreeRoot))
138
+ continue;
139
+ const version = spawnSync(resolved, ["version"], {
140
+ encoding: "utf8",
141
+ stdio: ["ignore", "pipe", "pipe"],
142
+ env: { PATH: process.env.PATH, HOME: process.env.HOME, NO_COLOR: "1" },
143
+ });
144
+ const actual = `${version.stdout ?? ""}\n${version.stderr ?? ""}`.trim().replace(/^v/u, "");
145
+ if (!version.error && version.status === 0 && actual === expectedVersion)
146
+ return resolved;
147
+ }
148
+ throw new Error(`protected verification requires gitleaks ${expectedVersion} outside the package and candidate worktree`);
149
+ }
150
+ function isInside(path, root) {
151
+ const suffix = relative(root, path);
152
+ return suffix === "" || (!suffix.startsWith(`..${sep}`) && suffix !== ".." && !isAbsolute(suffix));
153
+ }
154
+ function mapPackagePath(value, packageRoot) {
155
+ if (!isAbsolute(value))
156
+ return value;
157
+ if (value === packageRoot)
158
+ return "/tmp/oms-package";
159
+ const suffix = relative(packageRoot, value);
160
+ return suffix !== "" && !suffix.startsWith(`..${sep}`) && suffix !== ".." && !isAbsolute(suffix)
161
+ ? join("/tmp/oms-package", suffix)
162
+ : value;
163
+ }
164
+ function validatePackageArtifacts(packageRoot) {
165
+ for (const directory of [".agents", "dist", "node_modules", "schemas"]) {
166
+ const path = join(packageRoot, directory);
167
+ const entry = lstatSync(path);
168
+ if (!entry.isDirectory() || entry.isSymbolicLink()) {
169
+ throw new Error(`verification sandbox package artifact is not a real directory: ${directory}`);
170
+ }
171
+ }
172
+ const manifest = lstatSync(join(packageRoot, "package.json"));
173
+ if (!manifest.isFile() || manifest.isSymbolicLink()) {
174
+ throw new Error("verification sandbox package manifest is not a real file");
175
+ }
176
+ }
177
+ function packageDirectoryMount(packageRoot, directory) {
178
+ const destination = `/tmp/oms-package/${directory}`;
179
+ return ["--dir", destination, "--ro-bind", join(packageRoot, directory), destination];
180
+ }
181
+ function systemCompatibilityMount(path) {
182
+ if (!existsSync(path))
183
+ return [];
184
+ const entry = lstatSync(path);
185
+ if (entry.isSymbolicLink())
186
+ return ["--symlink", readlinkSync(path), path];
187
+ if (entry.isDirectory())
188
+ return ["--dir", path, "--ro-bind", path, path];
189
+ return [];
190
+ }
191
+ function regularExecutable(paths) {
192
+ return paths.find((path) => {
193
+ if (!existsSync(path))
194
+ return false;
195
+ const entry = lstatSync(path);
196
+ return entry.isFile() && !entry.isSymbolicLink() && (entry.mode & 0o111) !== 0;
197
+ });
198
+ }
199
+ //# sourceMappingURL=sandbox.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/verification/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAM3D;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAGzC;IACC,MAAM,YAAY,GAAG,yBAAyB,CAAC,OAAO,CAAC,YAAY,EAAE,+BAA+B,CAAC,CAAC;IACtG,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;IACxG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,0BAA0B,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QACvC,CAAC,CAAC,eAAe,CAAC,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC;QAC3D,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,oDAAoD,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,CAAC,OAAuB;YAC1B,IAAI,OAAO,CAAC,GAAG,KAAK,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvG,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,GAAG,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE;YACnC,mBAAmB;YACnB,eAAe;YACf,eAAe;YACf,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,MAAM;YACf,GAAG,wBAAwB,CAAC,UAAU,CAAC;YACvC,GAAG,wBAAwB,CAAC,UAAU,CAAC;YACvC,GAAG,wBAAwB,CAAC,YAAY,CAAC;YACzC,GAAG,wBAAwB,CAAC,cAAc,CAAC;YAC3C,GAAG,wBAAwB,CAAC,YAAY,CAAC;YACzC,GAAG,wBAAwB,CAAC,MAAM,CAAC;YACnC,GAAG,wBAAwB,CAAC,MAAM,CAAC;YACnC,GAAG,wBAAwB,CAAC,QAAQ,CAAC;YACrC,OAAO,EAAE,MAAM;YACf,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBAChC,CAAC,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;gBACvD,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,MAAM;YACf,IAAI;YACJ,eAAe;SAChB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;YACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE;YAClC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,yBAAyB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1G,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CACtB,YAAoB,EACpB,WAAmB,EACnB,aAAqB;IAErB,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,CAAC,OAAO,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG;YACX,mBAAmB;YACnB,eAAe;YACf,eAAe;YACf,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,MAAM;YACf,GAAG,wBAAwB,CAAC,UAAU,CAAC;YACvC,GAAG,wBAAwB,CAAC,UAAU,CAAC;YACvC,GAAG,wBAAwB,CAAC,YAAY,CAAC;YACzC,GAAG,wBAAwB,CAAC,cAAc,CAAC;YAC3C,GAAG,wBAAwB,CAAC,YAAY,CAAC;YACzC,GAAG,wBAAwB,CAAC,MAAM,CAAC;YACnC,GAAG,wBAAwB,CAAC,MAAM,CAAC;YACnC,GAAG,wBAAwB,CAAC,QAAQ,CAAC;YACrC,OAAO,EAAE,MAAM;YACf,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBAChC,CAAC,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;gBACvD,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,kBAAkB;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,+BAA+B;YAC/E,GAAG,qBAAqB,CAAC,WAAW,EAAE,SAAS,CAAC;YAChD,GAAG,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC;YAC7C,GAAG,qBAAqB,CAAC,WAAW,EAAE,cAAc,CAAC;YACrD,GAAG,qBAAqB,CAAC,WAAW,EAAE,SAAS,CAAC;YAChD,OAAO,EAAE,mBAAmB;YAC5B,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,mBAAmB;YACnE,OAAO,EAAE,mBAAmB;YAC5B,QAAQ,EAAE,YAAY,EAAE,mBAAmB;YAC3C,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,mBAAmB;YACjD,WAAW,EAAE,aAAa,EAAE,uBAAuB;YACnD,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,gBAAgB;YACzB,SAAS,EAAE,mBAAmB;YAC9B,UAAU,EAAE,MAAM,EAAE,eAAe;YACnC,UAAU,EAAE,QAAQ,EAAE,MAAM;YAC5B,UAAU,EAAE,KAAK,EAAE,MAAM;YACzB,UAAU,EAAE,MAAM,EAAE,MAAM;YAC1B,UAAU,EAAE,gBAAgB,EAAE,gBAAgB;YAC9C,UAAU,EAAE,kBAAkB,EAAE,gBAAgB;YAChD,UAAU,EAAE,MAAM,EAAE,2CAA2C;YAC/D,UAAU,EAAE,iCAAiC,EAAE,GAAG;YAClD,IAAI;YACJ,mBAAmB;YACnB,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;SACzE,CAAC;QACF,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAC7D,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAmB,EAAE,YAAoB;IAC3E,MAAM,eAAe,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;IAClE,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SACxC,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IACnD,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,SAAS;QAC5D,IAAI,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;YAAE,SAAS;QAClF,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;YAC/C,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;SACvE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,KAAK,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,eAAe;YAAE,OAAO,QAAQ,CAAC;IAC5F,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,eAAe,6CAA6C,CAAC,CAAC;AAC5H,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,WAAmB;IACxD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,kBAAkB,CAAC;IACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAC9F,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC;QAClC,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,SAAS,wBAAwB,CAAC,WAAmB;IACnD,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,kEAAkE,SAAS,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAmB,EAAE,SAAiB;IACnE,MAAM,WAAW,GAAG,oBAAoB,SAAS,EAAE,CAAC;IACpD,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,cAAc,EAAE;QAAE,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACzE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAwB;IACjD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,8 @@
1
+ import { type DoctorReport } from "./doctor.js";
2
+ export interface VerificationOptions {
3
+ workspaceRoot?: string;
4
+ configRoot?: string;
5
+ doctor?: (root: string) => DoctorReport;
6
+ }
7
+ export declare function validateRepositoryJson(root: string): void;
8
+ export declare function runVerification(packageRoot: string, options?: VerificationOptions): string[];
@@ -0,0 +1,35 @@
1
+ import { existsSync, readdirSync } from "node:fs";
2
+ import { join } from "node:path";
3
+ import { runDoctor } from "./doctor.js";
4
+ import { readJsonFile } from "./utils/fs.js";
5
+ export function validateRepositoryJson(root) {
6
+ for (const directory of [join(root, ".agents"), join(root, "schemas")]) {
7
+ if (!existsSync(directory))
8
+ continue;
9
+ for (const path of findJsonFiles(directory))
10
+ readJsonFile(path);
11
+ }
12
+ }
13
+ export function runVerification(packageRoot, options = {}) {
14
+ validateRepositoryJson(packageRoot);
15
+ if (options.workspaceRoot && options.workspaceRoot !== packageRoot && existsSync(join(options.workspaceRoot, ".agents"))) {
16
+ validateRepositoryJson(options.workspaceRoot);
17
+ }
18
+ const configRoot = options.configRoot ?? packageRoot;
19
+ const doctor = (options.doctor ?? ((root) => runDoctor({ root })))(configRoot);
20
+ if (!doctor.ok)
21
+ throw new Error(doctor.lines.join("\n"));
22
+ return [...doctor.lines, "verify: PASS"];
23
+ }
24
+ function findJsonFiles(directory) {
25
+ const paths = [];
26
+ for (const entry of readdirSync(directory, { withFileTypes: true })) {
27
+ const path = join(directory, entry.name);
28
+ if (entry.isDirectory())
29
+ paths.push(...findJsonFiles(path));
30
+ else if (entry.isFile() && entry.name.endsWith(".json"))
31
+ paths.push(path);
32
+ }
33
+ return paths.sort();
34
+ }
35
+ //# sourceMappingURL=verify.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAqB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQ7C,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,KAAK,MAAM,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,SAAS,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,UAA+B,EAAE;IACpF,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,KAAK,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACzH,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;aACvD,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}
@@ -0,0 +1,42 @@
1
+ import { type RunLedgerStore } from "../audit/run-ledger.js";
2
+ import { type RuntimeEventBus } from "../events/bus.js";
3
+ import { type OutboxProcessor } from "../outbox/processor.js";
4
+ import { type OutboxStore } from "../outbox/store.js";
5
+ import { type SessionRegistry } from "../sessions/registry.js";
6
+ import { type TicketQueueStore } from "../tickets/store.js";
7
+ import type { ConductorRecoveryResult } from "../conductor/recovery.js";
8
+ import type { WorkerPaneAdapter } from "../workers/panes.js";
9
+ import { type WorkerRegistry } from "../workers/registry.js";
10
+ export interface WatchdogReconcileResult {
11
+ readonly at: string;
12
+ readonly recovered_ticket_ids: readonly string[];
13
+ readonly rebound_ticket_ids: readonly string[];
14
+ readonly quarantined_ticket_ids: readonly string[];
15
+ readonly stalled_session_ids: readonly string[];
16
+ readonly stalled_outbox_event_ids: readonly string[];
17
+ readonly superseded_event_ids: readonly string[];
18
+ readonly failed_event_ids: readonly string[];
19
+ readonly failed_subject_ids: readonly string[];
20
+ readonly recovered_structured_request_ids: readonly string[];
21
+ readonly conductor_recovery: ConductorRecoveryResult | null;
22
+ }
23
+ export declare function reconcileWatchdog(options: {
24
+ at: string;
25
+ bus: RuntimeEventBus;
26
+ processor: OutboxProcessor;
27
+ outbox: OutboxStore;
28
+ queue: TicketQueueStore;
29
+ sessions: SessionRegistry;
30
+ workers: WorkerRegistry;
31
+ workerPanes?: Pick<WorkerPaneAdapter, "observe">;
32
+ packageRoot: string;
33
+ configRoot: string;
34
+ stateRoot: string;
35
+ auditLedger: RunLedgerStore;
36
+ stallMs?: number;
37
+ recoverStructuredRoleCompletions?: () => Readonly<{
38
+ recoveredRequestIds: readonly string[];
39
+ failedRequestIds: readonly string[];
40
+ }>;
41
+ recoverConductor?: () => ConductorRecoveryResult;
42
+ }): Promise<WatchdogReconcileResult>;