omk-protocol 0.99.0 → 1.2.0

package/CHANGELOG.md

@@ -1,6 +1,12 @@
 # Changelog
 
-## [Unreleased]
+## [1.2.0] - 2026-09-20
+
+## [1.0.0] - 2026-09-18
+
+### Added
+
+- Strict-evidence contract: `StrictEvidenceBinding`, `StrictEvidenceSnapshot`, `StrictEvidenceReport`, and `StrictEvidenceCompletion` wire types with parsers, plus `evaluateStrictEvidence` wired into evaluation so an admitted snapshot can gate results. A snapshot is evidence, not approval or execution by itself.
 
 ## [0.99.0] - 2026-09-13
 

package/dist/evaluation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluation.d.ts","sourceRoot":"","sources":["../src/evaluation.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAMrB,MAAM,YAAY,CAAC;AASpB,qBAAa,sBAAuB,SAAQ,KAAK;IAChD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AAuHD,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAsCrE","sourcesContent":["import {\n\ttype ClaimCondition,\n\ttype ClaimEvaluation,\n\ttype ClaimResult,\n\ttype EvaluationInput,\n\ttype EvaluationResult,\n\ttype JsonValue,\n\ttype Observation,\n\tPROTOCOL_VERSION,\n\ttype SemanticVerdict,\n\ttype WaiverRecord,\n} from \"./types.ts\";\nimport {\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n\nexport class ProtocolInvariantError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProtocolInvariantError\";\n\t}\n}\n\ninterface ConditionResult {\n\treadonly result: ClaimResult;\n\treadonly observationIds: readonly string[];\n}\n\nfunction isObject(value: JsonValue): value is { readonly [key: string]: JsonValue } {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction matchesExpected(actual: JsonValue | undefined, expected: JsonValue): boolean {\n\tif (Array.isArray(expected)) {\n\t\treturn (\n\t\t\tArray.isArray(actual) &&\n\t\t\tactual.length === expected.length &&\n\t\t\texpected.every((value, index) => matchesExpected(actual[index], value))\n\t\t);\n\t}\n\tif (isObject(expected)) {\n\t\treturn (\n\t\t\tactual !== undefined &&\n\t\t\tisObject(actual) &&\n\t\t\tObject.entries(expected).every(([key, value]) => matchesExpected(actual[key], value))\n\t\t);\n\t}\n\treturn Object.is(actual, expected);\n}\n\nfunction unique(values: readonly string[]): readonly string[] {\n\treturn [...new Set(values)];\n}\n\nfunction evaluateCondition(\n\tcondition: ClaimCondition,\n\tobservations: readonly Observation[],\n\tattemptId: string,\n): ConditionResult {\n\tif (condition.kind === \"observation\") {\n\t\tconst candidates = observations.filter(\n\t\t\t(observation) =>\n\t\t\t\tobservation.kind === condition.observationKind &&\n\t\t\t\t(condition.scope === \"task\" || observation.attemptId === attemptId),\n\t\t);\n\t\tif (candidates.length === 0) return { result: \"inconclusive\", observationIds: [] };\n\t\tconst matching = candidates.filter((observation) => matchesExpected(observation.facts, condition.facts));\n\t\treturn matching.length > 0\n\t\t\t? { result: \"satisfied\", observationIds: matching.map(({ observationId }) => observationId) }\n\t\t\t: { result: \"violated\", observationIds: candidates.map(({ observationId }) => observationId) };\n\t}\n\n\tif (condition.kind === \"not\") {\n\t\tconst child = evaluateCondition(condition.condition, observations, attemptId);\n\t\treturn {\n\t\t\tresult: child.result === \"satisfied\" ? \"violated\" : child.result === \"violated\" ? \"satisfied\" : \"inconclusive\",\n\t\t\tobservationIds: child.observationIds,\n\t\t};\n\t}\n\n\tconst children = condition.conditions.map((child) => evaluateCondition(child, observations, attemptId));\n\tif (condition.kind === \"all\") {\n\t\tconst result = children.some((child) => child.result === \"violated\")\n\t\t\t? \"violated\"\n\t\t\t: children.some((child) => child.result === \"inconclusive\")\n\t\t\t\t? \"inconclusive\"\n\t\t\t\t: \"satisfied\";\n\t\treturn { result, observationIds: unique(children.flatMap(({ observationIds }) => observationIds)) };\n\t}\n\tconst result = children.some((child) => child.result === \"satisfied\")\n\t\t? \"satisfied\"\n\t\t: children.every((child) => child.result === \"violated\")\n\t\t\t? \"violated\"\n\t\t\t: \"inconclusive\";\n\treturn { result, observationIds: unique(children.flatMap(({ observationIds }) => observationIds)) };\n}\n\nfunction reasonCode(result: ClaimResult): ClaimEvaluation[\"reasonCode\"] {\n\tif (result === \"satisfied\") return \"claim.satisfied\";\n\tif (result === \"violated\") return \"claim.violated\";\n\treturn \"claim.observation_missing\";\n}\n\nfunction validateWaivers(input: EvaluationInput, waivers: readonly WaiverRecord[]): ReadonlyMap<string, WaiverRecord> {\n\tconst claims = new Map(input.taskSpec.claims.map((claim) => [claim.claimId, claim]));\n\tconst byClaim = new Map<string, WaiverRecord>();\n\tfor (const waiver of waivers) {\n\t\tparseWaiverRecord(waiver);\n\t\tif (waiver.scope.taskId !== input.taskSpec.taskId) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} targets task ${waiver.scope.taskId}`);\n\t\t}\n\t\tconst claim = claims.get(waiver.scope.claimId);\n\t\tif (!claim) throw new ProtocolInvariantError(`${waiver.waiverId} targets unknown claim ${waiver.scope.claimId}`);\n\t\tif (claim.requirement !== \"required\") {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} cannot waive advisory claim ${claim.claimId}`);\n\t\t}\n\t\tif (waiver.scope.attemptId !== undefined && waiver.scope.attemptId !== input.attempt.attemptId) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} targets attempt ${waiver.scope.attemptId}`);\n\t\t}\n\t\tif (waiver.approvedAt > input.evaluatedAt) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} was approved after evaluation`);\n\t\t}\n\t\tif (waiver.expiresAt !== undefined && waiver.expiresAt <= input.evaluatedAt) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} is expired`);\n\t\t}\n\t\tif (byClaim.has(claim.claimId))\n\t\t\tthrow new ProtocolInvariantError(`multiple waivers target claim ${claim.claimId}`);\n\t\tbyClaim.set(claim.claimId, waiver);\n\t}\n\treturn byClaim;\n}\n\nfunction reduceVerdict(claims: readonly ClaimEvaluation[]): SemanticVerdict {\n\tconst required = claims.filter((claim) => claim.requirement === \"required\" && claim.waiverId === undefined);\n\tif (required.length === 0) return claims.some((claim) => claim.requirement === \"required\") ? \"pass\" : \"inconclusive\";\n\tif (required.some((claim) => claim.result === \"violated\")) return \"fail\";\n\tif (required.some((claim) => claim.result === \"inconclusive\")) return \"inconclusive\";\n\treturn \"pass\";\n}\n\n/** Pure TaskSpec -> Observation -> Evaluation reduction. */\nexport function evaluateTask(input: EvaluationInput): EvaluationResult {\n\tparseTaskSpec(input.taskSpec);\n\tparseExecutionAttempt(input.attempt);\n\tif (input.attempt.taskId !== input.taskSpec.taskId) {\n\t\tthrow new ProtocolInvariantError(`${input.attempt.attemptId} targets task ${input.attempt.taskId}`);\n\t}\n\tfor (const observation of input.observations) {\n\t\tparseObservation(observation);\n\t\tif (observation.taskId !== input.taskSpec.taskId) {\n\t\t\tthrow new ProtocolInvariantError(`${observation.observationId} targets task ${observation.taskId}`);\n\t\t}\n\t}\n\tconst waivers = validateWaivers(input, input.waivers ?? []);\n\tconst claims = Object.freeze(\n\t\tinput.taskSpec.claims.map((claim): ClaimEvaluation => {\n\t\t\tconst evaluated = evaluateCondition(claim.condition, input.observations, input.attempt.attemptId);\n\t\t\tconst waiver = evaluated.result === \"satisfied\" ? undefined : waivers.get(claim.claimId);\n\t\t\treturn Object.freeze({\n\t\t\t\tclaimId: claim.claimId,\n\t\t\t\trequirement: claim.requirement,\n\t\t\t\tresult: evaluated.result,\n\t\t\t\treasonCode: reasonCode(evaluated.result),\n\t\t\t\tobservationIds: Object.freeze([...evaluated.observationIds]),\n\t\t\t\t...(waiver ? { waiverId: waiver.waiverId } : {}),\n\t\t\t});\n\t\t}),\n\t);\n\treturn parseEvaluationResult(\n\t\tObject.freeze({\n\t\t\tschemaVersion: PROTOCOL_VERSION,\n\t\t\tevaluationId: input.evaluationId,\n\t\t\ttaskId: input.taskSpec.taskId,\n\t\t\tattemptId: input.attempt.attemptId,\n\t\t\tevaluatedAt: input.evaluatedAt,\n\t\t\tclaims,\n\t\t\tsemanticVerdict: reduceVerdict(claims),\n\t\t}),\n\t);\n}\n"]}
+{"version":3,"file":"evaluation.d.ts","sourceRoot":"","sources":["../src/evaluation.ts"],"names":[],"mappings":"AACA,OAAO,EAIN,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAMrB,MAAM,YAAY,CAAC;AASpB,qBAAa,sBAAuB,SAAQ,KAAK;IAChD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AAsID,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAsErE","sourcesContent":["import { evaluateStrictEvidence } from \"./strict-evidence.ts\";\nimport {\n\ttype ClaimCondition,\n\ttype ClaimEvaluation,\n\ttype ClaimResult,\n\ttype EvaluationInput,\n\ttype EvaluationResult,\n\ttype JsonValue,\n\ttype Observation,\n\tPROTOCOL_VERSION,\n\ttype SemanticVerdict,\n\ttype WaiverRecord,\n} from \"./types.ts\";\nimport {\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n\nexport class ProtocolInvariantError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProtocolInvariantError\";\n\t}\n}\n\ninterface ConditionResult {\n\treadonly result: ClaimResult;\n\treadonly observationIds: readonly string[];\n}\n\nfunction isObject(value: JsonValue): value is { readonly [key: string]: JsonValue } {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction matchesExpected(actual: JsonValue | undefined, expected: JsonValue): boolean {\n\tif (Array.isArray(expected)) {\n\t\treturn (\n\t\t\tArray.isArray(actual) &&\n\t\t\tactual.length === expected.length &&\n\t\t\texpected.every((value, index) => matchesExpected(actual[index], value))\n\t\t);\n\t}\n\tif (isObject(expected)) {\n\t\treturn (\n\t\t\tactual !== undefined &&\n\t\t\tisObject(actual) &&\n\t\t\tObject.entries(expected).every(([key, value]) => matchesExpected(actual[key], value))\n\t\t);\n\t}\n\treturn Object.is(actual, expected);\n}\n\nfunction unique(values: readonly string[]): readonly string[] {\n\treturn [...new Set(values)];\n}\n\nfunction evaluateCondition(\n\tcondition: ClaimCondition,\n\tobservations: readonly Observation[],\n\tattemptId: string,\n\tcandidateHash?: string,\n): ConditionResult {\n\tif (condition.kind === \"observation\") {\n\t\tconst candidates = observations.filter((observation) => {\n\t\t\tif (observation.kind !== condition.observationKind) return false;\n\t\t\tif (condition.scope === \"attempt\" && observation.attemptId !== attemptId) return false;\n\t\t\t// Candidate binding: when the attempt declares a candidate hash, an\n\t\t\t// observation recorded for a different candidate cannot satisfy this\n\t\t\t// attempt's condition — a stale pass is not evidence for this build.\n\t\t\tif (candidateHash !== undefined) {\n\t\t\t\tconst observed = observation.facts.candidate;\n\t\t\t\tif (typeof observed === \"string\" && observed !== candidateHash) return false;\n\t\t\t}\n\t\t\t// Explicit per-condition binding additionally requires the\n\t\t\t// observation to name the same candidate outright.\n\t\t\tif (condition.bindToCandidate === true) {\n\t\t\t\tif (candidateHash === undefined || observation.facts.candidate !== candidateHash) return false;\n\t\t\t}\n\t\t\treturn true;\n\t\t});\n\t\tif (candidates.length === 0) return { result: \"inconclusive\", observationIds: [] };\n\t\tconst matching = candidates.filter((observation) => matchesExpected(observation.facts, condition.facts));\n\t\treturn matching.length > 0\n\t\t\t? { result: \"satisfied\", observationIds: matching.map(({ observationId }) => observationId) }\n\t\t\t: { result: \"violated\", observationIds: candidates.map(({ observationId }) => observationId) };\n\t}\n\n\tif (condition.kind === \"not\") {\n\t\tconst child = evaluateCondition(condition.condition, observations, attemptId, candidateHash);\n\t\treturn {\n\t\t\tresult: child.result === \"satisfied\" ? \"violated\" : child.result === \"violated\" ? \"satisfied\" : \"inconclusive\",\n\t\t\tobservationIds: child.observationIds,\n\t\t};\n\t}\n\n\tconst children = condition.conditions.map((child) =>\n\t\tevaluateCondition(child, observations, attemptId, candidateHash),\n\t);\n\tif (condition.kind === \"all\") {\n\t\tconst result = children.some((child) => child.result === \"violated\")\n\t\t\t? \"violated\"\n\t\t\t: children.some((child) => child.result === \"inconclusive\")\n\t\t\t\t? \"inconclusive\"\n\t\t\t\t: \"satisfied\";\n\t\treturn { result, observationIds: unique(children.flatMap(({ observationIds }) => observationIds)) };\n\t}\n\tconst result = children.some((child) => child.result === \"satisfied\")\n\t\t? \"satisfied\"\n\t\t: children.every((child) => child.result === \"violated\")\n\t\t\t? \"violated\"\n\t\t\t: \"inconclusive\";\n\treturn { result, observationIds: unique(children.flatMap(({ observationIds }) => observationIds)) };\n}\n\nfunction reasonCode(result: ClaimResult): ClaimEvaluation[\"reasonCode\"] {\n\tif (result === \"satisfied\") return \"claim.satisfied\";\n\tif (result === \"violated\") return \"claim.violated\";\n\treturn \"claim.observation_missing\";\n}\n\nfunction validateWaivers(input: EvaluationInput, waivers: readonly WaiverRecord[]): ReadonlyMap<string, WaiverRecord> {\n\tconst claims = new Map(input.taskSpec.claims.map((claim) => [claim.claimId, claim]));\n\tconst byClaim = new Map<string, WaiverRecord>();\n\tfor (const waiver of waivers) {\n\t\tparseWaiverRecord(waiver);\n\t\tif (waiver.scope.taskId !== input.taskSpec.taskId) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} targets task ${waiver.scope.taskId}`);\n\t\t}\n\t\tconst claim = claims.get(waiver.scope.claimId);\n\t\tif (!claim) throw new ProtocolInvariantError(`${waiver.waiverId} targets unknown claim ${waiver.scope.claimId}`);\n\t\tif (claim.requirement !== \"required\") {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} cannot waive advisory claim ${claim.claimId}`);\n\t\t}\n\t\tif (waiver.scope.attemptId !== undefined && waiver.scope.attemptId !== input.attempt.attemptId) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} targets attempt ${waiver.scope.attemptId}`);\n\t\t}\n\t\tif (waiver.approvedAt > input.evaluatedAt) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} was approved after evaluation`);\n\t\t}\n\t\tif (waiver.expiresAt !== undefined && waiver.expiresAt <= input.evaluatedAt) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} is expired`);\n\t\t}\n\t\tif (byClaim.has(claim.claimId))\n\t\t\tthrow new ProtocolInvariantError(`multiple waivers target claim ${claim.claimId}`);\n\t\tbyClaim.set(claim.claimId, waiver);\n\t}\n\treturn byClaim;\n}\n\nfunction reduceVerdict(claims: readonly ClaimEvaluation[]): SemanticVerdict {\n\tconst required = claims.filter((claim) => claim.requirement === \"required\" && claim.waiverId === undefined);\n\tif (required.length === 0) return claims.some((claim) => claim.requirement === \"required\") ? \"pass\" : \"inconclusive\";\n\tif (required.some((claim) => claim.result === \"violated\")) return \"fail\";\n\tif (required.some((claim) => claim.result === \"inconclusive\")) return \"inconclusive\";\n\treturn \"pass\";\n}\n\n/** Pure TaskSpec -> Observation -> Evaluation reduction. */\nexport function evaluateTask(input: EvaluationInput): EvaluationResult {\n\tparseTaskSpec(input.taskSpec);\n\tparseExecutionAttempt(input.attempt);\n\tif (input.attempt.taskId !== input.taskSpec.taskId) {\n\t\tthrow new ProtocolInvariantError(`${input.attempt.attemptId} targets task ${input.attempt.taskId}`);\n\t}\n\tfor (const observation of input.observations) {\n\t\tparseObservation(observation);\n\t\tif (observation.taskId !== input.taskSpec.taskId) {\n\t\t\tthrow new ProtocolInvariantError(`${observation.observationId} targets task ${observation.taskId}`);\n\t\t}\n\t}\n\tconst waivers = validateWaivers(input, input.waivers ?? []);\n\tconst strict =\n\t\tinput.strictEvidence === undefined\n\t\t\t? undefined\n\t\t\t: evaluateStrictEvidence(input.strictEvidence, input.observations, input.attempt);\n\tconst observations =\n\t\tstrict === undefined\n\t\t\t? input.observations\n\t\t\t: input.observations.filter((observation) => strict.observationIds.includes(observation.observationId));\n\tconst claims = Object.freeze(\n\t\tinput.taskSpec.claims.map((claim): ClaimEvaluation => {\n\t\t\tconst evaluated = evaluateCondition(\n\t\t\t\tclaim.condition,\n\t\t\t\tobservations,\n\t\t\t\tinput.attempt.attemptId,\n\t\t\t\tinput.attempt.candidateHash,\n\t\t\t);\n\t\t\tconst waiver = evaluated.result === \"satisfied\" ? undefined : waivers.get(claim.claimId);\n\t\t\treturn Object.freeze({\n\t\t\t\tclaimId: claim.claimId,\n\t\t\t\trequirement: claim.requirement,\n\t\t\t\tresult: evaluated.result,\n\t\t\t\treasonCode: reasonCode(evaluated.result),\n\t\t\t\tobservationIds: Object.freeze([...evaluated.observationIds]),\n\t\t\t\t...(waiver ? { waiverId: waiver.waiverId } : {}),\n\t\t\t});\n\t\t}),\n\t);\n\tconst semanticVerdict =\n\t\tstrict && strict.status !== \"passed\"\n\t\t\t? strict.status === \"violated\"\n\t\t\t\t? \"fail\"\n\t\t\t\t: \"inconclusive\"\n\t\t\t: reduceVerdict(claims);\n\treturn parseEvaluationResult(\n\t\tObject.freeze({\n\t\t\tschemaVersion: PROTOCOL_VERSION,\n\t\t\tevaluationId: input.evaluationId,\n\t\t\ttaskId: input.taskSpec.taskId,\n\t\t\tattemptId: input.attempt.attemptId,\n\t\t\tevaluatedAt: input.evaluatedAt,\n\t\t\tclaims,\n\t\t\tsemanticVerdict,\n\t\t\t...(strict\n\t\t\t\t? {\n\t\t\t\t\t\tstrictEvidence: Object.freeze({\n\t\t\t\t\t\t\t...strict,\n\t\t\t\t\t\t\tacceptance:\n\t\t\t\t\t\t\t\tsemanticVerdict !== \"pass\"\n\t\t\t\t\t\t\t\t\t? (\"denied\" as const)\n\t\t\t\t\t\t\t\t\t: claims.some((claim) => claim.waiverId !== undefined)\n\t\t\t\t\t\t\t\t\t\t? (\"accepted_with_waiver\" as const)\n\t\t\t\t\t\t\t\t\t\t: (\"passed_by_checks\" as const),\n\t\t\t\t\t\t}),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t}),\n\t);\n}\n"]}

package/dist/evaluation.js

@@ -1,3 +1,4 @@
+import { evaluateStrictEvidence } from "./strict-evidence.js";
 import { PROTOCOL_VERSION, } from "./types.js";
 import { parseEvaluationResult, parseExecutionAttempt, parseObservation, parseTaskSpec, parseWaiverRecord, } from "./validation.js";
 export class ProtocolInvariantError extends Error {
@@ -25,10 +26,29 @@ function matchesExpected(actual, expected) {
 function unique(values) {
     return [...new Set(values)];
 }
-function evaluateCondition(condition, observations, attemptId) {
+function evaluateCondition(condition, observations, attemptId, candidateHash) {
     if (condition.kind === "observation") {
-        const candidates = observations.filter((observation) => observation.kind === condition.observationKind &&
-            (condition.scope === "task" || observation.attemptId === attemptId));
+        const candidates = observations.filter((observation) => {
+            if (observation.kind !== condition.observationKind)
+                return false;
+            if (condition.scope === "attempt" && observation.attemptId !== attemptId)
+                return false;
+            // Candidate binding: when the attempt declares a candidate hash, an
+            // observation recorded for a different candidate cannot satisfy this
+            // attempt's condition — a stale pass is not evidence for this build.
+            if (candidateHash !== undefined) {
+                const observed = observation.facts.candidate;
+                if (typeof observed === "string" && observed !== candidateHash)
+                    return false;
+            }
+            // Explicit per-condition binding additionally requires the
+            // observation to name the same candidate outright.
+            if (condition.bindToCandidate === true) {
+                if (candidateHash === undefined || observation.facts.candidate !== candidateHash)
+                    return false;
+            }
+            return true;
+        });
         if (candidates.length === 0)
             return { result: "inconclusive", observationIds: [] };
         const matching = candidates.filter((observation) => matchesExpected(observation.facts, condition.facts));
@@ -37,13 +57,13 @@ function evaluateCondition(condition, observations, attemptId) {
             : { result: "violated", observationIds: candidates.map(({ observationId }) => observationId) };
     }
     if (condition.kind === "not") {
-        const child = evaluateCondition(condition.condition, observations, attemptId);
+        const child = evaluateCondition(condition.condition, observations, attemptId, candidateHash);
         return {
             result: child.result === "satisfied" ? "violated" : child.result === "violated" ? "satisfied" : "inconclusive",
             observationIds: child.observationIds,
         };
     }
-    const children = condition.conditions.map((child) => evaluateCondition(child, observations, attemptId));
+    const children = condition.conditions.map((child) => evaluateCondition(child, observations, attemptId, candidateHash));
     if (condition.kind === "all") {
         const result = children.some((child) => child.result === "violated")
             ? "violated"
@@ -119,8 +139,14 @@ export function evaluateTask(input) {
         }
     }
     const waivers = validateWaivers(input, input.waivers ?? []);
+    const strict = input.strictEvidence === undefined
+        ? undefined
+        : evaluateStrictEvidence(input.strictEvidence, input.observations, input.attempt);
+    const observations = strict === undefined
+        ? input.observations
+        : input.observations.filter((observation) => strict.observationIds.includes(observation.observationId));
     const claims = Object.freeze(input.taskSpec.claims.map((claim) => {
-        const evaluated = evaluateCondition(claim.condition, input.observations, input.attempt.attemptId);
+        const evaluated = evaluateCondition(claim.condition, observations, input.attempt.attemptId, input.attempt.candidateHash);
         const waiver = evaluated.result === "satisfied" ? undefined : waivers.get(claim.claimId);
         return Object.freeze({
             claimId: claim.claimId,
@@ -131,6 +157,11 @@ export function evaluateTask(input) {
             ...(waiver ? { waiverId: waiver.waiverId } : {}),
         });
     }));
+    const semanticVerdict = strict && strict.status !== "passed"
+        ? strict.status === "violated"
+            ? "fail"
+            : "inconclusive"
+        : reduceVerdict(claims);
     return parseEvaluationResult(Object.freeze({
         schemaVersion: PROTOCOL_VERSION,
         evaluationId: input.evaluationId,
@@ -138,7 +169,19 @@ export function evaluateTask(input) {
         attemptId: input.attempt.attemptId,
         evaluatedAt: input.evaluatedAt,
         claims,
-        semanticVerdict: reduceVerdict(claims),
+        semanticVerdict,
+        ...(strict
+            ? {
+                strictEvidence: Object.freeze({
+                    ...strict,
+                    acceptance: semanticVerdict !== "pass"
+                        ? "denied"
+                        : claims.some((claim) => claim.waiverId !== undefined)
+                            ? "accepted_with_waiver"
+                            : "passed_by_checks",
+                }),
+            }
+            : {}),
     }));
 }
 //# sourceMappingURL=evaluation.js.map

package/dist/evaluation.js.map

@@ -1 +1 @@
-{"version":3,"file":"evaluation.js","sourceRoot":"","sources":["../src/evaluation.ts"],"names":[],"mappings":"AAAA,OAAO,EAQN,gBAAgB,GAGhB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IAAA,CACrC;CACD;AAOD,SAAS,QAAQ,CAAC,KAAgB,EAAkD;IACnF,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,eAAe,CAAC,MAA6B,EAAE,QAAmB,EAAW;IACrF,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CACN,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACjC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CACvE,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,CACN,MAAM,KAAK,SAAS;YACpB,QAAQ,CAAC,MAAM,CAAC;YAChB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CACrF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAAA,CACnC;AAED,SAAS,MAAM,CAAC,MAAyB,EAAqB;IAC7D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAAA,CAC5B;AAED,SAAS,iBAAiB,CACzB,SAAyB,EACzB,YAAoC,EACpC,SAAiB,EACC;IAClB,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CACrC,CAAC,WAAW,EAAE,EAAE,CACf,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,eAAe;YAC9C,CAAC,SAAS,CAAC,KAAK,KAAK,MAAM,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,CAAC,CACpE,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzG,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE;YAC7F,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAC9E,OAAO;YACN,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc;YAC9G,cAAc,EAAE,KAAK,CAAC,cAAc;SACpC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IACxG,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;YACnE,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC;gBAC1D,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,WAAW,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC;QACpE,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;YACvD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,cAAc,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;AAAA,CACpG;AAED,SAAS,UAAU,CAAC,MAAmB,EAAiC;IACvE,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,iBAAiB,CAAC;IACrD,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,gBAAgB,CAAC;IACnD,OAAO,2BAA2B,CAAC;AAAA,CACnC;AAED,SAAS,eAAe,CAAC,KAAsB,EAAE,OAAgC,EAAqC;IACrH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,iBAAiB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,0BAA0B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjH,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAChG,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,oBAAoB,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,gCAAgC,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7E,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,aAAa,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7B,MAAM,IAAI,sBAAsB,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,aAAa,CAAC,MAAkC,EAAmB;IAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAC5G,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;IACrH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC;IACzE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC;IACrF,OAAO,MAAM,CAAC;AAAA,CACd;AAED,4DAA4D;AAC5D,MAAM,UAAU,YAAY,CAAC,KAAsB,EAAoB;IACtE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,sBAAsB,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,iBAAiB,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC9C,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC9B,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClD,MAAM,IAAI,sBAAsB,CAAC,GAAG,WAAW,CAAC,aAAa,iBAAiB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAC3B,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;YACxC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IAAA,CACH,CAAC,CACF,CAAC;IACF,OAAO,qBAAqB,CAC3B,MAAM,CAAC,MAAM,CAAC;QACb,aAAa,EAAE,gBAAgB;QAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM;QACN,eAAe,EAAE,aAAa,CAAC,MAAM,CAAC;KACtC,CAAC,CACF,CAAC;AAAA,CACF","sourcesContent":["import {\n\ttype ClaimCondition,\n\ttype ClaimEvaluation,\n\ttype ClaimResult,\n\ttype EvaluationInput,\n\ttype EvaluationResult,\n\ttype JsonValue,\n\ttype Observation,\n\tPROTOCOL_VERSION,\n\ttype SemanticVerdict,\n\ttype WaiverRecord,\n} from \"./types.ts\";\nimport {\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n\nexport class ProtocolInvariantError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProtocolInvariantError\";\n\t}\n}\n\ninterface ConditionResult {\n\treadonly result: ClaimResult;\n\treadonly observationIds: readonly string[];\n}\n\nfunction isObject(value: JsonValue): value is { readonly [key: string]: JsonValue } {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction matchesExpected(actual: JsonValue | undefined, expected: JsonValue): boolean {\n\tif (Array.isArray(expected)) {\n\t\treturn (\n\t\t\tArray.isArray(actual) &&\n\t\t\tactual.length === expected.length &&\n\t\t\texpected.every((value, index) => matchesExpected(actual[index], value))\n\t\t);\n\t}\n\tif (isObject(expected)) {\n\t\treturn (\n\t\t\tactual !== undefined &&\n\t\t\tisObject(actual) &&\n\t\t\tObject.entries(expected).every(([key, value]) => matchesExpected(actual[key], value))\n\t\t);\n\t}\n\treturn Object.is(actual, expected);\n}\n\nfunction unique(values: readonly string[]): readonly string[] {\n\treturn [...new Set(values)];\n}\n\nfunction evaluateCondition(\n\tcondition: ClaimCondition,\n\tobservations: readonly Observation[],\n\tattemptId: string,\n): ConditionResult {\n\tif (condition.kind === \"observation\") {\n\t\tconst candidates = observations.filter(\n\t\t\t(observation) =>\n\t\t\t\tobservation.kind === condition.observationKind &&\n\t\t\t\t(condition.scope === \"task\" || observation.attemptId === attemptId),\n\t\t);\n\t\tif (candidates.length === 0) return { result: \"inconclusive\", observationIds: [] };\n\t\tconst matching = candidates.filter((observation) => matchesExpected(observation.facts, condition.facts));\n\t\treturn matching.length > 0\n\t\t\t? { result: \"satisfied\", observationIds: matching.map(({ observationId }) => observationId) }\n\t\t\t: { result: \"violated\", observationIds: candidates.map(({ observationId }) => observationId) };\n\t}\n\n\tif (condition.kind === \"not\") {\n\t\tconst child = evaluateCondition(condition.condition, observations, attemptId);\n\t\treturn {\n\t\t\tresult: child.result === \"satisfied\" ? \"violated\" : child.result === \"violated\" ? \"satisfied\" : \"inconclusive\",\n\t\t\tobservationIds: child.observationIds,\n\t\t};\n\t}\n\n\tconst children = condition.conditions.map((child) => evaluateCondition(child, observations, attemptId));\n\tif (condition.kind === \"all\") {\n\t\tconst result = children.some((child) => child.result === \"violated\")\n\t\t\t? \"violated\"\n\t\t\t: children.some((child) => child.result === \"inconclusive\")\n\t\t\t\t? \"inconclusive\"\n\t\t\t\t: \"satisfied\";\n\t\treturn { result, observationIds: unique(children.flatMap(({ observationIds }) => observationIds)) };\n\t}\n\tconst result = children.some((child) => child.result === \"satisfied\")\n\t\t? \"satisfied\"\n\t\t: children.every((child) => child.result === \"violated\")\n\t\t\t? \"violated\"\n\t\t\t: \"inconclusive\";\n\treturn { result, observationIds: unique(children.flatMap(({ observationIds }) => observationIds)) };\n}\n\nfunction reasonCode(result: ClaimResult): ClaimEvaluation[\"reasonCode\"] {\n\tif (result === \"satisfied\") return \"claim.satisfied\";\n\tif (result === \"violated\") return \"claim.violated\";\n\treturn \"claim.observation_missing\";\n}\n\nfunction validateWaivers(input: EvaluationInput, waivers: readonly WaiverRecord[]): ReadonlyMap<string, WaiverRecord> {\n\tconst claims = new Map(input.taskSpec.claims.map((claim) => [claim.claimId, claim]));\n\tconst byClaim = new Map<string, WaiverRecord>();\n\tfor (const waiver of waivers) {\n\t\tparseWaiverRecord(waiver);\n\t\tif (waiver.scope.taskId !== input.taskSpec.taskId) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} targets task ${waiver.scope.taskId}`);\n\t\t}\n\t\tconst claim = claims.get(waiver.scope.claimId);\n\t\tif (!claim) throw new ProtocolInvariantError(`${waiver.waiverId} targets unknown claim ${waiver.scope.claimId}`);\n\t\tif (claim.requirement !== \"required\") {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} cannot waive advisory claim ${claim.claimId}`);\n\t\t}\n\t\tif (waiver.scope.attemptId !== undefined && waiver.scope.attemptId !== input.attempt.attemptId) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} targets attempt ${waiver.scope.attemptId}`);\n\t\t}\n\t\tif (waiver.approvedAt > input.evaluatedAt) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} was approved after evaluation`);\n\t\t}\n\t\tif (waiver.expiresAt !== undefined && waiver.expiresAt <= input.evaluatedAt) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} is expired`);\n\t\t}\n\t\tif (byClaim.has(claim.claimId))\n\t\t\tthrow new ProtocolInvariantError(`multiple waivers target claim ${claim.claimId}`);\n\t\tbyClaim.set(claim.claimId, waiver);\n\t}\n\treturn byClaim;\n}\n\nfunction reduceVerdict(claims: readonly ClaimEvaluation[]): SemanticVerdict {\n\tconst required = claims.filter((claim) => claim.requirement === \"required\" && claim.waiverId === undefined);\n\tif (required.length === 0) return claims.some((claim) => claim.requirement === \"required\") ? \"pass\" : \"inconclusive\";\n\tif (required.some((claim) => claim.result === \"violated\")) return \"fail\";\n\tif (required.some((claim) => claim.result === \"inconclusive\")) return \"inconclusive\";\n\treturn \"pass\";\n}\n\n/** Pure TaskSpec -> Observation -> Evaluation reduction. */\nexport function evaluateTask(input: EvaluationInput): EvaluationResult {\n\tparseTaskSpec(input.taskSpec);\n\tparseExecutionAttempt(input.attempt);\n\tif (input.attempt.taskId !== input.taskSpec.taskId) {\n\t\tthrow new ProtocolInvariantError(`${input.attempt.attemptId} targets task ${input.attempt.taskId}`);\n\t}\n\tfor (const observation of input.observations) {\n\t\tparseObservation(observation);\n\t\tif (observation.taskId !== input.taskSpec.taskId) {\n\t\t\tthrow new ProtocolInvariantError(`${observation.observationId} targets task ${observation.taskId}`);\n\t\t}\n\t}\n\tconst waivers = validateWaivers(input, input.waivers ?? []);\n\tconst claims = Object.freeze(\n\t\tinput.taskSpec.claims.map((claim): ClaimEvaluation => {\n\t\t\tconst evaluated = evaluateCondition(claim.condition, input.observations, input.attempt.attemptId);\n\t\t\tconst waiver = evaluated.result === \"satisfied\" ? undefined : waivers.get(claim.claimId);\n\t\t\treturn Object.freeze({\n\t\t\t\tclaimId: claim.claimId,\n\t\t\t\trequirement: claim.requirement,\n\t\t\t\tresult: evaluated.result,\n\t\t\t\treasonCode: reasonCode(evaluated.result),\n\t\t\t\tobservationIds: Object.freeze([...evaluated.observationIds]),\n\t\t\t\t...(waiver ? { waiverId: waiver.waiverId } : {}),\n\t\t\t});\n\t\t}),\n\t);\n\treturn parseEvaluationResult(\n\t\tObject.freeze({\n\t\t\tschemaVersion: PROTOCOL_VERSION,\n\t\t\tevaluationId: input.evaluationId,\n\t\t\ttaskId: input.taskSpec.taskId,\n\t\t\tattemptId: input.attempt.attemptId,\n\t\t\tevaluatedAt: input.evaluatedAt,\n\t\t\tclaims,\n\t\t\tsemanticVerdict: reduceVerdict(claims),\n\t\t}),\n\t);\n}\n"]}
+{"version":3,"file":"evaluation.js","sourceRoot":"","sources":["../src/evaluation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAQN,gBAAgB,GAGhB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IAAA,CACrC;CACD;AAOD,SAAS,QAAQ,CAAC,KAAgB,EAAkD;IACnF,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,eAAe,CAAC,MAA6B,EAAE,QAAmB,EAAW;IACrF,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CACN,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACjC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CACvE,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,CACN,MAAM,KAAK,SAAS;YACpB,QAAQ,CAAC,MAAM,CAAC;YAChB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CACrF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAAA,CACnC;AAED,SAAS,MAAM,CAAC,MAAyB,EAAqB;IAC7D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAAA,CAC5B;AAED,SAAS,iBAAiB,CACzB,SAAyB,EACzB,YAAoC,EACpC,SAAiB,EACjB,aAAsB,EACJ;IAClB,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACvD,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,eAAe;gBAAE,OAAO,KAAK,CAAC;YACjE,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvF,oEAAoE;YACpE,qEAAqE;YACrE,uEAAqE;YACrE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC7C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,aAAa;oBAAE,OAAO,KAAK,CAAC;YAC9E,CAAC;YACD,2DAA2D;YAC3D,mDAAmD;YACnD,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAI,aAAa,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,CAAC,SAAS,KAAK,aAAa;oBAAE,OAAO,KAAK,CAAC;YAChG,CAAC;YACD,OAAO,IAAI,CAAC;QAAA,CACZ,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzG,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE;YAC7F,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAC7F,OAAO;YACN,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc;YAC9G,cAAc,EAAE,KAAK,CAAC,cAAc;SACpC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnD,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAChE,CAAC;IACF,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;YACnE,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC;gBAC1D,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,WAAW,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC;QACpE,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;YACvD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,cAAc,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;AAAA,CACpG;AAED,SAAS,UAAU,CAAC,MAAmB,EAAiC;IACvE,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,iBAAiB,CAAC;IACrD,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,gBAAgB,CAAC;IACnD,OAAO,2BAA2B,CAAC;AAAA,CACnC;AAED,SAAS,eAAe,CAAC,KAAsB,EAAE,OAAgC,EAAqC;IACrH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,iBAAiB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,0BAA0B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjH,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAChG,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,oBAAoB,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,gCAAgC,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7E,MAAM,IAAI,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,aAAa,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7B,MAAM,IAAI,sBAAsB,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,aAAa,CAAC,MAAkC,EAAmB;IAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAC5G,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;IACrH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC;IACzE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC;IACrF,OAAO,MAAM,CAAC;AAAA,CACd;AAED,4DAA4D;AAC5D,MAAM,UAAU,YAAY,CAAC,KAAsB,EAAoB;IACtE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,sBAAsB,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,iBAAiB,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC9C,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC9B,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClD,MAAM,IAAI,sBAAsB,CAAC,GAAG,WAAW,CAAC,aAAa,iBAAiB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GACX,KAAK,CAAC,cAAc,KAAK,SAAS;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACpF,MAAM,YAAY,GACjB,MAAM,KAAK,SAAS;QACnB,CAAC,CAAC,KAAK,CAAC,YAAY;QACpB,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAC3B,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,iBAAiB,CAClC,KAAK,CAAC,SAAS,EACf,YAAY,EACZ,KAAK,CAAC,OAAO,CAAC,SAAS,EACvB,KAAK,CAAC,OAAO,CAAC,aAAa,CAC3B,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;YACxC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IAAA,CACH,CAAC,CACF,CAAC;IACF,MAAM,eAAe,GACpB,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QACnC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;YAC7B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,cAAc;QACjB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,qBAAqB,CAC3B,MAAM,CAAC,MAAM,CAAC;QACb,aAAa,EAAE,gBAAgB;QAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM;QACN,eAAe;QACf,GAAG,CAAC,MAAM;YACT,CAAC,CAAC;gBACA,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC;oBAC7B,GAAG,MAAM;oBACT,UAAU,EACT,eAAe,KAAK,MAAM;wBACzB,CAAC,CAAE,QAAkB;wBACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC;4BACrD,CAAC,CAAE,sBAAgC;4BACnC,CAAC,CAAE,kBAA4B;iBAClC,CAAC;aACF;YACF,CAAC,CAAC,EAAE,CAAC;KACN,CAAC,CACF,CAAC;AAAA,CACF","sourcesContent":["import { evaluateStrictEvidence } from \"./strict-evidence.ts\";\nimport {\n\ttype ClaimCondition,\n\ttype ClaimEvaluation,\n\ttype ClaimResult,\n\ttype EvaluationInput,\n\ttype EvaluationResult,\n\ttype JsonValue,\n\ttype Observation,\n\tPROTOCOL_VERSION,\n\ttype SemanticVerdict,\n\ttype WaiverRecord,\n} from \"./types.ts\";\nimport {\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n\nexport class ProtocolInvariantError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProtocolInvariantError\";\n\t}\n}\n\ninterface ConditionResult {\n\treadonly result: ClaimResult;\n\treadonly observationIds: readonly string[];\n}\n\nfunction isObject(value: JsonValue): value is { readonly [key: string]: JsonValue } {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction matchesExpected(actual: JsonValue | undefined, expected: JsonValue): boolean {\n\tif (Array.isArray(expected)) {\n\t\treturn (\n\t\t\tArray.isArray(actual) &&\n\t\t\tactual.length === expected.length &&\n\t\t\texpected.every((value, index) => matchesExpected(actual[index], value))\n\t\t);\n\t}\n\tif (isObject(expected)) {\n\t\treturn (\n\t\t\tactual !== undefined &&\n\t\t\tisObject(actual) &&\n\t\t\tObject.entries(expected).every(([key, value]) => matchesExpected(actual[key], value))\n\t\t);\n\t}\n\treturn Object.is(actual, expected);\n}\n\nfunction unique(values: readonly string[]): readonly string[] {\n\treturn [...new Set(values)];\n}\n\nfunction evaluateCondition(\n\tcondition: ClaimCondition,\n\tobservations: readonly Observation[],\n\tattemptId: string,\n\tcandidateHash?: string,\n): ConditionResult {\n\tif (condition.kind === \"observation\") {\n\t\tconst candidates = observations.filter((observation) => {\n\t\t\tif (observation.kind !== condition.observationKind) return false;\n\t\t\tif (condition.scope === \"attempt\" && observation.attemptId !== attemptId) return false;\n\t\t\t// Candidate binding: when the attempt declares a candidate hash, an\n\t\t\t// observation recorded for a different candidate cannot satisfy this\n\t\t\t// attempt's condition — a stale pass is not evidence for this build.\n\t\t\tif (candidateHash !== undefined) {\n\t\t\t\tconst observed = observation.facts.candidate;\n\t\t\t\tif (typeof observed === \"string\" && observed !== candidateHash) return false;\n\t\t\t}\n\t\t\t// Explicit per-condition binding additionally requires the\n\t\t\t// observation to name the same candidate outright.\n\t\t\tif (condition.bindToCandidate === true) {\n\t\t\t\tif (candidateHash === undefined || observation.facts.candidate !== candidateHash) return false;\n\t\t\t}\n\t\t\treturn true;\n\t\t});\n\t\tif (candidates.length === 0) return { result: \"inconclusive\", observationIds: [] };\n\t\tconst matching = candidates.filter((observation) => matchesExpected(observation.facts, condition.facts));\n\t\treturn matching.length > 0\n\t\t\t? { result: \"satisfied\", observationIds: matching.map(({ observationId }) => observationId) }\n\t\t\t: { result: \"violated\", observationIds: candidates.map(({ observationId }) => observationId) };\n\t}\n\n\tif (condition.kind === \"not\") {\n\t\tconst child = evaluateCondition(condition.condition, observations, attemptId, candidateHash);\n\t\treturn {\n\t\t\tresult: child.result === \"satisfied\" ? \"violated\" : child.result === \"violated\" ? \"satisfied\" : \"inconclusive\",\n\t\t\tobservationIds: child.observationIds,\n\t\t};\n\t}\n\n\tconst children = condition.conditions.map((child) =>\n\t\tevaluateCondition(child, observations, attemptId, candidateHash),\n\t);\n\tif (condition.kind === \"all\") {\n\t\tconst result = children.some((child) => child.result === \"violated\")\n\t\t\t? \"violated\"\n\t\t\t: children.some((child) => child.result === \"inconclusive\")\n\t\t\t\t? \"inconclusive\"\n\t\t\t\t: \"satisfied\";\n\t\treturn { result, observationIds: unique(children.flatMap(({ observationIds }) => observationIds)) };\n\t}\n\tconst result = children.some((child) => child.result === \"satisfied\")\n\t\t? \"satisfied\"\n\t\t: children.every((child) => child.result === \"violated\")\n\t\t\t? \"violated\"\n\t\t\t: \"inconclusive\";\n\treturn { result, observationIds: unique(children.flatMap(({ observationIds }) => observationIds)) };\n}\n\nfunction reasonCode(result: ClaimResult): ClaimEvaluation[\"reasonCode\"] {\n\tif (result === \"satisfied\") return \"claim.satisfied\";\n\tif (result === \"violated\") return \"claim.violated\";\n\treturn \"claim.observation_missing\";\n}\n\nfunction validateWaivers(input: EvaluationInput, waivers: readonly WaiverRecord[]): ReadonlyMap<string, WaiverRecord> {\n\tconst claims = new Map(input.taskSpec.claims.map((claim) => [claim.claimId, claim]));\n\tconst byClaim = new Map<string, WaiverRecord>();\n\tfor (const waiver of waivers) {\n\t\tparseWaiverRecord(waiver);\n\t\tif (waiver.scope.taskId !== input.taskSpec.taskId) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} targets task ${waiver.scope.taskId}`);\n\t\t}\n\t\tconst claim = claims.get(waiver.scope.claimId);\n\t\tif (!claim) throw new ProtocolInvariantError(`${waiver.waiverId} targets unknown claim ${waiver.scope.claimId}`);\n\t\tif (claim.requirement !== \"required\") {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} cannot waive advisory claim ${claim.claimId}`);\n\t\t}\n\t\tif (waiver.scope.attemptId !== undefined && waiver.scope.attemptId !== input.attempt.attemptId) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} targets attempt ${waiver.scope.attemptId}`);\n\t\t}\n\t\tif (waiver.approvedAt > input.evaluatedAt) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} was approved after evaluation`);\n\t\t}\n\t\tif (waiver.expiresAt !== undefined && waiver.expiresAt <= input.evaluatedAt) {\n\t\t\tthrow new ProtocolInvariantError(`${waiver.waiverId} is expired`);\n\t\t}\n\t\tif (byClaim.has(claim.claimId))\n\t\t\tthrow new ProtocolInvariantError(`multiple waivers target claim ${claim.claimId}`);\n\t\tbyClaim.set(claim.claimId, waiver);\n\t}\n\treturn byClaim;\n}\n\nfunction reduceVerdict(claims: readonly ClaimEvaluation[]): SemanticVerdict {\n\tconst required = claims.filter((claim) => claim.requirement === \"required\" && claim.waiverId === undefined);\n\tif (required.length === 0) return claims.some((claim) => claim.requirement === \"required\") ? \"pass\" : \"inconclusive\";\n\tif (required.some((claim) => claim.result === \"violated\")) return \"fail\";\n\tif (required.some((claim) => claim.result === \"inconclusive\")) return \"inconclusive\";\n\treturn \"pass\";\n}\n\n/** Pure TaskSpec -> Observation -> Evaluation reduction. */\nexport function evaluateTask(input: EvaluationInput): EvaluationResult {\n\tparseTaskSpec(input.taskSpec);\n\tparseExecutionAttempt(input.attempt);\n\tif (input.attempt.taskId !== input.taskSpec.taskId) {\n\t\tthrow new ProtocolInvariantError(`${input.attempt.attemptId} targets task ${input.attempt.taskId}`);\n\t}\n\tfor (const observation of input.observations) {\n\t\tparseObservation(observation);\n\t\tif (observation.taskId !== input.taskSpec.taskId) {\n\t\t\tthrow new ProtocolInvariantError(`${observation.observationId} targets task ${observation.taskId}`);\n\t\t}\n\t}\n\tconst waivers = validateWaivers(input, input.waivers ?? []);\n\tconst strict =\n\t\tinput.strictEvidence === undefined\n\t\t\t? undefined\n\t\t\t: evaluateStrictEvidence(input.strictEvidence, input.observations, input.attempt);\n\tconst observations =\n\t\tstrict === undefined\n\t\t\t? input.observations\n\t\t\t: input.observations.filter((observation) => strict.observationIds.includes(observation.observationId));\n\tconst claims = Object.freeze(\n\t\tinput.taskSpec.claims.map((claim): ClaimEvaluation => {\n\t\t\tconst evaluated = evaluateCondition(\n\t\t\t\tclaim.condition,\n\t\t\t\tobservations,\n\t\t\t\tinput.attempt.attemptId,\n\t\t\t\tinput.attempt.candidateHash,\n\t\t\t);\n\t\t\tconst waiver = evaluated.result === \"satisfied\" ? undefined : waivers.get(claim.claimId);\n\t\t\treturn Object.freeze({\n\t\t\t\tclaimId: claim.claimId,\n\t\t\t\trequirement: claim.requirement,\n\t\t\t\tresult: evaluated.result,\n\t\t\t\treasonCode: reasonCode(evaluated.result),\n\t\t\t\tobservationIds: Object.freeze([...evaluated.observationIds]),\n\t\t\t\t...(waiver ? { waiverId: waiver.waiverId } : {}),\n\t\t\t});\n\t\t}),\n\t);\n\tconst semanticVerdict =\n\t\tstrict && strict.status !== \"passed\"\n\t\t\t? strict.status === \"violated\"\n\t\t\t\t? \"fail\"\n\t\t\t\t: \"inconclusive\"\n\t\t\t: reduceVerdict(claims);\n\treturn parseEvaluationResult(\n\t\tObject.freeze({\n\t\t\tschemaVersion: PROTOCOL_VERSION,\n\t\t\tevaluationId: input.evaluationId,\n\t\t\ttaskId: input.taskSpec.taskId,\n\t\t\tattemptId: input.attempt.attemptId,\n\t\t\tevaluatedAt: input.evaluatedAt,\n\t\t\tclaims,\n\t\t\tsemanticVerdict,\n\t\t\t...(strict\n\t\t\t\t? {\n\t\t\t\t\t\tstrictEvidence: Object.freeze({\n\t\t\t\t\t\t\t...strict,\n\t\t\t\t\t\t\tacceptance:\n\t\t\t\t\t\t\t\tsemanticVerdict !== \"pass\"\n\t\t\t\t\t\t\t\t\t? (\"denied\" as const)\n\t\t\t\t\t\t\t\t\t: claims.some((claim) => claim.waiverId !== undefined)\n\t\t\t\t\t\t\t\t\t\t? (\"accepted_with_waiver\" as const)\n\t\t\t\t\t\t\t\t\t\t: (\"passed_by_checks\" as const),\n\t\t\t\t\t\t}),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t}),\n\t);\n}\n"]}

package/dist/index.d.ts

@@ -9,6 +9,8 @@ export { MAX_RUN_DAG_TASKS, MAX_RUN_TASK_ATTEMPTS, orderRunDag, type RunDagTask,
 export { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand, type RunResumeCommand } from "./run-resume.ts";
 export { parseRunTaskRetryCommand, type RunTaskRetryCommand } from "./run-task-retry.ts";
 export { parseRunWriterRestartCommand, type RunWriterRestartCommand } from "./run-writer-restart.ts";
+export type { StrictEvidenceBinding, StrictEvidenceCompletion, StrictEvidenceReport, StrictEvidenceSnapshot, } from "./strict-evidence-types.ts";
+export { parseStrictEvidenceBinding, parseStrictEvidenceSnapshot } from "./strict-evidence-validation.ts";
 export type { AllCondition, AnyCondition, AttemptExecutor, AttemptOutcome, AttemptTrigger, ClaimCondition, ClaimEvaluation, ClaimPredicate, ClaimReasonCode, ClaimResult, EvaluationInput, EvaluationResult, ExecutionAttempt, JsonObject, JsonPrimitive, JsonValue, NotCondition, Observation, ObservationCondition, ProtocolVersion, RequirementLevel, RuntimeAction, RuntimeDecision, RuntimeDecisionInput, RuntimeDecisionPolicy, RuntimeDecisionReason, SemanticVerdict, TaskSpec, WaiverRecord, } from "./types.ts";
 export { PROTOCOL_VERSION } from "./types.ts";
 export { ProtocolValidationError, parseEvaluationResult, parseExecutionAttempt, parseObservation, parseRuntimeDecision, parseTaskSpec, parseWaiverRecord, } from "./validation.ts";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,KAAK,sBAAsB,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACN,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,wBAAwB,EACxB,oBAAoB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,eAAe,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAAE,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACrG,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,QAAQ,EACR,YAAY,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC","sourcesContent":["export {\n\texplainBlockingCut,\n\tisBlockingVerdict,\n\tMAX_BLOCKING_CUT_CANDIDATES,\n\tminimalBlockingCut,\n} from \"./claims/claim-blocking-cut.ts\";\nexport { evaluateProofClosure } from \"./claims/claim-closure.ts\";\nexport {\n\tClaimGraphError,\n\tcanonicalClaimGraph,\n\trootClaimIds,\n\ttopologicalClaimOrder,\n\tvalidateClaimGraph,\n} from \"./claims/claim-graph.ts\";\nexport {\n\ttype BlockingCutExplanation,\n\tCLAIM_GRAPH_SCHEMA_VERSION,\n\tCLAIM_VERDICT_PRECEDENCE,\n\ttype ClaimClosureEvaluation,\n\ttype ClaimGraph,\n\ttype ClaimNode,\n\ttype ClaimNodeKind,\n\ttype ClaimRule,\n\ttype ClaimSeverity,\n\ttype ClaimVerdict,\n\tOBSERVATION_TRUST_RANK,\n\ttype ObservationNode,\n\ttype ObservationPolarity,\n\ttype ObservationSource,\n\ttype ProofClosureInput,\n\ttype ProofClosureResult,\n\ttype VerificationVerdict,\n\ttype WaiverNode,\n\ttype WitnessIndependencePolicy,\n\ttype WorkspaceCompleteness,\n} from \"./claims/claim-types.ts\";\nexport { reduceRuntimeDecision } from \"./decision.ts\";\nexport { evaluateTask, ProtocolInvariantError } from \"./evaluation.ts\";\nexport {\n\tparseRunContract,\n\tparseRunStartCommand,\n\ttype RunCheck,\n\ttype RunContract,\n\tRunContractError,\n\ttype RunPhaseBudget,\n\ttype RunScriptedWriter,\n\ttype RunStartCommand,\n\tVERIFIED_COMMAND_VERSION,\n\tVERIFIED_RUN_VERSION,\n} from \"./run-contract.ts\";\nexport {\n\tMAX_RUN_DAG_TASKS,\n\tMAX_RUN_TASK_ATTEMPTS,\n\torderRunDag,\n\ttype RunDagTask,\n\ttype RunDagWriter,\n\trunDagAncestors,\n} from \"./run-dag.ts\";\nexport { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand, type RunResumeCommand } from \"./run-resume.ts\";\nexport { parseRunTaskRetryCommand, type RunTaskRetryCommand } from \"./run-task-retry.ts\";\nexport { parseRunWriterRestartCommand, type RunWriterRestartCommand } from \"./run-writer-restart.ts\";\nexport type {\n\tAllCondition,\n\tAnyCondition,\n\tAttemptExecutor,\n\tAttemptOutcome,\n\tAttemptTrigger,\n\tClaimCondition,\n\tClaimEvaluation,\n\tClaimPredicate,\n\tClaimReasonCode,\n\tClaimResult,\n\tEvaluationInput,\n\tEvaluationResult,\n\tExecutionAttempt,\n\tJsonObject,\n\tJsonPrimitive,\n\tJsonValue,\n\tNotCondition,\n\tObservation,\n\tObservationCondition,\n\tProtocolVersion,\n\tRequirementLevel,\n\tRuntimeAction,\n\tRuntimeDecision,\n\tRuntimeDecisionInput,\n\tRuntimeDecisionPolicy,\n\tRuntimeDecisionReason,\n\tSemanticVerdict,\n\tTaskSpec,\n\tWaiverRecord,\n} from \"./types.ts\";\nexport { PROTOCOL_VERSION } from \"./types.ts\";\nexport {\n\tProtocolValidationError,\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseRuntimeDecision,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n"]}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,KAAK,sBAAsB,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACN,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,wBAAwB,EACxB,oBAAoB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,eAAe,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAAE,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACrG,YAAY,EACX,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC1G,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,QAAQ,EACR,YAAY,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC","sourcesContent":["export {\n\texplainBlockingCut,\n\tisBlockingVerdict,\n\tMAX_BLOCKING_CUT_CANDIDATES,\n\tminimalBlockingCut,\n} from \"./claims/claim-blocking-cut.ts\";\nexport { evaluateProofClosure } from \"./claims/claim-closure.ts\";\nexport {\n\tClaimGraphError,\n\tcanonicalClaimGraph,\n\trootClaimIds,\n\ttopologicalClaimOrder,\n\tvalidateClaimGraph,\n} from \"./claims/claim-graph.ts\";\nexport {\n\ttype BlockingCutExplanation,\n\tCLAIM_GRAPH_SCHEMA_VERSION,\n\tCLAIM_VERDICT_PRECEDENCE,\n\ttype ClaimClosureEvaluation,\n\ttype ClaimGraph,\n\ttype ClaimNode,\n\ttype ClaimNodeKind,\n\ttype ClaimRule,\n\ttype ClaimSeverity,\n\ttype ClaimVerdict,\n\tOBSERVATION_TRUST_RANK,\n\ttype ObservationNode,\n\ttype ObservationPolarity,\n\ttype ObservationSource,\n\ttype ProofClosureInput,\n\ttype ProofClosureResult,\n\ttype VerificationVerdict,\n\ttype WaiverNode,\n\ttype WitnessIndependencePolicy,\n\ttype WorkspaceCompleteness,\n} from \"./claims/claim-types.ts\";\nexport { reduceRuntimeDecision } from \"./decision.ts\";\nexport { evaluateTask, ProtocolInvariantError } from \"./evaluation.ts\";\nexport {\n\tparseRunContract,\n\tparseRunStartCommand,\n\ttype RunCheck,\n\ttype RunContract,\n\tRunContractError,\n\ttype RunPhaseBudget,\n\ttype RunScriptedWriter,\n\ttype RunStartCommand,\n\tVERIFIED_COMMAND_VERSION,\n\tVERIFIED_RUN_VERSION,\n} from \"./run-contract.ts\";\nexport {\n\tMAX_RUN_DAG_TASKS,\n\tMAX_RUN_TASK_ATTEMPTS,\n\torderRunDag,\n\ttype RunDagTask,\n\ttype RunDagWriter,\n\trunDagAncestors,\n} from \"./run-dag.ts\";\nexport { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand, type RunResumeCommand } from \"./run-resume.ts\";\nexport { parseRunTaskRetryCommand, type RunTaskRetryCommand } from \"./run-task-retry.ts\";\nexport { parseRunWriterRestartCommand, type RunWriterRestartCommand } from \"./run-writer-restart.ts\";\nexport type {\n\tStrictEvidenceBinding,\n\tStrictEvidenceCompletion,\n\tStrictEvidenceReport,\n\tStrictEvidenceSnapshot,\n} from \"./strict-evidence-types.ts\";\nexport { parseStrictEvidenceBinding, parseStrictEvidenceSnapshot } from \"./strict-evidence-validation.ts\";\nexport type {\n\tAllCondition,\n\tAnyCondition,\n\tAttemptExecutor,\n\tAttemptOutcome,\n\tAttemptTrigger,\n\tClaimCondition,\n\tClaimEvaluation,\n\tClaimPredicate,\n\tClaimReasonCode,\n\tClaimResult,\n\tEvaluationInput,\n\tEvaluationResult,\n\tExecutionAttempt,\n\tJsonObject,\n\tJsonPrimitive,\n\tJsonValue,\n\tNotCondition,\n\tObservation,\n\tObservationCondition,\n\tProtocolVersion,\n\tRequirementLevel,\n\tRuntimeAction,\n\tRuntimeDecision,\n\tRuntimeDecisionInput,\n\tRuntimeDecisionPolicy,\n\tRuntimeDecisionReason,\n\tSemanticVerdict,\n\tTaskSpec,\n\tWaiverRecord,\n} from \"./types.ts\";\nexport { PROTOCOL_VERSION } from \"./types.ts\";\nexport {\n\tProtocolValidationError,\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseRuntimeDecision,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n"]}

package/dist/index.js

@@ -9,6 +9,7 @@ export { MAX_RUN_DAG_TASKS, MAX_RUN_TASK_ATTEMPTS, orderRunDag, runDagAncestors,
 export { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand } from "./run-resume.js";
 export { parseRunTaskRetryCommand } from "./run-task-retry.js";
 export { parseRunWriterRestartCommand } from "./run-writer-restart.js";
+export { parseStrictEvidenceBinding, parseStrictEvidenceSnapshot } from "./strict-evidence-validation.js";
 export { PROTOCOL_VERSION } from "./types.js";
 export { ProtocolValidationError, parseEvaluationResult, parseExecutionAttempt, parseObservation, parseRuntimeDecision, parseTaskSpec, parseWaiverRecord, } from "./validation.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEN,0BAA0B,EAC1B,wBAAwB,EAQxB,sBAAsB,GAUtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACN,gBAAgB,EAChB,oBAAoB,EAGpB,gBAAgB,EAIhB,wBAAwB,EACxB,oBAAoB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EAGX,eAAe,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAA4B,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAgC,MAAM,yBAAyB,CAAC;AAgCrG,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC","sourcesContent":["export {\n\texplainBlockingCut,\n\tisBlockingVerdict,\n\tMAX_BLOCKING_CUT_CANDIDATES,\n\tminimalBlockingCut,\n} from \"./claims/claim-blocking-cut.ts\";\nexport { evaluateProofClosure } from \"./claims/claim-closure.ts\";\nexport {\n\tClaimGraphError,\n\tcanonicalClaimGraph,\n\trootClaimIds,\n\ttopologicalClaimOrder,\n\tvalidateClaimGraph,\n} from \"./claims/claim-graph.ts\";\nexport {\n\ttype BlockingCutExplanation,\n\tCLAIM_GRAPH_SCHEMA_VERSION,\n\tCLAIM_VERDICT_PRECEDENCE,\n\ttype ClaimClosureEvaluation,\n\ttype ClaimGraph,\n\ttype ClaimNode,\n\ttype ClaimNodeKind,\n\ttype ClaimRule,\n\ttype ClaimSeverity,\n\ttype ClaimVerdict,\n\tOBSERVATION_TRUST_RANK,\n\ttype ObservationNode,\n\ttype ObservationPolarity,\n\ttype ObservationSource,\n\ttype ProofClosureInput,\n\ttype ProofClosureResult,\n\ttype VerificationVerdict,\n\ttype WaiverNode,\n\ttype WitnessIndependencePolicy,\n\ttype WorkspaceCompleteness,\n} from \"./claims/claim-types.ts\";\nexport { reduceRuntimeDecision } from \"./decision.ts\";\nexport { evaluateTask, ProtocolInvariantError } from \"./evaluation.ts\";\nexport {\n\tparseRunContract,\n\tparseRunStartCommand,\n\ttype RunCheck,\n\ttype RunContract,\n\tRunContractError,\n\ttype RunPhaseBudget,\n\ttype RunScriptedWriter,\n\ttype RunStartCommand,\n\tVERIFIED_COMMAND_VERSION,\n\tVERIFIED_RUN_VERSION,\n} from \"./run-contract.ts\";\nexport {\n\tMAX_RUN_DAG_TASKS,\n\tMAX_RUN_TASK_ATTEMPTS,\n\torderRunDag,\n\ttype RunDagTask,\n\ttype RunDagWriter,\n\trunDagAncestors,\n} from \"./run-dag.ts\";\nexport { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand, type RunResumeCommand } from \"./run-resume.ts\";\nexport { parseRunTaskRetryCommand, type RunTaskRetryCommand } from \"./run-task-retry.ts\";\nexport { parseRunWriterRestartCommand, type RunWriterRestartCommand } from \"./run-writer-restart.ts\";\nexport type {\n\tAllCondition,\n\tAnyCondition,\n\tAttemptExecutor,\n\tAttemptOutcome,\n\tAttemptTrigger,\n\tClaimCondition,\n\tClaimEvaluation,\n\tClaimPredicate,\n\tClaimReasonCode,\n\tClaimResult,\n\tEvaluationInput,\n\tEvaluationResult,\n\tExecutionAttempt,\n\tJsonObject,\n\tJsonPrimitive,\n\tJsonValue,\n\tNotCondition,\n\tObservation,\n\tObservationCondition,\n\tProtocolVersion,\n\tRequirementLevel,\n\tRuntimeAction,\n\tRuntimeDecision,\n\tRuntimeDecisionInput,\n\tRuntimeDecisionPolicy,\n\tRuntimeDecisionReason,\n\tSemanticVerdict,\n\tTaskSpec,\n\tWaiverRecord,\n} from \"./types.ts\";\nexport { PROTOCOL_VERSION } from \"./types.ts\";\nexport {\n\tProtocolValidationError,\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseRuntimeDecision,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEN,0BAA0B,EAC1B,wBAAwB,EAQxB,sBAAsB,GAUtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACN,gBAAgB,EAChB,oBAAoB,EAGpB,gBAAgB,EAIhB,wBAAwB,EACxB,oBAAoB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EAGX,eAAe,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAA4B,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAgC,MAAM,yBAAyB,CAAC;AAOrG,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAgC1G,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC","sourcesContent":["export {\n\texplainBlockingCut,\n\tisBlockingVerdict,\n\tMAX_BLOCKING_CUT_CANDIDATES,\n\tminimalBlockingCut,\n} from \"./claims/claim-blocking-cut.ts\";\nexport { evaluateProofClosure } from \"./claims/claim-closure.ts\";\nexport {\n\tClaimGraphError,\n\tcanonicalClaimGraph,\n\trootClaimIds,\n\ttopologicalClaimOrder,\n\tvalidateClaimGraph,\n} from \"./claims/claim-graph.ts\";\nexport {\n\ttype BlockingCutExplanation,\n\tCLAIM_GRAPH_SCHEMA_VERSION,\n\tCLAIM_VERDICT_PRECEDENCE,\n\ttype ClaimClosureEvaluation,\n\ttype ClaimGraph,\n\ttype ClaimNode,\n\ttype ClaimNodeKind,\n\ttype ClaimRule,\n\ttype ClaimSeverity,\n\ttype ClaimVerdict,\n\tOBSERVATION_TRUST_RANK,\n\ttype ObservationNode,\n\ttype ObservationPolarity,\n\ttype ObservationSource,\n\ttype ProofClosureInput,\n\ttype ProofClosureResult,\n\ttype VerificationVerdict,\n\ttype WaiverNode,\n\ttype WitnessIndependencePolicy,\n\ttype WorkspaceCompleteness,\n} from \"./claims/claim-types.ts\";\nexport { reduceRuntimeDecision } from \"./decision.ts\";\nexport { evaluateTask, ProtocolInvariantError } from \"./evaluation.ts\";\nexport {\n\tparseRunContract,\n\tparseRunStartCommand,\n\ttype RunCheck,\n\ttype RunContract,\n\tRunContractError,\n\ttype RunPhaseBudget,\n\ttype RunScriptedWriter,\n\ttype RunStartCommand,\n\tVERIFIED_COMMAND_VERSION,\n\tVERIFIED_RUN_VERSION,\n} from \"./run-contract.ts\";\nexport {\n\tMAX_RUN_DAG_TASKS,\n\tMAX_RUN_TASK_ATTEMPTS,\n\torderRunDag,\n\ttype RunDagTask,\n\ttype RunDagWriter,\n\trunDagAncestors,\n} from \"./run-dag.ts\";\nexport { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand, type RunResumeCommand } from \"./run-resume.ts\";\nexport { parseRunTaskRetryCommand, type RunTaskRetryCommand } from \"./run-task-retry.ts\";\nexport { parseRunWriterRestartCommand, type RunWriterRestartCommand } from \"./run-writer-restart.ts\";\nexport type {\n\tStrictEvidenceBinding,\n\tStrictEvidenceCompletion,\n\tStrictEvidenceReport,\n\tStrictEvidenceSnapshot,\n} from \"./strict-evidence-types.ts\";\nexport { parseStrictEvidenceBinding, parseStrictEvidenceSnapshot } from \"./strict-evidence-validation.ts\";\nexport type {\n\tAllCondition,\n\tAnyCondition,\n\tAttemptExecutor,\n\tAttemptOutcome,\n\tAttemptTrigger,\n\tClaimCondition,\n\tClaimEvaluation,\n\tClaimPredicate,\n\tClaimReasonCode,\n\tClaimResult,\n\tEvaluationInput,\n\tEvaluationResult,\n\tExecutionAttempt,\n\tJsonObject,\n\tJsonPrimitive,\n\tJsonValue,\n\tNotCondition,\n\tObservation,\n\tObservationCondition,\n\tProtocolVersion,\n\tRequirementLevel,\n\tRuntimeAction,\n\tRuntimeDecision,\n\tRuntimeDecisionInput,\n\tRuntimeDecisionPolicy,\n\tRuntimeDecisionReason,\n\tSemanticVerdict,\n\tTaskSpec,\n\tWaiverRecord,\n} from \"./types.ts\";\nexport { PROTOCOL_VERSION } from \"./types.ts\";\nexport {\n\tProtocolValidationError,\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseRuntimeDecision,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n"]}

package/dist/strict-evidence-types.d.ts

@@ -0,0 +1,37 @@
+/** Explicit host-admitted snapshot; none of these serializable fields authenticate a worker. */
+export interface StrictEvidenceBinding {
+    readonly taskId: string;
+    readonly candidateHash: string;
+    readonly contractDigest: string;
+    readonly environmentDigest: string;
+    readonly checkCodeDigest: string;
+    readonly dependencyDigest: string;
+    readonly generation: number;
+    readonly verificationRound: number;
+}
+export interface StrictEvidenceCompletion {
+    readonly observationId: string;
+    readonly checkId: string;
+    readonly binding: StrictEvidenceBinding;
+    /** Sequence allocated by the accepting host, never worker wall time. */
+    readonly sequence: number;
+    readonly executionId: string;
+    readonly previousExecutionId: string | null;
+    readonly verdict: "passed" | "failed";
+}
+export interface StrictEvidenceSnapshot {
+    readonly policy: "omk.strict-evidence.v1";
+    readonly binding: StrictEvidenceBinding;
+    readonly requiredCheckIds: readonly string[];
+    /** Includes open producers and unknown/unsettled executions, even after a completed pass. */
+    readonly pendingExecutionIds: readonly string[];
+    readonly results: readonly StrictEvidenceCompletion[];
+}
+export interface StrictEvidenceReport {
+    readonly policy: "omk.strict-evidence.v1";
+    readonly status: "passed" | "violated" | "pending" | "inconclusive";
+    readonly observationIds: readonly string[];
+    readonly missingCheckIds: readonly string[];
+    readonly acceptance: "passed_by_checks" | "accepted_with_waiver" | "denied";
+}
+//# sourceMappingURL=strict-evidence-types.d.ts.map

package/dist/strict-evidence-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-evidence-types.d.ts","sourceRoot":"","sources":["../src/strict-evidence-types.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACtC;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,6FAA6F;IAC7F,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,CAAC;IACpE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,sBAAsB,GAAG,QAAQ,CAAC;CAC5E","sourcesContent":["/** Explicit host-admitted snapshot; none of these serializable fields authenticate a worker. */\nexport interface StrictEvidenceBinding {\n\treadonly taskId: string;\n\treadonly candidateHash: string;\n\treadonly contractDigest: string;\n\treadonly environmentDigest: string;\n\treadonly checkCodeDigest: string;\n\treadonly dependencyDigest: string;\n\treadonly generation: number;\n\treadonly verificationRound: number;\n}\n\nexport interface StrictEvidenceCompletion {\n\treadonly observationId: string;\n\treadonly checkId: string;\n\treadonly binding: StrictEvidenceBinding;\n\t/** Sequence allocated by the accepting host, never worker wall time. */\n\treadonly sequence: number;\n\treadonly executionId: string;\n\treadonly previousExecutionId: string | null;\n\treadonly verdict: \"passed\" | \"failed\";\n}\n\nexport interface StrictEvidenceSnapshot {\n\treadonly policy: \"omk.strict-evidence.v1\";\n\treadonly binding: StrictEvidenceBinding;\n\treadonly requiredCheckIds: readonly string[];\n\t/** Includes open producers and unknown/unsettled executions, even after a completed pass. */\n\treadonly pendingExecutionIds: readonly string[];\n\treadonly results: readonly StrictEvidenceCompletion[];\n}\n\nexport interface StrictEvidenceReport {\n\treadonly policy: \"omk.strict-evidence.v1\";\n\treadonly status: \"passed\" | \"violated\" | \"pending\" | \"inconclusive\";\n\treadonly observationIds: readonly string[];\n\treadonly missingCheckIds: readonly string[];\n\treadonly acceptance: \"passed_by_checks\" | \"accepted_with_waiver\" | \"denied\";\n}\n"]}

package/dist/strict-evidence-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=strict-evidence-types.js.map

package/dist/strict-evidence-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-evidence-types.js","sourceRoot":"","sources":["../src/strict-evidence-types.ts"],"names":[],"mappings":"","sourcesContent":["/** Explicit host-admitted snapshot; none of these serializable fields authenticate a worker. */\nexport interface StrictEvidenceBinding {\n\treadonly taskId: string;\n\treadonly candidateHash: string;\n\treadonly contractDigest: string;\n\treadonly environmentDigest: string;\n\treadonly checkCodeDigest: string;\n\treadonly dependencyDigest: string;\n\treadonly generation: number;\n\treadonly verificationRound: number;\n}\n\nexport interface StrictEvidenceCompletion {\n\treadonly observationId: string;\n\treadonly checkId: string;\n\treadonly binding: StrictEvidenceBinding;\n\t/** Sequence allocated by the accepting host, never worker wall time. */\n\treadonly sequence: number;\n\treadonly executionId: string;\n\treadonly previousExecutionId: string | null;\n\treadonly verdict: \"passed\" | \"failed\";\n}\n\nexport interface StrictEvidenceSnapshot {\n\treadonly policy: \"omk.strict-evidence.v1\";\n\treadonly binding: StrictEvidenceBinding;\n\treadonly requiredCheckIds: readonly string[];\n\t/** Includes open producers and unknown/unsettled executions, even after a completed pass. */\n\treadonly pendingExecutionIds: readonly string[];\n\treadonly results: readonly StrictEvidenceCompletion[];\n}\n\nexport interface StrictEvidenceReport {\n\treadonly policy: \"omk.strict-evidence.v1\";\n\treadonly status: \"passed\" | \"violated\" | \"pending\" | \"inconclusive\";\n\treadonly observationIds: readonly string[];\n\treadonly missingCheckIds: readonly string[];\n\treadonly acceptance: \"passed_by_checks\" | \"accepted_with_waiver\" | \"denied\";\n}\n"]}

package/dist/strict-evidence-validation.d.ts

@@ -0,0 +1,4 @@
+import type { StrictEvidenceBinding, StrictEvidenceSnapshot } from "./strict-evidence-types.ts";
+export declare function parseStrictEvidenceBinding(value: unknown): StrictEvidenceBinding;
+export declare function parseStrictEvidenceSnapshot(value: unknown): StrictEvidenceSnapshot;
+//# sourceMappingURL=strict-evidence-validation.d.ts.map

package/dist/strict-evidence-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-evidence-validation.d.ts","sourceRoot":"","sources":["../src/strict-evidence-validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACX,qBAAqB,EAErB,sBAAsB,EACtB,MAAM,4BAA4B,CAAC;AAEpC,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAqBhF;AAyBD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAqBlF","sourcesContent":["import { runArray, runDigest, runLimit, runObject, runText } from \"./run-parsing.ts\";\nimport type {\n\tStrictEvidenceBinding,\n\tStrictEvidenceCompletion,\n\tStrictEvidenceSnapshot,\n} from \"./strict-evidence-types.ts\";\n\nexport function parseStrictEvidenceBinding(value: unknown): StrictEvidenceBinding {\n\tconst raw = runObject(value, [\n\t\t\"taskId\",\n\t\t\"candidateHash\",\n\t\t\"contractDigest\",\n\t\t\"environmentDigest\",\n\t\t\"checkCodeDigest\",\n\t\t\"dependencyDigest\",\n\t\t\"generation\",\n\t\t\"verificationRound\",\n\t]);\n\treturn Object.freeze({\n\t\ttaskId: runText(raw.taskId, \"taskId\"),\n\t\tcandidateHash: runText(raw.candidateHash, \"candidateHash\"),\n\t\tcontractDigest: runDigest(raw.contractDigest),\n\t\tenvironmentDigest: runDigest(raw.environmentDigest),\n\t\tcheckCodeDigest: runDigest(raw.checkCodeDigest),\n\t\tdependencyDigest: runDigest(raw.dependencyDigest),\n\t\tgeneration: runLimit(raw.generation, \"generation\"),\n\t\tverificationRound: runLimit(raw.verificationRound, \"verificationRound\"),\n\t});\n}\n\nfunction completion(value: unknown): StrictEvidenceCompletion {\n\tconst raw = runObject(value, [\n\t\t\"observationId\",\n\t\t\"checkId\",\n\t\t\"binding\",\n\t\t\"sequence\",\n\t\t\"executionId\",\n\t\t\"previousExecutionId\",\n\t\t\"verdict\",\n\t]);\n\tif (raw.verdict !== \"passed\" && raw.verdict !== \"failed\") throw new Error(\"Invalid strict evidence verdict\");\n\treturn Object.freeze({\n\t\tobservationId: runText(raw.observationId, \"observationId\"),\n\t\tcheckId: runText(raw.checkId, \"checkId\"),\n\t\tbinding: parseStrictEvidenceBinding(raw.binding),\n\t\tsequence: runLimit(raw.sequence, \"sequence\", Number.MAX_SAFE_INTEGER),\n\t\texecutionId: runText(raw.executionId, \"executionId\"),\n\t\tpreviousExecutionId:\n\t\t\traw.previousExecutionId === null ? null : runText(raw.previousExecutionId, \"previousExecutionId\"),\n\t\tverdict: raw.verdict,\n\t});\n}\n\nexport function parseStrictEvidenceSnapshot(value: unknown): StrictEvidenceSnapshot {\n\tconst raw = runObject(value, [\"policy\", \"binding\", \"requiredCheckIds\", \"pendingExecutionIds\", \"results\"]);\n\tif (raw.policy !== \"omk.strict-evidence.v1\") throw new Error(\"Unsupported strict evidence policy\");\n\tconst requiredCheckIds = runArray(raw.requiredCheckIds, (v) => runText(v, \"checkId\"), 1024);\n\tif (new Set(requiredCheckIds).size !== requiredCheckIds.length) throw new Error(\"Duplicate required check ID\");\n\t// runArray deliberately forbids empty arrays; these two collections may be empty.\n\tconst pendingExecutionIds =\n\t\tArray.isArray(raw.pendingExecutionIds) && raw.pendingExecutionIds.length === 0\n\t\t\t? Object.freeze([])\n\t\t\t: runArray(raw.pendingExecutionIds, (v) => runText(v, \"pendingExecutionId\"), 10000);\n\tconst results =\n\t\tArray.isArray(raw.results) && raw.results.length === 0\n\t\t\t? Object.freeze([])\n\t\t\t: runArray(raw.results, completion, 10000);\n\treturn Object.freeze({\n\t\tpolicy: raw.policy,\n\t\tbinding: parseStrictEvidenceBinding(raw.binding),\n\t\trequiredCheckIds,\n\t\tpendingExecutionIds,\n\t\tresults,\n\t});\n}\n"]}

package/dist/strict-evidence-validation.js

@@ -0,0 +1,68 @@
+import { runArray, runDigest, runLimit, runObject, runText } from "./run-parsing.js";
+export function parseStrictEvidenceBinding(value) {
+    const raw = runObject(value, [
+        "taskId",
+        "candidateHash",
+        "contractDigest",
+        "environmentDigest",
+        "checkCodeDigest",
+        "dependencyDigest",
+        "generation",
+        "verificationRound",
+    ]);
+    return Object.freeze({
+        taskId: runText(raw.taskId, "taskId"),
+        candidateHash: runText(raw.candidateHash, "candidateHash"),
+        contractDigest: runDigest(raw.contractDigest),
+        environmentDigest: runDigest(raw.environmentDigest),
+        checkCodeDigest: runDigest(raw.checkCodeDigest),
+        dependencyDigest: runDigest(raw.dependencyDigest),
+        generation: runLimit(raw.generation, "generation"),
+        verificationRound: runLimit(raw.verificationRound, "verificationRound"),
+    });
+}
+function completion(value) {
+    const raw = runObject(value, [
+        "observationId",
+        "checkId",
+        "binding",
+        "sequence",
+        "executionId",
+        "previousExecutionId",
+        "verdict",
+    ]);
+    if (raw.verdict !== "passed" && raw.verdict !== "failed")
+        throw new Error("Invalid strict evidence verdict");
+    return Object.freeze({
+        observationId: runText(raw.observationId, "observationId"),
+        checkId: runText(raw.checkId, "checkId"),
+        binding: parseStrictEvidenceBinding(raw.binding),
+        sequence: runLimit(raw.sequence, "sequence", Number.MAX_SAFE_INTEGER),
+        executionId: runText(raw.executionId, "executionId"),
+        previousExecutionId: raw.previousExecutionId === null ? null : runText(raw.previousExecutionId, "previousExecutionId"),
+        verdict: raw.verdict,
+    });
+}
+export function parseStrictEvidenceSnapshot(value) {
+    const raw = runObject(value, ["policy", "binding", "requiredCheckIds", "pendingExecutionIds", "results"]);
+    if (raw.policy !== "omk.strict-evidence.v1")
+        throw new Error("Unsupported strict evidence policy");
+    const requiredCheckIds = runArray(raw.requiredCheckIds, (v) => runText(v, "checkId"), 1024);
+    if (new Set(requiredCheckIds).size !== requiredCheckIds.length)
+        throw new Error("Duplicate required check ID");
+    // runArray deliberately forbids empty arrays; these two collections may be empty.
+    const pendingExecutionIds = Array.isArray(raw.pendingExecutionIds) && raw.pendingExecutionIds.length === 0
+        ? Object.freeze([])
+        : runArray(raw.pendingExecutionIds, (v) => runText(v, "pendingExecutionId"), 10000);
+    const results = Array.isArray(raw.results) && raw.results.length === 0
+        ? Object.freeze([])
+        : runArray(raw.results, completion, 10000);
+    return Object.freeze({
+        policy: raw.policy,
+        binding: parseStrictEvidenceBinding(raw.binding),
+        requiredCheckIds,
+        pendingExecutionIds,
+        results,
+    });
+}
+//# sourceMappingURL=strict-evidence-validation.js.map

package/dist/strict-evidence-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-evidence-validation.js","sourceRoot":"","sources":["../src/strict-evidence-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAOrF,MAAM,UAAU,0BAA0B,CAAC,KAAc,EAAyB;IACjF,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE;QAC5B,QAAQ;QACR,eAAe;QACf,gBAAgB;QAChB,mBAAmB;QACnB,iBAAiB;QACjB,kBAAkB;QAClB,YAAY;QACZ,mBAAmB;KACnB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC;QACrC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC;QAC1D,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;QAC7C,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACnD,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC;QAC/C,gBAAgB,EAAE,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACjD,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC;QAClD,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KACvE,CAAC,CAAC;AAAA,CACH;AAED,SAAS,UAAU,CAAC,KAAc,EAA4B;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE;QAC5B,eAAe;QACf,SAAS;QACT,SAAS;QACT,UAAU;QACV,aAAa;QACb,qBAAqB;QACrB,SAAS;KACT,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7G,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC;QAC1D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC;QACxC,OAAO,EAAE,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC;QAChD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACrE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;QACpD,mBAAmB,EAClB,GAAG,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;QAClG,OAAO,EAAE,GAAG,CAAC,OAAO;KACpB,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc,EAA0B;IACnF,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1G,IAAI,GAAG,CAAC,MAAM,KAAK,wBAAwB;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACnG,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5F,IAAI,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC/G,kFAAkF;IAClF,MAAM,mBAAmB,GACxB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAC7E,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,KAAK,CAAC,CAAC;IACtF,MAAM,OAAO,GACZ,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC;QAChD,gBAAgB;QAChB,mBAAmB;QACnB,OAAO;KACP,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { runArray, runDigest, runLimit, runObject, runText } from \"./run-parsing.ts\";\nimport type {\n\tStrictEvidenceBinding,\n\tStrictEvidenceCompletion,\n\tStrictEvidenceSnapshot,\n} from \"./strict-evidence-types.ts\";\n\nexport function parseStrictEvidenceBinding(value: unknown): StrictEvidenceBinding {\n\tconst raw = runObject(value, [\n\t\t\"taskId\",\n\t\t\"candidateHash\",\n\t\t\"contractDigest\",\n\t\t\"environmentDigest\",\n\t\t\"checkCodeDigest\",\n\t\t\"dependencyDigest\",\n\t\t\"generation\",\n\t\t\"verificationRound\",\n\t]);\n\treturn Object.freeze({\n\t\ttaskId: runText(raw.taskId, \"taskId\"),\n\t\tcandidateHash: runText(raw.candidateHash, \"candidateHash\"),\n\t\tcontractDigest: runDigest(raw.contractDigest),\n\t\tenvironmentDigest: runDigest(raw.environmentDigest),\n\t\tcheckCodeDigest: runDigest(raw.checkCodeDigest),\n\t\tdependencyDigest: runDigest(raw.dependencyDigest),\n\t\tgeneration: runLimit(raw.generation, \"generation\"),\n\t\tverificationRound: runLimit(raw.verificationRound, \"verificationRound\"),\n\t});\n}\n\nfunction completion(value: unknown): StrictEvidenceCompletion {\n\tconst raw = runObject(value, [\n\t\t\"observationId\",\n\t\t\"checkId\",\n\t\t\"binding\",\n\t\t\"sequence\",\n\t\t\"executionId\",\n\t\t\"previousExecutionId\",\n\t\t\"verdict\",\n\t]);\n\tif (raw.verdict !== \"passed\" && raw.verdict !== \"failed\") throw new Error(\"Invalid strict evidence verdict\");\n\treturn Object.freeze({\n\t\tobservationId: runText(raw.observationId, \"observationId\"),\n\t\tcheckId: runText(raw.checkId, \"checkId\"),\n\t\tbinding: parseStrictEvidenceBinding(raw.binding),\n\t\tsequence: runLimit(raw.sequence, \"sequence\", Number.MAX_SAFE_INTEGER),\n\t\texecutionId: runText(raw.executionId, \"executionId\"),\n\t\tpreviousExecutionId:\n\t\t\traw.previousExecutionId === null ? null : runText(raw.previousExecutionId, \"previousExecutionId\"),\n\t\tverdict: raw.verdict,\n\t});\n}\n\nexport function parseStrictEvidenceSnapshot(value: unknown): StrictEvidenceSnapshot {\n\tconst raw = runObject(value, [\"policy\", \"binding\", \"requiredCheckIds\", \"pendingExecutionIds\", \"results\"]);\n\tif (raw.policy !== \"omk.strict-evidence.v1\") throw new Error(\"Unsupported strict evidence policy\");\n\tconst requiredCheckIds = runArray(raw.requiredCheckIds, (v) => runText(v, \"checkId\"), 1024);\n\tif (new Set(requiredCheckIds).size !== requiredCheckIds.length) throw new Error(\"Duplicate required check ID\");\n\t// runArray deliberately forbids empty arrays; these two collections may be empty.\n\tconst pendingExecutionIds =\n\t\tArray.isArray(raw.pendingExecutionIds) && raw.pendingExecutionIds.length === 0\n\t\t\t? Object.freeze([])\n\t\t\t: runArray(raw.pendingExecutionIds, (v) => runText(v, \"pendingExecutionId\"), 10000);\n\tconst results =\n\t\tArray.isArray(raw.results) && raw.results.length === 0\n\t\t\t? Object.freeze([])\n\t\t\t: runArray(raw.results, completion, 10000);\n\treturn Object.freeze({\n\t\tpolicy: raw.policy,\n\t\tbinding: parseStrictEvidenceBinding(raw.binding),\n\t\trequiredCheckIds,\n\t\tpendingExecutionIds,\n\t\tresults,\n\t});\n}\n"]}

package/dist/strict-evidence.d.ts

@@ -0,0 +1,5 @@
+import type { StrictEvidenceReport, StrictEvidenceSnapshot } from "./strict-evidence-types.ts";
+import type { ExecutionAttempt, Observation } from "./types.ts";
+/** Structural/integrity reduction only. The caller owns admission and snapshot completeness. */
+export declare function evaluateStrictEvidence(value: StrictEvidenceSnapshot, observations: readonly Observation[], attempt: ExecutionAttempt): Omit<StrictEvidenceReport, "acceptance">;
+//# sourceMappingURL=strict-evidence.d.ts.map

package/dist/strict-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-evidence.d.ts","sourceRoot":"","sources":["../src/strict-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE/F,OAAO,KAAK,EAAE,gBAAgB,EAAa,WAAW,EAAE,MAAM,YAAY,CAAC;AAa3E,gGAAgG;AAChG,wBAAgB,sBAAsB,CACrC,KAAK,EAAE,sBAAsB,EAC7B,YAAY,EAAE,SAAS,WAAW,EAAE,EACpC,OAAO,EAAE,gBAAgB,GACvB,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAmE1C","sourcesContent":["import type { StrictEvidenceReport, StrictEvidenceSnapshot } from \"./strict-evidence-types.ts\";\nimport { parseStrictEvidenceSnapshot } from \"./strict-evidence-validation.ts\";\nimport type { ExecutionAttempt, JsonValue, Observation } from \"./types.ts\";\n\nfunction canonical(value: JsonValue): string {\n\tif (Array.isArray(value)) return `[${value.map(canonical).join(\",\")}]`;\n\tif (value !== null && typeof value === \"object\") {\n\t\treturn `{${Object.keys(value)\n\t\t\t.sort()\n\t\t\t.map((key) => `${JSON.stringify(key)}:${canonical((value as { readonly [key: string]: JsonValue })[key])}`)\n\t\t\t.join(\",\")}}`;\n\t}\n\treturn JSON.stringify(value);\n}\n\n/** Structural/integrity reduction only. The caller owns admission and snapshot completeness. */\nexport function evaluateStrictEvidence(\n\tvalue: StrictEvidenceSnapshot,\n\tobservations: readonly Observation[],\n\tattempt: ExecutionAttempt,\n): Omit<StrictEvidenceReport, \"acceptance\"> {\n\tconst snapshot = parseStrictEvidenceSnapshot(value);\n\tconst bindingKey = JSON.stringify(snapshot.binding);\n\tif (snapshot.binding.taskId !== attempt.taskId || snapshot.binding.candidateHash !== attempt.candidateHash) {\n\t\tthrow new Error(\"Strict evidence binding does not match attempt\");\n\t}\n\tconst byId = new Map<string, Observation>();\n\tfor (const observation of observations) {\n\t\tconst old = byId.get(observation.observationId);\n\t\tif (old && canonical(old as unknown as JsonValue) !== canonical(observation as unknown as JsonValue)) {\n\t\t\tthrow new Error(\"Conflicting observation identity\");\n\t\t}\n\t\tbyId.set(observation.observationId, observation);\n\t}\n\tconst identities = new Map<string, string>();\n\tconst unique = new Map<string, (typeof snapshot.results)[number]>();\n\tfor (const result of snapshot.results) {\n\t\tconst payload = JSON.stringify(result);\n\t\tfor (const key of [\n\t\t\t`observation:${result.observationId}`,\n\t\t\t`execution:${result.executionId}`,\n\t\t\t`sequence:${result.sequence}`,\n\t\t]) {\n\t\t\tconst old = identities.get(key);\n\t\t\tif (old !== undefined && old !== payload) throw new Error(\"Conflicting strict evidence identity or sequence\");\n\t\t\tidentities.set(key, payload);\n\t\t}\n\t\tconst observation = byId.get(result.observationId);\n\t\tif (!observation) throw new Error(\"Strict completion references missing observation\");\n\t\tconst candidate = observation.facts.candidate;\n\t\tif (typeof candidate === \"string\" && candidate !== result.binding.candidateHash) {\n\t\t\tthrow new Error(\"Strict evidence binding disagrees with observation candidate\");\n\t\t}\n\t\tunique.set(result.observationId, result);\n\t}\n\tconst selected: string[] = [];\n\tconst missing: string[] = [];\n\tlet failed = false;\n\tfor (const checkId of [...snapshot.requiredCheckIds].sort()) {\n\t\tconst history = [...unique.values()]\n\t\t\t.filter((r) => r.checkId === checkId && JSON.stringify(r.binding) === bindingKey)\n\t\t\t.sort((a, b) => a.sequence - b.sequence);\n\t\tfor (const [index, result] of history.entries()) {\n\t\t\tif (result.previousExecutionId !== (index === 0 ? null : history[index - 1].executionId)) {\n\t\t\t\tthrow new Error(\"Broken strict evidence attempt chain\");\n\t\t\t}\n\t\t}\n\t\tconst latest = history.at(-1);\n\t\tif (!latest) missing.push(checkId);\n\t\telse {\n\t\t\tselected.push(latest.observationId);\n\t\t\tfailed ||= latest.verdict === \"failed\";\n\t\t}\n\t}\n\treturn Object.freeze({\n\t\tpolicy: snapshot.policy,\n\t\tstatus:\n\t\t\tsnapshot.pendingExecutionIds.length > 0\n\t\t\t\t? \"pending\"\n\t\t\t\t: failed\n\t\t\t\t\t? \"violated\"\n\t\t\t\t\t: missing.length > 0\n\t\t\t\t\t\t? \"inconclusive\"\n\t\t\t\t\t\t: \"passed\",\n\t\tobservationIds: Object.freeze(selected.sort()),\n\t\tmissingCheckIds: Object.freeze(missing),\n\t});\n}\n"]}

package/dist/strict-evidence.js

@@ -0,0 +1,84 @@
+import { parseStrictEvidenceSnapshot } from "./strict-evidence-validation.js";
+function canonical(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(",")}]`;
+    if (value !== null && typeof value === "object") {
+        return `{${Object.keys(value)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonical(value[key])}`)
+            .join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+/** Structural/integrity reduction only. The caller owns admission and snapshot completeness. */
+export function evaluateStrictEvidence(value, observations, attempt) {
+    const snapshot = parseStrictEvidenceSnapshot(value);
+    const bindingKey = JSON.stringify(snapshot.binding);
+    if (snapshot.binding.taskId !== attempt.taskId || snapshot.binding.candidateHash !== attempt.candidateHash) {
+        throw new Error("Strict evidence binding does not match attempt");
+    }
+    const byId = new Map();
+    for (const observation of observations) {
+        const old = byId.get(observation.observationId);
+        if (old && canonical(old) !== canonical(observation)) {
+            throw new Error("Conflicting observation identity");
+        }
+        byId.set(observation.observationId, observation);
+    }
+    const identities = new Map();
+    const unique = new Map();
+    for (const result of snapshot.results) {
+        const payload = JSON.stringify(result);
+        for (const key of [
+            `observation:${result.observationId}`,
+            `execution:${result.executionId}`,
+            `sequence:${result.sequence}`,
+        ]) {
+            const old = identities.get(key);
+            if (old !== undefined && old !== payload)
+                throw new Error("Conflicting strict evidence identity or sequence");
+            identities.set(key, payload);
+        }
+        const observation = byId.get(result.observationId);
+        if (!observation)
+            throw new Error("Strict completion references missing observation");
+        const candidate = observation.facts.candidate;
+        if (typeof candidate === "string" && candidate !== result.binding.candidateHash) {
+            throw new Error("Strict evidence binding disagrees with observation candidate");
+        }
+        unique.set(result.observationId, result);
+    }
+    const selected = [];
+    const missing = [];
+    let failed = false;
+    for (const checkId of [...snapshot.requiredCheckIds].sort()) {
+        const history = [...unique.values()]
+            .filter((r) => r.checkId === checkId && JSON.stringify(r.binding) === bindingKey)
+            .sort((a, b) => a.sequence - b.sequence);
+        for (const [index, result] of history.entries()) {
+            if (result.previousExecutionId !== (index === 0 ? null : history[index - 1].executionId)) {
+                throw new Error("Broken strict evidence attempt chain");
+            }
+        }
+        const latest = history.at(-1);
+        if (!latest)
+            missing.push(checkId);
+        else {
+            selected.push(latest.observationId);
+            failed ||= latest.verdict === "failed";
+        }
+    }
+    return Object.freeze({
+        policy: snapshot.policy,
+        status: snapshot.pendingExecutionIds.length > 0
+            ? "pending"
+            : failed
+                ? "violated"
+                : missing.length > 0
+                    ? "inconclusive"
+                    : "passed",
+        observationIds: Object.freeze(selected.sort()),
+        missingCheckIds: Object.freeze(missing),
+    });
+}
+//# sourceMappingURL=strict-evidence.js.map

package/dist/strict-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-evidence.js","sourceRoot":"","sources":["../src/strict-evidence.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAG9E,SAAS,SAAS,CAAC,KAAgB,EAAU;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC3B,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAE,KAA+C,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aAC1G,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAAA,CAC7B;AAED,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CACrC,KAA6B,EAC7B,YAAoC,EACpC,OAAyB,EACkB;IAC3C,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,GAAG,IAAI,SAAS,CAAC,GAA2B,CAAC,KAAK,SAAS,CAAC,WAAmC,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6C,CAAC;IACpE,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI;YACjB,eAAe,MAAM,CAAC,aAAa,EAAE;YACrC,aAAa,MAAM,CAAC,WAAW,EAAE;YACjC,YAAY,MAAM,CAAC,QAAQ,EAAE;SAC7B,EAAE,CAAC;YACH,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC9G,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC;aAChF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,MAAM,CAAC,mBAAmB,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACzD,CAAC;QACF,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAC9B,CAAC;YACL,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACpC,MAAM,KAAK,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC;QACxC,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EACL,QAAQ,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM;gBACP,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBACnB,CAAC,CAAC,cAAc;oBAChB,CAAC,CAAC,QAAQ;QACd,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KACvC,CAAC,CAAC;AAAA,CACH","sourcesContent":["import type { StrictEvidenceReport, StrictEvidenceSnapshot } from \"./strict-evidence-types.ts\";\nimport { parseStrictEvidenceSnapshot } from \"./strict-evidence-validation.ts\";\nimport type { ExecutionAttempt, JsonValue, Observation } from \"./types.ts\";\n\nfunction canonical(value: JsonValue): string {\n\tif (Array.isArray(value)) return `[${value.map(canonical).join(\",\")}]`;\n\tif (value !== null && typeof value === \"object\") {\n\t\treturn `{${Object.keys(value)\n\t\t\t.sort()\n\t\t\t.map((key) => `${JSON.stringify(key)}:${canonical((value as { readonly [key: string]: JsonValue })[key])}`)\n\t\t\t.join(\",\")}}`;\n\t}\n\treturn JSON.stringify(value);\n}\n\n/** Structural/integrity reduction only. The caller owns admission and snapshot completeness. */\nexport function evaluateStrictEvidence(\n\tvalue: StrictEvidenceSnapshot,\n\tobservations: readonly Observation[],\n\tattempt: ExecutionAttempt,\n): Omit<StrictEvidenceReport, \"acceptance\"> {\n\tconst snapshot = parseStrictEvidenceSnapshot(value);\n\tconst bindingKey = JSON.stringify(snapshot.binding);\n\tif (snapshot.binding.taskId !== attempt.taskId || snapshot.binding.candidateHash !== attempt.candidateHash) {\n\t\tthrow new Error(\"Strict evidence binding does not match attempt\");\n\t}\n\tconst byId = new Map<string, Observation>();\n\tfor (const observation of observations) {\n\t\tconst old = byId.get(observation.observationId);\n\t\tif (old && canonical(old as unknown as JsonValue) !== canonical(observation as unknown as JsonValue)) {\n\t\t\tthrow new Error(\"Conflicting observation identity\");\n\t\t}\n\t\tbyId.set(observation.observationId, observation);\n\t}\n\tconst identities = new Map<string, string>();\n\tconst unique = new Map<string, (typeof snapshot.results)[number]>();\n\tfor (const result of snapshot.results) {\n\t\tconst payload = JSON.stringify(result);\n\t\tfor (const key of [\n\t\t\t`observation:${result.observationId}`,\n\t\t\t`execution:${result.executionId}`,\n\t\t\t`sequence:${result.sequence}`,\n\t\t]) {\n\t\t\tconst old = identities.get(key);\n\t\t\tif (old !== undefined && old !== payload) throw new Error(\"Conflicting strict evidence identity or sequence\");\n\t\t\tidentities.set(key, payload);\n\t\t}\n\t\tconst observation = byId.get(result.observationId);\n\t\tif (!observation) throw new Error(\"Strict completion references missing observation\");\n\t\tconst candidate = observation.facts.candidate;\n\t\tif (typeof candidate === \"string\" && candidate !== result.binding.candidateHash) {\n\t\t\tthrow new Error(\"Strict evidence binding disagrees with observation candidate\");\n\t\t}\n\t\tunique.set(result.observationId, result);\n\t}\n\tconst selected: string[] = [];\n\tconst missing: string[] = [];\n\tlet failed = false;\n\tfor (const checkId of [...snapshot.requiredCheckIds].sort()) {\n\t\tconst history = [...unique.values()]\n\t\t\t.filter((r) => r.checkId === checkId && JSON.stringify(r.binding) === bindingKey)\n\t\t\t.sort((a, b) => a.sequence - b.sequence);\n\t\tfor (const [index, result] of history.entries()) {\n\t\t\tif (result.previousExecutionId !== (index === 0 ? null : history[index - 1].executionId)) {\n\t\t\t\tthrow new Error(\"Broken strict evidence attempt chain\");\n\t\t\t}\n\t\t}\n\t\tconst latest = history.at(-1);\n\t\tif (!latest) missing.push(checkId);\n\t\telse {\n\t\t\tselected.push(latest.observationId);\n\t\t\tfailed ||= latest.verdict === \"failed\";\n\t\t}\n\t}\n\treturn Object.freeze({\n\t\tpolicy: snapshot.policy,\n\t\tstatus:\n\t\t\tsnapshot.pendingExecutionIds.length > 0\n\t\t\t\t? \"pending\"\n\t\t\t\t: failed\n\t\t\t\t\t? \"violated\"\n\t\t\t\t\t: missing.length > 0\n\t\t\t\t\t\t? \"inconclusive\"\n\t\t\t\t\t\t: \"passed\",\n\t\tobservationIds: Object.freeze(selected.sort()),\n\t\tmissingCheckIds: Object.freeze(missing),\n\t});\n}\n"]}

package/dist/types.d.ts

@@ -1,3 +1,4 @@
+import type { StrictEvidenceReport, StrictEvidenceSnapshot } from "./strict-evidence-types.ts";
 export declare const PROTOCOL_VERSION: "omk.run.v1";
 export type ProtocolVersion = typeof PROTOCOL_VERSION;
 export type JsonPrimitive = boolean | number | string | null;
@@ -14,6 +15,13 @@ export interface ObservationCondition {
     readonly observationKind: string;
     readonly scope: "attempt" | "task";
     readonly facts: JsonObject;
+    /**
+     * When `"candidate"`, the observation must additionally carry
+     * `facts.candidate` equal to the evaluated attempt's `candidateHash` —
+     * a pass observed for a different candidate can never satisfy the claim.
+     * Requires the attempt to declare `candidateHash`.
+     */
+    readonly bindToCandidate?: boolean;
 }
 export interface AllCondition {
     readonly kind: "all";
@@ -69,6 +77,13 @@ export interface ExecutionAttempt {
     readonly finishedAt: string;
     readonly executor: AttemptExecutor;
     readonly outcome: AttemptOutcome;
+    /**
+     * Hash identifying the candidate (source tree / artifact) this attempt ran
+     * against. When set, `scope: "task"` observations recorded for a different
+     * candidate do not satisfy conditions of this attempt's evaluation —
+     * evidence stays bound to the candidate it was produced for.
+     */
+    readonly candidateHash?: string;
 }
 /** Immutable execution facts. Semantic pass/fail belongs only in ClaimEvaluation. */
 export interface Observation {
@@ -109,6 +124,7 @@ export interface ClaimEvaluation {
     readonly waiverId?: string;
 }
 export interface EvaluationResult {
+    readonly strictEvidence?: StrictEvidenceReport;
     readonly schemaVersion: ProtocolVersion;
     readonly evaluationId: string;
     readonly taskId: string;
@@ -118,6 +134,8 @@ export interface EvaluationResult {
     readonly semanticVerdict: SemanticVerdict;
 }
 export interface EvaluationInput {
+    /** Host-admitted snapshot only; omitted preserves historical exists semantics and wire shape. */
+    readonly strictEvidence?: StrictEvidenceSnapshot;
     readonly evaluationId: string;
     readonly evaluatedAt: string;
     readonly taskSpec: TaskSpec;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,cAAwB,CAAC;AAEtD,MAAM,MAAM,eAAe,GAAG,OAAO,gBAAgB,CAAC;AACtD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,SAAS,EAAE,CAAC;AAC1E,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,UAAU,CAAC;AACvD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,CAAC;AAC/D,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,CAAC;AACpE,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;CACnC;AAED,MAAM,MAAM,cAAc,GAAG,oBAAoB,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,CAAC;AAE/F,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;CACnC;AAED,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;CAC3C;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEzE,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,yFAAyF;AACzF,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CACjC;AAED,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,MAAM,eAAe,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,2BAA2B,CAAC;AAEjG,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;CAC1C;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC;CACvC;AAED,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,yBAAyB,CAAC;AAEtG,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACvC","sourcesContent":["export const PROTOCOL_VERSION = \"omk.run.v1\" as const;\n\nexport type ProtocolVersion = typeof PROTOCOL_VERSION;\nexport type JsonPrimitive = boolean | number | string | null;\nexport type JsonValue = JsonPrimitive | JsonObject | readonly JsonValue[];\nexport interface JsonObject {\n\treadonly [key: string]: JsonValue;\n}\n\nexport type RequirementLevel = \"required\" | \"advisory\";\nexport type SemanticVerdict = \"pass\" | \"fail\" | \"inconclusive\";\nexport type ClaimResult = \"satisfied\" | \"violated\" | \"inconclusive\";\nexport type RuntimeAction = \"continue\" | \"retry\" | \"failover\" | \"stop\";\n\nexport interface ObservationCondition {\n\treadonly kind: \"observation\";\n\treadonly observationKind: string;\n\treadonly scope: \"attempt\" | \"task\";\n\treadonly facts: JsonObject;\n}\n\nexport interface AllCondition {\n\treadonly kind: \"all\";\n\treadonly conditions: readonly ClaimCondition[];\n}\n\nexport interface AnyCondition {\n\treadonly kind: \"any\";\n\treadonly conditions: readonly ClaimCondition[];\n}\n\nexport interface NotCondition {\n\treadonly kind: \"not\";\n\treadonly condition: ClaimCondition;\n}\n\nexport type ClaimCondition = ObservationCondition | AllCondition | AnyCondition | NotCondition;\n\nexport interface ClaimPredicate {\n\treadonly claimId: string;\n\treadonly statement: string;\n\treadonly requirement: RequirementLevel;\n\treadonly condition: ClaimCondition;\n}\n\nexport interface TaskSpec {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly taskId: string;\n\treadonly goal: string;\n\treadonly createdAt: string;\n\treadonly claims: readonly ClaimPredicate[];\n}\n\nexport type AttemptTrigger = \"initial\" | \"retry\" | \"failover\" | \"resume\";\n\nexport interface AttemptExecutor {\n\treadonly kind: string;\n\treadonly provider?: string;\n\treadonly model?: string;\n}\n\nexport type AttemptOutcome =\n\t| { readonly kind: \"completed\" }\n\t| { readonly kind: \"failed\"; readonly code: string; readonly message?: string }\n\t| { readonly kind: \"cancelled\"; readonly code: string };\n\n/** One completed execution. Retry and failover counts are derived from these records. */\nexport interface ExecutionAttempt {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly attemptId: string;\n\treadonly taskId: string;\n\treadonly sequence: number;\n\treadonly trigger: AttemptTrigger;\n\treadonly previousAttemptId?: string;\n\treadonly startedAt: string;\n\treadonly finishedAt: string;\n\treadonly executor: AttemptExecutor;\n\treadonly outcome: AttemptOutcome;\n}\n\n/** Immutable execution facts. Semantic pass/fail belongs only in ClaimEvaluation. */\nexport interface Observation {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly observationId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly observedAt: string;\n\treadonly kind: string;\n\treadonly source: {\n\t\treadonly kind: string;\n\t\treadonly id: string;\n\t};\n\treadonly facts: JsonObject;\n\treadonly evidenceRefs: readonly string[];\n}\n\nexport interface WaiverRecord {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly waiverId: string;\n\treadonly scope: {\n\t\treadonly taskId: string;\n\t\treadonly claimId: string;\n\t\treadonly attemptId?: string;\n\t};\n\treadonly approvedBy: string;\n\treadonly approvedAt: string;\n\treadonly expiresAt?: string;\n\treadonly rationale: string;\n\treadonly evidenceRefs: readonly string[];\n}\n\nexport type ClaimReasonCode = \"claim.satisfied\" | \"claim.violated\" | \"claim.observation_missing\";\n\nexport interface ClaimEvaluation {\n\treadonly claimId: string;\n\treadonly requirement: RequirementLevel;\n\treadonly result: ClaimResult;\n\treadonly reasonCode: ClaimReasonCode;\n\treadonly observationIds: readonly string[];\n\treadonly waiverId?: string;\n}\n\nexport interface EvaluationResult {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly evaluationId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly evaluatedAt: string;\n\treadonly claims: readonly ClaimEvaluation[];\n\treadonly semanticVerdict: SemanticVerdict;\n}\n\nexport interface EvaluationInput {\n\treadonly evaluationId: string;\n\treadonly evaluatedAt: string;\n\treadonly taskSpec: TaskSpec;\n\treadonly attempt: ExecutionAttempt;\n\treadonly observations: readonly Observation[];\n\treadonly waivers?: readonly WaiverRecord[];\n}\n\nexport interface RuntimeDecisionPolicy {\n\treadonly onFail: RuntimeAction;\n\treadonly onInconclusive: RuntimeAction;\n}\n\nexport type RuntimeDecisionReason = \"evaluation.pass\" | \"evaluation.fail\" | \"evaluation.inconclusive\";\n\nexport interface RuntimeDecision {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly decisionId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly evaluationId: string;\n\treadonly decidedAt: string;\n\treadonly action: RuntimeAction;\n\treadonly reasonCode: RuntimeDecisionReason;\n}\n\nexport interface RuntimeDecisionInput {\n\treadonly decisionId: string;\n\treadonly decidedAt: string;\n\treadonly evaluation: EvaluationResult;\n\treadonly policy: RuntimeDecisionPolicy;\n}\n"]}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE/F,eAAO,MAAM,gBAAgB,cAAwB,CAAC;AAEtD,MAAM,MAAM,eAAe,GAAG,OAAO,gBAAgB,CAAC;AACtD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,SAAS,EAAE,CAAC;AAC1E,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,UAAU,CAAC;AACvD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,CAAC;AAC/D,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,CAAC;AACpE,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;CACnC;AAED,MAAM,MAAM,cAAc,GAAG,oBAAoB,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,CAAC;AAE/F,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;CACnC;AAED,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;CAC3C;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEzE,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,yFAAyF;AACzF,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,MAAM,eAAe,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,2BAA2B,CAAC;AAEjG,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;CAC1C;AAED,MAAM,WAAW,eAAe;IAC/B,iGAAiG;IACjG,QAAQ,CAAC,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC;CACvC;AAED,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,yBAAyB,CAAC;AAEtG,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACvC","sourcesContent":["import type { StrictEvidenceReport, StrictEvidenceSnapshot } from \"./strict-evidence-types.ts\";\n\nexport const PROTOCOL_VERSION = \"omk.run.v1\" as const;\n\nexport type ProtocolVersion = typeof PROTOCOL_VERSION;\nexport type JsonPrimitive = boolean | number | string | null;\nexport type JsonValue = JsonPrimitive | JsonObject | readonly JsonValue[];\nexport interface JsonObject {\n\treadonly [key: string]: JsonValue;\n}\n\nexport type RequirementLevel = \"required\" | \"advisory\";\nexport type SemanticVerdict = \"pass\" | \"fail\" | \"inconclusive\";\nexport type ClaimResult = \"satisfied\" | \"violated\" | \"inconclusive\";\nexport type RuntimeAction = \"continue\" | \"retry\" | \"failover\" | \"stop\";\n\nexport interface ObservationCondition {\n\treadonly kind: \"observation\";\n\treadonly observationKind: string;\n\treadonly scope: \"attempt\" | \"task\";\n\treadonly facts: JsonObject;\n\t/**\n\t * When `\"candidate\"`, the observation must additionally carry\n\t * `facts.candidate` equal to the evaluated attempt's `candidateHash` —\n\t * a pass observed for a different candidate can never satisfy the claim.\n\t * Requires the attempt to declare `candidateHash`.\n\t */\n\treadonly bindToCandidate?: boolean;\n}\n\nexport interface AllCondition {\n\treadonly kind: \"all\";\n\treadonly conditions: readonly ClaimCondition[];\n}\n\nexport interface AnyCondition {\n\treadonly kind: \"any\";\n\treadonly conditions: readonly ClaimCondition[];\n}\n\nexport interface NotCondition {\n\treadonly kind: \"not\";\n\treadonly condition: ClaimCondition;\n}\n\nexport type ClaimCondition = ObservationCondition | AllCondition | AnyCondition | NotCondition;\n\nexport interface ClaimPredicate {\n\treadonly claimId: string;\n\treadonly statement: string;\n\treadonly requirement: RequirementLevel;\n\treadonly condition: ClaimCondition;\n}\n\nexport interface TaskSpec {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly taskId: string;\n\treadonly goal: string;\n\treadonly createdAt: string;\n\treadonly claims: readonly ClaimPredicate[];\n}\n\nexport type AttemptTrigger = \"initial\" | \"retry\" | \"failover\" | \"resume\";\n\nexport interface AttemptExecutor {\n\treadonly kind: string;\n\treadonly provider?: string;\n\treadonly model?: string;\n}\n\nexport type AttemptOutcome =\n\t| { readonly kind: \"completed\" }\n\t| { readonly kind: \"failed\"; readonly code: string; readonly message?: string }\n\t| { readonly kind: \"cancelled\"; readonly code: string };\n\n/** One completed execution. Retry and failover counts are derived from these records. */\nexport interface ExecutionAttempt {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly attemptId: string;\n\treadonly taskId: string;\n\treadonly sequence: number;\n\treadonly trigger: AttemptTrigger;\n\treadonly previousAttemptId?: string;\n\treadonly startedAt: string;\n\treadonly finishedAt: string;\n\treadonly executor: AttemptExecutor;\n\treadonly outcome: AttemptOutcome;\n\t/**\n\t * Hash identifying the candidate (source tree / artifact) this attempt ran\n\t * against. When set, `scope: \"task\"` observations recorded for a different\n\t * candidate do not satisfy conditions of this attempt's evaluation —\n\t * evidence stays bound to the candidate it was produced for.\n\t */\n\treadonly candidateHash?: string;\n}\n\n/** Immutable execution facts. Semantic pass/fail belongs only in ClaimEvaluation. */\nexport interface Observation {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly observationId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly observedAt: string;\n\treadonly kind: string;\n\treadonly source: {\n\t\treadonly kind: string;\n\t\treadonly id: string;\n\t};\n\treadonly facts: JsonObject;\n\treadonly evidenceRefs: readonly string[];\n}\n\nexport interface WaiverRecord {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly waiverId: string;\n\treadonly scope: {\n\t\treadonly taskId: string;\n\t\treadonly claimId: string;\n\t\treadonly attemptId?: string;\n\t};\n\treadonly approvedBy: string;\n\treadonly approvedAt: string;\n\treadonly expiresAt?: string;\n\treadonly rationale: string;\n\treadonly evidenceRefs: readonly string[];\n}\n\nexport type ClaimReasonCode = \"claim.satisfied\" | \"claim.violated\" | \"claim.observation_missing\";\n\nexport interface ClaimEvaluation {\n\treadonly claimId: string;\n\treadonly requirement: RequirementLevel;\n\treadonly result: ClaimResult;\n\treadonly reasonCode: ClaimReasonCode;\n\treadonly observationIds: readonly string[];\n\treadonly waiverId?: string;\n}\n\nexport interface EvaluationResult {\n\treadonly strictEvidence?: StrictEvidenceReport;\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly evaluationId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly evaluatedAt: string;\n\treadonly claims: readonly ClaimEvaluation[];\n\treadonly semanticVerdict: SemanticVerdict;\n}\n\nexport interface EvaluationInput {\n\t/** Host-admitted snapshot only; omitted preserves historical exists semantics and wire shape. */\n\treadonly strictEvidence?: StrictEvidenceSnapshot;\n\treadonly evaluationId: string;\n\treadonly evaluatedAt: string;\n\treadonly taskSpec: TaskSpec;\n\treadonly attempt: ExecutionAttempt;\n\treadonly observations: readonly Observation[];\n\treadonly waivers?: readonly WaiverRecord[];\n}\n\nexport interface RuntimeDecisionPolicy {\n\treadonly onFail: RuntimeAction;\n\treadonly onInconclusive: RuntimeAction;\n}\n\nexport type RuntimeDecisionReason = \"evaluation.pass\" | \"evaluation.fail\" | \"evaluation.inconclusive\";\n\nexport interface RuntimeDecision {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly decisionId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly evaluationId: string;\n\treadonly decidedAt: string;\n\treadonly action: RuntimeAction;\n\treadonly reasonCode: RuntimeDecisionReason;\n}\n\nexport interface RuntimeDecisionInput {\n\treadonly decisionId: string;\n\treadonly decidedAt: string;\n\treadonly evaluation: EvaluationResult;\n\treadonly policy: RuntimeDecisionPolicy;\n}\n"]}

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAqB,CAAC","sourcesContent":["export const PROTOCOL_VERSION = \"omk.run.v1\" as const;\n\nexport type ProtocolVersion = typeof PROTOCOL_VERSION;\nexport type JsonPrimitive = boolean | number | string | null;\nexport type JsonValue = JsonPrimitive | JsonObject | readonly JsonValue[];\nexport interface JsonObject {\n\treadonly [key: string]: JsonValue;\n}\n\nexport type RequirementLevel = \"required\" | \"advisory\";\nexport type SemanticVerdict = \"pass\" | \"fail\" | \"inconclusive\";\nexport type ClaimResult = \"satisfied\" | \"violated\" | \"inconclusive\";\nexport type RuntimeAction = \"continue\" | \"retry\" | \"failover\" | \"stop\";\n\nexport interface ObservationCondition {\n\treadonly kind: \"observation\";\n\treadonly observationKind: string;\n\treadonly scope: \"attempt\" | \"task\";\n\treadonly facts: JsonObject;\n}\n\nexport interface AllCondition {\n\treadonly kind: \"all\";\n\treadonly conditions: readonly ClaimCondition[];\n}\n\nexport interface AnyCondition {\n\treadonly kind: \"any\";\n\treadonly conditions: readonly ClaimCondition[];\n}\n\nexport interface NotCondition {\n\treadonly kind: \"not\";\n\treadonly condition: ClaimCondition;\n}\n\nexport type ClaimCondition = ObservationCondition | AllCondition | AnyCondition | NotCondition;\n\nexport interface ClaimPredicate {\n\treadonly claimId: string;\n\treadonly statement: string;\n\treadonly requirement: RequirementLevel;\n\treadonly condition: ClaimCondition;\n}\n\nexport interface TaskSpec {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly taskId: string;\n\treadonly goal: string;\n\treadonly createdAt: string;\n\treadonly claims: readonly ClaimPredicate[];\n}\n\nexport type AttemptTrigger = \"initial\" | \"retry\" | \"failover\" | \"resume\";\n\nexport interface AttemptExecutor {\n\treadonly kind: string;\n\treadonly provider?: string;\n\treadonly model?: string;\n}\n\nexport type AttemptOutcome =\n\t| { readonly kind: \"completed\" }\n\t| { readonly kind: \"failed\"; readonly code: string; readonly message?: string }\n\t| { readonly kind: \"cancelled\"; readonly code: string };\n\n/** One completed execution. Retry and failover counts are derived from these records. */\nexport interface ExecutionAttempt {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly attemptId: string;\n\treadonly taskId: string;\n\treadonly sequence: number;\n\treadonly trigger: AttemptTrigger;\n\treadonly previousAttemptId?: string;\n\treadonly startedAt: string;\n\treadonly finishedAt: string;\n\treadonly executor: AttemptExecutor;\n\treadonly outcome: AttemptOutcome;\n}\n\n/** Immutable execution facts. Semantic pass/fail belongs only in ClaimEvaluation. */\nexport interface Observation {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly observationId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly observedAt: string;\n\treadonly kind: string;\n\treadonly source: {\n\t\treadonly kind: string;\n\t\treadonly id: string;\n\t};\n\treadonly facts: JsonObject;\n\treadonly evidenceRefs: readonly string[];\n}\n\nexport interface WaiverRecord {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly waiverId: string;\n\treadonly scope: {\n\t\treadonly taskId: string;\n\t\treadonly claimId: string;\n\t\treadonly attemptId?: string;\n\t};\n\treadonly approvedBy: string;\n\treadonly approvedAt: string;\n\treadonly expiresAt?: string;\n\treadonly rationale: string;\n\treadonly evidenceRefs: readonly string[];\n}\n\nexport type ClaimReasonCode = \"claim.satisfied\" | \"claim.violated\" | \"claim.observation_missing\";\n\nexport interface ClaimEvaluation {\n\treadonly claimId: string;\n\treadonly requirement: RequirementLevel;\n\treadonly result: ClaimResult;\n\treadonly reasonCode: ClaimReasonCode;\n\treadonly observationIds: readonly string[];\n\treadonly waiverId?: string;\n}\n\nexport interface EvaluationResult {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly evaluationId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly evaluatedAt: string;\n\treadonly claims: readonly ClaimEvaluation[];\n\treadonly semanticVerdict: SemanticVerdict;\n}\n\nexport interface EvaluationInput {\n\treadonly evaluationId: string;\n\treadonly evaluatedAt: string;\n\treadonly taskSpec: TaskSpec;\n\treadonly attempt: ExecutionAttempt;\n\treadonly observations: readonly Observation[];\n\treadonly waivers?: readonly WaiverRecord[];\n}\n\nexport interface RuntimeDecisionPolicy {\n\treadonly onFail: RuntimeAction;\n\treadonly onInconclusive: RuntimeAction;\n}\n\nexport type RuntimeDecisionReason = \"evaluation.pass\" | \"evaluation.fail\" | \"evaluation.inconclusive\";\n\nexport interface RuntimeDecision {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly decisionId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly evaluationId: string;\n\treadonly decidedAt: string;\n\treadonly action: RuntimeAction;\n\treadonly reasonCode: RuntimeDecisionReason;\n}\n\nexport interface RuntimeDecisionInput {\n\treadonly decisionId: string;\n\treadonly decidedAt: string;\n\treadonly evaluation: EvaluationResult;\n\treadonly policy: RuntimeDecisionPolicy;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAqB,CAAC","sourcesContent":["import type { StrictEvidenceReport, StrictEvidenceSnapshot } from \"./strict-evidence-types.ts\";\n\nexport const PROTOCOL_VERSION = \"omk.run.v1\" as const;\n\nexport type ProtocolVersion = typeof PROTOCOL_VERSION;\nexport type JsonPrimitive = boolean | number | string | null;\nexport type JsonValue = JsonPrimitive | JsonObject | readonly JsonValue[];\nexport interface JsonObject {\n\treadonly [key: string]: JsonValue;\n}\n\nexport type RequirementLevel = \"required\" | \"advisory\";\nexport type SemanticVerdict = \"pass\" | \"fail\" | \"inconclusive\";\nexport type ClaimResult = \"satisfied\" | \"violated\" | \"inconclusive\";\nexport type RuntimeAction = \"continue\" | \"retry\" | \"failover\" | \"stop\";\n\nexport interface ObservationCondition {\n\treadonly kind: \"observation\";\n\treadonly observationKind: string;\n\treadonly scope: \"attempt\" | \"task\";\n\treadonly facts: JsonObject;\n\t/**\n\t * When `\"candidate\"`, the observation must additionally carry\n\t * `facts.candidate` equal to the evaluated attempt's `candidateHash` —\n\t * a pass observed for a different candidate can never satisfy the claim.\n\t * Requires the attempt to declare `candidateHash`.\n\t */\n\treadonly bindToCandidate?: boolean;\n}\n\nexport interface AllCondition {\n\treadonly kind: \"all\";\n\treadonly conditions: readonly ClaimCondition[];\n}\n\nexport interface AnyCondition {\n\treadonly kind: \"any\";\n\treadonly conditions: readonly ClaimCondition[];\n}\n\nexport interface NotCondition {\n\treadonly kind: \"not\";\n\treadonly condition: ClaimCondition;\n}\n\nexport type ClaimCondition = ObservationCondition | AllCondition | AnyCondition | NotCondition;\n\nexport interface ClaimPredicate {\n\treadonly claimId: string;\n\treadonly statement: string;\n\treadonly requirement: RequirementLevel;\n\treadonly condition: ClaimCondition;\n}\n\nexport interface TaskSpec {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly taskId: string;\n\treadonly goal: string;\n\treadonly createdAt: string;\n\treadonly claims: readonly ClaimPredicate[];\n}\n\nexport type AttemptTrigger = \"initial\" | \"retry\" | \"failover\" | \"resume\";\n\nexport interface AttemptExecutor {\n\treadonly kind: string;\n\treadonly provider?: string;\n\treadonly model?: string;\n}\n\nexport type AttemptOutcome =\n\t| { readonly kind: \"completed\" }\n\t| { readonly kind: \"failed\"; readonly code: string; readonly message?: string }\n\t| { readonly kind: \"cancelled\"; readonly code: string };\n\n/** One completed execution. Retry and failover counts are derived from these records. */\nexport interface ExecutionAttempt {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly attemptId: string;\n\treadonly taskId: string;\n\treadonly sequence: number;\n\treadonly trigger: AttemptTrigger;\n\treadonly previousAttemptId?: string;\n\treadonly startedAt: string;\n\treadonly finishedAt: string;\n\treadonly executor: AttemptExecutor;\n\treadonly outcome: AttemptOutcome;\n\t/**\n\t * Hash identifying the candidate (source tree / artifact) this attempt ran\n\t * against. When set, `scope: \"task\"` observations recorded for a different\n\t * candidate do not satisfy conditions of this attempt's evaluation —\n\t * evidence stays bound to the candidate it was produced for.\n\t */\n\treadonly candidateHash?: string;\n}\n\n/** Immutable execution facts. Semantic pass/fail belongs only in ClaimEvaluation. */\nexport interface Observation {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly observationId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly observedAt: string;\n\treadonly kind: string;\n\treadonly source: {\n\t\treadonly kind: string;\n\t\treadonly id: string;\n\t};\n\treadonly facts: JsonObject;\n\treadonly evidenceRefs: readonly string[];\n}\n\nexport interface WaiverRecord {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly waiverId: string;\n\treadonly scope: {\n\t\treadonly taskId: string;\n\t\treadonly claimId: string;\n\t\treadonly attemptId?: string;\n\t};\n\treadonly approvedBy: string;\n\treadonly approvedAt: string;\n\treadonly expiresAt?: string;\n\treadonly rationale: string;\n\treadonly evidenceRefs: readonly string[];\n}\n\nexport type ClaimReasonCode = \"claim.satisfied\" | \"claim.violated\" | \"claim.observation_missing\";\n\nexport interface ClaimEvaluation {\n\treadonly claimId: string;\n\treadonly requirement: RequirementLevel;\n\treadonly result: ClaimResult;\n\treadonly reasonCode: ClaimReasonCode;\n\treadonly observationIds: readonly string[];\n\treadonly waiverId?: string;\n}\n\nexport interface EvaluationResult {\n\treadonly strictEvidence?: StrictEvidenceReport;\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly evaluationId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly evaluatedAt: string;\n\treadonly claims: readonly ClaimEvaluation[];\n\treadonly semanticVerdict: SemanticVerdict;\n}\n\nexport interface EvaluationInput {\n\t/** Host-admitted snapshot only; omitted preserves historical exists semantics and wire shape. */\n\treadonly strictEvidence?: StrictEvidenceSnapshot;\n\treadonly evaluationId: string;\n\treadonly evaluatedAt: string;\n\treadonly taskSpec: TaskSpec;\n\treadonly attempt: ExecutionAttempt;\n\treadonly observations: readonly Observation[];\n\treadonly waivers?: readonly WaiverRecord[];\n}\n\nexport interface RuntimeDecisionPolicy {\n\treadonly onFail: RuntimeAction;\n\treadonly onInconclusive: RuntimeAction;\n}\n\nexport type RuntimeDecisionReason = \"evaluation.pass\" | \"evaluation.fail\" | \"evaluation.inconclusive\";\n\nexport interface RuntimeDecision {\n\treadonly schemaVersion: ProtocolVersion;\n\treadonly decisionId: string;\n\treadonly taskId: string;\n\treadonly attemptId: string;\n\treadonly evaluationId: string;\n\treadonly decidedAt: string;\n\treadonly action: RuntimeAction;\n\treadonly reasonCode: RuntimeDecisionReason;\n}\n\nexport interface RuntimeDecisionInput {\n\treadonly decisionId: string;\n\treadonly decidedAt: string;\n\treadonly evaluation: EvaluationResult;\n\treadonly policy: RuntimeDecisionPolicy;\n}\n"]}

package/dist/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EAGrB,KAAK,WAAW,EAEhB,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,MAAM,YAAY,CAAC;AAKpB,qBAAa,uBAAwB,SAAQ,KAAK;IACjD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AAkFD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAoBtD;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CA6BtE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAc5D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAc9D;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CA2BtE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAepE","sourcesContent":["import {\n\ttype ClaimCondition,\n\ttype EvaluationResult,\n\ttype ExecutionAttempt,\n\ttype JsonObject,\n\ttype JsonValue,\n\ttype Observation,\n\tPROTOCOL_VERSION,\n\ttype RuntimeDecision,\n\ttype TaskSpec,\n\ttype WaiverRecord,\n} from \"./types.ts\";\n\nconst ISO_TIMESTAMP = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\nconst MAX_CONDITION_DEPTH = 32;\n\nexport class ProtocolValidationError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProtocolValidationError\";\n\t}\n}\n\nfunction record(value: unknown, path: string): Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new ProtocolValidationError(`${path} must be an object`);\n\t}\n\treturn value as Record<string, unknown>;\n}\n\nfunction string(value: unknown, path: string): string {\n\tif (typeof value !== \"string\" || value.trim().length === 0) {\n\t\tthrow new ProtocolValidationError(`${path} must be a non-empty string`);\n\t}\n\treturn value;\n}\n\nfunction timestamp(value: unknown, path: string): string {\n\tconst parsed = string(value, path);\n\tif (!ISO_TIMESTAMP.test(parsed) || Number.isNaN(Date.parse(parsed))) {\n\t\tthrow new ProtocolValidationError(`${path} must be an ISO 8601 UTC timestamp`);\n\t}\n\treturn parsed;\n}\n\nfunction version(value: Record<string, unknown>, path: string): void {\n\tif (value.schemaVersion !== PROTOCOL_VERSION) {\n\t\tthrow new ProtocolValidationError(`${path}.schemaVersion must be ${PROTOCOL_VERSION}`);\n\t}\n}\n\nfunction stringArray(value: unknown, path: string): readonly string[] {\n\tif (!Array.isArray(value)) throw new ProtocolValidationError(`${path} must be an array`);\n\treturn value.map((item, index) => string(item, `${path}[${index}]`));\n}\n\nfunction jsonValue(value: unknown, path: string, depth = 0): asserts value is JsonValue {\n\tif (depth > MAX_CONDITION_DEPTH) throw new ProtocolValidationError(`${path} exceeds maximum nesting depth`);\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") return;\n\tif (typeof value === \"number\" && Number.isFinite(value)) return;\n\tif (Array.isArray(value)) {\n\t\tvalue.forEach((item, index) => {\n\t\t\tjsonValue(item, `${path}[${index}]`, depth + 1);\n\t\t});\n\t\treturn;\n\t}\n\tconst object = record(value, path);\n\tfor (const [key, item] of Object.entries(object)) jsonValue(item, `${path}.${key}`, depth + 1);\n}\n\nfunction jsonObject(value: unknown, path: string): asserts value is JsonObject {\n\trecord(value, path);\n\tjsonValue(value, path);\n}\n\nfunction condition(value: unknown, path: string, depth = 0): asserts value is ClaimCondition {\n\tif (depth > MAX_CONDITION_DEPTH) throw new ProtocolValidationError(`${path} exceeds maximum nesting depth`);\n\tconst input = record(value, path);\n\tswitch (input.kind) {\n\t\tcase \"observation\":\n\t\t\tstring(input.observationKind, `${path}.observationKind`);\n\t\t\tif (input.scope !== \"attempt\" && input.scope !== \"task\") {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.scope must be attempt or task`);\n\t\t\t}\n\t\t\tjsonObject(input.facts, `${path}.facts`);\n\t\t\treturn;\n\t\tcase \"all\":\n\t\tcase \"any\":\n\t\t\tif (!Array.isArray(input.conditions) || input.conditions.length === 0) {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.conditions must be a non-empty array`);\n\t\t\t}\n\t\t\tinput.conditions.forEach((item, index) => {\n\t\t\t\tcondition(item, `${path}.conditions[${index}]`, depth + 1);\n\t\t\t});\n\t\t\treturn;\n\t\tcase \"not\":\n\t\t\tcondition(input.condition, `${path}.condition`, depth + 1);\n\t\t\treturn;\n\t\tdefault:\n\t\t\tthrow new ProtocolValidationError(`${path}.kind is unsupported`);\n\t}\n}\n\nexport function parseTaskSpec(value: unknown): TaskSpec {\n\tconst input = record(value, \"taskSpec\");\n\tversion(input, \"taskSpec\");\n\tstring(input.taskId, \"taskSpec.taskId\");\n\tstring(input.goal, \"taskSpec.goal\");\n\ttimestamp(input.createdAt, \"taskSpec.createdAt\");\n\tif (!Array.isArray(input.claims)) throw new ProtocolValidationError(\"taskSpec.claims must be an array\");\n\tconst claimIds = new Set<string>();\n\tfor (const [index, rawClaim] of input.claims.entries()) {\n\t\tconst claim = record(rawClaim, `taskSpec.claims[${index}]`);\n\t\tconst claimId = string(claim.claimId, `taskSpec.claims[${index}].claimId`);\n\t\tif (claimIds.has(claimId)) throw new ProtocolValidationError(`duplicate claimId ${claimId}`);\n\t\tclaimIds.add(claimId);\n\t\tstring(claim.statement, `taskSpec.claims[${index}].statement`);\n\t\tif (claim.requirement !== \"required\" && claim.requirement !== \"advisory\") {\n\t\t\tthrow new ProtocolValidationError(`taskSpec.claims[${index}].requirement is unsupported`);\n\t\t}\n\t\tcondition(claim.condition, `taskSpec.claims[${index}].condition`);\n\t}\n\treturn value as TaskSpec;\n}\n\nexport function parseExecutionAttempt(value: unknown): ExecutionAttempt {\n\tconst input = record(value, \"attempt\");\n\tversion(input, \"attempt\");\n\tstring(input.attemptId, \"attempt.attemptId\");\n\tstring(input.taskId, \"attempt.taskId\");\n\tif (!Number.isSafeInteger(input.sequence) || (input.sequence as number) < 1) {\n\t\tthrow new ProtocolValidationError(\"attempt.sequence must be a positive integer\");\n\t}\n\tif (![\"initial\", \"retry\", \"failover\", \"resume\"].includes(input.trigger as string)) {\n\t\tthrow new ProtocolValidationError(\"attempt.trigger is unsupported\");\n\t}\n\tif (input.previousAttemptId !== undefined) string(input.previousAttemptId, \"attempt.previousAttemptId\");\n\tconst startedAt = timestamp(input.startedAt, \"attempt.startedAt\");\n\tconst finishedAt = timestamp(input.finishedAt, \"attempt.finishedAt\");\n\tif (finishedAt < startedAt) throw new ProtocolValidationError(\"attempt.finishedAt precedes startedAt\");\n\tconst executor = record(input.executor, \"attempt.executor\");\n\tstring(executor.kind, \"attempt.executor.kind\");\n\tif (executor.provider !== undefined) string(executor.provider, \"attempt.executor.provider\");\n\tif (executor.model !== undefined) string(executor.model, \"attempt.executor.model\");\n\tconst outcome = record(input.outcome, \"attempt.outcome\");\n\tif (outcome.kind === \"failed\") {\n\t\tstring(outcome.code, \"attempt.outcome.code\");\n\t\tif (outcome.message !== undefined) string(outcome.message, \"attempt.outcome.message\");\n\t} else if (outcome.kind === \"cancelled\") {\n\t\tstring(outcome.code, \"attempt.outcome.code\");\n\t} else if (outcome.kind !== \"completed\") {\n\t\tthrow new ProtocolValidationError(\"attempt.outcome.kind is unsupported\");\n\t}\n\treturn value as ExecutionAttempt;\n}\n\nexport function parseObservation(value: unknown): Observation {\n\tconst input = record(value, \"observation\");\n\tversion(input, \"observation\");\n\tstring(input.observationId, \"observation.observationId\");\n\tstring(input.taskId, \"observation.taskId\");\n\tstring(input.attemptId, \"observation.attemptId\");\n\ttimestamp(input.observedAt, \"observation.observedAt\");\n\tstring(input.kind, \"observation.kind\");\n\tconst source = record(input.source, \"observation.source\");\n\tstring(source.kind, \"observation.source.kind\");\n\tstring(source.id, \"observation.source.id\");\n\tjsonObject(input.facts, \"observation.facts\");\n\tstringArray(input.evidenceRefs, \"observation.evidenceRefs\");\n\treturn value as Observation;\n}\n\nexport function parseWaiverRecord(value: unknown): WaiverRecord {\n\tconst input = record(value, \"waiver\");\n\tversion(input, \"waiver\");\n\tstring(input.waiverId, \"waiver.waiverId\");\n\tconst scope = record(input.scope, \"waiver.scope\");\n\tstring(scope.taskId, \"waiver.scope.taskId\");\n\tstring(scope.claimId, \"waiver.scope.claimId\");\n\tif (scope.attemptId !== undefined) string(scope.attemptId, \"waiver.scope.attemptId\");\n\tstring(input.approvedBy, \"waiver.approvedBy\");\n\ttimestamp(input.approvedAt, \"waiver.approvedAt\");\n\tif (input.expiresAt !== undefined) timestamp(input.expiresAt, \"waiver.expiresAt\");\n\tstring(input.rationale, \"waiver.rationale\");\n\tstringArray(input.evidenceRefs, \"waiver.evidenceRefs\");\n\treturn value as WaiverRecord;\n}\n\nexport function parseEvaluationResult(value: unknown): EvaluationResult {\n\tconst input = record(value, \"evaluation\");\n\tversion(input, \"evaluation\");\n\tstring(input.evaluationId, \"evaluation.evaluationId\");\n\tstring(input.taskId, \"evaluation.taskId\");\n\tstring(input.attemptId, \"evaluation.attemptId\");\n\ttimestamp(input.evaluatedAt, \"evaluation.evaluatedAt\");\n\tif (!Array.isArray(input.claims)) throw new ProtocolValidationError(\"evaluation.claims must be an array\");\n\tfor (const [index, rawClaim] of input.claims.entries()) {\n\t\tconst claim = record(rawClaim, `evaluation.claims[${index}]`);\n\t\tstring(claim.claimId, `evaluation.claims[${index}].claimId`);\n\t\tif (claim.requirement !== \"required\" && claim.requirement !== \"advisory\") {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].requirement is unsupported`);\n\t\t}\n\t\tif (![\"satisfied\", \"violated\", \"inconclusive\"].includes(claim.result as string)) {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].result is unsupported`);\n\t\t}\n\t\tif (![\"claim.satisfied\", \"claim.violated\", \"claim.observation_missing\"].includes(claim.reasonCode as string)) {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].reasonCode is unsupported`);\n\t\t}\n\t\tstringArray(claim.observationIds, `evaluation.claims[${index}].observationIds`);\n\t\tif (claim.waiverId !== undefined) string(claim.waiverId, `evaluation.claims[${index}].waiverId`);\n\t}\n\tif (![\"pass\", \"fail\", \"inconclusive\"].includes(input.semanticVerdict as string)) {\n\t\tthrow new ProtocolValidationError(\"evaluation.semanticVerdict is unsupported\");\n\t}\n\treturn value as EvaluationResult;\n}\n\nexport function parseRuntimeDecision(value: unknown): RuntimeDecision {\n\tconst input = record(value, \"decision\");\n\tversion(input, \"decision\");\n\tstring(input.decisionId, \"decision.decisionId\");\n\tstring(input.taskId, \"decision.taskId\");\n\tstring(input.attemptId, \"decision.attemptId\");\n\tstring(input.evaluationId, \"decision.evaluationId\");\n\ttimestamp(input.decidedAt, \"decision.decidedAt\");\n\tif (![\"continue\", \"retry\", \"failover\", \"stop\"].includes(input.action as string)) {\n\t\tthrow new ProtocolValidationError(\"decision.action is unsupported\");\n\t}\n\tif (![\"evaluation.pass\", \"evaluation.fail\", \"evaluation.inconclusive\"].includes(input.reasonCode as string)) {\n\t\tthrow new ProtocolValidationError(\"decision.reasonCode is unsupported\");\n\t}\n\treturn value as RuntimeDecision;\n}\n"]}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EAGrB,KAAK,WAAW,EAEhB,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,MAAM,YAAY,CAAC;AAKpB,qBAAa,uBAAwB,SAAQ,KAAK;IACjD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AAqFD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAoBtD;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CA8BtE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAc5D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAc9D;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CA2BtE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAepE","sourcesContent":["import {\n\ttype ClaimCondition,\n\ttype EvaluationResult,\n\ttype ExecutionAttempt,\n\ttype JsonObject,\n\ttype JsonValue,\n\ttype Observation,\n\tPROTOCOL_VERSION,\n\ttype RuntimeDecision,\n\ttype TaskSpec,\n\ttype WaiverRecord,\n} from \"./types.ts\";\n\nconst ISO_TIMESTAMP = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\nconst MAX_CONDITION_DEPTH = 32;\n\nexport class ProtocolValidationError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProtocolValidationError\";\n\t}\n}\n\nfunction record(value: unknown, path: string): Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new ProtocolValidationError(`${path} must be an object`);\n\t}\n\treturn value as Record<string, unknown>;\n}\n\nfunction string(value: unknown, path: string): string {\n\tif (typeof value !== \"string\" || value.trim().length === 0) {\n\t\tthrow new ProtocolValidationError(`${path} must be a non-empty string`);\n\t}\n\treturn value;\n}\n\nfunction timestamp(value: unknown, path: string): string {\n\tconst parsed = string(value, path);\n\tif (!ISO_TIMESTAMP.test(parsed) || Number.isNaN(Date.parse(parsed))) {\n\t\tthrow new ProtocolValidationError(`${path} must be an ISO 8601 UTC timestamp`);\n\t}\n\treturn parsed;\n}\n\nfunction version(value: Record<string, unknown>, path: string): void {\n\tif (value.schemaVersion !== PROTOCOL_VERSION) {\n\t\tthrow new ProtocolValidationError(`${path}.schemaVersion must be ${PROTOCOL_VERSION}`);\n\t}\n}\n\nfunction stringArray(value: unknown, path: string): readonly string[] {\n\tif (!Array.isArray(value)) throw new ProtocolValidationError(`${path} must be an array`);\n\treturn value.map((item, index) => string(item, `${path}[${index}]`));\n}\n\nfunction jsonValue(value: unknown, path: string, depth = 0): asserts value is JsonValue {\n\tif (depth > MAX_CONDITION_DEPTH) throw new ProtocolValidationError(`${path} exceeds maximum nesting depth`);\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") return;\n\tif (typeof value === \"number\" && Number.isFinite(value)) return;\n\tif (Array.isArray(value)) {\n\t\tvalue.forEach((item, index) => {\n\t\t\tjsonValue(item, `${path}[${index}]`, depth + 1);\n\t\t});\n\t\treturn;\n\t}\n\tconst object = record(value, path);\n\tfor (const [key, item] of Object.entries(object)) jsonValue(item, `${path}.${key}`, depth + 1);\n}\n\nfunction jsonObject(value: unknown, path: string): asserts value is JsonObject {\n\trecord(value, path);\n\tjsonValue(value, path);\n}\n\nfunction condition(value: unknown, path: string, depth = 0): asserts value is ClaimCondition {\n\tif (depth > MAX_CONDITION_DEPTH) throw new ProtocolValidationError(`${path} exceeds maximum nesting depth`);\n\tconst input = record(value, path);\n\tswitch (input.kind) {\n\t\tcase \"observation\":\n\t\t\tstring(input.observationKind, `${path}.observationKind`);\n\t\t\tif (input.scope !== \"attempt\" && input.scope !== \"task\") {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.scope must be attempt or task`);\n\t\t\t}\n\t\t\tjsonObject(input.facts, `${path}.facts`);\n\t\t\tif (input.bindToCandidate !== undefined && typeof input.bindToCandidate !== \"boolean\") {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.bindToCandidate must be a boolean`);\n\t\t\t}\n\t\t\treturn;\n\t\tcase \"all\":\n\t\tcase \"any\":\n\t\t\tif (!Array.isArray(input.conditions) || input.conditions.length === 0) {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.conditions must be a non-empty array`);\n\t\t\t}\n\t\t\tinput.conditions.forEach((item, index) => {\n\t\t\t\tcondition(item, `${path}.conditions[${index}]`, depth + 1);\n\t\t\t});\n\t\t\treturn;\n\t\tcase \"not\":\n\t\t\tcondition(input.condition, `${path}.condition`, depth + 1);\n\t\t\treturn;\n\t\tdefault:\n\t\t\tthrow new ProtocolValidationError(`${path}.kind is unsupported`);\n\t}\n}\n\nexport function parseTaskSpec(value: unknown): TaskSpec {\n\tconst input = record(value, \"taskSpec\");\n\tversion(input, \"taskSpec\");\n\tstring(input.taskId, \"taskSpec.taskId\");\n\tstring(input.goal, \"taskSpec.goal\");\n\ttimestamp(input.createdAt, \"taskSpec.createdAt\");\n\tif (!Array.isArray(input.claims)) throw new ProtocolValidationError(\"taskSpec.claims must be an array\");\n\tconst claimIds = new Set<string>();\n\tfor (const [index, rawClaim] of input.claims.entries()) {\n\t\tconst claim = record(rawClaim, `taskSpec.claims[${index}]`);\n\t\tconst claimId = string(claim.claimId, `taskSpec.claims[${index}].claimId`);\n\t\tif (claimIds.has(claimId)) throw new ProtocolValidationError(`duplicate claimId ${claimId}`);\n\t\tclaimIds.add(claimId);\n\t\tstring(claim.statement, `taskSpec.claims[${index}].statement`);\n\t\tif (claim.requirement !== \"required\" && claim.requirement !== \"advisory\") {\n\t\t\tthrow new ProtocolValidationError(`taskSpec.claims[${index}].requirement is unsupported`);\n\t\t}\n\t\tcondition(claim.condition, `taskSpec.claims[${index}].condition`);\n\t}\n\treturn value as TaskSpec;\n}\n\nexport function parseExecutionAttempt(value: unknown): ExecutionAttempt {\n\tconst input = record(value, \"attempt\");\n\tversion(input, \"attempt\");\n\tstring(input.attemptId, \"attempt.attemptId\");\n\tstring(input.taskId, \"attempt.taskId\");\n\tif (!Number.isSafeInteger(input.sequence) || (input.sequence as number) < 1) {\n\t\tthrow new ProtocolValidationError(\"attempt.sequence must be a positive integer\");\n\t}\n\tif (![\"initial\", \"retry\", \"failover\", \"resume\"].includes(input.trigger as string)) {\n\t\tthrow new ProtocolValidationError(\"attempt.trigger is unsupported\");\n\t}\n\tif (input.previousAttemptId !== undefined) string(input.previousAttemptId, \"attempt.previousAttemptId\");\n\tconst startedAt = timestamp(input.startedAt, \"attempt.startedAt\");\n\tconst finishedAt = timestamp(input.finishedAt, \"attempt.finishedAt\");\n\tif (finishedAt < startedAt) throw new ProtocolValidationError(\"attempt.finishedAt precedes startedAt\");\n\tconst executor = record(input.executor, \"attempt.executor\");\n\tstring(executor.kind, \"attempt.executor.kind\");\n\tif (executor.provider !== undefined) string(executor.provider, \"attempt.executor.provider\");\n\tif (executor.model !== undefined) string(executor.model, \"attempt.executor.model\");\n\tconst outcome = record(input.outcome, \"attempt.outcome\");\n\tif (outcome.kind === \"failed\") {\n\t\tstring(outcome.code, \"attempt.outcome.code\");\n\t\tif (outcome.message !== undefined) string(outcome.message, \"attempt.outcome.message\");\n\t} else if (outcome.kind === \"cancelled\") {\n\t\tstring(outcome.code, \"attempt.outcome.code\");\n\t} else if (outcome.kind !== \"completed\") {\n\t\tthrow new ProtocolValidationError(\"attempt.outcome.kind is unsupported\");\n\t}\n\tif (input.candidateHash !== undefined) string(input.candidateHash, \"attempt.candidateHash\");\n\treturn value as ExecutionAttempt;\n}\n\nexport function parseObservation(value: unknown): Observation {\n\tconst input = record(value, \"observation\");\n\tversion(input, \"observation\");\n\tstring(input.observationId, \"observation.observationId\");\n\tstring(input.taskId, \"observation.taskId\");\n\tstring(input.attemptId, \"observation.attemptId\");\n\ttimestamp(input.observedAt, \"observation.observedAt\");\n\tstring(input.kind, \"observation.kind\");\n\tconst source = record(input.source, \"observation.source\");\n\tstring(source.kind, \"observation.source.kind\");\n\tstring(source.id, \"observation.source.id\");\n\tjsonObject(input.facts, \"observation.facts\");\n\tstringArray(input.evidenceRefs, \"observation.evidenceRefs\");\n\treturn value as Observation;\n}\n\nexport function parseWaiverRecord(value: unknown): WaiverRecord {\n\tconst input = record(value, \"waiver\");\n\tversion(input, \"waiver\");\n\tstring(input.waiverId, \"waiver.waiverId\");\n\tconst scope = record(input.scope, \"waiver.scope\");\n\tstring(scope.taskId, \"waiver.scope.taskId\");\n\tstring(scope.claimId, \"waiver.scope.claimId\");\n\tif (scope.attemptId !== undefined) string(scope.attemptId, \"waiver.scope.attemptId\");\n\tstring(input.approvedBy, \"waiver.approvedBy\");\n\ttimestamp(input.approvedAt, \"waiver.approvedAt\");\n\tif (input.expiresAt !== undefined) timestamp(input.expiresAt, \"waiver.expiresAt\");\n\tstring(input.rationale, \"waiver.rationale\");\n\tstringArray(input.evidenceRefs, \"waiver.evidenceRefs\");\n\treturn value as WaiverRecord;\n}\n\nexport function parseEvaluationResult(value: unknown): EvaluationResult {\n\tconst input = record(value, \"evaluation\");\n\tversion(input, \"evaluation\");\n\tstring(input.evaluationId, \"evaluation.evaluationId\");\n\tstring(input.taskId, \"evaluation.taskId\");\n\tstring(input.attemptId, \"evaluation.attemptId\");\n\ttimestamp(input.evaluatedAt, \"evaluation.evaluatedAt\");\n\tif (!Array.isArray(input.claims)) throw new ProtocolValidationError(\"evaluation.claims must be an array\");\n\tfor (const [index, rawClaim] of input.claims.entries()) {\n\t\tconst claim = record(rawClaim, `evaluation.claims[${index}]`);\n\t\tstring(claim.claimId, `evaluation.claims[${index}].claimId`);\n\t\tif (claim.requirement !== \"required\" && claim.requirement !== \"advisory\") {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].requirement is unsupported`);\n\t\t}\n\t\tif (![\"satisfied\", \"violated\", \"inconclusive\"].includes(claim.result as string)) {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].result is unsupported`);\n\t\t}\n\t\tif (![\"claim.satisfied\", \"claim.violated\", \"claim.observation_missing\"].includes(claim.reasonCode as string)) {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].reasonCode is unsupported`);\n\t\t}\n\t\tstringArray(claim.observationIds, `evaluation.claims[${index}].observationIds`);\n\t\tif (claim.waiverId !== undefined) string(claim.waiverId, `evaluation.claims[${index}].waiverId`);\n\t}\n\tif (![\"pass\", \"fail\", \"inconclusive\"].includes(input.semanticVerdict as string)) {\n\t\tthrow new ProtocolValidationError(\"evaluation.semanticVerdict is unsupported\");\n\t}\n\treturn value as EvaluationResult;\n}\n\nexport function parseRuntimeDecision(value: unknown): RuntimeDecision {\n\tconst input = record(value, \"decision\");\n\tversion(input, \"decision\");\n\tstring(input.decisionId, \"decision.decisionId\");\n\tstring(input.taskId, \"decision.taskId\");\n\tstring(input.attemptId, \"decision.attemptId\");\n\tstring(input.evaluationId, \"decision.evaluationId\");\n\ttimestamp(input.decidedAt, \"decision.decidedAt\");\n\tif (![\"continue\", \"retry\", \"failover\", \"stop\"].includes(input.action as string)) {\n\t\tthrow new ProtocolValidationError(\"decision.action is unsupported\");\n\t}\n\tif (![\"evaluation.pass\", \"evaluation.fail\", \"evaluation.inconclusive\"].includes(input.reasonCode as string)) {\n\t\tthrow new ProtocolValidationError(\"decision.reasonCode is unsupported\");\n\t}\n\treturn value as RuntimeDecision;\n}\n"]}

package/dist/validation.js

@@ -68,6 +68,9 @@ function condition(value, path, depth = 0) {
                 throw new ProtocolValidationError(`${path}.scope must be attempt or task`);
             }
             jsonObject(input.facts, `${path}.facts`);
+            if (input.bindToCandidate !== undefined && typeof input.bindToCandidate !== "boolean") {
+                throw new ProtocolValidationError(`${path}.bindToCandidate must be a boolean`);
+            }
             return;
         case "all":
         case "any":
@@ -143,6 +146,8 @@ export function parseExecutionAttempt(value) {
     else if (outcome.kind !== "completed") {
         throw new ProtocolValidationError("attempt.outcome.kind is unsupported");
     }
+    if (input.candidateHash !== undefined)
+        string(input.candidateHash, "attempt.candidateHash");
     return value;
 }
 export function parseObservation(value) {

package/dist/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAON,gBAAgB,GAIhB,MAAM,YAAY,CAAC;AAEpB,MAAM,aAAa,GAAG,+CAA+C,CAAC;AACtE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACjD,YAAY,OAAe,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IAAA,CACtC;CACD;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY,EAA2B;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAgC,CAAC;AAAA,CACxC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY,EAAU;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY,EAAU;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,OAAO,CAAC,KAA8B,EAAE,IAAY,EAAQ;IACpE,IAAI,KAAK,CAAC,aAAa,KAAK,gBAAgB,EAAE,CAAC;QAC9C,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,0BAA0B,gBAAgB,EAAE,CAAC,CAAC;IACxF,CAAC;AAAA,CACD;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY,EAAqB;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;AAAA,CACrE;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY,EAAE,KAAK,GAAG,CAAC,EAA8B;IACvF,IAAI,KAAK,GAAG,mBAAmB;QAAE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC5G,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9B,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAAA,CAChD,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AAAA,CAC/F;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY,EAA+B;IAC9E,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACpB,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAAA,CACvB;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY,EAAE,KAAK,GAAG,CAAC,EAAmC;IAC5F,IAAI,KAAK,GAAG,mBAAmB;QAAE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,aAAa;YACjB,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,IAAI,kBAAkB,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBACzD,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;YAC5E,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;YACzC,OAAO;QACR,KAAK,KAAK,CAAC;QACX,KAAK,KAAK;YACT,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;YACnF,CAAC;YACD,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACzC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,eAAe,KAAK,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAAA,CAC3D,CAAC,CAAC;YACH,OAAO;QACR,KAAK,KAAK;YACT,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO;QACR;YACC,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;IACnE,CAAC;AAAA,CACD;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAY;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACpC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,uBAAuB,CAAC,kCAAkC,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,mBAAmB,KAAK,GAAG,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,mBAAmB,KAAK,WAAW,CAAC,CAAC;QAC3E,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAC7F,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,KAAK,aAAa,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YAC1E,MAAM,IAAI,uBAAuB,CAAC,mBAAmB,KAAK,8BAA8B,CAAC,CAAC;QAC3F,CAAC;QACD,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,KAAK,aAAa,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAiB,CAAC;AAAA,CACzB;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAoB;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAK,KAAK,CAAC,QAAmB,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,uBAAuB,CAAC,6CAA6C,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAiB,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,uBAAuB,CAAC,gCAAgC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;IACxG,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IACrE,IAAI,UAAU,GAAG,SAAS;QAAE,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC5D,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAC5F,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACvF,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAC9C,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACzC,MAAM,IAAI,uBAAuB,CAAC,qCAAqC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAyB,CAAC;AAAA,CACjC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAe;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IACjD,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC1D,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;IAC/C,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAC3C,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC7C,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;IAC5D,OAAO,KAAoB,CAAC;AAAA,CAC5B;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAgB;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzB,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAC9C,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAClF,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC5C,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IACvD,OAAO,KAAqB,CAAC;AAAA,CAC7B;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAoB;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAChD,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,uBAAuB,CAAC,oCAAoC,CAAC,CAAC;IAC1G,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,qBAAqB,KAAK,GAAG,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,qBAAqB,KAAK,WAAW,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YAC1E,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,KAAK,8BAA8B,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAgB,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,KAAK,yBAAyB,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAoB,CAAC,EAAE,CAAC;YAC9G,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,KAAK,6BAA6B,CAAC,CAAC;QAC5F,CAAC;QACD,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,qBAAqB,KAAK,kBAAkB,CAAC,CAAC;QAChF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,qBAAqB,KAAK,YAAY,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAyB,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,uBAAuB,CAAC,2CAA2C,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAyB,CAAC;AAAA,CACjC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAmB;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IACpD,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAgB,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,uBAAuB,CAAC,gCAAgC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAoB,CAAC,EAAE,CAAC;QAC7G,MAAM,IAAI,uBAAuB,CAAC,oCAAoC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAwB,CAAC;AAAA,CAChC","sourcesContent":["import {\n\ttype ClaimCondition,\n\ttype EvaluationResult,\n\ttype ExecutionAttempt,\n\ttype JsonObject,\n\ttype JsonValue,\n\ttype Observation,\n\tPROTOCOL_VERSION,\n\ttype RuntimeDecision,\n\ttype TaskSpec,\n\ttype WaiverRecord,\n} from \"./types.ts\";\n\nconst ISO_TIMESTAMP = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\nconst MAX_CONDITION_DEPTH = 32;\n\nexport class ProtocolValidationError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProtocolValidationError\";\n\t}\n}\n\nfunction record(value: unknown, path: string): Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new ProtocolValidationError(`${path} must be an object`);\n\t}\n\treturn value as Record<string, unknown>;\n}\n\nfunction string(value: unknown, path: string): string {\n\tif (typeof value !== \"string\" || value.trim().length === 0) {\n\t\tthrow new ProtocolValidationError(`${path} must be a non-empty string`);\n\t}\n\treturn value;\n}\n\nfunction timestamp(value: unknown, path: string): string {\n\tconst parsed = string(value, path);\n\tif (!ISO_TIMESTAMP.test(parsed) || Number.isNaN(Date.parse(parsed))) {\n\t\tthrow new ProtocolValidationError(`${path} must be an ISO 8601 UTC timestamp`);\n\t}\n\treturn parsed;\n}\n\nfunction version(value: Record<string, unknown>, path: string): void {\n\tif (value.schemaVersion !== PROTOCOL_VERSION) {\n\t\tthrow new ProtocolValidationError(`${path}.schemaVersion must be ${PROTOCOL_VERSION}`);\n\t}\n}\n\nfunction stringArray(value: unknown, path: string): readonly string[] {\n\tif (!Array.isArray(value)) throw new ProtocolValidationError(`${path} must be an array`);\n\treturn value.map((item, index) => string(item, `${path}[${index}]`));\n}\n\nfunction jsonValue(value: unknown, path: string, depth = 0): asserts value is JsonValue {\n\tif (depth > MAX_CONDITION_DEPTH) throw new ProtocolValidationError(`${path} exceeds maximum nesting depth`);\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") return;\n\tif (typeof value === \"number\" && Number.isFinite(value)) return;\n\tif (Array.isArray(value)) {\n\t\tvalue.forEach((item, index) => {\n\t\t\tjsonValue(item, `${path}[${index}]`, depth + 1);\n\t\t});\n\t\treturn;\n\t}\n\tconst object = record(value, path);\n\tfor (const [key, item] of Object.entries(object)) jsonValue(item, `${path}.${key}`, depth + 1);\n}\n\nfunction jsonObject(value: unknown, path: string): asserts value is JsonObject {\n\trecord(value, path);\n\tjsonValue(value, path);\n}\n\nfunction condition(value: unknown, path: string, depth = 0): asserts value is ClaimCondition {\n\tif (depth > MAX_CONDITION_DEPTH) throw new ProtocolValidationError(`${path} exceeds maximum nesting depth`);\n\tconst input = record(value, path);\n\tswitch (input.kind) {\n\t\tcase \"observation\":\n\t\t\tstring(input.observationKind, `${path}.observationKind`);\n\t\t\tif (input.scope !== \"attempt\" && input.scope !== \"task\") {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.scope must be attempt or task`);\n\t\t\t}\n\t\t\tjsonObject(input.facts, `${path}.facts`);\n\t\t\treturn;\n\t\tcase \"all\":\n\t\tcase \"any\":\n\t\t\tif (!Array.isArray(input.conditions) || input.conditions.length === 0) {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.conditions must be a non-empty array`);\n\t\t\t}\n\t\t\tinput.conditions.forEach((item, index) => {\n\t\t\t\tcondition(item, `${path}.conditions[${index}]`, depth + 1);\n\t\t\t});\n\t\t\treturn;\n\t\tcase \"not\":\n\t\t\tcondition(input.condition, `${path}.condition`, depth + 1);\n\t\t\treturn;\n\t\tdefault:\n\t\t\tthrow new ProtocolValidationError(`${path}.kind is unsupported`);\n\t}\n}\n\nexport function parseTaskSpec(value: unknown): TaskSpec {\n\tconst input = record(value, \"taskSpec\");\n\tversion(input, \"taskSpec\");\n\tstring(input.taskId, \"taskSpec.taskId\");\n\tstring(input.goal, \"taskSpec.goal\");\n\ttimestamp(input.createdAt, \"taskSpec.createdAt\");\n\tif (!Array.isArray(input.claims)) throw new ProtocolValidationError(\"taskSpec.claims must be an array\");\n\tconst claimIds = new Set<string>();\n\tfor (const [index, rawClaim] of input.claims.entries()) {\n\t\tconst claim = record(rawClaim, `taskSpec.claims[${index}]`);\n\t\tconst claimId = string(claim.claimId, `taskSpec.claims[${index}].claimId`);\n\t\tif (claimIds.has(claimId)) throw new ProtocolValidationError(`duplicate claimId ${claimId}`);\n\t\tclaimIds.add(claimId);\n\t\tstring(claim.statement, `taskSpec.claims[${index}].statement`);\n\t\tif (claim.requirement !== \"required\" && claim.requirement !== \"advisory\") {\n\t\t\tthrow new ProtocolValidationError(`taskSpec.claims[${index}].requirement is unsupported`);\n\t\t}\n\t\tcondition(claim.condition, `taskSpec.claims[${index}].condition`);\n\t}\n\treturn value as TaskSpec;\n}\n\nexport function parseExecutionAttempt(value: unknown): ExecutionAttempt {\n\tconst input = record(value, \"attempt\");\n\tversion(input, \"attempt\");\n\tstring(input.attemptId, \"attempt.attemptId\");\n\tstring(input.taskId, \"attempt.taskId\");\n\tif (!Number.isSafeInteger(input.sequence) || (input.sequence as number) < 1) {\n\t\tthrow new ProtocolValidationError(\"attempt.sequence must be a positive integer\");\n\t}\n\tif (![\"initial\", \"retry\", \"failover\", \"resume\"].includes(input.trigger as string)) {\n\t\tthrow new ProtocolValidationError(\"attempt.trigger is unsupported\");\n\t}\n\tif (input.previousAttemptId !== undefined) string(input.previousAttemptId, \"attempt.previousAttemptId\");\n\tconst startedAt = timestamp(input.startedAt, \"attempt.startedAt\");\n\tconst finishedAt = timestamp(input.finishedAt, \"attempt.finishedAt\");\n\tif (finishedAt < startedAt) throw new ProtocolValidationError(\"attempt.finishedAt precedes startedAt\");\n\tconst executor = record(input.executor, \"attempt.executor\");\n\tstring(executor.kind, \"attempt.executor.kind\");\n\tif (executor.provider !== undefined) string(executor.provider, \"attempt.executor.provider\");\n\tif (executor.model !== undefined) string(executor.model, \"attempt.executor.model\");\n\tconst outcome = record(input.outcome, \"attempt.outcome\");\n\tif (outcome.kind === \"failed\") {\n\t\tstring(outcome.code, \"attempt.outcome.code\");\n\t\tif (outcome.message !== undefined) string(outcome.message, \"attempt.outcome.message\");\n\t} else if (outcome.kind === \"cancelled\") {\n\t\tstring(outcome.code, \"attempt.outcome.code\");\n\t} else if (outcome.kind !== \"completed\") {\n\t\tthrow new ProtocolValidationError(\"attempt.outcome.kind is unsupported\");\n\t}\n\treturn value as ExecutionAttempt;\n}\n\nexport function parseObservation(value: unknown): Observation {\n\tconst input = record(value, \"observation\");\n\tversion(input, \"observation\");\n\tstring(input.observationId, \"observation.observationId\");\n\tstring(input.taskId, \"observation.taskId\");\n\tstring(input.attemptId, \"observation.attemptId\");\n\ttimestamp(input.observedAt, \"observation.observedAt\");\n\tstring(input.kind, \"observation.kind\");\n\tconst source = record(input.source, \"observation.source\");\n\tstring(source.kind, \"observation.source.kind\");\n\tstring(source.id, \"observation.source.id\");\n\tjsonObject(input.facts, \"observation.facts\");\n\tstringArray(input.evidenceRefs, \"observation.evidenceRefs\");\n\treturn value as Observation;\n}\n\nexport function parseWaiverRecord(value: unknown): WaiverRecord {\n\tconst input = record(value, \"waiver\");\n\tversion(input, \"waiver\");\n\tstring(input.waiverId, \"waiver.waiverId\");\n\tconst scope = record(input.scope, \"waiver.scope\");\n\tstring(scope.taskId, \"waiver.scope.taskId\");\n\tstring(scope.claimId, \"waiver.scope.claimId\");\n\tif (scope.attemptId !== undefined) string(scope.attemptId, \"waiver.scope.attemptId\");\n\tstring(input.approvedBy, \"waiver.approvedBy\");\n\ttimestamp(input.approvedAt, \"waiver.approvedAt\");\n\tif (input.expiresAt !== undefined) timestamp(input.expiresAt, \"waiver.expiresAt\");\n\tstring(input.rationale, \"waiver.rationale\");\n\tstringArray(input.evidenceRefs, \"waiver.evidenceRefs\");\n\treturn value as WaiverRecord;\n}\n\nexport function parseEvaluationResult(value: unknown): EvaluationResult {\n\tconst input = record(value, \"evaluation\");\n\tversion(input, \"evaluation\");\n\tstring(input.evaluationId, \"evaluation.evaluationId\");\n\tstring(input.taskId, \"evaluation.taskId\");\n\tstring(input.attemptId, \"evaluation.attemptId\");\n\ttimestamp(input.evaluatedAt, \"evaluation.evaluatedAt\");\n\tif (!Array.isArray(input.claims)) throw new ProtocolValidationError(\"evaluation.claims must be an array\");\n\tfor (const [index, rawClaim] of input.claims.entries()) {\n\t\tconst claim = record(rawClaim, `evaluation.claims[${index}]`);\n\t\tstring(claim.claimId, `evaluation.claims[${index}].claimId`);\n\t\tif (claim.requirement !== \"required\" && claim.requirement !== \"advisory\") {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].requirement is unsupported`);\n\t\t}\n\t\tif (![\"satisfied\", \"violated\", \"inconclusive\"].includes(claim.result as string)) {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].result is unsupported`);\n\t\t}\n\t\tif (![\"claim.satisfied\", \"claim.violated\", \"claim.observation_missing\"].includes(claim.reasonCode as string)) {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].reasonCode is unsupported`);\n\t\t}\n\t\tstringArray(claim.observationIds, `evaluation.claims[${index}].observationIds`);\n\t\tif (claim.waiverId !== undefined) string(claim.waiverId, `evaluation.claims[${index}].waiverId`);\n\t}\n\tif (![\"pass\", \"fail\", \"inconclusive\"].includes(input.semanticVerdict as string)) {\n\t\tthrow new ProtocolValidationError(\"evaluation.semanticVerdict is unsupported\");\n\t}\n\treturn value as EvaluationResult;\n}\n\nexport function parseRuntimeDecision(value: unknown): RuntimeDecision {\n\tconst input = record(value, \"decision\");\n\tversion(input, \"decision\");\n\tstring(input.decisionId, \"decision.decisionId\");\n\tstring(input.taskId, \"decision.taskId\");\n\tstring(input.attemptId, \"decision.attemptId\");\n\tstring(input.evaluationId, \"decision.evaluationId\");\n\ttimestamp(input.decidedAt, \"decision.decidedAt\");\n\tif (![\"continue\", \"retry\", \"failover\", \"stop\"].includes(input.action as string)) {\n\t\tthrow new ProtocolValidationError(\"decision.action is unsupported\");\n\t}\n\tif (![\"evaluation.pass\", \"evaluation.fail\", \"evaluation.inconclusive\"].includes(input.reasonCode as string)) {\n\t\tthrow new ProtocolValidationError(\"decision.reasonCode is unsupported\");\n\t}\n\treturn value as RuntimeDecision;\n}\n"]}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAON,gBAAgB,GAIhB,MAAM,YAAY,CAAC;AAEpB,MAAM,aAAa,GAAG,+CAA+C,CAAC;AACtE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACjD,YAAY,OAAe,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IAAA,CACtC;CACD;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY,EAA2B;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAgC,CAAC;AAAA,CACxC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY,EAAU;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY,EAAU;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,OAAO,CAAC,KAA8B,EAAE,IAAY,EAAQ;IACpE,IAAI,KAAK,CAAC,aAAa,KAAK,gBAAgB,EAAE,CAAC;QAC9C,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,0BAA0B,gBAAgB,EAAE,CAAC,CAAC;IACxF,CAAC;AAAA,CACD;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY,EAAqB;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;AAAA,CACrE;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY,EAAE,KAAK,GAAG,CAAC,EAA8B;IACvF,IAAI,KAAK,GAAG,mBAAmB;QAAE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC5G,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9B,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAAA,CAChD,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AAAA,CAC/F;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY,EAA+B;IAC9E,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACpB,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAAA,CACvB;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY,EAAE,KAAK,GAAG,CAAC,EAAmC;IAC5F,IAAI,KAAK,GAAG,mBAAmB;QAAE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,aAAa;YACjB,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,IAAI,kBAAkB,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBACzD,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;YAC5E,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACvF,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;YAChF,CAAC;YACD,OAAO;QACR,KAAK,KAAK,CAAC;QACX,KAAK,KAAK;YACT,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;YACnF,CAAC;YACD,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACzC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,eAAe,KAAK,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAAA,CAC3D,CAAC,CAAC;YACH,OAAO;QACR,KAAK,KAAK;YACT,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO;QACR;YACC,MAAM,IAAI,uBAAuB,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;IACnE,CAAC;AAAA,CACD;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAY;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACpC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,uBAAuB,CAAC,kCAAkC,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,mBAAmB,KAAK,GAAG,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,mBAAmB,KAAK,WAAW,CAAC,CAAC;QAC3E,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAC7F,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,KAAK,aAAa,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YAC1E,MAAM,IAAI,uBAAuB,CAAC,mBAAmB,KAAK,8BAA8B,CAAC,CAAC;QAC3F,CAAC;QACD,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,KAAK,aAAa,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAiB,CAAC;AAAA,CACzB;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAoB;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAK,KAAK,CAAC,QAAmB,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,uBAAuB,CAAC,6CAA6C,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAiB,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,uBAAuB,CAAC,gCAAgC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;IACxG,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IACrE,IAAI,UAAU,GAAG,SAAS;QAAE,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC5D,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAC5F,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACvF,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAC9C,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACzC,MAAM,IAAI,uBAAuB,CAAC,qCAAqC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC5F,OAAO,KAAyB,CAAC;AAAA,CACjC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAe;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IACjD,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC1D,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;IAC/C,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAC3C,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC7C,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;IAC5D,OAAO,KAAoB,CAAC;AAAA,CAC5B;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAgB;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzB,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAC9C,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAClF,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC5C,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IACvD,OAAO,KAAqB,CAAC;AAAA,CAC7B;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAoB;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAChD,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,uBAAuB,CAAC,oCAAoC,CAAC,CAAC;IAC1G,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,qBAAqB,KAAK,GAAG,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,qBAAqB,KAAK,WAAW,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YAC1E,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,KAAK,8BAA8B,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAgB,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,KAAK,yBAAyB,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAoB,CAAC,EAAE,CAAC;YAC9G,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,KAAK,6BAA6B,CAAC,CAAC;QAC5F,CAAC;QACD,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,qBAAqB,KAAK,kBAAkB,CAAC,CAAC;QAChF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,qBAAqB,KAAK,YAAY,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAyB,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,uBAAuB,CAAC,2CAA2C,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAyB,CAAC;AAAA,CACjC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAmB;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IACpD,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAgB,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,uBAAuB,CAAC,gCAAgC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAoB,CAAC,EAAE,CAAC;QAC7G,MAAM,IAAI,uBAAuB,CAAC,oCAAoC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAwB,CAAC;AAAA,CAChC","sourcesContent":["import {\n\ttype ClaimCondition,\n\ttype EvaluationResult,\n\ttype ExecutionAttempt,\n\ttype JsonObject,\n\ttype JsonValue,\n\ttype Observation,\n\tPROTOCOL_VERSION,\n\ttype RuntimeDecision,\n\ttype TaskSpec,\n\ttype WaiverRecord,\n} from \"./types.ts\";\n\nconst ISO_TIMESTAMP = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\nconst MAX_CONDITION_DEPTH = 32;\n\nexport class ProtocolValidationError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProtocolValidationError\";\n\t}\n}\n\nfunction record(value: unknown, path: string): Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new ProtocolValidationError(`${path} must be an object`);\n\t}\n\treturn value as Record<string, unknown>;\n}\n\nfunction string(value: unknown, path: string): string {\n\tif (typeof value !== \"string\" || value.trim().length === 0) {\n\t\tthrow new ProtocolValidationError(`${path} must be a non-empty string`);\n\t}\n\treturn value;\n}\n\nfunction timestamp(value: unknown, path: string): string {\n\tconst parsed = string(value, path);\n\tif (!ISO_TIMESTAMP.test(parsed) || Number.isNaN(Date.parse(parsed))) {\n\t\tthrow new ProtocolValidationError(`${path} must be an ISO 8601 UTC timestamp`);\n\t}\n\treturn parsed;\n}\n\nfunction version(value: Record<string, unknown>, path: string): void {\n\tif (value.schemaVersion !== PROTOCOL_VERSION) {\n\t\tthrow new ProtocolValidationError(`${path}.schemaVersion must be ${PROTOCOL_VERSION}`);\n\t}\n}\n\nfunction stringArray(value: unknown, path: string): readonly string[] {\n\tif (!Array.isArray(value)) throw new ProtocolValidationError(`${path} must be an array`);\n\treturn value.map((item, index) => string(item, `${path}[${index}]`));\n}\n\nfunction jsonValue(value: unknown, path: string, depth = 0): asserts value is JsonValue {\n\tif (depth > MAX_CONDITION_DEPTH) throw new ProtocolValidationError(`${path} exceeds maximum nesting depth`);\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") return;\n\tif (typeof value === \"number\" && Number.isFinite(value)) return;\n\tif (Array.isArray(value)) {\n\t\tvalue.forEach((item, index) => {\n\t\t\tjsonValue(item, `${path}[${index}]`, depth + 1);\n\t\t});\n\t\treturn;\n\t}\n\tconst object = record(value, path);\n\tfor (const [key, item] of Object.entries(object)) jsonValue(item, `${path}.${key}`, depth + 1);\n}\n\nfunction jsonObject(value: unknown, path: string): asserts value is JsonObject {\n\trecord(value, path);\n\tjsonValue(value, path);\n}\n\nfunction condition(value: unknown, path: string, depth = 0): asserts value is ClaimCondition {\n\tif (depth > MAX_CONDITION_DEPTH) throw new ProtocolValidationError(`${path} exceeds maximum nesting depth`);\n\tconst input = record(value, path);\n\tswitch (input.kind) {\n\t\tcase \"observation\":\n\t\t\tstring(input.observationKind, `${path}.observationKind`);\n\t\t\tif (input.scope !== \"attempt\" && input.scope !== \"task\") {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.scope must be attempt or task`);\n\t\t\t}\n\t\t\tjsonObject(input.facts, `${path}.facts`);\n\t\t\tif (input.bindToCandidate !== undefined && typeof input.bindToCandidate !== \"boolean\") {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.bindToCandidate must be a boolean`);\n\t\t\t}\n\t\t\treturn;\n\t\tcase \"all\":\n\t\tcase \"any\":\n\t\t\tif (!Array.isArray(input.conditions) || input.conditions.length === 0) {\n\t\t\t\tthrow new ProtocolValidationError(`${path}.conditions must be a non-empty array`);\n\t\t\t}\n\t\t\tinput.conditions.forEach((item, index) => {\n\t\t\t\tcondition(item, `${path}.conditions[${index}]`, depth + 1);\n\t\t\t});\n\t\t\treturn;\n\t\tcase \"not\":\n\t\t\tcondition(input.condition, `${path}.condition`, depth + 1);\n\t\t\treturn;\n\t\tdefault:\n\t\t\tthrow new ProtocolValidationError(`${path}.kind is unsupported`);\n\t}\n}\n\nexport function parseTaskSpec(value: unknown): TaskSpec {\n\tconst input = record(value, \"taskSpec\");\n\tversion(input, \"taskSpec\");\n\tstring(input.taskId, \"taskSpec.taskId\");\n\tstring(input.goal, \"taskSpec.goal\");\n\ttimestamp(input.createdAt, \"taskSpec.createdAt\");\n\tif (!Array.isArray(input.claims)) throw new ProtocolValidationError(\"taskSpec.claims must be an array\");\n\tconst claimIds = new Set<string>();\n\tfor (const [index, rawClaim] of input.claims.entries()) {\n\t\tconst claim = record(rawClaim, `taskSpec.claims[${index}]`);\n\t\tconst claimId = string(claim.claimId, `taskSpec.claims[${index}].claimId`);\n\t\tif (claimIds.has(claimId)) throw new ProtocolValidationError(`duplicate claimId ${claimId}`);\n\t\tclaimIds.add(claimId);\n\t\tstring(claim.statement, `taskSpec.claims[${index}].statement`);\n\t\tif (claim.requirement !== \"required\" && claim.requirement !== \"advisory\") {\n\t\t\tthrow new ProtocolValidationError(`taskSpec.claims[${index}].requirement is unsupported`);\n\t\t}\n\t\tcondition(claim.condition, `taskSpec.claims[${index}].condition`);\n\t}\n\treturn value as TaskSpec;\n}\n\nexport function parseExecutionAttempt(value: unknown): ExecutionAttempt {\n\tconst input = record(value, \"attempt\");\n\tversion(input, \"attempt\");\n\tstring(input.attemptId, \"attempt.attemptId\");\n\tstring(input.taskId, \"attempt.taskId\");\n\tif (!Number.isSafeInteger(input.sequence) || (input.sequence as number) < 1) {\n\t\tthrow new ProtocolValidationError(\"attempt.sequence must be a positive integer\");\n\t}\n\tif (![\"initial\", \"retry\", \"failover\", \"resume\"].includes(input.trigger as string)) {\n\t\tthrow new ProtocolValidationError(\"attempt.trigger is unsupported\");\n\t}\n\tif (input.previousAttemptId !== undefined) string(input.previousAttemptId, \"attempt.previousAttemptId\");\n\tconst startedAt = timestamp(input.startedAt, \"attempt.startedAt\");\n\tconst finishedAt = timestamp(input.finishedAt, \"attempt.finishedAt\");\n\tif (finishedAt < startedAt) throw new ProtocolValidationError(\"attempt.finishedAt precedes startedAt\");\n\tconst executor = record(input.executor, \"attempt.executor\");\n\tstring(executor.kind, \"attempt.executor.kind\");\n\tif (executor.provider !== undefined) string(executor.provider, \"attempt.executor.provider\");\n\tif (executor.model !== undefined) string(executor.model, \"attempt.executor.model\");\n\tconst outcome = record(input.outcome, \"attempt.outcome\");\n\tif (outcome.kind === \"failed\") {\n\t\tstring(outcome.code, \"attempt.outcome.code\");\n\t\tif (outcome.message !== undefined) string(outcome.message, \"attempt.outcome.message\");\n\t} else if (outcome.kind === \"cancelled\") {\n\t\tstring(outcome.code, \"attempt.outcome.code\");\n\t} else if (outcome.kind !== \"completed\") {\n\t\tthrow new ProtocolValidationError(\"attempt.outcome.kind is unsupported\");\n\t}\n\tif (input.candidateHash !== undefined) string(input.candidateHash, \"attempt.candidateHash\");\n\treturn value as ExecutionAttempt;\n}\n\nexport function parseObservation(value: unknown): Observation {\n\tconst input = record(value, \"observation\");\n\tversion(input, \"observation\");\n\tstring(input.observationId, \"observation.observationId\");\n\tstring(input.taskId, \"observation.taskId\");\n\tstring(input.attemptId, \"observation.attemptId\");\n\ttimestamp(input.observedAt, \"observation.observedAt\");\n\tstring(input.kind, \"observation.kind\");\n\tconst source = record(input.source, \"observation.source\");\n\tstring(source.kind, \"observation.source.kind\");\n\tstring(source.id, \"observation.source.id\");\n\tjsonObject(input.facts, \"observation.facts\");\n\tstringArray(input.evidenceRefs, \"observation.evidenceRefs\");\n\treturn value as Observation;\n}\n\nexport function parseWaiverRecord(value: unknown): WaiverRecord {\n\tconst input = record(value, \"waiver\");\n\tversion(input, \"waiver\");\n\tstring(input.waiverId, \"waiver.waiverId\");\n\tconst scope = record(input.scope, \"waiver.scope\");\n\tstring(scope.taskId, \"waiver.scope.taskId\");\n\tstring(scope.claimId, \"waiver.scope.claimId\");\n\tif (scope.attemptId !== undefined) string(scope.attemptId, \"waiver.scope.attemptId\");\n\tstring(input.approvedBy, \"waiver.approvedBy\");\n\ttimestamp(input.approvedAt, \"waiver.approvedAt\");\n\tif (input.expiresAt !== undefined) timestamp(input.expiresAt, \"waiver.expiresAt\");\n\tstring(input.rationale, \"waiver.rationale\");\n\tstringArray(input.evidenceRefs, \"waiver.evidenceRefs\");\n\treturn value as WaiverRecord;\n}\n\nexport function parseEvaluationResult(value: unknown): EvaluationResult {\n\tconst input = record(value, \"evaluation\");\n\tversion(input, \"evaluation\");\n\tstring(input.evaluationId, \"evaluation.evaluationId\");\n\tstring(input.taskId, \"evaluation.taskId\");\n\tstring(input.attemptId, \"evaluation.attemptId\");\n\ttimestamp(input.evaluatedAt, \"evaluation.evaluatedAt\");\n\tif (!Array.isArray(input.claims)) throw new ProtocolValidationError(\"evaluation.claims must be an array\");\n\tfor (const [index, rawClaim] of input.claims.entries()) {\n\t\tconst claim = record(rawClaim, `evaluation.claims[${index}]`);\n\t\tstring(claim.claimId, `evaluation.claims[${index}].claimId`);\n\t\tif (claim.requirement !== \"required\" && claim.requirement !== \"advisory\") {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].requirement is unsupported`);\n\t\t}\n\t\tif (![\"satisfied\", \"violated\", \"inconclusive\"].includes(claim.result as string)) {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].result is unsupported`);\n\t\t}\n\t\tif (![\"claim.satisfied\", \"claim.violated\", \"claim.observation_missing\"].includes(claim.reasonCode as string)) {\n\t\t\tthrow new ProtocolValidationError(`evaluation.claims[${index}].reasonCode is unsupported`);\n\t\t}\n\t\tstringArray(claim.observationIds, `evaluation.claims[${index}].observationIds`);\n\t\tif (claim.waiverId !== undefined) string(claim.waiverId, `evaluation.claims[${index}].waiverId`);\n\t}\n\tif (![\"pass\", \"fail\", \"inconclusive\"].includes(input.semanticVerdict as string)) {\n\t\tthrow new ProtocolValidationError(\"evaluation.semanticVerdict is unsupported\");\n\t}\n\treturn value as EvaluationResult;\n}\n\nexport function parseRuntimeDecision(value: unknown): RuntimeDecision {\n\tconst input = record(value, \"decision\");\n\tversion(input, \"decision\");\n\tstring(input.decisionId, \"decision.decisionId\");\n\tstring(input.taskId, \"decision.taskId\");\n\tstring(input.attemptId, \"decision.attemptId\");\n\tstring(input.evaluationId, \"decision.evaluationId\");\n\ttimestamp(input.decidedAt, \"decision.decidedAt\");\n\tif (![\"continue\", \"retry\", \"failover\", \"stop\"].includes(input.action as string)) {\n\t\tthrow new ProtocolValidationError(\"decision.action is unsupported\");\n\t}\n\tif (![\"evaluation.pass\", \"evaluation.fail\", \"evaluation.inconclusive\"].includes(input.reasonCode as string)) {\n\t\tthrow new ProtocolValidationError(\"decision.reasonCode is unsupported\");\n\t}\n\treturn value as RuntimeDecision;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "omk-protocol",
-	"version": "0.99.0",
+	"version": "1.2.0",
 	"description": "Canonical OMK Run Protocol contracts and pure semantic reducers",
 	"type": "module",
 	"main": "./dist/index.js",