open-multi-agent-kit 0.98.3 → 0.98.5

package/dist/core/verified-run/candidate.js

@@ -0,0 +1,167 @@
+import { chmodSync, lstatSync, mkdirSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+import { assertDirectory, digestBytes, digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError, } from "./storage.js";
+function safePath(path) {
+    if (!path ||
+        /[\\\u0000-\u001f\u007f]/.test(path) ||
+        path.split("/").some((part) => ["", ".", "..", ".git", ".omk"].includes(part))) {
+        throw new VerifiedRunError("file_type");
+    }
+}
+/** Entire regular-file tree, including dot/untracked files; .git/.omk metadata is excluded by this profile. */
+export function captureCandidate(root, limits) {
+    assertDirectory(root);
+    const files = [];
+    const directories = [];
+    const contents = new Map();
+    let bytesUsed = 0;
+    const visit = (prefix) => {
+        const names = readdirSync(join(root, prefix), { encoding: "buffer" })
+            .map((name) => new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(name))
+            .sort();
+        for (const name of names) {
+            if (!prefix && (name === ".git" || name === ".omk"))
+                continue;
+            const path = prefix ? `${prefix}/${name}` : name;
+            safePath(path);
+            if (files.length + directories.length >= limits.maxFiles)
+                throw new VerifiedRunError("storage_limit");
+            const absolute = join(root, path);
+            const stat = lstatSync(absolute);
+            if (stat.isDirectory()) {
+                if ((stat.mode & 0o7777) !== 0o755)
+                    throw new VerifiedRunError("file_type");
+                directories.push(path);
+                visit(path);
+                continue;
+            }
+            if (!stat.isFile() || stat.nlink !== 1 || (stat.mode & 0o7000) !== 0)
+                throw new VerifiedRunError("file_type");
+            const bytes = readRegularFile(absolute, limits.maxBytes - bytesUsed);
+            bytesUsed += bytes.length;
+            const digest = digestBytes(bytes);
+            contents.set(digest, bytes);
+            files.push(Object.freeze({ path, mode: stat.mode & 0o777, digest, size: bytes.length }));
+        }
+    };
+    visit("");
+    const manifest = Object.freeze({
+        version: 1,
+        directories: Object.freeze(directories),
+        files: Object.freeze(files),
+    });
+    return { manifest, digest: digestObject(manifest), contents };
+}
+export function materializeCandidate(snapshot, target) {
+    mkdirSync(target, { mode: 0o700 });
+    for (const directory of snapshot.manifest.directories)
+        mkdirSync(join(target, directory), { mode: 0o755 });
+    for (const file of snapshot.manifest.files) {
+        const bytes = snapshot.contents.get(file.digest);
+        if (!bytes)
+            throw new VerifiedRunError("integrity");
+        publishBytes(join(target, file.path), bytes);
+        chmodSync(join(target, file.path), file.mode);
+    }
+}
+export function assertCandidateScope(base, candidate, writable) {
+    const before = new Map(base.files.map((file) => [file.path, digestObject(file)]));
+    const after = new Map(candidate.files.map((file) => [file.path, digestObject(file)]));
+    for (const directory of base.directories)
+        before.set(`${directory}/`, "directory");
+    for (const directory of candidate.directories)
+        after.set(`${directory}/`, "directory");
+    for (const path of new Set([...before.keys(), ...after.keys()])) {
+        if (before.get(path) === after.get(path))
+            continue;
+        const normalized = path.endsWith("/") ? path.slice(0, -1) : path;
+        if (!writable.some((scope) => normalized === scope || normalized.startsWith(`${scope}/`)))
+            throw new VerifiedRunError("scope_changed");
+    }
+}
+export function storeCandidate(snapshot, runPath) {
+    for (const [digest, bytes] of snapshot.contents)
+        publishBytes(join(runPath, "blobs", digest), bytes);
+    publishObject(join(runPath, "candidates", `${snapshot.digest}.json`), snapshot.manifest);
+}
+export function loadCandidate(runPath, digest, limits) {
+    if (!/^[a-f0-9]{64}$/.test(digest))
+        throw new VerifiedRunError("integrity");
+    const raw = readJson(join(runPath, "candidates", `${digest}.json`), 4194304);
+    if (digestObject(raw) !== digest ||
+        typeof raw !== "object" ||
+        raw === null ||
+        !("version" in raw) ||
+        raw.version !== 1 ||
+        !("files" in raw) ||
+        !Array.isArray(raw.files) ||
+        !("directories" in raw) ||
+        !Array.isArray(raw.directories)) {
+        throw new VerifiedRunError("integrity");
+    }
+    if (raw.files.length + raw.directories.length > limits.maxFiles)
+        throw new VerifiedRunError("integrity");
+    const files = [];
+    const directories = [];
+    const paths = new Set();
+    let total = 0;
+    for (const directory of raw.directories) {
+        if (typeof directory !== "string")
+            throw new VerifiedRunError("integrity");
+        safePath(directory);
+        if (paths.has(directory))
+            throw new VerifiedRunError("integrity");
+        paths.add(directory);
+        directories.push(directory);
+    }
+    const contents = new Map();
+    const rawFiles = raw.files;
+    for (const file of rawFiles) {
+        if (typeof file !== "object" ||
+            file === null ||
+            !("path" in file) ||
+            typeof file.path !== "string" ||
+            !("digest" in file) ||
+            typeof file.digest !== "string" ||
+            !/^[a-f0-9]{64}$/.test(file.digest) ||
+            !("mode" in file) ||
+            typeof file.mode !== "number" ||
+            !Number.isSafeInteger(file.mode) ||
+            file.mode < 0 ||
+            file.mode > 0o777 ||
+            !("size" in file) ||
+            typeof file.size !== "number" ||
+            !Number.isSafeInteger(file.size) ||
+            file.size < 0)
+            throw new VerifiedRunError("integrity");
+        safePath(file.path);
+        if (paths.has(file.path))
+            throw new VerifiedRunError("integrity");
+        paths.add(file.path);
+        total += file.size;
+        if (total > limits.maxBytes)
+            throw new VerifiedRunError("integrity");
+        let bytes;
+        try {
+            bytes = readRegularFile(join(runPath, "blobs", file.digest), file.size);
+        }
+        catch (error) {
+            if (error instanceof Error)
+                throw new VerifiedRunError("integrity");
+            throw error;
+        }
+        if (bytes.length !== file.size || digestBytes(bytes) !== file.digest)
+            throw new VerifiedRunError("integrity");
+        contents.set(file.digest, bytes);
+        files.push(Object.freeze({ path: file.path, mode: file.mode, digest: file.digest, size: file.size }));
+    }
+    const manifest = Object.freeze({
+        version: 1,
+        directories: Object.freeze(directories),
+        files: Object.freeze(files),
+    });
+    if (digestObject(manifest) !== digest)
+        throw new VerifiedRunError("integrity");
+    return { manifest, digest, contents };
+}
+//# sourceMappingURL=candidate.js.map

package/dist/core/verified-run/candidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate.js","sourceRoot":"","sources":["../../../src/core/verified-run/candidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACN,eAAe,EACf,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,eAAe,EACf,gBAAgB,GAChB,MAAM,cAAc,CAAC;AAmBtB,SAAS,QAAQ,CAAC,IAAY,EAAQ;IACrC,IACC,CAAC,IAAI;QACL,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAC7E,CAAC;QACF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;AAAA,CACD;AAED,+GAA+G;AAC/G,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAsB,EAAqB;IACzF,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,MAAc,EAAQ,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;aACnE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aACtF,IAAI,EAAE,CAAC;QACT,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC;gBAAE,SAAS;YAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;YACtG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAC5E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,CAAC;gBACZ,SAAS;YACV,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC9G,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;YACrE,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAClC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC;IAAA,CACD,CAAC;IACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,MAAM,QAAQ,GAAsB,MAAM,CAAC,MAAM,CAAC;QACjD,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3B,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;AAAA,CAC9D;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA2B,EAAE,MAAc,EAAQ;IACvF,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW;QAAE,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3G,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACpD,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;AAAA,CACD;AAED,MAAM,UAAU,oBAAoB,CACnC,IAAuB,EACvB,SAA4B,EAC5B,QAA2B,EACpB;IACP,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,EAAE,WAAW,CAAC,CAAC;IACnF,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,WAAW;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,EAAE,WAAW,CAAC,CAAC;IACvF,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YACxF,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC;AAAA,CACD;AAED,MAAM,UAAU,cAAc,CAAC,QAA2B,EAAE,OAAe,EAAQ;IAClF,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ;QAAE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACrG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,MAAM,OAAO,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAAA,CACzF;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAAc,EAAE,MAAsB,EAAqB;IACzG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,IACC,YAAY,CAAC,GAAG,CAAC,KAAK,MAAM;QAC5B,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;QACnB,GAAG,CAAC,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;QACjB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC;QACvB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAC9B,CAAC;QACF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzG,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC3E,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAClE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrB,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,QAAQ,GAAuB,GAAG,CAAC,KAAK,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC7B,IACC,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YACjB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;YACnB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACnC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YACjB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,IAAI,GAAG,CAAC;YACb,IAAI,CAAC,IAAI,GAAG,KAAK;YACjB,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YACjB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,IAAI,GAAG,CAAC;YAEb,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAClE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QACnB,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,KAAK;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACpE,MAAM,KAAK,CAAC;QACb,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC9G,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,QAAQ,GAAsB,MAAM,CAAC,MAAM,CAAC;QACjD,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAAA,CACtC","sourcesContent":["import { chmodSync, lstatSync, mkdirSync, readdirSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { RunPhaseBudget } from \"omk-protocol\";\nimport {\n\tassertDirectory,\n\tdigestBytes,\n\tdigestObject,\n\tpublishBytes,\n\tpublishObject,\n\treadJson,\n\treadRegularFile,\n\tVerifiedRunError,\n} from \"./storage.ts\";\n\nexport interface CandidateFile {\n\treadonly path: string;\n\treadonly mode: number;\n\treadonly digest: string;\n\treadonly size: number;\n}\nexport interface CandidateManifest {\n\treadonly version: 1;\n\treadonly directories: readonly string[];\n\treadonly files: readonly CandidateFile[];\n}\nexport interface CandidateSnapshot {\n\treadonly manifest: CandidateManifest;\n\treadonly digest: string;\n\treadonly contents: ReadonlyMap<string, Buffer>;\n}\n\nfunction safePath(path: string): void {\n\tif (\n\t\t!path ||\n\t\t/[\\\\\\u0000-\\u001f\\u007f]/.test(path) ||\n\t\tpath.split(\"/\").some((part) => [\"\", \".\", \"..\", \".git\", \".omk\"].includes(part))\n\t) {\n\t\tthrow new VerifiedRunError(\"file_type\");\n\t}\n}\n\n/** Entire regular-file tree, including dot/untracked files; .git/.omk metadata is excluded by this profile. */\nexport function captureCandidate(root: string, limits: RunPhaseBudget): CandidateSnapshot {\n\tassertDirectory(root);\n\tconst files: CandidateFile[] = [];\n\tconst directories: string[] = [];\n\tconst contents = new Map<string, Buffer>();\n\tlet bytesUsed = 0;\n\tconst visit = (prefix: string): void => {\n\t\tconst names = readdirSync(join(root, prefix), { encoding: \"buffer\" })\n\t\t\t.map((name) => new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true }).decode(name))\n\t\t\t.sort();\n\t\tfor (const name of names) {\n\t\t\tif (!prefix && (name === \".git\" || name === \".omk\")) continue;\n\t\t\tconst path = prefix ? `${prefix}/${name}` : name;\n\t\t\tsafePath(path);\n\t\t\tif (files.length + directories.length >= limits.maxFiles) throw new VerifiedRunError(\"storage_limit\");\n\t\t\tconst absolute = join(root, path);\n\t\t\tconst stat = lstatSync(absolute);\n\t\t\tif (stat.isDirectory()) {\n\t\t\t\tif ((stat.mode & 0o7777) !== 0o755) throw new VerifiedRunError(\"file_type\");\n\t\t\t\tdirectories.push(path);\n\t\t\t\tvisit(path);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (!stat.isFile() || stat.nlink !== 1 || (stat.mode & 0o7000) !== 0) throw new VerifiedRunError(\"file_type\");\n\t\t\tconst bytes = readRegularFile(absolute, limits.maxBytes - bytesUsed);\n\t\t\tbytesUsed += bytes.length;\n\t\t\tconst digest = digestBytes(bytes);\n\t\t\tcontents.set(digest, bytes);\n\t\t\tfiles.push(Object.freeze({ path, mode: stat.mode & 0o777, digest, size: bytes.length }));\n\t\t}\n\t};\n\tvisit(\"\");\n\tconst manifest: CandidateManifest = Object.freeze({\n\t\tversion: 1,\n\t\tdirectories: Object.freeze(directories),\n\t\tfiles: Object.freeze(files),\n\t});\n\treturn { manifest, digest: digestObject(manifest), contents };\n}\n\nexport function materializeCandidate(snapshot: CandidateSnapshot, target: string): void {\n\tmkdirSync(target, { mode: 0o700 });\n\tfor (const directory of snapshot.manifest.directories) mkdirSync(join(target, directory), { mode: 0o755 });\n\tfor (const file of snapshot.manifest.files) {\n\t\tconst bytes = snapshot.contents.get(file.digest);\n\t\tif (!bytes) throw new VerifiedRunError(\"integrity\");\n\t\tpublishBytes(join(target, file.path), bytes);\n\t\tchmodSync(join(target, file.path), file.mode);\n\t}\n}\n\nexport function assertCandidateScope(\n\tbase: CandidateManifest,\n\tcandidate: CandidateManifest,\n\twritable: readonly string[],\n): void {\n\tconst before = new Map(base.files.map((file) => [file.path, digestObject(file)]));\n\tconst after = new Map(candidate.files.map((file) => [file.path, digestObject(file)]));\n\tfor (const directory of base.directories) before.set(`${directory}/`, \"directory\");\n\tfor (const directory of candidate.directories) after.set(`${directory}/`, \"directory\");\n\tfor (const path of new Set([...before.keys(), ...after.keys()])) {\n\t\tif (before.get(path) === after.get(path)) continue;\n\t\tconst normalized = path.endsWith(\"/\") ? path.slice(0, -1) : path;\n\t\tif (!writable.some((scope) => normalized === scope || normalized.startsWith(`${scope}/`)))\n\t\t\tthrow new VerifiedRunError(\"scope_changed\");\n\t}\n}\n\nexport function storeCandidate(snapshot: CandidateSnapshot, runPath: string): void {\n\tfor (const [digest, bytes] of snapshot.contents) publishBytes(join(runPath, \"blobs\", digest), bytes);\n\tpublishObject(join(runPath, \"candidates\", `${snapshot.digest}.json`), snapshot.manifest);\n}\n\nexport function loadCandidate(runPath: string, digest: string, limits: RunPhaseBudget): CandidateSnapshot {\n\tif (!/^[a-f0-9]{64}$/.test(digest)) throw new VerifiedRunError(\"integrity\");\n\tconst raw = readJson(join(runPath, \"candidates\", `${digest}.json`), 4194304);\n\tif (\n\t\tdigestObject(raw) !== digest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"version\" in raw) ||\n\t\traw.version !== 1 ||\n\t\t!(\"files\" in raw) ||\n\t\t!Array.isArray(raw.files) ||\n\t\t!(\"directories\" in raw) ||\n\t\t!Array.isArray(raw.directories)\n\t) {\n\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n\tif (raw.files.length + raw.directories.length > limits.maxFiles) throw new VerifiedRunError(\"integrity\");\n\tconst files: CandidateFile[] = [];\n\tconst directories: string[] = [];\n\tconst paths = new Set<string>();\n\tlet total = 0;\n\tfor (const directory of raw.directories) {\n\t\tif (typeof directory !== \"string\") throw new VerifiedRunError(\"integrity\");\n\t\tsafePath(directory);\n\t\tif (paths.has(directory)) throw new VerifiedRunError(\"integrity\");\n\t\tpaths.add(directory);\n\t\tdirectories.push(directory);\n\t}\n\tconst contents = new Map<string, Buffer>();\n\tconst rawFiles: readonly unknown[] = raw.files;\n\tfor (const file of rawFiles) {\n\t\tif (\n\t\t\ttypeof file !== \"object\" ||\n\t\t\tfile === null ||\n\t\t\t!(\"path\" in file) ||\n\t\t\ttypeof file.path !== \"string\" ||\n\t\t\t!(\"digest\" in file) ||\n\t\t\ttypeof file.digest !== \"string\" ||\n\t\t\t!/^[a-f0-9]{64}$/.test(file.digest) ||\n\t\t\t!(\"mode\" in file) ||\n\t\t\ttypeof file.mode !== \"number\" ||\n\t\t\t!Number.isSafeInteger(file.mode) ||\n\t\t\tfile.mode < 0 ||\n\t\t\tfile.mode > 0o777 ||\n\t\t\t!(\"size\" in file) ||\n\t\t\ttypeof file.size !== \"number\" ||\n\t\t\t!Number.isSafeInteger(file.size) ||\n\t\t\tfile.size < 0\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\tsafePath(file.path);\n\t\tif (paths.has(file.path)) throw new VerifiedRunError(\"integrity\");\n\t\tpaths.add(file.path);\n\t\ttotal += file.size;\n\t\tif (total > limits.maxBytes) throw new VerifiedRunError(\"integrity\");\n\t\tlet bytes: Buffer;\n\t\ttry {\n\t\t\tbytes = readRegularFile(join(runPath, \"blobs\", file.digest), file.size);\n\t\t} catch (error) {\n\t\t\tif (error instanceof Error) throw new VerifiedRunError(\"integrity\");\n\t\t\tthrow error;\n\t\t}\n\t\tif (bytes.length !== file.size || digestBytes(bytes) !== file.digest) throw new VerifiedRunError(\"integrity\");\n\t\tcontents.set(file.digest, bytes);\n\t\tfiles.push(Object.freeze({ path: file.path, mode: file.mode, digest: file.digest, size: file.size }));\n\t}\n\tconst manifest: CandidateManifest = Object.freeze({\n\t\tversion: 1,\n\t\tdirectories: Object.freeze(directories),\n\t\tfiles: Object.freeze(files),\n\t});\n\tif (digestObject(manifest) !== digest) throw new VerifiedRunError(\"integrity\");\n\treturn { manifest, digest, contents };\n}\n"]}

package/dist/core/verified-run/check-receipt.d.ts

@@ -0,0 +1,18 @@
+import type { RunCheck, RunContract } from "omk-protocol";
+import type { EvidenceReceipt } from "../../types/evidence.ts";
+import type { SandboxOutcome } from "./broker.ts";
+import type { CandidateManifest } from "./candidate.ts";
+import type { CheckObservation } from "./evidence-binding.ts";
+export declare function preflightCheckReceipts(contract: RunContract): void;
+export declare function storeCheckReceipt(runPath: string, contract: RunContract, execution: {
+    readonly check: RunCheck;
+    readonly executionId: string;
+    readonly result: SandboxOutcome;
+    readonly timeoutMs: number;
+    readonly manifest: CandidateManifest;
+}): string;
+export declare function readCheckReceipts(runPath: string, contract: RunContract, binding: {
+    readonly manifest: CandidateManifest;
+    readonly checks: readonly CheckObservation[];
+}): readonly EvidenceReceipt[];
+//# sourceMappingURL=check-receipt.d.ts.map

package/dist/core/verified-run/check-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-receipt.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/check-receipt.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAI1D,OAAO,KAAK,EAEX,eAAe,EAGf,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAS9D,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAElE;AAuBD,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,EACrB,SAAS,EAAE;IACV,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACrC,GACC,MAAM,CA0BR;AAED,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE;IACR,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C,GACC,SAAS,eAAe,EAAE,CA+B5B","sourcesContent":["import { join } from \"node:path\";\nimport type { RunCheck, RunContract } from \"omk-protocol\";\nimport { assertCredentialFreeEvidenceCommand } from \"../../guardrails/command-redaction.ts\";\nimport { createEvidenceReceipt, parseSha256Hex, validateEvidenceReceipt } from \"../../guardrails/evidence-receipt.ts\";\nimport { computeWorkspaceManifestSha256 } from \"../../guardrails/workspace-fingerprint.ts\";\nimport type {\n\tEvidenceCommandDescriptor,\n\tEvidenceReceipt,\n\tEvidenceReceiptDisposition,\n\tWorkspaceFingerprint,\n} from \"../../types/evidence.ts\";\nimport { redactSensitiveTextForced } from \"../redaction.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport type { SandboxOutcome } from \"./broker.ts\";\nimport type { CandidateManifest } from \"./candidate.ts\";\nimport type { CheckObservation } from \"./evidence-binding.ts\";\nimport { publishObject, readJson, VerifiedRunError } from \"./storage.ts\";\n\nfunction command(check: RunCheck): EvidenceCommandDescriptor {\n\tconst executable = check.argv[0];\n\tif (!executable) throw new VerifiedRunError(\"integrity\");\n\treturn { kind: \"argv\", executable, argv: check.argv.slice(1) };\n}\n\nexport function preflightCheckReceipts(contract: RunContract): void {\n\tfor (const check of contract.checks) assertCredentialFreeEvidenceCommand(command(check));\n}\n\nfunction fingerprint(manifest: CandidateManifest): WorkspaceFingerprint {\n\tconst files = [...manifest.files].sort((left, right) =>\n\t\tleft.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n\t);\n\tconst scope = { root: \"/workspace\", artifactPaths: files.map((file) => file.path) };\n\tconst artifacts = files.map((file) => ({\n\t\tpath: file.path,\n\t\tstate: \"file\" as const,\n\t\tsha256: parseSha256Hex(file.digest),\n\t\tsize: file.size,\n\t}));\n\treturn { kind: \"artifact-set\", scope, artifacts, manifestSha256: computeWorkspaceManifestSha256(scope, artifacts) };\n}\n\nfunction disposition(result: Pick<SandboxOutcome, \"failure\" | \"exitCode\">): EvidenceReceiptDisposition {\n\tif (result.failure === \"deadline\") return { status: \"timeout\", exitCode: null };\n\tif (result.failure === \"cancelled\" || result.failure === \"output_limit\" || result.exitCode === null)\n\t\treturn { status: \"aborted\", exitCode: null };\n\treturn result.exitCode === 0 ? { status: \"passed\", exitCode: 0 } : { status: \"failed\", exitCode: result.exitCode };\n}\n\nexport function storeCheckReceipt(\n\trunPath: string,\n\tcontract: RunContract,\n\texecution: {\n\t\treadonly check: RunCheck;\n\t\treadonly executionId: string;\n\t\treadonly result: SandboxOutcome;\n\t\treadonly timeoutMs: number;\n\t\treadonly manifest: CandidateManifest;\n\t},\n): string {\n\tconst workspace = fingerprint(execution.manifest);\n\tconst result = execution.result;\n\tconst receipt = createEvidenceReceipt({\n\t\treceiptId: execution.executionId,\n\t\tgoalId: contract.runId,\n\t\tclaim: `Exact stdout for ${execution.check.claimId}`,\n\t\tcommand: command(execution.check),\n\t\tcwd: \"/workspace\",\n\t\ttimeoutMs: execution.timeoutMs,\n\t\tstartedAt: result.startedAt,\n\t\tfinishedAt: result.finishedAt,\n\t\tdurationMs: Date.parse(result.finishedAt) - Date.parse(result.startedAt),\n\t\tworkspaceBefore: workspace,\n\t\tworkspaceAfter: workspace,\n\t\texecutor: \"internal\",\n\t\ttoolCallId: execution.executionId,\n\t\talreadyRedactedOutput: {\n\t\t\tredactionPolicyId: \"omk-verified-run-v1+forced-text+prefix-32k-per-stream\",\n\t\t\tstdout: Buffer.from(redactSensitiveTextForced(result.stdout.toString(\"utf8\"))).subarray(0, 32768),\n\t\t\tstderr: Buffer.from(redactSensitiveTextForced(result.stderr.toString(\"utf8\"))).subarray(0, 32768),\n\t\t},\n\t\t...disposition(result),\n\t});\n\tpublishObject(join(runPath, \"receipts\", `${receipt.envelope.coreSha256}.json`), receipt);\n\treturn receipt.envelope.coreSha256;\n}\n\nexport function readCheckReceipts(\n\trunPath: string,\n\tcontract: RunContract,\n\tbinding: {\n\t\treadonly manifest: CandidateManifest;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): readonly EvidenceReceipt[] {\n\tconst workspace = fingerprint(binding.manifest);\n\treturn Object.freeze(\n\t\tbinding.checks.map((observation) => {\n\t\t\tconst digest = observation.receiptCoreDigest;\n\t\t\tif (!digest || !/^[a-f0-9]{64}$/.test(digest)) throw new VerifiedRunError(\"integrity\");\n\t\t\tconst receipt = validateEvidenceReceipt(readJson(join(runPath, \"receipts\", `${digest}.json`), 8388608));\n\t\t\tconst core = receipt.core;\n\t\t\tconst check = contract.checks.find((item) => item.claimId === observation.claimId);\n\t\t\tconst expected = disposition(observation);\n\t\t\tif (\n\t\t\t\t!check ||\n\t\t\t\tcanonicalJson(receipt.envelope) !== canonicalJson({ coreSha256: digest }) ||\n\t\t\t\tcore.receiptId !== observation.executionId ||\n\t\t\t\tcore.toolCallId !== observation.executionId ||\n\t\t\t\tcore.goalId !== contract.runId ||\n\t\t\t\tcore.executor !== \"internal\" ||\n\t\t\t\tcore.claim !== `Exact stdout for ${check.claimId}` ||\n\t\t\t\tcore.cwd !== \"/workspace\" ||\n\t\t\t\tcore.status !== expected.status ||\n\t\t\t\tcore.exitCode !== expected.exitCode ||\n\t\t\t\tcore.timeoutMs === null ||\n\t\t\t\tcore.timeoutMs > contract.budget.verifyMs ||\n\t\t\t\tcanonicalJson(core.command) !== canonicalJson(command(check)) ||\n\t\t\t\tcanonicalJson(core.workspaceBefore) !== canonicalJson(workspace) ||\n\t\t\t\tcanonicalJson(core.workspaceAfter) !== canonicalJson(workspace)\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\treturn receipt;\n\t\t}),\n\t);\n}\n"]}

package/dist/core/verified-run/check-receipt.js

@@ -0,0 +1,92 @@
+import { join } from "node:path";
+import { assertCredentialFreeEvidenceCommand } from "../../guardrails/command-redaction.js";
+import { createEvidenceReceipt, parseSha256Hex, validateEvidenceReceipt } from "../../guardrails/evidence-receipt.js";
+import { computeWorkspaceManifestSha256 } from "../../guardrails/workspace-fingerprint.js";
+import { redactSensitiveTextForced } from "../redaction.js";
+import { canonicalJson } from "../run-journal.js";
+import { publishObject, readJson, VerifiedRunError } from "./storage.js";
+function command(check) {
+    const executable = check.argv[0];
+    if (!executable)
+        throw new VerifiedRunError("integrity");
+    return { kind: "argv", executable, argv: check.argv.slice(1) };
+}
+export function preflightCheckReceipts(contract) {
+    for (const check of contract.checks)
+        assertCredentialFreeEvidenceCommand(command(check));
+}
+function fingerprint(manifest) {
+    const files = [...manifest.files].sort((left, right) => left.path < right.path ? -1 : left.path > right.path ? 1 : 0);
+    const scope = { root: "/workspace", artifactPaths: files.map((file) => file.path) };
+    const artifacts = files.map((file) => ({
+        path: file.path,
+        state: "file",
+        sha256: parseSha256Hex(file.digest),
+        size: file.size,
+    }));
+    return { kind: "artifact-set", scope, artifacts, manifestSha256: computeWorkspaceManifestSha256(scope, artifacts) };
+}
+function disposition(result) {
+    if (result.failure === "deadline")
+        return { status: "timeout", exitCode: null };
+    if (result.failure === "cancelled" || result.failure === "output_limit" || result.exitCode === null)
+        return { status: "aborted", exitCode: null };
+    return result.exitCode === 0 ? { status: "passed", exitCode: 0 } : { status: "failed", exitCode: result.exitCode };
+}
+export function storeCheckReceipt(runPath, contract, execution) {
+    const workspace = fingerprint(execution.manifest);
+    const result = execution.result;
+    const receipt = createEvidenceReceipt({
+        receiptId: execution.executionId,
+        goalId: contract.runId,
+        claim: `Exact stdout for ${execution.check.claimId}`,
+        command: command(execution.check),
+        cwd: "/workspace",
+        timeoutMs: execution.timeoutMs,
+        startedAt: result.startedAt,
+        finishedAt: result.finishedAt,
+        durationMs: Date.parse(result.finishedAt) - Date.parse(result.startedAt),
+        workspaceBefore: workspace,
+        workspaceAfter: workspace,
+        executor: "internal",
+        toolCallId: execution.executionId,
+        alreadyRedactedOutput: {
+            redactionPolicyId: "omk-verified-run-v1+forced-text+prefix-32k-per-stream",
+            stdout: Buffer.from(redactSensitiveTextForced(result.stdout.toString("utf8"))).subarray(0, 32768),
+            stderr: Buffer.from(redactSensitiveTextForced(result.stderr.toString("utf8"))).subarray(0, 32768),
+        },
+        ...disposition(result),
+    });
+    publishObject(join(runPath, "receipts", `${receipt.envelope.coreSha256}.json`), receipt);
+    return receipt.envelope.coreSha256;
+}
+export function readCheckReceipts(runPath, contract, binding) {
+    const workspace = fingerprint(binding.manifest);
+    return Object.freeze(binding.checks.map((observation) => {
+        const digest = observation.receiptCoreDigest;
+        if (!digest || !/^[a-f0-9]{64}$/.test(digest))
+            throw new VerifiedRunError("integrity");
+        const receipt = validateEvidenceReceipt(readJson(join(runPath, "receipts", `${digest}.json`), 8388608));
+        const core = receipt.core;
+        const check = contract.checks.find((item) => item.claimId === observation.claimId);
+        const expected = disposition(observation);
+        if (!check ||
+            canonicalJson(receipt.envelope) !== canonicalJson({ coreSha256: digest }) ||
+            core.receiptId !== observation.executionId ||
+            core.toolCallId !== observation.executionId ||
+            core.goalId !== contract.runId ||
+            core.executor !== "internal" ||
+            core.claim !== `Exact stdout for ${check.claimId}` ||
+            core.cwd !== "/workspace" ||
+            core.status !== expected.status ||
+            core.exitCode !== expected.exitCode ||
+            core.timeoutMs === null ||
+            core.timeoutMs > contract.budget.verifyMs ||
+            canonicalJson(core.command) !== canonicalJson(command(check)) ||
+            canonicalJson(core.workspaceBefore) !== canonicalJson(workspace) ||
+            canonicalJson(core.workspaceAfter) !== canonicalJson(workspace))
+            throw new VerifiedRunError("integrity");
+        return receipt;
+    }));
+}
+//# sourceMappingURL=check-receipt.js.map

package/dist/core/verified-run/check-receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-receipt.js","sourceRoot":"","sources":["../../../src/core/verified-run/check-receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACtH,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAO3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIlD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEzE,SAAS,OAAO,CAAC,KAAe,EAA6B;IAC5D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAAA,CAC/D;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAqB,EAAQ;IACnE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM;QAAE,mCAAmC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACzF;AAED,SAAS,WAAW,CAAC,QAA2B,EAAwB;IACvE,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACpF,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,MAAe;QACtB,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,IAAI;KACf,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,8BAA8B,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;AAAA,CACpH;AAED,SAAS,WAAW,CAAC,MAAoD,EAA8B;IACtG,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChF,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,KAAK,cAAc,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAClG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AAAA,CACnH;AAED,MAAM,UAAU,iBAAiB,CAChC,OAAe,EACf,QAAqB,EACrB,SAMC,EACQ;IACT,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACrC,SAAS,EAAE,SAAS,CAAC,WAAW;QAChC,MAAM,EAAE,QAAQ,CAAC,KAAK;QACtB,KAAK,EAAE,oBAAoB,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE;QACpD,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;QACjC,GAAG,EAAE,YAAY;QACjB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;QACxE,eAAe,EAAE,SAAS;QAC1B,cAAc,EAAE,SAAS;QACzB,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,SAAS,CAAC,WAAW;QACjC,qBAAqB,EAAE;YACtB,iBAAiB,EAAE,uDAAuD;YAC1E,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC;YACjG,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC;SACjG;QACD,GAAG,WAAW,CAAC,MAAM,CAAC;KACtB,CAAC,CAAC;IACH,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACzF,OAAO,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;AAAA,CACnC;AAED,MAAM,UAAU,iBAAiB,CAChC,OAAe,EACf,QAAqB,EACrB,OAGC,EAC4B;IAC7B,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,MAAM,CACnB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,iBAAiB,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACxG,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QAC1C,IACC,CAAC,KAAK;YACN,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YACzE,IAAI,CAAC,SAAS,KAAK,WAAW,CAAC,WAAW;YAC1C,IAAI,CAAC,UAAU,KAAK,WAAW,CAAC,WAAW;YAC3C,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK;YAC9B,IAAI,CAAC,QAAQ,KAAK,UAAU;YAC5B,IAAI,CAAC,KAAK,KAAK,oBAAoB,KAAK,CAAC,OAAO,EAAE;YAClD,IAAI,CAAC,GAAG,KAAK,YAAY;YACzB,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAC/B,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;YACnC,IAAI,CAAC,SAAS,KAAK,IAAI;YACvB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ;YACzC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7D,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,aAAa,CAAC,SAAS,CAAC;YAChE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,SAAS,CAAC;YAE/D,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IAAA,CACf,CAAC,CACF,CAAC;AAAA,CACF","sourcesContent":["import { join } from \"node:path\";\nimport type { RunCheck, RunContract } from \"omk-protocol\";\nimport { assertCredentialFreeEvidenceCommand } from \"../../guardrails/command-redaction.ts\";\nimport { createEvidenceReceipt, parseSha256Hex, validateEvidenceReceipt } from \"../../guardrails/evidence-receipt.ts\";\nimport { computeWorkspaceManifestSha256 } from \"../../guardrails/workspace-fingerprint.ts\";\nimport type {\n\tEvidenceCommandDescriptor,\n\tEvidenceReceipt,\n\tEvidenceReceiptDisposition,\n\tWorkspaceFingerprint,\n} from \"../../types/evidence.ts\";\nimport { redactSensitiveTextForced } from \"../redaction.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport type { SandboxOutcome } from \"./broker.ts\";\nimport type { CandidateManifest } from \"./candidate.ts\";\nimport type { CheckObservation } from \"./evidence-binding.ts\";\nimport { publishObject, readJson, VerifiedRunError } from \"./storage.ts\";\n\nfunction command(check: RunCheck): EvidenceCommandDescriptor {\n\tconst executable = check.argv[0];\n\tif (!executable) throw new VerifiedRunError(\"integrity\");\n\treturn { kind: \"argv\", executable, argv: check.argv.slice(1) };\n}\n\nexport function preflightCheckReceipts(contract: RunContract): void {\n\tfor (const check of contract.checks) assertCredentialFreeEvidenceCommand(command(check));\n}\n\nfunction fingerprint(manifest: CandidateManifest): WorkspaceFingerprint {\n\tconst files = [...manifest.files].sort((left, right) =>\n\t\tleft.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n\t);\n\tconst scope = { root: \"/workspace\", artifactPaths: files.map((file) => file.path) };\n\tconst artifacts = files.map((file) => ({\n\t\tpath: file.path,\n\t\tstate: \"file\" as const,\n\t\tsha256: parseSha256Hex(file.digest),\n\t\tsize: file.size,\n\t}));\n\treturn { kind: \"artifact-set\", scope, artifacts, manifestSha256: computeWorkspaceManifestSha256(scope, artifacts) };\n}\n\nfunction disposition(result: Pick<SandboxOutcome, \"failure\" | \"exitCode\">): EvidenceReceiptDisposition {\n\tif (result.failure === \"deadline\") return { status: \"timeout\", exitCode: null };\n\tif (result.failure === \"cancelled\" || result.failure === \"output_limit\" || result.exitCode === null)\n\t\treturn { status: \"aborted\", exitCode: null };\n\treturn result.exitCode === 0 ? { status: \"passed\", exitCode: 0 } : { status: \"failed\", exitCode: result.exitCode };\n}\n\nexport function storeCheckReceipt(\n\trunPath: string,\n\tcontract: RunContract,\n\texecution: {\n\t\treadonly check: RunCheck;\n\t\treadonly executionId: string;\n\t\treadonly result: SandboxOutcome;\n\t\treadonly timeoutMs: number;\n\t\treadonly manifest: CandidateManifest;\n\t},\n): string {\n\tconst workspace = fingerprint(execution.manifest);\n\tconst result = execution.result;\n\tconst receipt = createEvidenceReceipt({\n\t\treceiptId: execution.executionId,\n\t\tgoalId: contract.runId,\n\t\tclaim: `Exact stdout for ${execution.check.claimId}`,\n\t\tcommand: command(execution.check),\n\t\tcwd: \"/workspace\",\n\t\ttimeoutMs: execution.timeoutMs,\n\t\tstartedAt: result.startedAt,\n\t\tfinishedAt: result.finishedAt,\n\t\tdurationMs: Date.parse(result.finishedAt) - Date.parse(result.startedAt),\n\t\tworkspaceBefore: workspace,\n\t\tworkspaceAfter: workspace,\n\t\texecutor: \"internal\",\n\t\ttoolCallId: execution.executionId,\n\t\talreadyRedactedOutput: {\n\t\t\tredactionPolicyId: \"omk-verified-run-v1+forced-text+prefix-32k-per-stream\",\n\t\t\tstdout: Buffer.from(redactSensitiveTextForced(result.stdout.toString(\"utf8\"))).subarray(0, 32768),\n\t\t\tstderr: Buffer.from(redactSensitiveTextForced(result.stderr.toString(\"utf8\"))).subarray(0, 32768),\n\t\t},\n\t\t...disposition(result),\n\t});\n\tpublishObject(join(runPath, \"receipts\", `${receipt.envelope.coreSha256}.json`), receipt);\n\treturn receipt.envelope.coreSha256;\n}\n\nexport function readCheckReceipts(\n\trunPath: string,\n\tcontract: RunContract,\n\tbinding: {\n\t\treadonly manifest: CandidateManifest;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): readonly EvidenceReceipt[] {\n\tconst workspace = fingerprint(binding.manifest);\n\treturn Object.freeze(\n\t\tbinding.checks.map((observation) => {\n\t\t\tconst digest = observation.receiptCoreDigest;\n\t\t\tif (!digest || !/^[a-f0-9]{64}$/.test(digest)) throw new VerifiedRunError(\"integrity\");\n\t\t\tconst receipt = validateEvidenceReceipt(readJson(join(runPath, \"receipts\", `${digest}.json`), 8388608));\n\t\t\tconst core = receipt.core;\n\t\t\tconst check = contract.checks.find((item) => item.claimId === observation.claimId);\n\t\t\tconst expected = disposition(observation);\n\t\t\tif (\n\t\t\t\t!check ||\n\t\t\t\tcanonicalJson(receipt.envelope) !== canonicalJson({ coreSha256: digest }) ||\n\t\t\t\tcore.receiptId !== observation.executionId ||\n\t\t\t\tcore.toolCallId !== observation.executionId ||\n\t\t\t\tcore.goalId !== contract.runId ||\n\t\t\t\tcore.executor !== \"internal\" ||\n\t\t\t\tcore.claim !== `Exact stdout for ${check.claimId}` ||\n\t\t\t\tcore.cwd !== \"/workspace\" ||\n\t\t\t\tcore.status !== expected.status ||\n\t\t\t\tcore.exitCode !== expected.exitCode ||\n\t\t\t\tcore.timeoutMs === null ||\n\t\t\t\tcore.timeoutMs > contract.budget.verifyMs ||\n\t\t\t\tcanonicalJson(core.command) !== canonicalJson(command(check)) ||\n\t\t\t\tcanonicalJson(core.workspaceBefore) !== canonicalJson(workspace) ||\n\t\t\t\tcanonicalJson(core.workspaceAfter) !== canonicalJson(workspace)\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\treturn receipt;\n\t\t}),\n\t);\n}\n"]}

package/dist/core/verified-run/coordinator.d.ts

@@ -0,0 +1,39 @@
+import { type RunContract } from "omk-protocol";
+import { type TaskRecoveryInspection } from "./dag-recovery.ts";
+import { type VerifiedRunEvidence } from "./evidence.ts";
+import { type RecoveryInspection } from "./recovery.ts";
+import type { RunProjection } from "./run-types.ts";
+import type { VerifiedRunRuntime } from "./session-port.ts";
+import { type WriterRecoveryInspection } from "./writer-recovery.ts";
+export interface VerifiedRunApproval {
+    /** Trusted host grant, not a JSON field in the model-authored contract or command. */
+    readonly approvedContractDigest: string;
+    readonly signal?: AbortSignal;
+}
+export interface VerifiedRunPlan {
+    readonly profile: RunContract["profile"];
+    readonly contractDigest: string;
+    readonly baseDigest: string;
+    readonly baseMatches: boolean;
+    readonly environmentDigest: string;
+    readonly checks: readonly string[];
+    readonly executionRequested: false;
+}
+export declare function planVerifiedRun(input: unknown): VerifiedRunPlan;
+/** Owns the opt-in single-host run; session capabilities come only from trusted host composition. */
+export declare class RunCoordinator {
+    private readonly stateRoot;
+    private readonly runtime;
+    constructor(stateRoot: string, runtime?: VerifiedRunRuntime);
+    inspect(runId: string): RunProjection;
+    inspectRecovery(runId: string): RecoveryInspection;
+    inspectWriterRecovery(runId: string): WriterRecoveryInspection;
+    inspectTaskRecovery(runId: string): TaskRecoveryInspection;
+    retryTasks(input: unknown, approval: VerifiedRunApproval): Promise<RunProjection>;
+    evidence(runId: string): VerifiedRunEvidence;
+    artifact(runId: string, candidateDigest: string, path: string): Buffer;
+    resume(input: unknown, approval: VerifiedRunApproval): Promise<RunProjection>;
+    restartWriter(input: unknown, approval: VerifiedRunApproval): Promise<RunProjection>;
+    start(input: unknown, request: unknown, approval: VerifiedRunApproval): Promise<RunProjection>;
+}
+//# sourceMappingURL=coordinator.d.ts.map

package/dist/core/verified-run/coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/coordinator.ts"],"names":[],"mappings":"AAEA,OAAO,EAMN,KAAK,WAAW,EAChB,MAAM,cAAc,CAAC;AAMtB,OAAO,EAAsC,KAAK,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACpG,OAAO,EAAoC,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAG3F,OAAO,EAAsB,KAAK,kBAAkB,EAAyB,MAAM,eAAe,CAAC;AAEnG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAY5D,OAAO,EAAgD,KAAK,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEnH,MAAM,WAAW,mBAAmB;IACnC,sFAAsF;IACtF,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AACD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC;CACnC;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAY/D;AAED,qGAAqG;AACrG,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,YAAY,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,EAG1D;IAED,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAKpC;IAED,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAKjD;IAED,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAK7D;IAED,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,CAKzD;IAEK,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAKtF;IAED,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAW3C;IAED,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CASrE;IAEK,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAKlF;IAEK,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAQzF;IAEK,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAkEnG;CACD","sourcesContent":["import { join, resolve } from \"node:path\";\nimport { performance } from \"node:perf_hooks\";\nimport {\n\tparseRunContract,\n\tparseRunResumeCommand,\n\tparseRunStartCommand,\n\tparseRunTaskRetryCommand,\n\tparseRunWriterRestartCommand,\n\ttype RunContract,\n} from \"omk-protocol\";\nimport { ensureDurableDirectorySync } from \"../durable-file-io.ts\";\nimport { acquireSessionOwnerLeaseSync } from \"../session-owner-lease.ts\";\nimport { commandEnvironmentDigest, probeVerifiedSandbox } from \"./broker.ts\";\nimport { captureCandidate, materializeCandidate, storeCandidate } from \"./candidate.ts\";\nimport { preflightCheckReceipts } from \"./check-receipt.ts\";\nimport { inspectTaskRecovery, retryDagTasks, type TaskRecoveryInspection } from \"./dag-recovery.ts\";\nimport { createRunIssuer, readRunEvidence, type VerifiedRunEvidence } from \"./evidence.ts\";\nimport { journalPath, readRunJournal, VerifiedRunJournal } from \"./journal.ts\";\nimport type { RunPhaseContext } from \"./phase-context.ts\";\nimport { inspectRunRecovery, type RecoveryInspection, resumeFrozenCandidate } from \"./recovery.ts\";\nimport { anchorRunBudget, readRunClock } from \"./recovery-clock.ts\";\nimport type { RunProjection } from \"./run-types.ts\";\nimport type { VerifiedRunRuntime } from \"./session-port.ts\";\nimport {\n\tassertStateOutsideWorkspace,\n\tdigestBytes,\n\tdigestObject,\n\treadRegularFile,\n\tstateRunPath,\n\tVerifiedRunError,\n} from \"./storage.ts\";\nimport { verifyCandidate } from \"./verification-phase.ts\";\nimport { publishWriterCandidate } from \"./writer-completion.ts\";\nimport { executeWriter } from \"./writer-phase.ts\";\nimport { inspectWriterRecovery, restartIsolatedWriter, type WriterRecoveryInspection } from \"./writer-recovery.ts\";\n\nexport interface VerifiedRunApproval {\n\t/** Trusted host grant, not a JSON field in the model-authored contract or command. */\n\treadonly approvedContractDigest: string;\n\treadonly signal?: AbortSignal;\n}\nexport interface VerifiedRunPlan {\n\treadonly profile: RunContract[\"profile\"];\n\treadonly contractDigest: string;\n\treadonly baseDigest: string;\n\treadonly baseMatches: boolean;\n\treadonly environmentDigest: string;\n\treadonly checks: readonly string[];\n\treadonly executionRequested: false;\n}\n\nexport function planVerifiedRun(input: unknown): VerifiedRunPlan {\n\tconst contract = parseRunContract(input);\n\tconst snapshot = captureCandidate(contract.workspace.root, contract.budget);\n\treturn Object.freeze({\n\t\tprofile: contract.profile,\n\t\tcontractDigest: digestObject(contract),\n\t\tbaseDigest: snapshot.digest,\n\t\tbaseMatches: snapshot.digest === contract.workspace.baseDigest,\n\t\tenvironmentDigest: commandEnvironmentDigest(contract, \"gated-v1\"),\n\t\tchecks: Object.freeze(contract.checks.map((check) => check.claimId)),\n\t\texecutionRequested: false,\n\t});\n}\n\n/** Owns the opt-in single-host run; session capabilities come only from trusted host composition. */\nexport class RunCoordinator {\n\tprivate readonly stateRoot: string;\n\tprivate readonly runtime: VerifiedRunRuntime | undefined;\n\tconstructor(stateRoot: string, runtime?: VerifiedRunRuntime) {\n\t\tthis.stateRoot = resolve(stateRoot);\n\t\tthis.runtime = runtime;\n\t}\n\n\tinspect(runId: string): RunProjection {\n\t\tconst journal = readRunJournal(stateRunPath(this.stateRoot, runId));\n\t\tif (!journal || journal.state.runId !== runId) throw new VerifiedRunError(\"missing_run\");\n\t\tif (journal.state.receiptDigest) this.evidence(runId);\n\t\treturn journal.state;\n\t}\n\n\tinspectRecovery(runId: string): RecoveryInspection {\n\t\tconst report = inspectRunRecovery(stateRunPath(this.stateRoot, runId));\n\t\tif (report.state.runId !== runId) throw new VerifiedRunError(\"missing_run\");\n\t\tif (report.state.receiptDigest) this.evidence(runId);\n\t\treturn report;\n\t}\n\n\tinspectWriterRecovery(runId: string): WriterRecoveryInspection {\n\t\tconst report = inspectWriterRecovery(stateRunPath(this.stateRoot, runId));\n\t\tif (report.state.runId !== runId) throw new VerifiedRunError(\"missing_run\");\n\t\tif (report.state.receiptDigest) this.evidence(runId);\n\t\treturn report;\n\t}\n\n\tinspectTaskRecovery(runId: string): TaskRecoveryInspection {\n\t\tconst report = inspectTaskRecovery(stateRunPath(this.stateRoot, runId));\n\t\tif (report.state.runId !== runId) throw new VerifiedRunError(\"missing_run\");\n\t\tif (report.state.receiptDigest) this.evidence(runId);\n\t\treturn report;\n\t}\n\n\tasync retryTasks(input: unknown, approval: VerifiedRunApproval): Promise<RunProjection> {\n\t\tconst command = parseRunTaskRetryCommand(input);\n\t\tif (approval.approvedContractDigest !== command.contractDigest) throw new VerifiedRunError(\"approval\");\n\t\tawait retryDagTasks(stateRunPath(this.stateRoot, command.runId), command, approval.signal);\n\t\treturn this.inspect(command.runId);\n\t}\n\n\tevidence(runId: string): VerifiedRunEvidence {\n\t\tconst runPath = stateRunPath(this.stateRoot, runId);\n\t\tconst journal = readRunJournal(runPath);\n\t\tconst first = journal?.records[0]?.event;\n\t\tif (!journal || first?.kind !== \"created\" || first.contract.runId !== runId)\n\t\t\tthrow new VerifiedRunError(\"missing_run\");\n\t\treturn readRunEvidence(\n\t\t\trunPath,\n\t\t\tjournal,\n\t\t\tcommandEnvironmentDigest(first.contract, journal.state.budget ? \"gated-v1\" : \"legacy\"),\n\t\t);\n\t}\n\n\tartifact(runId: string, candidateDigest: string, path: string): Buffer {\n\t\tconst evidence = this.evidence(runId);\n\t\tif (!evidence.verified || candidateDigest !== evidence.candidateDigest)\n\t\t\tthrow new VerifiedRunError(\"candidate_mismatch\");\n\t\tconst file = evidence.manifest.files.find((entry) => entry.path === path);\n\t\tif (!file) throw new VerifiedRunError(\"artifact_scope\");\n\t\tconst bytes = readRegularFile(join(stateRunPath(this.stateRoot, runId), \"blobs\", file.digest), file.size);\n\t\tif (digestBytes(bytes) !== file.digest || bytes.length !== file.size) throw new VerifiedRunError(\"integrity\");\n\t\treturn bytes;\n\t}\n\n\tasync resume(input: unknown, approval: VerifiedRunApproval): Promise<RunProjection> {\n\t\tconst command = parseRunResumeCommand(input);\n\t\tif (approval.approvedContractDigest !== command.contractDigest) throw new VerifiedRunError(\"approval\");\n\t\tawait resumeFrozenCandidate(stateRunPath(this.stateRoot, command.runId), command, approval.signal);\n\t\treturn this.inspect(command.runId);\n\t}\n\n\tasync restartWriter(input: unknown, approval: VerifiedRunApproval): Promise<RunProjection> {\n\t\tconst command = parseRunWriterRestartCommand(input);\n\t\tif (approval.approvedContractDigest !== command.contractDigest) throw new VerifiedRunError(\"approval\");\n\t\tawait restartIsolatedWriter(stateRunPath(this.stateRoot, command.runId), command, {\n\t\t\t...(approval.signal ? { signal: approval.signal } : {}),\n\t\t\t...(this.runtime ? { runtime: this.runtime } : {}),\n\t\t});\n\t\treturn this.inspect(command.runId);\n\t}\n\n\tasync start(input: unknown, request: unknown, approval: VerifiedRunApproval): Promise<RunProjection> {\n\t\tconst began = performance.now();\n\t\tconst clock = readRunClock();\n\t\tconst contract = parseRunContract(input);\n\t\tconst command = parseRunStartCommand(request);\n\t\tconst contractDigest = digestObject(contract);\n\t\tif (approval.approvedContractDigest !== contractDigest) throw new VerifiedRunError(\"approval\");\n\t\tif (command.contractDigest !== contractDigest || command.runId !== contract.runId)\n\t\t\tthrow new VerifiedRunError(\"command_conflict\");\n\t\tif (approval.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\tassertStateOutsideWorkspace(this.stateRoot, contract.workspace.root);\n\t\tconst runPath = stateRunPath(this.stateRoot, contract.runId);\n\t\tconst existing = readRunJournal(runPath);\n\t\tif (existing) {\n\t\t\tconst first = existing.records[0]?.event;\n\t\t\tif (\n\t\t\t\tfirst?.kind !== \"created\" ||\n\t\t\t\tdigestObject(first.command) !== digestObject(command) ||\n\t\t\t\tdigestObject(first.contract) !== contractDigest\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"command_conflict\");\n\t\t\treturn this.inspect(contract.runId);\n\t\t}\n\t\tconst base = captureCandidate(contract.workspace.root, contract.budget);\n\t\tif (base.digest !== contract.workspace.baseDigest) throw new VerifiedRunError(\"base_conflict\");\n\t\tconst environmentDigest = commandEnvironmentDigest(contract, \"gated-v1\");\n\t\tpreflightCheckReceipts(contract);\n\t\tprobeVerifiedSandbox();\n\t\tensureDurableDirectorySync(runPath);\n\t\tconst owner = acquireSessionOwnerLeaseSync(journalPath(runPath));\n\t\ttry {\n\t\t\tif (readRunJournal(runPath)) throw new VerifiedRunError(\"command_conflict\");\n\t\t\tconst journal = new VerifiedRunJournal(runPath, owner);\n\t\t\tjournal.append({ kind: \"created\", contract, command });\n\t\t\tconst budget = anchorRunBudget(contract.budget, clock);\n\t\t\tjournal.append({ kind: \"budget_anchored\", budget, environmentDigest, driver: \"linux-pidns-gate-v1\" });\n\t\t\tconst context: RunPhaseContext = {\n\t\t\t\trunPath,\n\t\t\t\tcontract,\n\t\t\t\tjournal,\n\t\t\t\t...(approval.signal ? { signal: approval.signal } : {}),\n\t\t\t};\n\t\t\ttry {\n\t\t\t\tcreateRunIssuer(runPath);\n\t\t\t\tstoreCandidate(base, runPath);\n\t\t\t\tjournal.append({ kind: \"input_checkpoint\", digest: base.digest });\n\t\t\t\tconst work = join(runPath, \"writer\");\n\t\t\t\tif (contract.profile !== \"linux-command-dag-v1\") materializeCandidate(base, work);\n\t\t\t\tconst workDeadline = began + contract.budget.workMs;\n\t\t\t\tawait executeWriter(context, {\n\t\t\t\t\tworkspace: work,\n\t\t\t\t\tdeadline: workDeadline,\n\t\t\t\t\t...(this.runtime ? { runtime: this.runtime } : {}),\n\t\t\t\t});\n\t\t\t\tif (journal.state.execution === \"paused\") return this.inspect(contract.runId);\n\t\t\t\tpublishWriterCandidate(context, work, workDeadline);\n\t\t\t\tawait verifyCandidate(context);\n\t\t\t\treturn this.inspect(contract.runId);\n\t\t\t} catch (error) {\n\t\t\t\tif (error instanceof VerifiedRunError && !journal.state.receiptDigest)\n\t\t\t\t\treturn journal.append({ kind: \"failed\", code: error.code });\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t} finally {\n\t\t\towner.release();\n\t\t}\n\t}\n}\n"]}

package/dist/core/verified-run/coordinator.js

@@ -0,0 +1,190 @@
+import { join, resolve } from "node:path";
+import { performance } from "node:perf_hooks";
+import { parseRunContract, parseRunResumeCommand, parseRunStartCommand, parseRunTaskRetryCommand, parseRunWriterRestartCommand, } from "omk-protocol";
+import { ensureDurableDirectorySync } from "../durable-file-io.js";
+import { acquireSessionOwnerLeaseSync } from "../session-owner-lease.js";
+import { commandEnvironmentDigest, probeVerifiedSandbox } from "./broker.js";
+import { captureCandidate, materializeCandidate, storeCandidate } from "./candidate.js";
+import { preflightCheckReceipts } from "./check-receipt.js";
+import { inspectTaskRecovery, retryDagTasks } from "./dag-recovery.js";
+import { createRunIssuer, readRunEvidence } from "./evidence.js";
+import { journalPath, readRunJournal, VerifiedRunJournal } from "./journal.js";
+import { inspectRunRecovery, resumeFrozenCandidate } from "./recovery.js";
+import { anchorRunBudget, readRunClock } from "./recovery-clock.js";
+import { assertStateOutsideWorkspace, digestBytes, digestObject, readRegularFile, stateRunPath, VerifiedRunError, } from "./storage.js";
+import { verifyCandidate } from "./verification-phase.js";
+import { publishWriterCandidate } from "./writer-completion.js";
+import { executeWriter } from "./writer-phase.js";
+import { inspectWriterRecovery, restartIsolatedWriter } from "./writer-recovery.js";
+export function planVerifiedRun(input) {
+    const contract = parseRunContract(input);
+    const snapshot = captureCandidate(contract.workspace.root, contract.budget);
+    return Object.freeze({
+        profile: contract.profile,
+        contractDigest: digestObject(contract),
+        baseDigest: snapshot.digest,
+        baseMatches: snapshot.digest === contract.workspace.baseDigest,
+        environmentDigest: commandEnvironmentDigest(contract, "gated-v1"),
+        checks: Object.freeze(contract.checks.map((check) => check.claimId)),
+        executionRequested: false,
+    });
+}
+/** Owns the opt-in single-host run; session capabilities come only from trusted host composition. */
+export class RunCoordinator {
+    stateRoot;
+    runtime;
+    constructor(stateRoot, runtime) {
+        this.stateRoot = resolve(stateRoot);
+        this.runtime = runtime;
+    }
+    inspect(runId) {
+        const journal = readRunJournal(stateRunPath(this.stateRoot, runId));
+        if (!journal || journal.state.runId !== runId)
+            throw new VerifiedRunError("missing_run");
+        if (journal.state.receiptDigest)
+            this.evidence(runId);
+        return journal.state;
+    }
+    inspectRecovery(runId) {
+        const report = inspectRunRecovery(stateRunPath(this.stateRoot, runId));
+        if (report.state.runId !== runId)
+            throw new VerifiedRunError("missing_run");
+        if (report.state.receiptDigest)
+            this.evidence(runId);
+        return report;
+    }
+    inspectWriterRecovery(runId) {
+        const report = inspectWriterRecovery(stateRunPath(this.stateRoot, runId));
+        if (report.state.runId !== runId)
+            throw new VerifiedRunError("missing_run");
+        if (report.state.receiptDigest)
+            this.evidence(runId);
+        return report;
+    }
+    inspectTaskRecovery(runId) {
+        const report = inspectTaskRecovery(stateRunPath(this.stateRoot, runId));
+        if (report.state.runId !== runId)
+            throw new VerifiedRunError("missing_run");
+        if (report.state.receiptDigest)
+            this.evidence(runId);
+        return report;
+    }
+    async retryTasks(input, approval) {
+        const command = parseRunTaskRetryCommand(input);
+        if (approval.approvedContractDigest !== command.contractDigest)
+            throw new VerifiedRunError("approval");
+        await retryDagTasks(stateRunPath(this.stateRoot, command.runId), command, approval.signal);
+        return this.inspect(command.runId);
+    }
+    evidence(runId) {
+        const runPath = stateRunPath(this.stateRoot, runId);
+        const journal = readRunJournal(runPath);
+        const first = journal?.records[0]?.event;
+        if (!journal || first?.kind !== "created" || first.contract.runId !== runId)
+            throw new VerifiedRunError("missing_run");
+        return readRunEvidence(runPath, journal, commandEnvironmentDigest(first.contract, journal.state.budget ? "gated-v1" : "legacy"));
+    }
+    artifact(runId, candidateDigest, path) {
+        const evidence = this.evidence(runId);
+        if (!evidence.verified || candidateDigest !== evidence.candidateDigest)
+            throw new VerifiedRunError("candidate_mismatch");
+        const file = evidence.manifest.files.find((entry) => entry.path === path);
+        if (!file)
+            throw new VerifiedRunError("artifact_scope");
+        const bytes = readRegularFile(join(stateRunPath(this.stateRoot, runId), "blobs", file.digest), file.size);
+        if (digestBytes(bytes) !== file.digest || bytes.length !== file.size)
+            throw new VerifiedRunError("integrity");
+        return bytes;
+    }
+    async resume(input, approval) {
+        const command = parseRunResumeCommand(input);
+        if (approval.approvedContractDigest !== command.contractDigest)
+            throw new VerifiedRunError("approval");
+        await resumeFrozenCandidate(stateRunPath(this.stateRoot, command.runId), command, approval.signal);
+        return this.inspect(command.runId);
+    }
+    async restartWriter(input, approval) {
+        const command = parseRunWriterRestartCommand(input);
+        if (approval.approvedContractDigest !== command.contractDigest)
+            throw new VerifiedRunError("approval");
+        await restartIsolatedWriter(stateRunPath(this.stateRoot, command.runId), command, {
+            ...(approval.signal ? { signal: approval.signal } : {}),
+            ...(this.runtime ? { runtime: this.runtime } : {}),
+        });
+        return this.inspect(command.runId);
+    }
+    async start(input, request, approval) {
+        const began = performance.now();
+        const clock = readRunClock();
+        const contract = parseRunContract(input);
+        const command = parseRunStartCommand(request);
+        const contractDigest = digestObject(contract);
+        if (approval.approvedContractDigest !== contractDigest)
+            throw new VerifiedRunError("approval");
+        if (command.contractDigest !== contractDigest || command.runId !== contract.runId)
+            throw new VerifiedRunError("command_conflict");
+        if (approval.signal?.aborted)
+            throw new VerifiedRunError("cancelled");
+        assertStateOutsideWorkspace(this.stateRoot, contract.workspace.root);
+        const runPath = stateRunPath(this.stateRoot, contract.runId);
+        const existing = readRunJournal(runPath);
+        if (existing) {
+            const first = existing.records[0]?.event;
+            if (first?.kind !== "created" ||
+                digestObject(first.command) !== digestObject(command) ||
+                digestObject(first.contract) !== contractDigest)
+                throw new VerifiedRunError("command_conflict");
+            return this.inspect(contract.runId);
+        }
+        const base = captureCandidate(contract.workspace.root, contract.budget);
+        if (base.digest !== contract.workspace.baseDigest)
+            throw new VerifiedRunError("base_conflict");
+        const environmentDigest = commandEnvironmentDigest(contract, "gated-v1");
+        preflightCheckReceipts(contract);
+        probeVerifiedSandbox();
+        ensureDurableDirectorySync(runPath);
+        const owner = acquireSessionOwnerLeaseSync(journalPath(runPath));
+        try {
+            if (readRunJournal(runPath))
+                throw new VerifiedRunError("command_conflict");
+            const journal = new VerifiedRunJournal(runPath, owner);
+            journal.append({ kind: "created", contract, command });
+            const budget = anchorRunBudget(contract.budget, clock);
+            journal.append({ kind: "budget_anchored", budget, environmentDigest, driver: "linux-pidns-gate-v1" });
+            const context = {
+                runPath,
+                contract,
+                journal,
+                ...(approval.signal ? { signal: approval.signal } : {}),
+            };
+            try {
+                createRunIssuer(runPath);
+                storeCandidate(base, runPath);
+                journal.append({ kind: "input_checkpoint", digest: base.digest });
+                const work = join(runPath, "writer");
+                if (contract.profile !== "linux-command-dag-v1")
+                    materializeCandidate(base, work);
+                const workDeadline = began + contract.budget.workMs;
+                await executeWriter(context, {
+                    workspace: work,
+                    deadline: workDeadline,
+                    ...(this.runtime ? { runtime: this.runtime } : {}),
+                });
+                if (journal.state.execution === "paused")
+                    return this.inspect(contract.runId);
+                publishWriterCandidate(context, work, workDeadline);
+                await verifyCandidate(context);
+                return this.inspect(contract.runId);
+            }
+            catch (error) {
+                if (error instanceof VerifiedRunError && !journal.state.receiptDigest)
+                    return journal.append({ kind: "failed", code: error.code });
+                throw error;
+            }
+        }
+        finally {
+            owner.release();
+        }
+    }
+}
+//# sourceMappingURL=coordinator.js.map