open-multi-agent-kit 0.98.3 → 0.98.5

package/dist/core/verified-run/dag-retry-projection.js

@@ -0,0 +1,43 @@
+import { readyDagTasks } from "./dag-projection.js";
+import { digestObject, VerifiedRunError } from "./storage.js";
+export function taskCheckpoints(state) {
+    return state.tasks.filter((task) => task.status === "succeeded");
+}
+export function assertTaskSelection(contract, state, taskIds) {
+    if (contract.profile !== "linux-command-dag-v1" || !state.inputDigest || state.candidateDigest || state.writerOpen)
+        throw new VerifiedRunError("task_recovery_unavailable");
+    for (const id of taskIds) {
+        const task = state.tasks.find((task) => task.taskId === id);
+        const definition = contract.writer.tasks.find((task) => task.id === id);
+        if (!task || !definition || (task.status !== "failed" && task.status !== "running"))
+            throw new VerifiedRunError("task_not_retryable");
+        if (task.attempt >= definition.attempts.length)
+            throw new VerifiedRunError("task_attempt_limit");
+    }
+    if (state.tasks.some((task) => task.generation !== state.generation || (task.status === "running" && !taskIds.includes(task.taskId))))
+        throw new VerifiedRunError("task_selection");
+    if (!taskIds.length &&
+        !readyDagTasks(contract.writer, state).length &&
+        !state.tasks.every((task) => task.status === "succeeded"))
+        throw new VerifiedRunError("task_selection");
+}
+export function retryTaskProjection(context, event) {
+    const { state, contract } = context;
+    assertTaskSelection(contract, state, event.command.taskIds);
+    if (event.command.baseDigest !== state.inputDigest ||
+        state.inputDigest !== contract.workspace.baseDigest ||
+        digestObject(event.adopted) !== digestObject(taskCheckpoints(state)))
+        throw new VerifiedRunError("task_checkpoint_mismatch");
+    return state.tasks.map((task) => event.command.taskIds.includes(task.taskId)
+        ? {
+            taskId: task.taskId,
+            attempt: task.attempt,
+            generation: state.generation + 1,
+            status: "pending",
+            inputDigest: null,
+            outputDigest: null,
+            failure: null,
+        }
+        : { ...task, generation: state.generation + 1 });
+}
+//# sourceMappingURL=dag-retry-projection.js.map

package/dist/core/verified-run/dag-retry-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-retry-projection.js","sourceRoot":"","sources":["../../../src/core/verified-run/dag-retry-projection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE9D,MAAM,UAAU,eAAe,CAAC,KAAoB,EAAgC;IACnF,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAA6B,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;AAAA,CAC5F;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAqB,EAAE,KAAoB,EAAE,OAA0B,EAAQ;IAClH,IAAI,QAAQ,CAAC,OAAO,KAAK,sBAAsB,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,UAAU;QACjH,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;IACzD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;YAClF,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IAClG,CAAC;IACD,IACC,KAAK,CAAC,KAAK,CAAC,IAAI,CACf,CAAC,IAAI,EAAE,EAAE,CACR,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CACtG;QAED,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IACC,CAAC,OAAO,CAAC,MAAM;QACf,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM;QAC7C,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC;QAEzD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;AAAA,CAC9C;AAED,MAAM,UAAU,mBAAmB,CAClC,OAAwB,EACxB,KAAmD,EACpB;IAC/B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACpC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,IACC,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,WAAW;QAC9C,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,SAAS,CAAC,UAAU;QACnD,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEpE,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CACrB,CAAC,IAAI,EAAqB,EAAE,CAC3B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1C,CAAC,CAAC;YACA,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC;YAChC,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,IAAI;SACb;QACF,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CACjD,CAAC;AAAA,CACF","sourcesContent":["import type { RunContract } from \"omk-protocol\";\nimport { readyDagTasks } from \"./dag-projection.ts\";\nimport type { RunTaskCheckpoint, RunTaskProjection } from \"./dag-types.ts\";\nimport type { RunEvent, RunProjection, WriterReduction } from \"./run-types.ts\";\nimport { digestObject, VerifiedRunError } from \"./storage.ts\";\n\nexport function taskCheckpoints(state: RunProjection): readonly RunTaskCheckpoint[] {\n\treturn state.tasks.filter((task): task is RunTaskCheckpoint => task.status === \"succeeded\");\n}\n\nexport function assertTaskSelection(contract: RunContract, state: RunProjection, taskIds: readonly string[]): void {\n\tif (contract.profile !== \"linux-command-dag-v1\" || !state.inputDigest || state.candidateDigest || state.writerOpen)\n\t\tthrow new VerifiedRunError(\"task_recovery_unavailable\");\n\tfor (const id of taskIds) {\n\t\tconst task = state.tasks.find((task) => task.taskId === id);\n\t\tconst definition = contract.writer.tasks.find((task) => task.id === id);\n\t\tif (!task || !definition || (task.status !== \"failed\" && task.status !== \"running\"))\n\t\t\tthrow new VerifiedRunError(\"task_not_retryable\");\n\t\tif (task.attempt >= definition.attempts.length) throw new VerifiedRunError(\"task_attempt_limit\");\n\t}\n\tif (\n\t\tstate.tasks.some(\n\t\t\t(task) =>\n\t\t\t\ttask.generation !== state.generation || (task.status === \"running\" && !taskIds.includes(task.taskId)),\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"task_selection\");\n\tif (\n\t\t!taskIds.length &&\n\t\t!readyDagTasks(contract.writer, state).length &&\n\t\t!state.tasks.every((task) => task.status === \"succeeded\")\n\t)\n\t\tthrow new VerifiedRunError(\"task_selection\");\n}\n\nexport function retryTaskProjection(\n\tcontext: WriterReduction,\n\tevent: Extract<RunEvent, { kind: \"tasks_retried\" }>,\n): readonly RunTaskProjection[] {\n\tconst { state, contract } = context;\n\tassertTaskSelection(contract, state, event.command.taskIds);\n\tif (\n\t\tevent.command.baseDigest !== state.inputDigest ||\n\t\tstate.inputDigest !== contract.workspace.baseDigest ||\n\t\tdigestObject(event.adopted) !== digestObject(taskCheckpoints(state))\n\t)\n\t\tthrow new VerifiedRunError(\"task_checkpoint_mismatch\");\n\treturn state.tasks.map(\n\t\t(task): RunTaskProjection =>\n\t\t\tevent.command.taskIds.includes(task.taskId)\n\t\t\t\t? {\n\t\t\t\t\t\ttaskId: task.taskId,\n\t\t\t\t\t\tattempt: task.attempt,\n\t\t\t\t\t\tgeneration: state.generation + 1,\n\t\t\t\t\t\tstatus: \"pending\",\n\t\t\t\t\t\tinputDigest: null,\n\t\t\t\t\t\toutputDigest: null,\n\t\t\t\t\t\tfailure: null,\n\t\t\t\t\t}\n\t\t\t\t: { ...task, generation: state.generation + 1 },\n\t);\n}\n"]}

package/dist/core/verified-run/dag-types.d.ts

@@ -0,0 +1,47 @@
+interface TaskIdentity {
+    readonly taskId: string;
+    readonly attempt: number;
+    readonly generation: number;
+}
+export type RunTaskProjection = TaskIdentity & ({
+    readonly status: "pending";
+    readonly inputDigest: null;
+    readonly outputDigest: null;
+    readonly failure: null;
+} | {
+    readonly status: "running";
+    readonly inputDigest: string;
+    readonly outputDigest: null;
+    readonly failure: null;
+} | {
+    readonly status: "succeeded";
+    readonly inputDigest: string;
+    readonly outputDigest: string;
+    readonly failure: null;
+} | {
+    readonly status: "failed";
+    readonly inputDigest: string;
+    readonly outputDigest: null;
+    readonly failure: string;
+});
+export type RunTaskCheckpoint = Extract<RunTaskProjection, {
+    status: "succeeded";
+}>;
+export type DagEvent = {
+    readonly kind: "task_started";
+    readonly taskId: string;
+    readonly attempt: number;
+    readonly inputDigest: string;
+    readonly observedMs: number;
+} | {
+    readonly kind: "task_finished";
+    readonly taskId: string;
+    readonly attempt: number;
+    readonly outputDigest: string | null;
+    readonly failure: string | null;
+    readonly observedMs: number;
+} | {
+    readonly kind: "tasks_paused";
+};
+export {};
+//# sourceMappingURL=dag-types.d.ts.map

package/dist/core/verified-run/dag-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-types.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/dag-types.ts"],"names":[],"mappings":"AAAA,UAAU,YAAY;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AACD,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAC3C,CACG;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAC/G;IACA,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;CACtB,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;CACtB,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACxB,CACH,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AACpF,MAAM,MAAM,QAAQ,GACjB;IACA,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC3B,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC","sourcesContent":["interface TaskIdentity {\n\treadonly taskId: string;\n\treadonly attempt: number;\n\treadonly generation: number;\n}\nexport type RunTaskProjection = TaskIdentity &\n\t(\n\t\t| { readonly status: \"pending\"; readonly inputDigest: null; readonly outputDigest: null; readonly failure: null }\n\t\t| {\n\t\t\t\treadonly status: \"running\";\n\t\t\t\treadonly inputDigest: string;\n\t\t\t\treadonly outputDigest: null;\n\t\t\t\treadonly failure: null;\n\t\t  }\n\t\t| {\n\t\t\t\treadonly status: \"succeeded\";\n\t\t\t\treadonly inputDigest: string;\n\t\t\t\treadonly outputDigest: string;\n\t\t\t\treadonly failure: null;\n\t\t  }\n\t\t| {\n\t\t\t\treadonly status: \"failed\";\n\t\t\t\treadonly inputDigest: string;\n\t\t\t\treadonly outputDigest: null;\n\t\t\t\treadonly failure: string;\n\t\t  }\n\t);\nexport type RunTaskCheckpoint = Extract<RunTaskProjection, { status: \"succeeded\" }>;\nexport type DagEvent =\n\t| {\n\t\t\treadonly kind: \"task_started\";\n\t\t\treadonly taskId: string;\n\t\t\treadonly attempt: number;\n\t\t\treadonly inputDigest: string;\n\t\t\treadonly observedMs: number;\n\t  }\n\t| {\n\t\t\treadonly kind: \"task_finished\";\n\t\t\treadonly taskId: string;\n\t\t\treadonly attempt: number;\n\t\t\treadonly outputDigest: string | null;\n\t\t\treadonly failure: string | null;\n\t\t\treadonly observedMs: number;\n\t  }\n\t| { readonly kind: \"tasks_paused\" };\n"]}

package/dist/core/verified-run/dag-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dag-types.js.map

package/dist/core/verified-run/dag-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-types.js","sourceRoot":"","sources":["../../../src/core/verified-run/dag-types.ts"],"names":[],"mappings":"","sourcesContent":["interface TaskIdentity {\n\treadonly taskId: string;\n\treadonly attempt: number;\n\treadonly generation: number;\n}\nexport type RunTaskProjection = TaskIdentity &\n\t(\n\t\t| { readonly status: \"pending\"; readonly inputDigest: null; readonly outputDigest: null; readonly failure: null }\n\t\t| {\n\t\t\t\treadonly status: \"running\";\n\t\t\t\treadonly inputDigest: string;\n\t\t\t\treadonly outputDigest: null;\n\t\t\t\treadonly failure: null;\n\t\t  }\n\t\t| {\n\t\t\t\treadonly status: \"succeeded\";\n\t\t\t\treadonly inputDigest: string;\n\t\t\t\treadonly outputDigest: string;\n\t\t\t\treadonly failure: null;\n\t\t  }\n\t\t| {\n\t\t\t\treadonly status: \"failed\";\n\t\t\t\treadonly inputDigest: string;\n\t\t\t\treadonly outputDigest: null;\n\t\t\t\treadonly failure: string;\n\t\t  }\n\t);\nexport type RunTaskCheckpoint = Extract<RunTaskProjection, { status: \"succeeded\" }>;\nexport type DagEvent =\n\t| {\n\t\t\treadonly kind: \"task_started\";\n\t\t\treadonly taskId: string;\n\t\t\treadonly attempt: number;\n\t\t\treadonly inputDigest: string;\n\t\t\treadonly observedMs: number;\n\t  }\n\t| {\n\t\t\treadonly kind: \"task_finished\";\n\t\t\treadonly taskId: string;\n\t\t\treadonly attempt: number;\n\t\t\treadonly outputDigest: string | null;\n\t\t\treadonly failure: string | null;\n\t\t\treadonly observedMs: number;\n\t  }\n\t| { readonly kind: \"tasks_paused\" };\n"]}

package/dist/core/verified-run/event-parser.d.ts

@@ -0,0 +1,3 @@
+import type { RunEvent } from "./run-types.ts";
+export declare function parseRunEvent(raw: unknown): RunEvent;
+//# sourceMappingURL=event-parser.d.ts.map

package/dist/core/verified-run/event-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-parser.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/event-parser.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAgC/C,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,CA6GpD","sourcesContent":["import {\n\tparseRunContract,\n\tparseRunResumeCommand,\n\tparseRunStartCommand,\n\tparseRunTaskRetryCommand,\n\tparseRunWriterRestartCommand,\n} from \"omk-protocol\";\nimport type { RunTaskCheckpoint } from \"./dag-types.ts\";\nimport { parseNamespaceIdentity } from \"./namespace-identity.ts\";\nimport { parseRecoveryBudget } from \"./recovery-clock.ts\";\nimport type { RunEvent } from \"./run-types.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nfunction text(value: unknown): string {\n\tif (typeof value !== \"string\" || !/^[A-Za-z0-9_-]{1,128}$/.test(value)) throw new VerifiedRunError(\"integrity\");\n\treturn value;\n}\nfunction digest(value: unknown): string {\n\tconst result = text(value);\n\tif (!/^[a-f0-9]{64}$/.test(result)) throw new VerifiedRunError(\"integrity\");\n\treturn result;\n}\nfunction integer(value: unknown): number {\n\tif (typeof value !== \"number\" || !Number.isSafeInteger(value) || value < 0) throw new VerifiedRunError(\"integrity\");\n\treturn value;\n}\n\nfunction checkpoint(raw: unknown): RunTaskCheckpoint {\n\tif (typeof raw !== \"object\" || raw === null) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\tif (value.status !== \"succeeded\" || value.failure !== null) throw new VerifiedRunError(\"integrity\");\n\treturn Object.freeze({\n\t\ttaskId: text(value.taskId),\n\t\tattempt: integer(value.attempt),\n\t\tgeneration: integer(value.generation),\n\t\tstatus: \"succeeded\",\n\t\tinputDigest: digest(value.inputDigest),\n\t\toutputDigest: digest(value.outputDigest),\n\t\tfailure: null,\n\t});\n}\n\nexport function parseRunEvent(raw: unknown): RunEvent {\n\tif (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\tswitch (value.kind) {\n\t\tcase \"created\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tcontract: parseRunContract(value.contract),\n\t\t\t\tcommand: parseRunStartCommand(value.command),\n\t\t\t};\n\t\tcase \"budget_anchored\":\n\t\t\tif (value.driver !== \"linux-pidns-gate-v1\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tbudget: parseRecoveryBudget(value.budget),\n\t\t\t\tenvironmentDigest: digest(value.environmentDigest),\n\t\t\t\tdriver: value.driver,\n\t\t\t};\n\t\tcase \"dispatch\": {\n\t\t\tif (value.role !== \"writer\" && value.role !== \"verifier\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\texecutionId: text(value.executionId),\n\t\t\t\trole: value.role,\n\t\t\t\tclaimId: value.claimId === null ? null : text(value.claimId),\n\t\t\t};\n\t\t}\n\t\tcase \"input_checkpoint\":\n\t\t\treturn { kind: value.kind, digest: digest(value.digest) };\n\t\tcase \"process_ready\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\texecutionId: text(value.executionId),\n\t\t\t\tidentity: parseNamespaceIdentity(value.identity),\n\t\t\t};\n\t\tcase \"task_started\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\ttaskId: text(value.taskId),\n\t\t\t\tattempt: integer(value.attempt),\n\t\t\t\tinputDigest: digest(value.inputDigest),\n\t\t\t\tobservedMs: integer(value.observedMs),\n\t\t\t};\n\t\tcase \"task_finished\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\ttaskId: text(value.taskId),\n\t\t\t\tattempt: integer(value.attempt),\n\t\t\t\toutputDigest: value.outputDigest === null ? null : digest(value.outputDigest),\n\t\t\t\tfailure: value.failure === null ? null : text(value.failure),\n\t\t\t\tobservedMs: integer(value.observedMs),\n\t\t\t};\n\t\tcase \"tasks_paused\":\n\t\tcase \"writer_opened\":\n\t\t\treturn { kind: value.kind };\n\t\tcase \"model_request\":\n\t\t\treturn { kind: value.kind, requestId: text(value.requestId) };\n\t\tcase \"writer_closed\":\n\t\t\tif (typeof value.completed !== \"boolean\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn { kind: value.kind, completed: value.completed };\n\t\tcase \"exited\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\texecutionId: text(value.executionId),\n\t\t\t\tfailure: value.failure === null ? null : text(value.failure),\n\t\t\t};\n\t\tcase \"candidate\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tdigest: digest(value.digest),\n\t\t\t\t...(value.observedMs === undefined ? {} : { observedMs: integer(value.observedMs) }),\n\t\t\t\t...(value.verificationDeadlineMs === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: { verificationDeadlineMs: integer(value.verificationDeadlineMs) }),\n\t\t\t};\n\t\tcase \"resumed\":\n\t\tcase \"tasks_retried\":\n\t\tcase \"writer_restarted\": {\n\t\t\tif (!Array.isArray(value.reconciledExecutionIds) || value.reconciledExecutionIds.length > 128)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tconst fields = {\n\t\t\t\tobservedMs: integer(value.observedMs),\n\t\t\t\treconciledExecutionIds: Object.freeze(value.reconciledExecutionIds.map(text)),\n\t\t\t};\n\t\t\tswitch (value.kind) {\n\t\t\t\tcase \"resumed\":\n\t\t\t\t\treturn { ...fields, kind: value.kind, command: parseRunResumeCommand(value.command) };\n\t\t\t\tcase \"writer_restarted\":\n\t\t\t\t\treturn { ...fields, kind: value.kind, command: parseRunWriterRestartCommand(value.command) };\n\t\t\t\tcase \"tasks_retried\":\n\t\t\t\t\tif (!Array.isArray(value.adopted) || value.adopted.length > 16) throw new VerifiedRunError(\"integrity\");\n\t\t\t\t\treturn {\n\t\t\t\t\t\t...fields,\n\t\t\t\t\t\tkind: value.kind,\n\t\t\t\t\t\tcommand: parseRunTaskRetryCommand(value.command),\n\t\t\t\t\t\tadopted: Object.freeze(value.adopted.map(checkpoint)),\n\t\t\t\t\t};\n\t\t\t\tdefault:\n\t\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\t}\n\t\t}\n\t\tcase \"evaluated\":\n\t\t\tif (typeof value.verified !== \"boolean\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn { kind: value.kind, receiptDigest: digest(value.receiptDigest), verified: value.verified };\n\t\tcase \"failed\":\n\t\t\treturn { kind: value.kind, code: text(value.code) };\n\t\tdefault:\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n}\n"]}

package/dist/core/verified-run/event-parser.js

@@ -0,0 +1,153 @@
+import { parseRunContract, parseRunResumeCommand, parseRunStartCommand, parseRunTaskRetryCommand, parseRunWriterRestartCommand, } from "omk-protocol";
+import { parseNamespaceIdentity } from "./namespace-identity.js";
+import { parseRecoveryBudget } from "./recovery-clock.js";
+import { VerifiedRunError } from "./storage.js";
+function text(value) {
+    if (typeof value !== "string" || !/^[A-Za-z0-9_-]{1,128}$/.test(value))
+        throw new VerifiedRunError("integrity");
+    return value;
+}
+function digest(value) {
+    const result = text(value);
+    if (!/^[a-f0-9]{64}$/.test(result))
+        throw new VerifiedRunError("integrity");
+    return result;
+}
+function integer(value) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)
+        throw new VerifiedRunError("integrity");
+    return value;
+}
+function checkpoint(raw) {
+    if (typeof raw !== "object" || raw === null)
+        throw new VerifiedRunError("integrity");
+    const value = Object.fromEntries(Object.entries(raw));
+    if (value.status !== "succeeded" || value.failure !== null)
+        throw new VerifiedRunError("integrity");
+    return Object.freeze({
+        taskId: text(value.taskId),
+        attempt: integer(value.attempt),
+        generation: integer(value.generation),
+        status: "succeeded",
+        inputDigest: digest(value.inputDigest),
+        outputDigest: digest(value.outputDigest),
+        failure: null,
+    });
+}
+export function parseRunEvent(raw) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw))
+        throw new VerifiedRunError("integrity");
+    const value = Object.fromEntries(Object.entries(raw));
+    switch (value.kind) {
+        case "created":
+            return {
+                kind: value.kind,
+                contract: parseRunContract(value.contract),
+                command: parseRunStartCommand(value.command),
+            };
+        case "budget_anchored":
+            if (value.driver !== "linux-pidns-gate-v1")
+                throw new VerifiedRunError("integrity");
+            return {
+                kind: value.kind,
+                budget: parseRecoveryBudget(value.budget),
+                environmentDigest: digest(value.environmentDigest),
+                driver: value.driver,
+            };
+        case "dispatch": {
+            if (value.role !== "writer" && value.role !== "verifier")
+                throw new VerifiedRunError("integrity");
+            return {
+                kind: value.kind,
+                executionId: text(value.executionId),
+                role: value.role,
+                claimId: value.claimId === null ? null : text(value.claimId),
+            };
+        }
+        case "input_checkpoint":
+            return { kind: value.kind, digest: digest(value.digest) };
+        case "process_ready":
+            return {
+                kind: value.kind,
+                executionId: text(value.executionId),
+                identity: parseNamespaceIdentity(value.identity),
+            };
+        case "task_started":
+            return {
+                kind: value.kind,
+                taskId: text(value.taskId),
+                attempt: integer(value.attempt),
+                inputDigest: digest(value.inputDigest),
+                observedMs: integer(value.observedMs),
+            };
+        case "task_finished":
+            return {
+                kind: value.kind,
+                taskId: text(value.taskId),
+                attempt: integer(value.attempt),
+                outputDigest: value.outputDigest === null ? null : digest(value.outputDigest),
+                failure: value.failure === null ? null : text(value.failure),
+                observedMs: integer(value.observedMs),
+            };
+        case "tasks_paused":
+        case "writer_opened":
+            return { kind: value.kind };
+        case "model_request":
+            return { kind: value.kind, requestId: text(value.requestId) };
+        case "writer_closed":
+            if (typeof value.completed !== "boolean")
+                throw new VerifiedRunError("integrity");
+            return { kind: value.kind, completed: value.completed };
+        case "exited":
+            return {
+                kind: value.kind,
+                executionId: text(value.executionId),
+                failure: value.failure === null ? null : text(value.failure),
+            };
+        case "candidate":
+            return {
+                kind: value.kind,
+                digest: digest(value.digest),
+                ...(value.observedMs === undefined ? {} : { observedMs: integer(value.observedMs) }),
+                ...(value.verificationDeadlineMs === undefined
+                    ? {}
+                    : { verificationDeadlineMs: integer(value.verificationDeadlineMs) }),
+            };
+        case "resumed":
+        case "tasks_retried":
+        case "writer_restarted": {
+            if (!Array.isArray(value.reconciledExecutionIds) || value.reconciledExecutionIds.length > 128)
+                throw new VerifiedRunError("integrity");
+            const fields = {
+                observedMs: integer(value.observedMs),
+                reconciledExecutionIds: Object.freeze(value.reconciledExecutionIds.map(text)),
+            };
+            switch (value.kind) {
+                case "resumed":
+                    return { ...fields, kind: value.kind, command: parseRunResumeCommand(value.command) };
+                case "writer_restarted":
+                    return { ...fields, kind: value.kind, command: parseRunWriterRestartCommand(value.command) };
+                case "tasks_retried":
+                    if (!Array.isArray(value.adopted) || value.adopted.length > 16)
+                        throw new VerifiedRunError("integrity");
+                    return {
+                        ...fields,
+                        kind: value.kind,
+                        command: parseRunTaskRetryCommand(value.command),
+                        adopted: Object.freeze(value.adopted.map(checkpoint)),
+                    };
+                default:
+                    throw new VerifiedRunError("integrity");
+            }
+        }
+        case "evaluated":
+            if (typeof value.verified !== "boolean")
+                throw new VerifiedRunError("integrity");
+            return { kind: value.kind, receiptDigest: digest(value.receiptDigest), verified: value.verified };
+        case "failed":
+            return { kind: value.kind, code: text(value.code) };
+        default:
+            throw new VerifiedRunError("integrity");
+    }
+}
+//# sourceMappingURL=event-parser.js.map

package/dist/core/verified-run/event-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-parser.js","sourceRoot":"","sources":["../../../src/core/verified-run/event-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,4BAA4B,GAC5B,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,SAAS,IAAI,CAAC,KAAc,EAAU;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAChH,OAAO,KAAK,CAAC;AAAA,CACb;AACD,SAAS,MAAM,CAAC,KAAc,EAAU;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC;AAAA,CACd;AACD,SAAS,OAAO,CAAC,KAAc,EAAU;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpH,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,UAAU,CAAC,GAAY,EAAqB;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrF,MAAM,KAAK,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QACrC,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QACtC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACxC,OAAO,EAAE,IAAI;KACb,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,aAAa,CAAC,GAAY,EAAY;IACrD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3G,MAAM,KAAK,GAA4B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACb,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC1C,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;aAC5C,CAAC;QACH,KAAK,iBAAiB;YACrB,IAAI,KAAK,CAAC,MAAM,KAAK,qBAAqB;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACpF,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC;gBACzC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAClD,MAAM,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC;QACH,KAAK,UAAU,EAAE,CAAC;YACjB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAClG,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBACpC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;aAC5D,CAAC;QACH,CAAC;QACD,KAAK,kBAAkB;YACtB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,KAAK,eAAe;YACnB,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBACpC,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC;aAChD,CAAC;QACH,KAAK,cAAc;YAClB,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC1B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC/B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;gBACtC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;aACrC,CAAC;QACH,KAAK,eAAe;YACnB,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC1B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC/B,YAAY,EAAE,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;gBAC7E,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC5D,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;aACrC,CAAC;QACH,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YACnB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,KAAK,eAAe;YACnB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,KAAK,eAAe;YACnB,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAClF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACzD,KAAK,QAAQ;YACZ,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBACpC,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;aAC5D,CAAC;QACH,KAAK,WAAW;YACf,OAAO;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC5B,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpF,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;oBAC7C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;aACrE,CAAC;QACH,KAAK,SAAS,CAAC;QACf,KAAK,eAAe,CAAC;QACrB,KAAK,kBAAkB,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,MAAM,GAAG,GAAG;gBAC5F,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG;gBACd,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;gBACrC,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aAC7E,CAAC;YACF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,SAAS;oBACb,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvF,KAAK,kBAAkB;oBACtB,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9F,KAAK,eAAe;oBACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;wBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;oBACxG,OAAO;wBACN,GAAG,MAAM;wBACT,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC;wBAChD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;qBACrD,CAAC;gBACH;oBACC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC1C,CAAC;QACF,CAAC;QACD,KAAK,WAAW;YACf,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACjF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnG,KAAK,QAAQ;YACZ,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD;YACC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;AAAA,CACD","sourcesContent":["import {\n\tparseRunContract,\n\tparseRunResumeCommand,\n\tparseRunStartCommand,\n\tparseRunTaskRetryCommand,\n\tparseRunWriterRestartCommand,\n} from \"omk-protocol\";\nimport type { RunTaskCheckpoint } from \"./dag-types.ts\";\nimport { parseNamespaceIdentity } from \"./namespace-identity.ts\";\nimport { parseRecoveryBudget } from \"./recovery-clock.ts\";\nimport type { RunEvent } from \"./run-types.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nfunction text(value: unknown): string {\n\tif (typeof value !== \"string\" || !/^[A-Za-z0-9_-]{1,128}$/.test(value)) throw new VerifiedRunError(\"integrity\");\n\treturn value;\n}\nfunction digest(value: unknown): string {\n\tconst result = text(value);\n\tif (!/^[a-f0-9]{64}$/.test(result)) throw new VerifiedRunError(\"integrity\");\n\treturn result;\n}\nfunction integer(value: unknown): number {\n\tif (typeof value !== \"number\" || !Number.isSafeInteger(value) || value < 0) throw new VerifiedRunError(\"integrity\");\n\treturn value;\n}\n\nfunction checkpoint(raw: unknown): RunTaskCheckpoint {\n\tif (typeof raw !== \"object\" || raw === null) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\tif (value.status !== \"succeeded\" || value.failure !== null) throw new VerifiedRunError(\"integrity\");\n\treturn Object.freeze({\n\t\ttaskId: text(value.taskId),\n\t\tattempt: integer(value.attempt),\n\t\tgeneration: integer(value.generation),\n\t\tstatus: \"succeeded\",\n\t\tinputDigest: digest(value.inputDigest),\n\t\toutputDigest: digest(value.outputDigest),\n\t\tfailure: null,\n\t});\n}\n\nexport function parseRunEvent(raw: unknown): RunEvent {\n\tif (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) throw new VerifiedRunError(\"integrity\");\n\tconst value: Record<string, unknown> = Object.fromEntries(Object.entries(raw));\n\tswitch (value.kind) {\n\t\tcase \"created\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tcontract: parseRunContract(value.contract),\n\t\t\t\tcommand: parseRunStartCommand(value.command),\n\t\t\t};\n\t\tcase \"budget_anchored\":\n\t\t\tif (value.driver !== \"linux-pidns-gate-v1\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tbudget: parseRecoveryBudget(value.budget),\n\t\t\t\tenvironmentDigest: digest(value.environmentDigest),\n\t\t\t\tdriver: value.driver,\n\t\t\t};\n\t\tcase \"dispatch\": {\n\t\t\tif (value.role !== \"writer\" && value.role !== \"verifier\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\texecutionId: text(value.executionId),\n\t\t\t\trole: value.role,\n\t\t\t\tclaimId: value.claimId === null ? null : text(value.claimId),\n\t\t\t};\n\t\t}\n\t\tcase \"input_checkpoint\":\n\t\t\treturn { kind: value.kind, digest: digest(value.digest) };\n\t\tcase \"process_ready\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\texecutionId: text(value.executionId),\n\t\t\t\tidentity: parseNamespaceIdentity(value.identity),\n\t\t\t};\n\t\tcase \"task_started\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\ttaskId: text(value.taskId),\n\t\t\t\tattempt: integer(value.attempt),\n\t\t\t\tinputDigest: digest(value.inputDigest),\n\t\t\t\tobservedMs: integer(value.observedMs),\n\t\t\t};\n\t\tcase \"task_finished\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\ttaskId: text(value.taskId),\n\t\t\t\tattempt: integer(value.attempt),\n\t\t\t\toutputDigest: value.outputDigest === null ? null : digest(value.outputDigest),\n\t\t\t\tfailure: value.failure === null ? null : text(value.failure),\n\t\t\t\tobservedMs: integer(value.observedMs),\n\t\t\t};\n\t\tcase \"tasks_paused\":\n\t\tcase \"writer_opened\":\n\t\t\treturn { kind: value.kind };\n\t\tcase \"model_request\":\n\t\t\treturn { kind: value.kind, requestId: text(value.requestId) };\n\t\tcase \"writer_closed\":\n\t\t\tif (typeof value.completed !== \"boolean\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn { kind: value.kind, completed: value.completed };\n\t\tcase \"exited\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\texecutionId: text(value.executionId),\n\t\t\t\tfailure: value.failure === null ? null : text(value.failure),\n\t\t\t};\n\t\tcase \"candidate\":\n\t\t\treturn {\n\t\t\t\tkind: value.kind,\n\t\t\t\tdigest: digest(value.digest),\n\t\t\t\t...(value.observedMs === undefined ? {} : { observedMs: integer(value.observedMs) }),\n\t\t\t\t...(value.verificationDeadlineMs === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: { verificationDeadlineMs: integer(value.verificationDeadlineMs) }),\n\t\t\t};\n\t\tcase \"resumed\":\n\t\tcase \"tasks_retried\":\n\t\tcase \"writer_restarted\": {\n\t\t\tif (!Array.isArray(value.reconciledExecutionIds) || value.reconciledExecutionIds.length > 128)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tconst fields = {\n\t\t\t\tobservedMs: integer(value.observedMs),\n\t\t\t\treconciledExecutionIds: Object.freeze(value.reconciledExecutionIds.map(text)),\n\t\t\t};\n\t\t\tswitch (value.kind) {\n\t\t\t\tcase \"resumed\":\n\t\t\t\t\treturn { ...fields, kind: value.kind, command: parseRunResumeCommand(value.command) };\n\t\t\t\tcase \"writer_restarted\":\n\t\t\t\t\treturn { ...fields, kind: value.kind, command: parseRunWriterRestartCommand(value.command) };\n\t\t\t\tcase \"tasks_retried\":\n\t\t\t\t\tif (!Array.isArray(value.adopted) || value.adopted.length > 16) throw new VerifiedRunError(\"integrity\");\n\t\t\t\t\treturn {\n\t\t\t\t\t\t...fields,\n\t\t\t\t\t\tkind: value.kind,\n\t\t\t\t\t\tcommand: parseRunTaskRetryCommand(value.command),\n\t\t\t\t\t\tadopted: Object.freeze(value.adopted.map(checkpoint)),\n\t\t\t\t\t};\n\t\t\t\tdefault:\n\t\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\t}\n\t\t}\n\t\tcase \"evaluated\":\n\t\t\tif (typeof value.verified !== \"boolean\") throw new VerifiedRunError(\"integrity\");\n\t\t\treturn { kind: value.kind, receiptDigest: digest(value.receiptDigest), verified: value.verified };\n\t\tcase \"failed\":\n\t\t\treturn { kind: value.kind, code: text(value.code) };\n\t\tdefault:\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n}\n"]}

package/dist/core/verified-run/events.d.ts

@@ -0,0 +1,4 @@
+export { parseRunEvent } from "./event-parser.ts";
+export { projectRun } from "./projection.ts";
+export type { RunEvent, RunProjection } from "./run-types.ts";
+//# sourceMappingURL=events.d.ts.map

package/dist/core/verified-run/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["export { parseRunEvent } from \"./event-parser.ts\";\nexport { projectRun } from \"./projection.ts\";\nexport type { RunEvent, RunProjection } from \"./run-types.ts\";\n"]}

package/dist/core/verified-run/events.js

@@ -0,0 +1,3 @@
+export { parseRunEvent } from "./event-parser.js";
+export { projectRun } from "./projection.js";
+//# sourceMappingURL=events.js.map

package/dist/core/verified-run/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/core/verified-run/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC","sourcesContent":["export { parseRunEvent } from \"./event-parser.ts\";\nexport { projectRun } from \"./projection.ts\";\nexport type { RunEvent, RunProjection } from \"./run-types.ts\";\n"]}

package/dist/core/verified-run/evidence-binding.d.ts

@@ -0,0 +1,18 @@
+import { type RunContract } from "omk-protocol";
+export interface CheckObservation {
+    readonly claimId: string;
+    readonly executionId: string;
+    readonly stdoutDigest: string;
+    readonly stderrDigest: string;
+    readonly exitCode: number | null;
+    readonly failure: string | null;
+    readonly receiptCoreDigest?: string;
+}
+export declare function parseCheckObservations(value: unknown, nativeRequired: boolean): readonly CheckObservation[];
+/** Only the authenticated adapter supplies these observations; the reducer itself grants no trust. */
+export declare function closesRunClaims(contract: RunContract, context: {
+    readonly candidate: string;
+    readonly environment: string;
+    readonly checks: readonly CheckObservation[];
+}): boolean;
+//# sourceMappingURL=evidence-binding.d.ts.map

package/dist/core/verified-run/evidence-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-binding.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/evidence-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoD,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAGlG,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,GAAG,SAAS,gBAAgB,EAAE,CAuC3G;AAED,sGAAsG;AACtG,wBAAgB,eAAe,CAC9B,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAAE,GACjH,OAAO,CA2CT","sourcesContent":["import { CLAIM_GRAPH_SCHEMA_VERSION, evaluateProofClosure, type RunContract } from \"omk-protocol\";\nimport { digestBytes, VerifiedRunError } from \"./storage.ts\";\n\nexport interface CheckObservation {\n\treadonly claimId: string;\n\treadonly executionId: string;\n\treadonly stdoutDigest: string;\n\treadonly stderrDigest: string;\n\treadonly exitCode: number | null;\n\treadonly failure: string | null;\n\treadonly receiptCoreDigest?: string;\n}\n\nexport function parseCheckObservations(value: unknown, nativeRequired: boolean): readonly CheckObservation[] {\n\tif (!Array.isArray(value) || value.length > 32) throw new VerifiedRunError(\"integrity\");\n\tconst rawChecks: readonly unknown[] = value;\n\treturn Object.freeze(\n\t\trawChecks.map((raw): CheckObservation => {\n\t\t\tif (\n\t\t\t\ttypeof raw !== \"object\" ||\n\t\t\t\traw === null ||\n\t\t\t\t!(\"claimId\" in raw) ||\n\t\t\t\ttypeof raw.claimId !== \"string\" ||\n\t\t\t\t!(\"executionId\" in raw) ||\n\t\t\t\ttypeof raw.executionId !== \"string\" ||\n\t\t\t\t!(\"stdoutDigest\" in raw) ||\n\t\t\t\ttypeof raw.stdoutDigest !== \"string\" ||\n\t\t\t\t!/^[a-f0-9]{64}$/.test(raw.stdoutDigest) ||\n\t\t\t\t!(\"stderrDigest\" in raw) ||\n\t\t\t\ttypeof raw.stderrDigest !== \"string\" ||\n\t\t\t\t!/^[a-f0-9]{64}$/.test(raw.stderrDigest) ||\n\t\t\t\t!(\"exitCode\" in raw) ||\n\t\t\t\t(raw.exitCode !== null && (typeof raw.exitCode !== \"number\" || !Number.isSafeInteger(raw.exitCode))) ||\n\t\t\t\t!(\"failure\" in raw) ||\n\t\t\t\t(raw.failure !== null && typeof raw.failure !== \"string\")\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tconst native = \"receiptCoreDigest\" in raw ? raw.receiptCoreDigest : undefined;\n\t\t\tif (nativeRequired && (typeof native !== \"string\" || !/^[a-f0-9]{64}$/.test(native)))\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tif (!nativeRequired && native !== undefined) throw new VerifiedRunError(\"integrity\");\n\t\t\treturn Object.freeze({\n\t\t\t\tclaimId: raw.claimId,\n\t\t\t\texecutionId: raw.executionId,\n\t\t\t\tstdoutDigest: raw.stdoutDigest,\n\t\t\t\tstderrDigest: raw.stderrDigest,\n\t\t\t\texitCode: raw.exitCode,\n\t\t\t\tfailure: raw.failure,\n\t\t\t\t...(typeof native === \"string\" ? { receiptCoreDigest: native } : {}),\n\t\t\t});\n\t\t}),\n\t);\n}\n\n/** Only the authenticated adapter supplies these observations; the reducer itself grants no trust. */\nexport function closesRunClaims(\n\tcontract: RunContract,\n\tcontext: { readonly candidate: string; readonly environment: string; readonly checks: readonly CheckObservation[] },\n): boolean {\n\tconst graph = {\n\t\tschemaVersion: CLAIM_GRAPH_SCHEMA_VERSION,\n\t\tclaims: contract.checks.map((check) => ({\n\t\t\tclaimId: check.claimId,\n\t\t\tkind: \"requirement\" as const,\n\t\t\tstatement: `Exact stdout for ${check.claimId}`,\n\t\t\tseverity: \"required\" as const,\n\t\t\tsatisfaction: { rule: \"all\" as const, inputs: [] },\n\t\t\ttrustFloor: \"trusted_attestation\" as const,\n\t\t\tinvalidationKeys: [],\n\t\t\tscopeSensitive: true,\n\t\t})),\n\t};\n\tconst observations = context.checks.map((check) => ({\n\t\tobservationId: check.executionId,\n\t\tclaimIds: [check.claimId],\n\t\tsource: \"trusted_attestation\" as const,\n\t\tpolarity:\n\t\t\tcheck.exitCode === 0 &&\n\t\t\tcheck.failure === null &&\n\t\t\tcontract.checks.some(\n\t\t\t\t(expected) => expected.claimId === check.claimId && digestBytes(expected.stdout) === check.stdoutDigest,\n\t\t\t)\n\t\t\t\t? (\"supports\" as const)\n\t\t\t\t: (\"violates\" as const),\n\t\tsourceRoot: context.candidate,\n\t\tenvironmentDigest: context.environment,\n\t\tindependenceGroup: check.executionId,\n\t}));\n\treturn (\n\t\tevaluateProofClosure({\n\t\t\tgraph,\n\t\t\tobservations,\n\t\t\twitnessIndependence: \"explicit-groups\",\n\t\t\twaivers: [],\n\t\t\tsourceRoot: context.candidate,\n\t\t\tenvironmentDigest: context.environment,\n\t\t\tworkspaceCompleteness: \"complete\",\n\t\t\tunresolvedEffectIds: [],\n\t\t\tnow: \"1970-01-01T00:00:00.000Z\",\n\t\t}).verdict === \"verified\"\n\t);\n}\n"]}

package/dist/core/verified-run/evidence-binding.js

@@ -0,0 +1,81 @@
+import { CLAIM_GRAPH_SCHEMA_VERSION, evaluateProofClosure } from "omk-protocol";
+import { digestBytes, VerifiedRunError } from "./storage.js";
+export function parseCheckObservations(value, nativeRequired) {
+    if (!Array.isArray(value) || value.length > 32)
+        throw new VerifiedRunError("integrity");
+    const rawChecks = value;
+    return Object.freeze(rawChecks.map((raw) => {
+        if (typeof raw !== "object" ||
+            raw === null ||
+            !("claimId" in raw) ||
+            typeof raw.claimId !== "string" ||
+            !("executionId" in raw) ||
+            typeof raw.executionId !== "string" ||
+            !("stdoutDigest" in raw) ||
+            typeof raw.stdoutDigest !== "string" ||
+            !/^[a-f0-9]{64}$/.test(raw.stdoutDigest) ||
+            !("stderrDigest" in raw) ||
+            typeof raw.stderrDigest !== "string" ||
+            !/^[a-f0-9]{64}$/.test(raw.stderrDigest) ||
+            !("exitCode" in raw) ||
+            (raw.exitCode !== null && (typeof raw.exitCode !== "number" || !Number.isSafeInteger(raw.exitCode))) ||
+            !("failure" in raw) ||
+            (raw.failure !== null && typeof raw.failure !== "string"))
+            throw new VerifiedRunError("integrity");
+        const native = "receiptCoreDigest" in raw ? raw.receiptCoreDigest : undefined;
+        if (nativeRequired && (typeof native !== "string" || !/^[a-f0-9]{64}$/.test(native)))
+            throw new VerifiedRunError("integrity");
+        if (!nativeRequired && native !== undefined)
+            throw new VerifiedRunError("integrity");
+        return Object.freeze({
+            claimId: raw.claimId,
+            executionId: raw.executionId,
+            stdoutDigest: raw.stdoutDigest,
+            stderrDigest: raw.stderrDigest,
+            exitCode: raw.exitCode,
+            failure: raw.failure,
+            ...(typeof native === "string" ? { receiptCoreDigest: native } : {}),
+        });
+    }));
+}
+/** Only the authenticated adapter supplies these observations; the reducer itself grants no trust. */
+export function closesRunClaims(contract, context) {
+    const graph = {
+        schemaVersion: CLAIM_GRAPH_SCHEMA_VERSION,
+        claims: contract.checks.map((check) => ({
+            claimId: check.claimId,
+            kind: "requirement",
+            statement: `Exact stdout for ${check.claimId}`,
+            severity: "required",
+            satisfaction: { rule: "all", inputs: [] },
+            trustFloor: "trusted_attestation",
+            invalidationKeys: [],
+            scopeSensitive: true,
+        })),
+    };
+    const observations = context.checks.map((check) => ({
+        observationId: check.executionId,
+        claimIds: [check.claimId],
+        source: "trusted_attestation",
+        polarity: check.exitCode === 0 &&
+            check.failure === null &&
+            contract.checks.some((expected) => expected.claimId === check.claimId && digestBytes(expected.stdout) === check.stdoutDigest)
+            ? "supports"
+            : "violates",
+        sourceRoot: context.candidate,
+        environmentDigest: context.environment,
+        independenceGroup: check.executionId,
+    }));
+    return (evaluateProofClosure({
+        graph,
+        observations,
+        witnessIndependence: "explicit-groups",
+        waivers: [],
+        sourceRoot: context.candidate,
+        environmentDigest: context.environment,
+        workspaceCompleteness: "complete",
+        unresolvedEffectIds: [],
+        now: "1970-01-01T00:00:00.000Z",
+    }).verdict === "verified");
+}
+//# sourceMappingURL=evidence-binding.js.map

package/dist/core/verified-run/evidence-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-binding.js","sourceRoot":"","sources":["../../../src/core/verified-run/evidence-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAoB,MAAM,cAAc,CAAC;AAClG,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAY7D,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,cAAuB,EAA+B;IAC5G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACxF,MAAM,SAAS,GAAuB,KAAK,CAAC;IAC5C,OAAO,MAAM,CAAC,MAAM,CACnB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE,CAAC;QACxC,IACC,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;YACnB,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAC/B,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YACnC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC;YACxB,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;YACpC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;YACxC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC;YACxB,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;YACpC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;YACxC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;YACpB,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpG,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;YACnB,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC;YAEzD,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,cAAc,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrF,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CAAC;IAAA,CACH,CAAC,CACF,CAAC;AAAA,CACF;AAED,sGAAsG;AACtG,MAAM,UAAU,eAAe,CAC9B,QAAqB,EACrB,OAAmH,EACzG;IACV,MAAM,KAAK,GAAG;QACb,aAAa,EAAE,0BAA0B;QACzC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,aAAsB;YAC5B,SAAS,EAAE,oBAAoB,KAAK,CAAC,OAAO,EAAE;YAC9C,QAAQ,EAAE,UAAmB;YAC7B,YAAY,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE,MAAM,EAAE,EAAE,EAAE;YAClD,UAAU,EAAE,qBAA8B;YAC1C,gBAAgB,EAAE,EAAE;YACpB,cAAc,EAAE,IAAI;SACpB,CAAC,CAAC;KACH,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnD,aAAa,EAAE,KAAK,CAAC,WAAW;QAChC,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QACzB,MAAM,EAAE,qBAA8B;QACtC,QAAQ,EACP,KAAK,CAAC,QAAQ,KAAK,CAAC;YACpB,KAAK,CAAC,OAAO,KAAK,IAAI;YACtB,QAAQ,CAAC,MAAM,CAAC,IAAI,CACnB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,YAAY,CACvG;YACA,CAAC,CAAE,UAAoB;YACvB,CAAC,CAAE,UAAoB;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,iBAAiB,EAAE,OAAO,CAAC,WAAW;QACtC,iBAAiB,EAAE,KAAK,CAAC,WAAW;KACpC,CAAC,CAAC,CAAC;IACJ,OAAO,CACN,oBAAoB,CAAC;QACpB,KAAK;QACL,YAAY;QACZ,mBAAmB,EAAE,iBAAiB;QACtC,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,iBAAiB,EAAE,OAAO,CAAC,WAAW;QACtC,qBAAqB,EAAE,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,GAAG,EAAE,0BAA0B;KAC/B,CAAC,CAAC,OAAO,KAAK,UAAU,CACzB,CAAC;AAAA,CACF","sourcesContent":["import { CLAIM_GRAPH_SCHEMA_VERSION, evaluateProofClosure, type RunContract } from \"omk-protocol\";\nimport { digestBytes, VerifiedRunError } from \"./storage.ts\";\n\nexport interface CheckObservation {\n\treadonly claimId: string;\n\treadonly executionId: string;\n\treadonly stdoutDigest: string;\n\treadonly stderrDigest: string;\n\treadonly exitCode: number | null;\n\treadonly failure: string | null;\n\treadonly receiptCoreDigest?: string;\n}\n\nexport function parseCheckObservations(value: unknown, nativeRequired: boolean): readonly CheckObservation[] {\n\tif (!Array.isArray(value) || value.length > 32) throw new VerifiedRunError(\"integrity\");\n\tconst rawChecks: readonly unknown[] = value;\n\treturn Object.freeze(\n\t\trawChecks.map((raw): CheckObservation => {\n\t\t\tif (\n\t\t\t\ttypeof raw !== \"object\" ||\n\t\t\t\traw === null ||\n\t\t\t\t!(\"claimId\" in raw) ||\n\t\t\t\ttypeof raw.claimId !== \"string\" ||\n\t\t\t\t!(\"executionId\" in raw) ||\n\t\t\t\ttypeof raw.executionId !== \"string\" ||\n\t\t\t\t!(\"stdoutDigest\" in raw) ||\n\t\t\t\ttypeof raw.stdoutDigest !== \"string\" ||\n\t\t\t\t!/^[a-f0-9]{64}$/.test(raw.stdoutDigest) ||\n\t\t\t\t!(\"stderrDigest\" in raw) ||\n\t\t\t\ttypeof raw.stderrDigest !== \"string\" ||\n\t\t\t\t!/^[a-f0-9]{64}$/.test(raw.stderrDigest) ||\n\t\t\t\t!(\"exitCode\" in raw) ||\n\t\t\t\t(raw.exitCode !== null && (typeof raw.exitCode !== \"number\" || !Number.isSafeInteger(raw.exitCode))) ||\n\t\t\t\t!(\"failure\" in raw) ||\n\t\t\t\t(raw.failure !== null && typeof raw.failure !== \"string\")\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tconst native = \"receiptCoreDigest\" in raw ? raw.receiptCoreDigest : undefined;\n\t\t\tif (nativeRequired && (typeof native !== \"string\" || !/^[a-f0-9]{64}$/.test(native)))\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tif (!nativeRequired && native !== undefined) throw new VerifiedRunError(\"integrity\");\n\t\t\treturn Object.freeze({\n\t\t\t\tclaimId: raw.claimId,\n\t\t\t\texecutionId: raw.executionId,\n\t\t\t\tstdoutDigest: raw.stdoutDigest,\n\t\t\t\tstderrDigest: raw.stderrDigest,\n\t\t\t\texitCode: raw.exitCode,\n\t\t\t\tfailure: raw.failure,\n\t\t\t\t...(typeof native === \"string\" ? { receiptCoreDigest: native } : {}),\n\t\t\t});\n\t\t}),\n\t);\n}\n\n/** Only the authenticated adapter supplies these observations; the reducer itself grants no trust. */\nexport function closesRunClaims(\n\tcontract: RunContract,\n\tcontext: { readonly candidate: string; readonly environment: string; readonly checks: readonly CheckObservation[] },\n): boolean {\n\tconst graph = {\n\t\tschemaVersion: CLAIM_GRAPH_SCHEMA_VERSION,\n\t\tclaims: contract.checks.map((check) => ({\n\t\t\tclaimId: check.claimId,\n\t\t\tkind: \"requirement\" as const,\n\t\t\tstatement: `Exact stdout for ${check.claimId}`,\n\t\t\tseverity: \"required\" as const,\n\t\t\tsatisfaction: { rule: \"all\" as const, inputs: [] },\n\t\t\ttrustFloor: \"trusted_attestation\" as const,\n\t\t\tinvalidationKeys: [],\n\t\t\tscopeSensitive: true,\n\t\t})),\n\t};\n\tconst observations = context.checks.map((check) => ({\n\t\tobservationId: check.executionId,\n\t\tclaimIds: [check.claimId],\n\t\tsource: \"trusted_attestation\" as const,\n\t\tpolarity:\n\t\t\tcheck.exitCode === 0 &&\n\t\t\tcheck.failure === null &&\n\t\t\tcontract.checks.some(\n\t\t\t\t(expected) => expected.claimId === check.claimId && digestBytes(expected.stdout) === check.stdoutDigest,\n\t\t\t)\n\t\t\t\t? (\"supports\" as const)\n\t\t\t\t: (\"violates\" as const),\n\t\tsourceRoot: context.candidate,\n\t\tenvironmentDigest: context.environment,\n\t\tindependenceGroup: check.executionId,\n\t}));\n\treturn (\n\t\tevaluateProofClosure({\n\t\t\tgraph,\n\t\t\tobservations,\n\t\t\twitnessIndependence: \"explicit-groups\",\n\t\t\twaivers: [],\n\t\t\tsourceRoot: context.candidate,\n\t\t\tenvironmentDigest: context.environment,\n\t\t\tworkspaceCompleteness: \"complete\",\n\t\t\tunresolvedEffectIds: [],\n\t\t\tnow: \"1970-01-01T00:00:00.000Z\",\n\t\t}).verdict === \"verified\"\n\t);\n}\n"]}

package/dist/core/verified-run/evidence.d.ts

@@ -0,0 +1,27 @@
+import type { RunContract } from "omk-protocol";
+import type { EvidenceReceipt } from "../../types/evidence.ts";
+import { type CandidateManifest } from "./candidate.ts";
+import { type CheckObservation } from "./evidence-binding.ts";
+import type { JournalSnapshot } from "./journal.ts";
+export type { CheckObservation } from "./evidence-binding.ts";
+export interface VerifiedRunEvidence {
+    readonly candidateDigest: string;
+    readonly manifest: CandidateManifest;
+    readonly receiptDigest: string;
+    readonly verified: boolean;
+    readonly checks: readonly CheckObservation[];
+    readonly receiptFormat: "v3" | "legacy";
+    readonly receipts: readonly EvidenceReceipt[];
+}
+export declare function createRunIssuer(runPath: string): void;
+export declare function issueRunEvidence(runPath: string, contract: RunContract, material: {
+    readonly generation: number;
+    readonly candidateDigest: string;
+    readonly environmentDigest: string;
+    readonly checks: readonly CheckObservation[];
+}): {
+    readonly digest: string;
+    readonly verified: boolean;
+};
+export declare function readRunEvidence(runPath: string, journal: JournalSnapshot, environment: string): VerifiedRunEvidence;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/core/verified-run/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/evidence.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,KAAK,iBAAiB,EAAiB,MAAM,gBAAgB,CAAC;AAEvE,OAAO,EAAE,KAAK,gBAAgB,EAA2C,MAAM,uBAAuB,CAAC;AACvG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAa9D,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,IAAI,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAGrD;AAQD,wBAAgB,gBAAgB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,EACrB,QAAQ,EAAE;IACT,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C,GACC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAuBzD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,GAAG,mBAAmB,CAoEnH","sourcesContent":["import { createHmac, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport type { RunContract } from \"omk-protocol\";\nimport type { EvidenceReceipt } from \"../../types/evidence.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport { type CandidateManifest, loadCandidate } from \"./candidate.ts\";\nimport { readCheckReceipts } from \"./check-receipt.ts\";\nimport { type CheckObservation, closesRunClaims, parseCheckObservations } from \"./evidence-binding.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError } from \"./storage.ts\";\n\nexport type { CheckObservation } from \"./evidence-binding.ts\";\n\ninterface Attestation {\n\treadonly version: 1 | 2 | 3;\n\treadonly runId: string;\n\treadonly generation: number;\n\treadonly contractDigest: string;\n\treadonly candidateDigest: string;\n\treadonly environmentDigest: string;\n\treadonly verifierDigest: string;\n\treadonly checks: readonly CheckObservation[];\n\treadonly verified: boolean;\n}\nexport interface VerifiedRunEvidence {\n\treadonly candidateDigest: string;\n\treadonly manifest: CandidateManifest;\n\treadonly receiptDigest: string;\n\treadonly verified: boolean;\n\treadonly checks: readonly CheckObservation[];\n\treadonly receiptFormat: \"v3\" | \"legacy\";\n\treadonly receipts: readonly EvidenceReceipt[];\n}\n\nexport function createRunIssuer(runPath: string): void {\n\t// Recovery must never replace a missing key and re-sign old evidence.\n\tpublishBytes(join(runPath, \"issuer.key\"), randomBytes(32));\n}\n\nfunction tag(runPath: string, receipt: unknown): Buffer {\n\tconst key = readRegularFile(join(runPath, \"issuer.key\"), 32);\n\tif (key.length !== 32) throw new VerifiedRunError(\"integrity\");\n\treturn createHmac(\"sha256\", key).update(\"omk.verified-run.attestation.v1\\0\").update(canonicalJson(receipt)).digest();\n}\n\nexport function issueRunEvidence(\n\trunPath: string,\n\tcontract: RunContract,\n\tmaterial: {\n\t\treadonly generation: number;\n\t\treadonly candidateDigest: string;\n\t\treadonly environmentDigest: string;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): { readonly digest: string; readonly verified: boolean } {\n\tconst checks = parseCheckObservations(material.checks, true);\n\tconst candidate = loadCandidate(runPath, material.candidateDigest, contract.budget);\n\treadCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks });\n\tconst receipt: Attestation = {\n\t\tversion: 3,\n\t\trunId: contract.runId,\n\t\tgeneration: material.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest: material.candidateDigest,\n\t\tenvironmentDigest: material.environmentDigest,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified: closesRunClaims(contract, {\n\t\t\tcandidate: material.candidateDigest,\n\t\t\tenvironment: material.environmentDigest,\n\t\t\tchecks,\n\t\t}),\n\t};\n\tconst envelope = { receipt, authenticationTag: tag(runPath, receipt).toString(\"hex\") };\n\tconst digest = digestObject(envelope);\n\tpublishObject(join(runPath, \"attestations\", `${digest}.json`), envelope);\n\treturn { digest, verified: receipt.verified };\n}\n\nexport function readRunEvidence(runPath: string, journal: JournalSnapshot, environment: string): VerifiedRunEvidence {\n\tconst first = journal.records[0]?.event;\n\tconst { candidateDigest, receiptDigest } = journal.state;\n\tif (first?.kind !== \"created\" || !candidateDigest || !receiptDigest) throw new VerifiedRunError(\"evidence_missing\");\n\tconst raw = readJson(join(runPath, \"attestations\", `${receiptDigest}.json`));\n\tif (\n\t\tdigestObject(raw) !== receiptDigest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"receipt\" in raw) ||\n\t\t!(\"authenticationTag\" in raw) ||\n\t\ttypeof raw.authenticationTag !== \"string\" ||\n\t\t!/^[a-f0-9]{64}$/.test(raw.authenticationTag) ||\n\t\t!timingSafeEqual(tag(runPath, raw.receipt), Buffer.from(raw.authenticationTag, \"hex\"))\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst receipt = raw.receipt;\n\tif (\n\t\ttypeof receipt !== \"object\" ||\n\t\treceipt === null ||\n\t\t!(\"checks\" in receipt) ||\n\t\t!(\"version\" in receipt) ||\n\t\t(receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst checks = parseCheckObservations(receipt.checks, receipt.version !== 1);\n\tconst contract = first.contract;\n\tconst dispatches = journal.records.flatMap(({ event, generation }) =>\n\t\tgeneration === journal.state.generation && event.kind === \"dispatch\" && event.role === \"verifier\" ? [event] : [],\n\t);\n\tif (\n\t\tchecks.length !== contract.checks.length ||\n\t\tchecks.length !== dispatches.length ||\n\t\tnew Set(checks.map((check) => check.claimId)).size !== checks.length ||\n\t\tchecks.some(\n\t\t\t(check) =>\n\t\t\t\t!dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId),\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst verified = closesRunClaims(contract, { candidate: candidateDigest, environment, checks });\n\tconst expected: Attestation = {\n\t\tversion: receipt.version,\n\t\trunId: contract.runId,\n\t\tgeneration: journal.state.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest,\n\t\tenvironmentDigest: environment,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified,\n\t};\n\tif (canonicalJson(receipt) !== canonicalJson(expected) || verified !== (journal.state.verification === \"verified\"))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst candidate = loadCandidate(runPath, candidateDigest, contract.budget);\n\tconst receipts =\n\t\treceipt.version !== 1\n\t\t\t? readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks })\n\t\t\t: Object.freeze([]);\n\treturn Object.freeze({\n\t\tcandidateDigest,\n\t\tmanifest: candidate.manifest,\n\t\treceiptDigest,\n\t\tverified,\n\t\tchecks,\n\t\treceiptFormat: receipt.version !== 1 ? \"v3\" : \"legacy\",\n\t\treceipts,\n\t});\n}\n"]}

package/dist/core/verified-run/evidence.js

@@ -0,0 +1,100 @@
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { join } from "node:path";
+import { canonicalJson } from "../run-journal.js";
+import { loadCandidate } from "./candidate.js";
+import { readCheckReceipts } from "./check-receipt.js";
+import { closesRunClaims, parseCheckObservations } from "./evidence-binding.js";
+import { digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError } from "./storage.js";
+export function createRunIssuer(runPath) {
+    // Recovery must never replace a missing key and re-sign old evidence.
+    publishBytes(join(runPath, "issuer.key"), randomBytes(32));
+}
+function tag(runPath, receipt) {
+    const key = readRegularFile(join(runPath, "issuer.key"), 32);
+    if (key.length !== 32)
+        throw new VerifiedRunError("integrity");
+    return createHmac("sha256", key).update("omk.verified-run.attestation.v1\0").update(canonicalJson(receipt)).digest();
+}
+export function issueRunEvidence(runPath, contract, material) {
+    const checks = parseCheckObservations(material.checks, true);
+    const candidate = loadCandidate(runPath, material.candidateDigest, contract.budget);
+    readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks });
+    const receipt = {
+        version: 3,
+        runId: contract.runId,
+        generation: material.generation,
+        contractDigest: digestObject(contract),
+        candidateDigest: material.candidateDigest,
+        environmentDigest: material.environmentDigest,
+        verifierDigest: digestObject(contract.checks),
+        checks,
+        verified: closesRunClaims(contract, {
+            candidate: material.candidateDigest,
+            environment: material.environmentDigest,
+            checks,
+        }),
+    };
+    const envelope = { receipt, authenticationTag: tag(runPath, receipt).toString("hex") };
+    const digest = digestObject(envelope);
+    publishObject(join(runPath, "attestations", `${digest}.json`), envelope);
+    return { digest, verified: receipt.verified };
+}
+export function readRunEvidence(runPath, journal, environment) {
+    const first = journal.records[0]?.event;
+    const { candidateDigest, receiptDigest } = journal.state;
+    if (first?.kind !== "created" || !candidateDigest || !receiptDigest)
+        throw new VerifiedRunError("evidence_missing");
+    const raw = readJson(join(runPath, "attestations", `${receiptDigest}.json`));
+    if (digestObject(raw) !== receiptDigest ||
+        typeof raw !== "object" ||
+        raw === null ||
+        !("receipt" in raw) ||
+        !("authenticationTag" in raw) ||
+        typeof raw.authenticationTag !== "string" ||
+        !/^[a-f0-9]{64}$/.test(raw.authenticationTag) ||
+        !timingSafeEqual(tag(runPath, raw.receipt), Buffer.from(raw.authenticationTag, "hex")))
+        throw new VerifiedRunError("integrity");
+    const receipt = raw.receipt;
+    if (typeof receipt !== "object" ||
+        receipt === null ||
+        !("checks" in receipt) ||
+        !("version" in receipt) ||
+        (receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3))
+        throw new VerifiedRunError("integrity");
+    const checks = parseCheckObservations(receipt.checks, receipt.version !== 1);
+    const contract = first.contract;
+    const dispatches = journal.records.flatMap(({ event, generation }) => generation === journal.state.generation && event.kind === "dispatch" && event.role === "verifier" ? [event] : []);
+    if (checks.length !== contract.checks.length ||
+        checks.length !== dispatches.length ||
+        new Set(checks.map((check) => check.claimId)).size !== checks.length ||
+        checks.some((check) => !dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId)))
+        throw new VerifiedRunError("integrity");
+    const verified = closesRunClaims(contract, { candidate: candidateDigest, environment, checks });
+    const expected = {
+        version: receipt.version,
+        runId: contract.runId,
+        generation: journal.state.generation,
+        contractDigest: digestObject(contract),
+        candidateDigest,
+        environmentDigest: environment,
+        verifierDigest: digestObject(contract.checks),
+        checks,
+        verified,
+    };
+    if (canonicalJson(receipt) !== canonicalJson(expected) || verified !== (journal.state.verification === "verified"))
+        throw new VerifiedRunError("integrity");
+    const candidate = loadCandidate(runPath, candidateDigest, contract.budget);
+    const receipts = receipt.version !== 1
+        ? readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks })
+        : Object.freeze([]);
+    return Object.freeze({
+        candidateDigest,
+        manifest: candidate.manifest,
+        receiptDigest,
+        verified,
+        checks,
+        receiptFormat: receipt.version !== 1 ? "v3" : "legacy",
+        receipts,
+    });
+}
+//# sourceMappingURL=evidence.js.map