open-multi-agent-kit 0.98.4 → 0.98.5

package/dist/core/verified-run/broker.js

@@ -0,0 +1,210 @@
+import { spawn, spawnSync } from "node:child_process";
+import { existsSync, readFileSync, realpathSync } from "node:fs";
+import { release } from "node:os";
+import { performance } from "node:perf_hooks";
+import { identityFromSandboxInfo, PROCESS_GATE_ARGV } from "./process-gate.js";
+import { digestBytes, digestObject, VerifiedRunError } from "./storage.js";
+const BWRAP = "/usr/bin/bwrap";
+const SYSTEM_ARGS = [
+    "--unshare-all",
+    "--die-with-parent",
+    "--new-session",
+    "--cap-drop",
+    "ALL",
+    "--clearenv",
+    "--ro-bind",
+    "/usr",
+    "/usr",
+    "--symlink",
+    "usr/bin",
+    "/bin",
+    "--symlink",
+    "usr/lib",
+    "/lib",
+    "--symlink",
+    "usr/lib64",
+    "/lib64",
+    "--proc",
+    "/proc",
+    "--dev",
+    "/dev",
+    "--tmpfs",
+    "/tmp",
+    "--setenv",
+    "PATH",
+    "/usr/bin:/bin",
+    "--setenv",
+    "LANG",
+    "C.UTF-8",
+];
+export function commandEnvironmentDigest(contract, driver = "legacy") {
+    if (process.platform !== "linux" || !existsSync(BWRAP))
+        throw new VerifiedRunError("unsupported");
+    let writers;
+    switch (contract.profile) {
+        case "linux-command-v1":
+            writers = [contract.writer];
+            break;
+        case "linux-scripted-agent-v1":
+            writers = contract.writer.steps;
+            break;
+        case "linux-command-dag-v1":
+            writers = contract.writer.tasks.flatMap((task) => task.attempts);
+            break;
+        default: {
+            const exhaustive = contract;
+            throw new VerifiedRunError(String(exhaustive));
+        }
+    }
+    const binaries = [
+        ...new Set([
+            BWRAP,
+            ...writers.map((argv) => argv[0]),
+            ...contract.checks.map((check) => check.argv[0]),
+            ...(driver === "gated-v1" ? [PROCESS_GATE_ARGV[0]] : []),
+        ]),
+    ];
+    const materials = binaries.map((binary) => {
+        if (!binary || (!binary.startsWith("/usr/bin/") && !binary.startsWith("/bin/")))
+            throw new VerifiedRunError("unsupported_executable");
+        const path = realpathSync(binary);
+        if (!path.startsWith("/usr/"))
+            throw new VerifiedRunError("unsupported_executable");
+        return { path, digest: digestBytes(readFileSync(path)) };
+    });
+    return digestObject({
+        profile: contract.profile,
+        platform: process.platform,
+        architecture: process.arch,
+        kernel: release(),
+        sandbox: SYSTEM_ARGS,
+        ...(driver === "gated-v1" ? { gate: PROCESS_GATE_ARGV, infoFd: 3 } : {}),
+        binaries: materials,
+    });
+}
+export function probeVerifiedSandbox() {
+    if (process.platform !== "linux" || !existsSync(BWRAP))
+        throw new VerifiedRunError("unsupported");
+    const probe = spawnSync(BWRAP, [...SYSTEM_ARGS, "--", "/bin/true"], {
+        env: {},
+        timeout: 3000,
+        maxBuffer: 4096,
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    if (probe.error || probe.status !== 0)
+        throw new VerifiedRunError("unsupported");
+}
+/** The only process dispatch port; close means the PID namespace and its inherited pipes have drained. */
+export async function executeSandbox(request) {
+    if (request.signal?.aborted)
+        throw new VerifiedRunError("cancelled");
+    if (request.timeoutMs <= 0)
+        throw new VerifiedRunError("deadline");
+    const started = performance.now();
+    const startedAt = new Date().toISOString();
+    const argv = [
+        ...SYSTEM_ARGS,
+        request.writable ? "--bind" : "--ro-bind",
+        request.workspace,
+        "/workspace",
+        "--chdir",
+        "/workspace",
+        ...(request.onReady ? ["--info-fd", "3", "--", ...PROCESS_GATE_ARGV] : ["--"]),
+        ...request.argv,
+    ];
+    return new Promise((resolve, reject) => {
+        const child = request.onReady
+            ? spawn(BWRAP, argv, { env: {}, stdio: ["pipe", "pipe", "pipe", "pipe"] })
+            : spawn(BWRAP, argv, { env: {}, stdio: ["ignore", "pipe", "pipe"] });
+        let gateFailed = false;
+        let gateError;
+        const stdout = [];
+        const stderr = [];
+        let size = 0;
+        let failure = null;
+        let cleanup;
+        let finished = false;
+        const stop = (reason) => {
+            if (finished || failure)
+                return;
+            failure = reason;
+            child.kill("SIGKILL");
+            cleanup = setTimeout(() => reject(new VerifiedRunError("unsettled")), request.cleanupMs);
+        };
+        const deadline = setTimeout(() => stop("deadline"), request.timeoutMs);
+        const abort = () => stop("cancelled");
+        request.signal?.addEventListener("abort", abort, { once: true });
+        if (request.signal?.aborted)
+            abort();
+        const collect = (target, chunk) => {
+            if (failure)
+                return;
+            size += chunk.length;
+            if (size > request.maxOutputBytes) {
+                stop("output_limit");
+                return;
+            }
+            target.push(chunk);
+        };
+        child.stdout?.on("data", (chunk) => collect(stdout, chunk));
+        child.stderr?.on("data", (chunk) => collect(stderr, chunk));
+        if (request.onReady) {
+            const info = child.stdio[3];
+            let metadata = "";
+            if (!info || !child.stdin) {
+                gateFailed = true;
+                gateError = new VerifiedRunError("process_identity");
+                stop("process_identity");
+            }
+            else {
+                child.stdin.on("error", () => stop("execution_failed"));
+                info.on("data", (chunk) => {
+                    metadata += chunk.toString("utf8");
+                    if (metadata.length > 4096)
+                        stop("process_identity");
+                });
+                info.once("end", async () => {
+                    if (finished || failure)
+                        return;
+                    try {
+                        await request.onReady?.(identityFromSandboxInfo(metadata));
+                        if (performance.now() - started >= request.timeoutMs || request.signal?.aborted)
+                            stop(request.signal?.aborted ? "cancelled" : "deadline");
+                        if (!finished && !failure)
+                            child.stdin?.end("go\n");
+                    }
+                    catch (error) {
+                        gateFailed = true;
+                        gateError = error;
+                        stop("process_identity");
+                    }
+                });
+            }
+        }
+        child.once("error", () => {
+            failure = "execution_failed";
+        });
+        child.once("close", (exitCode) => {
+            finished = true;
+            clearTimeout(deadline);
+            clearTimeout(cleanup);
+            request.signal?.removeEventListener("abort", abort);
+            if (gateFailed) {
+                reject(gateError);
+                return;
+            }
+            const durationMs = Math.max(0, Math.round(performance.now() - started));
+            resolve({
+                stdout: Buffer.concat(stdout),
+                stderr: Buffer.concat(stderr),
+                exitCode,
+                failure: failure ?? (exitCode === 0 ? null : "execution_failed"),
+                startedAt,
+                // Project the finish instant from the start's wall reference and monotonic elapsed time.
+                finishedAt: new Date(Date.parse(startedAt) + durationMs).toISOString(),
+                durationMs,
+            });
+        });
+    });
+}
+//# sourceMappingURL=broker.js.map

package/dist/core/verified-run/broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.js","sourceRoot":"","sources":["../../../src/core/verified-run/broker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE3E,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAC/B,MAAM,WAAW,GAAG;IACnB,eAAe;IACf,mBAAmB;IACnB,eAAe;IACf,YAAY;IACZ,KAAK;IACL,YAAY;IACZ,WAAW;IACX,MAAM;IACN,MAAM;IACN,WAAW;IACX,SAAS;IACT,MAAM;IACN,WAAW;IACX,SAAS;IACT,MAAM;IACN,WAAW;IACX,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,MAAM;IACN,SAAS;IACT,MAAM;IACN,UAAU;IACV,MAAM;IACN,eAAe;IACf,UAAU;IACV,MAAM;IACN,SAAS;CACA,CAAC;AAsBX,MAAM,UAAU,wBAAwB,CAAC,QAAqB,EAAE,MAAM,GAA0B,QAAQ,EAAU;IACjH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAClG,IAAI,OAAuC,CAAC;IAC5C,QAAQ,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC1B,KAAK,kBAAkB;YACtB,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM;QACP,KAAK,yBAAyB;YAC7B,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;YAChC,MAAM;QACP,KAAK,sBAAsB;YAC1B,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjE,MAAM;QACP,SAAS,CAAC;YACT,MAAM,UAAU,GAAU,QAAQ,CAAC;YACnC,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;IACD,MAAM,QAAQ,GAAG;QAChB,GAAG,IAAI,GAAG,CAAC;YACV,KAAK;YACL,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjC,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChD,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC;KACF,CAAC;IACF,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9E,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAAA,CACzD,CAAC,CAAC;IACH,OAAO,YAAY,CAAC;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,IAAI;QAC1B,MAAM,EAAE,OAAO,EAAE;QACjB,OAAO,EAAE,WAAW;QACpB,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,QAAQ,EAAE,SAAS;KACnB,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,oBAAoB,GAAS;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE;QACnE,GAAG,EAAE,EAAE;QACP,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAAA,CACjF;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAyB,EAA2B;IACxF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG;QACZ,GAAG,WAAW;QACd,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;QACzC,OAAO,CAAC,SAAS;QACjB,YAAY;QACZ,SAAS;QACT,YAAY;QACZ,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9E,GAAG,OAAO,CAAC,IAAI;KACf,CAAC;IACF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO;YAC5B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1E,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtE,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,SAAkB,CAAC;QACvB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,OAAkD,CAAC;QACvD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAQ,EAAE,CAAC;YACtC,IAAI,QAAQ,IAAI,OAAO;gBAAE,OAAO;YAChC,OAAO,GAAG,MAAM,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAAA,CACzF,CAAC;QACF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,KAAa,EAAQ,EAAE,CAAC;YAC1D,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,cAAc,CAAC,CAAC;gBACrB,OAAO;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAA,CACnB,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACpE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC3B,UAAU,GAAG,IAAI,CAAC;gBAClB,SAAS,GAAG,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;gBACrD,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACP,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACxD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC;oBAClC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACnC,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI;wBAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAAA,CACrD,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;oBAC5B,IAAI,QAAQ,IAAI,OAAO;wBAAE,OAAO;oBAChC,IAAI,CAAC;wBACJ,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC;wBAC3D,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;4BAC9E,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;wBAC1D,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO;4BAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;oBACrD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,UAAU,GAAG,IAAI,CAAC;wBAClB,SAAS,GAAG,KAAK,CAAC;wBAClB,IAAI,CAAC,kBAAkB,CAAC,CAAC;oBAC1B,CAAC;gBAAA,CACD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YACzB,OAAO,GAAG,kBAAkB,CAAC;QAAA,CAC7B,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,CAAC,SAAS,CAAC,CAAC;gBAClB,OAAO;YACR,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;YACxE,OAAO,CAAC;gBACP,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC7B,QAAQ;gBACR,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBAChE,SAAS;gBACT,yFAAyF;gBACzF,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE;gBACtE,UAAU;aACV,CAAC,CAAC;QAAA,CACH,CAAC,CAAC;IAAA,CACH,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { spawn, spawnSync } from \"node:child_process\";\nimport { existsSync, readFileSync, realpathSync } from \"node:fs\";\nimport { release } from \"node:os\";\nimport { performance } from \"node:perf_hooks\";\nimport type { RunContract } from \"omk-protocol\";\nimport type { NamespaceIdentity } from \"./namespace-identity.ts\";\nimport { identityFromSandboxInfo, PROCESS_GATE_ARGV } from \"./process-gate.ts\";\nimport { digestBytes, digestObject, VerifiedRunError } from \"./storage.ts\";\n\nconst BWRAP = \"/usr/bin/bwrap\";\nconst SYSTEM_ARGS = [\n\t\"--unshare-all\",\n\t\"--die-with-parent\",\n\t\"--new-session\",\n\t\"--cap-drop\",\n\t\"ALL\",\n\t\"--clearenv\",\n\t\"--ro-bind\",\n\t\"/usr\",\n\t\"/usr\",\n\t\"--symlink\",\n\t\"usr/bin\",\n\t\"/bin\",\n\t\"--symlink\",\n\t\"usr/lib\",\n\t\"/lib\",\n\t\"--symlink\",\n\t\"usr/lib64\",\n\t\"/lib64\",\n\t\"--proc\",\n\t\"/proc\",\n\t\"--dev\",\n\t\"/dev\",\n\t\"--tmpfs\",\n\t\"/tmp\",\n\t\"--setenv\",\n\t\"PATH\",\n\t\"/usr/bin:/bin\",\n\t\"--setenv\",\n\t\"LANG\",\n\t\"C.UTF-8\",\n] as const;\n\nexport interface SandboxExecution {\n\treadonly workspace: string;\n\treadonly argv: readonly string[];\n\treadonly writable: boolean;\n\treadonly timeoutMs: number;\n\treadonly cleanupMs: number;\n\treadonly maxOutputBytes: number;\n\treadonly signal?: AbortSignal;\n\treadonly onReady?: (identity: NamespaceIdentity) => void | Promise<void>;\n}\nexport interface SandboxOutcome {\n\treadonly stdout: Buffer;\n\treadonly stderr: Buffer;\n\treadonly exitCode: number | null;\n\treadonly failure: string | null;\n\treadonly startedAt: string;\n\treadonly finishedAt: string;\n\treadonly durationMs: number;\n}\n\nexport function commandEnvironmentDigest(contract: RunContract, driver: \"legacy\" | \"gated-v1\" = \"legacy\"): string {\n\tif (process.platform !== \"linux\" || !existsSync(BWRAP)) throw new VerifiedRunError(\"unsupported\");\n\tlet writers: readonly (readonly string[])[];\n\tswitch (contract.profile) {\n\t\tcase \"linux-command-v1\":\n\t\t\twriters = [contract.writer];\n\t\t\tbreak;\n\t\tcase \"linux-scripted-agent-v1\":\n\t\t\twriters = contract.writer.steps;\n\t\t\tbreak;\n\t\tcase \"linux-command-dag-v1\":\n\t\t\twriters = contract.writer.tasks.flatMap((task) => task.attempts);\n\t\t\tbreak;\n\t\tdefault: {\n\t\t\tconst exhaustive: never = contract;\n\t\t\tthrow new VerifiedRunError(String(exhaustive));\n\t\t}\n\t}\n\tconst binaries = [\n\t\t...new Set([\n\t\t\tBWRAP,\n\t\t\t...writers.map((argv) => argv[0]),\n\t\t\t...contract.checks.map((check) => check.argv[0]),\n\t\t\t...(driver === \"gated-v1\" ? [PROCESS_GATE_ARGV[0]] : []),\n\t\t]),\n\t];\n\tconst materials = binaries.map((binary) => {\n\t\tif (!binary || (!binary.startsWith(\"/usr/bin/\") && !binary.startsWith(\"/bin/\")))\n\t\t\tthrow new VerifiedRunError(\"unsupported_executable\");\n\t\tconst path = realpathSync(binary);\n\t\tif (!path.startsWith(\"/usr/\")) throw new VerifiedRunError(\"unsupported_executable\");\n\t\treturn { path, digest: digestBytes(readFileSync(path)) };\n\t});\n\treturn digestObject({\n\t\tprofile: contract.profile,\n\t\tplatform: process.platform,\n\t\tarchitecture: process.arch,\n\t\tkernel: release(),\n\t\tsandbox: SYSTEM_ARGS,\n\t\t...(driver === \"gated-v1\" ? { gate: PROCESS_GATE_ARGV, infoFd: 3 } : {}),\n\t\tbinaries: materials,\n\t});\n}\n\nexport function probeVerifiedSandbox(): void {\n\tif (process.platform !== \"linux\" || !existsSync(BWRAP)) throw new VerifiedRunError(\"unsupported\");\n\tconst probe = spawnSync(BWRAP, [...SYSTEM_ARGS, \"--\", \"/bin/true\"], {\n\t\tenv: {},\n\t\ttimeout: 3000,\n\t\tmaxBuffer: 4096,\n\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t});\n\tif (probe.error || probe.status !== 0) throw new VerifiedRunError(\"unsupported\");\n}\n\n/** The only process dispatch port; close means the PID namespace and its inherited pipes have drained. */\nexport async function executeSandbox(request: SandboxExecution): Promise<SandboxOutcome> {\n\tif (request.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\tif (request.timeoutMs <= 0) throw new VerifiedRunError(\"deadline\");\n\tconst started = performance.now();\n\tconst startedAt = new Date().toISOString();\n\tconst argv = [\n\t\t...SYSTEM_ARGS,\n\t\trequest.writable ? \"--bind\" : \"--ro-bind\",\n\t\trequest.workspace,\n\t\t\"/workspace\",\n\t\t\"--chdir\",\n\t\t\"/workspace\",\n\t\t...(request.onReady ? [\"--info-fd\", \"3\", \"--\", ...PROCESS_GATE_ARGV] : [\"--\"]),\n\t\t...request.argv,\n\t];\n\treturn new Promise((resolve, reject) => {\n\t\tconst child = request.onReady\n\t\t\t? spawn(BWRAP, argv, { env: {}, stdio: [\"pipe\", \"pipe\", \"pipe\", \"pipe\"] })\n\t\t\t: spawn(BWRAP, argv, { env: {}, stdio: [\"ignore\", \"pipe\", \"pipe\"] });\n\t\tlet gateFailed = false;\n\t\tlet gateError: unknown;\n\t\tconst stdout: Buffer[] = [];\n\t\tconst stderr: Buffer[] = [];\n\t\tlet size = 0;\n\t\tlet failure: string | null = null;\n\t\tlet cleanup: ReturnType<typeof setTimeout> | undefined;\n\t\tlet finished = false;\n\t\tconst stop = (reason: string): void => {\n\t\t\tif (finished || failure) return;\n\t\t\tfailure = reason;\n\t\t\tchild.kill(\"SIGKILL\");\n\t\t\tcleanup = setTimeout(() => reject(new VerifiedRunError(\"unsettled\")), request.cleanupMs);\n\t\t};\n\t\tconst deadline = setTimeout(() => stop(\"deadline\"), request.timeoutMs);\n\t\tconst abort = (): void => stop(\"cancelled\");\n\t\trequest.signal?.addEventListener(\"abort\", abort, { once: true });\n\t\tif (request.signal?.aborted) abort();\n\t\tconst collect = (target: Buffer[], chunk: Buffer): void => {\n\t\t\tif (failure) return;\n\t\t\tsize += chunk.length;\n\t\t\tif (size > request.maxOutputBytes) {\n\t\t\t\tstop(\"output_limit\");\n\t\t\t\treturn;\n\t\t\t}\n\t\t\ttarget.push(chunk);\n\t\t};\n\t\tchild.stdout?.on(\"data\", (chunk: Buffer) => collect(stdout, chunk));\n\t\tchild.stderr?.on(\"data\", (chunk: Buffer) => collect(stderr, chunk));\n\t\tif (request.onReady) {\n\t\t\tconst info = child.stdio[3];\n\t\t\tlet metadata = \"\";\n\t\t\tif (!info || !child.stdin) {\n\t\t\t\tgateFailed = true;\n\t\t\t\tgateError = new VerifiedRunError(\"process_identity\");\n\t\t\t\tstop(\"process_identity\");\n\t\t\t} else {\n\t\t\t\tchild.stdin.on(\"error\", () => stop(\"execution_failed\"));\n\t\t\t\tinfo.on(\"data\", (chunk: Buffer) => {\n\t\t\t\t\tmetadata += chunk.toString(\"utf8\");\n\t\t\t\t\tif (metadata.length > 4096) stop(\"process_identity\");\n\t\t\t\t});\n\t\t\t\tinfo.once(\"end\", async () => {\n\t\t\t\t\tif (finished || failure) return;\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait request.onReady?.(identityFromSandboxInfo(metadata));\n\t\t\t\t\t\tif (performance.now() - started >= request.timeoutMs || request.signal?.aborted)\n\t\t\t\t\t\t\tstop(request.signal?.aborted ? \"cancelled\" : \"deadline\");\n\t\t\t\t\t\tif (!finished && !failure) child.stdin?.end(\"go\\n\");\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\tgateFailed = true;\n\t\t\t\t\t\tgateError = error;\n\t\t\t\t\t\tstop(\"process_identity\");\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t\tchild.once(\"error\", () => {\n\t\t\tfailure = \"execution_failed\";\n\t\t});\n\t\tchild.once(\"close\", (exitCode) => {\n\t\t\tfinished = true;\n\t\t\tclearTimeout(deadline);\n\t\t\tclearTimeout(cleanup);\n\t\t\trequest.signal?.removeEventListener(\"abort\", abort);\n\t\t\tif (gateFailed) {\n\t\t\t\treject(gateError);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst durationMs = Math.max(0, Math.round(performance.now() - started));\n\t\t\tresolve({\n\t\t\t\tstdout: Buffer.concat(stdout),\n\t\t\t\tstderr: Buffer.concat(stderr),\n\t\t\t\texitCode,\n\t\t\t\tfailure: failure ?? (exitCode === 0 ? null : \"execution_failed\"),\n\t\t\t\tstartedAt,\n\t\t\t\t// Project the finish instant from the start's wall reference and monotonic elapsed time.\n\t\t\t\tfinishedAt: new Date(Date.parse(startedAt) + durationMs).toISOString(),\n\t\t\t\tdurationMs,\n\t\t\t});\n\t\t});\n\t});\n}\n"]}

package/dist/core/verified-run/candidate.d.ts

@@ -0,0 +1,24 @@
+import type { RunPhaseBudget } from "omk-protocol";
+export interface CandidateFile {
+    readonly path: string;
+    readonly mode: number;
+    readonly digest: string;
+    readonly size: number;
+}
+export interface CandidateManifest {
+    readonly version: 1;
+    readonly directories: readonly string[];
+    readonly files: readonly CandidateFile[];
+}
+export interface CandidateSnapshot {
+    readonly manifest: CandidateManifest;
+    readonly digest: string;
+    readonly contents: ReadonlyMap<string, Buffer>;
+}
+/** Entire regular-file tree, including dot/untracked files; .git/.omk metadata is excluded by this profile. */
+export declare function captureCandidate(root: string, limits: RunPhaseBudget): CandidateSnapshot;
+export declare function materializeCandidate(snapshot: CandidateSnapshot, target: string): void;
+export declare function assertCandidateScope(base: CandidateManifest, candidate: CandidateManifest, writable: readonly string[]): void;
+export declare function storeCandidate(snapshot: CandidateSnapshot, runPath: string): void;
+export declare function loadCandidate(runPath: string, digest: string, limits: RunPhaseBudget): CandidateSnapshot;
+//# sourceMappingURL=candidate.d.ts.map

package/dist/core/verified-run/candidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/candidate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAYnD,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;CACzC;AACD,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAYD,+GAA+G;AAC/G,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAsCxF;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAStF;AAED,wBAAgB,oBAAoB,CACnC,IAAI,EAAE,iBAAiB,EACvB,SAAS,EAAE,iBAAiB,EAC5B,QAAQ,EAAE,SAAS,MAAM,EAAE,GACzB,IAAI,CAWN;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAGjF;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAyExG","sourcesContent":["import { chmodSync, lstatSync, mkdirSync, readdirSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { RunPhaseBudget } from \"omk-protocol\";\nimport {\n\tassertDirectory,\n\tdigestBytes,\n\tdigestObject,\n\tpublishBytes,\n\tpublishObject,\n\treadJson,\n\treadRegularFile,\n\tVerifiedRunError,\n} from \"./storage.ts\";\n\nexport interface CandidateFile {\n\treadonly path: string;\n\treadonly mode: number;\n\treadonly digest: string;\n\treadonly size: number;\n}\nexport interface CandidateManifest {\n\treadonly version: 1;\n\treadonly directories: readonly string[];\n\treadonly files: readonly CandidateFile[];\n}\nexport interface CandidateSnapshot {\n\treadonly manifest: CandidateManifest;\n\treadonly digest: string;\n\treadonly contents: ReadonlyMap<string, Buffer>;\n}\n\nfunction safePath(path: string): void {\n\tif (\n\t\t!path ||\n\t\t/[\\\\\\u0000-\\u001f\\u007f]/.test(path) ||\n\t\tpath.split(\"/\").some((part) => [\"\", \".\", \"..\", \".git\", \".omk\"].includes(part))\n\t) {\n\t\tthrow new VerifiedRunError(\"file_type\");\n\t}\n}\n\n/** Entire regular-file tree, including dot/untracked files; .git/.omk metadata is excluded by this profile. */\nexport function captureCandidate(root: string, limits: RunPhaseBudget): CandidateSnapshot {\n\tassertDirectory(root);\n\tconst files: CandidateFile[] = [];\n\tconst directories: string[] = [];\n\tconst contents = new Map<string, Buffer>();\n\tlet bytesUsed = 0;\n\tconst visit = (prefix: string): void => {\n\t\tconst names = readdirSync(join(root, prefix), { encoding: \"buffer\" })\n\t\t\t.map((name) => new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true }).decode(name))\n\t\t\t.sort();\n\t\tfor (const name of names) {\n\t\t\tif (!prefix && (name === \".git\" || name === \".omk\")) continue;\n\t\t\tconst path = prefix ? `${prefix}/${name}` : name;\n\t\t\tsafePath(path);\n\t\t\tif (files.length + directories.length >= limits.maxFiles) throw new VerifiedRunError(\"storage_limit\");\n\t\t\tconst absolute = join(root, path);\n\t\t\tconst stat = lstatSync(absolute);\n\t\t\tif (stat.isDirectory()) {\n\t\t\t\tif ((stat.mode & 0o7777) !== 0o755) throw new VerifiedRunError(\"file_type\");\n\t\t\t\tdirectories.push(path);\n\t\t\t\tvisit(path);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (!stat.isFile() || stat.nlink !== 1 || (stat.mode & 0o7000) !== 0) throw new VerifiedRunError(\"file_type\");\n\t\t\tconst bytes = readRegularFile(absolute, limits.maxBytes - bytesUsed);\n\t\t\tbytesUsed += bytes.length;\n\t\t\tconst digest = digestBytes(bytes);\n\t\t\tcontents.set(digest, bytes);\n\t\t\tfiles.push(Object.freeze({ path, mode: stat.mode & 0o777, digest, size: bytes.length }));\n\t\t}\n\t};\n\tvisit(\"\");\n\tconst manifest: CandidateManifest = Object.freeze({\n\t\tversion: 1,\n\t\tdirectories: Object.freeze(directories),\n\t\tfiles: Object.freeze(files),\n\t});\n\treturn { manifest, digest: digestObject(manifest), contents };\n}\n\nexport function materializeCandidate(snapshot: CandidateSnapshot, target: string): void {\n\tmkdirSync(target, { mode: 0o700 });\n\tfor (const directory of snapshot.manifest.directories) mkdirSync(join(target, directory), { mode: 0o755 });\n\tfor (const file of snapshot.manifest.files) {\n\t\tconst bytes = snapshot.contents.get(file.digest);\n\t\tif (!bytes) throw new VerifiedRunError(\"integrity\");\n\t\tpublishBytes(join(target, file.path), bytes);\n\t\tchmodSync(join(target, file.path), file.mode);\n\t}\n}\n\nexport function assertCandidateScope(\n\tbase: CandidateManifest,\n\tcandidate: CandidateManifest,\n\twritable: readonly string[],\n): void {\n\tconst before = new Map(base.files.map((file) => [file.path, digestObject(file)]));\n\tconst after = new Map(candidate.files.map((file) => [file.path, digestObject(file)]));\n\tfor (const directory of base.directories) before.set(`${directory}/`, \"directory\");\n\tfor (const directory of candidate.directories) after.set(`${directory}/`, \"directory\");\n\tfor (const path of new Set([...before.keys(), ...after.keys()])) {\n\t\tif (before.get(path) === after.get(path)) continue;\n\t\tconst normalized = path.endsWith(\"/\") ? path.slice(0, -1) : path;\n\t\tif (!writable.some((scope) => normalized === scope || normalized.startsWith(`${scope}/`)))\n\t\t\tthrow new VerifiedRunError(\"scope_changed\");\n\t}\n}\n\nexport function storeCandidate(snapshot: CandidateSnapshot, runPath: string): void {\n\tfor (const [digest, bytes] of snapshot.contents) publishBytes(join(runPath, \"blobs\", digest), bytes);\n\tpublishObject(join(runPath, \"candidates\", `${snapshot.digest}.json`), snapshot.manifest);\n}\n\nexport function loadCandidate(runPath: string, digest: string, limits: RunPhaseBudget): CandidateSnapshot {\n\tif (!/^[a-f0-9]{64}$/.test(digest)) throw new VerifiedRunError(\"integrity\");\n\tconst raw = readJson(join(runPath, \"candidates\", `${digest}.json`), 4194304);\n\tif (\n\t\tdigestObject(raw) !== digest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"version\" in raw) ||\n\t\traw.version !== 1 ||\n\t\t!(\"files\" in raw) ||\n\t\t!Array.isArray(raw.files) ||\n\t\t!(\"directories\" in raw) ||\n\t\t!Array.isArray(raw.directories)\n\t) {\n\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n\tif (raw.files.length + raw.directories.length > limits.maxFiles) throw new VerifiedRunError(\"integrity\");\n\tconst files: CandidateFile[] = [];\n\tconst directories: string[] = [];\n\tconst paths = new Set<string>();\n\tlet total = 0;\n\tfor (const directory of raw.directories) {\n\t\tif (typeof directory !== \"string\") throw new VerifiedRunError(\"integrity\");\n\t\tsafePath(directory);\n\t\tif (paths.has(directory)) throw new VerifiedRunError(\"integrity\");\n\t\tpaths.add(directory);\n\t\tdirectories.push(directory);\n\t}\n\tconst contents = new Map<string, Buffer>();\n\tconst rawFiles: readonly unknown[] = raw.files;\n\tfor (const file of rawFiles) {\n\t\tif (\n\t\t\ttypeof file !== \"object\" ||\n\t\t\tfile === null ||\n\t\t\t!(\"path\" in file) ||\n\t\t\ttypeof file.path !== \"string\" ||\n\t\t\t!(\"digest\" in file) ||\n\t\t\ttypeof file.digest !== \"string\" ||\n\t\t\t!/^[a-f0-9]{64}$/.test(file.digest) ||\n\t\t\t!(\"mode\" in file) ||\n\t\t\ttypeof file.mode !== \"number\" ||\n\t\t\t!Number.isSafeInteger(file.mode) ||\n\t\t\tfile.mode < 0 ||\n\t\t\tfile.mode > 0o777 ||\n\t\t\t!(\"size\" in file) ||\n\t\t\ttypeof file.size !== \"number\" ||\n\t\t\t!Number.isSafeInteger(file.size) ||\n\t\t\tfile.size < 0\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\tsafePath(file.path);\n\t\tif (paths.has(file.path)) throw new VerifiedRunError(\"integrity\");\n\t\tpaths.add(file.path);\n\t\ttotal += file.size;\n\t\tif (total > limits.maxBytes) throw new VerifiedRunError(\"integrity\");\n\t\tlet bytes: Buffer;\n\t\ttry {\n\t\t\tbytes = readRegularFile(join(runPath, \"blobs\", file.digest), file.size);\n\t\t} catch (error) {\n\t\t\tif (error instanceof Error) throw new VerifiedRunError(\"integrity\");\n\t\t\tthrow error;\n\t\t}\n\t\tif (bytes.length !== file.size || digestBytes(bytes) !== file.digest) throw new VerifiedRunError(\"integrity\");\n\t\tcontents.set(file.digest, bytes);\n\t\tfiles.push(Object.freeze({ path: file.path, mode: file.mode, digest: file.digest, size: file.size }));\n\t}\n\tconst manifest: CandidateManifest = Object.freeze({\n\t\tversion: 1,\n\t\tdirectories: Object.freeze(directories),\n\t\tfiles: Object.freeze(files),\n\t});\n\tif (digestObject(manifest) !== digest) throw new VerifiedRunError(\"integrity\");\n\treturn { manifest, digest, contents };\n}\n"]}

package/dist/core/verified-run/candidate.js

@@ -0,0 +1,167 @@
+import { chmodSync, lstatSync, mkdirSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+import { assertDirectory, digestBytes, digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError, } from "./storage.js";
+function safePath(path) {
+    if (!path ||
+        /[\\\u0000-\u001f\u007f]/.test(path) ||
+        path.split("/").some((part) => ["", ".", "..", ".git", ".omk"].includes(part))) {
+        throw new VerifiedRunError("file_type");
+    }
+}
+/** Entire regular-file tree, including dot/untracked files; .git/.omk metadata is excluded by this profile. */
+export function captureCandidate(root, limits) {
+    assertDirectory(root);
+    const files = [];
+    const directories = [];
+    const contents = new Map();
+    let bytesUsed = 0;
+    const visit = (prefix) => {
+        const names = readdirSync(join(root, prefix), { encoding: "buffer" })
+            .map((name) => new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(name))
+            .sort();
+        for (const name of names) {
+            if (!prefix && (name === ".git" || name === ".omk"))
+                continue;
+            const path = prefix ? `${prefix}/${name}` : name;
+            safePath(path);
+            if (files.length + directories.length >= limits.maxFiles)
+                throw new VerifiedRunError("storage_limit");
+            const absolute = join(root, path);
+            const stat = lstatSync(absolute);
+            if (stat.isDirectory()) {
+                if ((stat.mode & 0o7777) !== 0o755)
+                    throw new VerifiedRunError("file_type");
+                directories.push(path);
+                visit(path);
+                continue;
+            }
+            if (!stat.isFile() || stat.nlink !== 1 || (stat.mode & 0o7000) !== 0)
+                throw new VerifiedRunError("file_type");
+            const bytes = readRegularFile(absolute, limits.maxBytes - bytesUsed);
+            bytesUsed += bytes.length;
+            const digest = digestBytes(bytes);
+            contents.set(digest, bytes);
+            files.push(Object.freeze({ path, mode: stat.mode & 0o777, digest, size: bytes.length }));
+        }
+    };
+    visit("");
+    const manifest = Object.freeze({
+        version: 1,
+        directories: Object.freeze(directories),
+        files: Object.freeze(files),
+    });
+    return { manifest, digest: digestObject(manifest), contents };
+}
+export function materializeCandidate(snapshot, target) {
+    mkdirSync(target, { mode: 0o700 });
+    for (const directory of snapshot.manifest.directories)
+        mkdirSync(join(target, directory), { mode: 0o755 });
+    for (const file of snapshot.manifest.files) {
+        const bytes = snapshot.contents.get(file.digest);
+        if (!bytes)
+            throw new VerifiedRunError("integrity");
+        publishBytes(join(target, file.path), bytes);
+        chmodSync(join(target, file.path), file.mode);
+    }
+}
+export function assertCandidateScope(base, candidate, writable) {
+    const before = new Map(base.files.map((file) => [file.path, digestObject(file)]));
+    const after = new Map(candidate.files.map((file) => [file.path, digestObject(file)]));
+    for (const directory of base.directories)
+        before.set(`${directory}/`, "directory");
+    for (const directory of candidate.directories)
+        after.set(`${directory}/`, "directory");
+    for (const path of new Set([...before.keys(), ...after.keys()])) {
+        if (before.get(path) === after.get(path))
+            continue;
+        const normalized = path.endsWith("/") ? path.slice(0, -1) : path;
+        if (!writable.some((scope) => normalized === scope || normalized.startsWith(`${scope}/`)))
+            throw new VerifiedRunError("scope_changed");
+    }
+}
+export function storeCandidate(snapshot, runPath) {
+    for (const [digest, bytes] of snapshot.contents)
+        publishBytes(join(runPath, "blobs", digest), bytes);
+    publishObject(join(runPath, "candidates", `${snapshot.digest}.json`), snapshot.manifest);
+}
+export function loadCandidate(runPath, digest, limits) {
+    if (!/^[a-f0-9]{64}$/.test(digest))
+        throw new VerifiedRunError("integrity");
+    const raw = readJson(join(runPath, "candidates", `${digest}.json`), 4194304);
+    if (digestObject(raw) !== digest ||
+        typeof raw !== "object" ||
+        raw === null ||
+        !("version" in raw) ||
+        raw.version !== 1 ||
+        !("files" in raw) ||
+        !Array.isArray(raw.files) ||
+        !("directories" in raw) ||
+        !Array.isArray(raw.directories)) {
+        throw new VerifiedRunError("integrity");
+    }
+    if (raw.files.length + raw.directories.length > limits.maxFiles)
+        throw new VerifiedRunError("integrity");
+    const files = [];
+    const directories = [];
+    const paths = new Set();
+    let total = 0;
+    for (const directory of raw.directories) {
+        if (typeof directory !== "string")
+            throw new VerifiedRunError("integrity");
+        safePath(directory);
+        if (paths.has(directory))
+            throw new VerifiedRunError("integrity");
+        paths.add(directory);
+        directories.push(directory);
+    }
+    const contents = new Map();
+    const rawFiles = raw.files;
+    for (const file of rawFiles) {
+        if (typeof file !== "object" ||
+            file === null ||
+            !("path" in file) ||
+            typeof file.path !== "string" ||
+            !("digest" in file) ||
+            typeof file.digest !== "string" ||
+            !/^[a-f0-9]{64}$/.test(file.digest) ||
+            !("mode" in file) ||
+            typeof file.mode !== "number" ||
+            !Number.isSafeInteger(file.mode) ||
+            file.mode < 0 ||
+            file.mode > 0o777 ||
+            !("size" in file) ||
+            typeof file.size !== "number" ||
+            !Number.isSafeInteger(file.size) ||
+            file.size < 0)
+            throw new VerifiedRunError("integrity");
+        safePath(file.path);
+        if (paths.has(file.path))
+            throw new VerifiedRunError("integrity");
+        paths.add(file.path);
+        total += file.size;
+        if (total > limits.maxBytes)
+            throw new VerifiedRunError("integrity");
+        let bytes;
+        try {
+            bytes = readRegularFile(join(runPath, "blobs", file.digest), file.size);
+        }
+        catch (error) {
+            if (error instanceof Error)
+                throw new VerifiedRunError("integrity");
+            throw error;
+        }
+        if (bytes.length !== file.size || digestBytes(bytes) !== file.digest)
+            throw new VerifiedRunError("integrity");
+        contents.set(file.digest, bytes);
+        files.push(Object.freeze({ path: file.path, mode: file.mode, digest: file.digest, size: file.size }));
+    }
+    const manifest = Object.freeze({
+        version: 1,
+        directories: Object.freeze(directories),
+        files: Object.freeze(files),
+    });
+    if (digestObject(manifest) !== digest)
+        throw new VerifiedRunError("integrity");
+    return { manifest, digest, contents };
+}
+//# sourceMappingURL=candidate.js.map

package/dist/core/verified-run/candidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate.js","sourceRoot":"","sources":["../../../src/core/verified-run/candidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACN,eAAe,EACf,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,eAAe,EACf,gBAAgB,GAChB,MAAM,cAAc,CAAC;AAmBtB,SAAS,QAAQ,CAAC,IAAY,EAAQ;IACrC,IACC,CAAC,IAAI;QACL,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAC7E,CAAC;QACF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;AAAA,CACD;AAED,+GAA+G;AAC/G,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAsB,EAAqB;IACzF,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,MAAc,EAAQ,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;aACnE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aACtF,IAAI,EAAE,CAAC;QACT,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC;gBAAE,SAAS;YAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ;gBAAE,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;YACtG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAC5E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,CAAC;gBACZ,SAAS;YACV,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC9G,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;YACrE,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAClC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC;IAAA,CACD,CAAC;IACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,MAAM,QAAQ,GAAsB,MAAM,CAAC,MAAM,CAAC;QACjD,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3B,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;AAAA,CAC9D;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA2B,EAAE,MAAc,EAAQ;IACvF,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW;QAAE,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3G,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACpD,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;AAAA,CACD;AAED,MAAM,UAAU,oBAAoB,CACnC,IAAuB,EACvB,SAA4B,EAC5B,QAA2B,EACpB;IACP,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,EAAE,WAAW,CAAC,CAAC;IACnF,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,WAAW;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,EAAE,WAAW,CAAC,CAAC;IACvF,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YACxF,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC;AAAA,CACD;AAED,MAAM,UAAU,cAAc,CAAC,QAA2B,EAAE,OAAe,EAAQ;IAClF,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ;QAAE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACrG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,MAAM,OAAO,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAAA,CACzF;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAAc,EAAE,MAAsB,EAAqB;IACzG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,IACC,YAAY,CAAC,GAAG,CAAC,KAAK,MAAM;QAC5B,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;QACnB,GAAG,CAAC,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;QACjB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC;QACvB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAC9B,CAAC;QACF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzG,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC3E,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAClE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrB,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,QAAQ,GAAuB,GAAG,CAAC,KAAK,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC7B,IACC,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YACjB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;YACnB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACnC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YACjB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,IAAI,GAAG,CAAC;YACb,IAAI,CAAC,IAAI,GAAG,KAAK;YACjB,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YACjB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,IAAI,GAAG,CAAC;YAEb,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAClE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QACnB,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,KAAK;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACpE,MAAM,KAAK,CAAC;QACb,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC9G,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,QAAQ,GAAsB,MAAM,CAAC,MAAM,CAAC;QACjD,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAAA,CACtC","sourcesContent":["import { chmodSync, lstatSync, mkdirSync, readdirSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { RunPhaseBudget } from \"omk-protocol\";\nimport {\n\tassertDirectory,\n\tdigestBytes,\n\tdigestObject,\n\tpublishBytes,\n\tpublishObject,\n\treadJson,\n\treadRegularFile,\n\tVerifiedRunError,\n} from \"./storage.ts\";\n\nexport interface CandidateFile {\n\treadonly path: string;\n\treadonly mode: number;\n\treadonly digest: string;\n\treadonly size: number;\n}\nexport interface CandidateManifest {\n\treadonly version: 1;\n\treadonly directories: readonly string[];\n\treadonly files: readonly CandidateFile[];\n}\nexport interface CandidateSnapshot {\n\treadonly manifest: CandidateManifest;\n\treadonly digest: string;\n\treadonly contents: ReadonlyMap<string, Buffer>;\n}\n\nfunction safePath(path: string): void {\n\tif (\n\t\t!path ||\n\t\t/[\\\\\\u0000-\\u001f\\u007f]/.test(path) ||\n\t\tpath.split(\"/\").some((part) => [\"\", \".\", \"..\", \".git\", \".omk\"].includes(part))\n\t) {\n\t\tthrow new VerifiedRunError(\"file_type\");\n\t}\n}\n\n/** Entire regular-file tree, including dot/untracked files; .git/.omk metadata is excluded by this profile. */\nexport function captureCandidate(root: string, limits: RunPhaseBudget): CandidateSnapshot {\n\tassertDirectory(root);\n\tconst files: CandidateFile[] = [];\n\tconst directories: string[] = [];\n\tconst contents = new Map<string, Buffer>();\n\tlet bytesUsed = 0;\n\tconst visit = (prefix: string): void => {\n\t\tconst names = readdirSync(join(root, prefix), { encoding: \"buffer\" })\n\t\t\t.map((name) => new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true }).decode(name))\n\t\t\t.sort();\n\t\tfor (const name of names) {\n\t\t\tif (!prefix && (name === \".git\" || name === \".omk\")) continue;\n\t\t\tconst path = prefix ? `${prefix}/${name}` : name;\n\t\t\tsafePath(path);\n\t\t\tif (files.length + directories.length >= limits.maxFiles) throw new VerifiedRunError(\"storage_limit\");\n\t\t\tconst absolute = join(root, path);\n\t\t\tconst stat = lstatSync(absolute);\n\t\t\tif (stat.isDirectory()) {\n\t\t\t\tif ((stat.mode & 0o7777) !== 0o755) throw new VerifiedRunError(\"file_type\");\n\t\t\t\tdirectories.push(path);\n\t\t\t\tvisit(path);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (!stat.isFile() || stat.nlink !== 1 || (stat.mode & 0o7000) !== 0) throw new VerifiedRunError(\"file_type\");\n\t\t\tconst bytes = readRegularFile(absolute, limits.maxBytes - bytesUsed);\n\t\t\tbytesUsed += bytes.length;\n\t\t\tconst digest = digestBytes(bytes);\n\t\t\tcontents.set(digest, bytes);\n\t\t\tfiles.push(Object.freeze({ path, mode: stat.mode & 0o777, digest, size: bytes.length }));\n\t\t}\n\t};\n\tvisit(\"\");\n\tconst manifest: CandidateManifest = Object.freeze({\n\t\tversion: 1,\n\t\tdirectories: Object.freeze(directories),\n\t\tfiles: Object.freeze(files),\n\t});\n\treturn { manifest, digest: digestObject(manifest), contents };\n}\n\nexport function materializeCandidate(snapshot: CandidateSnapshot, target: string): void {\n\tmkdirSync(target, { mode: 0o700 });\n\tfor (const directory of snapshot.manifest.directories) mkdirSync(join(target, directory), { mode: 0o755 });\n\tfor (const file of snapshot.manifest.files) {\n\t\tconst bytes = snapshot.contents.get(file.digest);\n\t\tif (!bytes) throw new VerifiedRunError(\"integrity\");\n\t\tpublishBytes(join(target, file.path), bytes);\n\t\tchmodSync(join(target, file.path), file.mode);\n\t}\n}\n\nexport function assertCandidateScope(\n\tbase: CandidateManifest,\n\tcandidate: CandidateManifest,\n\twritable: readonly string[],\n): void {\n\tconst before = new Map(base.files.map((file) => [file.path, digestObject(file)]));\n\tconst after = new Map(candidate.files.map((file) => [file.path, digestObject(file)]));\n\tfor (const directory of base.directories) before.set(`${directory}/`, \"directory\");\n\tfor (const directory of candidate.directories) after.set(`${directory}/`, \"directory\");\n\tfor (const path of new Set([...before.keys(), ...after.keys()])) {\n\t\tif (before.get(path) === after.get(path)) continue;\n\t\tconst normalized = path.endsWith(\"/\") ? path.slice(0, -1) : path;\n\t\tif (!writable.some((scope) => normalized === scope || normalized.startsWith(`${scope}/`)))\n\t\t\tthrow new VerifiedRunError(\"scope_changed\");\n\t}\n}\n\nexport function storeCandidate(snapshot: CandidateSnapshot, runPath: string): void {\n\tfor (const [digest, bytes] of snapshot.contents) publishBytes(join(runPath, \"blobs\", digest), bytes);\n\tpublishObject(join(runPath, \"candidates\", `${snapshot.digest}.json`), snapshot.manifest);\n}\n\nexport function loadCandidate(runPath: string, digest: string, limits: RunPhaseBudget): CandidateSnapshot {\n\tif (!/^[a-f0-9]{64}$/.test(digest)) throw new VerifiedRunError(\"integrity\");\n\tconst raw = readJson(join(runPath, \"candidates\", `${digest}.json`), 4194304);\n\tif (\n\t\tdigestObject(raw) !== digest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"version\" in raw) ||\n\t\traw.version !== 1 ||\n\t\t!(\"files\" in raw) ||\n\t\t!Array.isArray(raw.files) ||\n\t\t!(\"directories\" in raw) ||\n\t\t!Array.isArray(raw.directories)\n\t) {\n\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n\tif (raw.files.length + raw.directories.length > limits.maxFiles) throw new VerifiedRunError(\"integrity\");\n\tconst files: CandidateFile[] = [];\n\tconst directories: string[] = [];\n\tconst paths = new Set<string>();\n\tlet total = 0;\n\tfor (const directory of raw.directories) {\n\t\tif (typeof directory !== \"string\") throw new VerifiedRunError(\"integrity\");\n\t\tsafePath(directory);\n\t\tif (paths.has(directory)) throw new VerifiedRunError(\"integrity\");\n\t\tpaths.add(directory);\n\t\tdirectories.push(directory);\n\t}\n\tconst contents = new Map<string, Buffer>();\n\tconst rawFiles: readonly unknown[] = raw.files;\n\tfor (const file of rawFiles) {\n\t\tif (\n\t\t\ttypeof file !== \"object\" ||\n\t\t\tfile === null ||\n\t\t\t!(\"path\" in file) ||\n\t\t\ttypeof file.path !== \"string\" ||\n\t\t\t!(\"digest\" in file) ||\n\t\t\ttypeof file.digest !== \"string\" ||\n\t\t\t!/^[a-f0-9]{64}$/.test(file.digest) ||\n\t\t\t!(\"mode\" in file) ||\n\t\t\ttypeof file.mode !== \"number\" ||\n\t\t\t!Number.isSafeInteger(file.mode) ||\n\t\t\tfile.mode < 0 ||\n\t\t\tfile.mode > 0o777 ||\n\t\t\t!(\"size\" in file) ||\n\t\t\ttypeof file.size !== \"number\" ||\n\t\t\t!Number.isSafeInteger(file.size) ||\n\t\t\tfile.size < 0\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\tsafePath(file.path);\n\t\tif (paths.has(file.path)) throw new VerifiedRunError(\"integrity\");\n\t\tpaths.add(file.path);\n\t\ttotal += file.size;\n\t\tif (total > limits.maxBytes) throw new VerifiedRunError(\"integrity\");\n\t\tlet bytes: Buffer;\n\t\ttry {\n\t\t\tbytes = readRegularFile(join(runPath, \"blobs\", file.digest), file.size);\n\t\t} catch (error) {\n\t\t\tif (error instanceof Error) throw new VerifiedRunError(\"integrity\");\n\t\t\tthrow error;\n\t\t}\n\t\tif (bytes.length !== file.size || digestBytes(bytes) !== file.digest) throw new VerifiedRunError(\"integrity\");\n\t\tcontents.set(file.digest, bytes);\n\t\tfiles.push(Object.freeze({ path: file.path, mode: file.mode, digest: file.digest, size: file.size }));\n\t}\n\tconst manifest: CandidateManifest = Object.freeze({\n\t\tversion: 1,\n\t\tdirectories: Object.freeze(directories),\n\t\tfiles: Object.freeze(files),\n\t});\n\tif (digestObject(manifest) !== digest) throw new VerifiedRunError(\"integrity\");\n\treturn { manifest, digest, contents };\n}\n"]}

package/dist/core/verified-run/check-receipt.d.ts

@@ -0,0 +1,18 @@
+import type { RunCheck, RunContract } from "omk-protocol";
+import type { EvidenceReceipt } from "../../types/evidence.ts";
+import type { SandboxOutcome } from "./broker.ts";
+import type { CandidateManifest } from "./candidate.ts";
+import type { CheckObservation } from "./evidence-binding.ts";
+export declare function preflightCheckReceipts(contract: RunContract): void;
+export declare function storeCheckReceipt(runPath: string, contract: RunContract, execution: {
+    readonly check: RunCheck;
+    readonly executionId: string;
+    readonly result: SandboxOutcome;
+    readonly timeoutMs: number;
+    readonly manifest: CandidateManifest;
+}): string;
+export declare function readCheckReceipts(runPath: string, contract: RunContract, binding: {
+    readonly manifest: CandidateManifest;
+    readonly checks: readonly CheckObservation[];
+}): readonly EvidenceReceipt[];
+//# sourceMappingURL=check-receipt.d.ts.map

package/dist/core/verified-run/check-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-receipt.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/check-receipt.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAI1D,OAAO,KAAK,EAEX,eAAe,EAGf,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAS9D,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAElE;AAuBD,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,EACrB,SAAS,EAAE;IACV,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACrC,GACC,MAAM,CA0BR;AAED,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE;IACR,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C,GACC,SAAS,eAAe,EAAE,CA+B5B","sourcesContent":["import { join } from \"node:path\";\nimport type { RunCheck, RunContract } from \"omk-protocol\";\nimport { assertCredentialFreeEvidenceCommand } from \"../../guardrails/command-redaction.ts\";\nimport { createEvidenceReceipt, parseSha256Hex, validateEvidenceReceipt } from \"../../guardrails/evidence-receipt.ts\";\nimport { computeWorkspaceManifestSha256 } from \"../../guardrails/workspace-fingerprint.ts\";\nimport type {\n\tEvidenceCommandDescriptor,\n\tEvidenceReceipt,\n\tEvidenceReceiptDisposition,\n\tWorkspaceFingerprint,\n} from \"../../types/evidence.ts\";\nimport { redactSensitiveTextForced } from \"../redaction.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport type { SandboxOutcome } from \"./broker.ts\";\nimport type { CandidateManifest } from \"./candidate.ts\";\nimport type { CheckObservation } from \"./evidence-binding.ts\";\nimport { publishObject, readJson, VerifiedRunError } from \"./storage.ts\";\n\nfunction command(check: RunCheck): EvidenceCommandDescriptor {\n\tconst executable = check.argv[0];\n\tif (!executable) throw new VerifiedRunError(\"integrity\");\n\treturn { kind: \"argv\", executable, argv: check.argv.slice(1) };\n}\n\nexport function preflightCheckReceipts(contract: RunContract): void {\n\tfor (const check of contract.checks) assertCredentialFreeEvidenceCommand(command(check));\n}\n\nfunction fingerprint(manifest: CandidateManifest): WorkspaceFingerprint {\n\tconst files = [...manifest.files].sort((left, right) =>\n\t\tleft.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n\t);\n\tconst scope = { root: \"/workspace\", artifactPaths: files.map((file) => file.path) };\n\tconst artifacts = files.map((file) => ({\n\t\tpath: file.path,\n\t\tstate: \"file\" as const,\n\t\tsha256: parseSha256Hex(file.digest),\n\t\tsize: file.size,\n\t}));\n\treturn { kind: \"artifact-set\", scope, artifacts, manifestSha256: computeWorkspaceManifestSha256(scope, artifacts) };\n}\n\nfunction disposition(result: Pick<SandboxOutcome, \"failure\" | \"exitCode\">): EvidenceReceiptDisposition {\n\tif (result.failure === \"deadline\") return { status: \"timeout\", exitCode: null };\n\tif (result.failure === \"cancelled\" || result.failure === \"output_limit\" || result.exitCode === null)\n\t\treturn { status: \"aborted\", exitCode: null };\n\treturn result.exitCode === 0 ? { status: \"passed\", exitCode: 0 } : { status: \"failed\", exitCode: result.exitCode };\n}\n\nexport function storeCheckReceipt(\n\trunPath: string,\n\tcontract: RunContract,\n\texecution: {\n\t\treadonly check: RunCheck;\n\t\treadonly executionId: string;\n\t\treadonly result: SandboxOutcome;\n\t\treadonly timeoutMs: number;\n\t\treadonly manifest: CandidateManifest;\n\t},\n): string {\n\tconst workspace = fingerprint(execution.manifest);\n\tconst result = execution.result;\n\tconst receipt = createEvidenceReceipt({\n\t\treceiptId: execution.executionId,\n\t\tgoalId: contract.runId,\n\t\tclaim: `Exact stdout for ${execution.check.claimId}`,\n\t\tcommand: command(execution.check),\n\t\tcwd: \"/workspace\",\n\t\ttimeoutMs: execution.timeoutMs,\n\t\tstartedAt: result.startedAt,\n\t\tfinishedAt: result.finishedAt,\n\t\tdurationMs: Date.parse(result.finishedAt) - Date.parse(result.startedAt),\n\t\tworkspaceBefore: workspace,\n\t\tworkspaceAfter: workspace,\n\t\texecutor: \"internal\",\n\t\ttoolCallId: execution.executionId,\n\t\talreadyRedactedOutput: {\n\t\t\tredactionPolicyId: \"omk-verified-run-v1+forced-text+prefix-32k-per-stream\",\n\t\t\tstdout: Buffer.from(redactSensitiveTextForced(result.stdout.toString(\"utf8\"))).subarray(0, 32768),\n\t\t\tstderr: Buffer.from(redactSensitiveTextForced(result.stderr.toString(\"utf8\"))).subarray(0, 32768),\n\t\t},\n\t\t...disposition(result),\n\t});\n\tpublishObject(join(runPath, \"receipts\", `${receipt.envelope.coreSha256}.json`), receipt);\n\treturn receipt.envelope.coreSha256;\n}\n\nexport function readCheckReceipts(\n\trunPath: string,\n\tcontract: RunContract,\n\tbinding: {\n\t\treadonly manifest: CandidateManifest;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): readonly EvidenceReceipt[] {\n\tconst workspace = fingerprint(binding.manifest);\n\treturn Object.freeze(\n\t\tbinding.checks.map((observation) => {\n\t\t\tconst digest = observation.receiptCoreDigest;\n\t\t\tif (!digest || !/^[a-f0-9]{64}$/.test(digest)) throw new VerifiedRunError(\"integrity\");\n\t\t\tconst receipt = validateEvidenceReceipt(readJson(join(runPath, \"receipts\", `${digest}.json`), 8388608));\n\t\t\tconst core = receipt.core;\n\t\t\tconst check = contract.checks.find((item) => item.claimId === observation.claimId);\n\t\t\tconst expected = disposition(observation);\n\t\t\tif (\n\t\t\t\t!check ||\n\t\t\t\tcanonicalJson(receipt.envelope) !== canonicalJson({ coreSha256: digest }) ||\n\t\t\t\tcore.receiptId !== observation.executionId ||\n\t\t\t\tcore.toolCallId !== observation.executionId ||\n\t\t\t\tcore.goalId !== contract.runId ||\n\t\t\t\tcore.executor !== \"internal\" ||\n\t\t\t\tcore.claim !== `Exact stdout for ${check.claimId}` ||\n\t\t\t\tcore.cwd !== \"/workspace\" ||\n\t\t\t\tcore.status !== expected.status ||\n\t\t\t\tcore.exitCode !== expected.exitCode ||\n\t\t\t\tcore.timeoutMs === null ||\n\t\t\t\tcore.timeoutMs > contract.budget.verifyMs ||\n\t\t\t\tcanonicalJson(core.command) !== canonicalJson(command(check)) ||\n\t\t\t\tcanonicalJson(core.workspaceBefore) !== canonicalJson(workspace) ||\n\t\t\t\tcanonicalJson(core.workspaceAfter) !== canonicalJson(workspace)\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\treturn receipt;\n\t\t}),\n\t);\n}\n"]}

package/dist/core/verified-run/check-receipt.js

@@ -0,0 +1,92 @@
+import { join } from "node:path";
+import { assertCredentialFreeEvidenceCommand } from "../../guardrails/command-redaction.js";
+import { createEvidenceReceipt, parseSha256Hex, validateEvidenceReceipt } from "../../guardrails/evidence-receipt.js";
+import { computeWorkspaceManifestSha256 } from "../../guardrails/workspace-fingerprint.js";
+import { redactSensitiveTextForced } from "../redaction.js";
+import { canonicalJson } from "../run-journal.js";
+import { publishObject, readJson, VerifiedRunError } from "./storage.js";
+function command(check) {
+    const executable = check.argv[0];
+    if (!executable)
+        throw new VerifiedRunError("integrity");
+    return { kind: "argv", executable, argv: check.argv.slice(1) };
+}
+export function preflightCheckReceipts(contract) {
+    for (const check of contract.checks)
+        assertCredentialFreeEvidenceCommand(command(check));
+}
+function fingerprint(manifest) {
+    const files = [...manifest.files].sort((left, right) => left.path < right.path ? -1 : left.path > right.path ? 1 : 0);
+    const scope = { root: "/workspace", artifactPaths: files.map((file) => file.path) };
+    const artifacts = files.map((file) => ({
+        path: file.path,
+        state: "file",
+        sha256: parseSha256Hex(file.digest),
+        size: file.size,
+    }));
+    return { kind: "artifact-set", scope, artifacts, manifestSha256: computeWorkspaceManifestSha256(scope, artifacts) };
+}
+function disposition(result) {
+    if (result.failure === "deadline")
+        return { status: "timeout", exitCode: null };
+    if (result.failure === "cancelled" || result.failure === "output_limit" || result.exitCode === null)
+        return { status: "aborted", exitCode: null };
+    return result.exitCode === 0 ? { status: "passed", exitCode: 0 } : { status: "failed", exitCode: result.exitCode };
+}
+export function storeCheckReceipt(runPath, contract, execution) {
+    const workspace = fingerprint(execution.manifest);
+    const result = execution.result;
+    const receipt = createEvidenceReceipt({
+        receiptId: execution.executionId,
+        goalId: contract.runId,
+        claim: `Exact stdout for ${execution.check.claimId}`,
+        command: command(execution.check),
+        cwd: "/workspace",
+        timeoutMs: execution.timeoutMs,
+        startedAt: result.startedAt,
+        finishedAt: result.finishedAt,
+        durationMs: Date.parse(result.finishedAt) - Date.parse(result.startedAt),
+        workspaceBefore: workspace,
+        workspaceAfter: workspace,
+        executor: "internal",
+        toolCallId: execution.executionId,
+        alreadyRedactedOutput: {
+            redactionPolicyId: "omk-verified-run-v1+forced-text+prefix-32k-per-stream",
+            stdout: Buffer.from(redactSensitiveTextForced(result.stdout.toString("utf8"))).subarray(0, 32768),
+            stderr: Buffer.from(redactSensitiveTextForced(result.stderr.toString("utf8"))).subarray(0, 32768),
+        },
+        ...disposition(result),
+    });
+    publishObject(join(runPath, "receipts", `${receipt.envelope.coreSha256}.json`), receipt);
+    return receipt.envelope.coreSha256;
+}
+export function readCheckReceipts(runPath, contract, binding) {
+    const workspace = fingerprint(binding.manifest);
+    return Object.freeze(binding.checks.map((observation) => {
+        const digest = observation.receiptCoreDigest;
+        if (!digest || !/^[a-f0-9]{64}$/.test(digest))
+            throw new VerifiedRunError("integrity");
+        const receipt = validateEvidenceReceipt(readJson(join(runPath, "receipts", `${digest}.json`), 8388608));
+        const core = receipt.core;
+        const check = contract.checks.find((item) => item.claimId === observation.claimId);
+        const expected = disposition(observation);
+        if (!check ||
+            canonicalJson(receipt.envelope) !== canonicalJson({ coreSha256: digest }) ||
+            core.receiptId !== observation.executionId ||
+            core.toolCallId !== observation.executionId ||
+            core.goalId !== contract.runId ||
+            core.executor !== "internal" ||
+            core.claim !== `Exact stdout for ${check.claimId}` ||
+            core.cwd !== "/workspace" ||
+            core.status !== expected.status ||
+            core.exitCode !== expected.exitCode ||
+            core.timeoutMs === null ||
+            core.timeoutMs > contract.budget.verifyMs ||
+            canonicalJson(core.command) !== canonicalJson(command(check)) ||
+            canonicalJson(core.workspaceBefore) !== canonicalJson(workspace) ||
+            canonicalJson(core.workspaceAfter) !== canonicalJson(workspace))
+            throw new VerifiedRunError("integrity");
+        return receipt;
+    }));
+}
+//# sourceMappingURL=check-receipt.js.map