open-multi-agent-kit 0.98.4 → 0.98.5

package/dist/core/verified-run/events.js

@@ -0,0 +1,3 @@
+export { parseRunEvent } from "./event-parser.js";
+export { projectRun } from "./projection.js";
+//# sourceMappingURL=events.js.map

package/dist/core/verified-run/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/core/verified-run/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC","sourcesContent":["export { parseRunEvent } from \"./event-parser.ts\";\nexport { projectRun } from \"./projection.ts\";\nexport type { RunEvent, RunProjection } from \"./run-types.ts\";\n"]}

package/dist/core/verified-run/evidence-binding.d.ts

@@ -0,0 +1,18 @@
+import { type RunContract } from "omk-protocol";
+export interface CheckObservation {
+    readonly claimId: string;
+    readonly executionId: string;
+    readonly stdoutDigest: string;
+    readonly stderrDigest: string;
+    readonly exitCode: number | null;
+    readonly failure: string | null;
+    readonly receiptCoreDigest?: string;
+}
+export declare function parseCheckObservations(value: unknown, nativeRequired: boolean): readonly CheckObservation[];
+/** Only the authenticated adapter supplies these observations; the reducer itself grants no trust. */
+export declare function closesRunClaims(contract: RunContract, context: {
+    readonly candidate: string;
+    readonly environment: string;
+    readonly checks: readonly CheckObservation[];
+}): boolean;
+//# sourceMappingURL=evidence-binding.d.ts.map

package/dist/core/verified-run/evidence-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-binding.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/evidence-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoD,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAGlG,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,GAAG,SAAS,gBAAgB,EAAE,CAuC3G;AAED,sGAAsG;AACtG,wBAAgB,eAAe,CAC9B,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAAE,GACjH,OAAO,CA2CT","sourcesContent":["import { CLAIM_GRAPH_SCHEMA_VERSION, evaluateProofClosure, type RunContract } from \"omk-protocol\";\nimport { digestBytes, VerifiedRunError } from \"./storage.ts\";\n\nexport interface CheckObservation {\n\treadonly claimId: string;\n\treadonly executionId: string;\n\treadonly stdoutDigest: string;\n\treadonly stderrDigest: string;\n\treadonly exitCode: number | null;\n\treadonly failure: string | null;\n\treadonly receiptCoreDigest?: string;\n}\n\nexport function parseCheckObservations(value: unknown, nativeRequired: boolean): readonly CheckObservation[] {\n\tif (!Array.isArray(value) || value.length > 32) throw new VerifiedRunError(\"integrity\");\n\tconst rawChecks: readonly unknown[] = value;\n\treturn Object.freeze(\n\t\trawChecks.map((raw): CheckObservation => {\n\t\t\tif (\n\t\t\t\ttypeof raw !== \"object\" ||\n\t\t\t\traw === null ||\n\t\t\t\t!(\"claimId\" in raw) ||\n\t\t\t\ttypeof raw.claimId !== \"string\" ||\n\t\t\t\t!(\"executionId\" in raw) ||\n\t\t\t\ttypeof raw.executionId !== \"string\" ||\n\t\t\t\t!(\"stdoutDigest\" in raw) ||\n\t\t\t\ttypeof raw.stdoutDigest !== \"string\" ||\n\t\t\t\t!/^[a-f0-9]{64}$/.test(raw.stdoutDigest) ||\n\t\t\t\t!(\"stderrDigest\" in raw) ||\n\t\t\t\ttypeof raw.stderrDigest !== \"string\" ||\n\t\t\t\t!/^[a-f0-9]{64}$/.test(raw.stderrDigest) ||\n\t\t\t\t!(\"exitCode\" in raw) ||\n\t\t\t\t(raw.exitCode !== null && (typeof raw.exitCode !== \"number\" || !Number.isSafeInteger(raw.exitCode))) ||\n\t\t\t\t!(\"failure\" in raw) ||\n\t\t\t\t(raw.failure !== null && typeof raw.failure !== \"string\")\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tconst native = \"receiptCoreDigest\" in raw ? raw.receiptCoreDigest : undefined;\n\t\t\tif (nativeRequired && (typeof native !== \"string\" || !/^[a-f0-9]{64}$/.test(native)))\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tif (!nativeRequired && native !== undefined) throw new VerifiedRunError(\"integrity\");\n\t\t\treturn Object.freeze({\n\t\t\t\tclaimId: raw.claimId,\n\t\t\t\texecutionId: raw.executionId,\n\t\t\t\tstdoutDigest: raw.stdoutDigest,\n\t\t\t\tstderrDigest: raw.stderrDigest,\n\t\t\t\texitCode: raw.exitCode,\n\t\t\t\tfailure: raw.failure,\n\t\t\t\t...(typeof native === \"string\" ? { receiptCoreDigest: native } : {}),\n\t\t\t});\n\t\t}),\n\t);\n}\n\n/** Only the authenticated adapter supplies these observations; the reducer itself grants no trust. */\nexport function closesRunClaims(\n\tcontract: RunContract,\n\tcontext: { readonly candidate: string; readonly environment: string; readonly checks: readonly CheckObservation[] },\n): boolean {\n\tconst graph = {\n\t\tschemaVersion: CLAIM_GRAPH_SCHEMA_VERSION,\n\t\tclaims: contract.checks.map((check) => ({\n\t\t\tclaimId: check.claimId,\n\t\t\tkind: \"requirement\" as const,\n\t\t\tstatement: `Exact stdout for ${check.claimId}`,\n\t\t\tseverity: \"required\" as const,\n\t\t\tsatisfaction: { rule: \"all\" as const, inputs: [] },\n\t\t\ttrustFloor: \"trusted_attestation\" as const,\n\t\t\tinvalidationKeys: [],\n\t\t\tscopeSensitive: true,\n\t\t})),\n\t};\n\tconst observations = context.checks.map((check) => ({\n\t\tobservationId: check.executionId,\n\t\tclaimIds: [check.claimId],\n\t\tsource: \"trusted_attestation\" as const,\n\t\tpolarity:\n\t\t\tcheck.exitCode === 0 &&\n\t\t\tcheck.failure === null &&\n\t\t\tcontract.checks.some(\n\t\t\t\t(expected) => expected.claimId === check.claimId && digestBytes(expected.stdout) === check.stdoutDigest,\n\t\t\t)\n\t\t\t\t? (\"supports\" as const)\n\t\t\t\t: (\"violates\" as const),\n\t\tsourceRoot: context.candidate,\n\t\tenvironmentDigest: context.environment,\n\t\tindependenceGroup: check.executionId,\n\t}));\n\treturn (\n\t\tevaluateProofClosure({\n\t\t\tgraph,\n\t\t\tobservations,\n\t\t\twitnessIndependence: \"explicit-groups\",\n\t\t\twaivers: [],\n\t\t\tsourceRoot: context.candidate,\n\t\t\tenvironmentDigest: context.environment,\n\t\t\tworkspaceCompleteness: \"complete\",\n\t\t\tunresolvedEffectIds: [],\n\t\t\tnow: \"1970-01-01T00:00:00.000Z\",\n\t\t}).verdict === \"verified\"\n\t);\n}\n"]}

package/dist/core/verified-run/evidence-binding.js

@@ -0,0 +1,81 @@
+import { CLAIM_GRAPH_SCHEMA_VERSION, evaluateProofClosure } from "omk-protocol";
+import { digestBytes, VerifiedRunError } from "./storage.js";
+export function parseCheckObservations(value, nativeRequired) {
+    if (!Array.isArray(value) || value.length > 32)
+        throw new VerifiedRunError("integrity");
+    const rawChecks = value;
+    return Object.freeze(rawChecks.map((raw) => {
+        if (typeof raw !== "object" ||
+            raw === null ||
+            !("claimId" in raw) ||
+            typeof raw.claimId !== "string" ||
+            !("executionId" in raw) ||
+            typeof raw.executionId !== "string" ||
+            !("stdoutDigest" in raw) ||
+            typeof raw.stdoutDigest !== "string" ||
+            !/^[a-f0-9]{64}$/.test(raw.stdoutDigest) ||
+            !("stderrDigest" in raw) ||
+            typeof raw.stderrDigest !== "string" ||
+            !/^[a-f0-9]{64}$/.test(raw.stderrDigest) ||
+            !("exitCode" in raw) ||
+            (raw.exitCode !== null && (typeof raw.exitCode !== "number" || !Number.isSafeInteger(raw.exitCode))) ||
+            !("failure" in raw) ||
+            (raw.failure !== null && typeof raw.failure !== "string"))
+            throw new VerifiedRunError("integrity");
+        const native = "receiptCoreDigest" in raw ? raw.receiptCoreDigest : undefined;
+        if (nativeRequired && (typeof native !== "string" || !/^[a-f0-9]{64}$/.test(native)))
+            throw new VerifiedRunError("integrity");
+        if (!nativeRequired && native !== undefined)
+            throw new VerifiedRunError("integrity");
+        return Object.freeze({
+            claimId: raw.claimId,
+            executionId: raw.executionId,
+            stdoutDigest: raw.stdoutDigest,
+            stderrDigest: raw.stderrDigest,
+            exitCode: raw.exitCode,
+            failure: raw.failure,
+            ...(typeof native === "string" ? { receiptCoreDigest: native } : {}),
+        });
+    }));
+}
+/** Only the authenticated adapter supplies these observations; the reducer itself grants no trust. */
+export function closesRunClaims(contract, context) {
+    const graph = {
+        schemaVersion: CLAIM_GRAPH_SCHEMA_VERSION,
+        claims: contract.checks.map((check) => ({
+            claimId: check.claimId,
+            kind: "requirement",
+            statement: `Exact stdout for ${check.claimId}`,
+            severity: "required",
+            satisfaction: { rule: "all", inputs: [] },
+            trustFloor: "trusted_attestation",
+            invalidationKeys: [],
+            scopeSensitive: true,
+        })),
+    };
+    const observations = context.checks.map((check) => ({
+        observationId: check.executionId,
+        claimIds: [check.claimId],
+        source: "trusted_attestation",
+        polarity: check.exitCode === 0 &&
+            check.failure === null &&
+            contract.checks.some((expected) => expected.claimId === check.claimId && digestBytes(expected.stdout) === check.stdoutDigest)
+            ? "supports"
+            : "violates",
+        sourceRoot: context.candidate,
+        environmentDigest: context.environment,
+        independenceGroup: check.executionId,
+    }));
+    return (evaluateProofClosure({
+        graph,
+        observations,
+        witnessIndependence: "explicit-groups",
+        waivers: [],
+        sourceRoot: context.candidate,
+        environmentDigest: context.environment,
+        workspaceCompleteness: "complete",
+        unresolvedEffectIds: [],
+        now: "1970-01-01T00:00:00.000Z",
+    }).verdict === "verified");
+}
+//# sourceMappingURL=evidence-binding.js.map

package/dist/core/verified-run/evidence-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-binding.js","sourceRoot":"","sources":["../../../src/core/verified-run/evidence-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAoB,MAAM,cAAc,CAAC;AAClG,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAY7D,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,cAAuB,EAA+B;IAC5G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACxF,MAAM,SAAS,GAAuB,KAAK,CAAC;IAC5C,OAAO,MAAM,CAAC,MAAM,CACnB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE,CAAC;QACxC,IACC,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;YACnB,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAC/B,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YACnC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC;YACxB,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;YACpC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;YACxC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC;YACxB,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;YACpC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;YACxC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;YACpB,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpG,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;YACnB,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC;YAEzD,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,cAAc,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrF,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CAAC;IAAA,CACH,CAAC,CACF,CAAC;AAAA,CACF;AAED,sGAAsG;AACtG,MAAM,UAAU,eAAe,CAC9B,QAAqB,EACrB,OAAmH,EACzG;IACV,MAAM,KAAK,GAAG;QACb,aAAa,EAAE,0BAA0B;QACzC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,aAAsB;YAC5B,SAAS,EAAE,oBAAoB,KAAK,CAAC,OAAO,EAAE;YAC9C,QAAQ,EAAE,UAAmB;YAC7B,YAAY,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE,MAAM,EAAE,EAAE,EAAE;YAClD,UAAU,EAAE,qBAA8B;YAC1C,gBAAgB,EAAE,EAAE;YACpB,cAAc,EAAE,IAAI;SACpB,CAAC,CAAC;KACH,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnD,aAAa,EAAE,KAAK,CAAC,WAAW;QAChC,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QACzB,MAAM,EAAE,qBAA8B;QACtC,QAAQ,EACP,KAAK,CAAC,QAAQ,KAAK,CAAC;YACpB,KAAK,CAAC,OAAO,KAAK,IAAI;YACtB,QAAQ,CAAC,MAAM,CAAC,IAAI,CACnB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,YAAY,CACvG;YACA,CAAC,CAAE,UAAoB;YACvB,CAAC,CAAE,UAAoB;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,iBAAiB,EAAE,OAAO,CAAC,WAAW;QACtC,iBAAiB,EAAE,KAAK,CAAC,WAAW;KACpC,CAAC,CAAC,CAAC;IACJ,OAAO,CACN,oBAAoB,CAAC;QACpB,KAAK;QACL,YAAY;QACZ,mBAAmB,EAAE,iBAAiB;QACtC,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,iBAAiB,EAAE,OAAO,CAAC,WAAW;QACtC,qBAAqB,EAAE,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,GAAG,EAAE,0BAA0B;KAC/B,CAAC,CAAC,OAAO,KAAK,UAAU,CACzB,CAAC;AAAA,CACF","sourcesContent":["import { CLAIM_GRAPH_SCHEMA_VERSION, evaluateProofClosure, type RunContract } from \"omk-protocol\";\nimport { digestBytes, VerifiedRunError } from \"./storage.ts\";\n\nexport interface CheckObservation {\n\treadonly claimId: string;\n\treadonly executionId: string;\n\treadonly stdoutDigest: string;\n\treadonly stderrDigest: string;\n\treadonly exitCode: number | null;\n\treadonly failure: string | null;\n\treadonly receiptCoreDigest?: string;\n}\n\nexport function parseCheckObservations(value: unknown, nativeRequired: boolean): readonly CheckObservation[] {\n\tif (!Array.isArray(value) || value.length > 32) throw new VerifiedRunError(\"integrity\");\n\tconst rawChecks: readonly unknown[] = value;\n\treturn Object.freeze(\n\t\trawChecks.map((raw): CheckObservation => {\n\t\t\tif (\n\t\t\t\ttypeof raw !== \"object\" ||\n\t\t\t\traw === null ||\n\t\t\t\t!(\"claimId\" in raw) ||\n\t\t\t\ttypeof raw.claimId !== \"string\" ||\n\t\t\t\t!(\"executionId\" in raw) ||\n\t\t\t\ttypeof raw.executionId !== \"string\" ||\n\t\t\t\t!(\"stdoutDigest\" in raw) ||\n\t\t\t\ttypeof raw.stdoutDigest !== \"string\" ||\n\t\t\t\t!/^[a-f0-9]{64}$/.test(raw.stdoutDigest) ||\n\t\t\t\t!(\"stderrDigest\" in raw) ||\n\t\t\t\ttypeof raw.stderrDigest !== \"string\" ||\n\t\t\t\t!/^[a-f0-9]{64}$/.test(raw.stderrDigest) ||\n\t\t\t\t!(\"exitCode\" in raw) ||\n\t\t\t\t(raw.exitCode !== null && (typeof raw.exitCode !== \"number\" || !Number.isSafeInteger(raw.exitCode))) ||\n\t\t\t\t!(\"failure\" in raw) ||\n\t\t\t\t(raw.failure !== null && typeof raw.failure !== \"string\")\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tconst native = \"receiptCoreDigest\" in raw ? raw.receiptCoreDigest : undefined;\n\t\t\tif (nativeRequired && (typeof native !== \"string\" || !/^[a-f0-9]{64}$/.test(native)))\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\tif (!nativeRequired && native !== undefined) throw new VerifiedRunError(\"integrity\");\n\t\t\treturn Object.freeze({\n\t\t\t\tclaimId: raw.claimId,\n\t\t\t\texecutionId: raw.executionId,\n\t\t\t\tstdoutDigest: raw.stdoutDigest,\n\t\t\t\tstderrDigest: raw.stderrDigest,\n\t\t\t\texitCode: raw.exitCode,\n\t\t\t\tfailure: raw.failure,\n\t\t\t\t...(typeof native === \"string\" ? { receiptCoreDigest: native } : {}),\n\t\t\t});\n\t\t}),\n\t);\n}\n\n/** Only the authenticated adapter supplies these observations; the reducer itself grants no trust. */\nexport function closesRunClaims(\n\tcontract: RunContract,\n\tcontext: { readonly candidate: string; readonly environment: string; readonly checks: readonly CheckObservation[] },\n): boolean {\n\tconst graph = {\n\t\tschemaVersion: CLAIM_GRAPH_SCHEMA_VERSION,\n\t\tclaims: contract.checks.map((check) => ({\n\t\t\tclaimId: check.claimId,\n\t\t\tkind: \"requirement\" as const,\n\t\t\tstatement: `Exact stdout for ${check.claimId}`,\n\t\t\tseverity: \"required\" as const,\n\t\t\tsatisfaction: { rule: \"all\" as const, inputs: [] },\n\t\t\ttrustFloor: \"trusted_attestation\" as const,\n\t\t\tinvalidationKeys: [],\n\t\t\tscopeSensitive: true,\n\t\t})),\n\t};\n\tconst observations = context.checks.map((check) => ({\n\t\tobservationId: check.executionId,\n\t\tclaimIds: [check.claimId],\n\t\tsource: \"trusted_attestation\" as const,\n\t\tpolarity:\n\t\t\tcheck.exitCode === 0 &&\n\t\t\tcheck.failure === null &&\n\t\t\tcontract.checks.some(\n\t\t\t\t(expected) => expected.claimId === check.claimId && digestBytes(expected.stdout) === check.stdoutDigest,\n\t\t\t)\n\t\t\t\t? (\"supports\" as const)\n\t\t\t\t: (\"violates\" as const),\n\t\tsourceRoot: context.candidate,\n\t\tenvironmentDigest: context.environment,\n\t\tindependenceGroup: check.executionId,\n\t}));\n\treturn (\n\t\tevaluateProofClosure({\n\t\t\tgraph,\n\t\t\tobservations,\n\t\t\twitnessIndependence: \"explicit-groups\",\n\t\t\twaivers: [],\n\t\t\tsourceRoot: context.candidate,\n\t\t\tenvironmentDigest: context.environment,\n\t\t\tworkspaceCompleteness: \"complete\",\n\t\t\tunresolvedEffectIds: [],\n\t\t\tnow: \"1970-01-01T00:00:00.000Z\",\n\t\t}).verdict === \"verified\"\n\t);\n}\n"]}

package/dist/core/verified-run/evidence.d.ts

@@ -0,0 +1,27 @@
+import type { RunContract } from "omk-protocol";
+import type { EvidenceReceipt } from "../../types/evidence.ts";
+import { type CandidateManifest } from "./candidate.ts";
+import { type CheckObservation } from "./evidence-binding.ts";
+import type { JournalSnapshot } from "./journal.ts";
+export type { CheckObservation } from "./evidence-binding.ts";
+export interface VerifiedRunEvidence {
+    readonly candidateDigest: string;
+    readonly manifest: CandidateManifest;
+    readonly receiptDigest: string;
+    readonly verified: boolean;
+    readonly checks: readonly CheckObservation[];
+    readonly receiptFormat: "v3" | "legacy";
+    readonly receipts: readonly EvidenceReceipt[];
+}
+export declare function createRunIssuer(runPath: string): void;
+export declare function issueRunEvidence(runPath: string, contract: RunContract, material: {
+    readonly generation: number;
+    readonly candidateDigest: string;
+    readonly environmentDigest: string;
+    readonly checks: readonly CheckObservation[];
+}): {
+    readonly digest: string;
+    readonly verified: boolean;
+};
+export declare function readRunEvidence(runPath: string, journal: JournalSnapshot, environment: string): VerifiedRunEvidence;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/core/verified-run/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/evidence.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,KAAK,iBAAiB,EAAiB,MAAM,gBAAgB,CAAC;AAEvE,OAAO,EAAE,KAAK,gBAAgB,EAA2C,MAAM,uBAAuB,CAAC;AACvG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAa9D,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,IAAI,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAGrD;AAQD,wBAAgB,gBAAgB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,EACrB,QAAQ,EAAE;IACT,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C,GACC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAuBzD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,GAAG,mBAAmB,CAoEnH","sourcesContent":["import { createHmac, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport type { RunContract } from \"omk-protocol\";\nimport type { EvidenceReceipt } from \"../../types/evidence.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport { type CandidateManifest, loadCandidate } from \"./candidate.ts\";\nimport { readCheckReceipts } from \"./check-receipt.ts\";\nimport { type CheckObservation, closesRunClaims, parseCheckObservations } from \"./evidence-binding.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError } from \"./storage.ts\";\n\nexport type { CheckObservation } from \"./evidence-binding.ts\";\n\ninterface Attestation {\n\treadonly version: 1 | 2 | 3;\n\treadonly runId: string;\n\treadonly generation: number;\n\treadonly contractDigest: string;\n\treadonly candidateDigest: string;\n\treadonly environmentDigest: string;\n\treadonly verifierDigest: string;\n\treadonly checks: readonly CheckObservation[];\n\treadonly verified: boolean;\n}\nexport interface VerifiedRunEvidence {\n\treadonly candidateDigest: string;\n\treadonly manifest: CandidateManifest;\n\treadonly receiptDigest: string;\n\treadonly verified: boolean;\n\treadonly checks: readonly CheckObservation[];\n\treadonly receiptFormat: \"v3\" | \"legacy\";\n\treadonly receipts: readonly EvidenceReceipt[];\n}\n\nexport function createRunIssuer(runPath: string): void {\n\t// Recovery must never replace a missing key and re-sign old evidence.\n\tpublishBytes(join(runPath, \"issuer.key\"), randomBytes(32));\n}\n\nfunction tag(runPath: string, receipt: unknown): Buffer {\n\tconst key = readRegularFile(join(runPath, \"issuer.key\"), 32);\n\tif (key.length !== 32) throw new VerifiedRunError(\"integrity\");\n\treturn createHmac(\"sha256\", key).update(\"omk.verified-run.attestation.v1\\0\").update(canonicalJson(receipt)).digest();\n}\n\nexport function issueRunEvidence(\n\trunPath: string,\n\tcontract: RunContract,\n\tmaterial: {\n\t\treadonly generation: number;\n\t\treadonly candidateDigest: string;\n\t\treadonly environmentDigest: string;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): { readonly digest: string; readonly verified: boolean } {\n\tconst checks = parseCheckObservations(material.checks, true);\n\tconst candidate = loadCandidate(runPath, material.candidateDigest, contract.budget);\n\treadCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks });\n\tconst receipt: Attestation = {\n\t\tversion: 3,\n\t\trunId: contract.runId,\n\t\tgeneration: material.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest: material.candidateDigest,\n\t\tenvironmentDigest: material.environmentDigest,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified: closesRunClaims(contract, {\n\t\t\tcandidate: material.candidateDigest,\n\t\t\tenvironment: material.environmentDigest,\n\t\t\tchecks,\n\t\t}),\n\t};\n\tconst envelope = { receipt, authenticationTag: tag(runPath, receipt).toString(\"hex\") };\n\tconst digest = digestObject(envelope);\n\tpublishObject(join(runPath, \"attestations\", `${digest}.json`), envelope);\n\treturn { digest, verified: receipt.verified };\n}\n\nexport function readRunEvidence(runPath: string, journal: JournalSnapshot, environment: string): VerifiedRunEvidence {\n\tconst first = journal.records[0]?.event;\n\tconst { candidateDigest, receiptDigest } = journal.state;\n\tif (first?.kind !== \"created\" || !candidateDigest || !receiptDigest) throw new VerifiedRunError(\"evidence_missing\");\n\tconst raw = readJson(join(runPath, \"attestations\", `${receiptDigest}.json`));\n\tif (\n\t\tdigestObject(raw) !== receiptDigest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"receipt\" in raw) ||\n\t\t!(\"authenticationTag\" in raw) ||\n\t\ttypeof raw.authenticationTag !== \"string\" ||\n\t\t!/^[a-f0-9]{64}$/.test(raw.authenticationTag) ||\n\t\t!timingSafeEqual(tag(runPath, raw.receipt), Buffer.from(raw.authenticationTag, \"hex\"))\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst receipt = raw.receipt;\n\tif (\n\t\ttypeof receipt !== \"object\" ||\n\t\treceipt === null ||\n\t\t!(\"checks\" in receipt) ||\n\t\t!(\"version\" in receipt) ||\n\t\t(receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst checks = parseCheckObservations(receipt.checks, receipt.version !== 1);\n\tconst contract = first.contract;\n\tconst dispatches = journal.records.flatMap(({ event, generation }) =>\n\t\tgeneration === journal.state.generation && event.kind === \"dispatch\" && event.role === \"verifier\" ? [event] : [],\n\t);\n\tif (\n\t\tchecks.length !== contract.checks.length ||\n\t\tchecks.length !== dispatches.length ||\n\t\tnew Set(checks.map((check) => check.claimId)).size !== checks.length ||\n\t\tchecks.some(\n\t\t\t(check) =>\n\t\t\t\t!dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId),\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst verified = closesRunClaims(contract, { candidate: candidateDigest, environment, checks });\n\tconst expected: Attestation = {\n\t\tversion: receipt.version,\n\t\trunId: contract.runId,\n\t\tgeneration: journal.state.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest,\n\t\tenvironmentDigest: environment,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified,\n\t};\n\tif (canonicalJson(receipt) !== canonicalJson(expected) || verified !== (journal.state.verification === \"verified\"))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst candidate = loadCandidate(runPath, candidateDigest, contract.budget);\n\tconst receipts =\n\t\treceipt.version !== 1\n\t\t\t? readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks })\n\t\t\t: Object.freeze([]);\n\treturn Object.freeze({\n\t\tcandidateDigest,\n\t\tmanifest: candidate.manifest,\n\t\treceiptDigest,\n\t\tverified,\n\t\tchecks,\n\t\treceiptFormat: receipt.version !== 1 ? \"v3\" : \"legacy\",\n\t\treceipts,\n\t});\n}\n"]}

package/dist/core/verified-run/evidence.js

@@ -0,0 +1,100 @@
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { join } from "node:path";
+import { canonicalJson } from "../run-journal.js";
+import { loadCandidate } from "./candidate.js";
+import { readCheckReceipts } from "./check-receipt.js";
+import { closesRunClaims, parseCheckObservations } from "./evidence-binding.js";
+import { digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError } from "./storage.js";
+export function createRunIssuer(runPath) {
+    // Recovery must never replace a missing key and re-sign old evidence.
+    publishBytes(join(runPath, "issuer.key"), randomBytes(32));
+}
+function tag(runPath, receipt) {
+    const key = readRegularFile(join(runPath, "issuer.key"), 32);
+    if (key.length !== 32)
+        throw new VerifiedRunError("integrity");
+    return createHmac("sha256", key).update("omk.verified-run.attestation.v1\0").update(canonicalJson(receipt)).digest();
+}
+export function issueRunEvidence(runPath, contract, material) {
+    const checks = parseCheckObservations(material.checks, true);
+    const candidate = loadCandidate(runPath, material.candidateDigest, contract.budget);
+    readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks });
+    const receipt = {
+        version: 3,
+        runId: contract.runId,
+        generation: material.generation,
+        contractDigest: digestObject(contract),
+        candidateDigest: material.candidateDigest,
+        environmentDigest: material.environmentDigest,
+        verifierDigest: digestObject(contract.checks),
+        checks,
+        verified: closesRunClaims(contract, {
+            candidate: material.candidateDigest,
+            environment: material.environmentDigest,
+            checks,
+        }),
+    };
+    const envelope = { receipt, authenticationTag: tag(runPath, receipt).toString("hex") };
+    const digest = digestObject(envelope);
+    publishObject(join(runPath, "attestations", `${digest}.json`), envelope);
+    return { digest, verified: receipt.verified };
+}
+export function readRunEvidence(runPath, journal, environment) {
+    const first = journal.records[0]?.event;
+    const { candidateDigest, receiptDigest } = journal.state;
+    if (first?.kind !== "created" || !candidateDigest || !receiptDigest)
+        throw new VerifiedRunError("evidence_missing");
+    const raw = readJson(join(runPath, "attestations", `${receiptDigest}.json`));
+    if (digestObject(raw) !== receiptDigest ||
+        typeof raw !== "object" ||
+        raw === null ||
+        !("receipt" in raw) ||
+        !("authenticationTag" in raw) ||
+        typeof raw.authenticationTag !== "string" ||
+        !/^[a-f0-9]{64}$/.test(raw.authenticationTag) ||
+        !timingSafeEqual(tag(runPath, raw.receipt), Buffer.from(raw.authenticationTag, "hex")))
+        throw new VerifiedRunError("integrity");
+    const receipt = raw.receipt;
+    if (typeof receipt !== "object" ||
+        receipt === null ||
+        !("checks" in receipt) ||
+        !("version" in receipt) ||
+        (receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3))
+        throw new VerifiedRunError("integrity");
+    const checks = parseCheckObservations(receipt.checks, receipt.version !== 1);
+    const contract = first.contract;
+    const dispatches = journal.records.flatMap(({ event, generation }) => generation === journal.state.generation && event.kind === "dispatch" && event.role === "verifier" ? [event] : []);
+    if (checks.length !== contract.checks.length ||
+        checks.length !== dispatches.length ||
+        new Set(checks.map((check) => check.claimId)).size !== checks.length ||
+        checks.some((check) => !dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId)))
+        throw new VerifiedRunError("integrity");
+    const verified = closesRunClaims(contract, { candidate: candidateDigest, environment, checks });
+    const expected = {
+        version: receipt.version,
+        runId: contract.runId,
+        generation: journal.state.generation,
+        contractDigest: digestObject(contract),
+        candidateDigest,
+        environmentDigest: environment,
+        verifierDigest: digestObject(contract.checks),
+        checks,
+        verified,
+    };
+    if (canonicalJson(receipt) !== canonicalJson(expected) || verified !== (journal.state.verification === "verified"))
+        throw new VerifiedRunError("integrity");
+    const candidate = loadCandidate(runPath, candidateDigest, contract.budget);
+    const receipts = receipt.version !== 1
+        ? readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks })
+        : Object.freeze([]);
+    return Object.freeze({
+        candidateDigest,
+        manifest: candidate.manifest,
+        receiptDigest,
+        verified,
+        checks,
+        receiptFormat: receipt.version !== 1 ? "v3" : "legacy",
+        receipts,
+    });
+}
+//# sourceMappingURL=evidence.js.map

package/dist/core/verified-run/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/core/verified-run/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAA0B,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAyB,eAAe,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEvG,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAyBtH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAQ;IACtD,sEAAsE;IACtE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AAAA,CAC3D;AAED,SAAS,GAAG,CAAC,OAAe,EAAE,OAAgB,EAAU;IACvD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAAA,CACrH;AAED,MAAM,UAAU,gBAAgB,CAC/B,OAAe,EACf,QAAqB,EACrB,QAKC,EACyD;IAC1D,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpF,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAgB;QAC5B,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC;QACtC,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,MAAM;QACN,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;YACnC,SAAS,EAAE,QAAQ,CAAC,eAAe;YACnC,WAAW,EAAE,QAAQ,CAAC,iBAAiB;YACvC,MAAM;SACN,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AAAA,CAC9C;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,OAAwB,EAAE,WAAmB,EAAuB;IACpH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACxC,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IACzD,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,eAAe,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACpH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC;IAC7E,IACC,YAAY,CAAC,GAAG,CAAC,KAAK,aAAa;QACnC,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;QACnB,CAAC,CAAC,mBAAmB,IAAI,GAAG,CAAC;QAC7B,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;QACzC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7C,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAEtF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IACC,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC;QACtB,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;QACvB,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC;QAEzE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CACpE,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAChH,CAAC;IACF,IACC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM;QACxC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QACnC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QACpE,MAAM,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,CACT,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CACxG;QAED,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAgB;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;QACpC,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC;QACtC,eAAe;QACf,iBAAiB,EAAE,WAAW;QAC9B,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,MAAM;QACN,QAAQ;KACR,CAAC;IACF,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC;QACjH,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,QAAQ,GACb,OAAO,CAAC,OAAO,KAAK,CAAC;QACpB,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAChF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,eAAe;QACf,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,aAAa;QACb,QAAQ;QACR,MAAM;QACN,aAAa,EAAE,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;QACtD,QAAQ;KACR,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { createHmac, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport type { RunContract } from \"omk-protocol\";\nimport type { EvidenceReceipt } from \"../../types/evidence.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport { type CandidateManifest, loadCandidate } from \"./candidate.ts\";\nimport { readCheckReceipts } from \"./check-receipt.ts\";\nimport { type CheckObservation, closesRunClaims, parseCheckObservations } from \"./evidence-binding.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError } from \"./storage.ts\";\n\nexport type { CheckObservation } from \"./evidence-binding.ts\";\n\ninterface Attestation {\n\treadonly version: 1 | 2 | 3;\n\treadonly runId: string;\n\treadonly generation: number;\n\treadonly contractDigest: string;\n\treadonly candidateDigest: string;\n\treadonly environmentDigest: string;\n\treadonly verifierDigest: string;\n\treadonly checks: readonly CheckObservation[];\n\treadonly verified: boolean;\n}\nexport interface VerifiedRunEvidence {\n\treadonly candidateDigest: string;\n\treadonly manifest: CandidateManifest;\n\treadonly receiptDigest: string;\n\treadonly verified: boolean;\n\treadonly checks: readonly CheckObservation[];\n\treadonly receiptFormat: \"v3\" | \"legacy\";\n\treadonly receipts: readonly EvidenceReceipt[];\n}\n\nexport function createRunIssuer(runPath: string): void {\n\t// Recovery must never replace a missing key and re-sign old evidence.\n\tpublishBytes(join(runPath, \"issuer.key\"), randomBytes(32));\n}\n\nfunction tag(runPath: string, receipt: unknown): Buffer {\n\tconst key = readRegularFile(join(runPath, \"issuer.key\"), 32);\n\tif (key.length !== 32) throw new VerifiedRunError(\"integrity\");\n\treturn createHmac(\"sha256\", key).update(\"omk.verified-run.attestation.v1\\0\").update(canonicalJson(receipt)).digest();\n}\n\nexport function issueRunEvidence(\n\trunPath: string,\n\tcontract: RunContract,\n\tmaterial: {\n\t\treadonly generation: number;\n\t\treadonly candidateDigest: string;\n\t\treadonly environmentDigest: string;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): { readonly digest: string; readonly verified: boolean } {\n\tconst checks = parseCheckObservations(material.checks, true);\n\tconst candidate = loadCandidate(runPath, material.candidateDigest, contract.budget);\n\treadCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks });\n\tconst receipt: Attestation = {\n\t\tversion: 3,\n\t\trunId: contract.runId,\n\t\tgeneration: material.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest: material.candidateDigest,\n\t\tenvironmentDigest: material.environmentDigest,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified: closesRunClaims(contract, {\n\t\t\tcandidate: material.candidateDigest,\n\t\t\tenvironment: material.environmentDigest,\n\t\t\tchecks,\n\t\t}),\n\t};\n\tconst envelope = { receipt, authenticationTag: tag(runPath, receipt).toString(\"hex\") };\n\tconst digest = digestObject(envelope);\n\tpublishObject(join(runPath, \"attestations\", `${digest}.json`), envelope);\n\treturn { digest, verified: receipt.verified };\n}\n\nexport function readRunEvidence(runPath: string, journal: JournalSnapshot, environment: string): VerifiedRunEvidence {\n\tconst first = journal.records[0]?.event;\n\tconst { candidateDigest, receiptDigest } = journal.state;\n\tif (first?.kind !== \"created\" || !candidateDigest || !receiptDigest) throw new VerifiedRunError(\"evidence_missing\");\n\tconst raw = readJson(join(runPath, \"attestations\", `${receiptDigest}.json`));\n\tif (\n\t\tdigestObject(raw) !== receiptDigest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"receipt\" in raw) ||\n\t\t!(\"authenticationTag\" in raw) ||\n\t\ttypeof raw.authenticationTag !== \"string\" ||\n\t\t!/^[a-f0-9]{64}$/.test(raw.authenticationTag) ||\n\t\t!timingSafeEqual(tag(runPath, raw.receipt), Buffer.from(raw.authenticationTag, \"hex\"))\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst receipt = raw.receipt;\n\tif (\n\t\ttypeof receipt !== \"object\" ||\n\t\treceipt === null ||\n\t\t!(\"checks\" in receipt) ||\n\t\t!(\"version\" in receipt) ||\n\t\t(receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst checks = parseCheckObservations(receipt.checks, receipt.version !== 1);\n\tconst contract = first.contract;\n\tconst dispatches = journal.records.flatMap(({ event, generation }) =>\n\t\tgeneration === journal.state.generation && event.kind === \"dispatch\" && event.role === \"verifier\" ? [event] : [],\n\t);\n\tif (\n\t\tchecks.length !== contract.checks.length ||\n\t\tchecks.length !== dispatches.length ||\n\t\tnew Set(checks.map((check) => check.claimId)).size !== checks.length ||\n\t\tchecks.some(\n\t\t\t(check) =>\n\t\t\t\t!dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId),\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst verified = closesRunClaims(contract, { candidate: candidateDigest, environment, checks });\n\tconst expected: Attestation = {\n\t\tversion: receipt.version,\n\t\trunId: contract.runId,\n\t\tgeneration: journal.state.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest,\n\t\tenvironmentDigest: environment,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified,\n\t};\n\tif (canonicalJson(receipt) !== canonicalJson(expected) || verified !== (journal.state.verification === \"verified\"))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst candidate = loadCandidate(runPath, candidateDigest, contract.budget);\n\tconst receipts =\n\t\treceipt.version !== 1\n\t\t\t? readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks })\n\t\t\t: Object.freeze([]);\n\treturn Object.freeze({\n\t\tcandidateDigest,\n\t\tmanifest: candidate.manifest,\n\t\treceiptDigest,\n\t\tverified,\n\t\tchecks,\n\t\treceiptFormat: receipt.version !== 1 ? \"v3\" : \"legacy\",\n\t\treceipts,\n\t});\n}\n"]}

package/dist/core/verified-run/journal.d.ts

@@ -0,0 +1,32 @@
+import { appendFileDurablySync } from "../durable-file-io.ts";
+import type { SessionOwnerLease } from "../session-owner-lease.ts";
+import { type RunEvent, type RunProjection } from "./events.ts";
+interface RecordV2 {
+    readonly version: 2;
+    readonly seq: number;
+    readonly generation: number;
+    readonly previous: string;
+    readonly event: RunEvent;
+    readonly hash: string;
+}
+export interface JournalSnapshot {
+    readonly records: readonly RecordV2[];
+    readonly state: RunProjection;
+    readonly bytesDigest: string;
+}
+export declare const journalPath: (runPath: string) => string;
+/** Read-only: no implicit recovery, tail truncation, mode changes, or model calls. */
+export declare function readRunJournal(runPath: string): JournalSnapshot | null;
+/** v2 event store reuses the v1 durable append and mutation/owner locking primitives. */
+export declare class VerifiedRunJournal {
+    private head;
+    private poisoned;
+    private readonly runPath;
+    private readonly owner;
+    private readonly persist;
+    constructor(runPath: string, owner: SessionOwnerLease, persist?: typeof appendFileDurablySync);
+    get state(): RunProjection;
+    append(event: RunEvent): RunProjection;
+}
+export {};
+//# sourceMappingURL=journal.d.ts.map

package/dist/core/verified-run/journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/journal.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAA6B,KAAK,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAG3F,UAAU,QAAQ;IACjB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AACD,eAAO,MAAM,WAAW,6BAAiE,CAAC;AAE1F,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA+BtE;AAED,yFAAyF;AACzF,qBAAa,kBAAkB;IAC9B,OAAO,CAAC,IAAI,CAAyB;IACrC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4C;IAEpE,YAAY,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,+BAAwB,EAKrF;IAED,IAAI,KAAK,IAAI,aAAa,CAGzB;IAED,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,aAAa,CA+BrC;CACD","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { acquireDurableFileMutationLockSync } from \"../durable-file-identity.ts\";\nimport { appendFileDurablySync } from \"../durable-file-io.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport type { SessionOwnerLease } from \"../session-owner-lease.ts\";\nimport { parseRunEvent, projectRun, type RunEvent, type RunProjection } from \"./events.ts\";\nimport { digestBytes, digestObject, readRegularFile, VerifiedRunError } from \"./storage.ts\";\n\ninterface RecordV2 {\n\treadonly version: 2;\n\treadonly seq: number;\n\treadonly generation: number;\n\treadonly previous: string;\n\treadonly event: RunEvent;\n\treadonly hash: string;\n}\nexport interface JournalSnapshot {\n\treadonly records: readonly RecordV2[];\n\treadonly state: RunProjection;\n\treadonly bytesDigest: string;\n}\nexport const journalPath = (runPath: string): string => join(runPath, \"journal.v2.jsonl\");\n\n/** Read-only: no implicit recovery, tail truncation, mode changes, or model calls. */\nexport function readRunJournal(runPath: string): JournalSnapshot | null {\n\tconst path = journalPath(runPath);\n\tif (!existsSync(path)) return null;\n\tconst bytes = readRegularFile(path, 8388608);\n\tif (!bytes.length || bytes.at(-1) !== 10) throw new VerifiedRunError(\"journal_truncated\");\n\tconst lines = new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes).slice(0, -1).split(\"\\n\");\n\tconst records: RecordV2[] = [];\n\tlet previous = \"0\".repeat(64);\n\tlet generation = 1;\n\tfor (const [index, line] of lines.entries()) {\n\t\tlet raw: unknown;\n\t\ttry {\n\t\t\traw = JSON.parse(line);\n\t\t} catch {\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t}\n\t\tif (typeof raw !== \"object\" || raw === null || !(\"event\" in raw)) throw new VerifiedRunError(\"integrity\");\n\t\tconst event = parseRunEvent(raw.event);\n\t\tif (event.kind === \"resumed\" || event.kind === \"writer_restarted\" || event.kind === \"tasks_retried\")\n\t\t\tgeneration += 1;\n\t\tconst material = { version: 2 as const, seq: index + 1, generation, previous, event };\n\t\tconst record = Object.freeze({ ...material, hash: digestObject(material) });\n\t\tif (canonicalJson(raw) !== canonicalJson(record)) throw new VerifiedRunError(\"integrity\");\n\t\trecords.push(record);\n\t\tprevious = record.hash;\n\t}\n\treturn {\n\t\trecords: Object.freeze(records),\n\t\tstate: projectRun(records.map((record) => record.event)),\n\t\tbytesDigest: digestBytes(bytes),\n\t};\n}\n\n/** v2 event store reuses the v1 durable append and mutation/owner locking primitives. */\nexport class VerifiedRunJournal {\n\tprivate head: JournalSnapshot | null;\n\tprivate poisoned = false;\n\tprivate readonly runPath: string;\n\tprivate readonly owner: SessionOwnerLease;\n\tprivate readonly persist: (path: string, bytes: Uint8Array) => void;\n\n\tconstructor(runPath: string, owner: SessionOwnerLease, persist = appendFileDurablySync) {\n\t\tthis.runPath = runPath;\n\t\tthis.owner = owner;\n\t\tthis.persist = persist;\n\t\tthis.head = readRunJournal(runPath);\n\t}\n\n\tget state(): RunProjection {\n\t\tif (!this.head) throw new VerifiedRunError(\"missing_run\");\n\t\treturn this.head.state;\n\t}\n\n\tappend(event: RunEvent): RunProjection {\n\t\tconst path = journalPath(this.runPath);\n\t\tif (this.poisoned || !this.owner.owns(path)) throw new VerifiedRunError(\"stale_owner\");\n\t\tconst lock = acquireDurableFileMutationLockSync(path);\n\t\ttry {\n\t\t\tconst current = readRunJournal(this.runPath);\n\t\t\tif (current?.bytesDigest !== this.head?.bytesDigest) throw new VerifiedRunError(\"stale_revision\");\n\t\t\tconst records = current?.records ?? [];\n\t\t\tconst candidate = projectRun([...records.map((record) => record.event), event]);\n\t\t\tconst material = {\n\t\t\t\tversion: 2 as const,\n\t\t\t\tseq: records.length + 1,\n\t\t\t\tgeneration: candidate.generation,\n\t\t\t\tprevious: records.at(-1)?.hash ?? \"0\".repeat(64),\n\t\t\t\tevent,\n\t\t\t};\n\t\t\tconst record: RecordV2 = { ...material, hash: digestObject(material) };\n\t\t\ttry {\n\t\t\t\tthis.persist(path, Buffer.from(`${canonicalJson(record)}\\n`));\n\t\t\t\tconst next = readRunJournal(this.runPath);\n\t\t\t\tif (!next || next.records.at(-1)?.hash !== record.hash) throw new VerifiedRunError(\"integrity\");\n\t\t\t\tthis.owner.refresh(true);\n\t\t\t\tthis.head = next;\n\t\t\t} catch (error) {\n\t\t\t\tthis.poisoned = true;\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\treturn this.state;\n\t\t} finally {\n\t\t\tlock.release();\n\t\t}\n\t}\n}\n"]}

package/dist/core/verified-run/journal.js

@@ -0,0 +1,103 @@
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { acquireDurableFileMutationLockSync } from "../durable-file-identity.js";
+import { appendFileDurablySync } from "../durable-file-io.js";
+import { canonicalJson } from "../run-journal.js";
+import { parseRunEvent, projectRun } from "./events.js";
+import { digestBytes, digestObject, readRegularFile, VerifiedRunError } from "./storage.js";
+export const journalPath = (runPath) => join(runPath, "journal.v2.jsonl");
+/** Read-only: no implicit recovery, tail truncation, mode changes, or model calls. */
+export function readRunJournal(runPath) {
+    const path = journalPath(runPath);
+    if (!existsSync(path))
+        return null;
+    const bytes = readRegularFile(path, 8388608);
+    if (!bytes.length || bytes.at(-1) !== 10)
+        throw new VerifiedRunError("journal_truncated");
+    const lines = new TextDecoder("utf-8", { fatal: true }).decode(bytes).slice(0, -1).split("\n");
+    const records = [];
+    let previous = "0".repeat(64);
+    let generation = 1;
+    for (const [index, line] of lines.entries()) {
+        let raw;
+        try {
+            raw = JSON.parse(line);
+        }
+        catch {
+            throw new VerifiedRunError("integrity");
+        }
+        if (typeof raw !== "object" || raw === null || !("event" in raw))
+            throw new VerifiedRunError("integrity");
+        const event = parseRunEvent(raw.event);
+        if (event.kind === "resumed" || event.kind === "writer_restarted" || event.kind === "tasks_retried")
+            generation += 1;
+        const material = { version: 2, seq: index + 1, generation, previous, event };
+        const record = Object.freeze({ ...material, hash: digestObject(material) });
+        if (canonicalJson(raw) !== canonicalJson(record))
+            throw new VerifiedRunError("integrity");
+        records.push(record);
+        previous = record.hash;
+    }
+    return {
+        records: Object.freeze(records),
+        state: projectRun(records.map((record) => record.event)),
+        bytesDigest: digestBytes(bytes),
+    };
+}
+/** v2 event store reuses the v1 durable append and mutation/owner locking primitives. */
+export class VerifiedRunJournal {
+    head;
+    poisoned = false;
+    runPath;
+    owner;
+    persist;
+    constructor(runPath, owner, persist = appendFileDurablySync) {
+        this.runPath = runPath;
+        this.owner = owner;
+        this.persist = persist;
+        this.head = readRunJournal(runPath);
+    }
+    get state() {
+        if (!this.head)
+            throw new VerifiedRunError("missing_run");
+        return this.head.state;
+    }
+    append(event) {
+        const path = journalPath(this.runPath);
+        if (this.poisoned || !this.owner.owns(path))
+            throw new VerifiedRunError("stale_owner");
+        const lock = acquireDurableFileMutationLockSync(path);
+        try {
+            const current = readRunJournal(this.runPath);
+            if (current?.bytesDigest !== this.head?.bytesDigest)
+                throw new VerifiedRunError("stale_revision");
+            const records = current?.records ?? [];
+            const candidate = projectRun([...records.map((record) => record.event), event]);
+            const material = {
+                version: 2,
+                seq: records.length + 1,
+                generation: candidate.generation,
+                previous: records.at(-1)?.hash ?? "0".repeat(64),
+                event,
+            };
+            const record = { ...material, hash: digestObject(material) };
+            try {
+                this.persist(path, Buffer.from(`${canonicalJson(record)}\n`));
+                const next = readRunJournal(this.runPath);
+                if (!next || next.records.at(-1)?.hash !== record.hash)
+                    throw new VerifiedRunError("integrity");
+                this.owner.refresh(true);
+                this.head = next;
+            }
+            catch (error) {
+                this.poisoned = true;
+                throw error;
+            }
+            return this.state;
+        }
+        finally {
+            lock.release();
+        }
+    }
+}
+//# sourceMappingURL=journal.js.map

package/dist/core/verified-run/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../src/core/verified-run/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAqC,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAe5F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAE1F,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,OAAe,EAA0B;IACvE,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,IAAI,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC1G,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;YAClG,UAAU,IAAI,CAAC,CAAC;QACjB,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5E,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IACxB,CAAC;IACD,OAAO;QACN,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC;KAC/B,CAAC;AAAA,CACF;AAED,yFAAyF;AACzF,MAAM,OAAO,kBAAkB;IACtB,IAAI,CAAyB;IAC7B,QAAQ,GAAG,KAAK,CAAC;IACR,OAAO,CAAS;IAChB,KAAK,CAAoB;IACzB,OAAO,CAA4C;IAEpE,YAAY,OAAe,EAAE,KAAwB,EAAE,OAAO,GAAG,qBAAqB,EAAE;QACvF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAAA,CACpC;IAED,IAAI,KAAK,GAAkB;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IAAA,CACvB;IAED,MAAM,CAAC,KAAe,EAAiB;QACtC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,kCAAkC,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,WAAW;gBAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;YAClG,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAChF,MAAM,QAAQ,GAAG;gBAChB,OAAO,EAAE,CAAU;gBACnB,GAAG,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;gBACvB,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,KAAK;aACL,CAAC;YACF,MAAM,MAAM,GAAa,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC;gBACJ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC,IAAI;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAChG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,MAAM,KAAK,CAAC;YACb,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC;QACnB,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC;IAAA,CACD;CACD","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { acquireDurableFileMutationLockSync } from \"../durable-file-identity.ts\";\nimport { appendFileDurablySync } from \"../durable-file-io.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport type { SessionOwnerLease } from \"../session-owner-lease.ts\";\nimport { parseRunEvent, projectRun, type RunEvent, type RunProjection } from \"./events.ts\";\nimport { digestBytes, digestObject, readRegularFile, VerifiedRunError } from \"./storage.ts\";\n\ninterface RecordV2 {\n\treadonly version: 2;\n\treadonly seq: number;\n\treadonly generation: number;\n\treadonly previous: string;\n\treadonly event: RunEvent;\n\treadonly hash: string;\n}\nexport interface JournalSnapshot {\n\treadonly records: readonly RecordV2[];\n\treadonly state: RunProjection;\n\treadonly bytesDigest: string;\n}\nexport const journalPath = (runPath: string): string => join(runPath, \"journal.v2.jsonl\");\n\n/** Read-only: no implicit recovery, tail truncation, mode changes, or model calls. */\nexport function readRunJournal(runPath: string): JournalSnapshot | null {\n\tconst path = journalPath(runPath);\n\tif (!existsSync(path)) return null;\n\tconst bytes = readRegularFile(path, 8388608);\n\tif (!bytes.length || bytes.at(-1) !== 10) throw new VerifiedRunError(\"journal_truncated\");\n\tconst lines = new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes).slice(0, -1).split(\"\\n\");\n\tconst records: RecordV2[] = [];\n\tlet previous = \"0\".repeat(64);\n\tlet generation = 1;\n\tfor (const [index, line] of lines.entries()) {\n\t\tlet raw: unknown;\n\t\ttry {\n\t\t\traw = JSON.parse(line);\n\t\t} catch {\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t}\n\t\tif (typeof raw !== \"object\" || raw === null || !(\"event\" in raw)) throw new VerifiedRunError(\"integrity\");\n\t\tconst event = parseRunEvent(raw.event);\n\t\tif (event.kind === \"resumed\" || event.kind === \"writer_restarted\" || event.kind === \"tasks_retried\")\n\t\t\tgeneration += 1;\n\t\tconst material = { version: 2 as const, seq: index + 1, generation, previous, event };\n\t\tconst record = Object.freeze({ ...material, hash: digestObject(material) });\n\t\tif (canonicalJson(raw) !== canonicalJson(record)) throw new VerifiedRunError(\"integrity\");\n\t\trecords.push(record);\n\t\tprevious = record.hash;\n\t}\n\treturn {\n\t\trecords: Object.freeze(records),\n\t\tstate: projectRun(records.map((record) => record.event)),\n\t\tbytesDigest: digestBytes(bytes),\n\t};\n}\n\n/** v2 event store reuses the v1 durable append and mutation/owner locking primitives. */\nexport class VerifiedRunJournal {\n\tprivate head: JournalSnapshot | null;\n\tprivate poisoned = false;\n\tprivate readonly runPath: string;\n\tprivate readonly owner: SessionOwnerLease;\n\tprivate readonly persist: (path: string, bytes: Uint8Array) => void;\n\n\tconstructor(runPath: string, owner: SessionOwnerLease, persist = appendFileDurablySync) {\n\t\tthis.runPath = runPath;\n\t\tthis.owner = owner;\n\t\tthis.persist = persist;\n\t\tthis.head = readRunJournal(runPath);\n\t}\n\n\tget state(): RunProjection {\n\t\tif (!this.head) throw new VerifiedRunError(\"missing_run\");\n\t\treturn this.head.state;\n\t}\n\n\tappend(event: RunEvent): RunProjection {\n\t\tconst path = journalPath(this.runPath);\n\t\tif (this.poisoned || !this.owner.owns(path)) throw new VerifiedRunError(\"stale_owner\");\n\t\tconst lock = acquireDurableFileMutationLockSync(path);\n\t\ttry {\n\t\t\tconst current = readRunJournal(this.runPath);\n\t\t\tif (current?.bytesDigest !== this.head?.bytesDigest) throw new VerifiedRunError(\"stale_revision\");\n\t\t\tconst records = current?.records ?? [];\n\t\t\tconst candidate = projectRun([...records.map((record) => record.event), event]);\n\t\t\tconst material = {\n\t\t\t\tversion: 2 as const,\n\t\t\t\tseq: records.length + 1,\n\t\t\t\tgeneration: candidate.generation,\n\t\t\t\tprevious: records.at(-1)?.hash ?? \"0\".repeat(64),\n\t\t\t\tevent,\n\t\t\t};\n\t\t\tconst record: RecordV2 = { ...material, hash: digestObject(material) };\n\t\t\ttry {\n\t\t\t\tthis.persist(path, Buffer.from(`${canonicalJson(record)}\\n`));\n\t\t\t\tconst next = readRunJournal(this.runPath);\n\t\t\t\tif (!next || next.records.at(-1)?.hash !== record.hash) throw new VerifiedRunError(\"integrity\");\n\t\t\t\tthis.owner.refresh(true);\n\t\t\t\tthis.head = next;\n\t\t\t} catch (error) {\n\t\t\t\tthis.poisoned = true;\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\treturn this.state;\n\t\t} finally {\n\t\t\tlock.release();\n\t\t}\n\t}\n}\n"]}

package/dist/core/verified-run/namespace-identity.d.ts

@@ -0,0 +1,11 @@
+export interface NamespaceIdentity {
+    readonly pid: number;
+    readonly startTicks: string;
+    readonly namespace: string;
+    readonly bootId: string;
+}
+export declare function parseNamespaceIdentity(raw: unknown): NamespaceIdentity;
+export declare function captureNamespaceIdentity(pid: number): NamespaceIdentity;
+/** Read only. Never signal a PID that may have been reused by another process. */
+export declare function probeNamespace(identity: NamespaceIdentity): "alive" | "gone" | "unknown";
+//# sourceMappingURL=namespace-identity.d.ts.map

package/dist/core/verified-run/namespace-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace-identity.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/namespace-identity.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,iBAAiB,CAqBtE;AAcD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAevE;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAiBxF","sourcesContent":["import { readFileSync, readlinkSync } from \"node:fs\";\nimport { readRunClock } from \"./recovery-clock.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nexport interface NamespaceIdentity {\n\treadonly pid: number;\n\treadonly startTicks: string;\n\treadonly namespace: string;\n\treadonly bootId: string;\n}\n\nexport function parseNamespaceIdentity(raw: unknown): NamespaceIdentity {\n\tif (\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"pid\" in raw) ||\n\t\ttypeof raw.pid !== \"number\" ||\n\t\t!Number.isSafeInteger(raw.pid) ||\n\t\traw.pid <= 0 ||\n\t\t!(\"startTicks\" in raw) ||\n\t\ttypeof raw.startTicks !== \"string\" ||\n\t\t!/^\\d+$/.test(raw.startTicks) ||\n\t\traw.startTicks.length > 32 ||\n\t\t!(\"namespace\" in raw) ||\n\t\ttypeof raw.namespace !== \"string\" ||\n\t\t!/^pid:\\[\\d+\\]$/.test(raw.namespace) ||\n\t\t!(\"bootId\" in raw) ||\n\t\ttypeof raw.bootId !== \"string\" ||\n\t\t!/^[a-f0-9-]{36}$/.test(raw.bootId)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\treturn Object.freeze({ pid: raw.pid, startTicks: raw.startTicks, namespace: raw.namespace, bootId: raw.bootId });\n}\n\nfunction processStat(pid: number): { readonly startTicks: string; readonly state: string } {\n\tconst stat = readFileSync(`/proc/${pid}/stat`, \"utf8\");\n\tconst fields = stat\n\t\t.slice(stat.lastIndexOf(\")\") + 2)\n\t\t.trim()\n\t\t.split(/\\s+/);\n\tconst startTicks = fields[19];\n\tconst state = fields[0];\n\tif (!startTicks || !/^\\d+$/.test(startTicks) || !state) throw new VerifiedRunError(\"process_identity\");\n\treturn { startTicks, state };\n}\n\nexport function captureNamespaceIdentity(pid: number): NamespaceIdentity {\n\tif (!Number.isSafeInteger(pid) || pid <= 0) throw new VerifiedRunError(\"process_identity\");\n\tconst before = processStat(pid);\n\tconst status = readFileSync(`/proc/${pid}/status`, \"utf8\");\n\tconst namespacePids = status\n\t\t.match(/^NSpid:\\s+(.+)$/m)?.[1]\n\t\t?.trim()\n\t\t.split(/\\s+/);\n\tif (!namespacePids || namespacePids.length < 2 || namespacePids.at(-1) !== \"1\")\n\t\tthrow new VerifiedRunError(\"process_identity\");\n\tconst namespace = readlinkSync(`/proc/${pid}/ns/pid`);\n\tconst after = processStat(pid);\n\tif (before.startTicks !== after.startTicks || before.state === \"Z\" || after.state === \"Z\")\n\t\tthrow new VerifiedRunError(\"process_identity\");\n\treturn parseNamespaceIdentity({ pid, startTicks: before.startTicks, namespace, bootId: readRunClock().bootId });\n}\n\n/** Read only. Never signal a PID that may have been reused by another process. */\nexport function probeNamespace(identity: NamespaceIdentity): \"alive\" | \"gone\" | \"unknown\" {\n\ttry {\n\t\tif (readRunClock().bootId !== identity.bootId) return \"unknown\";\n\t} catch {\n\t\treturn \"unknown\";\n\t}\n\ttry {\n\t\tconst current = processStat(identity.pid);\n\t\tif (current.startTicks !== identity.startTicks) return \"gone\";\n\t\t// Linux finishes PID namespace teardown before its init becomes a zombie.\n\t\tif (current.state === \"Z\" || current.state === \"X\") return \"gone\";\n\t\treturn readlinkSync(`/proc/${identity.pid}/ns/pid`) === identity.namespace ? \"alive\" : \"unknown\";\n\t} catch (error) {\n\t\tif (error instanceof Error && \"code\" in error && (error.code === \"ENOENT\" || error.code === \"ESRCH\"))\n\t\t\treturn \"gone\";\n\t\treturn \"unknown\";\n\t}\n}\n"]}

package/dist/core/verified-run/namespace-identity.js

@@ -0,0 +1,77 @@
+import { readFileSync, readlinkSync } from "node:fs";
+import { readRunClock } from "./recovery-clock.js";
+import { VerifiedRunError } from "./storage.js";
+export function parseNamespaceIdentity(raw) {
+    if (typeof raw !== "object" ||
+        raw === null ||
+        !("pid" in raw) ||
+        typeof raw.pid !== "number" ||
+        !Number.isSafeInteger(raw.pid) ||
+        raw.pid <= 0 ||
+        !("startTicks" in raw) ||
+        typeof raw.startTicks !== "string" ||
+        !/^\d+$/.test(raw.startTicks) ||
+        raw.startTicks.length > 32 ||
+        !("namespace" in raw) ||
+        typeof raw.namespace !== "string" ||
+        !/^pid:\[\d+\]$/.test(raw.namespace) ||
+        !("bootId" in raw) ||
+        typeof raw.bootId !== "string" ||
+        !/^[a-f0-9-]{36}$/.test(raw.bootId))
+        throw new VerifiedRunError("integrity");
+    return Object.freeze({ pid: raw.pid, startTicks: raw.startTicks, namespace: raw.namespace, bootId: raw.bootId });
+}
+function processStat(pid) {
+    const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+    const fields = stat
+        .slice(stat.lastIndexOf(")") + 2)
+        .trim()
+        .split(/\s+/);
+    const startTicks = fields[19];
+    const state = fields[0];
+    if (!startTicks || !/^\d+$/.test(startTicks) || !state)
+        throw new VerifiedRunError("process_identity");
+    return { startTicks, state };
+}
+export function captureNamespaceIdentity(pid) {
+    if (!Number.isSafeInteger(pid) || pid <= 0)
+        throw new VerifiedRunError("process_identity");
+    const before = processStat(pid);
+    const status = readFileSync(`/proc/${pid}/status`, "utf8");
+    const namespacePids = status
+        .match(/^NSpid:\s+(.+)$/m)?.[1]
+        ?.trim()
+        .split(/\s+/);
+    if (!namespacePids || namespacePids.length < 2 || namespacePids.at(-1) !== "1")
+        throw new VerifiedRunError("process_identity");
+    const namespace = readlinkSync(`/proc/${pid}/ns/pid`);
+    const after = processStat(pid);
+    if (before.startTicks !== after.startTicks || before.state === "Z" || after.state === "Z")
+        throw new VerifiedRunError("process_identity");
+    return parseNamespaceIdentity({ pid, startTicks: before.startTicks, namespace, bootId: readRunClock().bootId });
+}
+/** Read only. Never signal a PID that may have been reused by another process. */
+export function probeNamespace(identity) {
+    try {
+        if (readRunClock().bootId !== identity.bootId)
+            return "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+    try {
+        const current = processStat(identity.pid);
+        if (current.startTicks !== identity.startTicks)
+            return "gone";
+        // Linux finishes PID namespace teardown before its init becomes a zombie.
+        if (current.state === "Z" || current.state === "X")
+            return "gone";
+        return readlinkSync(`/proc/${identity.pid}/ns/pid`) === identity.namespace ? "alive" : "unknown";
+    }
+    catch (error) {
+        if (error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ESRCH"))
+            return "gone";
+        return "unknown";
+    }
+}
+//# sourceMappingURL=namespace-identity.js.map

package/dist/core/verified-run/namespace-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace-identity.js","sourceRoot":"","sources":["../../../src/core/verified-run/namespace-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAShD,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAqB;IACvE,IACC,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;QACf,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9B,GAAG,CAAC,GAAG,IAAI,CAAC;QACZ,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC;QACtB,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE;QAC1B,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC;QACrB,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QACpC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;QAClB,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAC9B,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QAEnC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAAA,CACjH;AAED,SAAS,WAAW,CAAC,GAAW,EAA2D;IAC1F,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI;SACjB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SAChC,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACvG,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAAA,CAC7B;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAW,EAAqB;IACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,MAAM;SAC1B,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,EAAE,IAAI,EAAE;SACP,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAC7E,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG;QACxF,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAChD,OAAO,sBAAsB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;AAAA,CAChH;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,QAA2B,EAAgC;IACzF,IAAI,CAAC;QACJ,IAAI,YAAY,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC;QAC9D,0EAA0E;QAC1E,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC;QAClE,OAAO,YAAY,CAAC,SAAS,QAAQ,CAAC,GAAG,SAAS,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;YACnG,OAAO,MAAM,CAAC;QACf,OAAO,SAAS,CAAC;IAClB,CAAC;AAAA,CACD","sourcesContent":["import { readFileSync, readlinkSync } from \"node:fs\";\nimport { readRunClock } from \"./recovery-clock.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nexport interface NamespaceIdentity {\n\treadonly pid: number;\n\treadonly startTicks: string;\n\treadonly namespace: string;\n\treadonly bootId: string;\n}\n\nexport function parseNamespaceIdentity(raw: unknown): NamespaceIdentity {\n\tif (\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"pid\" in raw) ||\n\t\ttypeof raw.pid !== \"number\" ||\n\t\t!Number.isSafeInteger(raw.pid) ||\n\t\traw.pid <= 0 ||\n\t\t!(\"startTicks\" in raw) ||\n\t\ttypeof raw.startTicks !== \"string\" ||\n\t\t!/^\\d+$/.test(raw.startTicks) ||\n\t\traw.startTicks.length > 32 ||\n\t\t!(\"namespace\" in raw) ||\n\t\ttypeof raw.namespace !== \"string\" ||\n\t\t!/^pid:\\[\\d+\\]$/.test(raw.namespace) ||\n\t\t!(\"bootId\" in raw) ||\n\t\ttypeof raw.bootId !== \"string\" ||\n\t\t!/^[a-f0-9-]{36}$/.test(raw.bootId)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\treturn Object.freeze({ pid: raw.pid, startTicks: raw.startTicks, namespace: raw.namespace, bootId: raw.bootId });\n}\n\nfunction processStat(pid: number): { readonly startTicks: string; readonly state: string } {\n\tconst stat = readFileSync(`/proc/${pid}/stat`, \"utf8\");\n\tconst fields = stat\n\t\t.slice(stat.lastIndexOf(\")\") + 2)\n\t\t.trim()\n\t\t.split(/\\s+/);\n\tconst startTicks = fields[19];\n\tconst state = fields[0];\n\tif (!startTicks || !/^\\d+$/.test(startTicks) || !state) throw new VerifiedRunError(\"process_identity\");\n\treturn { startTicks, state };\n}\n\nexport function captureNamespaceIdentity(pid: number): NamespaceIdentity {\n\tif (!Number.isSafeInteger(pid) || pid <= 0) throw new VerifiedRunError(\"process_identity\");\n\tconst before = processStat(pid);\n\tconst status = readFileSync(`/proc/${pid}/status`, \"utf8\");\n\tconst namespacePids = status\n\t\t.match(/^NSpid:\\s+(.+)$/m)?.[1]\n\t\t?.trim()\n\t\t.split(/\\s+/);\n\tif (!namespacePids || namespacePids.length < 2 || namespacePids.at(-1) !== \"1\")\n\t\tthrow new VerifiedRunError(\"process_identity\");\n\tconst namespace = readlinkSync(`/proc/${pid}/ns/pid`);\n\tconst after = processStat(pid);\n\tif (before.startTicks !== after.startTicks || before.state === \"Z\" || after.state === \"Z\")\n\t\tthrow new VerifiedRunError(\"process_identity\");\n\treturn parseNamespaceIdentity({ pid, startTicks: before.startTicks, namespace, bootId: readRunClock().bootId });\n}\n\n/** Read only. Never signal a PID that may have been reused by another process. */\nexport function probeNamespace(identity: NamespaceIdentity): \"alive\" | \"gone\" | \"unknown\" {\n\ttry {\n\t\tif (readRunClock().bootId !== identity.bootId) return \"unknown\";\n\t} catch {\n\t\treturn \"unknown\";\n\t}\n\ttry {\n\t\tconst current = processStat(identity.pid);\n\t\tif (current.startTicks !== identity.startTicks) return \"gone\";\n\t\t// Linux finishes PID namespace teardown before its init becomes a zombie.\n\t\tif (current.state === \"Z\" || current.state === \"X\") return \"gone\";\n\t\treturn readlinkSync(`/proc/${identity.pid}/ns/pid`) === identity.namespace ? \"alive\" : \"unknown\";\n\t} catch (error) {\n\t\tif (error instanceof Error && \"code\" in error && (error.code === \"ENOENT\" || error.code === \"ESRCH\"))\n\t\t\treturn \"gone\";\n\t\treturn \"unknown\";\n\t}\n}\n"]}