open-multi-agent-kit 1.0.0 → 1.2.2

package/dist/core/verified-run/evidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/evidence.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,KAAK,iBAAiB,EAAiB,MAAM,gBAAgB,CAAC;AAEvE,OAAO,EAAE,KAAK,gBAAgB,EAA2C,MAAM,uBAAuB,CAAC;AACvG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAa9D,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,IAAI,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAGrD;AAQD,wBAAgB,gBAAgB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,EACrB,QAAQ,EAAE;IACT,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C,GACC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAuBzD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,GAAG,mBAAmB,CAoEnH","sourcesContent":["import { createHmac, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport type { RunContract } from \"omk-protocol\";\nimport type { EvidenceReceipt } from \"../../types/evidence.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport { type CandidateManifest, loadCandidate } from \"./candidate.ts\";\nimport { readCheckReceipts } from \"./check-receipt.ts\";\nimport { type CheckObservation, closesRunClaims, parseCheckObservations } from \"./evidence-binding.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError } from \"./storage.ts\";\n\nexport type { CheckObservation } from \"./evidence-binding.ts\";\n\ninterface Attestation {\n\treadonly version: 1 | 2 | 3;\n\treadonly runId: string;\n\treadonly generation: number;\n\treadonly contractDigest: string;\n\treadonly candidateDigest: string;\n\treadonly environmentDigest: string;\n\treadonly verifierDigest: string;\n\treadonly checks: readonly CheckObservation[];\n\treadonly verified: boolean;\n}\nexport interface VerifiedRunEvidence {\n\treadonly candidateDigest: string;\n\treadonly manifest: CandidateManifest;\n\treadonly receiptDigest: string;\n\treadonly verified: boolean;\n\treadonly checks: readonly CheckObservation[];\n\treadonly receiptFormat: \"v3\" | \"legacy\";\n\treadonly receipts: readonly EvidenceReceipt[];\n}\n\nexport function createRunIssuer(runPath: string): void {\n\t// Recovery must never replace a missing key and re-sign old evidence.\n\tpublishBytes(join(runPath, \"issuer.key\"), randomBytes(32));\n}\n\nfunction tag(runPath: string, receipt: unknown): Buffer {\n\tconst key = readRegularFile(join(runPath, \"issuer.key\"), 32);\n\tif (key.length !== 32) throw new VerifiedRunError(\"integrity\");\n\treturn createHmac(\"sha256\", key).update(\"omk.verified-run.attestation.v1\\0\").update(canonicalJson(receipt)).digest();\n}\n\nexport function issueRunEvidence(\n\trunPath: string,\n\tcontract: RunContract,\n\tmaterial: {\n\t\treadonly generation: number;\n\t\treadonly candidateDigest: string;\n\t\treadonly environmentDigest: string;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): { readonly digest: string; readonly verified: boolean } {\n\tconst checks = parseCheckObservations(material.checks, true);\n\tconst candidate = loadCandidate(runPath, material.candidateDigest, contract.budget);\n\treadCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks });\n\tconst receipt: Attestation = {\n\t\tversion: 3,\n\t\trunId: contract.runId,\n\t\tgeneration: material.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest: material.candidateDigest,\n\t\tenvironmentDigest: material.environmentDigest,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified: closesRunClaims(contract, {\n\t\t\tcandidate: material.candidateDigest,\n\t\t\tenvironment: material.environmentDigest,\n\t\t\tchecks,\n\t\t}),\n\t};\n\tconst envelope = { receipt, authenticationTag: tag(runPath, receipt).toString(\"hex\") };\n\tconst digest = digestObject(envelope);\n\tpublishObject(join(runPath, \"attestations\", `${digest}.json`), envelope);\n\treturn { digest, verified: receipt.verified };\n}\n\nexport function readRunEvidence(runPath: string, journal: JournalSnapshot, environment: string): VerifiedRunEvidence {\n\tconst first = journal.records[0]?.event;\n\tconst { candidateDigest, receiptDigest } = journal.state;\n\tif (first?.kind !== \"created\" || !candidateDigest || !receiptDigest) throw new VerifiedRunError(\"evidence_missing\");\n\tconst raw = readJson(join(runPath, \"attestations\", `${receiptDigest}.json`));\n\tif (\n\t\tdigestObject(raw) !== receiptDigest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"receipt\" in raw) ||\n\t\t!(\"authenticationTag\" in raw) ||\n\t\ttypeof raw.authenticationTag !== \"string\" ||\n\t\t!/^[a-f0-9]{64}$/.test(raw.authenticationTag) ||\n\t\t!timingSafeEqual(tag(runPath, raw.receipt), Buffer.from(raw.authenticationTag, \"hex\"))\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst receipt = raw.receipt;\n\tif (\n\t\ttypeof receipt !== \"object\" ||\n\t\treceipt === null ||\n\t\t!(\"checks\" in receipt) ||\n\t\t!(\"version\" in receipt) ||\n\t\t(receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst checks = parseCheckObservations(receipt.checks, receipt.version !== 1);\n\tconst contract = first.contract;\n\tconst dispatches = journal.records.flatMap(({ event, generation }) =>\n\t\tgeneration === journal.state.generation && event.kind === \"dispatch\" && event.role === \"verifier\" ? [event] : [],\n\t);\n\tif (\n\t\tchecks.length !== contract.checks.length ||\n\t\tchecks.length !== dispatches.length ||\n\t\tnew Set(checks.map((check) => check.claimId)).size !== checks.length ||\n\t\tchecks.some(\n\t\t\t(check) =>\n\t\t\t\t!dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId),\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst verified = closesRunClaims(contract, { candidate: candidateDigest, environment, checks });\n\tconst expected: Attestation = {\n\t\tversion: receipt.version,\n\t\trunId: contract.runId,\n\t\tgeneration: journal.state.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest,\n\t\tenvironmentDigest: environment,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified,\n\t};\n\tif (canonicalJson(receipt) !== canonicalJson(expected) || verified !== (journal.state.verification === \"verified\"))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst candidate = loadCandidate(runPath, candidateDigest, contract.budget);\n\tconst receipts =\n\t\treceipt.version !== 1\n\t\t\t? readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks })\n\t\t\t: Object.freeze([]);\n\treturn Object.freeze({\n\t\tcandidateDigest,\n\t\tmanifest: candidate.manifest,\n\t\treceiptDigest,\n\t\tverified,\n\t\tchecks,\n\t\treceiptFormat: receipt.version !== 1 ? \"v3\" : \"legacy\",\n\t\treceipts,\n\t});\n}\n"]}
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/evidence.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,KAAK,iBAAiB,EAAiB,MAAM,gBAAgB,CAAC;AAEvE,OAAO,EAAE,KAAK,gBAAgB,EAA2C,MAAM,uBAAuB,CAAC;AACvG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAa9D,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,IAAI,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACnC;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAGrD;AAQD,wBAAgB,gBAAgB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,EACrB,QAAQ,EAAE;IACT,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C,GACC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAuBzD;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;IAC5D,QAAQ,CAAC,YAAY,EAAE,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;IAC1D,QAAQ,CAAC,6BAA6B,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;IAC7F,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC9C;AAED,2FAA2F;AAC3F,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,eAAe,EACxB,kBAAkB,CAAC,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAA;CAAE,GAC1E,YAAY,CAqCd;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAgFpH","sourcesContent":["import { createHmac, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport type { RunContract } from \"omk-protocol\";\nimport type { EvidenceReceipt } from \"../../types/evidence.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport { type CandidateManifest, loadCandidate } from \"./candidate.ts\";\nimport { readCheckReceipts } from \"./check-receipt.ts\";\nimport { type CheckObservation, closesRunClaims, parseCheckObservations } from \"./evidence-binding.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError } from \"./storage.ts\";\n\nexport type { CheckObservation } from \"./evidence-binding.ts\";\n\ninterface Attestation {\n\treadonly version: 1 | 2 | 3;\n\treadonly runId: string;\n\treadonly generation: number;\n\treadonly contractDigest: string;\n\treadonly candidateDigest: string;\n\treadonly environmentDigest: string;\n\treadonly verifierDigest: string;\n\treadonly checks: readonly CheckObservation[];\n\treadonly verified: boolean;\n}\nexport interface VerifiedRunEvidence {\n\treadonly candidateDigest: string;\n\treadonly manifest: CandidateManifest;\n\treadonly receiptDigest: string;\n\treadonly verified: boolean;\n\treadonly checks: readonly CheckObservation[];\n\treadonly receiptFormat: \"v3\" | \"legacy\";\n\treadonly receipts: readonly EvidenceReceipt[];\n\treadonly environmentDigest: string;\n}\n\nexport function createRunIssuer(runPath: string): void {\n\t// Recovery must never replace a missing key and re-sign old evidence.\n\tpublishBytes(join(runPath, \"issuer.key\"), randomBytes(32));\n}\n\nfunction tag(runPath: string, receipt: unknown): Buffer {\n\tconst key = readRegularFile(join(runPath, \"issuer.key\"), 32);\n\tif (key.length !== 32) throw new VerifiedRunError(\"integrity\");\n\treturn createHmac(\"sha256\", key).update(\"omk.verified-run.attestation.v1\\0\").update(canonicalJson(receipt)).digest();\n}\n\nexport function issueRunEvidence(\n\trunPath: string,\n\tcontract: RunContract,\n\tmaterial: {\n\t\treadonly generation: number;\n\t\treadonly candidateDigest: string;\n\t\treadonly environmentDigest: string;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): { readonly digest: string; readonly verified: boolean } {\n\tconst checks = parseCheckObservations(material.checks, true);\n\tconst candidate = loadCandidate(runPath, material.candidateDigest, contract.budget);\n\treadCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks });\n\tconst receipt: Attestation = {\n\t\tversion: 3,\n\t\trunId: contract.runId,\n\t\tgeneration: material.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest: material.candidateDigest,\n\t\tenvironmentDigest: material.environmentDigest,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified: closesRunClaims(contract, {\n\t\t\tcandidate: material.candidateDigest,\n\t\t\tenvironment: material.environmentDigest,\n\t\t\tchecks,\n\t\t}),\n\t};\n\tconst envelope = { receipt, authenticationTag: tag(runPath, receipt).toString(\"hex\") };\n\tconst digest = digestObject(envelope);\n\tpublishObject(join(runPath, \"attestations\", `${digest}.json`), envelope);\n\treturn { digest, verified: receipt.verified };\n}\n\nexport interface EvidenceRead {\n\treadonly authenticity: \"valid\" | \"invalid\" | \"unverifiable\";\n\treadonly verification: \"passed\" | \"failed\" | \"incomplete\";\n\treadonly currentEnvironmentEligibility: \"matching\" | \"different\" | \"unsupported\" | \"unknown\";\n\treadonly evidence: VerifiedRunEvidence | null;\n}\n\n/** Historical authenticity is separate from whether this machine can rerun the receipt. */\nexport function classifyEvidenceRead(\n\trunPath: string,\n\tjournal: JournalSnapshot,\n\tcurrentEnvironment?: string | { readonly status: \"unsupported\" | \"unknown\" },\n): EvidenceRead {\n\ttry {\n\t\tconst evidence = readRunEvidence(runPath, journal);\n\t\tconst currentEnvironmentEligibility =\n\t\t\ttypeof currentEnvironment === \"string\"\n\t\t\t\t? evidence.environmentDigest === currentEnvironment\n\t\t\t\t\t? \"matching\"\n\t\t\t\t\t: \"different\"\n\t\t\t\t: (currentEnvironment?.status ?? \"unknown\");\n\t\treturn {\n\t\t\tauthenticity: \"valid\",\n\t\t\tverification: evidence.verified\n\t\t\t\t? \"passed\"\n\t\t\t\t: evidence.checks.some((check) => check.exitCode === null)\n\t\t\t\t\t? \"incomplete\"\n\t\t\t\t\t: \"failed\",\n\t\t\tcurrentEnvironmentEligibility,\n\t\t\tevidence,\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof VerifiedRunError) {\n\t\t\treturn {\n\t\t\t\tauthenticity: error.code === \"evidence_missing\" ? \"unverifiable\" : \"invalid\",\n\t\t\t\tverification: \"incomplete\",\n\t\t\t\tcurrentEnvironmentEligibility: \"unknown\",\n\t\t\t\tevidence: null,\n\t\t\t};\n\t\t}\n\t\tif (error instanceof Error && \"code\" in error && [\"ENOENT\", \"EACCES\", \"EIO\"].includes(String(error.code)))\n\t\t\treturn {\n\t\t\t\tauthenticity: \"unverifiable\",\n\t\t\t\tverification: \"incomplete\",\n\t\t\t\tcurrentEnvironmentEligibility: \"unknown\",\n\t\t\t\tevidence: null,\n\t\t\t};\n\t\tthrow error;\n\t}\n}\n\nexport function readRunEvidence(runPath: string, journal: JournalSnapshot, environment?: string): VerifiedRunEvidence {\n\tconst first = journal.records[0]?.event;\n\tconst { candidateDigest, receiptDigest } = journal.state;\n\tif (first?.kind !== \"created\" || !candidateDigest || !receiptDigest) throw new VerifiedRunError(\"evidence_missing\");\n\tconst raw = readJson(join(runPath, \"attestations\", `${receiptDigest}.json`));\n\tif (\n\t\tdigestObject(raw) !== receiptDigest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"receipt\" in raw) ||\n\t\t!(\"authenticationTag\" in raw) ||\n\t\ttypeof raw.authenticationTag !== \"string\" ||\n\t\t!/^[a-f0-9]{64}$/.test(raw.authenticationTag) ||\n\t\t!timingSafeEqual(tag(runPath, raw.receipt), Buffer.from(raw.authenticationTag, \"hex\"))\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst receipt = raw.receipt;\n\tif (\n\t\ttypeof receipt !== \"object\" ||\n\t\treceipt === null ||\n\t\t!(\"checks\" in receipt) ||\n\t\t!(\"version\" in receipt) ||\n\t\t(receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tif (\n\t\t!(\"environmentDigest\" in receipt) ||\n\t\ttypeof receipt.environmentDigest !== \"string\" ||\n\t\t!/^[a-f0-9]{64}$/.test(receipt.environmentDigest)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst storedEnvironment = receipt.environmentDigest;\n\tif (journal.state.environmentDigest !== null && journal.state.environmentDigest !== storedEnvironment)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tif (environment !== undefined && environment !== storedEnvironment)\n\t\tthrow new VerifiedRunError(\"environment_mismatch\");\n\tconst checks = parseCheckObservations(receipt.checks, receipt.version !== 1);\n\tconst contract = first.contract;\n\tconst dispatches = journal.records.flatMap(({ event, generation }) =>\n\t\tgeneration === journal.state.generation && event.kind === \"dispatch\" && event.role === \"verifier\" ? [event] : [],\n\t);\n\tif (\n\t\tchecks.length !== contract.checks.length ||\n\t\tchecks.length !== dispatches.length ||\n\t\tnew Set(checks.map((check) => check.claimId)).size !== checks.length ||\n\t\tchecks.some(\n\t\t\t(check) =>\n\t\t\t\t!dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId),\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst verified = closesRunClaims(contract, { candidate: candidateDigest, environment: storedEnvironment, checks });\n\tconst expected: Attestation = {\n\t\tversion: receipt.version,\n\t\trunId: contract.runId,\n\t\tgeneration: journal.state.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest,\n\t\tenvironmentDigest: storedEnvironment,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified,\n\t};\n\tif (canonicalJson(receipt) !== canonicalJson(expected) || verified !== (journal.state.verification === \"verified\"))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst candidate = loadCandidate(runPath, candidateDigest, contract.budget);\n\tconst receipts =\n\t\treceipt.version !== 1\n\t\t\t? readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks })\n\t\t\t: Object.freeze([]);\n\treturn Object.freeze({\n\t\tcandidateDigest,\n\t\tmanifest: candidate.manifest,\n\t\treceiptDigest,\n\t\tverified,\n\t\tchecks,\n\t\treceiptFormat: receipt.version !== 1 ? \"v3\" : \"legacy\",\n\t\treceipts,\n\t\tenvironmentDigest: storedEnvironment,\n\t});\n}\n"]}

package/dist/core/verified-run/evidence.js

@@ -39,6 +39,45 @@ export function issueRunEvidence(runPath, contract, material) {
     publishObject(join(runPath, "attestations", `${digest}.json`), envelope);
     return { digest, verified: receipt.verified };
 }
+/** Historical authenticity is separate from whether this machine can rerun the receipt. */
+export function classifyEvidenceRead(runPath, journal, currentEnvironment) {
+    try {
+        const evidence = readRunEvidence(runPath, journal);
+        const currentEnvironmentEligibility = typeof currentEnvironment === "string"
+            ? evidence.environmentDigest === currentEnvironment
+                ? "matching"
+                : "different"
+            : (currentEnvironment?.status ?? "unknown");
+        return {
+            authenticity: "valid",
+            verification: evidence.verified
+                ? "passed"
+                : evidence.checks.some((check) => check.exitCode === null)
+                    ? "incomplete"
+                    : "failed",
+            currentEnvironmentEligibility,
+            evidence,
+        };
+    }
+    catch (error) {
+        if (error instanceof VerifiedRunError) {
+            return {
+                authenticity: error.code === "evidence_missing" ? "unverifiable" : "invalid",
+                verification: "incomplete",
+                currentEnvironmentEligibility: "unknown",
+                evidence: null,
+            };
+        }
+        if (error instanceof Error && "code" in error && ["ENOENT", "EACCES", "EIO"].includes(String(error.code)))
+            return {
+                authenticity: "unverifiable",
+                verification: "incomplete",
+                currentEnvironmentEligibility: "unknown",
+                evidence: null,
+            };
+        throw error;
+    }
+}
 export function readRunEvidence(runPath, journal, environment) {
     const first = journal.records[0]?.event;
     const { candidateDigest, receiptDigest } = journal.state;
@@ -61,6 +100,15 @@ export function readRunEvidence(runPath, journal, environment) {
         !("version" in receipt) ||
         (receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3))
         throw new VerifiedRunError("integrity");
+    if (!("environmentDigest" in receipt) ||
+        typeof receipt.environmentDigest !== "string" ||
+        !/^[a-f0-9]{64}$/.test(receipt.environmentDigest))
+        throw new VerifiedRunError("integrity");
+    const storedEnvironment = receipt.environmentDigest;
+    if (journal.state.environmentDigest !== null && journal.state.environmentDigest !== storedEnvironment)
+        throw new VerifiedRunError("integrity");
+    if (environment !== undefined && environment !== storedEnvironment)
+        throw new VerifiedRunError("environment_mismatch");
     const checks = parseCheckObservations(receipt.checks, receipt.version !== 1);
     const contract = first.contract;
     const dispatches = journal.records.flatMap(({ event, generation }) => generation === journal.state.generation && event.kind === "dispatch" && event.role === "verifier" ? [event] : []);
@@ -69,14 +117,14 @@ export function readRunEvidence(runPath, journal, environment) {
         new Set(checks.map((check) => check.claimId)).size !== checks.length ||
         checks.some((check) => !dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId)))
         throw new VerifiedRunError("integrity");
-    const verified = closesRunClaims(contract, { candidate: candidateDigest, environment, checks });
+    const verified = closesRunClaims(contract, { candidate: candidateDigest, environment: storedEnvironment, checks });
     const expected = {
         version: receipt.version,
         runId: contract.runId,
         generation: journal.state.generation,
         contractDigest: digestObject(contract),
         candidateDigest,
-        environmentDigest: environment,
+        environmentDigest: storedEnvironment,
         verifierDigest: digestObject(contract.checks),
         checks,
         verified,
@@ -95,6 +143,7 @@ export function readRunEvidence(runPath, journal, environment) {
         checks,
         receiptFormat: receipt.version !== 1 ? "v3" : "legacy",
         receipts,
+        environmentDigest: storedEnvironment,
     });
 }
 //# sourceMappingURL=evidence.js.map

package/dist/core/verified-run/evidence.js.map

@@ -1 +1 @@
-{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/core/verified-run/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAA0B,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAyB,eAAe,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEvG,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAyBtH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAQ;IACtD,sEAAsE;IACtE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AAAA,CAC3D;AAED,SAAS,GAAG,CAAC,OAAe,EAAE,OAAgB,EAAU;IACvD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAAA,CACrH;AAED,MAAM,UAAU,gBAAgB,CAC/B,OAAe,EACf,QAAqB,EACrB,QAKC,EACyD;IAC1D,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpF,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAgB;QAC5B,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC;QACtC,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,MAAM;QACN,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;YACnC,SAAS,EAAE,QAAQ,CAAC,eAAe;YACnC,WAAW,EAAE,QAAQ,CAAC,iBAAiB;YACvC,MAAM;SACN,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AAAA,CAC9C;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,OAAwB,EAAE,WAAmB,EAAuB;IACpH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACxC,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IACzD,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,eAAe,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACpH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC;IAC7E,IACC,YAAY,CAAC,GAAG,CAAC,KAAK,aAAa;QACnC,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;QACnB,CAAC,CAAC,mBAAmB,IAAI,GAAG,CAAC;QAC7B,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;QACzC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7C,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAEtF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IACC,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC;QACtB,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;QACvB,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC;QAEzE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CACpE,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAChH,CAAC;IACF,IACC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM;QACxC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QACnC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QACpE,MAAM,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,CACT,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CACxG;QAED,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAgB;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;QACpC,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC;QACtC,eAAe;QACf,iBAAiB,EAAE,WAAW;QAC9B,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,MAAM;QACN,QAAQ;KACR,CAAC;IACF,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC;QACjH,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,QAAQ,GACb,OAAO,CAAC,OAAO,KAAK,CAAC;QACpB,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAChF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,eAAe;QACf,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,aAAa;QACb,QAAQ;QACR,MAAM;QACN,aAAa,EAAE,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;QACtD,QAAQ;KACR,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { createHmac, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport type { RunContract } from \"omk-protocol\";\nimport type { EvidenceReceipt } from \"../../types/evidence.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport { type CandidateManifest, loadCandidate } from \"./candidate.ts\";\nimport { readCheckReceipts } from \"./check-receipt.ts\";\nimport { type CheckObservation, closesRunClaims, parseCheckObservations } from \"./evidence-binding.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError } from \"./storage.ts\";\n\nexport type { CheckObservation } from \"./evidence-binding.ts\";\n\ninterface Attestation {\n\treadonly version: 1 | 2 | 3;\n\treadonly runId: string;\n\treadonly generation: number;\n\treadonly contractDigest: string;\n\treadonly candidateDigest: string;\n\treadonly environmentDigest: string;\n\treadonly verifierDigest: string;\n\treadonly checks: readonly CheckObservation[];\n\treadonly verified: boolean;\n}\nexport interface VerifiedRunEvidence {\n\treadonly candidateDigest: string;\n\treadonly manifest: CandidateManifest;\n\treadonly receiptDigest: string;\n\treadonly verified: boolean;\n\treadonly checks: readonly CheckObservation[];\n\treadonly receiptFormat: \"v3\" | \"legacy\";\n\treadonly receipts: readonly EvidenceReceipt[];\n}\n\nexport function createRunIssuer(runPath: string): void {\n\t// Recovery must never replace a missing key and re-sign old evidence.\n\tpublishBytes(join(runPath, \"issuer.key\"), randomBytes(32));\n}\n\nfunction tag(runPath: string, receipt: unknown): Buffer {\n\tconst key = readRegularFile(join(runPath, \"issuer.key\"), 32);\n\tif (key.length !== 32) throw new VerifiedRunError(\"integrity\");\n\treturn createHmac(\"sha256\", key).update(\"omk.verified-run.attestation.v1\\0\").update(canonicalJson(receipt)).digest();\n}\n\nexport function issueRunEvidence(\n\trunPath: string,\n\tcontract: RunContract,\n\tmaterial: {\n\t\treadonly generation: number;\n\t\treadonly candidateDigest: string;\n\t\treadonly environmentDigest: string;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): { readonly digest: string; readonly verified: boolean } {\n\tconst checks = parseCheckObservations(material.checks, true);\n\tconst candidate = loadCandidate(runPath, material.candidateDigest, contract.budget);\n\treadCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks });\n\tconst receipt: Attestation = {\n\t\tversion: 3,\n\t\trunId: contract.runId,\n\t\tgeneration: material.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest: material.candidateDigest,\n\t\tenvironmentDigest: material.environmentDigest,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified: closesRunClaims(contract, {\n\t\t\tcandidate: material.candidateDigest,\n\t\t\tenvironment: material.environmentDigest,\n\t\t\tchecks,\n\t\t}),\n\t};\n\tconst envelope = { receipt, authenticationTag: tag(runPath, receipt).toString(\"hex\") };\n\tconst digest = digestObject(envelope);\n\tpublishObject(join(runPath, \"attestations\", `${digest}.json`), envelope);\n\treturn { digest, verified: receipt.verified };\n}\n\nexport function readRunEvidence(runPath: string, journal: JournalSnapshot, environment: string): VerifiedRunEvidence {\n\tconst first = journal.records[0]?.event;\n\tconst { candidateDigest, receiptDigest } = journal.state;\n\tif (first?.kind !== \"created\" || !candidateDigest || !receiptDigest) throw new VerifiedRunError(\"evidence_missing\");\n\tconst raw = readJson(join(runPath, \"attestations\", `${receiptDigest}.json`));\n\tif (\n\t\tdigestObject(raw) !== receiptDigest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"receipt\" in raw) ||\n\t\t!(\"authenticationTag\" in raw) ||\n\t\ttypeof raw.authenticationTag !== \"string\" ||\n\t\t!/^[a-f0-9]{64}$/.test(raw.authenticationTag) ||\n\t\t!timingSafeEqual(tag(runPath, raw.receipt), Buffer.from(raw.authenticationTag, \"hex\"))\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst receipt = raw.receipt;\n\tif (\n\t\ttypeof receipt !== \"object\" ||\n\t\treceipt === null ||\n\t\t!(\"checks\" in receipt) ||\n\t\t!(\"version\" in receipt) ||\n\t\t(receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst checks = parseCheckObservations(receipt.checks, receipt.version !== 1);\n\tconst contract = first.contract;\n\tconst dispatches = journal.records.flatMap(({ event, generation }) =>\n\t\tgeneration === journal.state.generation && event.kind === \"dispatch\" && event.role === \"verifier\" ? [event] : [],\n\t);\n\tif (\n\t\tchecks.length !== contract.checks.length ||\n\t\tchecks.length !== dispatches.length ||\n\t\tnew Set(checks.map((check) => check.claimId)).size !== checks.length ||\n\t\tchecks.some(\n\t\t\t(check) =>\n\t\t\t\t!dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId),\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst verified = closesRunClaims(contract, { candidate: candidateDigest, environment, checks });\n\tconst expected: Attestation = {\n\t\tversion: receipt.version,\n\t\trunId: contract.runId,\n\t\tgeneration: journal.state.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest,\n\t\tenvironmentDigest: environment,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified,\n\t};\n\tif (canonicalJson(receipt) !== canonicalJson(expected) || verified !== (journal.state.verification === \"verified\"))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst candidate = loadCandidate(runPath, candidateDigest, contract.budget);\n\tconst receipts =\n\t\treceipt.version !== 1\n\t\t\t? readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks })\n\t\t\t: Object.freeze([]);\n\treturn Object.freeze({\n\t\tcandidateDigest,\n\t\tmanifest: candidate.manifest,\n\t\treceiptDigest,\n\t\tverified,\n\t\tchecks,\n\t\treceiptFormat: receipt.version !== 1 ? \"v3\" : \"legacy\",\n\t\treceipts,\n\t});\n}\n"]}
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/core/verified-run/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAA0B,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAyB,eAAe,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEvG,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AA0BtH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAQ;IACtD,sEAAsE;IACtE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AAAA,CAC3D;AAED,SAAS,GAAG,CAAC,OAAe,EAAE,OAAgB,EAAU;IACvD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAAA,CACrH;AAED,MAAM,UAAU,gBAAgB,CAC/B,OAAe,EACf,QAAqB,EACrB,QAKC,EACyD;IAC1D,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpF,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAgB;QAC5B,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC;QACtC,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,MAAM;QACN,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;YACnC,SAAS,EAAE,QAAQ,CAAC,eAAe;YACnC,WAAW,EAAE,QAAQ,CAAC,iBAAiB;YACvC,MAAM;SACN,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AAAA,CAC9C;AASD,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB,CACnC,OAAe,EACf,OAAwB,EACxB,kBAA4E,EAC7D;IACf,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,6BAA6B,GAClC,OAAO,kBAAkB,KAAK,QAAQ;YACrC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,KAAK,kBAAkB;gBAClD,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,WAAW;YACd,CAAC,CAAC,CAAC,kBAAkB,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC;QAC9C,OAAO;YACN,YAAY,EAAE,OAAO;YACrB,YAAY,EAAE,QAAQ,CAAC,QAAQ;gBAC9B,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;oBACzD,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,QAAQ;YACZ,6BAA6B;YAC7B,QAAQ;SACR,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACvC,OAAO;gBACN,YAAY,EAAE,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;gBAC5E,YAAY,EAAE,YAAY;gBAC1B,6BAA6B,EAAE,SAAS;gBACxC,QAAQ,EAAE,IAAI;aACd,CAAC;QACH,CAAC;QACD,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxG,OAAO;gBACN,YAAY,EAAE,cAAc;gBAC5B,YAAY,EAAE,YAAY;gBAC1B,6BAA6B,EAAE,SAAS;gBACxC,QAAQ,EAAE,IAAI;aACd,CAAC;QACH,MAAM,KAAK,CAAC;IACb,CAAC;AAAA,CACD;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,OAAwB,EAAE,WAAoB,EAAuB;IACrH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACxC,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IACzD,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,eAAe,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACpH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC;IAC7E,IACC,YAAY,CAAC,GAAG,CAAC,KAAK,aAAa;QACnC,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;QACnB,CAAC,CAAC,mBAAmB,IAAI,GAAG,CAAC;QAC7B,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;QACzC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7C,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAEtF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IACC,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC;QACtB,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;QACvB,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC;QAEzE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,IACC,CAAC,CAAC,mBAAmB,IAAI,OAAO,CAAC;QACjC,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ;QAC7C,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAEjD,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACpD,IAAI,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,iBAAiB;QACpG,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,iBAAiB;QACjE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CACpE,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAChH,CAAC;IACF,IACC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM;QACxC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QACnC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QACpE,MAAM,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,CACT,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CACxG;QAED,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;IACnH,MAAM,QAAQ,GAAgB;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;QACpC,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC;QACtC,eAAe;QACf,iBAAiB,EAAE,iBAAiB;QACpC,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,MAAM;QACN,QAAQ;KACR,CAAC;IACF,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC;QACjH,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,QAAQ,GACb,OAAO,CAAC,OAAO,KAAK,CAAC;QACpB,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAChF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,eAAe;QACf,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,aAAa;QACb,QAAQ;QACR,MAAM;QACN,aAAa,EAAE,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;QACtD,QAAQ;QACR,iBAAiB,EAAE,iBAAiB;KACpC,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { createHmac, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport type { RunContract } from \"omk-protocol\";\nimport type { EvidenceReceipt } from \"../../types/evidence.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\nimport { type CandidateManifest, loadCandidate } from \"./candidate.ts\";\nimport { readCheckReceipts } from \"./check-receipt.ts\";\nimport { type CheckObservation, closesRunClaims, parseCheckObservations } from \"./evidence-binding.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { digestObject, publishBytes, publishObject, readJson, readRegularFile, VerifiedRunError } from \"./storage.ts\";\n\nexport type { CheckObservation } from \"./evidence-binding.ts\";\n\ninterface Attestation {\n\treadonly version: 1 | 2 | 3;\n\treadonly runId: string;\n\treadonly generation: number;\n\treadonly contractDigest: string;\n\treadonly candidateDigest: string;\n\treadonly environmentDigest: string;\n\treadonly verifierDigest: string;\n\treadonly checks: readonly CheckObservation[];\n\treadonly verified: boolean;\n}\nexport interface VerifiedRunEvidence {\n\treadonly candidateDigest: string;\n\treadonly manifest: CandidateManifest;\n\treadonly receiptDigest: string;\n\treadonly verified: boolean;\n\treadonly checks: readonly CheckObservation[];\n\treadonly receiptFormat: \"v3\" | \"legacy\";\n\treadonly receipts: readonly EvidenceReceipt[];\n\treadonly environmentDigest: string;\n}\n\nexport function createRunIssuer(runPath: string): void {\n\t// Recovery must never replace a missing key and re-sign old evidence.\n\tpublishBytes(join(runPath, \"issuer.key\"), randomBytes(32));\n}\n\nfunction tag(runPath: string, receipt: unknown): Buffer {\n\tconst key = readRegularFile(join(runPath, \"issuer.key\"), 32);\n\tif (key.length !== 32) throw new VerifiedRunError(\"integrity\");\n\treturn createHmac(\"sha256\", key).update(\"omk.verified-run.attestation.v1\\0\").update(canonicalJson(receipt)).digest();\n}\n\nexport function issueRunEvidence(\n\trunPath: string,\n\tcontract: RunContract,\n\tmaterial: {\n\t\treadonly generation: number;\n\t\treadonly candidateDigest: string;\n\t\treadonly environmentDigest: string;\n\t\treadonly checks: readonly CheckObservation[];\n\t},\n): { readonly digest: string; readonly verified: boolean } {\n\tconst checks = parseCheckObservations(material.checks, true);\n\tconst candidate = loadCandidate(runPath, material.candidateDigest, contract.budget);\n\treadCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks });\n\tconst receipt: Attestation = {\n\t\tversion: 3,\n\t\trunId: contract.runId,\n\t\tgeneration: material.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest: material.candidateDigest,\n\t\tenvironmentDigest: material.environmentDigest,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified: closesRunClaims(contract, {\n\t\t\tcandidate: material.candidateDigest,\n\t\t\tenvironment: material.environmentDigest,\n\t\t\tchecks,\n\t\t}),\n\t};\n\tconst envelope = { receipt, authenticationTag: tag(runPath, receipt).toString(\"hex\") };\n\tconst digest = digestObject(envelope);\n\tpublishObject(join(runPath, \"attestations\", `${digest}.json`), envelope);\n\treturn { digest, verified: receipt.verified };\n}\n\nexport interface EvidenceRead {\n\treadonly authenticity: \"valid\" | \"invalid\" | \"unverifiable\";\n\treadonly verification: \"passed\" | \"failed\" | \"incomplete\";\n\treadonly currentEnvironmentEligibility: \"matching\" | \"different\" | \"unsupported\" | \"unknown\";\n\treadonly evidence: VerifiedRunEvidence | null;\n}\n\n/** Historical authenticity is separate from whether this machine can rerun the receipt. */\nexport function classifyEvidenceRead(\n\trunPath: string,\n\tjournal: JournalSnapshot,\n\tcurrentEnvironment?: string | { readonly status: \"unsupported\" | \"unknown\" },\n): EvidenceRead {\n\ttry {\n\t\tconst evidence = readRunEvidence(runPath, journal);\n\t\tconst currentEnvironmentEligibility =\n\t\t\ttypeof currentEnvironment === \"string\"\n\t\t\t\t? evidence.environmentDigest === currentEnvironment\n\t\t\t\t\t? \"matching\"\n\t\t\t\t\t: \"different\"\n\t\t\t\t: (currentEnvironment?.status ?? \"unknown\");\n\t\treturn {\n\t\t\tauthenticity: \"valid\",\n\t\t\tverification: evidence.verified\n\t\t\t\t? \"passed\"\n\t\t\t\t: evidence.checks.some((check) => check.exitCode === null)\n\t\t\t\t\t? \"incomplete\"\n\t\t\t\t\t: \"failed\",\n\t\t\tcurrentEnvironmentEligibility,\n\t\t\tevidence,\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof VerifiedRunError) {\n\t\t\treturn {\n\t\t\t\tauthenticity: error.code === \"evidence_missing\" ? \"unverifiable\" : \"invalid\",\n\t\t\t\tverification: \"incomplete\",\n\t\t\t\tcurrentEnvironmentEligibility: \"unknown\",\n\t\t\t\tevidence: null,\n\t\t\t};\n\t\t}\n\t\tif (error instanceof Error && \"code\" in error && [\"ENOENT\", \"EACCES\", \"EIO\"].includes(String(error.code)))\n\t\t\treturn {\n\t\t\t\tauthenticity: \"unverifiable\",\n\t\t\t\tverification: \"incomplete\",\n\t\t\t\tcurrentEnvironmentEligibility: \"unknown\",\n\t\t\t\tevidence: null,\n\t\t\t};\n\t\tthrow error;\n\t}\n}\n\nexport function readRunEvidence(runPath: string, journal: JournalSnapshot, environment?: string): VerifiedRunEvidence {\n\tconst first = journal.records[0]?.event;\n\tconst { candidateDigest, receiptDigest } = journal.state;\n\tif (first?.kind !== \"created\" || !candidateDigest || !receiptDigest) throw new VerifiedRunError(\"evidence_missing\");\n\tconst raw = readJson(join(runPath, \"attestations\", `${receiptDigest}.json`));\n\tif (\n\t\tdigestObject(raw) !== receiptDigest ||\n\t\ttypeof raw !== \"object\" ||\n\t\traw === null ||\n\t\t!(\"receipt\" in raw) ||\n\t\t!(\"authenticationTag\" in raw) ||\n\t\ttypeof raw.authenticationTag !== \"string\" ||\n\t\t!/^[a-f0-9]{64}$/.test(raw.authenticationTag) ||\n\t\t!timingSafeEqual(tag(runPath, raw.receipt), Buffer.from(raw.authenticationTag, \"hex\"))\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst receipt = raw.receipt;\n\tif (\n\t\ttypeof receipt !== \"object\" ||\n\t\treceipt === null ||\n\t\t!(\"checks\" in receipt) ||\n\t\t!(\"version\" in receipt) ||\n\t\t(receipt.version !== 1 && receipt.version !== 2 && receipt.version !== 3)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tif (\n\t\t!(\"environmentDigest\" in receipt) ||\n\t\ttypeof receipt.environmentDigest !== \"string\" ||\n\t\t!/^[a-f0-9]{64}$/.test(receipt.environmentDigest)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst storedEnvironment = receipt.environmentDigest;\n\tif (journal.state.environmentDigest !== null && journal.state.environmentDigest !== storedEnvironment)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tif (environment !== undefined && environment !== storedEnvironment)\n\t\tthrow new VerifiedRunError(\"environment_mismatch\");\n\tconst checks = parseCheckObservations(receipt.checks, receipt.version !== 1);\n\tconst contract = first.contract;\n\tconst dispatches = journal.records.flatMap(({ event, generation }) =>\n\t\tgeneration === journal.state.generation && event.kind === \"dispatch\" && event.role === \"verifier\" ? [event] : [],\n\t);\n\tif (\n\t\tchecks.length !== contract.checks.length ||\n\t\tchecks.length !== dispatches.length ||\n\t\tnew Set(checks.map((check) => check.claimId)).size !== checks.length ||\n\t\tchecks.some(\n\t\t\t(check) =>\n\t\t\t\t!dispatches.some((event) => event.executionId === check.executionId && event.claimId === check.claimId),\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst verified = closesRunClaims(contract, { candidate: candidateDigest, environment: storedEnvironment, checks });\n\tconst expected: Attestation = {\n\t\tversion: receipt.version,\n\t\trunId: contract.runId,\n\t\tgeneration: journal.state.generation,\n\t\tcontractDigest: digestObject(contract),\n\t\tcandidateDigest,\n\t\tenvironmentDigest: storedEnvironment,\n\t\tverifierDigest: digestObject(contract.checks),\n\t\tchecks,\n\t\tverified,\n\t};\n\tif (canonicalJson(receipt) !== canonicalJson(expected) || verified !== (journal.state.verification === \"verified\"))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst candidate = loadCandidate(runPath, candidateDigest, contract.budget);\n\tconst receipts =\n\t\treceipt.version !== 1\n\t\t\t? readCheckReceipts(runPath, contract, { manifest: candidate.manifest, checks })\n\t\t\t: Object.freeze([]);\n\treturn Object.freeze({\n\t\tcandidateDigest,\n\t\tmanifest: candidate.manifest,\n\t\treceiptDigest,\n\t\tverified,\n\t\tchecks,\n\t\treceiptFormat: receipt.version !== 1 ? \"v3\" : \"legacy\",\n\t\treceipts,\n\t\tenvironmentDigest: storedEnvironment,\n\t});\n}\n"]}

package/dist/core/verified-run/git-candidate-preflight.d.ts

@@ -0,0 +1,4 @@
+import type { CandidateManifest } from "./candidate.ts";
+/** Validate every entry before the first Git object write, including legacy candidates. */
+export declare function preflightGitCandidate(manifest: CandidateManifest, contents: ReadonlyMap<string, Buffer>): void;
+//# sourceMappingURL=git-candidate-preflight.d.ts.map

package/dist/core/verified-run/git-candidate-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-candidate-preflight.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/git-candidate-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAIxD,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CA2B9G","sourcesContent":["import type { CandidateManifest } from \"./candidate.ts\";\nimport { assertPublishablePath, safeCandidatePath } from \"./candidate-policy.ts\";\nimport { digestBytes, VerifiedRunError } from \"./storage.ts\";\n\n/** Validate every entry before the first Git object write, including legacy candidates. */\nexport function preflightGitCandidate(manifest: CandidateManifest, contents: ReadonlyMap<string, Buffer>): void {\n\tif (manifest.version !== 1 || !Array.isArray(manifest.directories) || !Array.isArray(manifest.files))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst directories = new Set(manifest.directories);\n\tconst paths = new Set<string>();\n\tconst checkPath = (path: string) => {\n\t\tsafeCandidatePath(path);\n\t\tassertPublishablePath(path);\n\t\tif (paths.has(path)) throw new VerifiedRunError(\"integrity\");\n\t\tpaths.add(path);\n\t\tconst slash = path.lastIndexOf(\"/\");\n\t\tif (slash !== -1 && !directories.has(path.slice(0, slash))) throw new VerifiedRunError(\"integrity\");\n\t};\n\tfor (const directory of manifest.directories) checkPath(directory);\n\tfor (const file of manifest.files) {\n\t\tcheckPath(file.path);\n\t\tif (file.mode !== 0o644 && file.mode !== 0o755) throw new VerifiedRunError(\"mode_unrepresentable\");\n\t\tconst bytes = contents.get(file.digest);\n\t\tif (\n\t\t\t!bytes ||\n\t\t\t!Number.isSafeInteger(file.size) ||\n\t\t\tfile.size < 0 ||\n\t\t\tbytes.length !== file.size ||\n\t\t\tdigestBytes(bytes) !== file.digest\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n}\n"]}

package/dist/core/verified-run/git-candidate-preflight.js

@@ -0,0 +1,34 @@
+import { assertPublishablePath, safeCandidatePath } from "./candidate-policy.js";
+import { digestBytes, VerifiedRunError } from "./storage.js";
+/** Validate every entry before the first Git object write, including legacy candidates. */
+export function preflightGitCandidate(manifest, contents) {
+    if (manifest.version !== 1 || !Array.isArray(manifest.directories) || !Array.isArray(manifest.files))
+        throw new VerifiedRunError("integrity");
+    const directories = new Set(manifest.directories);
+    const paths = new Set();
+    const checkPath = (path) => {
+        safeCandidatePath(path);
+        assertPublishablePath(path);
+        if (paths.has(path))
+            throw new VerifiedRunError("integrity");
+        paths.add(path);
+        const slash = path.lastIndexOf("/");
+        if (slash !== -1 && !directories.has(path.slice(0, slash)))
+            throw new VerifiedRunError("integrity");
+    };
+    for (const directory of manifest.directories)
+        checkPath(directory);
+    for (const file of manifest.files) {
+        checkPath(file.path);
+        if (file.mode !== 0o644 && file.mode !== 0o755)
+            throw new VerifiedRunError("mode_unrepresentable");
+        const bytes = contents.get(file.digest);
+        if (!bytes ||
+            !Number.isSafeInteger(file.size) ||
+            file.size < 0 ||
+            bytes.length !== file.size ||
+            digestBytes(bytes) !== file.digest)
+            throw new VerifiedRunError("integrity");
+    }
+}
+//# sourceMappingURL=git-candidate-preflight.js.map

package/dist/core/verified-run/git-candidate-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-candidate-preflight.js","sourceRoot":"","sources":["../../../src/core/verified-run/git-candidate-preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE7D,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,QAA2B,EAAE,QAAqC,EAAQ;IAC/G,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnG,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC;QACnC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC7D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAAA,CACpG,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,WAAW;QAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,IACC,CAAC,KAAK;YACN,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,IAAI,GAAG,CAAC;YACb,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;YAC1B,WAAW,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;YAElC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;AAAA,CACD","sourcesContent":["import type { CandidateManifest } from \"./candidate.ts\";\nimport { assertPublishablePath, safeCandidatePath } from \"./candidate-policy.ts\";\nimport { digestBytes, VerifiedRunError } from \"./storage.ts\";\n\n/** Validate every entry before the first Git object write, including legacy candidates. */\nexport function preflightGitCandidate(manifest: CandidateManifest, contents: ReadonlyMap<string, Buffer>): void {\n\tif (manifest.version !== 1 || !Array.isArray(manifest.directories) || !Array.isArray(manifest.files))\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tconst directories = new Set(manifest.directories);\n\tconst paths = new Set<string>();\n\tconst checkPath = (path: string) => {\n\t\tsafeCandidatePath(path);\n\t\tassertPublishablePath(path);\n\t\tif (paths.has(path)) throw new VerifiedRunError(\"integrity\");\n\t\tpaths.add(path);\n\t\tconst slash = path.lastIndexOf(\"/\");\n\t\tif (slash !== -1 && !directories.has(path.slice(0, slash))) throw new VerifiedRunError(\"integrity\");\n\t};\n\tfor (const directory of manifest.directories) checkPath(directory);\n\tfor (const file of manifest.files) {\n\t\tcheckPath(file.path);\n\t\tif (file.mode !== 0o644 && file.mode !== 0o755) throw new VerifiedRunError(\"mode_unrepresentable\");\n\t\tconst bytes = contents.get(file.digest);\n\t\tif (\n\t\t\t!bytes ||\n\t\t\t!Number.isSafeInteger(file.size) ||\n\t\t\tfile.size < 0 ||\n\t\t\tbytes.length !== file.size ||\n\t\t\tdigestBytes(bytes) !== file.digest\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t}\n}\n"]}

package/dist/core/verified-run/git-effect-supervisor.d.ts

@@ -0,0 +1,24 @@
+import { type ResourceClaimInput } from "../../coordination/resource.ts";
+import type { GrantToken } from "../../coordination/types.ts";
+import type { RunAuthority } from "./authority-runtime.ts";
+import type { GitOperationBudget } from "./git-execution.ts";
+import { type SealCandidateInput } from "./git-plumbing.ts";
+import { type GitWorkerNotice } from "./git-worker-protocol.ts";
+import { type GitWorkerRuntime } from "./git-worker-runtime.ts";
+export interface OwnedGitPublication {
+    readonly workspace: string;
+    readonly input: SealCandidateInput;
+    readonly authority: RunAuthority;
+    readonly token: GrantToken;
+    readonly claims: readonly ResourceClaimInput[];
+    readonly runtime: GitWorkerRuntime;
+    readonly budget: GitOperationBudget;
+    readonly deadlineNs: string;
+    readonly cleanupMs: number;
+    readonly signal?: AbortSignal;
+    readonly onPrepared: (candidateOid: string) => void | Promise<void>;
+    readonly afterCas?: () => void | Promise<void>;
+}
+/** One owner for staging, durable dispatch, seal/CAS gates, namespace drain and grant settlement. */
+export declare function executeOwnedGitPublication(request: OwnedGitPublication): Promise<GitWorkerNotice>;
+//# sourceMappingURL=git-effect-supervisor.d.ts.map

package/dist/core/verified-run/git-effect-supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-effect-supervisor.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/git-effect-supervisor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,kBAAkB,EAAgB,MAAM,gCAAgC,CAAC;AACvG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAgC,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,KAAK,eAAe,EAAkC,MAAM,0BAA0B,CAAC;AAChG,OAAO,EAAE,KAAK,gBAAgB,EAAyC,MAAM,yBAAyB,CAAC;AAKvG,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,qGAAqG;AACrG,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CAuJvG","sourcesContent":["import { existsSync, rmSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport { canonicalClaim, type ResourceClaimInput, sameClaimSet } from \"../../coordination/resource.ts\";\nimport type { GrantToken } from \"../../coordination/types.ts\";\nimport { sameGrantToken } from \"./authority-meaning.ts\";\nimport type { RunAuthority } from \"./authority-runtime.ts\";\nimport { executeSandbox, type SandboxOutcome } from \"./broker.ts\";\nimport type { GitOperationBudget } from \"./git-execution.ts\";\nimport { OMK_ACCEPTED_REF, resolveRef, type SealCandidateInput } from \"./git-plumbing.ts\";\nimport { type GitWorkerNotice, readGitNotice, writeGitControl } from \"./git-worker-protocol.ts\";\nimport { type GitWorkerRuntime, type GitWorkerStage, prepareGitWorker } from \"./git-worker-runtime.ts\";\nimport type { NamespaceIdentity } from \"./namespace-identity.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\nimport { loadSupervisorBackend, probeOwnedNamespace } from \"./supervisor-adapter.ts\";\n\nexport interface OwnedGitPublication {\n\treadonly workspace: string;\n\treadonly input: SealCandidateInput;\n\treadonly authority: RunAuthority;\n\treadonly token: GrantToken;\n\treadonly claims: readonly ResourceClaimInput[];\n\treadonly runtime: GitWorkerRuntime;\n\treadonly budget: GitOperationBudget;\n\treadonly deadlineNs: string;\n\treadonly cleanupMs: number;\n\treadonly signal?: AbortSignal;\n\treadonly onPrepared: (candidateOid: string) => void | Promise<void>;\n\treadonly afterCas?: () => void | Promise<void>;\n}\n\n/** One owner for staging, durable dispatch, seal/CAS gates, namespace drain and grant settlement. */\nexport async function executeOwnedGitPublication(request: OwnedGitPublication): Promise<GitWorkerNotice> {\n\tconst authority = request.authority.store.state;\n\tconst reservation = authority.grants.get(request.token.grantSequence);\n\tif (\n\t\t!reservation ||\n\t\treservation.state !== \"reserved\" ||\n\t\treservation.effectLive ||\n\t\t!sameGrantToken(reservation.token, request.token) ||\n\t\tauthority.epoch !== request.token.authorityEpoch ||\n\t\tauthority.incarnations.get(request.token.sessionId) !== request.token.sessionIncarnation ||\n\t\t!sameClaimSet(\n\t\t\tArray.from(request.claims, (claim) => canonicalClaim(claim)),\n\t\t\treservation.claims,\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"authority\");\n\tloadSupervisorBackend();\n\tconst controller = new AbortController();\n\tconst cancel = () => controller.abort();\n\trequest.signal?.addEventListener(\"abort\", cancel, { once: true });\n\tif (request.signal?.aborted) cancel();\n\tlet stage: GitWorkerStage | undefined;\n\tlet identity: NamespaceIdentity | undefined;\n\tlet completion: Promise<void> | undefined;\n\tlet finished = false;\n\tlet outcome: SandboxOutcome | undefined;\n\tlet executionFailure: unknown;\n\tlet failure: unknown;\n\tlet result: GitWorkerNotice | undefined;\n\tlet preparedOid: string | undefined;\n\tlet terminationObserved = false;\n\tlet afterCasCalled = false;\n\tlet callbackFailed = false;\n\tconst { store } = request.authority;\n\tconst waitNotice = async (name: string): Promise<GitWorkerNotice> => {\n\t\tif (!stage) throw new VerifiedRunError(\"git_worker_protocol\");\n\t\tconst path = join(stage.root, name);\n\t\twhile (!existsSync(path)) {\n\t\t\tif (finished) throw executionFailure ?? new VerifiedRunError(outcome?.failure ?? \"git_worker_failed\");\n\t\t\trequest.budget.remaining();\n\t\t\tawait delay(5);\n\t\t}\n\t\treturn readGitNotice(path);\n\t};\n\ttry {\n\t\trequest.budget.remaining();\n\t\tstage = prepareGitWorker(request.workspace, request.runtime, {\n\t\t\tinput: request.input,\n\t\t\ttimeoutMs: Math.min(60_000, request.budget.remainingWorkMs()),\n\t\t\tdeadlineNs: request.deadlineNs,\n\t\t});\n\t\trequest.budget.remaining();\n\t\tif (!store.dispatchIntent(request.token, stage.dispatchId)) throw new VerifiedRunError(\"authority\");\n\t\tcompletion = executeSandbox({\n\t\t\tworkspace: request.workspace,\n\t\t\twritable: false,\n\t\t\tgitPublication: true,\n\t\t\targv: [\"/omk-node\", \"--experimental-strip-types\", stage.worker, stage.request],\n\t\t\ttimeoutMs: request.budget.remainingWorkMs(),\n\t\t\tcleanupMs: request.cleanupMs,\n\t\t\tmaxOutputBytes: 8192,\n\t\t\tsignal: controller.signal,\n\t\t\tonReady: (ready) => {\n\t\t\t\tidentity = ready;\n\t\t\t\tif (!store.effectStarted(request.token, request.claims, ready)) throw new VerifiedRunError(\"authority\");\n\t\t\t},\n\t\t}).then(\n\t\t\t(value) => {\n\t\t\t\toutcome = value;\n\t\t\t\tterminationObserved = true;\n\t\t\t\tfinished = true;\n\t\t\t},\n\t\t\t(error: unknown) => {\n\t\t\t\texecutionFailure = error;\n\t\t\t\tfinished = true;\n\t\t\t},\n\t\t);\n\t\tconst prepared = await waitNotice(\"prepared.json\");\n\t\tif (prepared.kind !== \"prepared\") throw new VerifiedRunError(\"git_worker_protocol\");\n\t\tpreparedOid = prepared.candidateOid;\n\t\ttry {\n\t\t\tawait request.onPrepared(preparedOid);\n\t\t} catch (error) {\n\t\t\tcallbackFailed = true;\n\t\t\tthrow error;\n\t\t}\n\t\trequest.budget.remaining();\n\t\tif (!store.effectAuthorized(request.token, request.claims)) throw new VerifiedRunError(\"authority\");\n\t\twriteGitControl(join(stage.root, \"cas-go.json\"), {\n\t\t\t...prepared,\n\t\t\tauthorizationDeadline: request.token.authorizationDeadline,\n\t\t});\n\t\tresult = await waitNotice(\"result.json\");\n\t\tif (result.kind === \"prepared\" || result.candidateOid !== preparedOid)\n\t\t\tthrow new VerifiedRunError(\"git_worker_protocol\");\n\t\tif (result.kind === \"committed\") {\n\t\t\tafterCasCalled = true;\n\t\t\ttry {\n\t\t\t\tawait request.afterCas?.();\n\t\t\t} catch (error) {\n\t\t\t\tcallbackFailed = true;\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t}\n\t\twriteGitControl(join(stage.root, \"finish.json\"), result);\n\t} catch (error) {\n\t\tfailure = error;\n\t\tcontroller.abort();\n\t} finally {\n\t\tawait completion;\n\t\trequest.signal?.removeEventListener(\"abort\", cancel);\n\t\t// A callback error may reject the broker even after drain. Re-observe, never infer it.\n\t\tif (!terminationObserved && identity) terminationObserved = probeOwnedNamespace(identity) === \"terminated\";\n\t\tconst neverStarted =\n\t\t\tcompletion === undefined ||\n\t\t\t(!identity &&\n\t\t\t\texecutionFailure instanceof VerifiedRunError &&\n\t\t\t\t[\"cancelled\", \"deadline\", \"unsupported_boundary\"].includes(executionFailure.code));\n\t\ttry {\n\t\t\tif (terminationObserved || neverStarted) store.confirmTerminated(request.token);\n\t\t\telse store.cancel(request.token);\n\t\t} catch (error) {\n\t\t\tfailure =\n\t\t\t\tfailure === undefined ? error : new AggregateError([failure, error], \"Git authority settlement failed\");\n\t\t}\n\t\tif (stage && (terminationObserved || neverStarted)) {\n\t\t\ttry {\n\t\t\t\trmSync(stage.root, { recursive: true, force: true });\n\t\t\t} catch (error) {\n\t\t\t\tfailure =\n\t\t\t\t\tfailure === undefined ? error : new AggregateError([failure, error], \"Git staging cleanup failed\");\n\t\t\t}\n\t\t}\n\t}\n\tif (!terminationObserved && completion !== undefined)\n\t\tthrow failure ?? executionFailure ?? new VerifiedRunError(\"git_effect_unsettled\");\n\t// An abort racing the CAS cannot erase a ref that is already committed.\n\tif (\n\t\t!callbackFailed &&\n\t\tfailure instanceof VerifiedRunError &&\n\t\t[\"cancelled\", \"deadline\", \"git_worker_failed\"].includes(failure.code) &&\n\t\tpreparedOid &&\n\t\tresolveRef(request.workspace, OMK_ACCEPTED_REF) === preparedOid\n\t) {\n\t\tif (!afterCasCalled) await request.afterCas?.();\n\t\treturn { kind: \"committed\", candidateOid: preparedOid };\n\t}\n\tif (failure !== undefined) throw failure;\n\tif (executionFailure !== undefined) throw executionFailure;\n\tif (!result) throw new VerifiedRunError(\"git_worker_failed\");\n\treturn result;\n}\n"]}

package/dist/core/verified-run/git-effect-supervisor.js

@@ -0,0 +1,174 @@
+import { existsSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { setTimeout as delay } from "node:timers/promises";
+import { canonicalClaim, sameClaimSet } from "../../coordination/resource.js";
+import { sameGrantToken } from "./authority-meaning.js";
+import { executeSandbox } from "./broker.js";
+import { OMK_ACCEPTED_REF, resolveRef } from "./git-plumbing.js";
+import { readGitNotice, writeGitControl } from "./git-worker-protocol.js";
+import { prepareGitWorker } from "./git-worker-runtime.js";
+import { VerifiedRunError } from "./storage.js";
+import { loadSupervisorBackend, probeOwnedNamespace } from "./supervisor-adapter.js";
+/** One owner for staging, durable dispatch, seal/CAS gates, namespace drain and grant settlement. */
+export async function executeOwnedGitPublication(request) {
+    const authority = request.authority.store.state;
+    const reservation = authority.grants.get(request.token.grantSequence);
+    if (!reservation ||
+        reservation.state !== "reserved" ||
+        reservation.effectLive ||
+        !sameGrantToken(reservation.token, request.token) ||
+        authority.epoch !== request.token.authorityEpoch ||
+        authority.incarnations.get(request.token.sessionId) !== request.token.sessionIncarnation ||
+        !sameClaimSet(Array.from(request.claims, (claim) => canonicalClaim(claim)), reservation.claims))
+        throw new VerifiedRunError("authority");
+    loadSupervisorBackend();
+    const controller = new AbortController();
+    const cancel = () => controller.abort();
+    request.signal?.addEventListener("abort", cancel, { once: true });
+    if (request.signal?.aborted)
+        cancel();
+    let stage;
+    let identity;
+    let completion;
+    let finished = false;
+    let outcome;
+    let executionFailure;
+    let failure;
+    let result;
+    let preparedOid;
+    let terminationObserved = false;
+    let afterCasCalled = false;
+    let callbackFailed = false;
+    const { store } = request.authority;
+    const waitNotice = async (name) => {
+        if (!stage)
+            throw new VerifiedRunError("git_worker_protocol");
+        const path = join(stage.root, name);
+        while (!existsSync(path)) {
+            if (finished)
+                throw executionFailure ?? new VerifiedRunError(outcome?.failure ?? "git_worker_failed");
+            request.budget.remaining();
+            await delay(5);
+        }
+        return readGitNotice(path);
+    };
+    try {
+        request.budget.remaining();
+        stage = prepareGitWorker(request.workspace, request.runtime, {
+            input: request.input,
+            timeoutMs: Math.min(60_000, request.budget.remainingWorkMs()),
+            deadlineNs: request.deadlineNs,
+        });
+        request.budget.remaining();
+        if (!store.dispatchIntent(request.token, stage.dispatchId))
+            throw new VerifiedRunError("authority");
+        completion = executeSandbox({
+            workspace: request.workspace,
+            writable: false,
+            gitPublication: true,
+            argv: ["/omk-node", "--experimental-strip-types", stage.worker, stage.request],
+            timeoutMs: request.budget.remainingWorkMs(),
+            cleanupMs: request.cleanupMs,
+            maxOutputBytes: 8192,
+            signal: controller.signal,
+            onReady: (ready) => {
+                identity = ready;
+                if (!store.effectStarted(request.token, request.claims, ready))
+                    throw new VerifiedRunError("authority");
+            },
+        }).then((value) => {
+            outcome = value;
+            terminationObserved = true;
+            finished = true;
+        }, (error) => {
+            executionFailure = error;
+            finished = true;
+        });
+        const prepared = await waitNotice("prepared.json");
+        if (prepared.kind !== "prepared")
+            throw new VerifiedRunError("git_worker_protocol");
+        preparedOid = prepared.candidateOid;
+        try {
+            await request.onPrepared(preparedOid);
+        }
+        catch (error) {
+            callbackFailed = true;
+            throw error;
+        }
+        request.budget.remaining();
+        if (!store.effectAuthorized(request.token, request.claims))
+            throw new VerifiedRunError("authority");
+        writeGitControl(join(stage.root, "cas-go.json"), {
+            ...prepared,
+            authorizationDeadline: request.token.authorizationDeadline,
+        });
+        result = await waitNotice("result.json");
+        if (result.kind === "prepared" || result.candidateOid !== preparedOid)
+            throw new VerifiedRunError("git_worker_protocol");
+        if (result.kind === "committed") {
+            afterCasCalled = true;
+            try {
+                await request.afterCas?.();
+            }
+            catch (error) {
+                callbackFailed = true;
+                throw error;
+            }
+        }
+        writeGitControl(join(stage.root, "finish.json"), result);
+    }
+    catch (error) {
+        failure = error;
+        controller.abort();
+    }
+    finally {
+        await completion;
+        request.signal?.removeEventListener("abort", cancel);
+        // A callback error may reject the broker even after drain. Re-observe, never infer it.
+        if (!terminationObserved && identity)
+            terminationObserved = probeOwnedNamespace(identity) === "terminated";
+        const neverStarted = completion === undefined ||
+            (!identity &&
+                executionFailure instanceof VerifiedRunError &&
+                ["cancelled", "deadline", "unsupported_boundary"].includes(executionFailure.code));
+        try {
+            if (terminationObserved || neverStarted)
+                store.confirmTerminated(request.token);
+            else
+                store.cancel(request.token);
+        }
+        catch (error) {
+            failure =
+                failure === undefined ? error : new AggregateError([failure, error], "Git authority settlement failed");
+        }
+        if (stage && (terminationObserved || neverStarted)) {
+            try {
+                rmSync(stage.root, { recursive: true, force: true });
+            }
+            catch (error) {
+                failure =
+                    failure === undefined ? error : new AggregateError([failure, error], "Git staging cleanup failed");
+            }
+        }
+    }
+    if (!terminationObserved && completion !== undefined)
+        throw failure ?? executionFailure ?? new VerifiedRunError("git_effect_unsettled");
+    // An abort racing the CAS cannot erase a ref that is already committed.
+    if (!callbackFailed &&
+        failure instanceof VerifiedRunError &&
+        ["cancelled", "deadline", "git_worker_failed"].includes(failure.code) &&
+        preparedOid &&
+        resolveRef(request.workspace, OMK_ACCEPTED_REF) === preparedOid) {
+        if (!afterCasCalled)
+            await request.afterCas?.();
+        return { kind: "committed", candidateOid: preparedOid };
+    }
+    if (failure !== undefined)
+        throw failure;
+    if (executionFailure !== undefined)
+        throw executionFailure;
+    if (!result)
+        throw new VerifiedRunError("git_worker_failed");
+    return result;
+}
+//# sourceMappingURL=git-effect-supervisor.js.map

package/dist/core/verified-run/git-effect-supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-effect-supervisor.js","sourceRoot":"","sources":["../../../src/core/verified-run/git-effect-supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAA2B,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAEvG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAC;AAElE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAA2B,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAwB,aAAa,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChG,OAAO,EAA8C,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEvG,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAiBrF,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAA4B,EAA4B;IACxG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;IAChD,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACtE,IACC,CAAC,WAAW;QACZ,WAAW,CAAC,KAAK,KAAK,UAAU;QAChC,WAAW,CAAC,UAAU;QACtB,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACjD,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,cAAc;QAChD,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,kBAAkB;QACxF,CAAC,YAAY,CACZ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAC5D,WAAW,CAAC,MAAM,CAClB;QAED,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,qBAAqB,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACxC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,EAAE,CAAC;IACtC,IAAI,KAAiC,CAAC;IACtC,IAAI,QAAuC,CAAC;IAC5C,IAAI,UAAqC,CAAC;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAmC,CAAC;IACxC,IAAI,gBAAyB,CAAC;IAC9B,IAAI,OAAgB,CAAC;IACrB,IAAI,MAAmC,CAAC;IACxC,IAAI,WAA+B,CAAC;IACpC,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAA4B,EAAE,CAAC;QACpE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,QAAQ;gBAAE,MAAM,gBAAgB,IAAI,IAAI,gBAAgB,CAAC,OAAO,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;YACtG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IAAA,CAC3B,CAAC;IACF,IAAI,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3B,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE;YAC5D,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC7D,UAAU,EAAE,OAAO,CAAC,UAAU;SAC9B,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACpG,UAAU,GAAG,cAAc,CAAC;YAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,KAAK;YACf,cAAc,EAAE,IAAI;YACpB,IAAI,EAAE,CAAC,WAAW,EAAE,4BAA4B,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC;YAC9E,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE;YAC3C,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnB,QAAQ,GAAG,KAAK,CAAC;gBACjB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAAA,CACxG;SACD,CAAC,CAAC,IAAI,CACN,CAAC,KAAK,EAAE,EAAE,CAAC;YACV,OAAO,GAAG,KAAK,CAAC;YAChB,mBAAmB,GAAG,IAAI,CAAC;YAC3B,QAAQ,GAAG,IAAI,CAAC;QAAA,CAChB,EACD,CAAC,KAAc,EAAE,EAAE,CAAC;YACnB,gBAAgB,GAAG,KAAK,CAAC;YACzB,QAAQ,GAAG,IAAI,CAAC;QAAA,CAChB,CACD,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QACpF,WAAW,GAAG,QAAQ,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,cAAc,GAAG,IAAI,CAAC;YACtB,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACpG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE;YAChD,GAAG,QAAQ;YACX,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,qBAAqB;SAC1D,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW;YACpE,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,cAAc,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC;gBACJ,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,cAAc,GAAG,IAAI,CAAC;gBACtB,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,GAAG,KAAK,CAAC;QAChB,UAAU,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACV,MAAM,UAAU,CAAC;QACjB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,uFAAuF;QACvF,IAAI,CAAC,mBAAmB,IAAI,QAAQ;YAAE,mBAAmB,GAAG,mBAAmB,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC;QAC3G,MAAM,YAAY,GACjB,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,QAAQ;gBACT,gBAAgB,YAAY,gBAAgB;gBAC5C,CAAC,WAAW,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC;YACJ,IAAI,mBAAmB,IAAI,YAAY;gBAAE,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;gBAC3E,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,iCAAiC,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,KAAK,IAAI,CAAC,mBAAmB,IAAI,YAAY,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC;gBACJ,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO;oBACN,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,4BAA4B,CAAC,CAAC;YACrG,CAAC;QACF,CAAC;IACF,CAAC;IACD,IAAI,CAAC,mBAAmB,IAAI,UAAU,KAAK,SAAS;QACnD,MAAM,OAAO,IAAI,gBAAgB,IAAI,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IACnF,wEAAwE;IACxE,IACC,CAAC,cAAc;QACf,OAAO,YAAY,gBAAgB;QACnC,CAAC,WAAW,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACrE,WAAW;QACX,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,KAAK,WAAW,EAC9D,CAAC;QACF,IAAI,CAAC,cAAc;YAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC;IACzC,IAAI,gBAAgB,KAAK,SAAS;QAAE,MAAM,gBAAgB,CAAC;IAC3D,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC;AAAA,CACd","sourcesContent":["import { existsSync, rmSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport { canonicalClaim, type ResourceClaimInput, sameClaimSet } from \"../../coordination/resource.ts\";\nimport type { GrantToken } from \"../../coordination/types.ts\";\nimport { sameGrantToken } from \"./authority-meaning.ts\";\nimport type { RunAuthority } from \"./authority-runtime.ts\";\nimport { executeSandbox, type SandboxOutcome } from \"./broker.ts\";\nimport type { GitOperationBudget } from \"./git-execution.ts\";\nimport { OMK_ACCEPTED_REF, resolveRef, type SealCandidateInput } from \"./git-plumbing.ts\";\nimport { type GitWorkerNotice, readGitNotice, writeGitControl } from \"./git-worker-protocol.ts\";\nimport { type GitWorkerRuntime, type GitWorkerStage, prepareGitWorker } from \"./git-worker-runtime.ts\";\nimport type { NamespaceIdentity } from \"./namespace-identity.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\nimport { loadSupervisorBackend, probeOwnedNamespace } from \"./supervisor-adapter.ts\";\n\nexport interface OwnedGitPublication {\n\treadonly workspace: string;\n\treadonly input: SealCandidateInput;\n\treadonly authority: RunAuthority;\n\treadonly token: GrantToken;\n\treadonly claims: readonly ResourceClaimInput[];\n\treadonly runtime: GitWorkerRuntime;\n\treadonly budget: GitOperationBudget;\n\treadonly deadlineNs: string;\n\treadonly cleanupMs: number;\n\treadonly signal?: AbortSignal;\n\treadonly onPrepared: (candidateOid: string) => void | Promise<void>;\n\treadonly afterCas?: () => void | Promise<void>;\n}\n\n/** One owner for staging, durable dispatch, seal/CAS gates, namespace drain and grant settlement. */\nexport async function executeOwnedGitPublication(request: OwnedGitPublication): Promise<GitWorkerNotice> {\n\tconst authority = request.authority.store.state;\n\tconst reservation = authority.grants.get(request.token.grantSequence);\n\tif (\n\t\t!reservation ||\n\t\treservation.state !== \"reserved\" ||\n\t\treservation.effectLive ||\n\t\t!sameGrantToken(reservation.token, request.token) ||\n\t\tauthority.epoch !== request.token.authorityEpoch ||\n\t\tauthority.incarnations.get(request.token.sessionId) !== request.token.sessionIncarnation ||\n\t\t!sameClaimSet(\n\t\t\tArray.from(request.claims, (claim) => canonicalClaim(claim)),\n\t\t\treservation.claims,\n\t\t)\n\t)\n\t\tthrow new VerifiedRunError(\"authority\");\n\tloadSupervisorBackend();\n\tconst controller = new AbortController();\n\tconst cancel = () => controller.abort();\n\trequest.signal?.addEventListener(\"abort\", cancel, { once: true });\n\tif (request.signal?.aborted) cancel();\n\tlet stage: GitWorkerStage | undefined;\n\tlet identity: NamespaceIdentity | undefined;\n\tlet completion: Promise<void> | undefined;\n\tlet finished = false;\n\tlet outcome: SandboxOutcome | undefined;\n\tlet executionFailure: unknown;\n\tlet failure: unknown;\n\tlet result: GitWorkerNotice | undefined;\n\tlet preparedOid: string | undefined;\n\tlet terminationObserved = false;\n\tlet afterCasCalled = false;\n\tlet callbackFailed = false;\n\tconst { store } = request.authority;\n\tconst waitNotice = async (name: string): Promise<GitWorkerNotice> => {\n\t\tif (!stage) throw new VerifiedRunError(\"git_worker_protocol\");\n\t\tconst path = join(stage.root, name);\n\t\twhile (!existsSync(path)) {\n\t\t\tif (finished) throw executionFailure ?? new VerifiedRunError(outcome?.failure ?? \"git_worker_failed\");\n\t\t\trequest.budget.remaining();\n\t\t\tawait delay(5);\n\t\t}\n\t\treturn readGitNotice(path);\n\t};\n\ttry {\n\t\trequest.budget.remaining();\n\t\tstage = prepareGitWorker(request.workspace, request.runtime, {\n\t\t\tinput: request.input,\n\t\t\ttimeoutMs: Math.min(60_000, request.budget.remainingWorkMs()),\n\t\t\tdeadlineNs: request.deadlineNs,\n\t\t});\n\t\trequest.budget.remaining();\n\t\tif (!store.dispatchIntent(request.token, stage.dispatchId)) throw new VerifiedRunError(\"authority\");\n\t\tcompletion = executeSandbox({\n\t\t\tworkspace: request.workspace,\n\t\t\twritable: false,\n\t\t\tgitPublication: true,\n\t\t\targv: [\"/omk-node\", \"--experimental-strip-types\", stage.worker, stage.request],\n\t\t\ttimeoutMs: request.budget.remainingWorkMs(),\n\t\t\tcleanupMs: request.cleanupMs,\n\t\t\tmaxOutputBytes: 8192,\n\t\t\tsignal: controller.signal,\n\t\t\tonReady: (ready) => {\n\t\t\t\tidentity = ready;\n\t\t\t\tif (!store.effectStarted(request.token, request.claims, ready)) throw new VerifiedRunError(\"authority\");\n\t\t\t},\n\t\t}).then(\n\t\t\t(value) => {\n\t\t\t\toutcome = value;\n\t\t\t\tterminationObserved = true;\n\t\t\t\tfinished = true;\n\t\t\t},\n\t\t\t(error: unknown) => {\n\t\t\t\texecutionFailure = error;\n\t\t\t\tfinished = true;\n\t\t\t},\n\t\t);\n\t\tconst prepared = await waitNotice(\"prepared.json\");\n\t\tif (prepared.kind !== \"prepared\") throw new VerifiedRunError(\"git_worker_protocol\");\n\t\tpreparedOid = prepared.candidateOid;\n\t\ttry {\n\t\t\tawait request.onPrepared(preparedOid);\n\t\t} catch (error) {\n\t\t\tcallbackFailed = true;\n\t\t\tthrow error;\n\t\t}\n\t\trequest.budget.remaining();\n\t\tif (!store.effectAuthorized(request.token, request.claims)) throw new VerifiedRunError(\"authority\");\n\t\twriteGitControl(join(stage.root, \"cas-go.json\"), {\n\t\t\t...prepared,\n\t\t\tauthorizationDeadline: request.token.authorizationDeadline,\n\t\t});\n\t\tresult = await waitNotice(\"result.json\");\n\t\tif (result.kind === \"prepared\" || result.candidateOid !== preparedOid)\n\t\t\tthrow new VerifiedRunError(\"git_worker_protocol\");\n\t\tif (result.kind === \"committed\") {\n\t\t\tafterCasCalled = true;\n\t\t\ttry {\n\t\t\t\tawait request.afterCas?.();\n\t\t\t} catch (error) {\n\t\t\t\tcallbackFailed = true;\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t}\n\t\twriteGitControl(join(stage.root, \"finish.json\"), result);\n\t} catch (error) {\n\t\tfailure = error;\n\t\tcontroller.abort();\n\t} finally {\n\t\tawait completion;\n\t\trequest.signal?.removeEventListener(\"abort\", cancel);\n\t\t// A callback error may reject the broker even after drain. Re-observe, never infer it.\n\t\tif (!terminationObserved && identity) terminationObserved = probeOwnedNamespace(identity) === \"terminated\";\n\t\tconst neverStarted =\n\t\t\tcompletion === undefined ||\n\t\t\t(!identity &&\n\t\t\t\texecutionFailure instanceof VerifiedRunError &&\n\t\t\t\t[\"cancelled\", \"deadline\", \"unsupported_boundary\"].includes(executionFailure.code));\n\t\ttry {\n\t\t\tif (terminationObserved || neverStarted) store.confirmTerminated(request.token);\n\t\t\telse store.cancel(request.token);\n\t\t} catch (error) {\n\t\t\tfailure =\n\t\t\t\tfailure === undefined ? error : new AggregateError([failure, error], \"Git authority settlement failed\");\n\t\t}\n\t\tif (stage && (terminationObserved || neverStarted)) {\n\t\t\ttry {\n\t\t\t\trmSync(stage.root, { recursive: true, force: true });\n\t\t\t} catch (error) {\n\t\t\t\tfailure =\n\t\t\t\t\tfailure === undefined ? error : new AggregateError([failure, error], \"Git staging cleanup failed\");\n\t\t\t}\n\t\t}\n\t}\n\tif (!terminationObserved && completion !== undefined)\n\t\tthrow failure ?? executionFailure ?? new VerifiedRunError(\"git_effect_unsettled\");\n\t// An abort racing the CAS cannot erase a ref that is already committed.\n\tif (\n\t\t!callbackFailed &&\n\t\tfailure instanceof VerifiedRunError &&\n\t\t[\"cancelled\", \"deadline\", \"git_worker_failed\"].includes(failure.code) &&\n\t\tpreparedOid &&\n\t\tresolveRef(request.workspace, OMK_ACCEPTED_REF) === preparedOid\n\t) {\n\t\tif (!afterCasCalled) await request.afterCas?.();\n\t\treturn { kind: \"committed\", candidateOid: preparedOid };\n\t}\n\tif (failure !== undefined) throw failure;\n\tif (executionFailure !== undefined) throw executionFailure;\n\tif (!result) throw new VerifiedRunError(\"git_worker_failed\");\n\treturn result;\n}\n"]}

package/dist/core/verified-run/git-execution.d.ts

@@ -0,0 +1,27 @@
+export declare class GitOperationBudget {
+    private readonly deadline;
+    private readonly clock;
+    private readonly signal;
+    private readonly counts;
+    constructor(options?: {
+        timeoutMs?: number;
+        signal?: AbortSignal;
+        clock?: () => number;
+    });
+    remaining(): number;
+    remainingWorkMs(): number;
+    record(command: string): void;
+    get commandCounts(): Readonly<Record<string, number>>;
+}
+export declare function assertPrivateEmptyHooks(path: string): void;
+/** A private hooks directory belongs to this synchronous child, never to a predictable shared path. */
+export declare function runGit(root: string, args: readonly string[], options?: {
+    write?: boolean;
+    input?: Buffer;
+    allowedExitCodes?: readonly number[];
+    budget?: GitOperationBudget;
+}): {
+    status: number;
+    stdout: Buffer;
+};
+//# sourceMappingURL=git-execution.d.ts.map

package/dist/core/verified-run/git-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-execution.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/git-execution.ts"],"names":[],"mappings":"AAWA,qBAAa,kBAAkB;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,YAAY,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;KAAO,EAM3F;IACD,SAAS,IAAI,MAAM,CAElB;IACD,eAAe,IAAI,MAAM,CAKxB;IACD,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE5B;IACD,IAAI,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAEpD;CACD;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAU1D;AAuBD,uGAAuG;AACvG,wBAAgB,MAAM,CACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAAO,GAClH;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA0CpC","sourcesContent":["import { spawnSync } from \"node:child_process\";\nimport { chmodSync, lstatSync, mkdtempSync, readdirSync, rmSync } from \"node:fs\";\nimport { devNull, tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { performance } from \"node:perf_hooks\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nconst COMMAND_TIMEOUT_MS = 30_000;\nconst MAX_OUTPUT_BYTES = 16 * 1024 * 1024;\nconst ENV_NAMES = [\"PATH\", \"SystemRoot\", \"SYSTEMROOT\", \"WINDIR\", \"TMPDIR\", \"TEMP\", \"TMP\"];\n\nexport class GitOperationBudget {\n\tprivate readonly deadline: number;\n\tprivate readonly clock: () => number;\n\tprivate readonly signal: AbortSignal | undefined;\n\tprivate readonly counts = new Map<string, number>();\n\tconstructor(options: { timeoutMs?: number; signal?: AbortSignal; clock?: () => number } = {}) {\n\t\tconst timeout = options.timeoutMs ?? COMMAND_TIMEOUT_MS;\n\t\tif (!Number.isFinite(timeout) || timeout <= 0) throw new VerifiedRunError(\"deadline\");\n\t\tthis.clock = options.clock ?? (() => performance.now());\n\t\tthis.deadline = this.clock() + timeout;\n\t\tthis.signal = options.signal;\n\t}\n\tremaining(): number {\n\t\treturn Math.min(COMMAND_TIMEOUT_MS, this.remainingWorkMs());\n\t}\n\tremainingWorkMs(): number {\n\t\tif (this.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\tconst remaining = this.deadline - this.clock();\n\t\tif (!(remaining > 0)) throw new VerifiedRunError(\"deadline\");\n\t\treturn Math.max(1, Math.ceil(remaining));\n\t}\n\trecord(command: string): void {\n\t\tthis.counts.set(command, (this.counts.get(command) ?? 0) + 1);\n\t}\n\tget commandCounts(): Readonly<Record<string, number>> {\n\t\treturn Object.freeze(Object.fromEntries(this.counts));\n\t}\n}\n\nexport function assertPrivateEmptyHooks(path: string): void {\n\tconst stat = lstatSync(path);\n\tif (\n\t\t!stat.isDirectory() ||\n\t\tstat.isSymbolicLink() ||\n\t\t(stat.mode & 0o777) !== 0o700 ||\n\t\t(process.getuid && stat.uid !== process.getuid()) ||\n\t\treaddirSync(path).length !== 0\n\t)\n\t\tthrow new VerifiedRunError(\"git_hooks_boundary\");\n}\n\nfunction gitEnvironment(write: boolean): NodeJS.ProcessEnv {\n\tconst env: NodeJS.ProcessEnv = {};\n\tfor (const name of ENV_NAMES) if (process.env[name] !== undefined) env[name] = process.env[name];\n\treturn {\n\t\t...env,\n\t\tGIT_CONFIG_NOSYSTEM: \"1\",\n\t\tGIT_CONFIG_GLOBAL: devNull,\n\t\tGIT_CONFIG_COUNT: \"0\",\n\t\tGIT_TERMINAL_PROMPT: \"0\",\n\t\tGIT_NO_REPLACE_OBJECTS: \"1\",\n\t\tGIT_OPTIONAL_LOCKS: write ? \"1\" : \"0\",\n\t\tLC_ALL: \"C\",\n\t\tGIT_AUTHOR_NAME: \"OMK verified-run\",\n\t\tGIT_AUTHOR_EMAIL: \"omk-verified-run@localhost\",\n\t\tGIT_AUTHOR_DATE: \"2000-01-01T00:00:00Z\",\n\t\tGIT_COMMITTER_NAME: \"OMK verified-run\",\n\t\tGIT_COMMITTER_EMAIL: \"omk-verified-run@localhost\",\n\t\tGIT_COMMITTER_DATE: \"2000-01-01T00:00:00Z\",\n\t};\n}\n\n/** A private hooks directory belongs to this synchronous child, never to a predictable shared path. */\nexport function runGit(\n\troot: string,\n\targs: readonly string[],\n\toptions: { write?: boolean; input?: Buffer; allowedExitCodes?: readonly number[]; budget?: GitOperationBudget } = {},\n): { status: number; stdout: Buffer } {\n\tconst budget = options.budget ?? new GitOperationBudget();\n\tbudget.remaining();\n\tconst hooks = mkdtempSync(join(tmpdir(), \"omk-verified-git-\"));\n\ttry {\n\t\tchmodSync(hooks, 0o700);\n\t\tassertPrivateEmptyHooks(hooks);\n\t\tconst isolated = [\n\t\t\t\"-c\",\n\t\t\t`core.hooksPath=${hooks}`,\n\t\t\t\"-c\",\n\t\t\t\"core.fsmonitor=false\",\n\t\t\t\"-c\",\n\t\t\t\"gc.auto=0\",\n\t\t\t\"-c\",\n\t\t\t\"maintenance.auto=false\",\n\t\t\t\"-c\",\n\t\t\t\"commit.gpgsign=false\",\n\t\t\t\"-C\",\n\t\t\troot,\n\t\t\t...args,\n\t\t];\n\t\tconst timeout = budget.remaining();\n\t\tbudget.record(args[0] ?? \"unknown\");\n\t\tconst result = spawnSync(\"git\", isolated, {\n\t\t\tenv: gitEnvironment(options.write === true),\n\t\t\tmaxBuffer: MAX_OUTPUT_BYTES,\n\t\t\ttimeout,\n\t\t\tkillSignal: \"SIGKILL\",\n\t\t\tstdio: [options.input === undefined ? \"ignore\" : \"pipe\", \"pipe\", \"pipe\"],\n\t\t\tinput: options.input,\n\t\t\twindowsHide: true,\n\t\t});\n\t\tif (result.error !== undefined)\n\t\t\tthrow new VerifiedRunError(options.write ? \"git_outcome_unknown\" : \"git_plumbing\");\n\t\tconst allowed = options.allowedExitCodes ?? [0];\n\t\tif (result.status === null || !allowed.includes(result.status)) throw new VerifiedRunError(\"git_plumbing\");\n\t\treturn { status: result.status, stdout: result.stdout };\n\t} finally {\n\t\t// spawnSync has observed the direct child's exit, including SIGKILL on timeout.\n\t\trmSync(hooks, { recursive: true, force: true });\n\t}\n}\n"]}