owlrunkit 0.18.4 → 0.19.0

package/scripts/runkit-contract/verification-envelope.mjs

@@ -13,6 +13,7 @@ import {
 import os from "node:os";
 import path from "node:path";
 
+import { persistEvidenceBytes } from "./evidence-store.mjs";
 import {
   assertAllowedKeys,
   isRecord,
@@ -564,22 +565,18 @@ function executeMacPhase({ root, cwd, envelope, phase, name, backend }) {
   });
 }
 
-function writeObject(artifactRoot, label, bytes) {
-  const hash = sha256(bytes);
-  const objectRoot = path.join(artifactRoot, "objects");
-  mkdirSync(objectRoot, { recursive: true });
-  const objectPath = path.join(objectRoot, hash);
-  if (!existsSync(objectPath)) {
-    writeJsonExclusiveAtomically(`${objectPath}.metadata.json`, {
-      schemaVersion: "OwlCodaRunKitEvidenceObjectMetadataV1",
-      sha256: hash,
-      bytes: bytes.length,
-      labels: [label],
-    });
-    const temporaryJson = { encoding: "base64", data: bytes.toString("base64") };
-    writeJsonExclusiveAtomically(objectPath, temporaryJson);
-  }
-  return { label, path: objectPath, sha256: hash, bytes: bytes.length };
+function writeObject(workspaceRoot, label, bytes) {
+  const stored = persistEvidenceBytes({
+    workspaceRoot,
+    bytes,
+    encoding: "base64_json",
+  });
+  return {
+    label,
+    path: stored.absolutePath,
+    sha256: stored.digest,
+    bytes: stored.sizeBytes,
+  };
 }
 
 function cleanScratch(root, patterns) {
@@ -710,8 +707,8 @@ export async function runVerificationEnvelopeV1({
   const scratchCleanup = cleanScratch(root, validated.envelope.paths.disposableScratch);
   const evidenceObjects = [];
   const phases = rawPhases.map((phase) => {
-    const stdout = writeObject(outputRoot, `${phase.name}:stdout`, phase.stdout);
-    const stderr = writeObject(outputRoot, `${phase.name}:stderr`, phase.stderr);
+    const stdout = writeObject(root, `${phase.name}:stdout`, phase.stdout);
+    const stderr = writeObject(root, `${phase.name}:stderr`, phase.stderr);
     evidenceObjects.push(stdout, stderr);
     return {
       name: phase.name,