patchwork-os 1.2.0-beta.2.canary.783 → 1.2.0-beta.2.canary.784

package/dist/evidenceVerify.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `patchwork evidence verify` — is the evidence spine internally intact?
+ *
+ * The offline reader ADR-0027 pairs with `appendChained`. Walks every ledger
+ * on `SPINE_LEDGERS` through `verifyLedgerChain` and reduces to one verdict.
+ *
+ * Unlike `patchwork evidence`, this one GATES: `ok: false` and exit 1 on any
+ * break, on a legacy-prefix mismatch, on a head sidecar that says the file
+ * used to be longer, and on a PENDING write-failure count — because a ledger
+ * that stopped writing is a different fact from a quiet day and this is the
+ * command that is supposed to say so.
+ *
+ * Prints counts and positions (line number, iseq) only, never a value. A line
+ * number is not operator data; a row is.
+ */
+import { type ChainVerification } from "./ledgerChain.js";
+export interface LedgerVerification extends ChainVerification {
+    key: string;
+    /** Relative to `dir` — what the report prints. */
+    file: string;
+}
+export interface EvidenceVerification {
+    dir: string;
+    ok: boolean;
+    ledgers: LedgerVerification[];
+}
+export declare function verifyEvidenceChains(dir?: string): EvidenceVerification;
+export declare function formatEvidenceVerify(r: EvidenceVerification): string;

package/dist/evidenceVerify.js

@@ -0,0 +1,74 @@
+/**
+ * `patchwork evidence verify` — is the evidence spine internally intact?
+ *
+ * The offline reader ADR-0027 pairs with `appendChained`. Walks every ledger
+ * on `SPINE_LEDGERS` through `verifyLedgerChain` and reduces to one verdict.
+ *
+ * Unlike `patchwork evidence`, this one GATES: `ok: false` and exit 1 on any
+ * break, on a legacy-prefix mismatch, on a head sidecar that says the file
+ * used to be longer, and on a PENDING write-failure count — because a ledger
+ * that stopped writing is a different fact from a quiet day and this is the
+ * command that is supposed to say so.
+ *
+ * Prints counts and positions (line number, iseq) only, never a value. A line
+ * number is not operator data; a row is.
+ */
+import path from "node:path";
+import { SPINE_LEDGERS } from "./evidenceCoverage.js";
+import { verifyLedgerChain } from "./ledgerChain.js";
+import { patchworkHome } from "./patchworkHome.js";
+export function verifyEvidenceChains(dir = patchworkHome()) {
+    const ledgers = [];
+    for (const { key, file } of SPINE_LEDGERS) {
+        const v = verifyLedgerChain(path.join(dir, file));
+        ledgers.push({ ...v, key, file });
+    }
+    const ok = ledgers.every((l) => l.ok && l.writeFailedPending === 0);
+    return { dir, ok, ledgers };
+}
+export function formatEvidenceVerify(r) {
+    const L = [];
+    L.push("[evidence verify] is the spine internally intact?");
+    L.push(`  ${r.dir}`);
+    L.push("");
+    for (const l of r.ledgers) {
+        if (l.absent) {
+            L.push(`  ABSENT   ${l.file}`);
+            continue;
+        }
+        const chainNote = l.chainedRows === 0 && l.legacyPrefix === "unchained"
+            ? `${l.legacyRows} legacy row(s), no chain yet`
+            : `${l.chainedRows} chained row(s), legacy prefix ${l.legacyPrefix}` +
+                (l.legacyRows > 0 ? ` (${l.legacyRows} row(s))` : "") +
+                (l.rotations > 0
+                    ? `, ${l.droppedByRotation} row(s) removed by rotation`
+                    : "") +
+                (l.writeFailedSealed > 0
+                    ? `, ${l.writeFailedSealed} failed append(s) sealed`
+                    : "") +
+                `, head ${l.head}`;
+        const state = !l.ok
+            ? "BROKEN"
+            : l.writeFailedPending > 0
+                ? "PENDING"
+                : "OK";
+        L.push(`  ${state.padEnd(8)} ${l.file}  ${chainNote}`);
+        for (const b of l.breaks) {
+            L.push(`           ${b.kind} break at line ${b.line}` +
+                (b.iseq !== null ? ` (iseq ${b.iseq})` : ""));
+        }
+        if (l.legacyPrefix === "mismatch") {
+            L.push("           legacy prefix does not match the chain-start commitment");
+        }
+        if (l.writeFailedPending > 0) {
+            L.push(`           ${l.writeFailedPending} append(s) failed since the last row landed — not yet sealed`);
+        }
+    }
+    L.push("");
+    L.push(r.ok
+        ? "STATUS: INTACT"
+        : "STATUS: NOT INTACT — a break, a mismatch, a shortened file or an unsealed failure above");
+    L.push("");
+    return L.join("\n");
+}
+//# sourceMappingURL=evidenceVerify.js.map

package/dist/evidenceVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidenceVerify.js","sourceRoot":"","sources":["../src/evidenceVerify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAA0B,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAcnD,MAAM,UAAU,oBAAoB,CAClC,GAAG,GAAG,aAAa,EAAE;IAErB,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,aAAa,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,kBAAkB,KAAK,CAAC,CAAC,CAAC;IACpE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,CAAuB;IAC1D,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC5D,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACb,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GACb,CAAC,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,WAAW;YACnD,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,8BAA8B;YAC/C,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,kCAAkC,CAAC,CAAC,YAAY,EAAE;gBAClE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC;oBACd,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,6BAA6B;oBACvD,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC;oBACtB,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,0BAA0B;oBACpD,CAAC,CAAC,EAAE,CAAC;gBACP,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE;YACjB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACzB,CAAC,CAAC,IAAI,CACJ,cAAc,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,IAAI,EAAE;gBAC5C,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAC/C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YAClC,CAAC,CAAC,IAAI,CACJ,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;YAC7B,CAAC,CAAC,IAAI,CACJ,cAAc,CAAC,CAAC,kBAAkB,8DAA8D,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,EAAE;QACF,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,yFAAyF,CAC9F,CAAC;IACF,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC"}

package/dist/index.js

@@ -4389,7 +4389,11 @@ if (process.argv[2] === "sweep") {
 if (process.argv[2] === "evidence") {
     const args = process.argv.slice(3);
     if (args.includes("--help") || args.includes("-h")) {
-        process.stdout.write("Usage: patchwork evidence [--dir <path>] [--json]\n\n" +
+        process.stdout.write("Usage: patchwork evidence [verify] [--dir <path>] [--json]\n\n" +
+            "  verify        is every spine ledger internally intact? (ADR-0027) Checks the\n" +
+            "                per-row hash chain, the legacy-prefix commitment, the head sidecar\n" +
+            "                and unsealed write failures. Exits 1 on any break — the only form\n" +
+            "                of this verb that gates.\n\n" +
             "How much of the evidence spine can actually be joined: per ledger, how many\n" +
             "rows carry a run id (correlationId) out of how many rows, and how many runs\n" +
             "appear in more than one ledger.\n\n" +
@@ -4404,6 +4408,18 @@ if (process.argv[2] === "evidence") {
         try {
             const dirIdx = args.indexOf("--dir");
             const dir = dirIdx !== -1 ? args[dirIdx + 1] : undefined;
+            if (args[0] === "verify") {
+                // ADR-0027. Unlike the bare verb this one GATES: exit 1 on any chain
+                // break, legacy mismatch, shortened file or unsealed write failure,
+                // with `ok: false` in the JSON so a cron job can act on it. Still
+                // prints positions and counts only, never a value.
+                const { verifyEvidenceChains, formatEvidenceVerify } = await import("./evidenceVerify.js");
+                const r = dir ? verifyEvidenceChains(dir) : verifyEvidenceChains();
+                process.stdout.write(args.includes("--json")
+                    ? `${JSON.stringify(r, null, 2)}\n`
+                    : formatEvidenceVerify(r));
+                process.exit(r.ok ? 0 : 1);
+            }
             const { evidenceCoverage, formatEvidenceCoverage } = await import("./evidenceCoverage.js");
             const { evidenceRelationships, formatEvidenceRelationships } = await import("./evidenceRelationships.js");
             const report = dir ? evidenceCoverage(dir) : evidenceCoverage();