specrails-core 5.3.0 → 5.4.0

package/dist/installer/runtime/pipeline-state.d.ts

@@ -28,7 +28,19 @@ export interface PipelineContext {
     };
     specs: PipelineSpec[];
 }
+export interface HostCheckPolicy {
+    reuse?: 'never' | 'snapshot-local';
+    inputs?: string[];
+    deterministic?: boolean;
+    readOnly?: boolean;
+    toolchainInputs?: string[];
+    independentGroup?: string;
+    resources?: string[];
+}
 export interface VerificationCommand {
+    key?: string;
+    label?: string;
+    policy?: HostCheckPolicy;
     repositoryId: string;
     command: string;
     args: string[];
@@ -42,6 +54,7 @@ export interface VerificationRequest {
     kind: 'full' | 'scoped';
     commands: VerificationCommand[];
     unverified?: boolean;
+    planHash?: string;
 }
 export interface CommandReceipt {
     repositoryId: string;
@@ -56,13 +69,32 @@ export interface CommandReceipt {
     exitCode: number;
     durationMs: number;
     output: string;
+    checkDefinitionHash?: string;
+    checkDefinition?: VerificationCommand;
+    disposition?: 'executed' | 'reused' | 'not-run';
+    reusedFrom?: string;
+    reuseReason?: string;
+    snapshot?: VerificationSnapshot;
+    pending?: boolean;
+    evidenceId?: string;
+    stdout?: string;
+    stderr?: string;
+    outputTruncated?: boolean;
+    key?: string;
+    label?: string;
+    configuredTimeoutMs?: number;
+    appliedTimeoutMs?: number;
+    deadline?: number;
+    outcome?: 'passed' | 'failed' | 'cancelled' | 'timed-out' | 'interrupted';
 }
 export interface VerificationReceipt {
     id: string;
     kind: 'full' | 'scoped';
     scopeHash: string;
     candidateHash: string;
+    planHash?: string;
     commands: CommandReceipt[];
+    notRunEvidenceIds?: string[];
     completedAt: string;
     valid: boolean;
     reason?: string;
@@ -102,6 +134,7 @@ export interface AcceptanceReceipt extends AcceptanceReport {
     candidateHash: string;
     artifactHash: string;
     recordedAt: string;
+    planHash?: string;
 }
 export interface PipelineCompletion {
     implementation: 'complete' | 'incomplete';
@@ -130,6 +163,13 @@ export interface PipelineState {
     createdAt: string;
     updatedAt: string;
     phases: Record<PipelinePhase, PhaseRecord>;
+    verificationPlan?: {
+        hash: string;
+        files: Array<{
+            path: string;
+            hash: string;
+        }>;
+    };
     verification?: VerificationReceipt;
     acceptance?: AcceptanceReceipt;
     archivePath?: string;
@@ -156,8 +196,23 @@ export interface PreviewFile {
 export declare function verificationEnvironment(env: NodeJS.ProcessEnv, overrides?: Record<string, string>, platform?: NodeJS.Platform): NodeJS.ProcessEnv;
 export declare function validatePipelineContext(input: unknown): PipelineContext;
 export declare function pipelineStateDirectory(context: PipelineContext): string;
+export interface CandidateManifest {
+    schemaVersion: 1;
+    scopeHash: string;
+    repositories: Array<{
+        id: string;
+        path: string;
+        files: Array<[string, string]>;
+    }>;
+}
+export declare function candidateManifest(state: PipelineState): CandidateManifest;
 export declare function fingerprintCandidate(state: PipelineState): string;
 export declare function initializePipeline(contextInput: unknown, change: string): PipelineState;
+/** Host-owned binding, including immutable harness bytes outside the candidate. */
+export declare function bindVerificationPlan(contextInput: PipelineContext, hash: string, files: Array<{
+    path: string;
+    hash: string;
+}>): void;
 declare function inspectReceipt(state: PipelineState, env?: NodeJS.ProcessEnv): {
     valid: boolean;
     reasons: string[];
@@ -187,6 +242,8 @@ export declare function inspectPipeline(contextInput: unknown): {
     verification: ReturnType<typeof inspectReceipt>;
     acceptance: ReturnType<typeof inspectAcceptance>;
     completion: PipelineCompletion;
+    planHash?: string;
+    candidateHash: string;
 };
 /**
  * Native executables retain structured argv; Windows script shims need cmd.
@@ -200,11 +257,95 @@ export declare function verificationInvocation(command: string, args: string[],
     args: string[];
     windowsVerbatimArguments?: boolean;
 };
-export declare function verifyPipeline(contextInput: unknown, raw: unknown, log?: (text: string) => void, signal?: AbortSignal): Promise<VerificationReceipt>;
+/** Shared persisted-output/provider diagnostic redaction; preserves line structure. */
+export declare function redactRuntimeText(text: string, env?: NodeJS.ProcessEnv): string;
+export interface VerificationSnapshot {
+    eligible: boolean;
+    reason: string;
+    inputHash?: string;
+    toolchainHash?: string;
+}
+/** Host opt-in is a declaration of determinism, not inferred hermeticity. */
+export declare function verificationSnapshot(context: PipelineContext, command: VerificationCommand): VerificationSnapshot;
+/** Contiguous waves preserve baseline order; an uncertain check is a barrier. */
+export declare function verificationWaves<T extends VerificationCommand>(commands: T[], maxConcurrency?: number): T[][];
+export declare function verifyPipeline(contextInput: unknown, raw: unknown, log?: (text: string) => void, signal?: AbortSignal, options?: {
+    deadline?: number;
+    maxConcurrency?: number;
+    onEvidence?: (kind: 'check-started' | 'check-finished' | 'check-reused' | 'check-invalidated', payload: Record<string, string | number | null>) => Promise<void>;
+}): Promise<VerificationReceipt>;
 /** Validate a check plan without creating state or executing commands. */
 export declare function validateVerificationRequest(contextInput: unknown, raw: unknown): void;
 export declare function preparePreview(contextInput: unknown, raw: unknown): PipelineState;
 export declare function applyPreview(contextInput: unknown, verificationRequest: unknown, log?: (text: string) => void): Promise<VerificationReceipt>;
 export declare function runPipelineCommand(flags: Record<string, string | boolean>, positionals: string[]): Promise<number>;
 export declare function runPipelineCli(argv: string[]): Promise<number>;
+export interface VerificationEvidenceQuery {
+    id?: string;
+    section?: 'summary' | 'stdout' | 'stderr' | 'source';
+    sourceId?: string;
+    cursor?: string;
+    limit?: number;
+}
+/** Historical read: no live repository validation, source execution or lifecycle mutation. */
+export declare function readVerificationEvidence(context: Pick<PipelineContext, 'backlogRoot' | 'runId'>, query?: VerificationEvidenceQuery): {
+    nextCursor?: string | undefined;
+    schemaVersion: number;
+    available: boolean;
+    items: Record<string, unknown>[];
+    truncated: boolean;
+} | {
+    schemaVersion: number;
+    available: boolean;
+    items: {
+        sources: {
+            id: string;
+            displayPath: string;
+            byteCount: number;
+            hash: string;
+        }[];
+        schemaVersion: 1;
+        runId: string;
+        id: string;
+        checkId: string;
+        repositoryId: string;
+        label: string;
+        origin: string[];
+        required: true;
+        disposition: "executed" | "reused" | "not-run";
+        reusedFrom?: string;
+        status: "passed" | "failed" | "cancelled" | "interrupted" | "unavailable";
+        reuseReason?: string;
+        recordedAt: string;
+        execution: {
+            command: string;
+            args: string[];
+            cwd: string;
+            configuredTimeoutMs: number | null;
+            appliedTimeoutMs: number | null;
+            deadline: number | null;
+            outcome: string | null;
+        };
+        planHash: string;
+        candidateHash: string;
+        executionId: string;
+        exitCode: number | null;
+        durationMs: number | null;
+        outputTruncated: boolean;
+        stdoutBytes: number;
+        stderrBytes: number;
+        stdoutHash: string;
+        stderrHash: string;
+    }[];
+    truncated: boolean;
+} | {
+    nextCursor?: string | undefined;
+    schemaVersion: number;
+    available: boolean;
+    text: string;
+    byteCount: number;
+    totalBytes: number;
+    truncated: boolean;
+    items?: undefined;
+};
 export {};