swarm-orchestrator 14.2.0 → 14.3.0

package/README.md

@@ -2,221 +2,118 @@
 
 <div align="center">
 
-<h1>swarm-orchestrator</h1>
+<h1>Swarm Verify</h1>
 
-<p><strong>A coding agent for the terminal that leaves a signed, offline-checkable record of what it ran and what passed.</strong></p>
-
-<p>
-The model can say whatever it likes.<br />
-It cannot make a check pass, mark a claim verified, or change a record after the fact.
-</p>
-
-<p>
-  <a href="docs/README.md"><strong>Explore the docs »</strong></a>
-  ·
-  <a href="docs/evidence/2026-08-18/live-tasks.md">See a real run</a>
-  ·
-  <a href="https://github.com/moonrunnerkc/swarm-orchestrator/issues/new?labels=bug">Report a bug</a>
-</p>
-
-[![gates](https://img.shields.io/github/actions/workflow/status/moonrunnerkc/swarm-orchestrator/gates.yml?branch=v13-main&style=for-the-badge&label=gates)](https://github.com/moonrunnerkc/swarm-orchestrator/actions/workflows/gates.yml)
-[![npm](https://img.shields.io/npm/v/swarm-orchestrator?style=for-the-badge&label=npm&color=CB3837)](https://www.npmjs.com/package/swarm-orchestrator)
-[![node](https://img.shields.io/badge/node-%E2%89%A522-5FA04E?style=for-the-badge)](package.json)
-[![license](https://img.shields.io/badge/license-ISC-blue?style=for-the-badge)](LICENSE)
+<p><strong>Swarm Verify runs a project's checks and records evidence showing what passed, what failed, and what remains unverified.</strong></p>
 
 </div>
 
----
-
-## What it is
-
-`swarm` takes a task and a git repository, makes a bounded change, runs your project's checks
-over it, and writes a record of every command it ran and every check that passed or failed.
-The record is a hash-chained ledger, exported as a signed bundle that carries its own
-dependency-free verifier, so anyone can check it later with nothing but Node and without
-trusting the machine that produced it.
-
-It is for two kinds of people. Engineers who want an agent to make a change and want to review
-what it did from evidence rather than from the agent's own summary. And reviewers who are handed
-somebody else's patch or bundle and need to check it without installing the agent or believing
-its author.
-
-**Upgrading from 12.x?** That was a pull-request auditor; 13 and later are a coding agent under
-the same package name, with no migration path. Stay on the `v12-final` tag, or pin the major.
-
-## Source upgrade workflows
+This is the main source repository for Swarm Verify, maintained under the swarm-orchestrator
+repository name. It also contains the optional beta coding agent. The separate
+[moonrunnerkc/swarm-verify](https://github.com/moonrunnerkc/swarm-verify) repository distributes
+the GitHub Action.
 
-The [broad-use source guide](docs/broad-use.md) covers model-free patch, branch and PR verification;
-Node/Python initialization and selected packages; CLI, local HTTP and optional Playwright checks;
-one explicit escalation; and bugfix, refactor and dependency-upgrade presets. The full and
-standalone CLIs share the verifier. [Delivery evidence](docs/upgrade-completion.md) distinguishes
-implemented source, exact-source validation and remote delivery. These additions are not an
-npm publication; use the documented source tarball installation until a release is verified.
+![A bundle verifies, one byte is changed, and the verifier refuses it with the broken link named](docs/evidence/2026-09-27/verifier-first/tamper-demo.gif)
 
-Browser acceptance requires a sealed `instrument` and an immutable Playwright container runtime.
-Project `argv` reports remain unjudged. Unavailable package checks remain visible; missing
-required checks prevent complete verification. See the linked broad-use guide for migration.
-
-## Install
+The recording is a real run of the published package over a committed evidence bundle: it
+verifies, one byte of one record is changed, and the altered bundle is refused with the broken
+link named. That is integrity. Who signed a bundle, and whether the tests it records measured
+the right thing, are separate questions the verifier answers separately
+([transcript](docs/evidence/2026-09-27/verifier-first/tamper-demo-transcript.txt),
+[script](docs/evidence/2026-09-27/verifier-first/tamper-demo.sh)).
 
 ```sh
-npm install -g swarm-orchestrator
+npx swarm-verify
 ```
 
-That is **14.1.0**. It runs on Node 22 or newer. Node 24 or newer is recommended, because the
-changed-line coverage measurement spawns node's test runner with `--test-isolation=process`,
-which Node 22 rejects; below 24 that one measurement reports unmeasured and never counts as a
-pass. `swarm doctor` says which Node it found and what owns the `swarm` command, and `--fix`
-repairs an install that an older build is shadowing.
+Run it in a git repository whose dependencies are installed (`npm ci`, `pnpm install
+--frozen-lockfile` or `uv sync`; it names the missing step and exits 4 when they are not). It
+reads the checks the project declares, runs them unattended the way a CI job would, and reports
+apart: whether the command ran, what each check found, how the commands were contained, and
+what it did not judge. By default it does not challenge the checks and does not judge whether
+the work is correct: a pass is a regression-only pass, and the result line says so. A failed
+check exits 1 and names the check; a check whose result cannot be trusted, such as a pass
+reported by a test configuration the change itself edited, exits 4 and says why.
+
+It creates no `swarm.toml` and keeps its evidence outside the repository, under
+`~/.swarm/sessions` by default. While it runs it briefly adds, then removes, its own
+`swarm-falsification-bond.*` fixtures to show each passing check can fail, and the project's
+own commands may write build output, caches or other files as they always do. No model, key
+or configuration is needed.
+
+Needs Node 22 or newer, git, and `uv` for a Python project. Linux and macOS run every command;
+Windows runs bundle and verdict verification only. Locally, commands run on the host with a
+built environment and no credentials, which is a policy and not a sandbox; the Action runs
+them in a network-disabled container.
 
-## Try it
+[![gates](https://img.shields.io/github/actions/workflow/status/moonrunnerkc/swarm-orchestrator/gates.yml?branch=v13-main&style=for-the-badge&label=gates)](https://github.com/moonrunnerkc/swarm-orchestrator/actions/workflows/gates.yml)
+[![verifier matrix](https://img.shields.io/github/actions/workflow/status/moonrunnerkc/swarm-orchestrator/verifier-matrix.yml?branch=v13-main&style=for-the-badge&label=node%2022%20%7C%2024)](https://github.com/moonrunnerkc/swarm-orchestrator/actions/workflows/verifier-matrix.yml)
+[![npm](https://img.shields.io/npm/v/swarm-verify?style=for-the-badge&label=swarm-verify&color=CB3837)](https://www.npmjs.com/package/swarm-verify)
+[![license](https://img.shields.io/badge/license-ISC-blue?style=for-the-badge)](LICENSE)
 
-```sh
-export ANTHROPIC_API_KEY=...       # or OPENAI_API_KEY, GOOGLE_GENERATIVE_AI_API_KEY,
-                                   # or start Ollama and pass --model local:<id>
-cd your-repository
-swarm "make slugify collapse whitespace and strip punctuation"
+## In CI
+
+One job, one Action, the permissions a signed comment needs
+([the complete workflow](docs/examples/swarm-verification.yml)):
+
+```yaml
+name: swarm-verify
+on:
+  pull_request:
+permissions:
+  contents: read
+  pull-requests: write
+  id-token: write
+  attestations: write
+  artifact-metadata: write
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: moonrunnerkc/swarm-verify@v1
+        with:
+          install: true # install from the lockfile, scripts off, then run skipped scripts offline; omit for a project with no dependencies
 ```
 
-Keys come from the environment or your OS keychain, never from `swarm.toml`: that file is
-committed and cloned, so a key in it has already been shared with everyone holding the
-repository. Every command and flag is in [docs/cli.md](docs/cli.md).
-
-<p align="right">(<a href="#readme-top">back to top</a>)</p>
-
-## How it verifies
-
-Every tool call and every check goes through one recording chokepoint, and the record is an
-append-only, hash-chained ledger that lives outside the workspace. When a run ends it is
-exported as a signed bundle carrying a dependency-free verifier, so the bundle can be checked
-anywhere with plain Node.
-
-Five words carry most of the weight. A **gate** is a check declared as data: a command, a
-parser, and whether it blocks. The **ratchet** is the rule that a retry may not trade away
-tests, assertions or coverage to turn a gate green. A **bond** is one file a passing gate is
-handed that it must refuse, so a pass that cannot fail is caught. An **oracle** is the check
-you supply that says the task was done, as distinct from nothing broke. **Reach** is whether
-that oracle executed the lines a patch added. And **unmeasured** is a verdict of its own:
-nobody checked is not the same as checked and passed, and it never renders green.
-
-The mechanics, the nine-answer report and worked examples are in
-[docs/verifying.md](docs/verifying.md). Retries under the ratchet, sessions and several workers
-at once are in [docs/using.md](docs/using.md).
-
-## Use it without a model
-
-Three commands need no model, no API key and no local backend. `swarm gates` measures a
-workspace, `swarm ci --patch <file>` verifies a patch in a fresh checkout of its base, and
-`swarm verify <bundle>` checks a bundle and who signed it. They also ship on their own as the
-`swarm-verify` package under [packages/swarm-verify](packages/swarm-verify), the same code with
-none of the agent. The walkthrough, over the committed tamper demo, and the install for the
-standalone package are in [docs/verify-only.md](docs/verify-only.md).
-
-<p align="right">(<a href="#readme-top">back to top</a>)</p>
-
-## Measured
-
-Every number here links to the committed artifact of the thing happening. The full table, and
-the list of things that may not be said, is [docs/claims.md](docs/claims.md).
-
-- **One changed byte breaks verification.** The same bundle verified and then tampered with in
-  a single byte, exit 0 and exit 1 side by side, with a script to reproduce it:
-  [tamper demo](docs/evidence/2026-08-18/tamper-demo).
-- **A bundle verifies on a machine that has never seen this repository.** Run in a `node:24`
-  container with no network and no mount of this repository:
-  [clean-container-verification.md](docs/evidence/2026-08-23/clean-container-verification.md).
-- **A green verdict is computed by the harness, and the model cannot produce one.** In a real
-  run the model asserted a predicate the language does not parse; the harness rendered it
-  `UNVERIFIED` and carried on, twice: [shakedown results](docs/evidence/2026-08-18/shakedown/results.md).
-- **A suite passing is not the task being done.** Four of eighteen real-repository patches
-  passed their project's whole suite and failed a hidden acceptance test, which is why `swarm ci`
-  reports `regression` and `task` as two answers: [docs/verifying.md](docs/verifying.md).
-- **The oracle is judged too.** Certified tasks turned out to rest on oracles that could not
-  fail. The last false green standing, `commander#1671`, was certified by an oracle that runs
-  every line the patch adds and never tests the precedence those lines decide; it is refused now
-  because that oracle accepted a change to a line it had run:
-  [docs/verifying.md](docs/verifying.md#the-oracle-is-judged-too).
-- **The September 6 mined-corpus false-green rate was 0 in 15**, 0.0%, 95% CI [0.0, 20.4], with
-  two oracles per task, one handed to the tool and one held back:
-  [mined-corpus](docs/evidence/2026-09-06/mined-corpus/README.md). The denominator moved when
-  the tool did: four patches both oracles accept are refused because the tool's own oracle never
-  ran part of what they changed, five because the sealed half rejects work the held-back half
-  accepts, and one because its oracle accepted a change to a line it had run.
-- **Twelve tasks reported as unjudgeable were the agent having written nothing at all**, which
-  is a model failure and is recorded as one. An earlier 0-of-18 was withdrawn rather than
-  corrected quietly: the same test was handed to the tool and then used as the ground truth it
-  was scored against, so it agreed with itself:
-  [false-green-measurement.md](docs/evidence/2026-09-05/false-green-measurement.md).
-- **Of the gates this project agreed not to call itself production-ready without**, the
-  historical assessment records eight passing, two partial, two unproven, and two reported
-  rather than barred: [docs/beta-gates.md](docs/beta-gates.md).
-
-<p align="right">(<a href="#readme-top">back to top</a>)</p>
-
-## What is not claimed
-
-The five that matter most. The full list is in
-[docs/verifying.md](docs/verifying.md#what-is-not-claimed).
-
-- **It is not production-ready.** The counts above describe the linked campaigns, not a fresh
-  measurement of every gate on this checkout. Each row and what would settle it:
-  [docs/beta-gates.md](docs/beta-gates.md).
-- **Not "fully secure".** The secret detector does known-pattern scrubbing, not secret removal.
-  Zero crashes at a fuzz budget is evidence, not proof.
-- **The default execution mode is `restricted`, not `isolated`.** A lexical path and program
-  policy in front of interpreters unless you pass `--isolation`. Reported before the run starts
-  and recorded on the chain rather than quietly assumed, but it is not containment.
-- **0 in 15 says "under 20%", not "zero".** That upper bound is the honest half of the rate,
-  and it is a rate for that corpus and that build, not for this one.
-- **Shown its oracle, a model still gets past this.** A patch written to satisfy a visible test
-  has its added lines tested by that test, so the oracle refuses every mutant of them and is
-  right to. Bonding asks whether the oracle judged what the patch added. It cannot ask what the
-  patch left out, and that is what an adversarial patch does.
-
-Gates prove mechanical quality, not design quality. What a bundle buys you is that reviewing the
-change is fast and its claims are checkable, not that review is unnecessary.
-
-<p align="right">(<a href="#readme-top">back to top</a>)</p>
-
-## Roadmap
-
-The implementation is ahead of the evidence needed to call this production-ready. The audit
-repairs are recorded in [the implementation record](docs/audit-implementation-2026-09-11.md);
-the local campaign and every excluded case are in
-[the September 11 report](docs/evidence/2026-09-11/local-campaign/report.md).
-
-- [x] Connect verification, displayed acceptance, cancellation, budgets and recovery to the
-      records that establish them. Use standard DSSE signing bytes and literal replacement text.
-- [x] Build the campaign machinery: separate case author, checker and solver models; admission
-      controls before grading; frozen schedules; actual baseline dispatch; every failed launch
-      retained; raw evidence that can be checked from the checkout.
-- [x] Run the available Docker security and cleanup matrix. Fourteen declared observations
-      passed, with working attack controls and a separate check that ordinary work still runs.
-      Repair after abrupt harness death was exercised too.
-- [ ] A false-green interval that supports a population claim. The historical 0 in 15 has a
-      20.4% upper bound. The new synthetic pilot admits one evaluation case and cannot narrow
-      that bound for real work. Freeze an independent population and a sufficient sample first.
-- [ ] A denominator the tool did not choose. The new admission pass checks references and
-      predetermined counterexamples, but model authorship alone does not establish independence
-      or complete requirements. Independent admission and review are still needed.
-- [ ] An adversarial verification corpus that covers omitted requirements. Separate local
-      models supplied fresh checks and attacks. Mutation of added lines still cannot establish
-      that a patch implemented something it left out; the report keeps those outcomes visible.
-- [ ] Task success non-inferior to the strongest alternative. The two local baseline arms now
-      execute, with matched tasks and budgets. This pilot is too small to establish which tool
-      is strongest or to support a non-inferiority claim.
-- [ ] Security evidence for every supported backend. Docker was measured here; Podman and
-      nerdctl were unavailable. Independent attacks and those runtime matrices remain open.
-- [ ] No surviving daemons across the supported runtime boundaries. Docker cleanup passed the
-      declared lifecycle cases. Restricted host execution still cannot own a descendant that
-      leaves its process group; abrupt harness death requires supervision or later repair.
-- [ ] A new user productive in under ten minutes. The fixture and observer procedure are ready.
-      No new users were observed, so setup checks cannot close this item.
-
-Each broader claim stays open until its own evidence meets the bar in
-[docs/beta-gates.md](docs/beta-gates.md).
-
-<p align="right">(<a href="#readme-top">back to top</a>)</p>
+The Action fetches the pull request's head and base by commit id into a checkout it owns, runs
+the project's checks in a network-disabled container, signs the verdict as a GitHub artifact
+attestation, and posts one comment bound to the head that says what was measured and what was
+not. A route for forks and Dependabot is [documented](docs/examples/swarm-verification-forks.yml);
+what has been exercised on a real fork is recorded in
+[the completion index](docs/verifier-first/README.md). Inputs, outputs and how to verify a
+signed verdict from outside the run are in [the broad-use guide](docs/broad-use.md#github-action).
+
+## What it says, and what it does not
+
+`regression: pass` means no check failed because of the change. It does not mean every check
+passed: a failure the base commit already had, the same way and in the same tests, is shown as
+inherited and does not count against the change, and the report names those failing tests. It
+does not mean the work was done either.
+
+A requirement contract (`swarm-verify ci --goal-contract`) defines what the work must do, and
+the contract's checks are the evidence for each requirement. Neither the contract nor a
+signature proves the code is semantically correct. `--challenges report` asks whether each
+requirement's check could have caught wrong work (does it reject the tree before the change,
+mechanical mutations of the change, a fixture sealed as a violation) and reports gaps;
+`--challenges required` refuses on a gap; `off` asks nothing.
+
+Every run exports a bundle carrying its own dependency-free verifier. Integrity, signer
+identity, execution trust, regression, task acceptance and challenge coverage are reported as
+separate answers, and `unmeasured` is one of them.
+
+## Where to go next
+
+| You want to | Read |
+| --- | --- |
+| verify a patch, branch or pull request from any author, with a contract or without | [docs/verify-only.md](docs/verify-only.md), [docs/broad-use.md](docs/broad-use.md) |
+| check what a bundle establishes, and who signed it | [docs/verify-only.md](docs/verify-only.md#swarm-verify-a-bundle-and-who-signed-it) |
+| route an agent's test command through the ledger, from Claude Code, an MCP client or a git hook | [docs/integrations.md](docs/integrations.md) |
+| every command, flag and exit code | [docs/cli.md](docs/cli.md) |
+| every public claim and the artifact behind it, and what may not be said | [docs/claims.md](docs/claims.md) |
+| the coding agent this verifier was built for, an advanced beta mode | [docs/agent.md](docs/agent.md) |
+| the verifier-first campaign, its baseline, evidence and open items | [docs/verifier-first/README.md](docs/verifier-first/README.md) |
+
+The full documentation index is [docs/README.md](docs/README.md).
 
 ## Contributing
 
@@ -231,17 +128,4 @@ does not establish.
 5. Push (`git push origin feature/amazing-feature`)
 6. Open a pull request
 
-New dependencies need a one-line justification; the standard library is preferred.
-[docs/build-guide.md](docs/build-guide.md) is worth reading before structural work.
-
-## License
-
-Distributed under the ISC License. See [LICENSE](LICENSE).
-
-## Contact
-
-Brad Kinnard, [@KChackerman](https://x.com/KChackerman), bradkinnard@proton.me
-
-Project link: [github.com/moonrunnerkc/swarm-orchestrator](https://github.com/moonrunnerkc/swarm-orchestrator)
-
 <p align="right">(<a href="#readme-top">back to top</a>)</p>

package/dist/action/artifacts.js

@@ -0,0 +1,72 @@
+import { createHash } from "node:crypto";
+import { copyFileSync, lstatSync, mkdirSync, readdirSync, readFileSync, writeFileSync, } from "node:fs";
+import { join } from "node:path";
+const byteLimit = 32_000_000;
+const fileByteLimit = 8_000_000;
+const fileLimit = 4096;
+const depthLimit = 8;
+/** Copy the named entries of `directory` under `directory/retained`, within the bounds. */
+export function retainActionArtifacts(directory, names = [
+    "bundle",
+    "report.json",
+    "summary.md",
+    "verdict.json",
+    "attestation",
+    "diagnostic.txt",
+]) {
+    const destination = join(directory, "retained");
+    mkdirSync(destination, { mode: 0o700, recursive: true });
+    const inventory = [];
+    let remaining = byteLimit;
+    let complete = true;
+    const visit = (path, relative, depth) => {
+        if (depth > depthLimit || inventory.length >= fileLimit) {
+            complete = false;
+            return;
+        }
+        const stat = lstatSync(path);
+        if (stat.isDirectory()) {
+            mkdirSync(join(destination, relative), { recursive: true, mode: 0o700 });
+            for (const name of readdirSync(path))
+                visit(join(path, name), join(relative, name), depth + 1);
+        }
+        else if (stat.isFile() && stat.size <= fileByteLimit && stat.size <= remaining) {
+            const bytes = readFileSync(path);
+            const digest = `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
+            copyFileSync(path, join(destination, relative));
+            remaining -= bytes.length;
+            inventory.push({ path: relative, bytes: bytes.length, digest, retained: true });
+        }
+        else {
+            complete = false;
+            inventory.push({
+                path: relative,
+                bytes: stat.size,
+                retained: false,
+                reason: "retention bound or unsupported file type",
+            });
+        }
+    };
+    for (const name of names) {
+        try {
+            lstatSync(join(directory, name));
+        }
+        catch {
+            continue;
+        }
+        try {
+            visit(join(directory, name), name, 0);
+        }
+        catch (cause) {
+            complete = false;
+            inventory.push({
+                path: name,
+                retained: false,
+                reason: cause.code ?? "copy failed",
+            });
+        }
+    }
+    writeFileSync(join(destination, "retention.json"), JSON.stringify({ version: 1, complete, byteLimit, fileLimit, inventory }, null, 2), { mode: 0o600 });
+    return { destination, complete, inventory };
+}
+//# sourceMappingURL=artifacts.js.map

package/dist/action/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../src/action/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,SAAS,EACT,SAAS,EACT,WAAW,EACX,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAsBjC,MAAM,SAAS,GAAG,UAAU,CAAC;AAC7B,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,KAAK,GAAsB;IACzB,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;CACjB;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,IAAI,SAAS,GAAG,SAAS,CAAC;IAC1B,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAa,EAAQ,EAAE;QACpE,IAAI,KAAK,GAAG,UAAU,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACxD,QAAQ,GAAG,KAAK,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,aAAa,IAAI,IAAI,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YACjF,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5E,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;YAChD,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1B,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,KAAK,CAAC;YACjB,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,IAAI,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,0CAA0C;aACnD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,GAAG,KAAK,CAAC;YACjB,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAG,KAA2B,CAAC,IAAI,IAAI,aAAa;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,aAAa,CACX,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAClF,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC9C,CAAC"}

package/dist/action/comment.js

@@ -0,0 +1,139 @@
+import { challengeLines } from "../evidence/challenge-lines.js";
+import { reviewerText } from "../evidence/ci-summary.js";
+/**
+ * The pull request comment: one per pull request, updated in place, bound to the head it
+ * describes. Everything a candidate could have written (check names, findings, paths) arrives
+ * through the reviewer text escape, which also neutralises mentions, so a candidate cannot
+ * page a maintainer or link out of the comment. The whole body is bounded below GitHub's limit.
+ */
+export const commentMarker = "<!-- swarm-verify -->";
+/** GitHub refuses a comment body over 65536 characters; stay well under with a named cut. */
+const bodyLimit = 60_000;
+function marker(pullRequest, head) {
+    return `${commentMarker}\n<!-- swarm-verify pr=${pullRequest} head=${head} -->`;
+}
+/** Text a candidate could have shaped, escaped and with mentions defused. */
+function untrusted(value) {
+    return reviewerText(value).replaceAll("@", "&#64;");
+}
+function resultLine(verdict) {
+    switch (verdict.decision.result) {
+        case "verified":
+            return "**Verified**: the recorded checks passed and every declared requirement was accepted.";
+        case "regression-only":
+            return "**Regression-only pass**: nothing this patch changed broke a check; a failure the base already had, if any, is named below as inherited. No requirement contract was supplied, so whether the work does what was asked is unmeasured.";
+        case "not-verified":
+            return "**Not verified**: a check failed or a requirement was rejected.";
+        case "incomplete":
+            return "**Incomplete**: the assessment could not measure what it needed to.";
+        case "head-changed":
+            return "**Not current**: the pull request moved before this run finished; this result describes an earlier head.";
+        case "refused":
+            return "**Refused**: the source could not be verified as identified.";
+    }
+}
+/** Render the comment body from the signed verdict and the assessment summary. */
+export function renderComment(options) {
+    const { verdict } = options;
+    const scope = verdict.decision.task === "accepted" || verdict.decision.task === "rejected"
+        ? "requirement checks from a trusted contract were run"
+        : "no requirement contract was supplied, so task correctness is unmeasured";
+    const lines = [
+        marker(verdict.pullRequest ?? 0, verdict.eventHead ?? verdict.head),
+        "## swarm-verify",
+        "",
+        resultLine(verdict),
+        "",
+        `Source: ${verdict.target === "merge" ? "test merge" : "head"} \`${verdict.head}\` against base \`${verdict.base}\`` +
+            `${verdict.tree === null ? "" : `, tree \`${verdict.tree}\``}.`,
+        `Regression: ${verdict.decision.regression ?? "not run"}. Task: ${verdict.decision.task ?? "unjudged"} (${scope}).`,
+        `Execution: ${untrusted(verdict.execution.executionTrust)} under ${verdict.policy.isolation}${verdict.policy.image === null ? "" : ` \`${untrusted(verdict.policy.image)}\``}.`,
+        verdict.decision.unmeasured.length === 0
+            ? "Unmeasured: nothing the policy asked for."
+            : `Unmeasured: ${verdict.decision.unmeasured.map(untrusted).join(", ")}.`,
+        verdict.decision.reason === null ? "" : `Reason: ${untrusted(verdict.decision.reason)}.`,
+        ...(verdict.decision.challenges === null
+            ? []
+            : challengeLines(verdict.decision.challenges).map((line, index) => index === 0
+                ? `${untrusted(line.charAt(0).toUpperCase() + line.slice(1))}.`
+                : `- ${untrusted(line)}`)),
+        "",
+        `Signature: ${options.attestation.status === "signed"
+            ? `signed by this workflow ([attestation](${options.attestation.url ?? options.runUrl})); verify with \`gh attestation verify verdict.json --repo ${verdict.repository} --predicate-type https://github.com/moonrunnerkc/swarm-verify/verdict/v1\``
+            : options.attestation.status === "skipped"
+                ? `not requested (${untrusted(options.attestation.detail)})`
+                : `unavailable: ${untrusted(options.attestation.detail)}`}.`,
+        `Evidence: artifact \`${options.artifactName}\` on [this run](${options.runUrl}) holds the JSON report, the signed bundle with its own verifier, and the verdict document (${verdict.evidence.reportDigest ?? "no report"}).`,
+        `Verifier: swarm-verify ${untrusted(verdict.verifier.version)}, run ${verdict.execution.runId} attempt ${verdict.execution.runAttempt}.`,
+        "",
+        "<details><summary>Assessment</summary>",
+        "",
+        options.summary === null
+            ? "_No assessment summary was produced._"
+            : options.summary.replaceAll("@", "&#64;"),
+        "",
+        "</details>",
+        "",
+        "_A regression pass says nothing broke. Only a requirement contract can say the work was done._",
+    ].filter((line) => line !== null);
+    const body = lines.join("\n");
+    return body.length <= bodyLimit
+        ? body
+        : `${body.slice(0, bodyLimit - 80)}\n\n_Comment truncated; the full assessment is in the run artifact._`;
+}
+/**
+ * Create or update the one comment, only while the pull request still points at the head the
+ * verdict describes. A delayed run for an older head finds a newer head and posts nothing.
+ */
+export async function publishComment(options) {
+    if (options.token === null)
+        return { status: "unavailable", reason: "no token was supplied to publish with" };
+    const doFetch = options.fetch ?? globalThis.fetch;
+    const headers = {
+        Authorization: `Bearer ${options.token}`,
+        Accept: "application/vnd.github+json",
+        "X-GitHub-Api-Version": "2022-11-28",
+        "User-Agent": "swarm-verify",
+    };
+    const base = `${options.apiUrl}/repos/${options.repository}`;
+    const read = async (url) => {
+        const response = await doFetch(url, { method: "GET", headers });
+        if (response.status !== 200)
+            throw new Error(`GET ${url.replace(options.apiUrl, "")} answered ${response.status}`);
+        return response.json();
+    };
+    try {
+        const pull = (await read(`${base}/pulls/${options.pullRequest}`));
+        const currentHead = pull.head?.sha ?? "";
+        if (currentHead !== options.head)
+            return { status: "stale-head", currentHead };
+        let existing = null;
+        for (let page = 1; page <= 10 && existing === null; page += 1) {
+            const comments = (await read(`${base}/issues/${options.pullRequest}/comments?per_page=100&page=${page}`));
+            existing = comments.find((one) => (one.body ?? "").startsWith(commentMarker)) ?? null;
+            if (comments.length < 100)
+                break;
+        }
+        const response = await doFetch(existing === null
+            ? `${base}/issues/${options.pullRequest}/comments`
+            : `${base}/issues/comments/${existing.id}`, {
+            method: existing === null ? "POST" : "PATCH",
+            headers: { ...headers, "Content-Type": "application/json" },
+            body: JSON.stringify({ body: options.body }),
+        });
+        if (response.status !== 200 && response.status !== 201)
+            return {
+                status: "unavailable",
+                reason: `${existing === null ? "POST" : "PATCH"} answered ${response.status}: ${(await response.text()).slice(0, 300)}`,
+            };
+        const written = (await response.json());
+        return { status: existing === null ? "created" : "updated", url: written.html_url ?? "" };
+    }
+    catch (cause) {
+        return {
+            status: "unavailable",
+            reason: cause instanceof Error ? cause.message : String(cause),
+        };
+    }
+}
+//# sourceMappingURL=comment.js.map

package/dist/action/comment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comment.js","sourceRoot":"","sources":["../../src/action/comment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAErD,6FAA6F;AAC7F,MAAM,SAAS,GAAG,MAAM,CAAC;AAQzB,SAAS,MAAM,CAAC,WAAmB,EAAE,IAAY;IAC/C,OAAO,GAAG,aAAa,0BAA0B,WAAW,SAAS,IAAI,MAAM,CAAC;AAClF,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB;IAClC,QAAQ,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAChC,KAAK,UAAU;YACb,OAAO,uFAAuF,CAAC;QACjG,KAAK,iBAAiB;YACpB,OAAO,uOAAuO,CAAC;QACjP,KAAK,cAAc;YACjB,OAAO,iEAAiE,CAAC;QAC3E,KAAK,YAAY;YACf,OAAO,qEAAqE,CAAC;QAC/E,KAAK,cAAc;YACjB,OAAO,0GAA0G,CAAC;QACpH,KAAK,SAAS;YACZ,OAAO,8DAA8D,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,OAM7B;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,KAAK,GACT,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU;QAC1E,CAAC,CAAC,qDAAqD;QACvD,CAAC,CAAC,yEAAyE,CAAC;IAChF,MAAM,KAAK,GAAG;QACZ,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;QACnE,iBAAiB;QACjB,EAAE;QACF,UAAU,CAAC,OAAO,CAAC;QACnB,EAAE;QACF,WAAW,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,MAAM,OAAO,CAAC,IAAI,qBAAqB,OAAO,CAAC,IAAI,IAAI;YAClH,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,IAAI,IAAI,GAAG;QACjE,eAAe,OAAO,CAAC,QAAQ,CAAC,UAAU,IAAI,SAAS,WAAW,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,UAAU,KAAK,KAAK,IAAI;QACnH,cAAc,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG;QAC/K,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YACtC,CAAC,CAAC,2CAA2C;YAC7C,CAAC,CAAC,eAAe,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC3E,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;QACxF,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI;YACtC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC9D,KAAK,KAAK,CAAC;gBACT,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG;gBAC/D,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,CAC3B,CAAC;QACN,EAAE;QACF,cACE,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,QAAQ;YACrC,CAAC,CAAC,0CAA0C,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,+DAA+D,OAAO,CAAC,UAAU,6EAA6E;YACnP,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS;gBACxC,CAAC,CAAC,kBAAkB,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG;gBAC5D,CAAC,CAAC,gBAAgB,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAC7D,GAAG;QACH,wBAAwB,OAAO,CAAC,YAAY,oBAAoB,OAAO,CAAC,MAAM,+FAA+F,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,WAAW,IAAI;QAC7N,0BAA0B,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,OAAO,CAAC,SAAS,CAAC,KAAK,YAAY,OAAO,CAAC,SAAS,CAAC,UAAU,GAAG;QACxI,EAAE;QACF,wCAAwC;QACxC,EAAE;QACF,OAAO,CAAC,OAAO,KAAK,IAAI;YACtB,CAAC,CAAC,uCAAuC;YACzC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;QAC5C,EAAE;QACF,YAAY;QACZ,EAAE;QACF,gGAAgG;KACjG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC,MAAM,IAAI,SAAS;QAC7B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC,sEAAsE,CAAC;AAC7G,CAAC;AAYD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAQpC;IACC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;QACxB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACpF,MAAM,OAAO,GAAU,OAAO,CAAC,KAAK,IAAK,UAAU,CAAC,KAA0B,CAAC;IAC/E,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;QACxC,MAAM,EAAE,6BAA6B;QACrC,sBAAsB,EAAE,YAAY;QACpC,YAAY,EAAE,cAAc;KAC7B,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,UAAU,OAAO,CAAC,UAAU,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YACzB,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,UAAU,OAAO,CAAC,WAAW,EAAE,CAAC,CAE/D,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;QACzC,IAAI,WAAW,KAAK,OAAO,CAAC,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QAC/E,IAAI,QAAQ,GAA4C,IAAI,CAAC;QAC7D,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,IAAI,QAAQ,KAAK,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAC1B,GAAG,IAAI,WAAW,OAAO,CAAC,WAAW,+BAA+B,IAAI,EAAE,CAC3E,CAAsD,CAAC;YACxD,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC;YACtF,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM;QACnC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,QAAQ,KAAK,IAAI;YACf,CAAC,CAAC,GAAG,IAAI,WAAW,OAAO,CAAC,WAAW,WAAW;YAClD,CAAC,CAAC,GAAG,IAAI,oBAAoB,QAAQ,CAAC,EAAE,EAAE,EAC5C;YACE,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YAC5C,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC7C,CACF,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YACpD,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,aAAa,QAAQ,CAAC,MAAM,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aACxH,CAAC;QACJ,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;AACH,CAAC"}