Resolves the repository's real changed-path inventory, executes only its selected acceptance producers, and verifies gate eligibility against the original plan and retained artifact bytes.
This internal adapter accepts the native, solution coverage and package-check producer contracts. It does not provision resources, aggregate job manifests, or authenticate provenance. Inputs and outputs must come from the current trusted workflow workspace. See this tool's README for command contracts.
Task<int> RunAsync(IReadOnlyDictionary<string, string> options, CancellationToken cancellationToken, Func<CancellationToken, Task>? verifyLocalSourceAsync = null)
Runs one explicit repository planning, execution, or gate operation; incomplete evidence returns nonzero.
options
cancellationToken
verifyLocalSourceAsync
EvidenceProducerDeclaration Declaration(string id)
Returns the closed declaration implemented by each repository producer; unknown IDs fail closed.
Task VerifyAsync(EvidencePlan plan, EvidenceManifest manifest, string artifactRoot, CancellationToken cancellationToken)
Rejects edited claims, missing obligations, unsuccessful cleanup, and missing or altered retained artifacts.
bool RequiresPackage(EvidenceProfile profile)
Whether the selected profile needs the separately packed CLI used by native acceptance journeys.
EvidencePlan ResolveScope(EvidencePolicy policy, IReadOnlyList<NormalizedDiffPath> paths, string scope)
Projects a validated shared policy into one execution lane without reclassifying changed paths.
A pinned repository snapshot and its canonical changed-path inventory.
Collects a deterministic, bounded Git change inventory for local development and workflow events.
Task<RepositoryChangeSet> CollectLocalAsync(string repository, string baseRevision, CancellationToken ct)
Binds committed, staged, unstaged and nonignored untracked changes to a local source digest. Git observes executable bits on Unix and uses its configured file-mode behavior on Windows.
Task WriteLocalPatchAsync(string repository, string baseCommit, IReadOnlyList<NormalizedDiffPath> paths, string output, CancellationToken cancellationToken)
Writes a bounded patch with fixed a/ and b/ prefixes for local changed-line gating.
Task<string> ReadIdentityAsync(string repository, CancellationToken cancellationToken, params string[] arguments)
Reads a bounded scalar identity from Git without a shell.
Runs the complete repository solution coverage workflow and closes its aggregate and optional patch gates.
ValueTask<EvidenceProducerResult> ProduceAsync(EvidenceProducerContext context, CancellationToken cancellationToken)
Runs collection, verifies the exact solution test inventory and timings, then evaluates coverage gates.
Runs the repository policy against a local branch and working tree, packing a candidate only after planning selects native producers. Uses the same host and manifest verifier as CI on the current OS.
No results are reused. The merge-base diff, index, working tree and untracked files are collected by RepositoryGitChanges
. Source drift prevents gate success. Output belongs outside the source inventory (the default is ignored TestResults); package and producer logs remain in that output.
Task<int> RunAsync(IReadOnlyDictionary<string, string> options, CancellationToken cancellationToken)
Plans or executes current local changes and returns zero only for successful verification or an empty inventory.
Explicit execution inputs for solution coverage and package validation selected by repository policy.
RepositoryRoot
DotnetPath
OutputDirectory
DiffBase
NativeCoverageDirectory
DiffFile
Func<CancellationToken, Task>? VerifyLocalSourceAsync { get; init; }
Source
Verifies the local source and policy digest captured by LocalEvidenceWorkflow
. Required for a dirty local patch; direct command-line runs cannot supply this in-process callback.
IReadOnlyDictionary<string, string> CommandEnvironment { get; }
Source
Keeps nested SDK commands on the selected host even when child tooling invokes dotnet by name.
Independent input, JSON and byte assertions used by native acceptance producers.
void Require(bool condition, string contract)
Rejects a failed contract without copying untrusted output into a diagnostic.
Task<string> HashAsync(string path, CancellationToken cancellationToken)
Computes a file digest without buffering the complete file.
void VerifyPackage(ZipArchive archive, ValidationSettings settings)
Validates the package ID, exact version, and trusted source commit.
JsonElement Data(string output)
Reads the CLI JSON data envelope while rejecting a non-object response.
JsonDocument ReadJsonFile(string path, long maximumBytes, CancellationToken cancellationToken)
Reads a candidate-produced JSON file with a cumulative byte limit.
Task<SortedDictionary<string, string>> InventoryAsync(string root, CancellationToken cancellationToken)
Inventories original bytes, excluding transient lock files only.
bool Equal(IReadOnlyDictionary<string, string> first, IReadOnlyDictionary<string, string> second)
Compares complete path and hash inventories.
Overrides the checked-in consumer fixture used by the installed-package validation producer.
SourceDirectory
ExpectedCommit
SolutionPath
TestProjects
ExpectedRequiredTestFragments
PermittedSkipPatterns
DiffBase
Environment
Plans and runs repository acceptance producers and publishes verifiable EvidenceHost manifests.
Exercises public storage commands from a verified packed CLI with independent byte assertions.
Task WritePrivateRetentionPolicyAsync(string path, CancellationToken cancellationToken)
Writes this journey's zero-history policy inside its freshly owned scratch domain.
path
cancellationToken
Uses Unix mode 0600 or a protected current-user Windows ACL before maintenance reads the policy. This internal seam lets native coverage tests verify the actual fixture permissions; it does not repair consumer policies.
Retains best-effort failure proofs without replacing the producer's primary failure.
Task<string> WriteAsync(EvidenceArtifactWriter writer, IReadOnlyList<(string Name, byte[] Contents)> artifacts)
Attempts each closed producer artifact independently and returns a diagnostic suffix containing only logical names and exception types. Exception messages and producer output are withheld.
Runs the repository's package manifest, generated-documentation and package-artifact checks.
ValueTask<EvidenceProducerResult> ProduceAsync(EvidenceProducerContext context, CancellationToken cancellationToken)
Runs the package gate, generated-documentation verification and isolated package validation.
Runs the supplied CLI package against an isolated, source-integrity-checked consumer.
ValueTask<EvidenceProducerResult> ProduceAsync(EvidenceProducerContext context, CancellationToken cancellationToken)
Runs package, test, report, gate, and source-integrity assertions.
ValueTask DisposeAsync()
Disposes the producer-owned workspace so host cleanup is part of the claim.
string RedactAndBoundDiagnostic(string value, string root)
Redacts the owned workspace path and retains a UTF-8-safe trailing diagnostic bounded to 16 KiB.
value
root
A redacted string whose UTF-8 encoding is at most 16 KiB.
bool IsContractFailure(Exception exception)
Identifies malformed or inaccessible evidence errors that must become a stable failed result.
exception
true
for expected input and contract failures.
Task<bool> VerifyInstalledAssembliesAsync(string storePath, string expectedHash, CancellationToken cancellationToken)
Verifies every CLI assembly materialized in the installed tool's private package store.
storePath
expectedHash
cancellationToken
true
only when at least one store assembly exists and every candidate matches.
void ValidateSettingsForTests(ValidationSettings settings)
Validates the required native-consumer settings without starting a command journey.
string ContainedSourcePathForTests(string root, string relative)
Resolves a consumer path only when it remains inside the owned source root.
int CountTestProjectsForTests(string root, string solutionPath)
Counts test projects using the same solution inventory contract as acceptance.
bool IsTestProjectForTests(string path)
Checks whether a project is classified as an executable test project.
void ValidateJUnitCountsForTests(XElement root, IReadOnlyList<XElement> testCases)
Validates independent JUnit suite counters against testcase elements.
IReadOnlyList<XElement> ReadJUnitReportsForTests(string output, int expectedProjectCount, CancellationToken cancellationToken = default)
Reads only the declared JUnit inventory with report, aggregate and testcase bounds.
bool IsPermittedSkipForTests(XElement testCase, IReadOnlyDictionary<string, string>? permittedPatterns)
Checks whether a skipped testcase is explicitly permitted with a rationale.
void ValidateRequiredTestFragmentsForTests(IReadOnlyList<string> fragments, IReadOnlyList<XElement> testCases)
Validates that every required testcase fragment is present, passing, and not skipped.
void ValidateGateReportForTests(string output, bool hasPatch, CancellationToken cancellationToken = default)
Validates the exact gate thresholds and zero-tolerance result JSON.
string Id { get; }
Source
Gets the stable producer identifier.
Explicit candidate and workspace inputs for the repository's native acceptance journeys.
RepositoryRoot
PackagePath
PackageVersion
ExpectedSourceCommit
DotnetPath
ScratchParent
EvidenceDirectory
MaximumScratchBytes
MinimumFreeBytes
Consumer