quixos-protocol/src/capability-language/source-check-driver.ts

import { buildImmutableCandidate } from "./checked-build.js";

// Installed platform driver, run only inside the sealed checker's unprivileged
// evaluator. Authored flakes never become the outer evaluator program.
const [repository, commit, log, workspaceId] = process.argv.slice(2);
if (!repository || !commit || !log || !workspaceId || process.argv.length !== 6)
  throw Error("source-check-driver REPOSITORY COMMIT LOG WORKSPACE_ID");
process.stdout.write(
  (await buildImmutableCandidate(
    { repository, commit },
    "workspace",
    log,
    false,
    undefined,
    workspaceId,
    process.env.QUIXOS_CHECK_PLATFORM_SOURCE ? JSON.parse(process.env.QUIXOS_CHECK_PLATFORM_SOURCE) : undefined,
  )) + "\n",
);