Exemplo
mdurl 2.1.0
Amostra verificada para npm mdurl 2.1.0. O contrato rodou em node 22 · linux debian/x64 · docker e passou: parse extracts protocol hostname port pathname…
sha256:8d59d81b5203f3b8eec784acdba66aa6c781cbe8384d4fe158536153319de99b
Esta rede oferece uma coisa: uma amostra que compila. Ela a executou em um sandbox e guardou o recibo assinado. Não classifica nem garante nada — se o mesmo código compila onde você está, ela não mediu.
Quantas chaves de assinatura distintas enviaram um recibo de contrato aprovado. Uma é só o autor; mais de uma significa que outra pessoa também o compilou. Uma chave é gerada por conta própria e não tem identidade registrada por trás, então conta chaves, não pessoas.
MIT-0
Evidência de execução
O ambiente declarado e as execuções assinadas ficam separados, para você ver exatamente o que esta amostra executou e onde.
- Base da evidência
- Contrato assinado aprovado
- Recibos de verificação
- 1
- Chaves de assinatura que o compilaram
- 1
Ambiente declarado
node 22.23 linux 24 · ubuntu · glibc 2.39 x64 node 22.23 npm 10
Ambientes das execuções de verificação
| Ambiente | Contrato | Etapas | Execução |
|---|---|---|---|
| node 22 · linux debian/x64 · docker ed25519:c1973797be207ac4 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · node-typescript@1node:22@sha256:8a34c4ab3ea2… |
2026-09-15 |
Caso
HOW- Objetivo
- verify pkg:npm/mdurl@2.1.0
- Pacotes
- Ambiente
- node 22.23.2
- Criado
- 2026-09-15T04:12:12Z
Contrato
- parse extracts protocol hostname port pathname search and hash into structured object
- parse handles protocol-relative URLs with host extraction when slashesDenoteHost is true
- format reconstructs complete URL string from component object
- encode percent-encodes special characters while preserving standard URI characters and existing escapes
- decode unescapes percent-encoded sequences while preserving invalid escape sequences
Arquivos
- PROMPT.md
- csx.json
- package-lock.json
- package.json
- spec.json
- test/contract.mjs
Código-fonte
Clean-room public code sample — generation instructions
Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.
A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.
Goal: verify pkg:npm/mdurl@2.1.0
Kind: HOW
Use EXACTLY these public packages and versions:
- pkg:npm/mdurl@2.1.0
Rules:
- One focused purpose; the smallest project that proves the goal.
- Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
- Pin every dependency with a lockfile so resolution is reproducible.
- No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
- No personal names, emails, company names, or project identifiers of any kind.
- No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
- Keep it under 200 files and 256KB packed.
{"case":{"caseId":"case:sha256:0fbcbe5c14d54a5c9e2d15c264bf3f688ba137c542f8788621d5745d9ccc55b8","contract":["parse extracts protocol hostname port pathname search and hash into structured object","parse handles protocol-relative URLs with host extraction when slashesDenoteHost is true","format reconstructs complete URL string from component object","encode percent-encodes special characters while preserving standard URI characters and existing escapes","decode unescapes percent-encoded sequences while preserving invalid escape sequences"],"goal":"verify pkg:npm/mdurl@2.1.0","kind":"HOW","packages":["pkg:npm/mdurl@2.1.0"],"schemaVersion":1},"contractCommand":["node","test/contract.mjs"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"npm","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"npm","packageManagerVersion":"10.9.8","runtime":"node","runtimeVersion":"22.23.2","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/mdurl@2.1.0"],"schemaVersion":1,"subject":"pkg:npm/mdurl@2.1.0","verifierAdapter":"node-typescript@1"}
{
"name": "sample-mdurl",
"version": "1.0.0",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "sample-mdurl",
"version": "1.0.0",
"license": "MIT-0",
"dependencies": {
"mdurl": "2.1.0"
}
},
"node_modules/mdurl": {
"version": "2.1.0",
"resolved": "https://registry.npmjs.org/mdurl/-/mdurl-2.1.0.tgz",
"integrity": "sha512-1+HBaOx0zi/dQWht8rNv9MYf9qqpqL/kxI0hXImU6Y547zM6Sni8BQibt7ifgMcYtQg41ao3Ivd6cnSM86inpg==",
"license": "MIT"
}
}
}
{
"name": "sample-mdurl",
"version": "1.0.0",
"private": true,
"description": "Clean-room sample verifying pkg:npm/mdurl@2.1.0 functionality",
"dependencies": {
"mdurl": "2.1.0"
}
}
{
"schemaVersion": 1,
"goal": "verify pkg:npm/mdurl@2.1.0",
"kind": "HOW",
"packages": [
"pkg:npm/mdurl@2.1.0"
]
}
import assert from 'node:assert';
import { parse, format, encode, decode } from 'mdurl';
// 1. parse extracts protocol hostname port pathname search and hash into structured object
const urlStr = 'https://example.com:8080/foo/bar?baz=1#qux';
const parsed = parse(urlStr);
assert.strictEqual(parsed.protocol, 'https:');
assert.strictEqual(parsed.slashes, true);
assert.strictEqual(parsed.hostname, 'example.com');
assert.strictEqual(parsed.port, '8080');
assert.strictEqual(parsed.pathname, '/foo/bar');
assert.strictEqual(parsed.search, '?baz=1');
assert.strictEqual(parsed.hash, '#qux');
// 2. parse handles protocol-relative URLs with host extraction when slashesDenoteHost is true
const protoRel = parse('//example.com/path', true);
assert.strictEqual(protoRel.protocol, null);
assert.strictEqual(protoRel.slashes, true);
assert.strictEqual(protoRel.hostname, 'example.com');
assert.strictEqual(protoRel.pathname, '/path');
// 3. format reconstructs complete URL string from component object
const formatted = format(parsed);
assert.strictEqual(formatted, urlStr);
// 4. encode percent-encodes special characters while preserving standard URI characters and existing escapes
assert.strictEqual(encode('hello world! 100%'), 'hello%20world!%20100%25');
assert.strictEqual(encode('%20', false), '%2520');
// 5. decode unescapes percent-encoded sequences while preserving invalid escape sequences
assert.strictEqual(decode('hello%20world%21%20100%25'), 'hello world! 100%');
assert.strictEqual(decode('%2G'), '%2G');
console.log('Contract passed');
Seeder de origem
anônimo