Function runOneInvariantInto

server/src/audit/integrity/runner.ts:65–99

(
  invariant: Invariant,
  ctx: InvariantContext,
  appendViolationsTo: Violation[],
)

}

async function runOneInvariantInto(
  invariant: Invariant,
  ctx: InvariantContext,
  appendViolationsTo: Violation[],
): Promise<InvariantRunStats> {
  const t0 = Date.now();
  try {
    const result = await invariant.check(ctx);
    appendViolationsTo.push(...result.violations);
    return {
      ms: Date.now() - t0,
      checked: result.checked,
      violations: result.violations.length,
    };
  } catch (err) {
    const error = err instanceof Error ? err.message : String(err);
    ctx.logger.error({ err, invariant: invariant.name }, 'Invariant check threw');
    // Record a meta-violation so the failure is visible in the report
    // and operators don't see a silently-incomplete check.
    const metaViolation: Violation = {
      invariant: invariant.name,
      severity: 'warning',
      subject_type: 'configuration',
      subject_id: invariant.name,
      message: `Invariant check failed to run: ${error}`,
    };
    appendViolationsTo.push(metaViolation);
    return {
      ms: Date.now() - t0,
      checked: 0,
      violations: 1,
      error,
    };
  }
}