Verify agent or pipeline completion

// Generated from the standalone Temporal example. Review before running.
import { createHash } from "node:crypto";
import { existsSync, mkdirSync, writeFileSync } from "node:fs";
import { dirname, resolve, sep } from "node:path";

const target = resolve("temporal-research-quality-gate");
const bundleUrl = process.env.MILLWORK_EXAMPLE_BUNDLE_URL ?? "https://docs.getmillwork.dev/downloads/temporal-research-quality-gate.json";
const expectedAggregate = "b5501afacb2a2f6773f837be50588a1adb0b590288e0e6c51297e738409dbe4c";
const sha256 = (content) => createHash("sha256").update(content).digest("hex");
if (existsSync(target)) throw new Error("Target directory exists; choose a clean location");
const response = await fetch(bundleUrl);
if (!response.ok) throw new Error(`Could not download example bundle: HTTP ${response.status}`);
const bytes = Buffer.from(await response.arrayBuffer());
if (bytes.length > 1_000_000) throw new Error("Example bundle is too large");
const bundle = JSON.parse(bytes.toString("utf8"));
if (!Array.isArray(bundle.files) || bundle.files.length !== 32) throw new Error("Unexpected example file inventory");
const contents = [];
const seen = new Set();
for (const entry of bundle.files) {
  const { path: name, sha256: digest, content } = entry;
  if (typeof name !== "string" || !name || name.startsWith("/") || name.includes("\\") || name.split("/").some((part) => !part || part === "." || part === "..") || seen.has(name)) throw new Error("Unsafe or duplicate source path");
  if (typeof digest !== "string" || !/^[0-9a-f]{64}$/.test(digest) || typeof content !== "string") throw new Error("Invalid example entry");
  const path = resolve(target, name);
  if (!path.startsWith(target + sep)) throw new Error("Unsafe source path");
  const data = Buffer.from(content, "utf8");
  if (sha256(data) !== digest) throw new Error(`Checksum mismatch: ${name}`);
  seen.add(name);
  contents.push({ name, digest, data, path });
}
const actualAggregate = sha256(contents.map(({ name, digest }) => `${name}\0${digest}\n`).join(""));
if (bundle.aggregate_sha256 !== expectedAggregate || actualAggregate !== expectedAggregate) throw new Error("Example bundle aggregate mismatch");
for (const { path, data } of contents) {
  mkdirSync(dirname(path), { recursive: true });
  writeFileSync(path, data, { flag: "wx" });
}
process.stdout.write(`Created ${target} with ${contents.length} checked files.\n`);