@agent-teams/engineering-foundation 0.13.0 → 0.14.0

package/dist/document-authoring/adapters/node/read-document-authority-file.js

@@ -1,23 +1,13 @@
 import { createHash } from "node:crypto";
-import { isAbsolute, resolve } from "node:path";
+import { resolve } from "node:path";
 import { ContainedFileReadError, readContainedRegularFile } from "../../../filesystem-path-safety.js";
+import { isDocumentRepositoryPath } from "../../application/policies/document-repository-path.js";
 import { DocumentCatalogError } from "../../document-catalog-error.js";
-const WINDOWS_DEVICE_COMPONENT = /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/iu;
 function inputInvalid(message, options) {
     throw new DocumentCatalogError("DOCUMENT_CATALOG_INPUT_INVALID", message, options);
 }
 function assertPortableDocumentAuthorityPath(path) {
-    const segments = path.split("/");
-    if (path.length === 0 ||
-        path.length > 512 ||
-        isAbsolute(path) ||
-        path.includes("\\") ||
-        !/^[A-Za-z0-9._@/-]+$/u.test(path) ||
-        segments.some((segment) => segment.length === 0 ||
-            segment === "." ||
-            segment === ".." ||
-            segment.endsWith(".") ||
-            WINDOWS_DEVICE_COMPONENT.test(segment))) {
+    if (!isDocumentRepositoryPath(path)) {
         inputInvalid("Document authority paths must use the portable repository-relative path grammar.");
     }
 }

package/dist/document-authoring/adapters/node/read-document-authority-file.js.map

@@ -1 +1 @@
-{"version":3,"file":"read-document-authority-file.js","sourceRoot":"","sources":["../../../../src/document-authoring/adapters/node/read-document-authority-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,wBAAwB,GAAG,kDAAkD,CAAC;AAQpF,SAAS,YAAY,CAAC,OAAe,EAAE,OAAsB;IAC3D,MAAM,IAAI,oBAAoB,CAC5B,gCAAgC,EAChC,OAAO,EACP,OAAO,CACR,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAAC,IAAY;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IACE,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,GAAG;QACjB,UAAU,CAAC,IAAI,CAAC;QAChB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,IAAI;YAChB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrB,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CACzC,EACD,CAAC;QACD,YAAY,CACV,kFAAkF,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,IAAY;IACxD,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;QACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EACjB,CAAC;QACD,YAAY,CAAC,oDAAoD,IAAI,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,sDAAsD,IAAI,GAAG,EAAE;YAC1E,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,YAAY,CAAC,uDAAuD,IAAI,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAA6B;IAC9D,MAAM,MAAM,GACV,KAAK,CAAC,OAAO,KAAK,SAAS;QACzB,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;YAC3B,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAC1B,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,yCAAyC,CAAC;IACpD,MAAM,IAAI,oBAAoB,CAC5B,wCAAwC,EACxC,sBAAsB,MAAM,KAAK,IAAI,GAAG,EACxC,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAI/C;IACC,mCAAmC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,wBAAwB,CAAC;YACrC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;YACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,IAAI,EAAE,OAAO,CAAC,YAAY;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,YAAY,CAAC,yCAAyC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,KAAK,CAAC,UAAU;SACvB,CAAC;QACF,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"read-document-authority-file.js","sourceRoot":"","sources":["../../../../src/document-authoring/adapters/node/read-document-authority-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAQvE,SAAS,YAAY,CAAC,OAAe,EAAE,OAAsB;IAC3D,MAAM,IAAI,oBAAoB,CAC5B,gCAAgC,EAChC,OAAO,EACP,OAAO,CACR,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAAC,IAAY;IACvD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,YAAY,CACV,kFAAkF,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,IAAY;IACxD,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;QACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EACjB,CAAC;QACD,YAAY,CAAC,oDAAoD,IAAI,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,sDAAsD,IAAI,GAAG,EAAE;YAC1E,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,YAAY,CAAC,uDAAuD,IAAI,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAA6B;IAC9D,MAAM,MAAM,GACV,KAAK,CAAC,OAAO,KAAK,SAAS;QACzB,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;YAC3B,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAC1B,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,yCAAyC,CAAC;IACpD,MAAM,IAAI,oBAAoB,CAC5B,wCAAwC,EACxC,sBAAsB,MAAM,KAAK,IAAI,GAAG,EACxC,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAI/C;IACC,mCAAmC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,wBAAwB,CAAC;YACrC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;YACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,IAAI,EAAE,OAAO,CAAC,YAAY;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,YAAY,CAAC,yCAAyC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,KAAK,CAAC,UAAU;SACvB,CAAC;QACF,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/document-authoring/application/policies/authoring-profile-semantics.d.ts

@@ -0,0 +1,38 @@
+interface PlacementSemantics {
+    readonly allowedRoots?: readonly string[];
+    readonly kind: string;
+    readonly filename?: string;
+    readonly minimumSegmentsAfterRequired?: number;
+    readonly minimumSegmentsBeforeRequired?: number;
+    readonly requiredBasename?: string;
+    readonly requiredSegmentsInOrder?: readonly string[];
+    readonly root?: string;
+}
+interface ArtifactTypeSemantics {
+    readonly identity?: {
+        readonly format?: string;
+        readonly grammar?: {
+            readonly maxSuffixSegments: number;
+            readonly minSuffixSegments: number;
+            readonly prefixSegments: readonly string[];
+        };
+    };
+    readonly placement: PlacementSemantics;
+    readonly type: string;
+}
+export interface AuthoringProfileSemantics {
+    readonly authoring: {
+        readonly artifactTypes: readonly ArtifactTypeSemantics[];
+    };
+}
+export type AuthoringProfileSemanticProblem = "duplicate-artifact-type" | "incompatible-identity-placement" | "invalid-qualified-grammar-range" | "overlapping-placement-roots" | "portable-root-collision";
+export declare class AuthoringProfileSemanticError extends Error {
+    readonly problem: AuthoringProfileSemanticProblem;
+    constructor(problem: AuthoringProfileSemanticProblem);
+}
+export declare function assertAuthoringProfileSemantics(profile: AuthoringProfileSemantics): void;
+export declare function matchingPlacementRoot(repositoryPath: string, allowedRoots: readonly string[]): string | undefined;
+export declare function hasContiguousRequiredSegments(repositoryPath: string, requiredSegments: readonly string[], matchedRoot?: string): boolean;
+export declare function isRepositoryPathAllowedByPlacement(repositoryPath: string, placement: PlacementSemantics): boolean;
+export {};
+//# sourceMappingURL=authoring-profile-semantics.d.ts.map

package/dist/document-authoring/application/policies/authoring-profile-semantics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authoring-profile-semantics.d.ts","sourceRoot":"","sources":["../../../../src/document-authoring/application/policies/authoring-profile-semantics.ts"],"names":[],"mappings":"AAEA,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,EAAE;YACjB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;YACnC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;YACnC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;SAC5C,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,aAAa,EAAE,SAAS,qBAAqB,EAAE,CAAC;KAC1D,CAAC;CACH;AAED,MAAM,MAAM,+BAA+B,GACvC,yBAAyB,GACzB,iCAAiC,GACjC,iCAAiC,GACjC,6BAA6B,GAC7B,yBAAyB,CAAC;AAE9B,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC;IAElD,YAAY,OAAO,EAAE,+BAA+B,EAInD;CACF;AAqBD,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,CA+CxF;AAED,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,MAAM,GAAG,SAAS,CAKpB;AAED,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,SAAS,MAAM,EAAE,EACnC,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAkBT;AAED,wBAAgB,kCAAkC,CAChD,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,kBAAkB,GAC5B,OAAO,CAsCT"}

package/dist/document-authoring/application/policies/authoring-profile-semantics.js

@@ -0,0 +1,122 @@
+import { isDocumentRepositoryPath } from "./document-repository-path.js";
+export class AuthoringProfileSemanticError extends Error {
+    problem;
+    constructor(problem) {
+        super(`Document authoring profile has invalid semantics: ${problem}.`);
+        this.name = "AuthoringProfileSemanticError";
+        this.problem = problem;
+    }
+}
+function portableAsciiIdentity(value) {
+    return value.replace(/[A-Z]/gu, (character) => character.toLowerCase());
+}
+function isSegmentBoundaryPrefix(prefix, candidate) {
+    return candidate === prefix || candidate.startsWith(`${prefix}/`);
+}
+function hasCompatibleIdentityPlacement(artifactType) {
+    const placement = artifactType.placement;
+    if (placement.kind === "qualified-leaf-index") {
+        return artifactType.identity?.format === "qualified";
+    }
+    if (placement.kind === "collection" && placement.filename === "numeric-id-slug") {
+        return artifactType.identity?.format === "adr-four-digits";
+    }
+    return true;
+}
+export function assertAuthoringProfileSemantics(profile) {
+    const types = new Set();
+    for (const artifactType of profile.authoring.artifactTypes) {
+        const typeIdentity = portableAsciiIdentity(artifactType.type);
+        if (types.has(typeIdentity)) {
+            throw new AuthoringProfileSemanticError("duplicate-artifact-type");
+        }
+        types.add(typeIdentity);
+        const grammar = artifactType.identity?.grammar;
+        if (grammar !== undefined &&
+            grammar.minSuffixSegments > grammar.maxSuffixSegments) {
+            throw new AuthoringProfileSemanticError("invalid-qualified-grammar-range");
+        }
+        const placement = artifactType.placement;
+        if (!hasCompatibleIdentityPlacement(artifactType)) {
+            throw new AuthoringProfileSemanticError("incompatible-identity-placement");
+        }
+        const roots = placement.kind === "qualified-leaf-index"
+            ? (placement.root === undefined ? [] : [placement.root])
+            : [...(placement.allowedRoots ?? [])];
+        const identities = roots.map(portableAsciiIdentity);
+        for (const [index, root] of roots.entries()) {
+            if (!isDocumentRepositoryPath(root)) {
+                throw new AuthoringProfileSemanticError("portable-root-collision");
+            }
+            for (let other = 0; other < index; other += 1) {
+                const previous = identities[other];
+                const current = identities[index];
+                if (previous === undefined || current === undefined) {
+                    continue;
+                }
+                if (previous === current) {
+                    throw new AuthoringProfileSemanticError("portable-root-collision");
+                }
+                if (isSegmentBoundaryPrefix(previous, current) ||
+                    isSegmentBoundaryPrefix(current, previous)) {
+                    throw new AuthoringProfileSemanticError("overlapping-placement-roots");
+                }
+            }
+        }
+    }
+}
+export function matchingPlacementRoot(repositoryPath, allowedRoots) {
+    const matches = allowedRoots.filter((root) => isSegmentBoundaryPrefix(root, repositoryPath));
+    return matches.length === 1 ? matches[0] : undefined;
+}
+export function hasContiguousRequiredSegments(repositoryPath, requiredSegments, matchedRoot) {
+    if (requiredSegments.length === 0) {
+        return true;
+    }
+    const rootIdentity = matchedRoot;
+    if (rootIdentity !== undefined &&
+        !isSegmentBoundaryPrefix(rootIdentity, repositoryPath)) {
+        return false;
+    }
+    const suffix = rootIdentity === undefined
+        ? repositoryPath
+        : repositoryPath.slice(rootIdentity.length).replace(/^\//u, "");
+    const segments = suffix.split("/");
+    return segments.some((_segment, start) => requiredSegments.every((segment, offset) => segments[start + offset] === segment));
+}
+export function isRepositoryPathAllowedByPlacement(repositoryPath, placement) {
+    if (!isDocumentRepositoryPath(repositoryPath)) {
+        return false;
+    }
+    const segments = repositoryPath.split("/");
+    const basename = segments.at(-1);
+    if (basename !== placement.requiredBasename) {
+        return false;
+    }
+    if (placement.kind === "qualified-leaf-index") {
+        if (placement.root === undefined) {
+            return false;
+        }
+        const rootSegments = placement.root.split("/");
+        return isSegmentBoundaryPrefix(placement.root, repositoryPath) &&
+            segments.length > rootSegments.length + 1;
+    }
+    if (placement.kind !== "explicit") {
+        return false;
+    }
+    const root = matchingPlacementRoot(repositoryPath, placement.allowedRoots ?? []);
+    const required = placement.requiredSegmentsInOrder ?? [];
+    if (root === undefined ||
+        required.length === 0 ||
+        placement.minimumSegmentsBeforeRequired === undefined ||
+        placement.minimumSegmentsAfterRequired === undefined) {
+        return false;
+    }
+    const suffix = repositoryPath.slice(root.length + 1).split("/");
+    const directories = suffix.slice(0, -1);
+    return directories.some((_segment, start) => start >= placement.minimumSegmentsBeforeRequired &&
+        directories.length - start - required.length >=
+            placement.minimumSegmentsAfterRequired &&
+        required.every((segment, offset) => directories[start + offset] === segment));
+}
+//# sourceMappingURL=authoring-profile-semantics.js.map

package/dist/document-authoring/application/policies/authoring-profile-semantics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authoring-profile-semantics.js","sourceRoot":"","sources":["../../../../src/document-authoring/application/policies/authoring-profile-semantics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAuCzE,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAC7C,OAAO,CAAkC;IAElD,YAAY,OAAwC;QAClD,KAAK,CAAC,qDAAqD,OAAO,GAAG,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc,EAAE,SAAiB;IAChE,OAAO,SAAS,KAAK,MAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,8BAA8B,CAAC,YAAmC;IACzE,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;IACzC,IAAI,SAAS,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;QAC9C,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,KAAK,WAAW,CAAC;IACvD,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QAChF,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,KAAK,iBAAiB,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,OAAkC;IAChF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QAC3D,MAAM,YAAY,GAAG,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAExB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC/C,IACE,OAAO,KAAK,SAAS;YACrB,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,EACrD,CAAC;YACD,MAAM,IAAI,6BAA6B,CAAC,iCAAiC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;QACzC,IAAI,CAAC,8BAA8B,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,6BAA6B,CAAC,iCAAiC,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,KAAK,sBAAsB;YACrD,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;YACrE,CAAC;YACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBACnC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBACpD,SAAS;gBACX,CAAC;gBACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;gBACrE,CAAC;gBACD,IACE,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC;oBAC1C,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC1C,CAAC;oBACD,MAAM,IAAI,6BAA6B,CAAC,6BAA6B,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,cAAsB,EACtB,YAA+B;IAE/B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3C,uBAAuB,CAAC,IAAI,EAAE,cAAc,CAAC,CAC9C,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,cAAsB,EACtB,gBAAmC,EACnC,WAAoB;IAEpB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,YAAY,GAAG,WAAW,CAAC;IACjC,IACE,YAAY,KAAK,SAAS;QAC1B,CAAC,uBAAuB,CAAC,YAAY,EAAE,cAAc,CAAC,EACtD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,KAAK,SAAS;QACvC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CACvC,gBAAgB,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,OAAO,CAAC,CAClF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,cAAsB,EACtB,SAA6B;IAE7B,IAAI,CAAC,wBAAwB,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,CAAC,gBAAgB,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;QAC9C,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,uBAAuB,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC;YAC5D,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,cAAc,EAAE,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,SAAS,CAAC,uBAAuB,IAAI,EAAE,CAAC;IACzD,IACE,IAAI,KAAK,SAAS;QAClB,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,SAAS,CAAC,6BAA6B,KAAK,SAAS;QACrD,SAAS,CAAC,4BAA4B,KAAK,SAAS,EACpD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAC1C,KAAK,IAAI,SAAS,CAAC,6BAA8B;QACjD,WAAW,CAAC,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC,MAAM;YAC1C,SAAS,CAAC,4BAA6B;QACzC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,OAAO,CAAC,CAC7E,CAAC;AACJ,CAAC"}

package/dist/document-authoring/application/policies/document-contract-digests.d.ts

@@ -0,0 +1,20 @@
+import { type CanonicalJsonValue } from "../../../canonical-json.js";
+type Digest = `sha256:${string}`;
+type JsonObject = Readonly<Record<string, CanonicalJsonValue>>;
+export declare function documentIntentDigest(intent: JsonObject): Digest;
+export declare function documentOwnerMembershipDigest(ownerCatalogDigest: string, ownerId: string): Digest;
+export interface DocumentIdentityDigestEntry {
+    readonly id: string;
+    readonly repositoryPath: string;
+}
+export declare function documentIdentityProjectionDigest(entries: readonly DocumentIdentityDigestEntry[]): Digest;
+export declare function documentReferencedDocumentDigest(document: {
+    readonly id: string;
+    readonly path: string;
+}): Digest;
+export declare function documentPlanDigest(plan: JsonObject): Digest;
+export declare function documentReceiptDigest(receipt: JsonObject): Digest;
+export declare function assertDocumentPlanDigests(value: unknown): void;
+export declare function assertDocumentReceiptDigest(value: unknown, planValue?: unknown): void;
+export {};
+//# sourceMappingURL=document-contract-digests.d.ts.map

package/dist/document-authoring/application/policies/document-contract-digests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-contract-digests.d.ts","sourceRoot":"","sources":["../../../../src/document-authoring/application/policies/document-contract-digests.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,kBAAkB,EAGxB,MAAM,4BAA4B,CAAC;AAIpC,KAAK,MAAM,GAAG,UAAU,MAAM,EAAE,CAAC;AACjC,KAAK,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAyC/D,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAE/D;AAED,wBAAgB,6BAA6B,CAC3C,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE,MAAM,GACd,MAAM,CAKR;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,SAAS,2BAA2B,EAAE,GAC9C,MAAM,CAcR;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CAST;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAK3D;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAKjE;AAqOD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAU9D;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,EACd,SAAS,CAAC,EAAE,OAAO,GAClB,IAAI,CAoCN"}

package/dist/document-authoring/application/policies/document-contract-digests.js

@@ -0,0 +1,275 @@
+import { compareBinaryStrings } from "../../../binary-string-comparator.js";
+import { canonicalJson, sha256Bytes, sha256Json } from "../../../canonical-json.js";
+import { documentTemporaryPath } from "./document-temporary-path.js";
+import { documentRepositoryParentPath } from "./document-repository-path.js";
+const DOMAIN_PREFIX = "agent-teams.foundation.document-authoring";
+class DocumentContractDigestError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "DocumentContractDigestError";
+    }
+}
+function domainDigest(domain, payload) {
+    return sha256Json({ domain, payload });
+}
+function withoutOwnDigest(value, field) {
+    const snapshot = JSON.parse(canonicalJson(value));
+    const result = Object.create(null);
+    for (const key of Reflect.ownKeys(snapshot)) {
+        if (key === field) {
+            continue;
+        }
+        if (typeof key !== "string") {
+            throw new DocumentContractDigestError("Document digest input must not contain symbolic properties.");
+        }
+        const descriptor = Object.getOwnPropertyDescriptor(snapshot, key);
+        if (descriptor === undefined || !("value" in descriptor)) {
+            throw new DocumentContractDigestError("Document digest input must contain only own data properties.");
+        }
+        result[key] = descriptor.value;
+    }
+    return result;
+}
+export function documentIntentDigest(intent) {
+    return domainDigest(`${DOMAIN_PREFIX}/intent/v1`, intent);
+}
+export function documentOwnerMembershipDigest(ownerCatalogDigest, ownerId) {
+    return domainDigest(`${DOMAIN_PREFIX}/owner-membership/v1`, {
+        ownerCatalogDigest,
+        ownerId
+    });
+}
+export function documentIdentityProjectionDigest(entries) {
+    const snapshot = JSON.parse(canonicalJson(entries));
+    const normalized = snapshot
+        .map(({ id, repositoryPath }) => ({ id, repositoryPath }))
+        .toSorted((left, right) => compareBinaryStrings(left.id, right.id) ||
+        compareBinaryStrings(left.repositoryPath, right.repositoryPath));
+    return domainDigest(`${DOMAIN_PREFIX}/identity-projection/v1`, {
+        entries: normalized
+    });
+}
+export function documentReferencedDocumentDigest(document) {
+    const snapshot = JSON.parse(canonicalJson(document));
+    return domainDigest(`${DOMAIN_PREFIX}/referenced-document/v1`, {
+        id: snapshot.id,
+        path: snapshot.path
+    });
+}
+export function documentPlanDigest(plan) {
+    return domainDigest(`${DOMAIN_PREFIX}/plan/v1`, withoutOwnDigest(plan, "planDigest"));
+}
+export function documentReceiptDigest(receipt) {
+    return domainDigest(`${DOMAIN_PREFIX}/receipt/v1`, withoutOwnDigest(receipt, "receiptDigest"));
+}
+function record(value, subject) {
+    if (value === null || Array.isArray(value) || typeof value !== "object") {
+        throw new DocumentContractDigestError(`${subject} must be a JSON object.`);
+    }
+    return value;
+}
+function validatedRecord(value, subject) {
+    const candidate = record(value, subject);
+    try {
+        return JSON.parse(canonicalJson(candidate));
+    }
+    catch (error) {
+        throw new DocumentContractDigestError(`${subject} must use the closed canonical JSON data model.`, { cause: error });
+    }
+}
+function assertPublicationBindings(plan) {
+    const destination = plan["destination"];
+    const expectedParent = record(plan["expectedParent"], "Document Plan expected parent");
+    const precondition = record(plan["destinationPrecondition"], "Document Plan destination precondition");
+    const capabilities = plan["requiredAdapterCapabilities"];
+    let hasTemporaryCapacity = false;
+    if (typeof destination === "string" && typeof plan["planDigest"] === "string") {
+        try {
+            documentTemporaryPath(destination, plan["planDigest"]);
+            hasTemporaryCapacity = true;
+        }
+        catch {
+            // The single publication error below is the stable public failure surface.
+        }
+    }
+    if (typeof destination !== "string" ||
+        !hasTemporaryCapacity ||
+        expectedParent["path"] !== documentRepositoryParentPath(destination) ||
+        expectedParent["state"] !== "directory" ||
+        expectedParent["ancestry"] !== "real-directories" ||
+        precondition["state"] !== "absent" ||
+        !Array.isArray(capabilities) ||
+        !capabilities.some((capability) => capability === "create-file-no-replace/v1")) {
+        throw new DocumentContractDigestError("Document Plan publication bindings are invalid.");
+    }
+}
+function assertIntentDigest(plan) {
+    const intent = record(plan["intent"], "Document Plan Intent");
+    if (plan["intentDigest"] !== documentIntentDigest(intent)) {
+        throw new DocumentContractDigestError("Document Plan Intent digest is invalid.");
+    }
+}
+function assertOwnerMembershipDigest(plan) {
+    const intent = record(plan["intent"], "Document Plan Intent");
+    const authority = record(plan["authority"], "Document Plan authority");
+    const ownerCatalog = record(authority["ownerCatalog"], "Document Plan owner catalog authority");
+    const selectedOwner = record(plan["selectedOwner"], "Document Plan selected owner");
+    if (typeof ownerCatalog["digest"] !== "string" ||
+        typeof intent["owner"] !== "string" ||
+        typeof selectedOwner["id"] !== "string" ||
+        selectedOwner["id"] !== intent["owner"] ||
+        selectedOwner["membershipDigest"] !==
+            documentOwnerMembershipDigest(ownerCatalog["digest"], selectedOwner["id"])) {
+        throw new DocumentContractDigestError("Document Plan owner membership digest is invalid.");
+    }
+}
+function hasExactCommit(commit, expected) {
+    return Object.entries(expected).every(([field, value]) => commit[field] === value);
+}
+function isRecoveryCommit(outcome, commit) {
+    const publication = commit["publication"];
+    const atomicity = commit["atomicity"];
+    return (commit["state"] === outcome &&
+        ["none", "published", "unknown"].includes(publication) &&
+        ["not-applicable", "single-file-atomic-create"].includes(atomicity) &&
+        (publication !== "published" || atomicity === "single-file-atomic-create") &&
+        (publication !== "none" || atomicity === "not-applicable") &&
+        commit["recoverability"] === "preserved-for-recovery");
+}
+function assertReceiptOutcomeCommit(receipt) {
+    const outcome = receipt["outcome"];
+    const commit = record(receipt["commit"], "Document Receipt commit observation");
+    const noResultOutcomes = [
+        "authority-stale",
+        "rejected",
+        "failed-before-publication",
+        "cancelled"
+    ];
+    const recoveryOutcomes = ["recovery-required", "manual-recovery-required"];
+    const applied = outcome === "applied" &&
+        typeof receipt["resultDigest"] === "string" &&
+        hasExactCommit(commit, {
+            state: "committed",
+            publication: "published",
+            atomicity: "single-file-atomic-create",
+            recoverability: "not-required"
+        });
+    const alreadyApplied = outcome === "already-applied" &&
+        typeof receipt["resultDigest"] === "string" &&
+        hasExactCommit(commit, {
+            state: "committed",
+            publication: "preexisting-exact",
+            atomicity: "not-applicable",
+            recoverability: "not-required"
+        });
+    const noResult = typeof outcome === "string" &&
+        noResultOutcomes.includes(outcome) &&
+        receipt["resultDigest"] === undefined &&
+        hasExactCommit(commit, {
+            state: "not-published",
+            publication: "none",
+            atomicity: "not-applicable",
+            recoverability: "not-required"
+        });
+    const recovery = typeof outcome === "string" &&
+        recoveryOutcomes.includes(outcome) &&
+        receipt["resultDigest"] === undefined &&
+        isRecoveryCommit(outcome, commit);
+    if (!applied && !alreadyApplied && !noResult && !recovery) {
+        throw new DocumentContractDigestError("Document Receipt outcome and commit observation are incompatible.");
+    }
+}
+function assertReferencedDocumentDigests(plan) {
+    const references = plan["referencedDocuments"];
+    if (!Array.isArray(references)) {
+        throw new DocumentContractDigestError("Document Plan referenced documents must be an array.");
+    }
+    for (const referenceValue of references) {
+        const reference = record(referenceValue, "Document Plan referenced document");
+        if (typeof reference["id"] !== "string" ||
+            typeof reference["path"] !== "string" ||
+            reference["projectionDigest"] !==
+                documentReferencedDocumentDigest({
+                    id: reference["id"],
+                    path: reference["path"]
+                })) {
+            throw new DocumentContractDigestError("Document Plan referenced-document digest is invalid.");
+        }
+    }
+}
+function assertOutputDigest(plan) {
+    const output = record(plan["output"], "Document Plan output");
+    if (typeof output["contentBase64"] !== "string") {
+        throw new DocumentContractDigestError("Document Plan output content must be canonical Base64.");
+    }
+    const bytes = Buffer.from(output["contentBase64"], "base64");
+    if (bytes.toString("base64") !== output["contentBase64"] ||
+        output["size"] !== bytes.byteLength ||
+        output["digest"] !== sha256Bytes(bytes)) {
+        throw new DocumentContractDigestError("Document Plan output digest is invalid.");
+    }
+    if (bytes[0] === 0xef && bytes[1] === 0xbb && bytes[2] === 0xbf) {
+        throw new DocumentContractDigestError("Document Plan output must not start with a UTF-8 BOM.");
+    }
+    let source;
+    try {
+        source = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch (error) {
+        throw new DocumentContractDigestError("Document Plan output is not well-formed UTF-8.", { cause: error });
+    }
+    if (source.startsWith("\uFEFF") ||
+        source.includes("\u0000") ||
+        source.includes("\r") ||
+        !source.endsWith("\n") ||
+        source.endsWith("\n\n") ||
+        output["mode"] !== "0644" ||
+        output["mediaType"] !== "text/markdown; charset=utf-8") {
+        throw new DocumentContractDigestError("Document Plan output violates the canonical Markdown byte contract.");
+    }
+}
+export function assertDocumentPlanDigests(value) {
+    const plan = validatedRecord(value, "Document Plan");
+    assertIntentDigest(plan);
+    assertOwnerMembershipDigest(plan);
+    assertReferencedDocumentDigests(plan);
+    assertOutputDigest(plan);
+    assertPublicationBindings(plan);
+    if (plan["planDigest"] !== documentPlanDigest(plan)) {
+        throw new DocumentContractDigestError("Document Plan digest is invalid.");
+    }
+}
+export function assertDocumentReceiptDigest(value, planValue) {
+    const receipt = validatedRecord(value, "Document Receipt");
+    if (receipt["receiptDigest"] !== documentReceiptDigest(receipt)) {
+        throw new DocumentContractDigestError("Document Receipt digest is invalid.");
+    }
+    assertReceiptOutcomeCommit(receipt);
+    if (planValue === undefined) {
+        return;
+    }
+    assertDocumentPlanDigests(planValue);
+    const plan = validatedRecord(planValue, "Document Plan");
+    const output = record(plan["output"], "Document Plan output");
+    const outcome = receipt["outcome"];
+    const hasProvenOutput = outcome === "applied" || outcome === "already-applied";
+    const supportedOutcomes = new Set([
+        "applied",
+        "already-applied",
+        "authority-stale",
+        "rejected",
+        "recovery-required",
+        "manual-recovery-required",
+        "failed-before-publication",
+        "cancelled"
+    ]);
+    if (typeof outcome !== "string" ||
+        !supportedOutcomes.has(outcome) ||
+        receipt["planDigest"] !== plan["planDigest"] ||
+        receipt["destination"] !== plan["destination"] ||
+        (hasProvenOutput && receipt["resultDigest"] !== output["digest"]) ||
+        (!hasProvenOutput && receipt["resultDigest"] !== undefined)) {
+        throw new DocumentContractDigestError("Document Receipt result evidence does not bind the referenced Plan.");
+    }
+}
+//# sourceMappingURL=document-contract-digests.js.map

package/dist/document-authoring/application/policies/document-contract-digests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-contract-digests.js","sourceRoot":"","sources":["../../../../src/document-authoring/application/policies/document-contract-digests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EACL,aAAa,EAEb,WAAW,EACX,UAAU,EACX,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAK7E,MAAM,aAAa,GAAG,2CAA2C,CAAC;AAElE,MAAM,2BAA4B,SAAQ,KAAK;IAC7C,YAAmB,OAAe,EAAE,OAAsB;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,OAA2B;IAC/D,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB,EAAE,KAAa;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAe,CAAC;IAChE,MAAM,MAAM,GAAuC,MAAM,CAAC,MAAM,CAAC,IAAI,CAGpE,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,2BAA2B,CACnC,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,2BAA2B,CACnC,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAA2B,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAkB;IACrD,OAAO,YAAY,CAAC,GAAG,aAAa,YAAY,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,kBAA0B,EAC1B,OAAe;IAEf,OAAO,YAAY,CAAC,GAAG,aAAa,sBAAsB,EAAE;QAC1D,kBAAkB;QAClB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAOD,MAAM,UAAU,gCAAgC,CAC9C,OAA+C;IAE/C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,aAAa,CAAC,OAAwC,CAAC,CACvB,CAAC;IACnC,MAAM,UAAU,GAAG,QAAQ;SACxB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;SACzD,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;QACvC,oBAAoB,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAClE,CAAC;IACJ,OAAO,YAAY,CAAC,GAAG,aAAa,yBAAyB,EAAE;QAC7D,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAGhD;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAGlD,CAAC;IACF,OAAO,YAAY,CAAC,GAAG,aAAa,yBAAyB,EAAE;QAC7D,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAgB;IACjD,OAAO,YAAY,CACjB,GAAG,aAAa,UAAU,EAC1B,gBAAgB,CAAC,IAAI,EAAE,YAAY,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAmB;IACvD,OAAO,YAAY,CACjB,GAAG,aAAa,aAAa,EAC7B,gBAAgB,CAAC,OAAO,EAAE,eAAe,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,OAAe;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxE,MAAM,IAAI,2BAA2B,CAAC,GAAG,OAAO,yBAAyB,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,OAAe;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAe,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,2BAA2B,CACnC,GAAG,OAAO,iDAAiD,EAC3D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAgB;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,MAAM,CAC3B,IAAI,CAAC,gBAAgB,CAAC,EACtB,+BAA+B,CAChC,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CACzB,IAAI,CAAC,yBAAyB,CAAC,EAC/B,wCAAwC,CACzC,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACzD,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC9E,IAAI,CAAC;YACH,qBAAqB,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YACvD,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;IACH,CAAC;IACD,IACE,OAAO,WAAW,KAAK,QAAQ;QAC/B,CAAC,oBAAoB;QACrB,cAAc,CAAC,MAAM,CAAC,KAAK,4BAA4B,CAAC,WAAW,CAAC;QACpE,cAAc,CAAC,OAAO,CAAC,KAAK,WAAW;QACvC,cAAc,CAAC,UAAU,CAAC,KAAK,kBAAkB;QACjD,YAAY,CAAC,OAAO,CAAC,KAAK,QAAQ;QAClC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAC5B,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,2BAA2B,CAAC,EAC9E,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,iDAAiD,CAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAgB;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,2BAA2B,CAAC,yCAAyC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAgB;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,MAAM,CACzB,SAAS,CAAC,cAAc,CAAC,EACzB,uCAAuC,CACxC,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACpF,IACE,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ;QACnC,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,QAAQ;QACvC,aAAa,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC;QACvC,aAAa,CAAC,kBAAkB,CAAC;YAC/B,6BAA6B,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,mDAAmD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,MAAkB,EAClB,QAA0C;IAE1C,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CACnC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAC5C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,MAAkB;IAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACtC,OAAO,CACL,MAAM,CAAC,OAAO,CAAC,KAAK,OAAO;QAC3B,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAqB,CAAC;QAChE,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CACtD,SAAmB,CACpB;QACD,CAAC,WAAW,KAAK,WAAW,IAAI,SAAS,KAAK,2BAA2B,CAAC;QAC1E,CAAC,WAAW,KAAK,MAAM,IAAI,SAAS,KAAK,gBAAgB,CAAC;QAC1D,MAAM,CAAC,gBAAgB,CAAC,KAAK,wBAAwB,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAmB;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,qCAAqC,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG;QACvB,iBAAiB;QACjB,UAAU;QACV,2BAA2B;QAC3B,WAAW;KACZ,CAAC;IACF,MAAM,gBAAgB,GAAG,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,MAAM,OAAO,GACX,OAAO,KAAK,SAAS;QACrB,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ;QAC3C,cAAc,CAAC,MAAM,EAAE;YACrB,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,WAAW;YACxB,SAAS,EAAE,2BAA2B;YACtC,cAAc,EAAE,cAAc;SAC/B,CAAC,CAAC;IACL,MAAM,cAAc,GAClB,OAAO,KAAK,iBAAiB;QAC7B,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ;QAC3C,cAAc,CAAC,MAAM,EAAE;YACrB,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,mBAAmB;YAChC,SAAS,EAAE,gBAAgB;YAC3B,cAAc,EAAE,cAAc;SAC/B,CAAC,CAAC;IACL,MAAM,QAAQ,GACZ,OAAO,OAAO,KAAK,QAAQ;QAC3B,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClC,OAAO,CAAC,cAAc,CAAC,KAAK,SAAS;QACrC,cAAc,CAAC,MAAM,EAAE;YACrB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,MAAM;YACnB,SAAS,EAAE,gBAAgB;YAC3B,cAAc,EAAE,cAAc;SAC/B,CAAC,CAAC;IACL,MAAM,QAAQ,GACZ,OAAO,OAAO,KAAK,QAAQ;QAC3B,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClC,OAAO,CAAC,cAAc,CAAC,KAAK,SAAS;QACrC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,2BAA2B,CACnC,mEAAmE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAgB;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,2BAA2B,CACnC,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,cAAc,IAAI,UAA2C,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;QAC9E,IACE,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,QAAQ;YACnC,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ;YACrC,SAAS,CAAC,kBAAkB,CAAC;gBAC3B,gCAAgC,CAAC;oBAC/B,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC;iBACxB,CAAC,EACJ,CAAC;YACD,MAAM,IAAI,2BAA2B,CACnC,sDAAsD,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAgB;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC9D,IAAI,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,2BAA2B,CACnC,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7D,IACE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,eAAe,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,UAAU;QACnC,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,2BAA2B,CAAC,yCAAyC,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,2BAA2B,CACnC,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,2BAA2B,CACnC,gDAAgD,EAChD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,IACE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC3B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM;QACzB,MAAM,CAAC,WAAW,CAAC,KAAK,8BAA8B,EACtD,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,qEAAqE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACrD,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAClC,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACtC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,2BAA2B,CAAC,kCAAkC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,SAAmB;IAEnB,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,eAAe,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,2BAA2B,CAAC,qCAAqC,CAAC,CAAC;IAC/E,CAAC;IACD,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,iBAAiB,CAAC;IAC/E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;QAChC,SAAS;QACT,iBAAiB;QACjB,iBAAiB;QACjB,UAAU;QACV,mBAAmB;QACnB,0BAA0B;QAC1B,2BAA2B;QAC3B,WAAW;KACZ,CAAC,CAAC;IACH,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/B,OAAO,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;QAC5C,OAAO,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC;QAC9C,CAAC,eAAe,IAAI,OAAO,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjE,CAAC,CAAC,eAAe,IAAI,OAAO,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,qEAAqE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/document-authoring/application/policies/document-repository-path.d.ts

@@ -1,2 +1,3 @@
 export declare function isDocumentRepositoryPath(path: string): boolean;
+export declare function documentRepositoryParentPath(path: string): string;
 //# sourceMappingURL=document-repository-path.d.ts.map

package/dist/document-authoring/application/policies/document-repository-path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-repository-path.d.ts","sourceRoot":"","sources":["../../../../src/document-authoring/application/policies/document-repository-path.ts"],"names":[],"mappings":"AAGA,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE9D"}
+{"version":3,"file":"document-repository-path.d.ts","sourceRoot":"","sources":["../../../../src/document-authoring/application/policies/document-repository-path.ts"],"names":[],"mappings":"AAIA,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAmB9D;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGjE"}

package/dist/document-authoring/application/policies/document-repository-path.js

@@ -1,5 +1,24 @@
-const DOCUMENT_REPOSITORY_PATH = /^(?!.*(?:^|\/)\.{1,2}(?:\/|$))(?!.*\.(?:\/|$))(?!.*(?:^|\/)(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.[A-Za-z0-9._@-]*)?(?:\/|$))[A-Za-z0-9._@-]+(?:\/[A-Za-z0-9._@-]+)*$/iu;
+const DOCUMENT_REPOSITORY_SEGMENT = /^[A-Za-z0-9._@-]+$/u;
+const WINDOWS_RESERVED_NAMES = /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/iu;
+const utf8 = new TextEncoder();
 export function isDocumentRepositoryPath(path) {
-    return path.length <= 512 && DOCUMENT_REPOSITORY_PATH.test(path);
+    if (utf8.encode(path).byteLength > 512 ||
+        path.startsWith("/") ||
+        path.includes("\\")) {
+        return false;
+    }
+    const segments = path.split("/");
+    return segments.every((segment) => segment.length > 0 &&
+        segment !== "." &&
+        segment !== ".." &&
+        utf8.encode(segment).byteLength <= 255 &&
+        !segment.endsWith(".") &&
+        !segment.endsWith(" ") &&
+        !WINDOWS_RESERVED_NAMES.test(segment) &&
+        DOCUMENT_REPOSITORY_SEGMENT.test(segment));
+}
+export function documentRepositoryParentPath(path) {
+    const separator = path.lastIndexOf("/");
+    return separator === -1 ? "." : path.slice(0, separator);
 }
 //# sourceMappingURL=document-repository-path.js.map

package/dist/document-authoring/application/policies/document-repository-path.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-repository-path.js","sourceRoot":"","sources":["../../../../src/document-authoring/application/policies/document-repository-path.ts"],"names":[],"mappings":"AAAA,MAAM,wBAAwB,GAC5B,4KAA4K,CAAC;AAE/K,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC"}
+{"version":3,"file":"document-repository-path.js","sourceRoot":"","sources":["../../../../src/document-authoring/application/policies/document-repository-path.ts"],"names":[],"mappings":"AAAA,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAC1D,MAAM,sBAAsB,GAAG,kDAAkD,CAAC;AAClF,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IACE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,GAAG;QAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAChC,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,KAAK,GAAG;QACf,OAAO,KAAK,IAAI;QAChB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,IAAI,GAAG;QACtC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QACrC,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAC3D,CAAC"}

package/dist/document-authoring/application/policies/document-temporary-path.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Derives the only transaction-owned temporary path for a Document Plan.
+ * The name is bounded independently of the destination basename and remains
+ * in the destination's already-authorized parent directory.
+ */
+export declare function documentTemporaryPath(destination: string, planDigest: string): string;
+//# sourceMappingURL=document-temporary-path.d.ts.map

package/dist/document-authoring/application/policies/document-temporary-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-temporary-path.d.ts","sourceRoot":"","sources":["../../../../src/document-authoring/application/policies/document-temporary-path.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,MAAM,CAyBR"}

package/dist/document-authoring/application/policies/document-temporary-path.js

@@ -0,0 +1,34 @@
+import { isDocumentRepositoryPath } from "./document-repository-path.js";
+const CANONICAL_SHA256_DIGEST = /^sha256:[0-9a-f]{64}$/u;
+const TEMPORARY_PREFIX = ".foundation-document-";
+const TEMPORARY_SUFFIX = ".tmp";
+class DocumentTemporaryPathError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DocumentTemporaryPathError";
+    }
+}
+/**
+ * Derives the only transaction-owned temporary path for a Document Plan.
+ * The name is bounded independently of the destination basename and remains
+ * in the destination's already-authorized parent directory.
+ */
+export function documentTemporaryPath(destination, planDigest) {
+    if (!isDocumentRepositoryPath(destination)) {
+        throw new DocumentTemporaryPathError("Document destination is not a portable repository path.");
+    }
+    if (!CANONICAL_SHA256_DIGEST.test(planDigest)) {
+        throw new DocumentTemporaryPathError("Document Plan digest is not canonical SHA-256.");
+    }
+    const separator = destination.lastIndexOf("/");
+    const parent = separator === -1 ? "" : destination.slice(0, separator);
+    const temporaryName = `${TEMPORARY_PREFIX}${planDigest.slice("sha256:".length)}${TEMPORARY_SUFFIX}`;
+    const temporaryPath = parent.length === 0
+        ? temporaryName
+        : `${parent}/${temporaryName}`;
+    if (!isDocumentRepositoryPath(temporaryPath)) {
+        throw new DocumentTemporaryPathError("Document destination parent cannot contain the bounded transaction temporary.");
+    }
+    return temporaryPath;
+}
+//# sourceMappingURL=document-temporary-path.js.map