@agent-teams/engineering-foundation 0.6.0 → 0.8.0

package/dist/scaffolding/adapters/node/node-authority-error.d.ts

@@ -0,0 +1,4 @@
+export declare class ScaffoldAuthorityStaleError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=node-authority-error.d.ts.map

package/dist/scaffolding/adapters/node/node-authority-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-authority-error.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-authority-error.ts"],"names":[],"mappings":"AAAA,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF"}

package/dist/scaffolding/adapters/node/node-authority-error.js

@@ -0,0 +1,7 @@
+export class ScaffoldAuthorityStaleError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ScaffoldAuthorityStaleError";
+    }
+}
+//# sourceMappingURL=node-authority-error.js.map

package/dist/scaffolding/adapters/node/node-authority-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-authority-error.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-authority-error.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF"}

package/dist/scaffolding/adapters/node/node-authority-input-loader.d.ts

@@ -0,0 +1,20 @@
+import type { AuthorityScaffoldCompilationInput, AuthorityScaffoldPlan } from "../../contract/types.js";
+export type ScaffoldAuthorityInputFaultInjector = (point: {
+    readonly phase: "before-authority-source-stability-check";
+}) => Promise<void> | void;
+export declare function loadAuthorityScaffoldCompilationInputFromFile(options: {
+    readonly consumerRoot: string;
+    readonly configPath: string;
+    readonly intentPath: string;
+    readonly foundationVersion: string;
+    readonly faultInjector?: ScaffoldAuthorityInputFaultInjector;
+}): Promise<AuthorityScaffoldCompilationInput>;
+export declare function loadAuthorityScaffoldCompilationInputFromIntent(options: {
+    readonly consumerRoot: string;
+    readonly configPath: string;
+    readonly foundationVersion: string;
+    readonly intent: unknown;
+    readonly faultInjector?: ScaffoldAuthorityInputFaultInjector;
+}): Promise<AuthorityScaffoldCompilationInput>;
+export declare function readAuthorityScaffoldPlanFile(consumerRoot: string, planPath: string): Promise<AuthorityScaffoldPlan>;
+//# sourceMappingURL=node-authority-input-loader.d.ts.map

package/dist/scaffolding/adapters/node/node-authority-input-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-authority-input-loader.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-authority-input-loader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAIV,iCAAiC,EACjC,qBAAqB,EAKtB,MAAM,yBAAyB,CAAC;AAgBjC,MAAM,MAAM,mCAAmC,GAAG,CAChD,KAAK,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,yCAAyC,CAAA;CAAE,KACjE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAqO1B,wBAAsB,6CAA6C,CAAC,OAAO,EAAE;IAC3E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,mCAAmC,CAAC;CAC9D,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAwB7C;AAED,wBAAsB,+CAA+C,CAAC,OAAO,EAAE;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,mCAAmC,CAAC;CAC9D,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAiB7C;AAED,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CAYhC"}

package/dist/scaffolding/adapters/node/node-authority-input-loader.js

@@ -0,0 +1,180 @@
+import { sha256Json } from "../../kernel/canonical-json.js";
+import { createScaffoldAuthorityEvidence } from "../../kernel/authority-evidence.js";
+import { assertAuthorityScaffoldPlanDigest } from "../../kernel/plan-validation.js";
+import { ScaffoldError } from "../../scaffold-error.js";
+import { assertSchema } from "../../../schema-catalog.js";
+import { parseStrictYamlSource } from "../../../strict-yaml.js";
+import { assertion, readContainedRepositoryFile } from "./node-repository-file.js";
+import { ScaffoldAuthorityStaleError } from "./node-authority-error.js";
+import { resolveOwnerDocument } from "./node-owner-document-resolver.js";
+import { MAX_SCAFFOLD_PLAN_BYTES } from "./node-scaffold-limits.js";
+function requireExactlyOne(values, predicate, message) {
+    const matches = values.filter(predicate);
+    if (matches.length !== 1) {
+        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", message);
+    }
+    return matches[0];
+}
+function mapAuthorityCatalog(value) {
+    const raw = value;
+    return Object.freeze({
+        version: 2,
+        packages: Object.freeze(raw.packages.map((entry) => Object.freeze({
+            id: entry.id,
+            role: entry.role,
+            path: entry.path,
+            packageName: entry.package_name,
+            ownerDocumentId: entry.owner_document
+        })))
+    });
+}
+async function assertAuthoritySourceSetStable(options) {
+    const [files, owner] = await Promise.all([
+        Promise.all([
+            readContainedRepositoryFile(options.consumerRoot, options.configPath, "scaffolding-config-stability"),
+            readContainedRepositoryFile(options.consumerRoot, options.catalogPath, "scaffold-target-catalog-stability")
+        ]),
+        resolveOwnerDocument({
+            consumerRoot: options.consumerRoot,
+            documentRoots: options.documentRoots,
+            ownerDocumentId: options.ownerDocumentId
+        })
+    ]);
+    const observed = [...files.map(assertion), assertion(owner.file)];
+    if (owner.indexDigest !== options.ownerIndexDigest ||
+        observed.some((current, index) => {
+            const expected = options.expected[index];
+            return (expected === undefined ||
+                current.path !== expected.path ||
+                current.size !== expected.size ||
+                current.digest !== expected.digest);
+        })) {
+        throw new ScaffoldAuthorityStaleError("Consumer authority changed while Foundation was reading its canonical source set.");
+    }
+}
+async function loadAuthorityScaffoldCompilationInput(options) {
+    await Promise.all([
+        assertSchema("scaffolding-config", options.configValue, "scaffolding-config"),
+        assertSchema("scaffold-intent", options.intent, "scaffold-intent")
+    ]);
+    const config = options.configValue;
+    const catalogFile = await readContainedRepositoryFile(options.consumerRoot, config.targetCatalogPath, "scaffold-target-catalog");
+    const catalogValue = parseStrictYamlSource(catalogFile.source, "scaffold-target-catalog");
+    await assertSchema("scaffold-target-catalog", catalogValue, "scaffold-target-catalog");
+    const unresolvedCatalog = mapAuthorityCatalog(catalogValue);
+    const intent = options.intent;
+    const composition = requireExactlyOne(config.compositions, (candidate) => candidate.id === intent.compositionId, `Composition must exist exactly once: ${intent.compositionId}.`);
+    const target = requireExactlyOne(unresolvedCatalog.packages, (candidate) => candidate.id === intent.targetRef, `Scaffold target must exist exactly once: ${intent.targetRef}.`);
+    const authorityVerifiers = composition.authorityVerifiers;
+    if (authorityVerifiers.length !== 1) {
+        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", "The selected Composition must contain exactly one authority verifier.");
+    }
+    const verifier = authorityVerifiers[0];
+    if (verifier === undefined) {
+        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", "The selected Composition must admit exactly one supported authority verifier.");
+    }
+    const owner = await resolveOwnerDocument({
+        consumerRoot: options.consumerRoot,
+        documentRoots: verifier.parameters.documentRoots,
+        ownerDocumentId: target.ownerDocumentId
+    });
+    if (!verifier.parameters.allowedStatuses.includes(owner.status)) {
+        throw new ScaffoldAuthorityStaleError("Owner document status is not admitted by the selected Composition.");
+    }
+    const resolvedTarget = Object.freeze({
+        id: target.id,
+        role: target.role,
+        path: target.path,
+        packageName: target.packageName,
+        ownerDocument: Object.freeze({ id: owner.id, path: owner.file.path })
+    });
+    const catalog = Object.freeze({
+        version: 2,
+        packages: Object.freeze([resolvedTarget])
+    });
+    const authorityReadSet = Object.freeze([
+        assertion(options.configFile),
+        assertion(catalogFile),
+        assertion(owner.file)
+    ]);
+    const [configAssertion, catalogAssertion, ownerAssertion] = authorityReadSet;
+    const evidence = createScaffoldAuthorityEvidence({
+        schemaVersion: 1,
+        verifier: Object.freeze({ id: verifier.id, contractVersion: verifier.contractVersion }),
+        projectId: config.projectId,
+        targetRef: intent.targetRef,
+        targetIdentityDigest: sha256Json(resolvedTarget),
+        ownerDocument: Object.freeze({
+            id: resolvedTarget.ownerDocument.id,
+            path: resolvedTarget.ownerDocument.path,
+            status: owner.status
+        }),
+        sources: Object.freeze([
+            Object.freeze({ role: "config", assertion: configAssertion }),
+            Object.freeze({ role: "owner-document", assertion: ownerAssertion }),
+            Object.freeze({ role: "target-catalog", assertion: catalogAssertion })
+        ])
+    });
+    await assertSchema("scaffold-authority-evidence", evidence, "scaffold-authority-evidence");
+    await options.faultInjector?.({
+        phase: "before-authority-source-stability-check"
+    });
+    await assertAuthoritySourceSetStable({
+        consumerRoot: options.consumerRoot,
+        configPath: options.configPath,
+        catalogPath: config.targetCatalogPath,
+        ownerDocumentId: target.ownerDocumentId,
+        documentRoots: verifier.parameters.documentRoots,
+        ownerIndexDigest: owner.indexDigest,
+        expected: authorityReadSet
+    });
+    return Object.freeze({
+        foundationVersion: options.foundationVersion,
+        configPath: options.configPath,
+        config,
+        intent,
+        catalog,
+        authorityEvidence: evidence,
+        authorityReadSet
+    });
+}
+export async function loadAuthorityScaffoldCompilationInputFromFile(options) {
+    const [configFile, intentFile] = await Promise.all([
+        readContainedRepositoryFile(options.consumerRoot, options.configPath, "scaffolding-config"),
+        readContainedRepositoryFile(options.consumerRoot, options.intentPath, "scaffold-intent")
+    ]);
+    return loadAuthorityScaffoldCompilationInput({
+        consumerRoot: options.consumerRoot,
+        configPath: options.configPath,
+        foundationVersion: options.foundationVersion,
+        intent: parseStrictYamlSource(intentFile.source, "scaffold-intent"),
+        configFile,
+        configValue: parseStrictYamlSource(configFile.source, "scaffolding-config"),
+        ...(options.faultInjector === undefined
+            ? {}
+            : { faultInjector: options.faultInjector })
+    });
+}
+export async function loadAuthorityScaffoldCompilationInputFromIntent(options) {
+    const configFile = await readContainedRepositoryFile(options.consumerRoot, options.configPath, "scaffolding-config");
+    return loadAuthorityScaffoldCompilationInput({
+        consumerRoot: options.consumerRoot,
+        configPath: options.configPath,
+        foundationVersion: options.foundationVersion,
+        intent: options.intent,
+        configFile,
+        configValue: parseStrictYamlSource(configFile.source, "scaffolding-config"),
+        ...(options.faultInjector === undefined
+            ? {}
+            : { faultInjector: options.faultInjector })
+    });
+}
+export async function readAuthorityScaffoldPlanFile(consumerRoot, planPath) {
+    const planFile = await readContainedRepositoryFile(consumerRoot, planPath, "scaffold-plan", MAX_SCAFFOLD_PLAN_BYTES);
+    const value = parseStrictYamlSource(planFile.source, "scaffold-plan");
+    await assertSchema("scaffold-plan", value, "scaffold-plan");
+    const plan = value;
+    assertAuthorityScaffoldPlanDigest(plan);
+    return plan;
+}
+//# sourceMappingURL=node-authority-input-loader.js.map

package/dist/scaffolding/adapters/node/node-authority-input-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-authority-input-loader.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-authority-input-loader.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,SAAS,EACT,2BAA2B,EAE5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAMpE,SAAS,iBAAiB,CACxB,MAAoB,EACpB,SAAgC,EAChC,OAAe;IAEf,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,aAAa,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAM,CAAC;AACzB,CAAC;AAeD,SAAS,mBAAmB,CAC1B,KAAc;IAEd,MAAM,GAAG,GAAG,KASX,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,MAAM,CAAC,MAAM,CACrB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACzB,MAAM,CAAC,MAAM,CAAC;YACZ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,YAAY;YAC/B,eAAe,EAAE,KAAK,CAAC,cAAc;SACtC,CAAC,CACH,CACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,OAQ7C;IACC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC;YACV,2BAA2B,CACzB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,8BAA8B,CAC/B;YACD,2BAA2B,CACzB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,WAAW,EACnB,mCAAmC,CACpC;SACF,CAAC;QACF,oBAAoB,CAAC;YACnB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC;KACH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,IACE,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,gBAAgB;QAC9C,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzC,OAAO,CACL,QAAQ,KAAK,SAAS;gBACtB,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;gBAC9B,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;gBAC9B,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CACnC,CAAC;QACJ,CAAC,CAAC,EACF,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,mFAAmF,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qCAAqC,CAAC,OAQpD;IACC,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,WAAW,EAAE,oBAAoB,CAAC;QAC7E,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC;KACnE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,WAAyC,CAAC;IACjE,MAAM,WAAW,GAAG,MAAM,2BAA2B,CACnD,OAAO,CAAC,YAAY,EACpB,MAAM,CAAC,iBAAiB,EACxB,yBAAyB,CAC1B,CAAC;IACF,MAAM,YAAY,GAAG,qBAAqB,CACxC,WAAW,CAAC,MAAM,EAClB,yBAAyB,CAC1B,CAAC;IACF,MAAM,YAAY,CAChB,yBAAyB,EACzB,YAAY,EACZ,yBAAyB,CAC1B,CAAC;IACF,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAiC,CAAC;IACzD,MAAM,WAAW,GAAG,iBAAiB,CACnC,MAAM,CAAC,YAAY,EACnB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,aAAa,EACpD,wCAAwC,MAAM,CAAC,aAAa,GAAG,CAChE,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAC9B,iBAAiB,CAAC,QAAQ,EAC1B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,SAAS,EAChD,4CAA4C,MAAM,CAAC,SAAS,GAAG,CAChE,CAAC;IACF,MAAM,kBAAkB,GAAG,WAAW,CAAC,kBAA4D,CAAC;IACpG,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC;QACvC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,aAAa;QAChD,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,2BAA2B,CACnC,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;QACnC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KACtE,CAAmC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,CAAU;QACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;KAC1C,CAA0C,CAAC;IAC5C,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;QACrC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7B,SAAS,CAAC,WAAW,CAAC;QACtB,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;KACtB,CAAoC,CAAC;IACtC,MAAM,CAAC,eAAe,EAAE,gBAAgB,EAAE,cAAc,CAAC,GAAG,gBAAgB,CAAC;IAC7E,MAAM,QAAQ,GAAgC,+BAA+B,CAAC;QAC5E,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC;QACvF,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,oBAAoB,EAAE,UAAU,CAAC,cAAc,CAAC;QAChD,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;YAC3B,EAAE,EAAE,cAAc,CAAC,aAAa,CAAC,EAAE;YACnC,IAAI,EAAE,cAAc,CAAC,aAAa,CAAC,IAAI;YACvC,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAyB,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YAC7E,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAyB,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;SAChF,CAAC;KACH,CAAC,CAAC;IACH,MAAM,YAAY,CAChB,6BAA6B,EAC7B,QAAQ,EACR,6BAA6B,CAC9B,CAAC;IACF,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;QAC5B,KAAK,EAAE,yCAAyC;KACjD,CAAC,CAAC;IACH,MAAM,8BAA8B,CAAC;QACnC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,MAAM,CAAC,iBAAiB;QACrC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,aAAa;QAChD,gBAAgB,EAAE,KAAK,CAAC,WAAW;QACnC,QAAQ,EAAE,gBAAgB;KAC3B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM;QACN,MAAM;QACN,OAAO;QACP,iBAAiB,EAAE,QAAQ;QAC3B,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6CAA6C,CAAC,OAMnE;IACC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,2BAA2B,CACzB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,oBAAoB,CACrB;QACD,2BAA2B,CACzB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,iBAAiB,CAClB;KACF,CAAC,CAAC;IACH,OAAO,qCAAqC,CAAC;QAC3C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,qBAAqB,CAAC,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC;QACnE,UAAU;QACV,WAAW,EAAE,qBAAqB,CAAC,UAAU,CAAC,MAAM,EAAE,oBAAoB,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+CAA+C,CAAC,OAMrE;IACC,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAClD,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,oBAAoB,CACrB,CAAC;IACF,OAAO,qCAAqC,CAAC;QAC3C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU;QACV,WAAW,EAAE,qBAAqB,CAAC,UAAU,CAAC,MAAM,EAAE,oBAAoB,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAAoB,EACpB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAChD,YAAY,EACZ,QAAQ,EACR,eAAe,EACf,uBAAuB,CACxB,CAAC;IACF,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACtE,MAAM,YAAY,CAAC,eAAe,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,KAA8B,CAAC;IAC5C,iCAAiC,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/scaffolding/adapters/node/node-authority-receipt-validator.d.ts

@@ -0,0 +1,4 @@
+import type { AuthorityScaffoldPlan, AuthorityScaffoldReceipt } from "../../contract/types.js";
+/** Validates an untrusted canonical Receipt against structural and semantic evidence. */
+export declare function validateAuthorityScaffoldReceipt(receipt: unknown, plan?: AuthorityScaffoldPlan): Promise<AuthorityScaffoldReceipt>;
+//# sourceMappingURL=node-authority-receipt-validator.d.ts.map

package/dist/scaffolding/adapters/node/node-authority-receipt-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-authority-receipt-validator.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-authority-receipt-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AAIjC,yFAAyF;AACzF,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,CAKnC"}

package/dist/scaffolding/adapters/node/node-authority-receipt-validator.js

@@ -0,0 +1,10 @@
+import { assertAuthorityScaffoldReceiptDigest } from "../../kernel/authority-receipt.js";
+import { assertSchema } from "../../../schema-catalog.js";
+/** Validates an untrusted canonical Receipt against structural and semantic evidence. */
+export async function validateAuthorityScaffoldReceipt(receipt, plan) {
+    await assertSchema("scaffold-receipt", receipt, "scaffold-receipt");
+    const validated = receipt;
+    assertAuthorityScaffoldReceiptDigest(validated, plan);
+    return validated;
+}
+//# sourceMappingURL=node-authority-receipt-validator.js.map

package/dist/scaffolding/adapters/node/node-authority-receipt-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-authority-receipt-validator.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-authority-receipt-validator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oCAAoC,EAAE,MAAM,mCAAmC,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAgB,EAChB,IAA4B;IAE5B,MAAM,YAAY,CAAC,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,OAAmC,CAAC;IACtD,oCAAoC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/scaffolding/adapters/node/node-input-loader.d.ts

@@ -1,5 +1,4 @@
 import type { ScaffoldCompilationInput, ScaffoldPlanV1, ScaffoldReadAssertionV1 } from "../../contract/types.js";
-export declare const MAX_SCAFFOLD_PLAN_BYTES: number;
 export declare function loadScaffoldCompilationInput(options: {
     readonly consumerRoot: string;
     readonly configPath: string;
@@ -12,6 +11,7 @@ export declare function loadScaffoldCompilationInputFromIntent(options: {
     readonly foundationVersion: string;
     readonly intent: unknown;
 }): Promise<ScaffoldCompilationInput>;
+/** Reads a released 0.5 Plan for regression evidence only. */
 export declare function readScaffoldPlanFile(consumerRoot: string, planPath: string): Promise<ScaffoldPlanV1>;
 export declare function inspectAuthorityReadSet(consumerRoot: string, readSet: readonly ScaffoldReadAssertionV1[]): Promise<boolean>;
 //# sourceMappingURL=node-input-loader.d.ts.map

package/dist/scaffolding/adapters/node/node-input-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-input-loader.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-input-loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,wBAAwB,EAExB,cAAc,EACd,uBAAuB,EAGxB,MAAM,yBAAyB,CAAC;AAYjC,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AA+HxD,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC,GAAG,OAAO,CAAC,wBAAwB,CAAC,CA0BpC;AAoDD,wBAAsB,sCAAsC,CAAC,OAAO,EAAE;IACpE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAEpC;AAED,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAYzB;AAED,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,SAAS,uBAAuB,EAAE,GAC1C,OAAO,CAAC,OAAO,CAAC,CAwBlB"}
+{"version":3,"file":"node-input-loader.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-input-loader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EAExB,cAAc,EACd,uBAAuB,EAGxB,MAAM,yBAAyB,CAAC;AA2DjC,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC,GAAG,OAAO,CAAC,wBAAwB,CAAC,CA0BpC;AAoDD,wBAAsB,sCAAsC,CAAC,OAAO,EAAE;IACpE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAEpC;AAED,8DAA8D;AAC9D,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAYzB;AAED,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,SAAS,uBAAuB,EAAE,GAC1C,OAAO,CAAC,OAAO,CAAC,CAwBlB"}

package/dist/scaffolding/adapters/node/node-input-loader.js

@@ -1,13 +1,8 @@
-import { lstat, readFile, realpath } from "node:fs/promises";
-import { isAbsolute, relative, resolve, sep } from "node:path";
-import { sha256Bytes } from "../../kernel/canonical-json.js";
-import { assertScaffoldPlanDigest } from "../../kernel/plan-validation.js";
-import { ScaffoldError } from "../../scaffold-error.js";
-import { pathTraversesSymbolicLink } from "../../../filesystem-path-safety.js";
+import { assertScaffoldPlanDigest } from "../../kernel/rendering-plan-validation.js";
 import { assertSchema } from "../../../schema-catalog.js";
-import { assertRepositoryRelativePath, parseStrictYamlSource } from "../../../strict-yaml.js";
-const MAX_INPUT_BYTES = 1024 * 1024;
-export const MAX_SCAFFOLD_PLAN_BYTES = 32 * 1024 * 1024;
+import { parseStrictYamlSource } from "../../../strict-yaml.js";
+import { assertion, readContainedRepositoryFile } from "./node-repository-file.js";
+import { MAX_SCAFFOLD_PLAN_BYTES } from "./node-scaffold-limits.js";
 function hasErrorCode(error, code) {
     const visited = new Set();
     let candidate = error;
@@ -21,52 +16,6 @@ function hasErrorCode(error, code) {
     }
     return false;
 }
-function isContained(root, candidate) {
-    const relation = relative(root, candidate);
-    return (relation === "" ||
-        (!relation.startsWith(`..${sep}`) && relation !== ".." && !isAbsolute(relation)));
-}
-async function readContainedRepositoryFile(consumerRoot, repositoryPath, phase, maxBytes = MAX_INPUT_BYTES) {
-    try {
-        assertRepositoryRelativePath(repositoryPath, phase);
-        const canonicalRoot = await realpath(consumerRoot);
-        const candidate = resolve(canonicalRoot, repositoryPath);
-        if (await pathTraversesSymbolicLink(canonicalRoot, candidate)) {
-            throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Scaffolding input cannot traverse a symbolic link: ${repositoryPath}.`);
-        }
-        const canonicalCandidate = await realpath(candidate);
-        if (!isContained(canonicalRoot, canonicalCandidate)) {
-            throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Scaffolding input escapes the consumer repository: ${repositoryPath}.`);
-        }
-        const metadata = await lstat(canonicalCandidate);
-        if (metadata.isSymbolicLink() ||
-            !metadata.isFile() ||
-            metadata.size > maxBytes) {
-            throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Scaffolding input must be a regular file no larger than ${maxBytes} bytes: ${repositoryPath}.`);
-        }
-        const bytes = await readFile(canonicalCandidate);
-        return {
-            path: repositoryPath,
-            bytes,
-            source: bytes.toString("utf8")
-        };
-    }
-    catch (error) {
-        if (error instanceof ScaffoldError) {
-            throw error;
-        }
-        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Cannot read scaffolding input: ${repositoryPath}.`, [], { cause: error });
-    }
-}
-function assertion(file) {
-    const canonicalBytes = Buffer.from(file.source.replace(/\r\n?/gu, "\n"), "utf8");
-    return Object.freeze({
-        path: file.path,
-        state: "file",
-        digest: sha256Bytes(canonicalBytes),
-        size: canonicalBytes.byteLength
-    });
-}
 function mapCatalog(value) {
     const raw = value;
     return Object.freeze({
@@ -126,10 +75,11 @@ async function loadScaffoldCompilationInputFromIntentInternal(options) {
 export async function loadScaffoldCompilationInputFromIntent(options) {
     return loadScaffoldCompilationInputFromIntentInternal(options);
 }
+/** Reads a released 0.5 Plan for regression evidence only. */
 export async function readScaffoldPlanFile(consumerRoot, planPath) {
     const planFile = await readContainedRepositoryFile(consumerRoot, planPath, "scaffold-plan", MAX_SCAFFOLD_PLAN_BYTES);
     const value = parseStrictYamlSource(planFile.source, "scaffold-plan");
-    await assertSchema("scaffold-plan/v1", value, "scaffold-plan");
+    await assertSchema("scaffold-plan/v1", value, "rendering-regression-plan");
     const plan = value;
     assertScaffoldPlanDigest(plan);
     return plan;

package/dist/scaffolding/adapters/node/node-input-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-input-loader.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-input-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAU/D,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAQxD,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAS,CAAC;IACjC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,OAAO,SAAS,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,IACE,MAAM,IAAI,SAAS;YAClB,SAAmC,CAAC,IAAI,KAAK,IAAI,EAClD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,SAAiB;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,YAAoB,EACpB,cAAsB,EACtB,KAAa,EACb,QAAQ,GAAG,eAAe;IAE1B,IAAI,CAAC;QACH,4BAA4B,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACzD,IAAI,MAAM,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,sDAAsD,cAAc,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,sDAAsD,cAAc,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACjD,IACE,QAAQ,CAAC,cAAc,EAAE;YACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;YAClB,QAAQ,CAAC,IAAI,GAAG,QAAQ,EACxB,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,2DAA2D,QAAQ,WAAW,cAAc,GAAG,CAChG,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,KAAK;YACL,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,kCAAkC,cAAc,GAAG,EACnD,EAAE,EACF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAA0B;IAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAChC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,EACpC,MAAM,CACP,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,MAAe;QACtB,MAAM,EAAE,WAAW,CAAC,cAAc,CAAC;QACnC,IAAI,EAAE,cAAc,CAAC,UAAU;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,GAAG,GAAG,KASX,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,MAAM,CAAC,MAAM,CACrB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACzB,MAAM,CAAC,MAAM,CAAC;YACZ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,YAAY;YAC/B,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;SAC7C,CAAC,CACH,CACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAKlD;IACC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,2BAA2B,CACzB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,oBAAoB,CACrB;QACD,2BAA2B,CACzB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,iBAAiB,CAClB;KACF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,qBAAqB,CACvC,UAAU,CAAC,MAAM,EACjB,oBAAoB,CACrB,CAAC;IACF,MAAM,WAAW,GAAG,qBAAqB,CAAC,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAChF,OAAO,8CAA8C,CAAC;QACpD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,WAAW;QACnB,UAAU;QACV,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,8CAA8C,CAAC,OAO7D;IACC,MAAM,UAAU,GACd,OAAO,CAAC,UAAU;QAClB,CAAC,MAAM,2BAA2B,CAChC,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,oBAAoB,CACrB,CAAC,CAAC;IACL,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,qBAAqB,CAAC,UAAU,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACjE,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,YAAY,CAAC,uBAAuB,EAAE,WAAW,EAAE,oBAAoB,CAAC;QACxE,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,WAAkC,CAAC;IAClD,MAAM,WAAW,GAAG,MAAM,2BAA2B,CACnD,OAAO,CAAC,YAAY,EACpB,MAAM,CAAC,iBAAiB,EACxB,yBAAyB,CAC1B,CAAC;IACF,MAAM,YAAY,GAAG,qBAAqB,CACxC,WAAW,CAAC,MAAM,EAClB,yBAAyB,CAC1B,CAAC;IACF,MAAM,YAAY,CAChB,4BAA4B,EAC5B,YAAY,EACZ,yBAAyB,CAC1B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,MAA0B;QAC1C,OAAO,EAAE,UAAU,CAAC,YAAY,CAAC;QACjC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;YAC9B,SAAS,CAAC,UAAU,CAAC;YACrB,SAAS,CAAC,WAAW,CAAC;SACvB,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,OAK5D;IACC,OAAO,8CAA8C,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAChD,YAAY,EACZ,QAAQ,EACR,eAAe,EACf,uBAAuB,CACxB,CAAC;IACF,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACtE,MAAM,YAAY,CAAC,kBAAkB,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,KAAuB,CAAC;IACrC,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,YAAoB,EACpB,OAA2C;IAE3C,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,IAAI,OAA6B,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,2BAA2B,CACzC,YAAY,EACZ,QAAQ,CAAC,IAAI,EACb,yBAAyB,CAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,IACE,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAC/B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EACnC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"node-input-loader.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-input-loader.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EACL,qBAAqB,EACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,SAAS,EACT,2BAA2B,EAE5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAS,CAAC;IACjC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,OAAO,SAAS,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,IACE,MAAM,IAAI,SAAS;YAClB,SAAmC,CAAC,IAAI,KAAK,IAAI,EAClD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAGD,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,GAAG,GAAG,KASX,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,MAAM,CAAC,MAAM,CACrB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACzB,MAAM,CAAC,MAAM,CAAC;YACZ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,YAAY;YAC/B,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;SAC7C,CAAC,CACH,CACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAKlD;IACC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,2BAA2B,CACzB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,oBAAoB,CACrB;QACD,2BAA2B,CACzB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,iBAAiB,CAClB;KACF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,qBAAqB,CACvC,UAAU,CAAC,MAAM,EACjB,oBAAoB,CACrB,CAAC;IACF,MAAM,WAAW,GAAG,qBAAqB,CAAC,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAChF,OAAO,8CAA8C,CAAC;QACpD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,WAAW;QACnB,UAAU;QACV,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,8CAA8C,CAAC,OAO7D;IACC,MAAM,UAAU,GACd,OAAO,CAAC,UAAU;QAClB,CAAC,MAAM,2BAA2B,CAChC,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,oBAAoB,CACrB,CAAC,CAAC;IACL,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,qBAAqB,CAAC,UAAU,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACjE,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,YAAY,CAAC,uBAAuB,EAAE,WAAW,EAAE,oBAAoB,CAAC;QACxE,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,WAAkC,CAAC;IAClD,MAAM,WAAW,GAAG,MAAM,2BAA2B,CACnD,OAAO,CAAC,YAAY,EACpB,MAAM,CAAC,iBAAiB,EACxB,yBAAyB,CAC1B,CAAC;IACF,MAAM,YAAY,GAAG,qBAAqB,CACxC,WAAW,CAAC,MAAM,EAClB,yBAAyB,CAC1B,CAAC;IACF,MAAM,YAAY,CAChB,4BAA4B,EAC5B,YAAY,EACZ,yBAAyB,CAC1B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,MAA0B;QAC1C,OAAO,EAAE,UAAU,CAAC,YAAY,CAAC;QACjC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;YAC9B,SAAS,CAAC,UAAU,CAAC;YACrB,SAAS,CAAC,WAAW,CAAC;SACvB,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,OAK5D;IACC,OAAO,8CAA8C,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAChD,YAAY,EACZ,QAAQ,EACR,eAAe,EACf,uBAAuB,CACxB,CAAC;IACF,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACtE,MAAM,YAAY,CAAC,kBAAkB,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,KAAuB,CAAC;IACrC,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,YAAoB,EACpB,OAA2C;IAE3C,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,IAAI,OAA6B,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,2BAA2B,CACzC,YAAY,EACZ,QAAQ,CAAC,IAAI,EACb,yBAAyB,CAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,IACE,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAC/B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EACnC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/scaffolding/adapters/node/node-owner-document-resolver.d.ts

@@ -0,0 +1,17 @@
+import type { Sha256Digest } from "../../contract/types.js";
+import { type LoadedRepositoryFile } from "./node-repository-file.js";
+interface OwnerDocumentMetadata {
+    readonly id: string;
+    readonly status: string;
+}
+export interface ResolvedOwnerDocument extends OwnerDocumentMetadata {
+    readonly file: LoadedRepositoryFile;
+    readonly indexDigest: Sha256Digest;
+}
+export declare function resolveOwnerDocument(options: {
+    readonly consumerRoot: string;
+    readonly documentRoots: readonly string[];
+    readonly ownerDocumentId: string;
+}): Promise<ResolvedOwnerDocument>;
+export {};
+//# sourceMappingURL=node-owner-document-resolver.d.ts.map

package/dist/scaffolding/adapters/node/node-owner-document-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-owner-document-resolver.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-owner-document-resolver.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAQ5D,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,2BAA2B,CAAC;AAUnC,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAOD,MAAM,WAAW,qBAAsB,SAAQ,qBAAqB;IAClE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;CACpC;AAqMD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4CjC"}

package/dist/scaffolding/adapters/node/node-owner-document-resolver.js

@@ -0,0 +1,161 @@
+import { lstat, opendir, realpath } from "node:fs/promises";
+import { isAbsolute, relative, resolve, sep } from "node:path";
+import { sha256Json } from "../../kernel/canonical-json.js";
+import { ScaffoldError } from "../../scaffold-error.js";
+import { pathTraversesSymbolicLink } from "../../../filesystem-path-safety.js";
+import { assertRepositoryRelativePath, parseStrictYamlSource } from "../../../strict-yaml.js";
+import { readContainedRepositoryFile } from "./node-repository-file.js";
+import { ScaffoldAuthorityStaleError } from "./node-authority-error.js";
+const MAX_AUTHORITY_DOCUMENTS = 4096;
+const MAX_AUTHORITY_DOCUMENT_ENTRIES = 16_384;
+const MAX_AUTHORITY_DOCUMENT_DEPTH = 32;
+const MAX_AUTHORITY_METADATA_LENGTH = 160;
+const OWNER_DOCUMENT_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._/-]*$/u;
+const OWNER_DOCUMENT_STATUS_PATTERN = /^[a-z0-9][a-z0-9._/-]*$/u;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isContained(root, candidate) {
+    const relation = relative(root, candidate);
+    return (relation === "" ||
+        (!relation.startsWith(`..${sep}`) &&
+            relation !== ".." &&
+            !isAbsolute(relation)));
+}
+function compareStrings(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function parseOwnerFrontmatter(source) {
+    const normalized = source.replace(/\r\n?/gu, "\n");
+    if (!normalized.startsWith("---\n")) {
+        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", "Authority documents must start with strict YAML frontmatter.");
+    }
+    const end = normalized.indexOf("\n---\n", 4);
+    if (end === -1) {
+        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", "Authority document YAML frontmatter must have a closing delimiter.");
+    }
+    const parsed = parseStrictYamlSource(normalized.slice(4, end), "scaffold-owner-document");
+    if (!isRecord(parsed) ||
+        typeof parsed.id !== "string" ||
+        typeof parsed.status !== "string" ||
+        parsed.id.length > MAX_AUTHORITY_METADATA_LENGTH ||
+        parsed.status.length > MAX_AUTHORITY_METADATA_LENGTH ||
+        !OWNER_DOCUMENT_ID_PATTERN.test(parsed.id) ||
+        !OWNER_DOCUMENT_STATUS_PATTERN.test(parsed.status)) {
+        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", "Authority document frontmatter must contain normalized id and status strings.");
+    }
+    return Object.freeze({ id: parsed.id, status: parsed.status });
+}
+async function listMarkdownFilesInRoot(options) {
+    assertRepositoryRelativePath(options.documentRoot, "scaffold-owner-document-root");
+    const absoluteRoot = resolve(options.canonicalConsumerRoot, options.documentRoot);
+    if ((await pathTraversesSymbolicLink(options.canonicalConsumerRoot, absoluteRoot)) ||
+        !isContained(options.canonicalConsumerRoot, await realpath(absoluteRoot)) ||
+        !(await lstat(absoluteRoot)).isDirectory()) {
+        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Authority document root must be a contained regular directory: ${options.documentRoot}.`);
+    }
+    const paths = [];
+    const walk = async (absoluteDirectory, repositoryDirectory, depth) => {
+        if (depth > MAX_AUTHORITY_DOCUMENT_DEPTH) {
+            throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Authority document roots cannot exceed ${MAX_AUTHORITY_DOCUMENT_DEPTH} directory levels.`);
+        }
+        const entries = [];
+        const directory = await opendir(absoluteDirectory);
+        for await (const entry of directory) {
+            options.budget.entriesVisited += 1;
+            if (options.budget.entriesVisited > MAX_AUTHORITY_DOCUMENT_ENTRIES) {
+                throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Authority document roots cannot contain more than ${MAX_AUTHORITY_DOCUMENT_ENTRIES} entries.`);
+            }
+            entries.push(entry);
+        }
+        entries.sort((left, right) => compareStrings(left.name, right.name));
+        for (const entry of entries) {
+            const repositoryPath = `${repositoryDirectory}/${entry.name}`;
+            const absolutePath = resolve(absoluteDirectory, entry.name);
+            if (entry.isSymbolicLink()) {
+                throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Authority document roots cannot contain symbolic links: ${repositoryPath}.`);
+            }
+            if (entry.isDirectory()) {
+                await walk(absolutePath, repositoryPath, depth + 1);
+            }
+            else if (entry.isFile() && entry.name.endsWith(".md")) {
+                options.budget.documentsVisited += 1;
+                if (options.budget.documentsVisited > MAX_AUTHORITY_DOCUMENTS) {
+                    throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Authority document roots cannot contain more than ${MAX_AUTHORITY_DOCUMENTS} Markdown files.`);
+                }
+                paths.push(repositoryPath);
+            }
+            else if (!entry.isFile()) {
+                throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", `Authority document roots may contain only regular files and directories: ${repositoryPath}.`);
+            }
+        }
+    };
+    await walk(absoluteRoot, options.documentRoot, 0);
+    return Object.freeze(paths);
+}
+async function listAuthorityDocumentPaths(consumerRoot, documentRoots) {
+    try {
+        const normalizedRoots = documentRoots
+            .map((documentRoot) => documentRoot.toLowerCase())
+            .toSorted(compareStrings);
+        for (const [index, root] of normalizedRoots.entries()) {
+            for (const candidate of normalizedRoots.slice(index + 1)) {
+                if (root === candidate ||
+                    root.startsWith(`${candidate}/`) ||
+                    candidate.startsWith(`${root}/`)) {
+                    throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", "Authority document roots cannot overlap or differ only by case.");
+                }
+            }
+        }
+        const canonicalConsumerRoot = await realpath(consumerRoot);
+        const budget = { entriesVisited: 0, documentsVisited: 0 };
+        const paths = [];
+        for (const documentRoot of documentRoots.toSorted(compareStrings)) {
+            paths.push(...(await listMarkdownFilesInRoot({
+                canonicalConsumerRoot,
+                documentRoot,
+                budget
+            })));
+        }
+        paths.sort(compareStrings);
+        const exact = new Set(paths);
+        const caseFolded = new Set(paths.map((path) => path.toLowerCase()));
+        if (exact.size !== paths.length || caseFolded.size !== paths.length) {
+            throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", "Authority document roots overlap or contain case-folding path collisions.");
+        }
+        return Object.freeze(paths);
+    }
+    catch (error) {
+        if (error instanceof ScaffoldError) {
+            throw error;
+        }
+        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", "Cannot index configured authority document roots.", [], { cause: error });
+    }
+}
+export async function resolveOwnerDocument(options) {
+    if (!OWNER_DOCUMENT_ID_PATTERN.test(options.ownerDocumentId)) {
+        throw new ScaffoldError("SCAFFOLD_INPUT_INVALID", "Owner document ID must be a normalized authority identifier.");
+    }
+    const paths = await listAuthorityDocumentPaths(options.consumerRoot, options.documentRoots);
+    const index = [];
+    const matches = [];
+    for (const path of paths) {
+        const file = await readContainedRepositoryFile(options.consumerRoot, path, "scaffold-owner-document");
+        const metadata = parseOwnerFrontmatter(file.source);
+        index.push({ path: file.path, id: metadata.id, status: metadata.status });
+        if (metadata.id === options.ownerDocumentId) {
+            matches.push({ file, metadata });
+        }
+    }
+    if (matches.length !== 1) {
+        throw new ScaffoldAuthorityStaleError(`Owner document must resolve exactly once from configured roots: ${options.ownerDocumentId}.`);
+    }
+    const selected = matches[0];
+    const indexDigest = sha256Json(index);
+    return Object.freeze({
+        ...selected.metadata,
+        file: selected.file,
+        indexDigest
+    });
+}
+//# sourceMappingURL=node-owner-document-resolver.js.map

package/dist/scaffolding/adapters/node/node-owner-document-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-owner-document-resolver.js","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-owner-document-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAG/D,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,2BAA2B,EAE5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAExE,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAC9C,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,yBAAyB,GAAG,gCAAgC,CAAC;AACnE,MAAM,6BAA6B,GAAG,0BAA0B,CAAC;AAiBjE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,SAAiB;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/B,QAAQ,KAAK,IAAI;YACjB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAClC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EACxB,yBAAyB,CAC1B,CAAC;IACF,IACE,CAAC,QAAQ,CAAC,MAAM,CAAC;QACjB,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;QAC7B,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,6BAA6B;QAChD,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,6BAA6B;QACpD,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAClD,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,OAItC;IACC,4BAA4B,CAC1B,OAAO,CAAC,YAAY,EACpB,8BAA8B,CAC/B,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAC1B,OAAO,CAAC,qBAAqB,EAC7B,OAAO,CAAC,YAAY,CACrB,CAAC;IACF,IACE,CAAC,MAAM,yBAAyB,CAC9B,OAAO,CAAC,qBAAqB,EAC7B,YAAY,CACb,CAAC;QACF,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QACzE,CAAC,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,EAC1C,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,kEAAkE,OAAO,CAAC,YAAY,GAAG,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,EAChB,iBAAyB,EACzB,mBAA2B,EAC3B,KAAa,EACE,EAAE;QACjB,IAAI,KAAK,GAAG,4BAA4B,EAAE,CAAC;YACzC,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,0CAA0C,4BAA4B,oBAAoB,CAC3F,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,GAAG,8BAA8B,EAAE,CAAC;gBACnE,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,qDAAqD,8BAA8B,WAAW,CAC/F,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,cAAc,GAAG,GAAG,mBAAmB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,2DAA2D,cAAc,GAAG,CAC7E,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;gBACrC,IAAI,OAAO,CAAC,MAAM,CAAC,gBAAgB,GAAG,uBAAuB,EAAE,CAAC;oBAC9D,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,qDAAqD,uBAAuB,kBAAkB,CAC/F,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,4EAA4E,cAAc,GAAG,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,YAAoB,EACpB,aAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,aAAa;aAClC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;aACjD,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzD,IACE,IAAI,KAAK,SAAS;oBAClB,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC;oBAChC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,EAChC,CAAC;oBACD,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,iEAAiE,CAClE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,qBAAqB,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,YAAY,IAAI,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAClE,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,MAAM,uBAAuB,CAAC;gBAChC,qBAAqB;gBACrB,YAAY;gBACZ,MAAM;aACP,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACpE,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,mDAAmD,EACnD,EAAE,EACF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAI1C;IACC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,aAAa,CACrB,wBAAwB,EACxB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAC5C,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,aAAa,CACtB,CAAC;IACF,MAAM,KAAK,GAIL,EAAE,CAAC;IACT,MAAM,OAAO,GAGP,EAAE,CAAC;IACT,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAC5C,OAAO,CAAC,YAAY,EACpB,IAAI,EACJ,yBAAyB,CAC1B,CAAC;QACF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,EAAE,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,2BAA2B,CACnC,mEAAmE,OAAO,CAAC,eAAe,GAAG,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAA6B,CAAC;IACxD,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,QAAQ,CAAC,QAAQ;QACpB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/scaffolding/adapters/node/node-plan-authority.d.ts

@@ -1,3 +1,15 @@
-import type { ScaffoldPlanV1 } from "../../contract/types.js";
-export declare function assertPlanMatchesConsumerAuthority(consumerRoot: string, plan: ScaffoldPlanV1): Promise<void>;
+import type { AuthorityScaffoldPlan } from "../../contract/types.js";
+import { type ScaffoldAuthorityInputFaultInjector } from "./node-authority-input-loader.js";
+export type ScaffoldAuthorityAssessment = {
+    readonly state: "current";
+} | {
+    readonly state: "stale";
+} | {
+    readonly state: "unverifiable";
+};
+/**
+ * A source-bound authority change is stale only when the closed compiler can prove it.
+ * Input, parser, and filesystem failures are deliberately kept unverifiable.
+ */
+export declare function assessScaffoldPlanAuthority(consumerRoot: string, plan: AuthorityScaffoldPlan, faultInjector?: ScaffoldAuthorityInputFaultInjector): Promise<ScaffoldAuthorityAssessment>;
 //# sourceMappingURL=node-plan-authority.d.ts.map

package/dist/scaffolding/adapters/node/node-plan-authority.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-plan-authority.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-plan-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAO9D,wBAAsB,kCAAkC,CACtD,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,IAAI,CAAC,CAcf"}
+{"version":3,"file":"node-plan-authority.d.ts","sourceRoot":"","sources":["../../../../src/scaffolding/adapters/node/node-plan-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAKrE,OAAO,EAEL,KAAK,mCAAmC,EACzC,MAAM,kCAAkC,CAAC;AAE1C,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAAC;AA2BvC;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,qBAAqB,EAC3B,aAAa,CAAC,EAAE,mCAAmC,GAClD,OAAO,CAAC,2BAA2B,CAAC,CAgBtC"}