@agent-teams/engineering-foundation 1.2.0 → 1.3.0

package/dist/capabilities/public-api-compatibility/adapters/outbound/filesystem/stage-public-api-audit.js

@@ -0,0 +1,169 @@
+import { chmod, lstat, mkdir, readFile, writeFile } from "node:fs/promises";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { auditDigest, auditInputPath, AUDIT_MAX_BYTES } from "./public-api-audit-inputs.js";
+function containedPath(root, directory, value, allowRoot = false) {
+    if (isAbsolute(value) || value.includes("\\") || /^[a-z][a-z0-9+.-]*:/iu.test(value)) {
+        throw new Error(`Unsupported SDK input path: ${value}.`);
+    }
+    const path = resolve(directory, value);
+    const local = relative(root, path);
+    if ((!allowRoot && local === "") || local === ".." || local.startsWith(`..${sep}`)) {
+        throw new Error(`SDK input path escapes verified evidence: ${value}.`);
+    }
+    return path;
+}
+function strings(value) {
+    if (typeof value === "string") {
+        return [value];
+    }
+    if (Array.isArray(value)) {
+        return value.flatMap(strings);
+    }
+    if (typeof value === "object" && value !== null) {
+        return Object.values(value).flatMap(strings);
+    }
+    return [];
+}
+/** Over-approximate every metadata path the pinned SDK can select from a manifest. */
+function metadataPaths(root, path, bytes) {
+    const manifest = JSON.parse(bytes.toString("utf8"));
+    const directory = dirname(path);
+    const paths = [join(directory, "tsdoc-metadata.json")];
+    if (manifest["tsdocMetadata"] !== undefined) {
+        if (typeof manifest["tsdocMetadata"] !== "string") {
+            throw new Error("Unsupported tsdocMetadata path.");
+        }
+        paths.push(containedPath(root, directory, manifest["tsdocMetadata"]));
+    }
+    for (const field of ["exports", "typesVersions", "types", "typings", "main"]) {
+        for (const value of strings(manifest[field])) {
+            paths.push(join(dirname(containedPath(root, directory, value)), "tsdoc-metadata.json"));
+        }
+    }
+    return paths;
+}
+function mappedSources(root, path, bytes) {
+    const map = JSON.parse(bytes.toString("utf8"));
+    if (map["version"] !== 3 || map["sections"] !== undefined || !Array.isArray(map["sources"]) ||
+        (map["sourceRoot"] !== undefined && typeof map["sourceRoot"] !== "string")) {
+        throw new Error("Unsupported declaration source-map structure.");
+    }
+    const sourceRoot = map["sourceRoot"] ?? "";
+    return map["sources"].map((source) => {
+        if (typeof source !== "string") {
+            throw new Error("Unsupported mapped source path.");
+        }
+        // Validate both components before joining: join would hide an absolute source.
+        const base = sourceRoot === "" ? dirname(path) : containedPath(root, dirname(path), sourceRoot, true);
+        return containedPath(root, base, source);
+    });
+}
+async function present(root, path) {
+    // Observe absence only after rejecting symlinked ancestors, including dangling links.
+    const parts = relative(root, path).split(sep);
+    let cursor = root;
+    for (const part of parts) {
+        cursor = join(cursor, part);
+        try {
+            const stat = await lstat(cursor);
+            if (stat.isSymbolicLink()) {
+                throw new Error(`Audit symlink unsupported: ${path}.`);
+            }
+        }
+        catch (error) {
+            if (error.code === "ENOENT") {
+                return false;
+            }
+            throw error;
+        }
+    }
+    return true;
+}
+export async function stagePublicApiAudit(root, allowed, stageRoot) {
+    // Claim a fresh namespace before doing any I/O on its behalf. In particular,
+    // a second producer cannot reuse a published stage (also enforced on Windows).
+    allowed = new Map(allowed);
+    await mkdir(stageRoot, { mode: 0o700 });
+    const bytes = new Map();
+    const observed = new Map();
+    let byteCount = 0;
+    for (const [path, digest] of allowed) {
+        await auditInputPath(root, relative(root, path).split(sep).join("/"));
+        const content = await readFile(path);
+        byteCount += content.length;
+        if (byteCount > AUDIT_MAX_BYTES) {
+            throw new Error("Audit staging byte budget exhausted.");
+        }
+        if (auditDigest(content) !== digest) {
+            throw new Error("Audit staging input digest mismatch.");
+        }
+        bytes.set(path, content);
+    }
+    const dependencies = new Set();
+    for (const [path, content] of bytes) {
+        if (/\.d\.[cm]?ts$/u.test(path)) {
+            dependencies.add(`${path}.map`);
+        }
+        if (basename(path) === "package.json") {
+            for (const dependency of metadataPaths(root, path, content)) {
+                dependencies.add(dependency);
+            }
+        }
+        if (/\.d\.[cm]?ts\.map$/u.test(path)) {
+            for (const dependency of mappedSources(root, path, content)) {
+                if (!allowed.has(dependency)) {
+                    throw new Error(`Undeclared mapped source: ${dependency}.`);
+                }
+                dependencies.add(dependency);
+            }
+        }
+    }
+    for (const path of dependencies) {
+        const exists = await present(root, path);
+        observed.set(path, exists);
+        if (exists && !allowed.has(path)) {
+            throw new Error(`Undeclared SDK input: ${path}.`);
+        }
+    }
+    const files = new Map();
+    const directories = new Set([stageRoot]);
+    for (const [path, content] of bytes) {
+        const destination = join(stageRoot, relative(root, path));
+        await mkdir(dirname(destination), { recursive: true });
+        let directory = dirname(destination);
+        while (directory !== stageRoot) {
+            directories.add(directory);
+            directory = dirname(directory);
+        }
+        await writeFile(destination, content, { flag: "wx", mode: 0o400 });
+        files.set(destination, auditDigest(content));
+    }
+    for (const directory of directories) {
+        await chmod(directory, 0o500);
+    }
+    let released = false;
+    return { root: stageRoot, files,
+        release: async () => {
+            released = true;
+            for (const directory of directories) {
+                await chmod(directory, 0o700);
+            }
+        },
+        revalidate: async () => {
+            if (released) {
+                throw new Error("Audit stage has been released.");
+            }
+            for (const [path, expected] of observed) {
+                if (await present(root, path) !== expected || await present(stageRoot, join(stageRoot, relative(root, path))) !== expected) {
+                    throw new Error("SDK input presence changed during observation.");
+                }
+            }
+            for (const [path, digest] of allowed) {
+                await auditInputPath(root, relative(root, path).split(sep).join("/"));
+                if (auditDigest(await readFile(path)) !== digest) {
+                    throw new Error("Audit input changed during observation.");
+                }
+            }
+        } };
+}
+//# sourceMappingURL=stage-public-api-audit.js.map

package/dist/capabilities/public-api-compatibility/adapters/outbound/filesystem/stage-public-api-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stage-public-api-audit.js","sourceRoot":"","sources":["../../../../../../src/capabilities/public-api-compatibility/adapters/outbound/filesystem/stage-public-api-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAa5F,SAAS,aAAa,CAAC,IAAY,EAAE,SAAiB,EAAE,KAAa,EAAE,SAAS,GAAG,KAAK;IACtF,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAAC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAClG,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,sFAAsF;AACtF,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;IAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,OAAO,QAAQ,CAAC,eAAe,CAAC,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAAC,CAAC;QAC1G,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7E,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;IAC1E,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvF,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAe,EAAE,EAAE;QAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAAC,CAAC;QACvF,+EAA+E;QAC/E,MAAM,IAAI,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACtG,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY;IAC/C,sFAAsF;IACtF,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,GAAG,CAAC,CAAC;YAAC,CAAC;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YACzE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAoC,EAAE,SAAiB;IAC7G,6EAA6E;IAC7E,+EAA+E;IAC/E,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;QAC5B,IAAI,SAAS,GAAG,eAAe,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAAC,CAAC;QAC7F,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAAC,CAAC;QACjG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACpC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC;QAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;YACtC,KAAK,MAAM,UAAU,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;QAChG,CAAC;QACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,KAAK,MAAM,UAAU,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,UAAU,GAAG,CAAC,CAAC;gBAAC,CAAC;gBAC9F,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3B,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,GAAG,CAAC,CAAC;QAAC,CAAC;IAC1F,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QACrC,OAAO,SAAS,KAAK,SAAS,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAC/F,MAAM,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IACvE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;QAC7B,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;QACzE,CAAC;QACD,UAAU,EAAE,KAAK,IAAI,EAAE;YACvB,IAAI,QAAQ,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAAC,CAAC;YACpE,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACxC,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,QAAQ,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC3H,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACrC,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtE,IAAI,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAAC,CAAC;YACnH,CAAC;QACH,CAAC,EAAE,CAAC;AACN,CAAC"}

package/dist/capabilities/public-api-compatibility/api.d.ts

@@ -0,0 +1,3 @@
+export type { PublicApiAuditRequest } from "./contract/public-api-audit.js";
+export type { PublicApiAuditReport } from "./application/model/public-api-audit-report.js";
+//# sourceMappingURL=api.d.ts.map

package/dist/capabilities/public-api-compatibility/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/capabilities/public-api-compatibility/api.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,YAAY,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC"}

package/dist/capabilities/public-api-compatibility/api.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=api.js.map

package/dist/capabilities/public-api-compatibility/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/capabilities/public-api-compatibility/api.ts"],"names":[],"mappings":""}

package/dist/capabilities/public-api-compatibility/application/model/public-api-audit-report.d.ts

@@ -0,0 +1,36 @@
+import type { PublicApiAuditRequest } from "../../contract/public-api-audit.js";
+import type { AuditObservation } from "./public-api-observation.js";
+import type { AuditEligibility } from "../policies/public-api-audit-eligibility.js";
+import type { AuditGraphProjection } from "../policies/project-public-api-observation.js";
+import type { PublicApiChangeSet } from "./public-api.js";
+export interface AuditComparison {
+    readonly pair: "A-B" | "B-C" | "A-C";
+    readonly packageName: string;
+    readonly scope: "historical-stored-surface" | "declaration-graph";
+    readonly eligibility: AuditEligibility;
+    readonly limitations: readonly string[];
+    readonly findings?: PublicApiChangeSet;
+    readonly beforeProjection?: AuditGraphProjection;
+    readonly afterProjection?: AuditGraphProjection;
+}
+export interface PublicApiAuditReport {
+    readonly schemaVersion: 1;
+    readonly operation: "public-api-audit";
+    readonly releaseEligible: false;
+    readonly foundationVersion: string;
+    readonly requestDigest: string;
+    /** Content evidence only; caller namespace immutability and atomic path containment are not verified. */
+    readonly custody: {
+        readonly supplied: PublicApiAuditRequest["subjects"];
+        readonly archiveProvenanceVerified: false;
+        readonly archiveDigestVerified: false;
+        readonly archiveInventoryCompletenessVerified: false;
+        readonly buildExecutionVerified: false;
+    };
+    readonly observations: readonly AuditObservation[];
+    readonly comparisons: readonly AuditComparison[];
+    readonly evidenceComplete: boolean;
+    readonly errors: readonly string[];
+    readonly exitCode: 0 | 2;
+}
+//# sourceMappingURL=public-api-audit-report.d.ts.map

package/dist/capabilities/public-api-compatibility/application/model/public-api-audit-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-api-audit-report.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/public-api-compatibility/application/model/public-api-audit-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,2BAA2B,GAAG,mBAAmB,CAAC;IAClE,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACjD,QAAQ,CAAC,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACjD;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,yGAAyG;IACzG,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAAC,QAAQ,CAAC,yBAAyB,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,oCAAoC,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,sBAAsB,EAAE,KAAK,CAAA;KAAE,CAAC;IAC3P,QAAQ,CAAC,YAAY,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IACjD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;CAC1B"}

package/dist/capabilities/public-api-compatibility/application/model/public-api-audit-report.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=public-api-audit-report.js.map

package/dist/capabilities/public-api-compatibility/application/model/public-api-audit-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-api-audit-report.js","sourceRoot":"","sources":["../../../../../src/capabilities/public-api-compatibility/application/model/public-api-audit-report.ts"],"names":[],"mappings":""}

package/dist/capabilities/public-api-compatibility/application/model/public-api-observation.d.ts

@@ -0,0 +1,73 @@
+import type { AuditFileIdentity } from "../../contract/public-api-audit.js";
+export type { AuditFileIdentity } from "../../contract/public-api-audit.js";
+import type { PublicApiSnapshot } from "./public-api.js";
+export declare const PUBLIC_API_AUDIT_PROFILE = "foundation:public-api-audit:declaration-graph:1";
+export type AuditSubject = "A" | "C";
+export interface AuditIdentity {
+    readonly subject: AuditSubject;
+    readonly packageName: string;
+    readonly exportPath: string;
+    readonly canonicalReference: string;
+}
+export interface AuditDiagnostic {
+    readonly source: "compiler" | "extractor" | "input";
+    readonly id: string;
+    readonly severity: string;
+    readonly text: string;
+    readonly file?: string;
+    readonly line?: number;
+}
+export interface AuditReference {
+    readonly text: string;
+    readonly canonicalReference: string | null;
+    readonly resolution: "local" | "same-subject-dependency" | "verified-external-library" | "unresolved" | "ambiguous";
+    readonly target?: AuditIdentity;
+    readonly library?: {
+        readonly symbol: string;
+        readonly declarations: readonly string[];
+    };
+}
+export interface AuditDeclaration {
+    readonly displayName: string;
+    readonly identity: AuditIdentity;
+    readonly kind: string;
+    readonly parentReference: string;
+    readonly parentKind: string;
+    readonly excerpt: string;
+    /** Relative to the modeled container; null means the mixin does not apply. */
+    readonly isExported: boolean | null;
+    readonly public: boolean;
+    readonly references: readonly AuditReference[];
+}
+export interface AuditObservation {
+    readonly subject: AuditSubject;
+    readonly packageName: string;
+    readonly packageVersion: string;
+    readonly exportPath: string | null;
+    readonly modelExpected: boolean;
+    readonly toolchain: string;
+    readonly normalizationProfile: typeof PUBLIC_API_AUDIT_PROFILE;
+    readonly compilerEnvironment: string;
+    readonly compilerOptions: Readonly<Record<string, unknown>>;
+    readonly configurationDependencies: readonly AuditFileIdentity[];
+    readonly sourceFiles: readonly AuditFileIdentity[];
+    readonly externalDeclarations: readonly AuditFileIdentity[];
+    readonly diagnostics: readonly AuditDiagnostic[];
+    readonly compilerDiagnosticsCollected: boolean;
+    readonly invocation: {
+        readonly outcome: "completed" | "exception" | "not-invoked";
+        readonly succeeded: boolean;
+        readonly errorCount: number | null;
+        readonly warningCount: number | null;
+        readonly exception?: string;
+    };
+    readonly modelPresent: boolean;
+    readonly modelDigest?: string;
+    readonly items: readonly AuditDeclaration[];
+    readonly inputBytesRevalidated: boolean;
+    readonly unsupported: readonly string[];
+    /** Historical field vocabulary mapped from observed public items; no reconstructed B graph. */
+    readonly storedSurface?: PublicApiSnapshot;
+}
+export declare function auditIdentityKey(identity: AuditIdentity): string;
+//# sourceMappingURL=public-api-observation.d.ts.map

package/dist/capabilities/public-api-compatibility/application/model/public-api-observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-api-observation.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/public-api-compatibility/application/model/public-api-observation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,eAAO,MAAM,wBAAwB,oDAAoD,CAAC;AAC1F,MAAM,MAAM,YAAY,GAAG,GAAG,GAAG,GAAG,CAAC;AACrC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AACD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,yBAAyB,GAAG,2BAA2B,GAAG,YAAY,GAAG,WAAW,CAAC;IACpH,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAC1F;AACD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;CAChD;AACD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,wBAAwB,CAAC;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,yBAAyB,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACjE,QAAQ,CAAC,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACnD,QAAQ,CAAC,oBAAoB,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC5D,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IACjD,QAAQ,CAAC,4BAA4B,EAAE,OAAO,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,GAAG,aAAa,CAAC;QAC5D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,+FAA+F;IAC/F,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;CAC5C;AACD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAEhE"}

package/dist/capabilities/public-api-compatibility/application/model/public-api-observation.js

@@ -0,0 +1,5 @@
+export const PUBLIC_API_AUDIT_PROFILE = "foundation:public-api-audit:declaration-graph:1";
+export function auditIdentityKey(identity) {
+    return JSON.stringify([identity.subject, identity.packageName, identity.exportPath, identity.canonicalReference]);
+}
+//# sourceMappingURL=public-api-observation.js.map

package/dist/capabilities/public-api-compatibility/application/model/public-api-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-api-observation.js","sourceRoot":"","sources":["../../../../../src/capabilities/public-api-compatibility/application/model/public-api-observation.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,wBAAwB,GAAG,iDAAiD,CAAC;AAiE1F,MAAM,UAAU,gBAAgB,CAAC,QAAuB;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACpH,CAAC"}

package/dist/capabilities/public-api-compatibility/application/policies/project-public-api-observation.d.ts

@@ -0,0 +1,33 @@
+import { type PublicApiSnapshot } from "../model/public-api.js";
+import { type AuditDeclaration, type AuditIdentity, type AuditObservation } from "../model/public-api-observation.js";
+declare function record(item: AuditDeclaration): {
+    identity: readonly string[];
+    kind: string;
+    parentReference: string;
+    parentKind: string;
+    excerpt: string;
+    isExported: boolean | null;
+    public: boolean;
+    references: {
+        text: string;
+        canonicalReference: string | null;
+        resolution: "ambiguous" | "local" | "same-subject-dependency" | "unresolved" | "verified-external-library";
+        target?: readonly string[];
+        library?: {
+            readonly symbol: string;
+            readonly declarations: readonly string[];
+        };
+    }[];
+};
+export interface AuditGraphProjection {
+    readonly snapshot: PublicApiSnapshot;
+    readonly graphs: readonly {
+        readonly root: AuditIdentity;
+        readonly signature: string;
+        readonly nodes: readonly ReturnType<typeof record>[];
+    }[];
+}
+/** Finite declaration/reference closure, not TypeScript assignability. */
+export declare function projectPublicApiObservation(observations: readonly AuditObservation[], packageName: string): AuditGraphProjection;
+export {};
+//# sourceMappingURL=project-public-api-observation.d.ts.map

package/dist/capabilities/public-api-compatibility/application/policies/project-public-api-observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-public-api-observation.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/public-api-compatibility/application/policies/project-public-api-observation.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC5F,OAAO,EAEL,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EACjE,MAAM,oCAAoC,CAAC;AAM5C,iBAAS,MAAM,CAAC,IAAI,EAAE,gBAAgB;IAElC,QAAQ;IAA6B,IAAI;IACzC,eAAe;IAAwB,UAAU;IACjD,OAAO;IAAgB,UAAU;IAAmB,MAAM;IAC1D,UAAU;;;;;;;;;;EAOb;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,CAAC,OAAO,MAAM,CAAC,EAAE,CAAC;KACtD,EAAE,CAAC;CACL;AAED,0EAA0E;AAC1E,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,SAAS,gBAAgB,EAAE,EAAE,WAAW,EAAE,MAAM,GAC7D,oBAAoB,CA8DtB"}

package/dist/capabilities/public-api-compatibility/application/policies/project-public-api-observation.js

@@ -0,0 +1,110 @@
+import { compareCanonicalReferences } from "../model/public-api.js";
+import { auditIdentityKey, PUBLIC_API_AUDIT_PROFILE } from "../model/public-api-observation.js";
+/** Subject remains part of resolution identity, but is removed from comparison coordinates. */
+function coordinate(identity) {
+    return [identity.packageName, identity.exportPath, identity.canonicalReference];
+}
+function record(item) {
+    return {
+        identity: coordinate(item.identity), kind: item.kind,
+        parentReference: item.parentReference, parentKind: item.parentKind,
+        excerpt: item.excerpt, isExported: item.isExported, public: item.public,
+        references: item.references.map((reference) => ({
+            text: reference.text, canonicalReference: reference.canonicalReference,
+            resolution: reference.resolution,
+            ...(reference.target === undefined ? {} : { target: coordinate(reference.target) }),
+            ...(reference.library === undefined ? {} : { library: reference.library })
+        }))
+    };
+}
+/** Finite declaration/reference closure, not TypeScript assignability. */
+export function projectPublicApiObservation(observations, packageName) {
+    const subject = observations[0]?.subject;
+    const index = new Map();
+    for (const observation of observations) {
+        if (observation.subject !== subject) {
+            throw new Error("Mixed audit subjects.");
+        }
+        for (const item of observation.items) {
+            if (item.identity.subject !== subject || item.identity.packageName !== observation.packageName ||
+                item.identity.exportPath !== observation.exportPath) {
+                throw new Error("Invalid scoped identity.");
+            }
+            const key = auditIdentityKey(item.identity);
+            if (index.has(key)) {
+                throw new Error(`Duplicate audit identity: ${key}.`);
+            }
+            index.set(key, item);
+        }
+    }
+    let visitedRecords = 0;
+    let signatureCharacters = 0;
+    const graphs = [];
+    const packages = observations.filter((observation) => observation.packageName === packageName)
+        .toSorted((a, b) => compareCanonicalReferences(a.exportPath ?? "", b.exportPath ?? ""));
+    if (packages.length === 0) {
+        throw new Error("Missing audit package.");
+    }
+    if (new Set(packages.map((entry) => entry.exportPath)).size !== packages.length) {
+        throw new Error("Duplicate export path.");
+    }
+    const entrypoints = packages.flatMap((observation) => observation.exportPath === null ? [] : [{
+            exportPath: observation.exportPath,
+            items: observation.items.filter((item) => item.public)
+                .toSorted((a, b) => compareCanonicalReferences(a.identity.canonicalReference, b.identity.canonicalReference))
+                .map((root) => {
+                const visited = new Set();
+                const pending = [root];
+                const nodes = [];
+                while (pending.length > 0) {
+                    const item = pending.pop();
+                    if (item === undefined) {
+                        break;
+                    }
+                    const key = auditIdentityKey(item.identity);
+                    if (visited.has(key)) {
+                        continue;
+                    }
+                    visited.add(key);
+                    if (++visitedRecords > 20_000) {
+                        throw new Error("Audit reachable graph budget exhausted.");
+                    }
+                    nodes.push(record(item));
+                    for (const reference of item.references) {
+                        if (reference.resolution === "verified-external-library" && reference.library !== undefined) {
+                            continue;
+                        }
+                        if (reference.resolution !== "local" && reference.resolution !== "same-subject-dependency") {
+                            throw new Error("Unresolved required reference.");
+                        }
+                        const target = reference.target === undefined ? undefined : index.get(auditIdentityKey(reference.target));
+                        if (target === undefined) {
+                            throw new Error("Missing scoped reference target.");
+                        }
+                        pending.push(target);
+                    }
+                    // Referenced interfaces/classes/namespaces carry their declaration members.
+                    for (const member of index.values()) {
+                        if (member.identity.packageName === item.identity.packageName &&
+                            member.identity.exportPath === item.identity.exportPath &&
+                            member.parentReference === item.identity.canonicalReference) {
+                            pending.push(member);
+                        }
+                    }
+                }
+                const sortedNodes = nodes.toSorted((a, b) => compareCanonicalReferences(JSON.stringify(a.identity), JSON.stringify(b.identity)));
+                const signature = JSON.stringify({ domain: PUBLIC_API_AUDIT_PROFILE, nodes: sortedNodes });
+                signatureCharacters += signature.length;
+                if (signatureCharacters > 16 * 1024 * 1024) {
+                    throw new Error("Audit projection byte budget exhausted.");
+                }
+                graphs.push({ root: root.identity, signature, nodes: sortedNodes });
+                return { canonicalReference: root.identity.canonicalReference, kind: root.kind,
+                    parentReference: root.parentReference, parentKind: root.parentKind, signature };
+            })
+        }]);
+    return { snapshot: { schemaVersion: 1, packageName,
+            packageVersion: packages[0]?.packageVersion ?? "", extractorVersion: packages[0]?.toolchain ?? "",
+            entrypoints }, graphs };
+}
+//# sourceMappingURL=project-public-api-observation.js.map

package/dist/capabilities/public-api-compatibility/application/policies/project-public-api-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-public-api-observation.js","sourceRoot":"","sources":["../../../../../src/capabilities/public-api-compatibility/application/policies/project-public-api-observation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAA0B,MAAM,wBAAwB,CAAC;AAC5F,OAAO,EACL,gBAAgB,EAAE,wBAAwB,EAE3C,MAAM,oCAAoC,CAAC;AAE5C,+FAA+F;AAC/F,SAAS,UAAU,CAAC,QAAuB;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAClF,CAAC;AACD,SAAS,MAAM,CAAC,IAAsB;IACpC,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;QACpD,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;QAClE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;QACvE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;YACtE,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;SAC3E,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAUD,0EAA0E;AAC1E,MAAM,UAAU,2BAA2B,CACzC,YAAyC,EAAE,WAAmB;IAE9D,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,WAAW,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAAA,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAAA,CAAC;QAChF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;gBAC1F,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU,EAAE,CAAC;gBAAA,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAAA,CAAC;YACvG,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAA,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,GAAG,CAAC,CAAC;YAAA,CAAC;YAC3E,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,MAAM,MAAM,GAA6C,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,KAAK,WAAW,CAAC;SAC3F,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAA,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAAA,CAAC;IACvE,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAAA,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAAA,CAAC;IAC7H,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5F,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;iBACnD,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;iBAC5G,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACZ,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;gBAClC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,MAAM,KAAK,GAAgC,EAAE,CAAC;gBAC9C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;oBAC3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBAAA,MAAM;oBAAA,CAAC;oBAChC,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAAA,SAAS;oBAAA,CAAC;oBACjC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACjB,IAAI,EAAE,cAAc,GAAG,MAAM,EAAE,CAAC;wBAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;oBAAA,CAAC;oBAC5F,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;oBACzB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;wBACxC,IAAI,SAAS,CAAC,UAAU,KAAK,2BAA2B,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;4BAAA,SAAS;wBAAA,CAAC;wBACxG,IAAI,SAAS,CAAC,UAAU,KAAK,OAAO,IAAI,SAAS,CAAC,UAAU,KAAK,yBAAyB,EAAE,CAAC;4BAAA,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;wBAAA,CAAC;wBAChJ,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;wBAC1G,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;4BAAA,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;wBAAA,CAAC;wBAChF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACvB,CAAC;oBACD,4EAA4E;oBAC5E,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;wBACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW;4BACzD,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU;4BACvD,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;4BAAA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAAA,CAAC;oBAC1F,CAAC;gBACH,CAAC;gBACD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACjI,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC3F,mBAAmB,IAAI,SAAS,CAAC,MAAM,CAAC;gBACxC,IAAI,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;oBAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAAA,CAAC;gBACzG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpE,OAAO,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;oBAC5E,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;YACpF,CAAC,CAAC;SACL,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW;YAChD,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,IAAI,EAAE,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,EAAE;YACjG,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/capabilities/public-api-compatibility/application/policies/public-api-audit-eligibility.d.ts

@@ -0,0 +1,9 @@
+import { type AuditObservation } from "../model/public-api-observation.js";
+export interface AuditEligibility {
+    readonly eligible: boolean;
+    readonly reasons: readonly string[];
+}
+/** Admission is Foundation-derived; extraction failure remains a separate failed gate. */
+export declare function publicApiAuditEligibility(observations: readonly AuditObservation[]): AuditEligibility;
+export declare function publicApiAuditPairEligibility(before: readonly AuditObservation[], after: readonly AuditObservation[]): AuditEligibility;
+//# sourceMappingURL=public-api-audit-eligibility.d.ts.map

package/dist/capabilities/public-api-compatibility/application/policies/public-api-audit-eligibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-api-audit-eligibility.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/public-api-compatibility/application/policies/public-api-audit-eligibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAEkB,KAAK,gBAAgB,EAC7C,MAAM,oCAAoC,CAAC;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAyED,0FAA0F;AAC1F,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,SAAS,gBAAgB,EAAE,GAAG,gBAAgB,CAqBrG;AAOD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,EAAE,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG,gBAAgB,CAavI"}