@allocator-one/rcl 4.4.19

package/dist/report/checkpoint-projection.js

@@ -0,0 +1,122 @@
+import { createHash } from 'node:crypto';
+import { isCheckpointProof } from '../dispatch/checkpoint.js';
+import { mergeChunkReviews } from '../dispatch/merge.js';
+import { deriveReviewerCoverage } from './reviewer-health.js';
+const projections = new WeakSet();
+/** Recognizes local derivation only; serialized evidence must be validated and projected again. */
+export function isCheckpointReportProjection(value) {
+    return value !== null && typeof value === 'object' && projections.has(value);
+}
+function freeze(value) {
+    if (value && typeof value === 'object' && !Object.isFrozen(value)) {
+        for (const child of Object.values(value))
+            freeze(child);
+        Object.freeze(value);
+    }
+    return value;
+}
+/**
+ * Project a validated checkpoint lineage without changing its opaque result bytes.
+ * The caller establishes source/run authority and complete ancestry. This pure
+ * view validates local conservation and accounting; it is not server admission.
+ * Supplemental async voting remains the existing assembly's responsibility.
+ */
+export function projectCheckpointReport(input) {
+    if (!input || !Array.isArray(input.sources) || !input.successor)
+        throw new Error('checkpoint_projection_invalid_lineage');
+    const proofs = [...input.sources, input.successor].map(item => ({ runId: item?.runId, proof: item?.proof }));
+    const runs = new Set(), digests = new Set();
+    for (const item of proofs) {
+        if (typeof item.runId !== 'string' || !/^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i.test(item.runId)) {
+            throw new Error('checkpoint_projection_invalid_run');
+        }
+        if (runs.has(item.runId.toLowerCase()))
+            throw new Error('checkpoint_projection_duplicate_run');
+        runs.add(item.runId.toLowerCase());
+        if (!isCheckpointProof(item.proof))
+            throw new Error('checkpoint_projection_unvalidated_proof');
+        if (digests.has(item.proof.digest))
+            throw new Error('checkpoint_projection_duplicate_proof');
+        digests.add(item.proof.digest);
+    }
+    const plan = proofs[0].proof.plan;
+    if (proofs.some(item => item.proof.plan.digest !== plan.digest || JSON.stringify(item.proof.plan) !== JSON.stringify(plan))) {
+        throw new Error('checkpoint_projection_plan_mismatch');
+    }
+    const cells = new Map(plan.cells.map(cell => [cell.id, cell]));
+    const attempts = new Set(), successful = new Set(), pending = new Map();
+    const last = new Map();
+    const allPhysicalAttempts = [];
+    for (const item of proofs) {
+        const outcomes = new Map(item.proof.state.outcomes.map(outcome => [outcome.paidAttempt.id, outcome]));
+        for (const record of item.proof.state.records) {
+            if (record.type === 'intent') {
+                const cell = cells.get(record.cell), attempt = record.paidAttempt;
+                if (attempts.has(attempt.id))
+                    throw new Error('checkpoint_projection_duplicate_attempt');
+                if (successful.has(cell.id))
+                    throw new Error('checkpoint_projection_success_resampled');
+                if (pending.has(cell.id))
+                    throw new Error('checkpoint_projection_uncertain_resampled');
+                attempts.add(attempt.id);
+                pending.set(cell.id, attempt.id);
+                const result = outcomes.get(attempt.id)?.result;
+                const projected = {
+                    runId: item.runId, proofDigest: item.proof.digest, attemptId: attempt.id,
+                    kind: attempt.kind, cell: cell.id, seat: cell.seat, chunk: cell.chunk,
+                    certainty: result ? 'observed' : 'uncertain',
+                    possiblyBilled: !result || result.kind === 'success' || result.possiblyBilled,
+                    ...(result ? { review: JSON.parse(result.reviewBytes), reviewBytes: result.reviewBytes,
+                        resultSha256: createHash('sha256').update(result.reviewBytes).digest('hex') } : {}),
+                };
+                allPhysicalAttempts.push(projected);
+                last.set(cell.id, projected);
+            }
+            else if (record.type === 'result') {
+                pending.delete(record.cell);
+                if (record.result.kind === 'success')
+                    successful.add(record.cell);
+            }
+        }
+    }
+    const selectedCells = plan.cells.map(cell => {
+        const attempt = last.get(cell.id);
+        return attempt ? { cell: cell.id, seat: cell.seat, status: attempt.certainty,
+            runId: attempt.runId, attemptId: attempt.attemptId,
+            ...(attempt.review ? { review: attempt.review, reviewBytes: attempt.reviewBytes, resultSha256: attempt.resultSha256 } : {}),
+        } : { cell: cell.id, seat: cell.seat, status: 'unstarted' };
+    });
+    const { health, completeSeats } = deriveReviewerCoverage({ version: plan.version,
+        roster: plan.roster.map(seat => ({ ...seat })), chunks: plan.chunks.map(chunk => ({ ...chunk })),
+        cells: plan.cells.map(cell => ({ ...cell })),
+    }, selectedCells.flatMap(cell => cell.review ? [{ cell: cell.cell, review: cell.review }] : []), input.policy);
+    const complete = new Set(completeSeats);
+    const seatReviews = plan.roster.map(seat => {
+        const selected = selectedCells.filter(cell => cell.seat === seat.seat);
+        const parts = selected.map(cell => cell.review ?? { model: seat.model, role: seat.role, provider: seat.route,
+            findings: [], durationMs: 0, status: 'canceled',
+            error: cell.status === 'uncertain' ? 'Provider outcome is uncertain and possibly billed.' : 'Original cell has not been started.', });
+        if (complete.has(seat.seat))
+            return { seat: seat.seat, complete: true, review: mergeChunkReviews(parts)[0] };
+        const succeeded = parts.filter(part => part.status === 'success');
+        const failed = parts.find(part => part.status !== 'success');
+        return { seat: seat.seat, complete: false, review: { model: seat.model, role: seat.role, provider: seat.route,
+                status: failed.status, durationMs: parts.reduce((sum, part) => sum + part.durationMs, 0),
+                findings: succeeded.flatMap(part => part.findings),
+                error: `Incomplete chunk coverage: ${succeeded.length}/${parts.length} required cells succeeded.`,
+            } };
+    });
+    const votingReviews = mergeChunkReviews(seatReviews.filter(seat => seat.complete).map(seat => seat.review));
+    const contributions = allPhysicalAttempts.flatMap(attempt => (attempt.review?.findings ?? []).map((finding, findingIndex) => ({
+        runId: attempt.runId, proofDigest: attempt.proofDigest, cell: attempt.cell, seat: attempt.seat,
+        attemptId: attempt.attemptId, resultSha256: attempt.resultSha256, findingIndex, finding,
+        eligibility: attempt.review.status !== 'success' ? 'unsuccessful_attempt' : complete.has(attempt.seat) ? 'voting' : 'incomplete_seat',
+    })));
+    const projection = freeze({ health, completeSeats, proofs, selectedCells, seatReviews, votingReviews, contributions,
+        nonVotingObservations: contributions.filter(item => item.eligibility !== 'voting'), allPhysicalAttempts,
+        newPhysicalAttempts: allPhysicalAttempts.filter(attempt => attempt.runId === input.successor.runId),
+    });
+    projections.add(projection);
+    return projection;
+}
+//# sourceMappingURL=checkpoint-projection.js.map

package/dist/report/checkpoint-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-projection.js","sourceRoot":"","sources":["../../src/report/checkpoint-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAwB,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAuB,MAAM,sBAAsB,CAAC;AAmEnF,MAAM,WAAW,GAAG,IAAI,OAAO,EAAU,CAAC;AAE1C,mGAAmG;AACnG,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,MAAM,CAAI,KAAQ;IACzB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAgC;IACtE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAyB,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnI,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,EAAE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,4EAA4E,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrI,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC/F,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC/F,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC7F,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IACnC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5H,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,EAAE,UAAU,GAAG,IAAI,GAAG,EAAU,EAAE,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC1D,MAAM,mBAAmB,GAAgC,EAAE,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACtG,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,CAAE,EAAE,OAAO,GAAG,MAAM,CAAC,WAAY,CAAC;gBACrE,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACzF,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACxF,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBACvF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;gBAChD,MAAM,SAAS,GAA8B;oBAC3C,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;oBACxE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;oBACrE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;oBAC5C,cAAc,EAAE,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc;oBAC7E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAgB,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;wBACnG,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtF,CAAC;gBACF,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;gBAC7B,IAAI,MAAM,CAAC,MAAO,CAAC,IAAI,KAAK,SAAS;oBAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAA6B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS;YAC1E,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;YAClD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAY,EAAE,YAAY,EAAE,OAAO,CAAC,YAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9H,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;QAC9E,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAChG,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;KAC7C,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACzC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK;YAC1G,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,UAAmB;YACxD,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC,qCAAqC,GAClI,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;QAC9G,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK;gBAC3G,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxF,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAClD,KAAK,EAAE,8BAA8B,SAAS,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,4BAA4B;aAClG,EAAE,CAAC;IACN,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,iBAAiB,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5G,MAAM,aAAa,GAA6B,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,EAA0B,EAAE,CAAC,CAAC;QAC9K,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI;QAC9F,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,YAAa,EAAE,YAAY,EAAE,OAAO;QACxF,WAAW,EAAE,OAAO,CAAC,MAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB;KACvI,CAAC,CAAC,CAAC,CAAC;IACL,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa;QACjH,qBAAqB,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,EAAE,mBAAmB;QACvG,mBAAmB,EAAE,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;KACpG,CAAC,CAAC;IACH,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5B,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/report/consensus-assembly.d.ts

@@ -0,0 +1,37 @@
+import type { Config } from '../config/schema.js';
+import { type DedupeOrdering } from '../consensus/deduper.js';
+import type { ConsensusFinding, ModelReview } from '../consensus/types.js';
+import type { Role } from '../roles/types.js';
+export interface ConsensusAssemblyInput {
+    runId: string;
+    chunkReviews: readonly ModelReview[];
+    arrivedAsync: readonly ModelReview[];
+    roleMap: ReadonlyMap<string, Role>;
+    thresholds?: Config['thresholds'];
+    modelWeights?: ReadonlyMap<string, number>;
+    collectContributions?: boolean;
+    dedupeOrdering?: DedupeOrdering;
+}
+export interface ConsensusAssemblyContribution {
+    reportIdentity: string;
+    disposition: 'kept' | 'below_threshold';
+    /** Positions in the returned merged reviews, before deduplication. */
+    contributions: Array<{
+        reviewIndex: number;
+        findingIndex: number;
+    }>;
+}
+export interface ConsensusAssembly {
+    reviews: ModelReview[];
+    consensusFindings: ConsensusFinding[];
+    reportFindings: ConsensusFinding[];
+    droppedFindings: ConsensusFinding[];
+    contributions?: ConsensusAssemblyContribution[];
+}
+/**
+ * Derive the existing pre-verification report projection without clocks, IO or
+ * identity allocation. This is shared derivation, not proof/source admission.
+ * Omitted dedupe thresholds use their existing defaults; omitted report filters
+ * intentionally retain the voter's zero floor rather than those defaults.
+ */
+export declare function deriveConsensusAssembly(input: ConsensusAssemblyInput): ConsensusAssembly;

package/dist/report/consensus-assembly.js

@@ -0,0 +1,33 @@
+import { DEFAULT_THRESHOLDS } from '../config/defaults.js';
+import { deduplicateFindings } from '../consensus/deduper.js';
+import { applyReportThresholds, computeConsensus } from '../consensus/voter.js';
+import { mergeChunkReviews } from '../dispatch/merge.js';
+/**
+ * Derive the existing pre-verification report projection without clocks, IO or
+ * identity allocation. This is shared derivation, not proof/source admission.
+ * Omitted dedupe thresholds use their existing defaults; omitted report filters
+ * intentionally retain the voter's zero floor rather than those defaults.
+ */
+export function deriveConsensusAssembly(input) {
+    const { thresholds } = input;
+    const collectContributions = input.collectContributions === true;
+    const reviews = mergeChunkReviews([...input.chunkReviews, ...input.arrivedAsync]);
+    const groups = deduplicateFindings(reviews, thresholds?.jaccardThreshold ?? DEFAULT_THRESHOLDS.jaccardThreshold, thresholds?.dedupeLineWindow ?? DEFAULT_THRESHOLDS.dedupeLineWindow, thresholds?.minConsensusScore ?? DEFAULT_THRESHOLDS.minConsensusScore, collectContributions, input.dedupeOrdering);
+    const consensusFindings = computeConsensus(input.runId, groups, reviews, new Map(input.roleMap), {
+        lineWindow: thresholds?.dedupeLineWindow,
+        jaccardThreshold: thresholds?.jaccardThreshold,
+    }, input.modelWeights === undefined ? undefined : new Map(input.modelWeights));
+    const { kept: reportFindings, dropped: droppedFindings } = applyReportThresholds(consensusFindings, {
+        minConfidence: thresholds?.minConfidence,
+        minConsensusScore: thresholds?.minConsensusScore,
+    });
+    if (!collectContributions)
+        return { reviews, consensusFindings, reportFindings, droppedFindings };
+    const kept = new Set(reportFindings.map(finding => finding.identity));
+    const contributions = consensusFindings.map((finding, index) => ({
+        reportIdentity: finding.identity, disposition: kept.has(finding.identity) ? 'kept' : 'below_threshold',
+        contributions: groups[index].contributions.map(reference => ({ ...reference })),
+    }));
+    return { reviews, consensusFindings, reportFindings, droppedFindings, contributions };
+}
+//# sourceMappingURL=consensus-assembly.js.map

package/dist/report/consensus-assembly.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consensus-assembly.js","sourceRoot":"","sources":["../../src/report/consensus-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,mBAAmB,EAAuB,MAAM,yBAAyB,CAAC;AAEnF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AA6BzD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAA6B;IACnE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7B,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,KAAK,IAAI,CAAC;IACjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,mBAAmB,CAChC,OAAO,EACP,UAAU,EAAE,gBAAgB,IAAI,kBAAkB,CAAC,gBAAgB,EACnE,UAAU,EAAE,gBAAgB,IAAI,kBAAkB,CAAC,gBAAgB,EACnE,UAAU,EAAE,iBAAiB,IAAI,kBAAkB,CAAC,iBAAiB,EACrE,oBAAoB,EACpB,KAAK,CAAC,cAAc,CACrB,CAAC;IACF,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QAC/F,UAAU,EAAE,UAAU,EAAE,gBAAgB;QACxC,gBAAgB,EAAE,UAAU,EAAE,gBAAgB;KAC/C,EAAE,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/E,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,EAAE;QAClG,aAAa,EAAE,UAAU,EAAE,aAAa;QACxC,iBAAiB,EAAE,UAAU,EAAE,iBAAiB;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,oBAAoB;QAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;IAClG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAiC,EAAE,CAAC,CAAC;QAC9F,cAAc,EAAE,OAAO,CAAC,QAAS,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB;QACvG,aAAa,EAAE,MAAM,CAAC,KAAK,CAAE,CAAC,aAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;KAClF,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;AACxF,CAAC"}

package/dist/report/recovery-source.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+/** Local predecessor evidence only; it conveys no review or attestation authority. */
+export declare const recoverySourceSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    native_sha256: z.ZodString;
+}, z.core.$strict>;
+export type RecoverySource = z.infer<typeof recoverySourceSchema>;

package/dist/report/recovery-source.js

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+/** Local predecessor evidence only; it conveys no review or attestation authority. */
+export const recoverySourceSchema = z.object({
+    version: z.literal(1),
+    native_sha256: z.string().length(64).regex(/^[a-f0-9]{64}(?![\s\S])/),
+}).strict();
+//# sourceMappingURL=recovery-source.js.map

package/dist/report/recovery-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-source.js","sourceRoot":"","sources":["../../src/report/recovery-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sFAAsF;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CACtE,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/report/reviewer-artifact.d.ts

@@ -0,0 +1,118 @@
+import type { SealedAsyncProof } from '../dispatch/checkpoint-async-context.js';
+import type { AsyncProof } from '../dispatch/checkpoint-async.js';
+import type { GatingInfo } from '../consensus/gating.js';
+import { type CheckpointProof, type FrozenCheckpointPlan } from '../dispatch/checkpoint.js';
+import { type OriginalLaunch } from '../dispatch/original-launch.js';
+import { type RecoveryOperation } from '../dispatch/recovery-operation.js';
+import { type CapturedReviewerInputs } from '../dispatch/captured-inputs.js';
+import { type CheckpointAssemblyInput, type CheckpointAssemblyContribution, type CheckpointAssemblyObservation } from './checkpoint-assembly.js';
+import { type CheckpointGatingProjection, type SealedVerificationProof } from './checkpoint-gating.js';
+import { type PhysicalCheckpointAttempt } from './checkpoint-projection.js';
+import { type SupplementalAsync } from './supplemental-async.js';
+import { type InspectedReviewerReport, type ReviewerEvidenceDescriptor } from './reviewer-evidence.js';
+import type { ReviewerHealth } from './reviewer-health.js';
+import { type RunHeader } from './run-header.js';
+export interface ReviewerArtifactContext {
+    /** Reconstructed with the existing validated proof/async decoders; never a deserialized cast. */
+    assembly: CheckpointAssemblyInput;
+    representation: {
+        version: 1;
+        parseFailures: boolean;
+    };
+    /** Optional complete inspected chain; external producer/server authority remains separate. */
+    lineage?: readonly (InspectedReviewerReport | InspectedReviewerArtifact)[];
+    /** Sealed verifier transcript, structurally replayed only; it confers no external authority. */
+    verificationProof?: SealedVerificationProof;
+}
+export interface ReviewerArtifactGate {
+    validation: 'deterministic' | 'requires_verifier_evidence';
+    reportedCiExitCode: number;
+    /** Fail-closed offline projection, NOT a replacement for the final convergence gate. */
+    conservativeCiExitCode: number;
+    unresolvedFindingIdentities: string[];
+    annotations: Array<{
+        identity: string;
+        disposition: 'kept' | 'below_threshold';
+        gating: GatingInfo;
+    }>;
+}
+type AttemptReference = Omit<PhysicalCheckpointAttempt, 'review' | 'reviewBytes'>;
+type DeepReadonly<T> = T extends object ? {
+    readonly [K in keyof T]: DeepReadonly<T[K]>;
+} : T;
+/** PRIVATE bytes contain exact prompts/results. Never attach this object to ordinary report output. */
+export type ReviewerArtifact = DeepReadonly<{
+    version: 1;
+    bytes: string;
+    digest: string;
+    reportSha256: string;
+    /** Runtime-only derivation from authenticated checkpoint/verifier proofs; never serialized into private bytes. */
+    gatingDisposition: CheckpointGatingProjection['disposition'];
+    validation: {
+        body: 'deterministic';
+        health: 'derived';
+        gate: ReviewerArtifactGate;
+    };
+    health: ReviewerHealth;
+    contributions: CheckpointAssemblyContribution[];
+    observations: CheckpointAssemblyObservation[];
+    newPhysicalAttempts: AttemptReference[];
+    newAsyncPhysicalAttempts?: Array<Omit<AsyncProof['physicalAttempts'][number], 'reviewBytes'>>;
+}>;
+/** Runtime structural-inspection provenance only; never producer/server authority. */
+export declare function isInspectedReviewerArtifact(value: unknown): value is InspectedReviewerArtifact;
+/** Brand means deterministic body validation only, never producer truth or native/server admission. */
+export declare function isReviewerArtifact(value: unknown): value is ReviewerArtifact;
+/**
+ * Serialize PRIVATE evidence after ordinary sanitization/rendering. Pure and
+ * provider-free; report-body conservation never establishes source authority,
+ * verification truth, execution eligibility, or native/server approval.
+ */
+export declare function serializeReviewerArtifact(input: ReviewerArtifactContext & {
+    reportBytes: string;
+}): ReviewerArtifact;
+/**
+ * Revalidate against the caller's independently decoded/branded proof lineage.
+ * The context is required: serialized claims cannot supply their own authority.
+ */
+export declare function validateReviewerArtifact(bytes: string, context: ReviewerArtifactContext): ReviewerArtifact;
+export interface InspectReviewerArtifactOptions {
+    expectedReportBytes: string;
+    expectedRunId: string;
+    expectedTarget: string;
+    expectedPlan: FrozenCheckpointPlan;
+    expectedPrTarget?: string;
+    /** Required only when the artifact was serialized with a complete inspected report chain. */
+    lineage?: readonly (InspectedReviewerReport | InspectedReviewerArtifact)[];
+    /** Cold reopen: genuine prior separate pairs only; CURRENT is derived from exact terminal bytes. */
+    ancestors?: readonly InspectedReviewerArtifact[];
+}
+/** Local structure/body validation only; callers still authenticate every source and launch. */
+export interface InspectedReviewerArtifact {
+    readonly artifact: ReviewerArtifact;
+    readonly representation: {
+        readonly version: 1;
+        readonly parseFailures: boolean;
+    };
+    readonly assembly: CheckpointAssemblyInput;
+    readonly reportBytes: string;
+    readonly reportSha256: string;
+    readonly runId: string;
+    readonly prTarget: string;
+    readonly proof: CheckpointProof;
+    readonly captured: CapturedReviewerInputs;
+    readonly supplementalAsync: SupplementalAsync;
+    readonly descriptor: ReviewerEvidenceDescriptor;
+    readonly verificationProof?: SealedVerificationProof;
+    readonly asyncExecution?: SealedAsyncProof;
+    readonly launch?: OriginalLaunch;
+    readonly operation?: RecoveryOperation;
+    readonly nativeClaim?: NonNullable<RunHeader['converge']>;
+}
+/**
+ * Decode a separately retained terminal pair without fabricating an inline-proof
+ * report or a replacement report hash. Expectations come from the owned local
+ * journal/terminal manifest; current source/provider/server authority is external.
+ */
+export declare function inspectReviewerArtifact(bytes: string, options: InspectReviewerArtifactOptions): InspectedReviewerArtifact;
+export {};