@angriff36/manifest 2.18.0

package/dist/manifest/audit/sinks/memory.js

@@ -0,0 +1,66 @@
+/**
+ * MemoryAuditSink — first-party in-memory implementation of the AuditSink
+ * contract (src/manifest/audit/audit-sink.ts).
+ *
+ * Intended use:
+ *   - Unit and conformance tests
+ *   - Local development and prototyping
+ *   - Sample applications wiring audit governance without a database
+ *
+ * Durability: none. Records live for the lifetime of the sink instance.
+ *
+ * Idempotency: when `record.recordId` is provided, repeat emissions for the
+ * same id are dropped silently (the first record wins). Records without a
+ * `recordId` are always appended.
+ */
+/**
+ * In-memory audit sink. Safe for use across multiple RuntimeEngine instances
+ * in a single test run; not safe for cross-process sharing.
+ */
+export class MemoryAuditSink {
+    records = [];
+    seenRecordIds = new Set();
+    generateId;
+    constructor(opts = {}) {
+        this.generateId = opts.generateId;
+    }
+    async emit(record) {
+        const recordId = record.recordId ?? (this.generateId ? this.generateId() : undefined);
+        if (recordId !== undefined) {
+            if (this.seenRecordIds.has(recordId)) {
+                return;
+            }
+            this.seenRecordIds.add(recordId);
+        }
+        const stored = {
+            ...record,
+            ...(recordId !== undefined ? { recordId } : {}),
+        };
+        this.records.push(stored);
+    }
+    /**
+     * Return a defensive copy of all records emitted so far. Mutating the
+     * returned array does not affect internal state.
+     */
+    list() {
+        return this.records.map(r => ({ ...r }));
+    }
+    /** Number of records currently stored. */
+    size() {
+        return this.records.length;
+    }
+    /**
+     * Look up a record by recordId. Returns a defensive copy or undefined.
+     * O(n) — acceptable for test scenarios where MemoryAuditSink is used.
+     */
+    findByRecordId(recordId) {
+        const found = this.records.find(r => r.recordId === recordId);
+        return found ? { ...found } : undefined;
+    }
+    /** Clear all stored records and idempotency tracking. */
+    clear() {
+        this.records = [];
+        this.seenRecordIds.clear();
+    }
+}
+//# sourceMappingURL=memory.js.map

package/dist/manifest/audit/sinks/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../../src/manifest/audit/sinks/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAaH;;;GAGG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,GAAkB,EAAE,CAAC;IAC5B,aAAa,GAAgB,IAAI,GAAG,EAAE,CAAC;IACvC,UAAU,CAAgB;IAElC,YAAY,OAA+B,EAAE;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAmB;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEtF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,MAAM,GAAgB;YAC1B,GAAG,MAAM;YACT,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,0CAA0C;IAC1C,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,QAAgB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1C,CAAC;IAED,yDAAyD;IACzD,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF"}

package/dist/manifest/audit/sinks/postgres.d.ts

@@ -0,0 +1,31 @@
+/**
+ * PostgresAuditSink — durable AuditSink adapter backed by PostgreSQL.
+ *
+ * Companion schema: src/manifest/audit/sinks/postgres.sql.
+ * Uses the `pg` client (already a Manifest dependency for stores.node.ts).
+ *
+ * Idempotency: enforced at the SQL layer via
+ *   INSERT … ON CONFLICT (record_id) DO NOTHING
+ * so retries from a buggy upstream consumer never double-write.
+ *
+ * Transactionality: this adapter inserts on its own connection by default.
+ * Callers who need audit emission inside a larger transaction should pass
+ * a PoolClient already bound to that transaction via `client`.
+ *
+ * DO NOT import this file in browser code — it requires `pg`.
+ */
+import type { Pool, PoolClient } from 'pg';
+import type { AuditRecord, AuditSink } from '../audit-sink';
+export interface PostgresAuditSinkOptions {
+    /** A pg Pool. The sink does NOT own the pool's lifecycle. */
+    pool: Pool;
+    /** Table name override. Default: `manifest_audit_records`. */
+    tableName?: string;
+}
+export declare class PostgresAuditSink implements AuditSink {
+    private pool;
+    private tableName;
+    constructor(opts: PostgresAuditSinkOptions);
+    emit(record: AuditRecord, client?: PoolClient): Promise<void>;
+}
+//# sourceMappingURL=postgres.d.ts.map

package/dist/manifest/audit/sinks/postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../../../src/manifest/audit/sinks/postgres.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE5D,MAAM,WAAW,wBAAwB;IACvC,6DAA6D;IAC7D,IAAI,EAAE,IAAI,CAAC;IACX,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAQD,qBAAa,iBAAkB,YAAW,SAAS;IACjD,OAAO,CAAC,IAAI,CAAO;IACnB,OAAO,CAAC,SAAS,CAAS;gBAEd,IAAI,EAAE,wBAAwB;IAKpC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAyCpE"}

package/dist/manifest/audit/sinks/postgres.js

@@ -0,0 +1,67 @@
+/**
+ * PostgresAuditSink — durable AuditSink adapter backed by PostgreSQL.
+ *
+ * Companion schema: src/manifest/audit/sinks/postgres.sql.
+ * Uses the `pg` client (already a Manifest dependency for stores.node.ts).
+ *
+ * Idempotency: enforced at the SQL layer via
+ *   INSERT … ON CONFLICT (record_id) DO NOTHING
+ * so retries from a buggy upstream consumer never double-write.
+ *
+ * Transactionality: this adapter inserts on its own connection by default.
+ * Callers who need audit emission inside a larger transaction should pass
+ * a PoolClient already bound to that transaction via `client`.
+ *
+ * DO NOT import this file in browser code — it requires `pg`.
+ */
+const DEFAULT_TABLE = 'manifest_audit_records';
+function quoteIdent(identifier) {
+    return `"${identifier.replace(/"/g, '""')}"`;
+}
+export class PostgresAuditSink {
+    pool;
+    tableName;
+    constructor(opts) {
+        this.pool = opts.pool;
+        this.tableName = opts.tableName ?? DEFAULT_TABLE;
+    }
+    async emit(record, client) {
+        if (record.recordId === undefined) {
+            // Without a recordId the INSERT cannot be idempotent. Refuse the
+            // emission so callers wire a real id generator (RuntimeEngine
+            // generates one per invocation when an audit sink is configured).
+            throw new Error('PostgresAuditSink requires AuditRecord.recordId for idempotent insert');
+        }
+        const sql = `
+      INSERT INTO ${quoteIdent(this.tableName)} (
+        record_id, occurred_at, tenant_id, org_id, actor_id,
+        request_id, source, entity, command, command_id,
+        outcome, emitted_event_names, ir_hash, diagnostics
+      ) VALUES (
+        $1, $2, $3, $4, $5,
+        $6, $7, $8, $9, $10,
+        $11, $12, $13, $14::jsonb
+      )
+      ON CONFLICT (record_id) DO NOTHING
+    `;
+        const params = [
+            record.recordId,
+            record.occurredAt,
+            record.tenantId ?? null,
+            record.orgId ?? null,
+            record.actorId ?? null,
+            record.requestId ?? null,
+            record.source ?? null,
+            record.entity ?? null,
+            record.command,
+            record.commandId ?? null,
+            record.outcome,
+            record.emittedEventNames ?? null,
+            record.irHash ?? null,
+            record.diagnostics === undefined ? null : JSON.stringify(record.diagnostics),
+        ];
+        const runner = client ?? this.pool;
+        await runner.query(sql, params);
+    }
+}
+//# sourceMappingURL=postgres.js.map

package/dist/manifest/audit/sinks/postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.js","sourceRoot":"","sources":["../../../../src/manifest/audit/sinks/postgres.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAYH,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAE/C,SAAS,UAAU,CAAC,UAAkB;IACpC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED,MAAM,OAAO,iBAAiB;IACpB,IAAI,CAAO;IACX,SAAS,CAAS;IAE1B,YAAY,IAA8B;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAmB,EAAE,MAAmB;QACjD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,iEAAiE;YACjE,8DAA8D;YAC9D,kEAAkE;YAClE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,GAAG,GAAG;oBACI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;;;;;;;;;;KAUzC,CAAC;QAEF,MAAM,MAAM,GAAc;YACxB,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,QAAQ,IAAI,IAAI;YACvB,MAAM,CAAC,KAAK,IAAI,IAAI;YACpB,MAAM,CAAC,OAAO,IAAI,IAAI;YACtB,MAAM,CAAC,SAAS,IAAI,IAAI;YACxB,MAAM,CAAC,MAAM,IAAI,IAAI;YACrB,MAAM,CAAC,MAAM,IAAI,IAAI;YACrB,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,SAAS,IAAI,IAAI;YACxB,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,iBAAiB,IAAI,IAAI;YAChC,MAAM,CAAC,MAAM,IAAI,IAAI;YACrB,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;SAC7E,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC;QACnC,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/manifest/binary-ir.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Binary IR serialization using MessagePack.
+ *
+ * Provides a compact binary alternative to JSON for storing and transporting
+ * Manifest IR. Binary IR files use the `.mir` extension and include a
+ * format version header so the layout can evolve safely.
+ *
+ * File layout:
+ *   bytes 0-2 : magic "MIR"  (3 bytes)
+ *   byte  3   : format version (currently 0x01)
+ *   bytes 4+  : MessagePack-encoded IR payload
+ *
+ * Typical size reduction vs JSON: 40-60% for non-trivial IR.
+ * Round-trip is lossless: pack(unpack(buf)) === unpack(pack(ir)).
+ */
+import type { IR } from './ir.js';
+/** Magic prefix for `.mir` files: "MIR" */
+export declare const MIR_MAGIC: readonly [77, 73, 82];
+/** Current binary format version. Bump when the on-disk layout changes. */
+export declare const MIR_FORMAT_VERSION = 1;
+/** Total header size in bytes (3 magic + 1 version). */
+export declare const MIR_HEADER_SIZE = 4;
+/** Default output extension for binary IR files. */
+export declare const MIR_EXTENSION = ".mir";
+/** Information about a packed binary file. */
+export interface BinaryIRInfo {
+    formatVersion: number;
+    payloadSize: number;
+    totalSize: number;
+}
+/** Comparison statistics between JSON and binary representations. */
+export interface CompressionStats {
+    jsonBytes: number;
+    binaryBytes: number;
+    ratio: number;
+    savingsPercent: number;
+}
+/** Error thrown when a `.mir` file cannot be decoded. */
+export declare class BinaryIRError extends Error {
+    constructor(message: string);
+}
+/**
+ * Encode an IR object into a `.mir` binary buffer.
+ *
+ * The buffer is prefixed with the 4-byte `MIR`+version header, followed by
+ * a MessagePack payload that round-trips losslessly.
+ */
+export declare function packIR(ir: IR): Uint8Array;
+/**
+ * Decode a `.mir` binary buffer back into an IR object.
+ *
+ * Throws {@link BinaryIRError} if the header is missing, the magic bytes
+ * don't match, or the format version is unsupported.
+ */
+export declare function unpackIR(buf: Uint8Array): IR;
+/**
+ * Return structural info about a `.mir` buffer without fully decoding it.
+ */
+export declare function inspectBinaryIR(buf: Uint8Array): BinaryIRInfo;
+/**
+ * Compute size comparison between JSON and binary representations of the
+ * same IR. Useful for reporting compression ratios in CLI output.
+ */
+export declare function compareSizes(ir: IR): CompressionStats;
+/**
+ * Derive a `.mir` output path from a source path by replacing the extension.
+ * If the source already has `.mir` extension, returns it unchanged.
+ * Strips `.ir.json` as a compound extension, then appends `.mir`.
+ */
+export declare function deriveMirPath(sourcePath: string): string;
+/**
+ * Derive a `.ir.json` output path from a `.mir` source path.
+ * If the source does not end in `.mir`, the `.ir.json` suffix is appended.
+ */
+export declare function deriveJsonPath(sourcePath: string): string;
+//# sourceMappingURL=binary-ir.d.ts.map

package/dist/manifest/binary-ir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-ir.d.ts","sourceRoot":"","sources":["../../src/manifest/binary-ir.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAElC,2CAA2C;AAC3C,eAAO,MAAM,SAAS,uBAA8B,CAAC;AAErD,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,wDAAwD;AACxD,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,oDAAoD;AACpD,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,yDAAyD;AACzD,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,UAAU,CASzC;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,EAAE,CAwB5C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,YAAY,CAc7D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,EAAE,GAAG,gBAAgB,CAMrD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAMxD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAKzD"}

package/dist/manifest/binary-ir.js

@@ -0,0 +1,124 @@
+/**
+ * Binary IR serialization using MessagePack.
+ *
+ * Provides a compact binary alternative to JSON for storing and transporting
+ * Manifest IR. Binary IR files use the `.mir` extension and include a
+ * format version header so the layout can evolve safely.
+ *
+ * File layout:
+ *   bytes 0-2 : magic "MIR"  (3 bytes)
+ *   byte  3   : format version (currently 0x01)
+ *   bytes 4+  : MessagePack-encoded IR payload
+ *
+ * Typical size reduction vs JSON: 40-60% for non-trivial IR.
+ * Round-trip is lossless: pack(unpack(buf)) === unpack(pack(ir)).
+ */
+import { encode, decode } from '@msgpack/msgpack';
+/** Magic prefix for `.mir` files: "MIR" */
+export const MIR_MAGIC = [0x4d, 0x49, 0x52];
+/** Current binary format version. Bump when the on-disk layout changes. */
+export const MIR_FORMAT_VERSION = 1;
+/** Total header size in bytes (3 magic + 1 version). */
+export const MIR_HEADER_SIZE = 4;
+/** Default output extension for binary IR files. */
+export const MIR_EXTENSION = '.mir';
+/** Error thrown when a `.mir` file cannot be decoded. */
+export class BinaryIRError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'BinaryIRError';
+    }
+}
+/**
+ * Encode an IR object into a `.mir` binary buffer.
+ *
+ * The buffer is prefixed with the 4-byte `MIR`+version header, followed by
+ * a MessagePack payload that round-trips losslessly.
+ */
+export function packIR(ir) {
+    const payload = encode(ir);
+    const buf = new Uint8Array(MIR_HEADER_SIZE + payload.length);
+    buf[0] = MIR_MAGIC[0];
+    buf[1] = MIR_MAGIC[1];
+    buf[2] = MIR_MAGIC[2];
+    buf[3] = MIR_FORMAT_VERSION;
+    buf.set(payload, MIR_HEADER_SIZE);
+    return buf;
+}
+/**
+ * Decode a `.mir` binary buffer back into an IR object.
+ *
+ * Throws {@link BinaryIRError} if the header is missing, the magic bytes
+ * don't match, or the format version is unsupported.
+ */
+export function unpackIR(buf) {
+    if (buf.length < MIR_HEADER_SIZE) {
+        throw new BinaryIRError(`Buffer too short: expected at least ${MIR_HEADER_SIZE} header bytes, got ${buf.length}`);
+    }
+    if (buf[0] !== MIR_MAGIC[0] || buf[1] !== MIR_MAGIC[1] || buf[2] !== MIR_MAGIC[2]) {
+        throw new BinaryIRError('Invalid magic bytes: not a .mir file (expected "MIR" prefix)');
+    }
+    const version = buf[3];
+    if (version !== MIR_FORMAT_VERSION) {
+        throw new BinaryIRError(`Unsupported format version: ${version} (expected ${MIR_FORMAT_VERSION})`);
+    }
+    const payload = buf.subarray(MIR_HEADER_SIZE);
+    try {
+        return decode(payload);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new BinaryIRError(`Failed to decode MessagePack payload: ${msg}`);
+    }
+}
+/**
+ * Return structural info about a `.mir` buffer without fully decoding it.
+ */
+export function inspectBinaryIR(buf) {
+    if (buf.length < MIR_HEADER_SIZE) {
+        throw new BinaryIRError(`Buffer too short: expected at least ${MIR_HEADER_SIZE} header bytes, got ${buf.length}`);
+    }
+    if (buf[0] !== MIR_MAGIC[0] || buf[1] !== MIR_MAGIC[1] || buf[2] !== MIR_MAGIC[2]) {
+        throw new BinaryIRError('Invalid magic bytes: not a .mir file');
+    }
+    return {
+        formatVersion: buf[3],
+        payloadSize: buf.length - MIR_HEADER_SIZE,
+        totalSize: buf.length,
+    };
+}
+/**
+ * Compute size comparison between JSON and binary representations of the
+ * same IR. Useful for reporting compression ratios in CLI output.
+ */
+export function compareSizes(ir) {
+    const jsonBytes = Buffer.byteLength(JSON.stringify(ir), 'utf-8');
+    const binaryBytes = packIR(ir).length;
+    const ratio = jsonBytes === 0 ? 0 : binaryBytes / jsonBytes;
+    const savingsPercent = Math.round((1 - ratio) * 1000) / 10;
+    return { jsonBytes, binaryBytes, ratio, savingsPercent };
+}
+/**
+ * Derive a `.mir` output path from a source path by replacing the extension.
+ * If the source already has `.mir` extension, returns it unchanged.
+ * Strips `.ir.json` as a compound extension, then appends `.mir`.
+ */
+export function deriveMirPath(sourcePath) {
+    if (sourcePath.endsWith(MIR_EXTENSION))
+        return sourcePath;
+    if (sourcePath.endsWith('.ir.json')) {
+        return sourcePath.slice(0, -'.ir.json'.length) + MIR_EXTENSION;
+    }
+    return sourcePath.replace(/\.[^./\\]+$/, '') + MIR_EXTENSION;
+}
+/**
+ * Derive a `.ir.json` output path from a `.mir` source path.
+ * If the source does not end in `.mir`, the `.ir.json` suffix is appended.
+ */
+export function deriveJsonPath(sourcePath) {
+    if (sourcePath.endsWith(MIR_EXTENSION)) {
+        return sourcePath.slice(0, -MIR_EXTENSION.length) + '.ir.json';
+    }
+    return sourcePath + '.ir.json';
+}
+//# sourceMappingURL=binary-ir.js.map

package/dist/manifest/binary-ir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-ir.js","sourceRoot":"","sources":["../../src/manifest/binary-ir.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAGlD,2CAA2C;AAC3C,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAErD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC,oDAAoD;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAiBpC,yDAAyD;AACzD,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,EAAM;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACtB,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACtB,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACtB,GAAG,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAe;IACtC,IAAI,GAAG,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,IAAI,aAAa,CACrB,uCAAuC,eAAe,sBAAsB,GAAG,CAAC,MAAM,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,aAAa,CACrB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CACrB,+BAA+B,OAAO,cAAc,kBAAkB,GAAG,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAO,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,aAAa,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAe;IAC7C,IAAI,GAAG,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,IAAI,aAAa,CACrB,uCAAuC,eAAe,sBAAsB,GAAG,CAAC,MAAM,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,aAAa,CAAC,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO;QACL,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC;QACrB,WAAW,EAAE,GAAG,CAAC,MAAM,GAAG,eAAe;QACzC,SAAS,EAAE,GAAG,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,EAAM;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,KAAK,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,SAAS,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,IAAI,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1D,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC;IACjE,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,IAAI,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACvC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;IACjE,CAAC;IACD,OAAO,UAAU,GAAG,UAAU,CAAC;AACjC,CAAC"}

package/dist/manifest/breaking-change.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Breaking-Change Classification Engine
+ *
+ * Takes an IRDiffReport (from ir-diff.ts) and classifies each change as:
+ *   - compatible: backward-compatible (e.g., adding optional properties)
+ *   - deprecated: may change runtime behavior but not type-level contract
+ *   - breaking: breaks existing consumers (e.g., removing entities, changing types)
+ *
+ * Also produces consumer impact analysis (which commands, routes, projections are
+ * affected) and supports acknowledgment filtering for CI integration.
+ *
+ * Design notes:
+ *   - Deterministic: same IRDiffReport always produces same output (sorted, no random).
+ *   - IR is the authority -- classifications derive from IR diffs, never from source.
+ *   - Pure function: no I/O, no side effects.
+ */
+import type { IRDiffReport } from './ir-diff';
+export type ChangeSeverity = 'compatible' | 'deprecated' | 'breaking';
+export interface ClassifiedChange {
+    /** Dot-separated path to the changed element, e.g. "User.email", "createUser.parameters.email" */
+    path: string;
+    /** Severity classification */
+    severity: ChangeSeverity;
+    /** Machine-readable category, e.g. "property-removed", "entity-added" */
+    category: string;
+    /** Human-readable description */
+    description: string;
+    /** Which consumers are affected, e.g. ["command:createUser", "route:/api/users"] */
+    consumerImpact: string[];
+}
+export interface AcknowledgmentEntry {
+    /** Dot-separated path matching ClassifiedChange.path */
+    path: string;
+    /** Category matching ClassifiedChange.category */
+    category: string;
+    /** ISO timestamp of acknowledgment */
+    acknowledgedAt: string;
+    /** Human-readable reason */
+    reason: string;
+}
+export interface AcknowledgmentsFile {
+    version: 1;
+    acknowledged: AcknowledgmentEntry[];
+}
+export interface ConsumerImpactSummary {
+    commands: string[];
+    routes: string[];
+    projections: string[];
+}
+export interface BreakingChangeReport {
+    /** All classified changes, sorted by path */
+    classified: ClassifiedChange[];
+    /** Counts by severity */
+    summary: {
+        compatible: number;
+        deprecated: number;
+        breaking: number;
+        total: number;
+    };
+    /** Breaking changes NOT found in the acknowledgments file */
+    unacknowledged: ClassifiedChange[];
+    /** Breaking changes found in the acknowledgments file */
+    acknowledged: ClassifiedChange[];
+    /** Aggregated consumer impact */
+    consumerImpact: ConsumerImpactSummary;
+}
+/**
+ * Classify all changes in an IR diff report by severity.
+ *
+ * @param report - Output of diffIR(oldIR, newIR)
+ * @param acks - Optional parsed acknowledgments file
+ * @returns Classified and analyzed breaking change report
+ */
+export declare function classifyBreakingChanges(report: IRDiffReport, acks?: AcknowledgmentsFile): BreakingChangeReport;
+//# sourceMappingURL=breaking-change.d.ts.map

package/dist/manifest/breaking-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"breaking-change.d.ts","sourceRoot":"","sources":["../../src/manifest/breaking-change.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EACV,YAAY,EAWb,MAAM,WAAW,CAAC;AAMnB,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,YAAY,GAAG,UAAU,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,kGAAkG;IAClG,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAC;IACX,YAAY,EAAE,mBAAmB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,6CAA6C;IAC7C,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,yBAAyB;IACzB,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,6DAA6D;IAC7D,cAAc,EAAE,gBAAgB,EAAE,CAAC;IACnC,yDAAyD;IACzD,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,iCAAiC;IACjC,cAAc,EAAE,qBAAqB,CAAC;CACvC;AA+tBD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,YAAY,EACpB,IAAI,CAAC,EAAE,mBAAmB,GACzB,oBAAoB,CAmEtB"}