@aotter/mantle-runtime 0.0.11-alpha.11

package/dist/usecase/media/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../src/usecase/media/diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAItE,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAUvE;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CASpF;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAUrE;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,UAAU,CASZ;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAUzF;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAU1F;AAED;;;;;0BAK0B;AAC1B,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,UAAU,CAiBZ"}

package/dist/usecase/media/diagnostics.js

@@ -0,0 +1,88 @@
+import { makeDiagnostic } from "@aotter/mantle-spec";
+const PHASE = "runtime";
+export function mediaNotConfiguredDiagnostic(opPath) {
+    return makeDiagnostic({
+        code: "MEDIA_NOT_CONFIGURED",
+        phase: PHASE,
+        severity: "error",
+        path: opPath,
+        expected: "media storage adapter bound at runtime",
+        message: "Media uploads are not enabled on this deployment. Bind a `mediaStorage` adapter in `createCmsRuntime` to enable.",
+    });
+}
+export function mediaMimeRejectedDiagnostic(opPath, mime) {
+    return makeDiagnostic({
+        code: "MEDIA_MIME_REJECTED",
+        phase: PHASE,
+        severity: "error",
+        path: opPath,
+        value: mime,
+        expected: "one of: image/png, image/jpeg, image/webp, image/gif",
+    });
+}
+export function mediaSvgRejectedDiagnostic(opPath) {
+    return makeDiagnostic({
+        code: "MEDIA_SVG_REJECTED",
+        phase: PHASE,
+        severity: "error",
+        path: opPath,
+        value: "image/svg+xml",
+        expected: "non-SVG image (object storage does not sanitize SVG payloads)",
+        suggestion: "set MEDIA_ALLOW_SVG=1 on the adapter if SVG is required",
+    });
+}
+export function mediaSizeExceededDiagnostic(opPath, byteSize, maxBytes) {
+    return makeDiagnostic({
+        code: "MEDIA_SIZE_EXCEEDED",
+        phase: PHASE,
+        severity: "error",
+        path: opPath,
+        value: byteSize,
+        expected: `byteSize <= ${maxBytes}`,
+    });
+}
+export function mediaUploadExpiredDiagnostic(opPath, uploadId) {
+    return makeDiagnostic({
+        code: "MEDIA_UPLOAD_EXPIRED",
+        phase: PHASE,
+        severity: "error",
+        path: opPath,
+        value: uploadId,
+        expected: "an active upload capability (TTL elapsed or never created)",
+        suggestion: "call create_media_upload again to get a fresh capability",
+    });
+}
+export function mediaObjectNotFoundDiagnostic(opPath, uploadId) {
+    return makeDiagnostic({
+        code: "MEDIA_OBJECT_NOT_FOUND",
+        phase: PHASE,
+        severity: "error",
+        path: opPath,
+        value: uploadId,
+        expected: "an object PUT to the storage backend before commit",
+        suggestion: "PUT the file to the upload URL before calling commit_media_upload",
+    });
+}
+/** Caller supplied a `purpose` that this deployment did not declare in
+ *  `siteDefaults.media.purposes`. Fail-closed per #262: alpha has no
+ *  production consumers, so there is no warn-and-allow compatibility
+ *  mode — undeclared purposes are always rejected. The `expected`
+ *  field carries the declared set so agents can self-correct without
+ *  another round trip. */
+export function mediaPurposeRejectedDiagnostic(opPath, purpose, declared) {
+    const expected = declared.length > 0
+        ? `purpose ∈ {${declared.map((p) => `'${p}'`).join(", ")}}`
+        : "media uploads are not enabled on this deployment (no `media.purposes` declared in siteDefaults)";
+    return makeDiagnostic({
+        code: "MEDIA_PURPOSE_REJECTED",
+        phase: PHASE,
+        severity: "error",
+        path: opPath,
+        value: purpose ?? "(missing)",
+        expected,
+        suggestion: declared.length > 0
+            ? "pass one of the declared purposes; starters own the taxonomy"
+            : "add `media.purposes` to `siteDefaults` in clam.config.ts to enable uploads",
+    });
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/usecase/media/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../../src/usecase/media/diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAmB,MAAM,qBAAqB,CAAC;AAEtE,MAAM,KAAK,GAAG,SAAkB,CAAC;AAEjC,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,wCAAwC;QAClD,OAAO,EACL,kHAAkH;KACrH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,IAAY;IACtE,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,sDAAsD;KACjE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,+DAA+D;QACzE,UAAU,EAAE,yDAAyD;KACtE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAc,EACd,QAAgB,EAChB,QAAgB;IAEhB,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,eAAe,QAAQ,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAc,EAAE,QAAgB;IAC3E,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,4DAA4D;QACtE,UAAU,EAAE,0DAA0D;KACvE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc,EAAE,QAAgB;IAC5E,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,oDAAoD;QAC9D,UAAU,EAAE,mEAAmE;KAChF,CAAC,CAAC;AACL,CAAC;AAED;;;;;0BAK0B;AAC1B,MAAM,UAAU,8BAA8B,CAC5C,MAAc,EACd,OAA2B,EAC3B,QAA2B;IAE3B,MAAM,QAAQ,GACZ,QAAQ,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,cAAc,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC3D,CAAC,CAAC,iGAAiG,CAAC;IACxG,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,OAAO,IAAI,WAAW;QAC7B,QAAQ;QACR,UAAU,EACR,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC,8DAA8D;YAChE,CAAC,CAAC,4EAA4E;KACnF,CAAC,CAAC;AACL,CAAC"}

package/dist/usecase/media/index.d.ts

@@ -0,0 +1,4 @@
+export { CreateMediaUploadUseCase } from "./CreateMediaUploadUseCase.js";
+export { CommitMediaUploadUseCase } from "./CommitMediaUploadUseCase.js";
+export { DEFAULT_MAX_BYTES, MEDIA_MIME_ALLOWLIST, MEDIA_SVG_MIME, PENDING_UPLOAD_KV_PREFIX, PENDING_UPLOAD_KV_TTL_SECONDS, UPLOAD_URL_TTL_SECONDS, extensionForMime, isAllowedMime, type MediaMimeType, } from "./mediaAllowlist.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/usecase/media/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/usecase/media/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,6BAA6B,EAC7B,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC"}

package/dist/usecase/media/index.js

@@ -0,0 +1,4 @@
+export { CreateMediaUploadUseCase } from "./CreateMediaUploadUseCase.js";
+export { CommitMediaUploadUseCase } from "./CommitMediaUploadUseCase.js";
+export { DEFAULT_MAX_BYTES, MEDIA_MIME_ALLOWLIST, MEDIA_SVG_MIME, PENDING_UPLOAD_KV_PREFIX, PENDING_UPLOAD_KV_TTL_SECONDS, UPLOAD_URL_TTL_SECONDS, extensionForMime, isAllowedMime, } from "./mediaAllowlist.js";
+//# sourceMappingURL=index.js.map

package/dist/usecase/media/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/usecase/media/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,6BAA6B,EAC7B,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,GAEd,MAAM,qBAAqB,CAAC"}

package/dist/usecase/media/mediaAllowlist.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Closed mime allowlist for v0.1.x media uploads. Adapter authors
+ * cannot extend this without a grammar-revise round.
+ *
+ * SVG is intentionally absent from the always-on set — object stores
+ * don't sanitize and a passthrough SVG can carry inline scripts. SVG
+ * uploads are only accepted when the adapter wires the use case with
+ * `allowSvg: true`, typically from a `MEDIA_ALLOW_SVG=1` env opt-in.
+ */
+export declare const MEDIA_MIME_ALLOWLIST: readonly ["image/png", "image/jpeg", "image/webp", "image/gif"];
+export declare const MEDIA_SVG_MIME: "image/svg+xml";
+export type MediaMimeType = (typeof MEDIA_MIME_ALLOWLIST)[number] | typeof MEDIA_SVG_MIME;
+export declare function isAllowedMime(mime: string, allowSvg: boolean): boolean;
+/** Default upload byte ceiling: 25 MB. Large enough for most cover
+ *  images and short-form social posts; small enough to keep R2 free
+ *  tier viable. Adapters may pass a different value via the use-case
+ *  ctor when they have stricter / looser policies. */
+export declare const DEFAULT_MAX_BYTES: number;
+/** Upload-capability TTL: 15 minutes. Bearer URL is short-lived. */
+export declare const UPLOAD_URL_TTL_SECONDS: number;
+/** KV record TTL: 1 hour. Outlives the upload URL so slow commits
+ *  don't lose the mapping; orphan sweep cleans uncommitted objects
+ *  separately. */
+export declare const PENDING_UPLOAD_KV_TTL_SECONDS: number;
+export declare const PENDING_UPLOAD_KV_PREFIX = "media:pending:";
+/** Map a mime type to a conventional file extension for object key
+ *  construction. Extension is purely cosmetic in R2 — server-side
+ *  serving never infers content-type from the key. */
+export declare function extensionForMime(mime: string): string;
+//# sourceMappingURL=mediaAllowlist.d.ts.map

package/dist/usecase/media/mediaAllowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediaAllowlist.d.ts","sourceRoot":"","sources":["../../../src/usecase/media/mediaAllowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,iEAKvB,CAAC;AAEX,eAAO,MAAM,cAAc,EAAG,eAAwB,CAAC;AAEvD,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,cAAc,CAAC;AAE1F,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAGtE;AAED;;;sDAGsD;AACtD,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAElD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,QAAU,CAAC;AAE9C;;kBAEkB;AAClB,eAAO,MAAM,6BAA6B,QAAU,CAAC;AAErD,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD;;sDAEsD;AACtD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAerD"}

package/dist/usecase/media/mediaAllowlist.js

@@ -0,0 +1,53 @@
+/**
+ * Closed mime allowlist for v0.1.x media uploads. Adapter authors
+ * cannot extend this without a grammar-revise round.
+ *
+ * SVG is intentionally absent from the always-on set — object stores
+ * don't sanitize and a passthrough SVG can carry inline scripts. SVG
+ * uploads are only accepted when the adapter wires the use case with
+ * `allowSvg: true`, typically from a `MEDIA_ALLOW_SVG=1` env opt-in.
+ */
+export const MEDIA_MIME_ALLOWLIST = [
+    "image/png",
+    "image/jpeg",
+    "image/webp",
+    "image/gif",
+];
+export const MEDIA_SVG_MIME = "image/svg+xml";
+export function isAllowedMime(mime, allowSvg) {
+    if (mime === MEDIA_SVG_MIME)
+        return allowSvg;
+    return MEDIA_MIME_ALLOWLIST.includes(mime);
+}
+/** Default upload byte ceiling: 25 MB. Large enough for most cover
+ *  images and short-form social posts; small enough to keep R2 free
+ *  tier viable. Adapters may pass a different value via the use-case
+ *  ctor when they have stricter / looser policies. */
+export const DEFAULT_MAX_BYTES = 25 * 1024 * 1024;
+/** Upload-capability TTL: 15 minutes. Bearer URL is short-lived. */
+export const UPLOAD_URL_TTL_SECONDS = 15 * 60;
+/** KV record TTL: 1 hour. Outlives the upload URL so slow commits
+ *  don't lose the mapping; orphan sweep cleans uncommitted objects
+ *  separately. */
+export const PENDING_UPLOAD_KV_TTL_SECONDS = 60 * 60;
+export const PENDING_UPLOAD_KV_PREFIX = "media:pending:";
+/** Map a mime type to a conventional file extension for object key
+ *  construction. Extension is purely cosmetic in R2 — server-side
+ *  serving never infers content-type from the key. */
+export function extensionForMime(mime) {
+    switch (mime) {
+        case "image/png":
+            return "png";
+        case "image/jpeg":
+            return "jpg";
+        case "image/webp":
+            return "webp";
+        case "image/gif":
+            return "gif";
+        case MEDIA_SVG_MIME:
+            return "svg";
+        default:
+            return "bin";
+    }
+}
+//# sourceMappingURL=mediaAllowlist.js.map

package/dist/usecase/media/mediaAllowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediaAllowlist.js","sourceRoot":"","sources":["../../../src/usecase/media/mediaAllowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;CACH,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG,eAAwB,CAAC;AAIvD,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,QAAiB;IAC3D,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;sDAGsD;AACtD,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,CAAC;AAE9C;;kBAEkB;AAClB,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,CAAC;AAErD,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAEzD;;sDAEsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,KAAK,CAAC;QACf,KAAK,YAAY;YACf,OAAO,KAAK,CAAC;QACf,KAAK,YAAY;YACf,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,KAAK,CAAC;QACf,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC;QACf;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/usecase/procedure/InvokeBuiltinUseCase.d.ts

@@ -0,0 +1,43 @@
+import { type SchemaManifest } from "@aotter/mantle-spec";
+import type { Clock } from "../../domain/port/Clock.js";
+import type { EntryRepository } from "../../domain/port/EntryRepository.js";
+import type { IdGenerator } from "../../domain/port/IdGenerator.js";
+import type { SiteConfigRepository } from "../../domain/port/SiteConfigRepository.js";
+import type { InvokeBuiltinRequest } from "../dto/procedure/index.js";
+/**
+ * `InvokeBuiltinUseCase` — executes the `handler.kind: builtin` op
+ * (POC ADR-0014). The four ops map 1:1 to the entry-writer chokepoint:
+ *
+ *   - `create` → `entries.create({ ..., status: 'draft' })` with a
+ *     generated id. Input is projected through
+ *     `domain/service/BuiltinProjector.projectAndStamp` so only
+ *     Schema-declared keys land in `data` and `x-clam-bind` fields are
+ *     server-stamped from `ctx`.
+ *   - `update` → `entries.update`. Caller supplies `id` +
+ *     `expectedVersion` in the input; OCC enforced at the chokepoint.
+ *   - `upsert` → `update` if `input.id` resolves, else `create`.
+ *   - `delete` → `entries.delete({ id })`.
+ *
+ * Pre-projection original input is forwarded to the chokepoint via
+ * `originalInput`, so lifecycle hook handlers can read side-channel
+ * fields (CAPTCHA tokens, etc.) declared on the Procedure input but
+ * not on the Schema.
+ *
+ * Auth + input/output validation happen upstream in
+ * `InvokeProcedureUseCase`. This use case trusts its `validatedInput`.
+ */
+export declare class InvokeBuiltinUseCase {
+    private readonly entries;
+    private readonly schemasByName;
+    private readonly clock;
+    private readonly idgen;
+    private readonly siteConfig?;
+    constructor(entries: EntryRepository, schemasByName: ReadonlyMap<string, SchemaManifest>, clock: Clock, idgen: IdGenerator, siteConfig?: SiteConfigRepository | undefined);
+    run(request: InvokeBuiltinRequest): Promise<unknown>;
+    private opCreate;
+    private opUpdate;
+    private opUpsert;
+    private opDelete;
+    private opArchive;
+}
+//# sourceMappingURL=InvokeBuiltinUseCase.d.ts.map

package/dist/usecase/procedure/InvokeBuiltinUseCase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvokeBuiltinUseCase.d.ts","sourceRoot":"","sources":["../../../src/usecase/procedure/InvokeBuiltinUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAGtF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,oBAAoB;IAE7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAJX,OAAO,EAAE,eAAe,EACxB,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,EAClD,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,oBAAoB,YAAA;IAG9C,GAAG,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;YA4D5C,QAAQ;YA2BR,QAAQ;YA6BR,QAAQ;YAcR,QAAQ;YAcR,SAAS;CA4CxB"}

package/dist/usecase/procedure/InvokeBuiltinUseCase.js

@@ -0,0 +1,202 @@
+import { canTransition, DiagnosticError, runtimeDiagnostic, } from "@aotter/mantle-spec";
+import { projectAndStamp } from "../../domain/service/BuiltinProjector.js";
+import { assertEntryWritable } from "../../domain/service/io/EntryWriteGuard.js";
+/**
+ * `InvokeBuiltinUseCase` — executes the `handler.kind: builtin` op
+ * (POC ADR-0014). The four ops map 1:1 to the entry-writer chokepoint:
+ *
+ *   - `create` → `entries.create({ ..., status: 'draft' })` with a
+ *     generated id. Input is projected through
+ *     `domain/service/BuiltinProjector.projectAndStamp` so only
+ *     Schema-declared keys land in `data` and `x-clam-bind` fields are
+ *     server-stamped from `ctx`.
+ *   - `update` → `entries.update`. Caller supplies `id` +
+ *     `expectedVersion` in the input; OCC enforced at the chokepoint.
+ *   - `upsert` → `update` if `input.id` resolves, else `create`.
+ *   - `delete` → `entries.delete({ id })`.
+ *
+ * Pre-projection original input is forwarded to the chokepoint via
+ * `originalInput`, so lifecycle hook handlers can read side-channel
+ * fields (CAPTCHA tokens, etc.) declared on the Procedure input but
+ * not on the Schema.
+ *
+ * Auth + input/output validation happen upstream in
+ * `InvokeProcedureUseCase`. This use case trusts its `validatedInput`.
+ */
+export class InvokeBuiltinUseCase {
+    entries;
+    schemasByName;
+    clock;
+    idgen;
+    siteConfig;
+    constructor(entries, schemasByName, clock, idgen, siteConfig) {
+        this.entries = entries;
+        this.schemasByName = schemasByName;
+        this.clock = clock;
+        this.idgen = idgen;
+        this.siteConfig = siteConfig;
+    }
+    async run(request) {
+        const handler = request.procedure.spec.handler;
+        if (handler.kind !== "builtin") {
+            throw new DiagnosticError(runtimeDiagnostic({
+                code: "INTERNAL_ERROR",
+                severity: "error",
+                path: `usecase/InvokeBuiltin/${request.procedure.metadata.name}`,
+                value: handler.kind,
+                expected: "handler.kind: 'builtin' (router should have filtered ref)",
+                message: `InvokeBuiltinUseCase received handler.kind '${handler.kind}'. The router in InvokeProcedureUseCase should have filtered ref handlers — this is a wiring bug.`,
+            }));
+        }
+        const schema = this.schemasByName.get(handler.schema);
+        if (!schema) {
+            throw new DiagnosticError(runtimeDiagnostic({
+                code: "BUILTIN_HANDLER_SCHEMA_UNKNOWN",
+                severity: "error",
+                path: `usecase/InvokeBuiltin/${request.procedure.metadata.name}#/handler/schema`,
+                value: handler.schema,
+                expected: "name of a declared Schema",
+                candidates: [...this.schemasByName.keys()],
+                message: `Procedure '${request.procedure.metadata.name}' (handler.kind: builtin) targets unknown Schema '${handler.schema}'. (Boot validator should have caught this.)`,
+            }));
+        }
+        const now = this.clock.now();
+        const input = request.validatedInput;
+        switch (handler.op) {
+            case "create":
+                return this.opCreate(schema, input, request.ctx, now);
+            case "update":
+                return this.opUpdate(schema, input, request.ctx, now);
+            case "upsert":
+                return this.opUpsert(schema, input, request.ctx, now);
+            case "delete":
+                return this.opDelete(schema, input, request.ctx);
+            case "archive":
+                return this.opArchive(schema, input, request.ctx, now);
+            default: {
+                const _exhaustive = handler.op;
+                throw new DiagnosticError(runtimeDiagnostic({
+                    code: "INTERNAL_ERROR",
+                    severity: "error",
+                    path: `usecase/InvokeBuiltin/${request.procedure.metadata.name}#/handler/op`,
+                    value: _exhaustive,
+                    expected: "one of BUILTIN_OPS",
+                    message: `Builtin op '${String(_exhaustive)}' is in BUILTIN_OPS but not handled by InvokeBuiltinUseCase. Add a case branch.`,
+                }));
+            }
+        }
+    }
+    async opCreate(schema, input, ctx, now) {
+        const opPath = `usecase/InvokeBuiltin/${schema.metadata.name}/create`;
+        const data = projectAndStamp({ schema, input, ctx, clockNow: now });
+        await assertEntryWritable({
+            opPath,
+            entries: this.entries,
+            schema,
+            data,
+            siteConfig: this.siteConfig,
+        });
+        return this.entries.create({
+            id: this.idgen.next(),
+            collection: schema.metadata.name,
+            status: "draft",
+            data,
+            authorId: ctx.user?.id ?? null,
+            now,
+            hookContext: ctx,
+            originalInput: input,
+        });
+    }
+    async opUpdate(schema, input, ctx, now) {
+        const opPath = `usecase/InvokeBuiltin/${schema.metadata.name}/update`;
+        const id = requireField(input, "id", "string");
+        const expectedVersion = requireField(input, "expectedVersion", "number");
+        const data = projectAndStamp({ schema, input, ctx, clockNow: now });
+        await assertEntryWritable({
+            opPath,
+            entries: this.entries,
+            schema,
+            data,
+            excludeId: id,
+            siteConfig: this.siteConfig,
+        });
+        return this.entries.update({
+            id,
+            collection: schema.metadata.name,
+            expectedVersion,
+            data,
+            now,
+            hookContext: ctx,
+            originalInput: input,
+        });
+    }
+    async opUpsert(schema, input, ctx, now) {
+        const id = typeof input["id"] === "string" ? input["id"] : undefined;
+        if (id) {
+            const existing = await this.entries.get(id);
+            if (existing)
+                return this.opUpdate(schema, input, ctx, now);
+        }
+        return this.opCreate(schema, input, ctx, now);
+    }
+    async opDelete(schema, input, ctx) {
+        const id = requireField(input, "id", "string");
+        return this.entries.delete({
+            id,
+            collection: schema.metadata.name,
+            hookContext: ctx,
+            originalInput: input,
+        });
+    }
+    async opArchive(schema, input, ctx, now) {
+        const id = requireField(input, "id", "string");
+        const existing = await this.entries.get(id);
+        if (!existing) {
+            throw new DiagnosticError(runtimeDiagnostic({
+                code: "NOT_FOUND",
+                severity: "error",
+                path: `builtin:archive/${schema.metadata.name}/${id}`,
+                value: id,
+                expected: "id of an existing entry",
+                message: `Entry not found: ${id}.`,
+            }));
+        }
+        // Mirror ArchiveUseCase: state-machine guard + OCC pinned to the
+        // version we just read so guard and chokepoint check the same
+        // snapshot.
+        if (!canTransition(schema, existing.status, "archived")) {
+            throw new DiagnosticError(runtimeDiagnostic({
+                code: "CONFLICT",
+                severity: "error",
+                path: `builtin:archive/${schema.metadata.name}/${id}`,
+                value: existing.status,
+                expected: "row in a state that allows transition to 'archived'",
+                message: `Illegal transition from '${existing.status}' to 'archived'.`,
+            }));
+        }
+        return this.entries.archive({
+            id,
+            collection: schema.metadata.name,
+            expectedVersion: existing.version,
+            now,
+            hookContext: ctx,
+            originalInput: input,
+        });
+    }
+}
+function requireField(input, key, expected) {
+    const v = input[key];
+    const ok = expected === "string" ? typeof v === "string" : typeof v === "number" && Number.isFinite(v);
+    if (!ok) {
+        throw new DiagnosticError(runtimeDiagnostic({
+            code: "INPUT_VALIDATION_FAILED",
+            severity: "error",
+            path: `builtin-input/${key}`,
+            value: v,
+            expected: `${expected} field '${key}' (declare it in Procedure.input.properties so zod validation rejects upstream)`,
+            message: `Builtin op requires '${key}' as a ${expected}. Add it to the Procedure's input schema.`,
+        }));
+    }
+    return v;
+}
+//# sourceMappingURL=InvokeBuiltinUseCase.js.map

package/dist/usecase/procedure/InvokeBuiltinUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvokeBuiltinUseCase.js","sourceRoot":"","sources":["../../../src/usecase/procedure/InvokeBuiltinUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,GAElB,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAGjF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,oBAAoB;IAEZ;IACA;IACA;IACA;IACA;IALnB,YACmB,OAAwB,EACxB,aAAkD,EAClD,KAAY,EACZ,KAAkB,EAClB,UAAiC;QAJjC,YAAO,GAAP,OAAO,CAAiB;QACxB,kBAAa,GAAb,aAAa,CAAqC;QAClD,UAAK,GAAL,KAAK,CAAO;QACZ,UAAK,GAAL,KAAK,CAAa;QAClB,eAAU,GAAV,UAAU,CAAuB;IACjD,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,OAA6B;QACrC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE;gBAChE,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,QAAQ,EAAE,2DAA2D;gBACrE,OAAO,EAAE,+CAA+C,OAAO,CAAC,IAAI,mGAAmG;aACxK,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;gBAChB,IAAI,EAAE,gCAAgC;gBACtC,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,kBAAkB;gBAChF,KAAK,EAAE,OAAO,CAAC,MAAM;gBACrB,QAAQ,EAAE,2BAA2B;gBACrC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;gBAC1C,OAAO,EAAE,cAAc,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,qDAAqD,OAAO,CAAC,MAAM,8CAA8C;aACxK,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC;QAErC,QAAQ,OAAO,CAAC,EAAE,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxD,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxD,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxD,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACnD,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,WAAW,GAAU,OAAO,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;oBAChB,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,yBAAyB,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,cAAc;oBAC5E,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,oBAAoB;oBAC9B,OAAO,EAAE,eAAe,MAAM,CAAC,WAAW,CAAC,iFAAiF;iBAC7H,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,MAAsB,EACtB,KAA8B,EAC9B,GAAmB,EACnB,GAAW;QAEX,MAAM,MAAM,GAAG,yBAAyB,MAAM,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;QACtE,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,MAAM,mBAAmB,CAAC;YACxB,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM;YACN,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACzB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YACrB,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;YAChC,MAAM,EAAE,OAAO;YACf,IAAI;YACJ,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI;YAC9B,GAAG;YACH,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,MAAsB,EACtB,KAA8B,EAC9B,GAAmB,EACnB,GAAW;QAEX,MAAM,MAAM,GAAG,yBAAyB,MAAM,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;QACtE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,MAAM,mBAAmB,CAAC;YACxB,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM;YACN,IAAI;YACJ,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACzB,EAAE;YACF,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;YAChC,eAAe;YACf,IAAI;YACJ,GAAG;YACH,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,MAAsB,EACtB,KAA8B,EAC9B,GAAmB,EACnB,GAAW;QAEX,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,QAAQ;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,MAAsB,EACtB,KAA8B,EAC9B,GAAmB;QAEnB,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACzB,EAAE;YACF,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;YAChC,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,MAAsB,EACtB,KAA8B,EAC9B,GAAmB,EACnB,GAAW;QAEX,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;gBAChB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,mBAAmB,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE;gBACrD,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,yBAAyB;gBACnC,OAAO,EAAE,oBAAoB,EAAE,GAAG;aACnC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,iEAAiE;QACjE,8DAA8D;QAC9D,YAAY;QACZ,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;gBAChB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,mBAAmB,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE;gBACrD,KAAK,EAAE,QAAQ,CAAC,MAAM;gBACtB,QAAQ,EAAE,qDAAqD;gBAC/D,OAAO,EAAE,4BAA4B,QAAQ,CAAC,MAAM,kBAAkB;aACvE,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAC1B,EAAE;YACF,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;YAChC,eAAe,EAAE,QAAQ,CAAC,OAAO;YACjC,GAAG;YACH,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,YAAY,CACnB,KAA8B,EAC9B,GAAW,EACX,QAAW;IAEX,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvG,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;YAChB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,iBAAiB,GAAG,EAAE;YAC5B,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,GAAG,QAAQ,WAAW,GAAG,iFAAiF;YACpH,OAAO,EAAE,wBAAwB,GAAG,UAAU,QAAQ,2CAA2C;SAClG,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,CAAyC,CAAC;AACnD,CAAC"}

package/dist/usecase/procedure/InvokeProcedureUseCase.d.ts

@@ -0,0 +1,50 @@
+import { type Diagnostic } from "@aotter/mantle-spec";
+import type { HandlerRegistry } from "../../domain/port/HandlerRegistry.js";
+import type { InvokeProcedureRequest, InvokeProcedureResponse } from "../dto/procedure/index.js";
+import type { InvokeBuiltinUseCase } from "./InvokeBuiltinUseCase.js";
+/**
+ * `InvokeProcedureUseCase` — in-process invocation of a Procedure.
+ * HTTP-agnostic — the adapter's mount layer wraps this to map to/from
+ * `Request` / `Response`. The test harness exercises the same entry
+ * point.
+ *
+ * Order of operations:
+ *   1. Evaluate `requires.auth.all` predicates against `ctx`. Deny ⇒
+ *      `AUTH_DENIED`.
+ *   2. Validate `input` against the Procedure's `input` JSON Schema.
+ *      Fail ⇒ `INPUT_VALIDATION_FAILED` (first zod issue).
+ *   3. Dispatch by `handler.kind`:
+ *      - `ref`: resolve in registry, call (`InvokeFailure` → unwrap;
+ *        other throws → `INTERNAL_ERROR`).
+ *      - `builtin`: delegate to `InvokeBuiltinUseCase` (project +
+ *        stamp + chokepoint write per POC ADR-0014). When no builtin
+ *        collaborator was injected (test paths, ref-only runtimes) the
+ *        use case returns `HANDLER_BUILTIN_NOT_IN_V010`.
+ *   4. Validate the result against the `output` schema. Fail ⇒
+ *      `OUTPUT_VALIDATION_FAILED` (handler / builtin bug).
+ */
+/**
+ * Throwable carrier for handlers that want to surface a structured
+ * Diagnostic without going through the generic `INTERNAL_ERROR`
+ * envelope. The use case catches it and converts to an
+ * `{ ok: false, diagnostic }` return. Lives here (not in
+ * `usecase/dto/`) because it's a runtime value, not a DTO type.
+ */
+export declare class InvokeFailure extends Error {
+    readonly diagnostic: Diagnostic;
+    constructor(diagnostic: Diagnostic);
+}
+export declare class InvokeProcedureUseCase {
+    private readonly registry;
+    private readonly builtin?;
+    private readonly inputCache;
+    private readonly outputCache;
+    constructor(registry: HandlerRegistry, builtin?: InvokeBuiltinUseCase | undefined);
+    execute<O = unknown>(request: InvokeProcedureRequest): Promise<InvokeProcedureResponse<O>>;
+    /** Test seam — clear validator caches between tests when manifests
+     *  change between runs. Production paths never call this. */
+    _clearValidatorCaches(): void;
+    private compileInput;
+    private compileOutput;
+}
+//# sourceMappingURL=InvokeProcedureUseCase.d.ts.map

package/dist/usecase/procedure/InvokeProcedureUseCase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvokeProcedureUseCase.d.ts","sourceRoot":"","sources":["../../../src/usecase/procedure/InvokeProcedureUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,UAAU,EAGhB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH;;;;;;GAMG;AACH,qBAAa,aAAc,SAAQ,KAAK;aACV,UAAU,EAAE,UAAU;gBAAtB,UAAU,EAAE,UAAU;CAInD;AAED,qBAAa,sBAAsB;IAW/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAL3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;gBAGvC,QAAQ,EAAE,eAAe,EACzB,OAAO,CAAC,EAAE,oBAAoB,YAAA;IAG3C,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;IAoHhG;iEAC6D;IAC7D,qBAAqB,IAAI,IAAI;IAK7B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,aAAa;CAStB"}