@atmem/architect 0.0.0-stage → 0.2.0

package/src/invoice-plan.mjs

@@ -0,0 +1,45 @@
+import {resourceAddress} from './identifiers.mjs';
+import{existingDeployment}from'./deployment-ownership.mjs';
+import{existingReference}from'./existing-references.mjs';
+import{validInvoiceRegion,invoicePartitionGap}from'./invoice-region.mjs';
+
+export const INVOICE_SERVICES={aws:'Amazon ECS',azure:'Azure Container Apps',gcp:'Google Cloud Run',ibm:'IBM Code Engine'};
+export const hasInvoice=project=>project.nodes.some(node=>node.data.kind!=='note'&&node.data.implementation==='invoice-workflow');
+const address=resourceAddress;
+const resourceTypes={aws:['aws_vpc','aws_db_instance','aws_s3_bucket','aws_ecs_cluster'],azure:['azurerm_resource_group','azurerm_postgresql_flexible_server','azurerm_storage_account','azurerm_container_app_environment'],gcp:['google_compute_network','google_sql_database_instance','google_storage_bucket','google_artifact_registry_repository'],ibm:['ibm_code_engine_project','ibm_database','ibm_cos_bucket','ibm_appid_application']};
+
+// One composed delivery unit owns its API, worker, isolated parser, private SQL,
+// original-document store, identities and operating tasks. Extra drawn systems
+// remain in the plan with explicit gaps; they are never silently absorbed/deleted.
+export function invoiceResourcePlan(project){
+ const nodes=project.nodes.filter(node=>node.data.kind!=='note'),gapDetails=[];
+ const add=(id,message,links={})=>gapDetails.push({id,message,...links});
+ const candidates=nodes.filter(node=>node.data.implementation==='invoice-workflow'&&INVOICE_SERVICES[node.data.provider]===node.data.service&&!existingDeployment(node)&&node.data.origin!=='existing');
+ const selected=candidates.length===1?candidates[0]:null;
+ if(!selected)add('invoice-composition-scope','Select one proposed invoice-workflow delivery unit on its exact supported provider/service. Multiple independent workflows require separate compositions.');
+ const browsers=nodes.filter(node=>existingDeployment(node)&&node.data.provider==='tools'&&node.data.binding==='web-browser');
+ const references=nodes.map(node=>existingReference(node)).filter(Boolean);
+ const browserEdges=selected?project.edges.filter(edge=>edge.target===selected.id&&edge.integration==='browser-https'&&browsers.some(node=>node.id===edge.source)):[];
+ const accountingEdges=selected?project.edges.filter(edge=>edge.source===selected.id&&edge.integration==='approved-accounting-api'&&references.some(ref=>ref.id===edge.target)):[];
+ if(selected){
+  if(!browserEdges.length)add('invoice-browser-contract','Connect the existing staff browser to the workflow with browser-https.',{componentIds:[selected.id]});
+  if(accountingEdges.length!==1)add('invoice-accounting-contract','Connect the workflow to exactly one explicitly existing accounting service with approved-accounting-api. Its endpoint, credential and normalized action/idempotency acceptance are destination inputs, not a replacement accounting system.',{componentIds:[selected.id]});
+  const config=selected.data.config||{};
+  if(config.region&&config.region!=='To be selected'&&!validInvoiceRegion(selected.data.provider,config.region))add('invoice-config-region',invoicePartitionGap(selected.data.provider,config.region)||'Preserve the selected placement and propose a canonical provider region within that accepted residency. Country names or expressions are not deployment-region identifiers; this is engineering work, not a request for the user to configure infrastructure.',{componentIds:[selected.id]});
+  for(const[key,expected]of Object.entries({maxPdfBytes:10000000,maxPdfPages:100,retentionDays:90}))if(config[key]!==undefined&&config[key]!==expected)add('invoice-config-'+key,'The invoice implementation supplies '+key+'='+expected+'; preserve the explicit '+config[key]+' requirement and implement that change before claiming coverage.',{componentIds:[selected.id]});
+  for(const key of ['outputContract','modelId','maxInputBytes','maxOutputTokens','memoryMb','containerMemoryBytes','functionTimeoutSeconds','concurrency','logRetentionDays'])if(config[key]!==undefined)add('invoice-config-'+key,'Explicit '+key+' is not mapped by this composed invoice contract; retain and implement that selection instead of substituting the recipe setting.',{componentIds:[selected.id]});
+ }
+ const generatedEdges=new Set([...browserEdges,...(accountingEdges.length===1?accountingEdges:[])].map(edge=>edge.id));
+ const rows=nodes.map(node=>{
+  const d=node.data,existing=existingDeployment(node),reference=references.find(ref=>ref.id===node.id),invoice=selected?.id===node.id;
+  const externalBrowser=existing&&d.provider==='tools'&&d.binding==='web-browser';
+  const row={id:node.id,address:address(node.id),label:d.label,provider:d.provider,service:d.service||d.label,sourceExisting:d.origin==='existing',existing,foundation:false,compute:false,reference:false,externalReference:externalBrowser,existingServiceReference:reference||null,invoice,implemented:invoice||externalBrowser||!!reference,resources:invoice?resourceTypes[d.provider]:[],region:d.config?.region||'To be selected',settings:{},dependencies:project.edges.filter(edge=>edge.target===node.id).map(edge=>edge.source),selection:'Explicit invoice composition or preserved existing reference',costDrivers:invoice?'API/worker/parser/operator compute, private database/backup/storage, NAT/private endpoints, identity, registry, model tokens, retained object versions, logging and notification delivery. Verify current regional rates and quotas; capacity limits are not spending caps.':'Existing system or actor; review its externally owned costs and access contract.',terraform:invoice?'Composed invoice API/worker/parser, durable SQL queue, private originals, review authorization, guarded accounting delivery and operating tasks generated; destination behavior remains unverified':reference?'Existing service reference — preserve without provisioning/import; actual connection acceptance required':externalBrowser?'External staff browser — authenticated workflow channel generated; no browser infrastructure to provision':'Additional required component is not implemented by this invoice composition'};
+  if(!row.implemented)add('resource-'+row.address,d.label+': '+row.terraform+'.',{componentIds:[node.id]});
+  return row;
+ });
+ const connections=project.edges.map(edge=>({id:edge.id,source:edge.source,target:edge.target,data:edge.label||'data',generated:generatedEdges.has(edge.id),status:generatedEdges.has(edge.id)?'Typed invoice contract/source generated; account, authorization and runtime acceptance required':'Additional required integration remains unimplemented'}));
+ for(const edge of connections)if(!edge.generated)add('connection-'+address(edge.id),'Implement the preserved integration '+edge.source+' → '+edge.target+'.',{edgeIds:[edge.id]});
+ const row=selected?rows.find(row=>row.id===selected.id):null;
+ const invoicePlan={entries:row?[{row,provider:row.provider,browserIds:browserEdges.map(edge=>edge.source),accountingId:accountingEdges.length===1?accountingEdges[0].target:null}]:[],componentIds:row?[row.id]:[],edgeIds:[...generatedEdges]};
+ return {revision:project.revision,rows,connections,invoicePlan,gaps:gapDetails.map(gap=>gap.message),gapDetails,accessPlan:{bindings:[],connections:[]},asyncPlan:{entries:[],pipelines:[],componentIds:[],edgeIds:[]},summaryPlan:{entries:[],modelIds:[]},ragPlan:{entries:[],componentIds:[]},sourceContractPlan:{sources:[],connections:[]},webPlan:{entries:[],componentIds:[]},structuredApiPlan:{entries:[]},publicFaqPlan:{entries:[],componentIds:[],editorIds:[],edgeIds:[]},azureStructuredPlan:{entries:[],componentIds:[]},gcpStructuredPlan:{entries:[],componentIds:[]},ibmStructuredPlan:{entries:[],componentIds:[]},scope:'Typed composed invoice implementation; extra required systems and flows remain visible. Source generation and local qualifications do not prove the destination deployment.',sources:[]};
+}

package/src/invoice-region.mjs

@@ -0,0 +1,6 @@
+import {PROVIDER_REGION_PATTERNS,validProviderRegion} from './deployment-region.mjs';
+export const INVOICE_REGION_PATTERNS={...PROVIDER_REGION_PATTERNS,aws:'^[a-z]{2}-[a-z]+-[0-9]{1,2}$'};
+// This domain adapter still has commercial ARN/registry/model contracts. Do not
+// inherit supplied-image partition support without implementing the whole policy.
+export const invoicePartitionGap=(provider,region)=>provider==='aws'&&/^(cn-|us-gov-)/.test(region||'')?'Preserve the requested AWS partition and region. This invoice adapter still has commercial-partition ARN, registry and model contracts; implement partition support without substituting another destination.':null;
+export const validInvoiceRegion=(provider,region)=>validProviderRegion(provider,region)&&!invoicePartitionGap(provider,region);

package/src/invoice-spec-kit.mjs

@@ -0,0 +1,61 @@
+const key=value=>Array.from(new TextEncoder().encode(value),v=>v.toString(16).padStart(2,'0')).join('');
+
+export function applyInvoiceTasks(project,plan,emitted,tasks){
+ for(const entry of plan.invoicePlan?.entries||[])applyInvoiceUnitTasks(project,{...plan,invoicePlan:{...plan.invoicePlan,entries:[entry]}},emitted,tasks);
+}
+function applyInvoiceUnitTasks(project,plan,emitted,tasks){
+ if(!plan.invoicePlan?.entries.length)return;
+ const{row}=plan.invoicePlan.entries[0],directory='terraform/'+(row.modulePath?row.modulePath+'/':''),base=directory+'applications/'+row.address+'/',componentIds=[row.id],requirementIds=(project.needs||[]).filter(need=>need.links?.includes(row.id)).map(need=>need.id);
+ const task=id=>tasks.find(task=>task.id===id);
+ const setup=task('TASK-SETUP');const setupStep='Use the supplied Python 3.13 Linux/amd64 API/worker and isolated parser images. Read '+base+'BUILD.md and TESTING.md. Install the exact provider test-requirements.lock in a Linux Python environment or build Dockerfile.tests. Run tests/start-local-fixture.py only against an existing local Unix Docker socket, then tests/run.py with the owned loopback fixture. Keep SDK environments isolated. Do not ask the user to choose a port, command, queue or runtime already implemented here.';
+ if(row.modulePath)setup.steps.push(setupStep);else setup.steps[1]=setupStep;
+ const resource=task('TASK-RESOURCE-'+key(row.id));
+ resource.steps=[`Preserve this responsibility and linked requirements: ${project.nodes.find(node=>node.id===row.id)?.data.description||row.label}.`,
+  'Inspect terraform/main.tf.json, invoice-contract.json and resource-schedule.json. This composition generates the API, worker, isolated PDF parser, private originals/SQL queue, native staff identities and separate operating tasks. Additional drawn scope remains visible and blocks incomplete exports.',
+  'Read '+base+'invoice_http.py, invoice_identity.py, workflow_identity.py, workflow_configuration.py, invoice_processing.py, invoice_worker.py, approved_http_destination.py and workflow_schema.sql. Current SQL user/reviewer/supervisor admission is separate from valid native login.',
+  'Run the portable tests and independent image/parser checks; retain exact source, dependency, image and tool hashes. Local fixture/model/identity protocols do not prove native cloud behavior or extraction quality.',
+  'Keep API, worker, parser and operator credentials/permissions separate. Populate destination secret references outside Terraform/source; never give model/parser/public tools operator launch or SQL administrator authority.',
+  'Follow the explicit foundation → immutable image publication → manual SQL/bootstrap/membership → operating schedule/alert acceptance → application release sequence. Cloud access, publication, apply and migrations each require existing authorization.',
+  'Record the actual requirement-to-test outcomes, remaining destination/compatibility/security findings and approved owner decisions. No task is complete on generation alone.'];
+ resource.outputs=[base+'runtime/parser sources and locks','terraform/main.tf.json and native tests/invoice.tftest.hcl','Protected local acceptance receipts and exact image/security evidence'];
+ for(const edge of plan.connections.filter(edge=>edge.generated&&(edge.source===row.id||edge.target===row.id))){
+  for(const prefix of ['TASK-CONTRACT-','TASK-INTEGRATION-']){
+   const current=task(prefix+key(edge.id));if(!current)continue;
+   current.steps=[`Read the implemented ${project.edges.find(item=>item.id===edge.id)?.integration} contract in spec-kit/interfaces.json, retaining original component/edge IDs and requirements.`,
+    edge.target===row.id?'Inspect invoice_http.py, invoice_identity.py and workflow_identity.py: raw PDF upload, immutable server-owned storage references, live SQL membership, revision-bound review/approval and denied uploader approvals. Run the shipped HTTP/identity/browser tests.':'Inspect approved_http_destination.py and workflow_worker.py: existing accounting endpoint/scope/credential inputs, exact normalized-action-v1 request/receipt, approval digest, stable key, bounded TLS call and uncertain-outcome fencing. Run local TLS/worker/recovery tests; do not infer actual vendor API compatibility.',
+    'Keep synthetic protocol fixtures separate from independently authorized destination acceptance. Preserve unsupported edge/contract requirements as generator work; never rename/remove them to obtain a pass.'];
+  }
+ }
+ const add=(id,title,dependsOn,steps,outputs,acceptance)=>tasks.push({id,phase:'Invoice delivery',title,status:'todo',dependsOn,steps,outputs,acceptance,componentIds,requirementIds});
+ const source='TASK-INVOICE-SOURCE-'+key(row.id),state='TASK-INVOICE-STATE-'+key(row.id),foundation='TASK-INVOICE-FOUNDATION-'+key(row.id),images='TASK-INVOICE-IMAGES-'+key(row.id),bootstrap='TASK-INVOICE-BOOTSTRAP-'+key(row.id),operations='TASK-INVOICE-OPERATIONS-'+key(row.id),release='TASK-INVOICE-APPLICATION-'+key(row.id);
+ add(source,'Qualify the emitted invoice package locally',['TASK-SETUP','TASK-SECURITY-DESIGN'],['Read '+base+'TESTING.md. Use the exact isolated provider test lock; run shipped tests on an owned loopback PostgreSQL fixture with nonce validation. Never use a client/cloud database.', 'From terraform/, run terraform init -backend=false, terraform validate and terraform test. Retain full native positive/negative-plan evidence; mocks do not inspect an account.', 'Build/test exact runtime, test and parser images from pinned bases/wheels/native packages. Test actual text/scanned PDF extraction, malformed/encrypted/oversize/page-limit behavior, extraction evidence validation, duplicate delivery/restart, review denial, approval edits, uncertain action recovery and expired-only cleanup.', 'Record dependency/security findings and source/image digests. Fix generator causes and regenerate, never hand-edit a single exported bundle.'],['Portable local suite receipt','Native schema/mock, image/parser, security and failure-path evidence'],['Checks target this complete emitted source/dependency set.','Failed, unavailable, stale or fixture-only results remain explicit.']);
+ add(state,'Verify protected state and environment custody',['TASK-SCOPE'],['Read terraform/STATE.md and backend.hcl.example. Production references its reviewed provider-specific protected state/lock backend, with no account/state deployment implicit.', 'Review actual state residency/custody, per-project/environment access, sensitive computed provider values, encryption and version recovery. Supply authentication only through the approved environment chain.', 'With explicit platform-access authorization, verify lock conflict/owner-safe unlock/recovery on an isolated test state. Do not migrate/adopt existing state or disable locking to bypass failure.'],['State owner/access/residency/recovery record','Protected reviewed backend configuration; never in source'],['Actual state protocol and ownership/locking/recovery are evidenced before account planning.']);
+ task('TASK-CLOUD-PLAN').dependsOn.push(source,state);
+ add(foundation,'Apply only the reviewed invoice foundation',['TASK-CLOUD-PLAN','TASK-COST'],['Obtain explicit foundation apply authorization for the exact current plan. Set applications_enabled=false, operations_enabled=false and maintenance_enabled=false.', 'Verify new owned regional database/private routing, original store/lifecycle, registry, native identity and secret-reference configuration. Preserve external accounting, existing organization routes/groups and state.', 'Retain actual resources/identities and rollback/deletion protections; native resource existence does not prove application/SQL/model behavior.'],['Authorized foundation receipt and exact resource inventory'],['Reviewed foundation is observed; no application or scheduled privileged work is prematurely enabled.']);
+ add(images,'Publish qualified immutable API/worker and parser images',[source,foundation],['Use the exact tested runtime/parser digests, registry namespace and supply-chain evidence. Obtain publication authorization; publish without mutable tags in runtime inputs.', 'Review open high-severity findings, native model availability/processing policy, host architecture and native parser redistribution notices. Do not represent cached scans or local protocol mocks as production approval.'],['Authorized immutable image publication and security decision records'],['The actual owned repository contains the qualified digests and unresolved findings have accountable decisions.']);
+ add(bootstrap,'Initialize owned SQL and admit verified staff',[images],['Keep application/maintenance flags false; enable only operations_enabled with the qualified runtime image. Review terraform/OPERATING_JOBS.md and exact operator_deployment output.', 'With separate operator launch/SQL authority, run the fixed initialize task and observe completion plus initialized:true. Never give the application/model an administrator credential.', 'Admit exact native staff subjects and separate SQL user/reviewer/supervisor memberships. Native login alone is not reviewer authority. Populate separate existing accounting/model/parser secret/policy references as documented, outside Terraform/source.', 'Verify native private SQL TLS, role marker/grants, duplicate bootstrap, denied runtime schema/audit mutations and wrong-account/identity behavior.'],['Observed owned bootstrap and membership/secret-reference acceptance'],['Fresh owned schema and correct restricted roles are evidenced; no unrelated deployment or role was adopted.']);
+ add(operations,'Verify scheduled cleanup and actionable monitoring',[bootstrap],['Run fixed maintain/monitor tasks and inspect real successful count/status-only receipts. Verify actual native logging destination and existing on-call recipients/delivery.', 'Enable maintenance only after bootstrap. For IBM, explicitly run install-schedules and check-schedules through the isolated CLI context; these are owned Knative sources outside Terraform, and the boolean alone does not pause/delete installed timers.', 'Observe actual hourly monitor/daily cleanup and inject an approved synthetic failure/missing-run condition. Verify alert evaluation/first-sample or zero-sample behavior and real notification delivery.', 'Review 90-day access/retention eligibility, object versions, SQL backups and lifecycle lag; exercise the separate isolated restore/reconciliation procedure without replaying uncertain accounting effects.'],['Native schedule/task/monitor/alert and restore evidence'],['Ready timer configuration is distinguished from job completion and on-call delivery.','Retention/restore/recovery limits remain explicit; no universal exact erasure claim.']);
+ add(release,'Release and test the complete staff invoice journey',[operations],['Obtain explicit application-release authorization for the exact current plan and digests. Enable applications_enabled only after native bootstrap/operations acceptance.', 'Exercise actual staff sign-in, upload/review/revision/approval, ordinary-uploader denial, extraction quality on representative invoices, duplicate bursts, restart recovery and preserved originals/history.', 'Independently verify existing accounting normalized-action-v1 compatibility and same-key idempotency before enabling uncertain replay. Check provider/residency/model-policy/identity/network paths and customer-data logging boundaries.', 'Retain original requirements and all meaningful limitations, failed checks and owner decisions; produce a deployment/rollback record without treating generated source as live acceptance.'],['Authorized application release and end-to-end evidence'],['Confirmed behavior and boundaries have actual results for this project; no unsupported requirement was removed.']);
+ if(row.modulePath){
+  const child=JSON.parse(emitted[row.modulePath+'/main.tf.json']);
+  const names=[...Object.keys(child.variable||{}),...Object.keys(child.output||{})].filter(name=>name!=='review_approved'&&name.includes('_')).sort((a,b)=>b.length-a.length);
+  const relocate=text=>{let value=text.replaceAll('terraform/main.tf.json',directory+'main.tf.json').replaceAll('terraform/OPERATING_JOBS.md',directory+'OPERATING_JOBS.md');for(const name of names)value=value.replace(new RegExp('\\b'+name+'\\b','g'),row.module+'__'+name);return value;};
+  resource.steps=resource.steps.map((step,index)=>index?relocate(step):step);resource.outputs=resource.outputs.map(relocate);
+  for(const current of tasks.filter(t=>t.id.startsWith('TASK-INVOICE-')&&t.componentIds?.includes(row.id))){current.steps=current.steps.map(relocate);if(current.id===source)current.steps.push('Validate the complete composition from terraform/, then run terraform init -backend=false, terraform validate and terraform test from '+directory+'. Retain both root and unit receipts.');}
+  task(state).steps=['Read terraform/README.md, composition.json and '+directory+'STATE.md. State custody belongs to the whole composition; this unit never chooses a backend for other units. Production remains blocked until root state/locking/access/residency/recovery and operating responsibilities are implemented and independently reviewed.','Keep all root state inputs outside source and obtain explicit authorization before cloud access, migration or deployment.'];
+ }
+ // Generic staging/live/acceptance work must wait for the phased module release.
+ task('TASK-STAGING').dependsOn.push(release);
+}
+
+export function invoiceSpecDocuments(plan){
+ if(!plan.composition)return invoiceUnitDocuments(plan);
+ const files={};for(const entry of plan.invoicePlan?.entries||[]){const single=invoiceUnitDocuments({...plan,invoicePlan:{...plan.invoicePlan,entries:[entry]}}),directory='terraform/'+entry.row.modulePath+'/';files['spec-kit/invoice-delivery-'+key(entry.row.id)+'.md']=Object.values(single)[0].replace('terraform/STATE.md, OPERATING_JOBS.md, OPERATIONS.md, invoice-contract.json and',directory+'STATE.md, '+directory+'OPERATING_JOBS.md, '+directory+'OPERATIONS.md, '+directory+'invoice-contract.json and').replace('applications/'+entry.row.address+'/',directory+'applications/'+entry.row.address+'/')+'\nTerraform inputs and outputs at the composition root use the '+entry.row.module+'__ prefix; unit-local tests retain their local names. Root state acceptance remains a prerequisite.\n';}
+ files['spec-kit/invoice-delivery.md']='# Invoice delivery units\n\n'+Object.keys(files).map(path=>'- '+path).join('\n')+'\n\nRead each unit document and its scoped TASK-INVOICE-* phases. Shared composition state and all unit/interface checks remain prerequisites.\n';
+ return files;
+}
+function invoiceUnitDocuments(plan){
+ if(!plan.invoicePlan?.entries.length)return{};
+ const{row}=plan.invoicePlan.entries[0];
+ return {'spec-kit/invoice-delivery.md':`# Invoice delivery implementation\n\nProvider: ${row.provider}; component: ${row.id}.\n\nThe API, worker, parser, durable SQL queue/outbox, private versioned originals,\nidentity boundaries and operator jobs are supplied source, not tasks for the user\nto invent. Run the dependency-ordered TASK-INVOICE-* phases in tasks.json.\n\nLocal source/native-schema/mock/image tests precede authorized platform/state and\naccount planning. Foundation precedes immutable image publication, SQL/bootstrap\nand staff membership, then real schedules/alerts, then application release. The\nexisting accounting system remains external and its actual normalized action/\nidempotency contract must be accepted independently. No account apply, publication,\nstate migration or customer deployment is authorized by this bundle.\n\nRead terraform/STATE.md, OPERATING_JOBS.md, OPERATIONS.md, invoice-contract.json and\napplications/${row.address}/BUILD.md and TESTING.md. Keep exact original requirements\nand additional unimplemented components visible. All tasks start todo; generated\nsource and prior local qualifications are not this project's deployment evidence.\n`};
+}

package/src/invoice-state.mjs

@@ -0,0 +1,7 @@
+import {protectedState} from './protected-state.mjs';
+// Compatibility adapter: the established invoice default is an explicit policy.
+export function invoiceState(provider){
+ const backend={aws:'s3',azure:'azurerm',gcp:'gcs',ibm:'http'}[provider];
+ if(!backend)throw Error('Invoice state must preserve the selected provider');
+ return protectedState(backend,{title:'Invoice state and environment ownership'});
+}

package/src/invoice-terraform.mjs

@@ -0,0 +1,29 @@
+import{awsInvoiceTerraform}from'./invoice-aws.mjs';
+import{azureInvoiceTerraform}from'./invoice-azure.mjs';
+import{gcpInvoiceTerraform}from'./invoice-gcp.mjs';
+import{ibmInvoiceTerraform}from'./invoice-ibm.mjs';
+import{invoiceState}from'./invoice-state.mjs';
+import{validInvoiceRegion}from'./invoice-region.mjs';
+import{incompleteTerraform}from'./incomplete-terraform.mjs';
+
+// Public dispatch is deliberately separate from isolated native-adapter fixtures.
+// It retains all graph gaps and blocks a partial module from passing as the whole.
+export function invoiceTerraform(project,plan,environment='staging',options={}){
+ const entries=plan.invoicePlan?.entries||[];
+ if(entries.length!==1)return incompleteTerraform(project,plan,environment);
+ const{row}=entries[0],adapter={aws:awsInvoiceTerraform,azure:azureInvoiceTerraform,gcp:gcpInvoiceTerraform,ibm:ibmInvoiceTerraform}[row.provider];
+ if(!adapter)return incompleteTerraform(project,plan,environment);
+ const files=adapter(project,{...row,region:validInvoiceRegion(row.provider,row.region)?row.region:''},environment),config=JSON.parse(files['main.tf.json']);
+ config.locals.unfinished_work=plan.gapDetails.map(gap=>gap.id);
+ config.resource.terraform_data.review_gate.lifecycle.precondition.push({condition:'${length(local.unfinished_work) == 0}',error_message:'Preserved requirements/components/connections are not all implemented. Inspect resource-schedule.json and repair the generator composition; do not clear unfinished_work.'});
+ const state=invoiceState(row.provider);
+ if(environment==='production'&&options.stateScope!=='parent')config.terraform.backend=state.backend;
+ files['main.tf.json']=JSON.stringify(config,null,2)+'\n';
+ files['resource-schedule.json']=JSON.stringify(plan,null,2)+'\n';
+ files['invoice-contract.json']=JSON.stringify({format:'invoice-workflow-v1',provider:row.provider,componentId:row.id,accountingComponentId:entries[0].accountingId,limits:{maxPdfBytes:10000000,maxPdfPages:100,retentionDays:90},review:'Separate live SQL user/reviewer roles; only approved payload hashes admit accounting delivery.',accounting:'Existing normalized-action-v1 adapter, destination contract digest and stable operation identity. Actual accounting compatibility/idempotency is independently accepted; uncertain outcomes are fenced and reconciled, not blindly retried.',evidence:'Generated source and contracts; not account-plan, cloud runtime or production evidence.'},null,2)+'\n';
+ if(options.stateScope==='parent')files['STATE.md']='# Composition-owned state\n\nUse the composition root and its reviewed state custody. This unit does not select a backend for other units. Production stays blocked until whole-composition state ownership, residency, access, locking and recovery have evidence.\n';
+ else Object.assign(files,state.files);
+ files['.gitignore']+='backend.hcl\n*.tfbackend\nreviewed-plan.json\n';
+ files['README.md']+=options.stateScope==='parent'?'\n## Composition unit\n\nRun Terraform from the composition root. This unit retains its application, contracts and protections; it does not select a backend. Read the root composition.json and README.md. Production stays blocked until whole-composition state and operations acceptance.\n':'\n## Whole-project scope and state\n\nRead invoice-contract.json, resource-schedule.json, OPERATING_JOBS.md and STATE.md.\nAdditional requested components/flows/configuration remain visible and block the\nreview gate until implemented. No diagram requirement is removed by this module.\nProduction uses its reviewed provider-specific protected state/locking backend; no\nstate store is deployed or silently borrowed from another cloud. Destination\nstate residency, access, locking and recovery acceptance precede account planning.\n';
+ return files;
+}

package/src/invoice-tests.mjs

@@ -0,0 +1,122 @@
+import sources from'./runtime/invoice-test-sources.json'with{type:'json'};
+import runtime from'./runtime/invoice-sources.json'with{type:'json'};
+import base from'./runtime/python-container-lock.json'with{type:'json'};
+
+export function invoiceTestFiles(provider,address){
+ const root='applications/'+address+'/',files={};
+ for(const[name,original]of Object.entries(sources)){
+  if(!name.endsWith('.py'))continue;
+  let code=original;
+  if(name==='start-durable-fixture.py'){
+   code=code.replace("import argparse\n","import argparse\nimport hashlib\n").replace("name='atmem-durable-qualification'+('-pg18'if args.major=='18'else'')","name='atmem-invoice-'+hashlib.sha256(str(ROOT).encode()).hexdigest()[:12]+('-pg18'if args.major=='18'else'')");
+  }else{
+   if(!code.includes('ROOT=Path(__file__).resolve().parents[2]')&&!['workflow_tls_destination_fixture.py','durable_fixture_tasks.py'].includes(name))throw Error('Review portable invoice test root: '+name);
+   code=code.replaceAll('ROOT=Path(__file__).resolve().parents[2]',"ROOT=Path(__file__).resolve().parents[1]\nsys.path.insert(0,str(ROOT/'parser'))");
+  }
+  code=code.replaceAll("ROOT/'src/runtime/rds-global-ca.pem'","ROOT/'test-fixtures/rds-global-ca.pem'").replaceAll("ROOT/'src/runtime/postgres-qualification-lock.json'","ROOT/'test-fixtures/postgres-qualification-lock.json'").replaceAll("ROOT/'src/runtime'","ROOT").replaceAll("ROOT/'tests/runtime'","ROOT/'tests'").replaceAll(",str(ROOT/'.local/azure-runtime-sdk')",'');
+  if(name==='durable_postgres_acceptance.py')code=code.replace("c.get('name')not in {'atmem-durable-qualification','atmem-durable-qualification-pg18'}","(c.get('name')not in {'atmem-durable-qualification','atmem-durable-qualification-pg18'}and not re.fullmatch(r'atmem-invoice-[0-9a-f]{12}(?:-pg18)?',str(c.get('name',''))))");
+  if(name==='invoice_http_acceptance.py'){
+   const fixture="(ROOT/'benchmarks/convergence/fixtures/invoices/invoice-text.pdf').read_bytes()";
+   if(!code.includes(fixture))throw Error('Review portable PDF transport fixture');
+   code='import base64\n'+code.replace(fixture,"base64.b64decode((ROOT/'test-fixtures/invoice-text.pdf.base64').read_text())");
+  }
+  if(name==='invoice_storage_acceptance.py'&&provider!=='aws'){
+   const start=code.indexOf('class NativeS3InvoiceObjectsTests('),end=code.indexOf("if __name__=='__main__':");
+   if(start<0||end<=start)throw Error('Review isolated provider test boundary');
+   code=code.slice(0,start)+code.slice(end);code=code.replace(/^import boto3\n/m,'').replace(/^from botocore\.[^\n]+\n/gm,'');
+  }
+  if(name==='invoice_parser_rpc_acceptance.py'&&provider!=='azure'){
+   const start=code.indexOf('class AzureParserIdentityTests('),end=code.indexOf('class IbmParserIdentityTests(');
+   if(start<0||end<=start)throw Error('Review Azure-only native SDK test boundary');
+   code=code.slice(0,start)+code.slice(end);
+  }
+  files[root+(name==='start-durable-fixture.py'?'tests/start-local-fixture.py':'tests/'+name)]=code;
+ }
+ files[root+'test-fixtures/postgres-qualification-lock.json']=sources['postgres-qualification-lock.json'];
+ files[root+'test-fixtures/invoice-text.pdf.base64']=sources['invoice-text.pdf.base64']+'\n';
+ files[root+'test-fixtures/rds-global-ca.pem']=runtime['rds-global-ca.pem'];
+ files[root+'test-scope.json']=JSON.stringify({provider,scope:'Owned local SQL and synthetic protocol checks; provider SDK requirements follow the selected delivery lock.',sdkCases:{awsS3:provider==='aws',azureManagedIdentity:provider==='azure'},excludedForeignSdkCases:provider==='aws'?['azure ManagedIdentityCredential']:provider==='azure'?['AWS S3 boto3']:['AWS S3 boto3','azure ManagedIdentityCredential'],boundary:'Exclusion of a foreign SDK case is explicit contract selection, not a skipped test or evidence for that foreign provider.'},null,2)+'\n';
+ files[root+'tests/run.py']=INVOICE_TEST_RUNNER;
+ files[root+'TESTING.md']=INVOICE_TESTING;
+ const patch=base.securityPackages[0];
+ files[root+'Dockerfile.tests']=`FROM ${base.image}\nENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1\nADD --checksum=sha256:${patch.sha256} ${patch.url} /tmp/runtime-security.deb\nRUN dpkg -i /tmp/runtime-security.deb && rm /tmp/runtime-security.deb\nWORKDIR /app\nCOPY test-requirements.lock ./\nRUN python -I -m pip --isolated install --no-cache-dir --only-binary=:all: --require-hashes -r test-requirements.lock\nCOPY *.py *.sql invoice-deployment.json invoice-web.* ./\nCOPY parser/*.py ./parser/\nCOPY tests/ ./tests/\nCOPY test-fixtures/ ./test-fixtures/\nENTRYPOINT ["python", "-I", "tests/run.py"]\n`;
+ files[root+'Dockerfile.tests.dockerignore']='*\n!test-requirements.lock\n!*.py\n!*.sql\n!invoice-deployment.json\n!invoice-web.*\n!parser/\n!parser/*.py\n!tests/\n!tests/*.py\n!test-fixtures/\n!test-fixtures/*\n';
+ return files;
+}
+
+const INVOICE_TEST_RUNNER=`"""Run emitted local acceptance sources; never connect to a cloud database."""
+import argparse
+import fcntl
+import hashlib
+import json
+import os
+from pathlib import Path
+import re
+import subprocess
+import sys
+ROOT=Path(__file__).resolve().parents[1]
+TESTS=['invoice_extraction_acceptance.py','invoice_storage_acceptance.py','invoice_http_acceptance.py','invoice_web_acceptance.py','invoice_identity_acceptance.py','invoice_parser_rpc_acceptance.py','invoice_parser_identity_acceptance.py','invoice_worker_acceptance.py','invoice_operations_acceptance.py','invoice_operator_acceptance.py','invoice_operator_job_acceptance.py','workflow_payload_acceptance.py','workflow_http_acceptance.py','workflow_application_acceptance.py','workflow_bindings_acceptance.py']
+
+if __name__=='__main__':
+    parser=argparse.ArgumentParser(description=__doc__);parser.add_argument('--fixture',required=True);parser.add_argument('--out',required=True);args=parser.parse_args()
+    fixture=Path(args.fixture).resolve();out=Path(args.out).resolve()
+    if out.exists()or not out.is_relative_to(ROOT/'.local'):raise ValueError('Use a fresh private .local output directory')
+    out.mkdir(parents=True,mode=0o700);out.chmod(0o700)
+    # Guarded fixture validation happens before any acceptance test writes SQL.
+    os.environ['ATMEM_WORKFLOW_TEST_CONFIG']=str(fixture);sys.path[:0]=[str(ROOT),str(ROOT/'tests')]
+    from durable_postgres_acceptance import fixture_dsn
+    fixture_dsn()
+    files=[*ROOT.glob('*.py'),*ROOT.glob('*.sql'),*ROOT.glob('*.lock'),*ROOT.glob('invoice-web.*'),*(ROOT/'tests').glob('*.py'),*(ROOT/'test-fixtures').glob('*')]
+    def hashes():return {str(path.relative_to(ROOT)):hashlib.sha256(path.read_bytes()).hexdigest()for path in sorted(files)}
+    before=hashes();checks=[]
+    with (fixture.parent/'invoice-export-tests.lock').open('a')as lock:
+        os.chmod(lock.name,0o600);fcntl.flock(lock,fcntl.LOCK_EX|fcntl.LOCK_NB)
+        for name in TESTS:
+            log=out/(name+'.log')
+            with log.open('wb')as stream:result=subprocess.run([sys.executable,'-I',str(ROOT/'tests'/name)],cwd=ROOT,env={**os.environ,'ATMEM_WORKFLOW_TEST_CONFIG':str(fixture),'PYTHONDONTWRITEBYTECODE':'1'},stdout=stream,stderr=subprocess.STDOUT,timeout=60)
+            counts=re.findall(r'Ran (\\d+) tests in',log.read_text());checks.append({'name':name,'passed':result.returncode==0,'tests':int(counts[0])if len(counts)==1 else None,'log':log.name})
+    passed=all(check['passed']and check['tests']for check in checks)and before==hashes()
+    receipt={'format':'invoice-package-local-tests-v1','passed':passed,'checks':checks,'sourceHashes':before,'sourcesUnchanged':before==hashes(),'cloudOperations':False,'boundary':'Actual emitted source and owned loopback SQL with synthetic identities/storage/model/accounting protocols. Not native cloud authentication, model quality, real parser image, managed restore, account plan or deployment.'}
+    (out/'receipt.json').write_text(json.dumps(receipt,indent=2)+'\\n');print(json.dumps({'passed':passed,'tests':sum(check['tests']or 0 for check in checks),'receipt':str(out/'receipt.json')}));sys.exit(0 if passed else 1)
+`;
+
+const INVOICE_TESTING=`# Portable local invoice acceptance
+
+On Linux/amd64, create a separate Python 3.13 virtual environment from this application
+directory for this provider. Install test-requirements.lock using pip --require-hashes
+--only-binary=:all:. Do not mix IBM/AWS SDK environments or substitute another
+provider's dependency resolution. Install OpenSSL with req -addext support for the
+synthetic loopback TLS tests. No cloud credential is needed.
+
+The wheel hashes target Linux/amd64. On another host, use the emitted Linux test
+image: docker build --platform linux/amd64 -f Dockerfile.tests -t invoice-local-tests .
+It is a separate developer test image, not the delivered API/worker image. Pass a
+private owned loopback fixture configuration and a writable private output directory
+to tests/run.py; do not copy credentials into its build context. Host networking
+must be explicitly enabled/supported by the local Docker engine for loopback SQL.
+No cloud/database/identity credential from the host is implicitly forwarded.
+
+With an existing local Unix Docker socket, explicitly create the synthetic fixture:
+
+    python tests/start-local-fixture.py --docker-host unix:///ABSOLUTE_LOCAL_DOCKER_SOCKET --major 18
+    python tests/run.py --fixture .local/durable-postgres/fixture-pg18.json --out .local/test-run-1
+
+Use the pinned native PostgreSQL image and retain its digest. The fixture binds only
+127.0.0.1, gets a directory-derived owned name, uses private generated credentials
+and validates its schema marker. Never point these tests at a client/cloud database.
+The tests create synthetic accounts/roles/records; keep the fixture disposable and
+run suites serially. No container/database adoption, dump, migration or cloud access
+is implicit. Missing Docker/socket/image/prerequisite is a failed prerequisite,
+not a skipped pass. Review any authorized image download and local resource costs.
+
+The suite covers extraction validation, version-bound storage protocols, signed
+staff/API admission and SQL memberships, upload/review/approval/history, local TLS
+parser/action protocols, worker behavior, guarded operator initialization,
+retention/monitoring and browser safety. AWS includes native SDK shape tests; other
+providers include scripted HTTP contracts without pulling in AWS's SDK. Protocol
+fixtures are not cloud IAM or actual model quality. Real PDF/OCR image acceptance,
+native model examples, destination accounting compatibility, restore and actual
+private-network/scheduled-alert behavior require their separate acceptance tasks.
+Receipts distinguish these boundaries. Keep private .local credentials/logs/state
+out of source control; do not send diagnostic logs containing secrets to a model.
+`;

package/src/journey-workspace.css

@@ -0,0 +1,106 @@
+/* Only the owner-requested stage navigation, board sidebar and consolidated review. */
+.stage-tabs{display:flex;gap:8px;overflow:auto;padding:8px 12px;width:100%;box-sizing:border-box}
+.stage-tabs>button{display:flex;align-items:center;gap:7px;white-space:nowrap;background:var(--paper,#fff);color:var(--ink,#263043);border:1px solid var(--line,#dce2e8);border-radius:8px;padding:10px 14px;cursor:pointer}
+.stage-tabs>button[aria-selected=true]{outline:2px solid var(--accent,#be5679);outline-offset:-2px;font-weight:600}
+.stage-tabs>button.stage-complete{background:#e7f4eb;color:#215d3b;border-color:#a9cdb4}
+.stage-tabs>button>span{font-size:.85em;border:1px solid currentColor;border-radius:50%;width:22px;height:22px;display:grid;place-items:center}
+.unified-journey{display:flex;flex-direction:column;align-items:stretch}
+.unified-journey .journey-current{padding:4px 14px;display:flex;gap:12px;align-items:center}
+.unified-journey .journey-current p{margin:4px 0;flex:1}
+.project-rename{display:flex;align-items:center;min-width:0}.project-rename>svg{opacity:0}.project-rename:hover>svg,.project-rename:focus-within>svg{opacity:1}
+.bar .projects-btn{display:inline-flex;align-items:center;gap:7px;width:auto;min-width:100px;padding:7px 10px}
+.board-surface{position:absolute;inset:0}.board-surface[hidden],.review-workspace[hidden]{display:none!important}
+.board-components{position:absolute;left:12px;top:12px;z-index:15;max-width:270px;max-height:calc(100% - 90px);overflow:auto;background:var(--paper,#fff);border:1px solid var(--line,#dce2e8);border-radius:10px;padding:8px}
+.board-component-tree{padding:10px 0;max-width:245px}.board-component-tree details{padding:8px 0}.board-component-tree button{display:flex;align-items:center;gap:7px;text-align:left;max-width:100%;margin:5px 0}.board-component-tree small{display:block;overflow-wrap:anywhere}
+.board-start{position:absolute;left:50%;top:42%;transform:translate(-50%,-50%);z-index:10;width:min(540px,calc(100% - 40px));background:var(--paper,#fff);border:1px solid var(--line,#dce2e8);border-radius:14px;padding:20px;box-sizing:border-box}.board-start .row{display:flex;flex-wrap:wrap;gap:8px}.board-start small{display:block;margin-top:12px;color:var(--ink-2,#627080)}
+.review-workspace{position:absolute;inset:0;overflow:auto;background:var(--paper,#fff);padding:20px;box-sizing:border-box}
+.review-workspace .doc{position:static;inset:auto;width:auto;max-width:none;overflow:visible;height:auto;box-shadow:none;margin:0 0 24px;padding:12px}
+.review-generation,.review-infrastructure{margin:20px 12px;padding:16px;border:1px solid var(--line,#dce2e8);border-radius:10px}.review-generation .engineering-panel{max-width:none;margin:0;padding:0}.review-infrastructure>summary{cursor:pointer;font-weight:600}.review-workspace .engineering-panel pre{white-space:pre-wrap;overflow-wrap:anywhere}
+.code-preview{white-space:pre;overflow:auto}.code-preview .code-string{color:#a33c31}.code-preview .code-number{color:#236c44}.code-preview .code-keyword{color:#7153ad}.code-preview .code-comment{color:#697780}
+@media(max-width:650px){.stage-tabs{gap:5px;padding:8px}.stage-tabs>button{padding:8px;font-size:12px}.stage-tabs>button>span{width:18px;height:18px}.unified-journey .journey-current{flex-wrap:wrap}.review-workspace{padding:6px}.board-components{max-width:220px}.project-rename .project-name{max-width:150px}}
+
+.choices-workspace{position:absolute;inset:0;overflow:auto;background:var(--paper,#fff);padding:16px}.choices-workspace[hidden]{display:none!important}.choices-workspace .doc{position:static;inset:auto;width:auto;max-width:none;height:auto;overflow:visible;box-shadow:none;margin-bottom:18px}
+
+.bar .projects-btn{color:var(--ink,#243047);border:1px solid var(--line,#cbd4df);border-radius:8px;background:var(--paper,#fff);font-weight:600}.board-surface>.board-components{position:absolute}.review-group{margin:12px;padding:14px;border:1px solid var(--line,#dce2e8);border-radius:10px}.review-group>summary{font-weight:600;cursor:pointer}.review-intro{margin:12px}.review-intro p{color:var(--ink-2,#627080)}
+
+.review-workspace fieldset{min-width:0;box-sizing:border-box}.review-workspace .row{flex-wrap:wrap}.board-component-tree button>svg{flex-shrink:0}.board-component-tree button>span{min-width:0}
+
+.board-surface{--component-sidebar-width:min(245px,45%)}
+.board-surface.has-component-sidebar>.react-flow{width:calc(100% - var(--component-sidebar-width));margin-left:var(--component-sidebar-width)}
+.board-surface>.board-components[data-expanded=true]{left:0;top:0;bottom:0;max-height:none;width:var(--component-sidebar-width);max-width:none;box-sizing:border-box;border-radius:0}
+.board-components .btn{max-width:100%;white-space:normal}
+.board-surface.has-component-sidebar>.toolbar{left:calc(var(--component-sidebar-width) + 12px)}
+.board-surface.has-component-sidebar>.board-start{left:calc(var(--component-sidebar-width) + (100% - var(--component-sidebar-width))/2);width:min(540px,calc(100% - var(--component-sidebar-width) - 24px))}
+
+.code-preview .code-key{color:light-dark(#175b91,#92cfff)}
+.code-preview .code-string{color:light-dark(#a33c31,#ffc0a6)}
+.code-preview .code-number{color:light-dark(#236c44,#9ce5b2)}
+.code-preview .code-keyword{color:light-dark(#7153ad,#d4b8ff)}
+.code-preview .code-comment{color:light-dark(#526171,#b3c0cb)}
+.memory-panel select,.memory-panel textarea{color:var(--ink);background:var(--paper);border:1px solid var(--line);opacity:1}
+.memory-panel textarea::placeholder{color:var(--ink-2);opacity:1}
+.memory-panel option{color:var(--ink);background:var(--paper)}
+.memory-panel button:disabled{background:light-dark(#e5e9ed,#273033);color:light-dark(#556171,#b9c9cc);opacity:1}
+/* A document remains a light paper surface even when the surrounding app is dark. */
+.requirements-paper{color-scheme:light;--ink:#172033;--ink-2:#52616c;--paper:#fffefa;--board:#fafbf9;--line:#7a8696;--accent:#873b50;color:#172033}
+.requirements-paper .btn,.requirements-paper input,.requirements-paper select,.requirements-paper textarea{color:#172033;background:#fffefa;border-color:#7a8696}
+.requirements-paper .btn.primary{background:#f4a4b8;color:#172033}
+.requirements-paper .muted{color:#52616c}
+.app button:disabled{opacity:1;background:light-dark(#e5e9ed,#273033);color:light-dark(#556171,#b9c9cc);cursor:not-allowed}
+.app :is(input,textarea,select):disabled{opacity:1;color:var(--ink-2);background:var(--board)}
+.app input::placeholder,.app textarea::placeholder{color:var(--ink-2);opacity:1}
+.app .resource-schedule article span,.app .resource-schedule article small{color:var(--ink-2)}
+@media(min-width:900px){
+ .bar .project-rename{flex:0 1 480px;max-width:60vw}
+ .bar .project-rename .project-name{width:100%;min-width:0;max-width:none!important;box-sizing:border-box}
+}
+
+/* Onboarding must never obscure the active component picker. */
+.board-surface>.palette{z-index:30;top:12px;left:12px;transform:none;width:min(320px,calc(100% - 24px));max-height:calc(100% - 24px)}
+.board-start-close{position:absolute;top:8px;right:8px}
+.board-start>h2{padding-right:24px}
+.palette-search>.icon{flex-shrink:0}
+
+.turn-state-icon.has-brain{width:24px;display:inline-flex;align-items:center;animation:none}
+.chat{position:relative}.chat-resize-handle{display:none}
+@media(min-width:901px){
+ .app:not(.chat-closed){grid-template-columns:minmax(0,1fr) clamp(320px,var(--chat-panel-width,360px),calc(100vw - 360px))}
+ .chat-resize-handle{display:block;position:absolute;top:0;bottom:0;left:-6px;width:12px;z-index:35;cursor:col-resize;touch-action:none}
+ .chat-resize-handle:hover,.chat-resize-handle:focus-visible{background:var(--accent-soft);outline:2px solid var(--accent);outline-offset:-3px}
+}
+
+.chat-width-toggle{display:none}@media(min-width:901px){.chat-width-toggle{display:inline-flex;margin-left:auto;padding:5px 8px}}
+
+.review-costs,.review-generation{padding:20px;border:1px solid var(--line);border-radius:16px;background:var(--paper);margin:16px 0}
+.review-costs>.doc{padding:0}.review-costs h2,.review-generation h2{font-size:1.25rem;margin-top:0}
+.review-finish{display:flex;align-items:center;justify-content:space-between;gap:20px;padding:20px 0;border-top:1px solid var(--line)}
+.review-finish p{margin:5px 0;color:var(--muted);font-size:.9rem}.review-finish>.btn{flex-shrink:0}
+.chat-working-status{display:flex;align-items:center;gap:10px;padding:12px 16px;border-top:1px solid var(--line);background:var(--paper);font-size:.9rem}
+.chat-working-status .brain-activity{flex-shrink:0}.generation-status{display:flex;gap:8px;align-items:center}
+.engineering-panel .generation-conversation{max-height:none;overflow:visible}.engineering-panel .generation-conversation[open]>.engineering-conversation{max-height:300px;overflow:auto}
+.review-generation .engineering-panel textarea{min-height:72px}.review-generation .engineering-actions{display:block}
+@media(max-width:650px){.review-finish{align-items:stretch;flex-direction:column}.review-finish>.btn{width:100%}}
+.chat-jump-latest{position:absolute;right:24px;bottom:230px;z-index:40;border:1px solid var(--line);border-radius:50%;background:var(--paper);color:var(--ink);box-shadow:0 3px 12px #0002;width:40px;height:40px;font-size:24px;cursor:pointer}
+.project-checks{padding:20px;border:1px solid var(--line);border-radius:16px;background:var(--paper);margin:16px 0}.section-action{display:flex;align-items:center;gap:8px}.section-action h3{margin:0}.section-action>.btn{margin-left:auto}
+.check-rows,.final-checklist ul{padding:0;list-style:none}.check-rows li,.final-checklist li{display:flex;align-items:center;gap:12px;padding:10px 0;border-bottom:1px solid var(--line);font-size:.9rem}.check-rows strong,.final-checklist strong{margin-left:auto;font-size:.85rem}.check-complete{color:#217143}.check-pending{color:#946000}.final-checklist{margin:20px 0}.final-checklist li>span:first-child{width:24px;height:24px;display:grid;place-items:center;border:1px solid currentColor;border-radius:50%;flex-shrink:0}
+[data-theme=dark] .check-complete{color:#80d6a2}[data-theme=dark] .check-pending{color:#f0c575}
+.project-checks pre{max-height:300px;overflow:auto;white-space:pre-wrap}.delivery-state{font-weight:600}
+.message-list>.msg{border-top:1px solid var(--line);padding-top:14px;margin-top:14px}.message-meta{display:flex;align-items:center;justify-content:space-between;gap:12px;font-size:.75rem;color:var(--muted);margin-bottom:6px}.message-meta time{font-variant-numeric:tabular-nums}
+.memory-modal{width:min(1280px,96vw)!important;max-width:1280px!important;height:min(88vh,1000px);overflow:auto}.memory-panel{width:100%}
+.file-tree{min-width:0;overflow:auto;border-right:1px solid var(--line);padding:8px 0;max-height:650px;background:var(--paper)}.file-tree ul{list-style:none;padding:0;margin:0}.file-tree button{display:flex;align-items:center;gap:5px;width:100%;min-height:30px;text-align:left;background:transparent;color:var(--ink);border:0;border-radius:0;font:inherit;font-size:.8rem;cursor:pointer;white-space:nowrap}.file-tree button:hover{background:var(--accent-soft)}.file-tree button.selected{background:var(--accent-soft);box-shadow:inset 2px 0 var(--accent)}.file-tree button>svg{flex-shrink:0}.tree-indent{width:13px;flex-shrink:0}.file-tree button>span:last-child{overflow:hidden;text-overflow:ellipsis}
+.concise-answer{min-width:0}.message-details{display:inline-flex;align-items:center;min-height:32px;padding:2px 0;text-decoration:underline;text-underline-offset:3px;cursor:pointer;font-size:.85rem}
+
+
+.final-checklist li{padding:0}.final-checklist li>button{display:flex;align-items:center;gap:12px;width:100%;padding:12px 4px;border:0;border-radius:6px;background:transparent;color:var(--ink);font:inherit;text-align:left;cursor:pointer}.final-checklist li>button:hover,.final-checklist li>button:focus-visible{background:var(--accent-soft);outline:2px solid var(--ink);outline-offset:-2px}.final-checklist button>span:first-child{width:24px;height:24px;display:grid;place-items:center;border:1px solid currentColor;border-radius:50%;flex-shrink:0}.checklist-arrow{font-size:1.15em}
+
+.inline-note{display:block;max-width:100%;margin:6px 0 10px;line-height:1.5;color:var(--muted);overflow-wrap:anywhere}
+
+.cost-size-selector .btn{display:inline-flex;align-items:center;gap:6px}.cost-size-selector .btn[aria-pressed="true"]{font-weight:600}.cost-selection-status{font-size:.9rem;color:var(--muted)}
+
+.cost-heading{display:flex;align-items:center;justify-content:space-between;gap:12px}.cost-heading h2{margin:0}.cost-heading>.btn{flex-shrink:0}
+
+.memory-heading{display:flex;align-items:center;justify-content:space-between;gap:12px}.memory-heading h2,.memory-heading h3{margin:0}.memory-profile-bar{display:flex;align-items:center;gap:12px;flex-wrap:wrap;padding:12px 0;border-bottom:1px solid var(--line);margin-bottom:12px}.memory-profile-bar label{display:flex;align-items:center;gap:8px}.memory-profile-bar input{max-width:190px}.memory-profile-bar code{font-size:.72rem;overflow-wrap:anywhere}.memory-state{margin-left:auto}.memory-toolbar{display:flex;gap:10px;align-items:center;margin:16px 0 10px}.memory-toolbar input{flex:1;min-width:100px}.memory-toolbar strong{white-space:nowrap;font-size:.85rem}.memory-table-wrap{max-height:50vh;overflow:auto;border:1px solid var(--line);border-radius:10px}.memory-table{width:100%;border-collapse:collapse;font-size:.8rem;table-layout:fixed}.memory-table th{position:sticky;top:0;background:var(--paper);z-index:1;font-weight:600;text-align:left}.memory-table td,.memory-table th{padding:10px 12px;border-bottom:1px solid var(--line);vertical-align:top;overflow-wrap:anywhere}.memory-table th:first-child{width:20%}.memory-table th:nth-child(2){width:35%}.memory-table th:last-child{width:60px}.memory-table td:nth-child(5){font-variant-numeric:tabular-nums;font-size:.73rem}.memory-content{display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden;border:0;padding:0;background:none;color:var(--ink);font:inherit;text-align:left;cursor:pointer}.memory-table .link{padding:0;font:inherit;text-align:left;overflow-wrap:anywhere}.memory-badge{font-size:.72rem;border-radius:20px;padding:3px 6px;background:var(--board)}.memory-badge.active{color:#21633a;background:#e8f4eb}.memory-pagination{display:flex;align-items:center;justify-content:flex-end;gap:10px;padding:12px 0}.memory-pagination>span{margin-right:auto;font-size:.8rem}.memory-preference-form{display:flex;gap:10px;flex-wrap:wrap;padding:12px 0}.memory-preference-form input{flex:1;min-width:140px}.memory-record-detail{padding:16px;border:1px solid var(--line);border-radius:10px;margin:12px 0}.memory-record-detail dl{display:grid;grid-template-columns:140px 1fr;gap:8px;font-size:.8rem}.memory-record-detail dd{margin:0;overflow-wrap:anywhere}.memory-record-detail p{white-space:pre-wrap}.memory-feedback{display:flex;align-items:center;gap:6px;font-size:.8rem;margin:8px 0}.memory-empty{padding:32px;text-align:center;color:var(--muted)}.memory-table-wrap[aria-busy=true]{opacity:.65}.memory-preview{padding:16px;border:1px solid var(--line);border-radius:10px}.memory-preview .btn{margin-right:8px}@media(max-width:700px){.memory-table{min-width:800px}.memory-profile-bar code{font-size:.65rem}.memory-record-detail dl{grid-template-columns:1fr}.memory-toolbar{flex-wrap:wrap}}
+
+.memory-modal{height:auto!important;max-height:88vh!important}.memory-profile-bar input,.memory-toolbar input,.memory-toolbar select,.memory-preference-form input,.memory-preference-form select{font:inherit;font-size:.85rem;min-height:36px;box-sizing:border-box;padding:7px 10px;border:1px solid var(--line);border-radius:8px;background:var(--paper);color:var(--ink)}.memory-table th:last-child{width:84px;white-space:nowrap}.memory-table td:last-child{white-space:nowrap}.memory-table th:nth-child(4){width:90px}.memory-table th:nth-child(5){width:130px}.memory-table th:nth-child(3){width:84px}.memory-toolbar>strong{color:var(--muted);font-weight:500}.memory-pagination .btn{min-height:32px}.memory-record-detail .memory-table{table-layout:auto}.memory-table .memory-content:hover{text-decoration:underline;text-underline-offset:3px}
+
+.location-region-form{display:flex;align-items:flex-end;gap:12px}.location-region-form label{display:flex;flex-direction:column;gap:6px}.location-region-form input{font:inherit;padding:9px 12px;border:1px solid var(--line);border-radius:8px;background:var(--paper);color:var(--ink)}

package/src/journey.mjs

@@ -0,0 +1,97 @@
+// Progress records acknowledge a working draft, never cloud validation or deployment permission.
+// Navigation is independent of completion: opening a section must not accept a
+// decision, advance a checkpoint or send a model request.
+export const DESIGN_SECTIONS=Object.freeze([
+ {id:'board',label:'Board',mode:'design',view:'board'},
+ {id:'scope',label:'Requirements',mode:'design',view:'requirements'},
+ {id:'cloud',label:'Choices',mode:'design',view:'options'},
+ {id:'review',label:'Review',mode:'review',view:'board'},
+ {id:'delivery',label:'Delivery',mode:'design',view:'outputs'},
+].map(Object.freeze));
+export function journeySectionId(id){return ({location:'cloud',architecture:'cloud',estimate:'review'})[id]||id;}
+export function designSection(mode,view){
+ if(mode==='deploy')return DESIGN_SECTIONS[4];
+ if(mode==='estimate'||mode==='review'||view==='terraform')return DESIGN_SECTIONS[3];
+ if(view==='location'||view==='decisions')view='options';
+ return DESIGN_SECTIONS.find(s=>s.mode===mode&&s.view===view)||DESIGN_SECTIONS[0];
+}
+export function completedStages(p){
+ const keys=journeyKeys(p),saved=p.extensions?.journey||{};
+ return {board:p.nodes.some(n=>n.data.kind!=='note'),scope:saved.scope===keys.scope,
+ cloud:cloudMapping(p).ready&&saved.architecture===keys.architecture,
+ review:saved.review===keys.architecture&&saved.estimate===keys.estimate,
+ delivery:saved.delivery===keys.delivery}; // Delivery means the exact package was downloaded, not deployed.
+}
+export function journeyAction(guidance,section='board'){
+ if(section===journeySectionId(guidance.id)&&guidance.checkpoint&&section!=='board')return {kind:'continue',label:guidance.continueLabel};
+ if(section!=='board')return null;
+ const destination={scope:['scope','Review requirements'],location:['cloud','Choose country & region'],review:['review','Review design'],estimate:['review','Review costs'],delivery:['delivery','Review delivery']}[guidance.id];
+ if(destination)return {kind:'navigate',section:destination[0],label:destination[1]};
+ return {kind:guidance.checkpoint?'continue':'assist',label:guidance.checkpoint?guidance.continueLabel:guidance.action};
+}
+const clouds={aws:'AWS',azure:'Azure',gcp:'Google Cloud',ibm:'IBM Cloud'};
+export const CLOUD_SERVICES={
+ aws:['Amazon S3','Amazon Bedrock','Bedrock Guardrails','AWS Lambda','Amazon API Gateway','Amazon Cognito','Amazon OpenSearch Serverless','Amazon OpenSearch Service','Amazon DynamoDB','Amazon RDS','Amazon ECS','AWS Fargate','Amazon CloudWatch','AWS IAM','IAM policy','Amazon VPC','AWS KMS','Amazon SageMaker AI','SageMaker AI','Amazon EventBridge','Amazon SQS'],
+ azure:['Azure Blob Storage','Azure AI Search','Azure OpenAI','Azure OpenAI Service','Microsoft Foundry','Azure AI Foundry','Azure Functions','Azure Container Apps','Azure API Management','Microsoft Entra ID','Azure Key Vault','Azure Monitor','Azure Cosmos DB','Azure SQL','Azure SQL Database','Azure Virtual Network','Azure App Service','Azure Service Bus'],
+ gcp:['Cloud Storage','Google Cloud Storage','Vertex AI','Vertex AI Search','Cloud Run','Cloud Functions','API Gateway','Identity Platform','Cloud IAM','Cloud Logging','Cloud Monitoring','Secret Manager','Cloud SQL','Firestore','BigQuery','Pub/Sub','Google Kubernetes Engine','VPC'],
+ ibm:['IBM Cloud Object Storage','watsonx.ai','watsonx.ai Runtime','watsonx model deployment','watsonx Orchestrate','IBM Cloud Code Engine','IBM Cloud IAM','IBM Cloud Databases for PostgreSQL','IBM Db2','IBM Cloud Kubernetes Service','IBM Cloud Secrets Manager','IBM Cloud Logs','IBM Cloud Monitoring','IBM Cloud VPC','IBM Event Streams']
+};
+const choice=(p,subject)=>[...(p.decisions||[])].reverse().find(d=>d.subject===subject&&d.status==='Accepted')?.decision;
+// Compact change fingerprints, not security/authentication tokens or copies of project text.
+const snapshot=value=>{const text=JSON.stringify(value);let a=2166136261,b=5381;for(let i=0;i<text.length;i++){a=Math.imul(a^text.charCodeAt(i),16777619);b=Math.imul(b,33)^text.charCodeAt(i);}return `${text.length}-${(a>>>0).toString(16)}-${(b>>>0).toString(16)}`;};
+export function journeyKeys(p){
+ const scope=snapshot([p.brief?.application||p.requirements||'',(p.needs||[]).filter(r=>r.source==='user').map(r=>[r.id,r.statement,r.measure]).sort()]);
+ const architecture=snapshot([scope,p.nodes.filter(n=>n.data.kind!=='note').map(n=>[n.id,n.data.label,n.data.service,n.data.provider,n.data.config,n.data.description]).sort(),p.edges.map(e=>[e.source,e.target,e.label]).sort(),choice(p,'platform.cloud'),choice(p,'cloud.region'),choice(p,'data.country')]);
+ const estimate=snapshot([architecture,p.estimate||{}]);return {scope,architecture,estimate,delivery:snapshot([architecture,estimate,p.revision])};
+}
+export function cloudMapping(p){
+ const provider=choice(p,'platform.cloud');
+ const nodes=p.nodes.filter(n=>n.data.kind!=='note'&&n.data.origin!=='existing');
+ const services=CLOUD_SERVICES[provider]||[];
+ const gaps=nodes.flatMap(n=>{
+  const errors=[];
+  // This acknowledges a named working draft, never service availability or
+  // implementation support. Examples are a legacy label fallback, not a registry.
+  const explicit=typeof n.data.service==='string'&&n.data.service.trim()&&!/^(?:storage|compute|database|service|api|ai|unknown|tbd|to be .*|select.*)$/i.test(n.data.service.trim());
+  if(n.data.provider!==provider || !(explicit||services.some(s=>s.toLowerCase()===String(n.data.label||'').toLowerCase())))errors.push(`${n.data.label}: choose a named ${clouds[provider]||'cloud'} service`);
+  if(!n.data.config?.region||/select|unknown|tbd/i.test(n.data.config.region))errors.push(`${n.data.label}: clarify regional or global placement`);
+  return errors;
+ });
+ if(nodes.length>1&&!p.edges.length)gaps.push('Connect the cloud services and describe the interactions');
+ for(const edge of p.edges)if(!edge.label || /^(data|flow|connection)$/i.test(edge.label))gaps.push('Describe what each service connection carries');
+ if(!nodes.length)gaps.push('No proposed cloud services are drawn yet');
+ if(provider&&!Object.hasOwn(CLOUD_SERVICES,provider))gaps.push('The selected cloud has no reviewed journey mapping; preserve the target and clarify its support.');
+ return {provider,ready:Object.hasOwn(CLOUD_SERVICES,provider)&&nodes.length>0&&!gaps.length,gaps,boundary:'named_working_draft_only'};
+}
+export function journey(p){
+ const keys=journeyKeys(p),saved=p.extensions?.journey||{},mapping=cloudMapping(p);
+ const base={keys,mapping,availableModes:['design']};
+ const step=(id,title,reason,action,mode,view,prompt,extra={})=>({...base,id,title,reason,action,mode,view,prompt,...extra});
+ if(!p.nodes.some(n=>n.data.kind!=='note'))return step('idea','Sketch your idea','Tell me the outcome you want. We’ll draw it and clarify the requirements together.','Help me shape the idea','design','board','Help me shape my idea. Ask one useful question about the desired outcome; draw only from what I tell you.');
+ if(saved.scope!==keys.scope)return step('scope','Sketch and document','We have a first design. Let’s check that the document captures what you want before choosing cloud services.','Work through this design','design','requirements','Review the board and requirements together. Briefly summarise the intended outcome and ask the most important unresolved scope question. Update the document from the discussion. Do not jump to costs or deployment.',{checkpoint:'scope',continueLabel:'Continue to cloud options'});
+ if(!mapping.provider)return step('cloud','Explore cloud solutions','We’ll compare how AWS, Azure, Google Cloud and IBM would implement this scope, then choose together.','Explore cloud options','design','options','Compare AWS, Azure, Google Cloud and IBM for our agreed working scope. Populate optionAssessment with actual service combinations for each option, integration tradeoffs and unknowns. Ask one question about existing systems or cloud preference. Do not assume a choice.');
+ if(!choice(p,'data.country')&&!choice(p,'cloud.region'))return step('location','Choose where it will run',`We’re exploring ${clouds[mapping.provider]}. Country and data residency determine which services and regions fit.`,'Discuss country and residency','design','board',`We have chosen ${clouds[mapping.provider]}. Ask which country the users and data should be in, and whether data must stay there. Offer regional choices after the answer; do not silently select a country.`);
+ if(!mapping.ready || saved.architecture!==keys.architecture)return step('architecture',`Build the ${clouds[mapping.provider]} architecture`,mapping.ready?'The board now names cloud services. Let’s check how they connect and what still needs validating.':'Translate the concept into named cloud services, their responsibilities, connections and regional placement.','Develop the cloud architecture','design','board',`Create or refine a concrete ${clouds[mapping.provider]} architecture for our scope and chosen country/region. Return a complete graph proposal using real named services in data.service and data.label, explicit responsibilities in descriptions, meaningful connection labels and region placement. Preserve existing systems and comments. Explain the mapping and ask one useful refinement question. Identify unverified regional availability and integration assumptions. Service candidates: ${CLOUD_SERVICES[mapping.provider].join(', ')}. Current mapping gaps: ${mapping.gaps.join('; ')||'none; discuss the integrations and remaining assumptions'}.`,{checkpoint:mapping.ready?'architecture':null,continueLabel:'Review this cloud design'});
+ base.availableModes=['design','review'];
+ if(saved.review!==keys.architecture)return step('review','Check the design together','We have a concrete service design. Let’s examine security, resilience, integration gaps and the assumptions that need validation.','Walk through the design risks','review','board','Review the concrete cloud architecture against our requirements. Explain the highest-impact risk or integration assumption, identify verification needed, and ask one question. A diagram is not evidence that services work together.',{checkpoint:'review',continueLabel:'Estimate with the remaining risks recorded'});
+ base.availableModes=['design','review','estimate'];
+ if(saved.estimate!==keys.estimate)return step('estimate','Build the cost estimate','We’ll use the actual services and ask about usage, then model sourced running costs and implementation effort.','Work through the costs','estimate','board','Estimate the concrete cloud architecture progressively. Use sourced prices where supported. Ask the single missing usage/model/scale question with the biggest effect. Separate cloud running cost and delivery effort, and keep missing rates explicit.',{checkpoint:'estimate',continueLabel:'Prepare a delivery draft with cost gaps noted'});
+ base.availableModes=['design','review','estimate','deploy'];
+ return step('delivery','Review the handoff','Inspect the captured implementation, requirements and exact check evidence. Missing implementation or validation remains visible.','Review delivery','design','outputs','Review the actual delivery package and its requirements, implementation, infrastructure and recorded checks. Explain the next engineering task from that evidence. Treat design-only output, missing or stale implementation and unexecuted checks explicitly. Do not claim cloud availability, deployment or full project acceptance from a diagram or local check.');
+}
+export function advanceJourney(p,checkpoint){
+ const state=journey(p);
+ if(state.checkpoint!==checkpoint)return p;
+ const key=checkpoint==='review'?'architecture':checkpoint;
+ return {...p,extensions:{...p.extensions,journey:{...p.extensions?.journey,[checkpoint]:state.keys[key]}}};
+}
+
+// Explicit completion actions acknowledge a working draft; navigation never does.
+export function acknowledgeStage(p,stage){
+ const keys=journeyKeys(p),previous=p.extensions?.journey||{},saved={...previous};
+ if(stage==='scope'&&(p.needs?.length||p.brief?.application?.trim()))saved.scope=keys.scope;
+ if(stage==='cloud'&&cloudMapping(p).ready)saved.architecture=keys.architecture;
+ if(stage==='review')saved.review=keys.architecture;
+ if(stage==='delivery')saved.delivery=keys.delivery;
+ return {...p,extensions:{...p.extensions,journey:saved}};
+}