@brightbeamai/chap-coordinator 0.2.13 → 0.3.1

package/dist/methods.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/methods.ts"],"sourcesContent":["/**\n * Typed method definitions.\n *\n * Every CHAP method that ships in either reference implementation\n * gets a typed `Params` and `Result` shape here. The Coordinator's\n * typed facade (`coord.workspace.create`, `coord.task.complete`, …)\n * uses these types so callers get autocomplete and compile-time\n * checking without having to remember field names.\n *\n * These types are hand-maintained against the canonical JSON Schemas\n * under `schemas/`. A future revision will generate this file from\n * the schemas automatically; for now the source of truth remains\n * the running tests under `tests/`.\n *\n * Scope: 39 method handlers shipped by both v0.2 reference\n * implementations (Core + every shipped profile). Spec-only methods\n * are excluded - they would mislead callers into thinking the local\n * Coordinator can dispatch them.\n */\n\nimport type {\n  ArtefactId, JsonPatchOp, ParticipantUri, TaskId,\n  Workspace, WorkspaceId,\n} from \"./types.js\";\n\n// ---- shared building blocks ---------------------------------------\n\nexport interface WorkspaceParam { workspace: WorkspaceId }\nexport interface ActorParam     { from: ParticipantUri }\nexport interface TaskParam      { task_id: TaskId }\n\nexport interface OkResult { ok: true }\n\n// ============================================================\n//   workspace.*\n// ============================================================\n\nexport interface WorkspaceCreateParams extends Partial<WorkspaceParam> {\n  profiles?:           string[];\n  routing_policy_uri?: string;\n  mode?:               \"shadow\" | \"trial\" | \"production\";\n  mode_ceiling?:       \"shadow\" | \"trial\" | \"production\";\n}\nexport interface WorkspaceCreateResult { workspace: WorkspaceId }\n\nexport interface WorkspaceDescribeParams extends WorkspaceParam {}\nexport interface WorkspaceDescribeResult { workspace: Workspace }\n\nexport interface WorkspaceSetProfilesParams extends WorkspaceParam, ActorParam {\n  profiles: string[];\n}\nexport type WorkspaceSetProfilesResult = OkResult;\n\n// ============================================================\n//   participant.*\n// ============================================================\n\nexport interface ParticipantJoinParams extends WorkspaceParam, ActorParam {\n  type: \"human\" | \"agent\" | \"service\" | \"group\" | \"workspace\";\n  role?:        string;\n  scopes?:      string[];\n  capabilities?: Record<string, unknown>;\n  oidc_token?:  unknown;\n  vc?:          unknown;\n  pubkey?:      unknown;\n}\nexport type ParticipantJoinResult = OkResult;\n\nexport interface ParticipantLeaveParams extends WorkspaceParam, ActorParam {\n  reason?: string;\n}\nexport type ParticipantLeaveResult = OkResult;\n\nexport interface ParticipantRotateKeyParams extends WorkspaceParam, ActorParam {\n  pubkey: unknown;\n  reason?: string;\n}\nexport type ParticipantRotateKeyResult = OkResult;\n\nexport interface ParticipantRevokeKeyParams extends WorkspaceParam, ActorParam {\n  kid:    string;\n  reason?: string;\n}\nexport type ParticipantRevokeKeyResult = OkResult;\n\n// ============================================================\n//   task.*\n// ============================================================\n\nexport interface TaskCreateParams extends WorkspaceParam, ActorParam {\n  kind:           string;\n  input:          unknown;\n  assignee?:      ParticipantUri;\n  to?:            ParticipantUri;   // alias for assignee\n  routing_hints?: Record<string, unknown>;\n  deadline?:      string;\n  idempotency_key?: string;\n}\nexport interface TaskCreateResult { task_id: TaskId }\n\nexport interface TaskUpdateParams extends WorkspaceParam, ActorParam, TaskParam {\n  state?:    string;\n  output?:   unknown;\n  progress?: Record<string, unknown>;\n}\nexport type TaskUpdateResult = OkResult;\n\nexport interface TaskCompleteParams extends WorkspaceParam, ActorParam, TaskParam {\n  output?:     unknown;\n  confidence?: number | string;\n}\nexport type TaskCompleteResult = OkResult;\n\n// ============================================================\n//   review.* and decide.*\n// ============================================================\n\nexport interface ReviewRequestParams extends WorkspaceParam, ActorParam, TaskParam {\n  artefact:  unknown;\n  to:        ParticipantUri | ParticipantUri[];\n  rule?:     string;\n  deadline?: string;\n}\nexport interface ReviewRequestResult { state: string; review_id: TaskId }\n\nexport interface DecideApproveParams extends WorkspaceParam, ActorParam, TaskParam {\n  rationale?: string;\n}\nexport type DecideApproveResult = OkResult;\n\nexport interface DecideRejectParams extends WorkspaceParam, ActorParam, TaskParam {\n  rationale: string;\n  category?: string;\n}\nexport type DecideRejectResult = OkResult;\n\nexport interface DecideOverrideParams extends WorkspaceParam, ActorParam, TaskParam {\n  diff:             JsonPatchOp[];\n  rationale:        string;\n  tags?:            string[];\n  policy_refs?:     string[];\n  logical_id?:      string;\n  instance_id?:     string;\n  intent_preserved?: boolean;\n  based_on_artefact?: unknown;\n}\nexport interface DecideOverrideResult {\n  state:                \"completed\";\n  override_artefact_id: ArtefactId;\n  applied:              unknown;\n}\n\nexport interface AbstainDeclareParams extends WorkspaceParam, ActorParam, TaskParam {\n  category:   string;\n  rationale?: string;\n}\nexport type AbstainDeclareResult = OkResult;\n\nexport interface EscalateRaiseParams extends WorkspaceParam, ActorParam, TaskParam {\n  to?:        ParticipantUri;\n  rationale?: string;\n}\nexport interface EscalateRaiseResult { ok: true; to?: ParticipantUri }\n\n// ============================================================\n//   whisper.* (whisper/1.0)\n// ============================================================\n\nexport interface WhisperAskParams extends WorkspaceParam, ActorParam, TaskParam {\n  to:                ParticipantUri;\n  question:          string;\n  options?:          string[];\n  default_on_lapse?: string;\n  lapse_ms?:         number;\n}\nexport interface WhisperAskResult { whisper_id: string }\n\nexport interface WhisperAnswerParams extends WorkspaceParam, ActorParam {\n  whisper_id: string;\n  answer:     string;\n}\nexport type WhisperAnswerResult = OkResult;\n\n// ============================================================\n//   deliberate.* (deliberation/1.0)\n// ============================================================\n\nexport interface DeliberateOpenParams extends WorkspaceParam, ActorParam, TaskParam {\n  rule:        Record<string, unknown>;\n  proposition: unknown;\n  voters:      ParticipantUri[];\n}\nexport interface DeliberateOpenResult { deliberation_id: string }\n\nexport interface DeliberateCommentParams extends WorkspaceParam, ActorParam {\n  deliberation_id: string;\n  text:            string;\n}\nexport type DeliberateCommentResult = OkResult;\n\nexport interface DeliberateVoteParams extends WorkspaceParam, ActorParam {\n  deliberation_id: string;\n  vote:            \"yea\" | \"nay\" | \"abstain\";\n  weight?:         number;\n  rationale?:      string;\n}\nexport type DeliberateVoteResult = OkResult;\n\nexport interface DeliberateCloseParams extends WorkspaceParam, ActorParam {\n  deliberation_id: string;\n}\nexport interface DeliberateCloseResult { outcome: \"approved\" | \"rejected\" | \"no_quorum\" }\n\n// ============================================================\n//   handoff.* (handoff/1.0)\n// ============================================================\n\nexport interface HandoffProposeParams extends WorkspaceParam, ActorParam {\n  to:                ParticipantUri;\n  task_ids:          TaskId[];\n  summary:           string;\n  active_constraints?: Record<string, unknown>;\n}\nexport interface HandoffProposeResult { handoff_id: string }\n\nexport interface HandoffAcceptParams extends WorkspaceParam, ActorParam {\n  handoff_id: string;\n}\nexport type HandoffAcceptResult = OkResult;\n\nexport interface HandoffDeclineParams extends WorkspaceParam, ActorParam {\n  handoff_id: string;\n  reason?:    string;\n}\nexport type HandoffDeclineResult = OkResult;\n\n// ============================================================\n//   control.* (control/1.0)\n// ============================================================\n\nexport interface ControlPauseParams extends WorkspaceParam, ActorParam {\n  reason?: string;\n}\nexport type ControlPauseResult = OkResult;\n\nexport interface ControlResumeParams extends WorkspaceParam, ActorParam {\n  reason?: string;\n}\nexport type ControlResumeResult = OkResult;\n\nexport interface ControlCancelParams extends WorkspaceParam, ActorParam, TaskParam {\n  reason?: string;\n}\nexport type ControlCancelResult = OkResult;\n\nexport interface ControlSupersedeParams extends WorkspaceParam, ActorParam, TaskParam {\n  replacement:        unknown;\n  logical_id?:        string;\n  intent_preserved?:  boolean;\n  reason?:            string;\n}\nexport interface ControlSupersedeResult { artefact_id: ArtefactId }\n\nexport interface ControlSnapshotParams extends WorkspaceParam, ActorParam {\n  label?: string;\n}\nexport interface ControlSnapshotResult { snapshot_id: string }\n\nexport interface ControlRollbackParams extends WorkspaceParam, ActorParam {\n  snapshot_id: string;\n  reason?:     string;\n}\nexport type ControlRollbackResult = OkResult;\n\nexport interface ControlSetModeCeilingParams extends WorkspaceParam, ActorParam {\n  ceiling: \"shadow\" | \"trial\" | \"production\";\n}\nexport type ControlSetModeCeilingResult = OkResult;\n\n// ============================================================\n//   routing.* (routing/1.0)\n// ============================================================\n\nexport interface TaskRouteParams extends WorkspaceParam, ActorParam, TaskParam {\n  candidates: ParticipantUri[];\n}\nexport interface TaskRouteResult {\n  selected:  ParticipantUri;\n  rationale: Record<string, unknown>;\n}\n\nexport interface ReviewDepthParams extends WorkspaceParam, ActorParam, TaskParam {\n  artefact?: unknown;\n  hints?:    Record<string, unknown>;\n}\nexport interface ReviewDepthResult {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling_probability?: number;\n  rationale: Record<string, unknown>;\n}\n\nexport interface EscalateAutoParams extends WorkspaceParam, ActorParam, TaskParam {\n  hints?: Record<string, unknown>;\n}\nexport interface EscalateAutoResult {\n  escalated:        boolean;\n  to?:              ParticipantUri;\n  triggered_rule?:  Record<string, unknown>;\n}\n\n// ============================================================\n//   audit.* (Core + audit-scitt/1.0)\n// ============================================================\n\nexport interface AuditReadParams extends WorkspaceParam {\n  from_seq?: number;\n  limit?:    number;\n}\nexport interface AuditReadResult { entries: unknown[] }\n\nexport interface AuditSubmitToScittParams extends WorkspaceParam, ActorParam {\n  seq:        number;\n  statement?: Record<string, unknown>;\n}\nexport interface AuditSubmitToScittResult { receipt: Record<string, unknown> }\n\nexport interface AuditVerifyReceiptParams extends WorkspaceParam {\n  receipt: Record<string, unknown>;\n}\nexport interface AuditVerifyReceiptResult { valid: boolean }\n\nexport interface AuditVerifyChainParams extends WorkspaceParam {\n  /** Not implemented. Supplying either is refused; see SPECIFICATION.md 10.2. */\n  from_seq?: number;\n  /** Not implemented. Supplying either is refused; see SPECIFICATION.md 10.2. */\n  to_seq?:   number;\n}\n/**\n * The verdict of a local prev_hash chain replay.\n *\n * `status` is terminal and the three outcomes are mutually exclusive: a\n * broken chain is a JSON-RPC error, an unevaluated range is\n * `not_evaluated`, and `verified` requires complete coverage. A caller\n * reading `ok` alone therefore fails closed on a range that was never\n * checked, instead of taking a pass over entries no evidence covers.\n */\nexport interface AuditVerifyChainResult {\n  status:            \"verified\" | \"not_evaluated\";\n  /** True only when `status` is \"verified\". Never true beside a gap. */\n  ok:                boolean;\n  /** Present only when `status` is \"not_evaluated\". */\n  reason?:           \"unchained_prefix\";\n  entries_total:     number;\n  entries_checked:   number;\n  entries_unchecked: number;\n  /** Seq of the first entry inside coverage; null when nothing was checked. */\n  checked_from_seq:  number | null;\n  chain_head:        string;\n}\n\n// ============================================================\n//   Method-name → {params, result} map (single source of truth)\n// ============================================================\n\nexport interface MethodTable {\n  \"workspace.create\":          { params: WorkspaceCreateParams,       result: WorkspaceCreateResult       };\n  \"workspace.describe\":        { params: WorkspaceDescribeParams,     result: WorkspaceDescribeResult     };\n  \"workspace.set_profiles\":    { params: WorkspaceSetProfilesParams,  result: WorkspaceSetProfilesResult  };\n\n  \"participant.join\":          { params: ParticipantJoinParams,       result: ParticipantJoinResult       };\n  \"participant.leave\":         { params: ParticipantLeaveParams,      result: ParticipantLeaveResult      };\n  \"participant.rotate_key\":    { params: ParticipantRotateKeyParams,  result: ParticipantRotateKeyResult  };\n  \"participant.revoke_key\":    { params: ParticipantRevokeKeyParams,  result: ParticipantRevokeKeyResult  };\n\n  \"task.create\":               { params: TaskCreateParams,            result: TaskCreateResult            };\n  \"task.update\":               { params: TaskUpdateParams,            result: TaskUpdateResult            };\n  \"task.complete\":             { params: TaskCompleteParams,          result: TaskCompleteResult          };\n\n  \"review.request\":            { params: ReviewRequestParams,         result: ReviewRequestResult         };\n  \"decide.approve\":            { params: DecideApproveParams,         result: DecideApproveResult         };\n  \"decide.reject\":             { params: DecideRejectParams,          result: DecideRejectResult          };\n  \"decide.override\":           { params: DecideOverrideParams,        result: DecideOverrideResult        };\n  \"abstain.declare\":           { params: AbstainDeclareParams,        result: AbstainDeclareResult        };\n  \"escalate.raise\":            { params: EscalateRaiseParams,         result: EscalateRaiseResult         };\n\n  \"whisper.ask\":               { params: WhisperAskParams,            result: WhisperAskResult            };\n  \"whisper.answer\":            { params: WhisperAnswerParams,         result: WhisperAnswerResult         };\n\n  \"deliberate.open\":           { params: DeliberateOpenParams,        result: DeliberateOpenResult        };\n  \"deliberate.comment\":        { params: DeliberateCommentParams,     result: DeliberateCommentResult     };\n  \"deliberate.vote\":           { params: DeliberateVoteParams,        result: DeliberateVoteResult        };\n  \"deliberate.close\":          { params: DeliberateCloseParams,       result: DeliberateCloseResult       };\n\n  \"handoff.propose\":           { params: HandoffProposeParams,        result: HandoffProposeResult        };\n  \"handoff.accept\":            { params: HandoffAcceptParams,         result: HandoffAcceptResult         };\n  \"handoff.decline\":           { params: HandoffDeclineParams,        result: HandoffDeclineResult        };\n\n  \"control.pause\":             { params: ControlPauseParams,          result: ControlPauseResult          };\n  \"control.resume\":            { params: ControlResumeParams,         result: ControlResumeResult         };\n  \"control.cancel\":            { params: ControlCancelParams,         result: ControlCancelResult         };\n  \"control.supersede\":         { params: ControlSupersedeParams,      result: ControlSupersedeResult      };\n  \"control.snapshot\":          { params: ControlSnapshotParams,       result: ControlSnapshotResult       };\n  \"control.rollback\":          { params: ControlRollbackParams,       result: ControlRollbackResult       };\n  \"control.set_mode_ceiling\":  { params: ControlSetModeCeilingParams, result: ControlSetModeCeilingResult };\n\n  \"task.route\":                { params: TaskRouteParams,             result: TaskRouteResult             };\n  \"review.depth\":              { params: ReviewDepthParams,           result: ReviewDepthResult           };\n  \"escalate.auto\":             { params: EscalateAutoParams,          result: EscalateAutoResult          };\n\n  \"audit.read\":                { params: AuditReadParams,             result: AuditReadResult             };\n  \"audit.submit_to_scitt\":     { params: AuditSubmitToScittParams,    result: AuditSubmitToScittResult    };\n  \"audit.verify_receipt\":      { params: AuditVerifyReceiptParams,    result: AuditVerifyReceiptResult    };\n  \"audit.verify_chain\":        { params: AuditVerifyChainParams,      result: AuditVerifyChainResult      };\n}\n\nexport type MethodName = keyof MethodTable;\nexport type MethodParams<M extends MethodName> = MethodTable[M][\"params\"];\nexport type MethodResult<M extends MethodName> = MethodTable[M][\"result\"];\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}
+{"version":3,"sources":["../src/methods.ts"],"sourcesContent":["/**\n * Typed method definitions.\n *\n * Every CHAP method that ships in either reference implementation\n * gets a typed `Params` and `Result` shape here. The Coordinator's\n * typed facade (`coord.workspace.create`, `coord.task.complete`, …)\n * uses these types so callers get autocomplete and compile-time\n * checking without having to remember field names.\n *\n * These types are hand-maintained against the canonical JSON Schemas\n * under `schemas/`. A future revision will generate this file from\n * the schemas automatically; for now the source of truth remains\n * the running tests under `tests/`.\n *\n * Scope: 39 method handlers shipped by both reference\n * implementations (Core + every shipped profile). Spec-only methods\n * are excluded - they would mislead callers into thinking the local\n * Coordinator can dispatch them.\n */\n\nimport type {\n  ArtefactId, JsonPatchOp, ParticipantUri, TaskId,\n  Workspace, WorkspaceId,\n} from \"./types.js\";\n\n// ---- shared building blocks ---------------------------------------\n\nexport interface WorkspaceParam { workspace: WorkspaceId }\nexport interface ActorParam     { from: ParticipantUri }\nexport interface TaskParam      { task_id: TaskId }\n\nexport interface OkResult { ok: true }\n\n// ============================================================\n//   workspace.*\n// ============================================================\n\nexport interface WorkspaceCreateParams extends Partial<WorkspaceParam> {\n  profiles?:           string[];\n  routing_policy_uri?: string;\n  mode?:               \"shadow\" | \"trial\" | \"production\";\n  mode_ceiling?:       \"shadow\" | \"trial\" | \"production\";\n}\nexport interface WorkspaceCreateResult { workspace: WorkspaceId }\n\nexport interface WorkspaceDescribeParams extends WorkspaceParam {}\nexport interface WorkspaceDescribeResult { workspace: Workspace }\n\nexport interface WorkspaceSetProfilesParams extends WorkspaceParam, ActorParam {\n  profiles: string[];\n}\nexport type WorkspaceSetProfilesResult = OkResult;\n\n// ============================================================\n//   participant.*\n// ============================================================\n\nexport interface ParticipantJoinParams extends WorkspaceParam, ActorParam {\n  type: \"human\" | \"agent\" | \"service\" | \"group\" | \"workspace\";\n  role?:        string;\n  scopes?:      string[];\n  capabilities?: Record<string, unknown>;\n  oidc_token?:  unknown;\n  vc?:          unknown;\n  pubkey?:      unknown;\n}\nexport type ParticipantJoinResult = OkResult;\n\nexport interface ParticipantLeaveParams extends WorkspaceParam, ActorParam {\n  reason?: string;\n}\nexport type ParticipantLeaveResult = OkResult;\n\nexport interface ParticipantRotateKeyParams extends WorkspaceParam, ActorParam {\n  pubkey: unknown;\n  reason?: string;\n}\nexport type ParticipantRotateKeyResult = OkResult;\n\nexport interface ParticipantRevokeKeyParams extends WorkspaceParam, ActorParam {\n  kid:    string;\n  reason?: string;\n}\nexport type ParticipantRevokeKeyResult = OkResult;\n\n// ============================================================\n//   task.*\n// ============================================================\n\nexport interface TaskCreateParams extends WorkspaceParam, ActorParam {\n  kind:           string;\n  input:          unknown;\n  assignee?:      ParticipantUri;\n  to?:            ParticipantUri;   // alias for assignee\n  routing_hints?: Record<string, unknown>;\n  deadline?:      string;\n  idempotency_key?: string;\n}\nexport interface TaskCreateResult { task_id: TaskId }\n\nexport interface TaskUpdateParams extends WorkspaceParam, ActorParam, TaskParam {\n  state?:    string;\n  output?:   unknown;\n  progress?: Record<string, unknown>;\n}\nexport type TaskUpdateResult = OkResult;\n\nexport interface TaskCompleteParams extends WorkspaceParam, ActorParam, TaskParam {\n  output?:     unknown;\n  confidence?: number | string;\n}\nexport type TaskCompleteResult = OkResult;\n\n// ============================================================\n//   review.* and decide.*\n// ============================================================\n\nexport interface ReviewRequestParams extends WorkspaceParam, ActorParam, TaskParam {\n  artefact:  unknown;\n  to:        ParticipantUri | ParticipantUri[];\n  rule?:     string;\n  deadline?: string;\n}\nexport interface ReviewRequestResult { state: string; review_id: TaskId }\n\nexport interface DecideApproveParams extends WorkspaceParam, ActorParam, TaskParam {\n  rationale?: string;\n}\nexport type DecideApproveResult = OkResult;\n\nexport interface DecideRejectParams extends WorkspaceParam, ActorParam, TaskParam {\n  rationale: string;\n  category?: string;\n}\nexport type DecideRejectResult = OkResult;\n\nexport interface DecideOverrideParams extends WorkspaceParam, ActorParam, TaskParam {\n  diff:             JsonPatchOp[];\n  rationale:        string;\n  tags?:            string[];\n  policy_refs?:     string[];\n  logical_id?:      string;\n  instance_id?:     string;\n  intent_preserved?: boolean;\n  based_on_artefact?: unknown;\n}\nexport interface DecideOverrideResult {\n  state:                \"completed\";\n  override_artefact_id: ArtefactId;\n  applied:              unknown;\n}\n\nexport interface AbstainDeclareParams extends WorkspaceParam, ActorParam, TaskParam {\n  category:   string;\n  rationale?: string;\n}\nexport type AbstainDeclareResult = OkResult;\n\nexport interface EscalateRaiseParams extends WorkspaceParam, ActorParam, TaskParam {\n  to?:        ParticipantUri;\n  rationale?: string;\n}\nexport interface EscalateRaiseResult { ok: true; to?: ParticipantUri }\n\n// ============================================================\n//   whisper.* (whisper/1.0)\n// ============================================================\n\nexport interface WhisperAskParams extends WorkspaceParam, ActorParam, TaskParam {\n  to:                ParticipantUri;\n  question:          string;\n  options?:          string[];\n  default_on_lapse?: string;\n  lapse_ms?:         number;\n}\nexport interface WhisperAskResult { whisper_id: string }\n\nexport interface WhisperAnswerParams extends WorkspaceParam, ActorParam {\n  whisper_id: string;\n  answer:     string;\n}\nexport type WhisperAnswerResult = OkResult;\n\n// ============================================================\n//   deliberate.* (deliberation/1.0)\n// ============================================================\n\nexport interface DeliberateOpenParams extends WorkspaceParam, ActorParam, TaskParam {\n  rule:        Record<string, unknown>;\n  proposition: unknown;\n  voters:      ParticipantUri[];\n}\nexport interface DeliberateOpenResult { deliberation_id: string }\n\nexport interface DeliberateCommentParams extends WorkspaceParam, ActorParam {\n  deliberation_id: string;\n  text:            string;\n}\nexport type DeliberateCommentResult = OkResult;\n\nexport interface DeliberateVoteParams extends WorkspaceParam, ActorParam {\n  deliberation_id: string;\n  vote:            \"yea\" | \"nay\" | \"abstain\";\n  weight?:         number;\n  rationale?:      string;\n}\nexport type DeliberateVoteResult = OkResult;\n\nexport interface DeliberateCloseParams extends WorkspaceParam, ActorParam {\n  deliberation_id: string;\n}\nexport interface DeliberateCloseResult { outcome: \"approved\" | \"rejected\" | \"no_quorum\" }\n\n// ============================================================\n//   handoff.* (handoff/1.0)\n// ============================================================\n\nexport interface HandoffProposeParams extends WorkspaceParam, ActorParam {\n  to:                ParticipantUri;\n  task_ids:          TaskId[];\n  summary:           string;\n  active_constraints?: Record<string, unknown>;\n}\nexport interface HandoffProposeResult { handoff_id: string }\n\nexport interface HandoffAcceptParams extends WorkspaceParam, ActorParam {\n  handoff_id: string;\n}\nexport type HandoffAcceptResult = OkResult;\n\nexport interface HandoffDeclineParams extends WorkspaceParam, ActorParam {\n  handoff_id: string;\n  reason?:    string;\n}\nexport type HandoffDeclineResult = OkResult;\n\n// ============================================================\n//   control.* (control/1.0)\n// ============================================================\n\nexport interface ControlPauseParams extends WorkspaceParam, ActorParam {\n  reason?: string;\n}\nexport type ControlPauseResult = OkResult;\n\nexport interface ControlResumeParams extends WorkspaceParam, ActorParam {\n  reason?: string;\n}\nexport type ControlResumeResult = OkResult;\n\nexport interface ControlCancelParams extends WorkspaceParam, ActorParam, TaskParam {\n  reason?: string;\n}\nexport type ControlCancelResult = OkResult;\n\nexport interface ControlSupersedeParams extends WorkspaceParam, ActorParam, TaskParam {\n  replacement:        unknown;\n  logical_id?:        string;\n  intent_preserved?:  boolean;\n  reason?:            string;\n}\nexport interface ControlSupersedeResult { artefact_id: ArtefactId }\n\nexport interface ControlSnapshotParams extends WorkspaceParam, ActorParam {\n  label?: string;\n}\nexport interface ControlSnapshotResult { snapshot_id: string }\n\nexport interface ControlRollbackParams extends WorkspaceParam, ActorParam {\n  snapshot_id: string;\n  reason?:     string;\n}\nexport type ControlRollbackResult = OkResult;\n\nexport interface ControlSetModeCeilingParams extends WorkspaceParam, ActorParam {\n  ceiling: \"shadow\" | \"trial\" | \"production\";\n}\nexport type ControlSetModeCeilingResult = OkResult;\n\n// ============================================================\n//   routing.* (routing/1.0)\n// ============================================================\n\nexport interface TaskRouteParams extends WorkspaceParam, ActorParam, TaskParam {\n  candidates: ParticipantUri[];\n}\nexport interface TaskRouteResult {\n  selected:  ParticipantUri;\n  rationale: Record<string, unknown>;\n}\n\nexport interface ReviewDepthParams extends WorkspaceParam, ActorParam, TaskParam {\n  artefact?: unknown;\n  hints?:    Record<string, unknown>;\n}\nexport interface ReviewDepthResult {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling_probability?: number;\n  rationale: Record<string, unknown>;\n}\n\nexport interface EscalateAutoParams extends WorkspaceParam, ActorParam, TaskParam {\n  hints?: Record<string, unknown>;\n}\nexport interface EscalateAutoResult {\n  escalated:        boolean;\n  to?:              ParticipantUri;\n  triggered_rule?:  Record<string, unknown>;\n}\n\n// ============================================================\n//   audit.* (Core + audit-scitt/1.0)\n// ============================================================\n\nexport interface AuditReadParams extends WorkspaceParam {\n  from_seq?: number;\n  limit?:    number;\n}\nexport interface AuditReadResult { entries: unknown[] }\n\nexport interface AuditSubmitToScittParams extends WorkspaceParam, ActorParam {\n  seq:        number;\n  statement?: Record<string, unknown>;\n}\nexport interface AuditSubmitToScittResult { receipt: Record<string, unknown> }\n\nexport interface AuditVerifyReceiptParams extends WorkspaceParam {\n  receipt: Record<string, unknown>;\n}\nexport interface AuditVerifyReceiptResult { valid: boolean }\n\nexport interface AuditVerifyChainParams extends WorkspaceParam {\n  /** Not implemented. Supplying either is refused; see SPECIFICATION.md 10.2. */\n  from_seq?: number;\n  /** Not implemented. Supplying either is refused; see SPECIFICATION.md 10.2. */\n  to_seq?:   number;\n}\n/**\n * The verdict of a local prev_hash chain replay.\n *\n * `status` is terminal and the three outcomes are mutually exclusive: a\n * broken chain is a JSON-RPC error, an unevaluated range is\n * `not_evaluated`, and `verified` requires complete coverage. A caller\n * reading `ok` alone therefore fails closed on a range that was never\n * checked, instead of taking a pass over entries no evidence covers.\n */\nexport interface AuditVerifyChainResult {\n  status:            \"verified\" | \"not_evaluated\";\n  /** True only when `status` is \"verified\". Never true beside a gap. */\n  ok:                boolean;\n  /** Present only when `status` is \"not_evaluated\". */\n  reason?:           \"unchained_prefix\";\n  entries_total:     number;\n  entries_checked:   number;\n  entries_unchecked: number;\n  /** Seq of the first entry inside coverage; null when nothing was checked. */\n  checked_from_seq:  number | null;\n  chain_head:        string;\n}\n\n// ============================================================\n//   Method-name → {params, result} map (single source of truth)\n// ============================================================\n\nexport interface MethodTable {\n  \"workspace.create\":          { params: WorkspaceCreateParams,       result: WorkspaceCreateResult       };\n  \"workspace.describe\":        { params: WorkspaceDescribeParams,     result: WorkspaceDescribeResult     };\n  \"workspace.set_profiles\":    { params: WorkspaceSetProfilesParams,  result: WorkspaceSetProfilesResult  };\n\n  \"participant.join\":          { params: ParticipantJoinParams,       result: ParticipantJoinResult       };\n  \"participant.leave\":         { params: ParticipantLeaveParams,      result: ParticipantLeaveResult      };\n  \"participant.rotate_key\":    { params: ParticipantRotateKeyParams,  result: ParticipantRotateKeyResult  };\n  \"participant.revoke_key\":    { params: ParticipantRevokeKeyParams,  result: ParticipantRevokeKeyResult  };\n\n  \"task.create\":               { params: TaskCreateParams,            result: TaskCreateResult            };\n  \"task.update\":               { params: TaskUpdateParams,            result: TaskUpdateResult            };\n  \"task.complete\":             { params: TaskCompleteParams,          result: TaskCompleteResult          };\n\n  \"review.request\":            { params: ReviewRequestParams,         result: ReviewRequestResult         };\n  \"decide.approve\":            { params: DecideApproveParams,         result: DecideApproveResult         };\n  \"decide.reject\":             { params: DecideRejectParams,          result: DecideRejectResult          };\n  \"decide.override\":           { params: DecideOverrideParams,        result: DecideOverrideResult        };\n  \"abstain.declare\":           { params: AbstainDeclareParams,        result: AbstainDeclareResult        };\n  \"escalate.raise\":            { params: EscalateRaiseParams,         result: EscalateRaiseResult         };\n\n  \"whisper.ask\":               { params: WhisperAskParams,            result: WhisperAskResult            };\n  \"whisper.answer\":            { params: WhisperAnswerParams,         result: WhisperAnswerResult         };\n\n  \"deliberate.open\":           { params: DeliberateOpenParams,        result: DeliberateOpenResult        };\n  \"deliberate.comment\":        { params: DeliberateCommentParams,     result: DeliberateCommentResult     };\n  \"deliberate.vote\":           { params: DeliberateVoteParams,        result: DeliberateVoteResult        };\n  \"deliberate.close\":          { params: DeliberateCloseParams,       result: DeliberateCloseResult       };\n\n  \"handoff.propose\":           { params: HandoffProposeParams,        result: HandoffProposeResult        };\n  \"handoff.accept\":            { params: HandoffAcceptParams,         result: HandoffAcceptResult         };\n  \"handoff.decline\":           { params: HandoffDeclineParams,        result: HandoffDeclineResult        };\n\n  \"control.pause\":             { params: ControlPauseParams,          result: ControlPauseResult          };\n  \"control.resume\":            { params: ControlResumeParams,         result: ControlResumeResult         };\n  \"control.cancel\":            { params: ControlCancelParams,         result: ControlCancelResult         };\n  \"control.supersede\":         { params: ControlSupersedeParams,      result: ControlSupersedeResult      };\n  \"control.snapshot\":          { params: ControlSnapshotParams,       result: ControlSnapshotResult       };\n  \"control.rollback\":          { params: ControlRollbackParams,       result: ControlRollbackResult       };\n  \"control.set_mode_ceiling\":  { params: ControlSetModeCeilingParams, result: ControlSetModeCeilingResult };\n\n  \"task.route\":                { params: TaskRouteParams,             result: TaskRouteResult             };\n  \"review.depth\":              { params: ReviewDepthParams,           result: ReviewDepthResult           };\n  \"escalate.auto\":             { params: EscalateAutoParams,          result: EscalateAutoResult          };\n\n  \"audit.read\":                { params: AuditReadParams,             result: AuditReadResult             };\n  \"audit.submit_to_scitt\":     { params: AuditSubmitToScittParams,    result: AuditSubmitToScittResult    };\n  \"audit.verify_receipt\":      { params: AuditVerifyReceiptParams,    result: AuditVerifyReceiptResult    };\n  \"audit.verify_chain\":        { params: AuditVerifyChainParams,      result: AuditVerifyChainResult      };\n}\n\nexport type MethodName = keyof MethodTable;\nexport type MethodParams<M extends MethodName> = MethodTable[M][\"params\"];\nexport type MethodResult<M extends MethodName> = MethodTable[M][\"result\"];\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/dist/methods.d.cts

@@ -14,7 +14,7 @@ import { WorkspaceId, Workspace, ParticipantUri, TaskId, JsonPatchOp, ArtefactId
  * the schemas automatically; for now the source of truth remains
  * the running tests under `tests/`.
  *
- * Scope: 39 method handlers shipped by both v0.2 reference
+ * Scope: 39 method handlers shipped by both reference
  * implementations (Core + every shipped profile). Spec-only methods
  * are excluded - they would mislead callers into thinking the local
  * Coordinator can dispatch them.

package/dist/methods.d.ts

@@ -14,7 +14,7 @@ import { WorkspaceId, Workspace, ParticipantUri, TaskId, JsonPatchOp, ArtefactId
  * the schemas automatically; for now the source of truth remains
  * the running tests under `tests/`.
  *
- * Scope: 39 method handlers shipped by both v0.2 reference
+ * Scope: 39 method handlers shipped by both reference
  * implementations (Core + every shipped profile). Spec-only methods
  * are excluded - they would mislead callers into thinking the local
  * Coordinator can dispatch them.

package/dist/patch.cjs

@@ -29,6 +29,22 @@ var PatchError = class extends Error {
 };
 var DANGEROUS_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
 var ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;
+function jsonType(value) {
+  if (value === null) return "null";
+  if (Array.isArray(value)) return "array";
+  switch (typeof value) {
+    case "object":
+      return "object";
+    case "string":
+      return "string";
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    default:
+      return "null";
+  }
+}
 function arrayIndex(seg) {
   if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);
   return Number(seg);
@@ -68,7 +84,7 @@ function navigate(doc, parts) {
       }
       parent = parent[part];
     } else {
-      throw new PatchError(`Cannot traverse into ${typeof parent} at ${JSON.stringify(part)}`);
+      throw new PatchError(`Cannot traverse into ${jsonType(parent)} at ${JSON.stringify(part)}`);
     }
   }
   const last = parts[parts.length - 1];
@@ -138,7 +154,7 @@ function applyOne(doc, op) {
     } else if (parent !== null && typeof parent === "object") {
       parent[key] = op.value;
     } else {
-      throw new PatchError(`Cannot add into ${typeof parent}`);
+      throw new PatchError(`Cannot add into ${jsonType(parent)}`);
     }
     return doc;
   }
@@ -148,7 +164,7 @@ function applyOne(doc, op) {
     if (parts.length === 0) return op.value;
     const [parent, key] = navigate(doc, parts);
     if (Array.isArray(parent)) {
-      const idx = key;
+      const idx = key === "-" ? -1 : key;
       if (idx < 0 || idx >= parent.length) {
         throw new PatchError(`Path not found for replace: ${path}`);
       }
@@ -159,7 +175,7 @@ function applyOne(doc, op) {
       }
       parent[key] = op.value;
     } else {
-      throw new PatchError(`Cannot replace in ${typeof parent}`);
+      throw new PatchError(`Cannot replace in ${jsonType(parent)}`);
     }
     return doc;
   }
@@ -168,7 +184,7 @@ function applyOne(doc, op) {
     if (parts.length === 0) throw new PatchError("Cannot remove root.");
     const [parent, key] = navigate(doc, parts);
     if (Array.isArray(parent)) {
-      const idx = key;
+      const idx = key === "-" ? -1 : key;
       if (idx < 0 || idx >= parent.length) {
         throw new PatchError(`Index out of range for remove: ${path}`);
       }
@@ -179,7 +195,7 @@ function applyOne(doc, op) {
       }
       delete parent[key];
     } else {
-      throw new PatchError(`Cannot remove from ${typeof parent}`);
+      throw new PatchError(`Cannot remove from ${jsonType(parent)}`);
     }
     return doc;
   }

package/dist/patch.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/patch.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator/patch\n *\n * RFC 6902 JSON Patch implementation, plus a small diff computer that\n * produces a patch from two values. Used by the Coordinator for\n * `decide.override` apply and by the playground UI (in the browser) to\n * compute the patch from a textarea edit.\n *\n * Implements all six RFC 6902 operations (add, remove, replace, move,\n * copy, test) with semantics identical to the Python reference. Path\n * segments that enable prototype pollution in a JavaScript runtime\n * (`__proto__`, `constructor`, `prototype`) are rejected, so the two\n * references accept and reject exactly the same patches.\n */\n\nimport type { JsonPatchOp } from \"./types.js\";\n\nexport class PatchError extends Error {}\n\n// Rejected in every JSON Pointer segment: these enable prototype pollution.\nconst DANGEROUS_KEYS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n// An array index is an RFC 6901 array index: \"0\" or a positive integer with no\n// leading zero. A shared strict rule keeps the two references in step -- JS\n// Number() and Python int() otherwise accept disjoint token sets (e.g. \"1e1\",\n// \"0x0a\", \"3.0\", \"\", \"1_0\"), which would apply the same patch differently.\nconst ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;\n\nfunction arrayIndex(seg: string): number {\n  if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);\n  return Number(seg);\n}\n\nfunction unescape(token: string): string {\n  return token.replace(/~1/g, \"/\").replace(/~0/g, \"~\");\n}\n\nfunction splitPath(path: string): string[] {\n  if (path === \"\") return [];\n  if (!path.startsWith(\"/\")) {\n    throw new PatchError(`JSON Pointer must start with '/': ${JSON.stringify(path)}`);\n  }\n  const segments = path.slice(1).split(\"/\").map(unescape);\n  for (const seg of segments) {\n    if (DANGEROUS_KEYS.has(seg)) {\n      throw new PatchError(`Refusing unsafe path segment ${JSON.stringify(seg)}`);\n    }\n  }\n  return segments;\n}\n\n/** Navigate to the parent of the target; return [parent, lastKey]. */\nfunction navigate(doc: any, parts: string[]): [any, string | number] {\n  if (parts.length === 0) {\n    throw new PatchError(\"Cannot operate on root with this helper.\");\n  }\n  let parent = doc;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (Array.isArray(parent)) {\n      const idx = arrayIndex(part);\n      if (idx >= parent.length) {\n        throw new PatchError(`Index out of range at /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[idx];\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, part)) {\n        throw new PatchError(`Path not found: /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[part];\n    } else {\n      throw new PatchError(`Cannot traverse into ${typeof parent} at ${JSON.stringify(part)}`);\n    }\n  }\n  const last = parts[parts.length - 1];\n  if (Array.isArray(parent)) {\n    if (last === \"-\") return [parent, \"-\"];\n    return [parent, arrayIndex(last)];\n  }\n  return [parent, last];\n}\n\nfunction getAt(doc: any, path: string): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) return doc;\n  const [parent, key] = navigate(doc, parts);\n  if (Array.isArray(parent)) {\n    if (key === \"-\") throw new PatchError(\"Cannot read '-' position.\");\n    const idx = key as number;\n    if (idx < 0 || idx >= parent.length) throw new PatchError(`Index out of range: ${path}`);\n    return parent[idx];\n  }\n  if (\n    parent === null ||\n    typeof parent !== \"object\" ||\n    !Object.prototype.hasOwnProperty.call(parent, key)\n  ) {\n    throw new PatchError(`Path not found: ${path}`);\n  }\n  return parent[key as string];\n}\n\nfunction clone<T>(v: T): T {\n  return v === undefined ? v : (JSON.parse(JSON.stringify(v)) as T);\n}\n\nfunction deepEqual(a: any, b: any): boolean {\n  if (a === b) return true;\n  if (a === null || b === null) return a === b;\n  if (typeof a !== typeof b) return false;\n  if (typeof a !== \"object\") return a === b;\n  const aArr = Array.isArray(a);\n  if (aArr !== Array.isArray(b)) return false;\n  if (aArr) {\n    if (a.length !== b.length) return false;\n    for (let i = 0; i < a.length; i++) if (!deepEqual(a[i], b[i])) return false;\n    return true;\n  }\n  const ak = Object.keys(a);\n  const bk = Object.keys(b);\n  if (ak.length !== bk.length) return false;\n  for (const k of ak) {\n    if (!Object.prototype.hasOwnProperty.call(b, k)) return false;\n    if (!deepEqual(a[k], b[k])) return false;\n  }\n  return true;\n}\n\nfunction applyOne(doc: any, op: JsonPatchOp): any {\n  const kind = op.op;\n  const path = op.path ?? \"\";\n\n  if (kind === \"add\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'add' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value; // replace whole document\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      if (key === \"-\") {\n        parent.push(op.value);\n      } else {\n        const idx = key as number;\n        if (idx < 0 || idx > parent.length) {\n          throw new PatchError(`Index out of range for add: ${path}`);\n        }\n        parent.splice(idx, 0, op.value);\n      }\n    } else if (parent !== null && typeof parent === \"object\") {\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot add into ${typeof parent}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"replace\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'replace' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value;\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      const idx = key as number;\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[idx] = op.value;\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot replace in ${typeof parent}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"remove\") {\n    const parts = splitPath(path);\n    if (parts.length === 0) throw new PatchError(\"Cannot remove root.\");\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      const idx = key as number;\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Index out of range for remove: ${path}`);\n      }\n      parent.splice(idx, 1);\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for remove: ${path}`);\n      }\n      delete parent[key as string];\n    } else {\n      throw new PatchError(`Cannot remove from ${typeof parent}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"copy\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'copy' requires 'from'\");\n    const value = clone(getAt(doc, src));\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"move\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'move' requires 'from'\");\n    // RFC 6902 4.4: 'from' MUST NOT be a proper prefix of 'path'.\n    if (path.startsWith(src + \"/\")) {\n      throw new PatchError(\"'move' cannot move a location into its own child.\");\n    }\n    const value = clone(getAt(doc, src));\n    doc = applyOne(doc, { op: \"remove\", path: src });\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"test\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'test' requires 'value'\");\n    const actual = getAt(doc, path);\n    if (!deepEqual(actual, op.value)) throw new PatchError(`'test' failed at ${path}`);\n    return doc;\n  }\n\n  throw new PatchError(`Unsupported op: ${JSON.stringify(kind)}`);\n}\n\nconst MAX_PATCH_OPS = 1000;\nconst MAX_DOCUMENT_NODES = 100_000;\n\nfunction nodeCount(value: unknown): number {\n  if (Array.isArray(value)) {\n    let n = 1;\n    for (const v of value) n += nodeCount(v);\n    return n;\n  }\n  if (value !== null && typeof value === \"object\") {\n    let n = 1;\n    for (const v of Object.values(value as Record<string, unknown>)) n += nodeCount(v);\n    return n;\n  }\n  return 1;\n}\n\nexport function applyJsonPatch(doc: unknown, ops: JsonPatchOp[]): unknown {\n  if (ops.length > MAX_PATCH_OPS) {\n    throw new PatchError(`Patch has too many operations (${ops.length} > ${MAX_PATCH_OPS})`);\n  }\n  let out: any = JSON.parse(JSON.stringify(doc));\n  for (const op of ops) {\n    out = applyOne(out, op);\n    if (nodeCount(out) > MAX_DOCUMENT_NODES) {\n      throw new PatchError(`Patched document exceeds the node limit (${MAX_DOCUMENT_NODES})`);\n    }\n  }\n  return out;\n}\n\n// ============================================================\n//   diff: produce a patch that transforms `from` into `to`\n// ============================================================\n\n/**\n * Compute an RFC 6902 patch that, when applied to `from`, produces\n * `to`. Walks objects key-by-key; arrays use a shallow whole-array\n * replace if any element differs. Sufficient for the playground's\n * draft-edit use case where drafts are small JSON objects.\n */\nexport function diffJsonPatch(from: unknown, to: unknown, basePath = \"\"): JsonPatchOp[] {\n  const ops: JsonPatchOp[] = [];\n\n  if (typeof from !== typeof to || Array.isArray(from) !== Array.isArray(to)) {\n    ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    return ops;\n  }\n\n  if (from === null || to === null || typeof from !== \"object\") {\n    if (from !== to) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  if (Array.isArray(from) && Array.isArray(to)) {\n    if (JSON.stringify(from) !== JSON.stringify(to)) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  const fromObj = from as Record<string, unknown>;\n  const toObj = to as Record<string, unknown>;\n  const allKeys = new Set([...Object.keys(fromObj), ...Object.keys(toObj)]);\n\n  for (const key of allKeys) {\n    const escaped = key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n    const path = `${basePath}/${escaped}`;\n    if (!(key in fromObj)) {\n      ops.push({ op: \"add\", path, value: toObj[key] });\n    } else if (!(key in toObj)) {\n      ops.push({ op: \"remove\", path });\n    } else {\n      ops.push(...diffJsonPatch(fromObj[key], toObj[key], path));\n    }\n  }\n\n  return ops;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBO,IAAM,aAAN,cAAyB,MAAM;AAAC;AAGvC,IAAM,iBAAiB,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAMxE,IAAM,iBAAiB;AAEvB,SAAS,WAAW,KAAqB;AACvC,MAAI,CAAC,eAAe,KAAK,GAAG,EAAG,OAAM,IAAI,WAAW,2BAA2B,KAAK,UAAU,GAAG,CAAC,EAAE;AACpG,SAAO,OAAO,GAAG;AACnB;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrD;AAEA,SAAS,UAAU,MAAwB;AACzC,MAAI,SAAS,GAAI,QAAO,CAAC;AACzB,MAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,UAAM,IAAI,WAAW,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,EAClF;AACA,QAAM,WAAW,KAAK,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,QAAQ;AACtD,aAAW,OAAO,UAAU;AAC1B,QAAI,eAAe,IAAI,GAAG,GAAG;AAC3B,YAAM,IAAI,WAAW,gCAAgC,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,SAAS,KAAU,OAAyC;AACnE,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WAAW,0CAA0C;AAAA,EACjE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM,WAAW,IAAI;AAC3B,UAAI,OAAO,OAAO,QAAQ;AACxB,cAAM,IAAI,WAAW,0BAA0B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAClF;AACA,eAAS,OAAO,GAAG;AAAA,IACrB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,GAAG;AACvD,cAAM,IAAI,WAAW,oBAAoB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAC5E;AACA,eAAS,OAAO,IAAI;AAAA,IACtB,OAAO;AACL,YAAM,IAAI,WAAW,wBAAwB,OAAO,MAAM,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,IACzF;AAAA,EACF;AACA,QAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,SAAS,IAAK,QAAO,CAAC,QAAQ,GAAG;AACrC,WAAO,CAAC,QAAQ,WAAW,IAAI,CAAC;AAAA,EAClC;AACA,SAAO,CAAC,QAAQ,IAAI;AACtB;AAEA,SAAS,MAAM,KAAU,MAAmB;AAC1C,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,QAAQ,IAAK,OAAM,IAAI,WAAW,2BAA2B;AACjE,UAAM,MAAM;AACZ,QAAI,MAAM,KAAK,OAAO,OAAO,OAAQ,OAAM,IAAI,WAAW,uBAAuB,IAAI,EAAE;AACvF,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,MACE,WAAW,QACX,OAAO,WAAW,YAClB,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GACjD;AACA,UAAM,IAAI,WAAW,mBAAmB,IAAI,EAAE;AAAA,EAChD;AACA,SAAO,OAAO,GAAa;AAC7B;AAEA,SAAS,MAAS,GAAS;AACzB,SAAO,MAAM,SAAY,IAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC;AAC5D;AAEA,SAAS,UAAU,GAAQ,GAAiB;AAC1C,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,MAAI,OAAO,MAAM,OAAO,EAAG,QAAO;AAClC,MAAI,OAAO,MAAM,SAAU,QAAO,MAAM;AACxC,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,MAAI,SAAS,MAAM,QAAQ,CAAC,EAAG,QAAO;AACtC,MAAI,MAAM;AACR,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AACtE,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,aAAW,KAAK,IAAI;AAClB,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC,EAAG,QAAO;AACxD,QAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAU,IAAsB;AAChD,QAAM,OAAO,GAAG;AAChB,QAAM,OAAO,GAAG,QAAQ;AAExB,MAAI,SAAS,OAAO;AAClB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,wBAAwB;AACnE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAI,QAAQ,KAAK;AACf,eAAO,KAAK,GAAG,KAAK;AAAA,MACtB,OAAO;AACL,cAAM,MAAM;AACZ,YAAI,MAAM,KAAK,MAAM,OAAO,QAAQ;AAClC,gBAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,QAC5D;AACA,eAAO,OAAO,KAAK,GAAG,GAAG,KAAK;AAAA,MAChC;AAAA,IACF,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,mBAAmB,OAAO,MAAM,EAAE;AAAA,IACzD;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,WAAW;AACtB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,4BAA4B;AACvE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM;AACZ,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAG,IAAI,GAAG;AAAA,IACnB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,qBAAqB,OAAO,MAAM,EAAE;AAAA,IAC3D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,UAAU;AACrB,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,OAAM,IAAI,WAAW,qBAAqB;AAClE,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM;AACZ,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,kCAAkC,IAAI,EAAE;AAAA,MAC/D;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,8BAA8B,IAAI,EAAE;AAAA,MAC3D;AACA,aAAO,OAAO,GAAa;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,sBAAsB,OAAO,MAAM,EAAE;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AACpE,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AAEpE,QAAI,KAAK,WAAW,MAAM,GAAG,GAAG;AAC9B,YAAM,IAAI,WAAW,mDAAmD;AAAA,IAC1E;AACA,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,UAAM,SAAS,KAAK,EAAE,IAAI,UAAU,MAAM,IAAI,CAAC;AAC/C,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,yBAAyB;AACpE,UAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,QAAI,CAAC,UAAU,QAAQ,GAAG,KAAK,EAAG,OAAM,IAAI,WAAW,oBAAoB,IAAI,EAAE;AACjF,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,mBAAmB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAE3B,SAAS,UAAU,OAAwB;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,IAAI;AACR,eAAW,KAAK,MAAO,MAAK,UAAU,CAAC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,QAAI,IAAI;AACR,eAAW,KAAK,OAAO,OAAO,KAAgC,EAAG,MAAK,UAAU,CAAC;AACjF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,eAAe,KAAc,KAA6B;AACxE,MAAI,IAAI,SAAS,eAAe;AAC9B,UAAM,IAAI,WAAW,kCAAkC,IAAI,MAAM,MAAM,aAAa,GAAG;AAAA,EACzF;AACA,MAAI,MAAW,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAC7C,aAAW,MAAM,KAAK;AACpB,UAAM,SAAS,KAAK,EAAE;AACtB,QAAI,UAAU,GAAG,IAAI,oBAAoB;AACvC,YAAM,IAAI,WAAW,4CAA4C,kBAAkB,GAAG;AAAA,IACxF;AAAA,EACF;AACA,SAAO;AACT;AAYO,SAAS,cAAc,MAAe,IAAa,WAAW,IAAmB;AACtF,QAAM,MAAqB,CAAC;AAE5B,MAAI,OAAO,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,MAAM,MAAM,QAAQ,EAAE,GAAG;AAC1E,QAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAC5D,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ,OAAO,QAAQ,OAAO,SAAS,UAAU;AAC5D,QAAI,SAAS,IAAI;AACf,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,EAAE,GAAG;AAC5C,QAAI,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,EAAE,GAAG;AAC/C,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAChB,QAAM,QAAQ;AACd,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAExE,aAAW,OAAO,SAAS;AACzB,UAAM,UAAU,IAAI,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI;AAC3D,UAAM,OAAO,GAAG,QAAQ,IAAI,OAAO;AACnC,QAAI,EAAE,OAAO,UAAU;AACrB,UAAI,KAAK,EAAE,IAAI,OAAO,MAAM,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD,WAAW,EAAE,OAAO,QAAQ;AAC1B,UAAI,KAAK,EAAE,IAAI,UAAU,KAAK,CAAC;AAAA,IACjC,OAAO;AACL,UAAI,KAAK,GAAG,cAAc,QAAQ,GAAG,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/patch.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator/patch\n *\n * RFC 6902 JSON Patch implementation, plus a small diff computer that\n * produces a patch from two values. Used by the Coordinator for\n * `decide.override` apply and by the playground UI (in the browser) to\n * compute the patch from a textarea edit.\n *\n * Implements all six RFC 6902 operations (add, remove, replace, move,\n * copy, test) with semantics identical to the Python reference. Path\n * segments that enable prototype pollution in a JavaScript runtime\n * (`__proto__`, `constructor`, `prototype`) are rejected, so the two\n * references accept and reject exactly the same patches.\n */\n\nimport type { JsonPatchOp } from \"./types.js\";\n\nexport class PatchError extends Error {}\n\n// Rejected in every JSON Pointer segment: these enable prototype pollution.\nconst DANGEROUS_KEYS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n// An array index is an RFC 6901 array index: \"0\" or a positive integer with no\n// leading zero. A shared strict rule keeps the two references in step -- JS\n// Number() and Python int() otherwise accept disjoint token sets (e.g. \"1e1\",\n// \"0x0a\", \"3.0\", \"\", \"1_0\"), which would apply the same patch differently.\nconst ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;\n\n// The JSON type name of a value. Python and JavaScript name their own types\n// differently (dict against object, list against object, str against string).\n// The refusal names the JSON type, which both references and the\n// specification share.\nfunction jsonType(value: unknown): string {\n  if (value === null) return \"null\";\n  if (Array.isArray(value)) return \"array\";\n  switch (typeof value) {\n    case \"object\":  return \"object\";\n    case \"string\":  return \"string\";\n    case \"number\":  return \"number\";\n    case \"boolean\": return \"boolean\";\n    default:        return \"null\";\n  }\n}\n\nfunction arrayIndex(seg: string): number {\n  if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);\n  return Number(seg);\n}\n\nfunction unescape(token: string): string {\n  return token.replace(/~1/g, \"/\").replace(/~0/g, \"~\");\n}\n\nfunction splitPath(path: string): string[] {\n  if (path === \"\") return [];\n  if (!path.startsWith(\"/\")) {\n    throw new PatchError(`JSON Pointer must start with '/': ${JSON.stringify(path)}`);\n  }\n  const segments = path.slice(1).split(\"/\").map(unescape);\n  for (const seg of segments) {\n    if (DANGEROUS_KEYS.has(seg)) {\n      throw new PatchError(`Refusing unsafe path segment ${JSON.stringify(seg)}`);\n    }\n  }\n  return segments;\n}\n\n/** Navigate to the parent of the target; return [parent, lastKey]. */\nfunction navigate(doc: any, parts: string[]): [any, string | number] {\n  if (parts.length === 0) {\n    throw new PatchError(\"Cannot operate on root with this helper.\");\n  }\n  let parent = doc;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (Array.isArray(parent)) {\n      const idx = arrayIndex(part);\n      if (idx >= parent.length) {\n        throw new PatchError(`Index out of range at /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[idx];\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, part)) {\n        throw new PatchError(`Path not found: /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[part];\n    } else {\n      throw new PatchError(`Cannot traverse into ${jsonType(parent)} at ${JSON.stringify(part)}`);\n    }\n  }\n  const last = parts[parts.length - 1];\n  if (Array.isArray(parent)) {\n    if (last === \"-\") return [parent, \"-\"];\n    return [parent, arrayIndex(last)];\n  }\n  return [parent, last];\n}\n\nfunction getAt(doc: any, path: string): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) return doc;\n  const [parent, key] = navigate(doc, parts);\n  if (Array.isArray(parent)) {\n    if (key === \"-\") throw new PatchError(\"Cannot read '-' position.\");\n    const idx = key as number;\n    if (idx < 0 || idx >= parent.length) throw new PatchError(`Index out of range: ${path}`);\n    return parent[idx];\n  }\n  if (\n    parent === null ||\n    typeof parent !== \"object\" ||\n    !Object.prototype.hasOwnProperty.call(parent, key)\n  ) {\n    throw new PatchError(`Path not found: ${path}`);\n  }\n  return parent[key as string];\n}\n\nfunction clone<T>(v: T): T {\n  return v === undefined ? v : (JSON.parse(JSON.stringify(v)) as T);\n}\n\nfunction deepEqual(a: any, b: any): boolean {\n  if (a === b) return true;\n  if (a === null || b === null) return a === b;\n  if (typeof a !== typeof b) return false;\n  if (typeof a !== \"object\") return a === b;\n  const aArr = Array.isArray(a);\n  if (aArr !== Array.isArray(b)) return false;\n  if (aArr) {\n    if (a.length !== b.length) return false;\n    for (let i = 0; i < a.length; i++) if (!deepEqual(a[i], b[i])) return false;\n    return true;\n  }\n  const ak = Object.keys(a);\n  const bk = Object.keys(b);\n  if (ak.length !== bk.length) return false;\n  for (const k of ak) {\n    if (!Object.prototype.hasOwnProperty.call(b, k)) return false;\n    if (!deepEqual(a[k], b[k])) return false;\n  }\n  return true;\n}\n\nfunction applyOne(doc: any, op: JsonPatchOp): any {\n  const kind = op.op;\n  const path = op.path ?? \"\";\n\n  if (kind === \"add\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'add' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value; // replace whole document\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      if (key === \"-\") {\n        parent.push(op.value);\n      } else {\n        const idx = key as number;\n        if (idx < 0 || idx > parent.length) {\n          throw new PatchError(`Index out of range for add: ${path}`);\n        }\n        parent.splice(idx, 0, op.value);\n      }\n    } else if (parent !== null && typeof parent === \"object\") {\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot add into ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"replace\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'replace' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value;\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names the position after the last element, which no\n      // element occupies, so only \"add\" can use it. Left as a string it slips\n      // through a numeric range check and writes a \"-\" property on the array.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[idx] = op.value;\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot replace in ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"remove\") {\n    const parts = splitPath(path);\n    if (parts.length === 0) throw new PatchError(\"Cannot remove root.\");\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names no existing element, so it cannot be removed.\n      // Left as a string it passes the numeric range check and then splice\n      // coerces it to zero, removing the first element instead.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Index out of range for remove: ${path}`);\n      }\n      parent.splice(idx, 1);\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for remove: ${path}`);\n      }\n      delete parent[key as string];\n    } else {\n      throw new PatchError(`Cannot remove from ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"copy\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'copy' requires 'from'\");\n    const value = clone(getAt(doc, src));\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"move\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'move' requires 'from'\");\n    // RFC 6902 4.4: 'from' MUST NOT be a proper prefix of 'path'.\n    if (path.startsWith(src + \"/\")) {\n      throw new PatchError(\"'move' cannot move a location into its own child.\");\n    }\n    const value = clone(getAt(doc, src));\n    doc = applyOne(doc, { op: \"remove\", path: src });\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"test\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'test' requires 'value'\");\n    const actual = getAt(doc, path);\n    if (!deepEqual(actual, op.value)) throw new PatchError(`'test' failed at ${path}`);\n    return doc;\n  }\n\n  throw new PatchError(`Unsupported op: ${JSON.stringify(kind)}`);\n}\n\nconst MAX_PATCH_OPS = 1000;\nconst MAX_DOCUMENT_NODES = 100_000;\n\nfunction nodeCount(value: unknown): number {\n  if (Array.isArray(value)) {\n    let n = 1;\n    for (const v of value) n += nodeCount(v);\n    return n;\n  }\n  if (value !== null && typeof value === \"object\") {\n    let n = 1;\n    for (const v of Object.values(value as Record<string, unknown>)) n += nodeCount(v);\n    return n;\n  }\n  return 1;\n}\n\nexport function applyJsonPatch(doc: unknown, ops: JsonPatchOp[]): unknown {\n  if (ops.length > MAX_PATCH_OPS) {\n    throw new PatchError(`Patch has too many operations (${ops.length} > ${MAX_PATCH_OPS})`);\n  }\n  let out: any = JSON.parse(JSON.stringify(doc));\n  for (const op of ops) {\n    out = applyOne(out, op);\n    if (nodeCount(out) > MAX_DOCUMENT_NODES) {\n      throw new PatchError(`Patched document exceeds the node limit (${MAX_DOCUMENT_NODES})`);\n    }\n  }\n  return out;\n}\n\n// ============================================================\n//   diff: produce a patch that transforms `from` into `to`\n// ============================================================\n\n/**\n * Compute an RFC 6902 patch that, when applied to `from`, produces\n * `to`. Walks objects key-by-key; arrays use a shallow whole-array\n * replace if any element differs. Sufficient for the playground's\n * draft-edit use case where drafts are small JSON objects.\n */\nexport function diffJsonPatch(from: unknown, to: unknown, basePath = \"\"): JsonPatchOp[] {\n  const ops: JsonPatchOp[] = [];\n\n  if (typeof from !== typeof to || Array.isArray(from) !== Array.isArray(to)) {\n    ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    return ops;\n  }\n\n  if (from === null || to === null || typeof from !== \"object\") {\n    if (from !== to) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  if (Array.isArray(from) && Array.isArray(to)) {\n    if (JSON.stringify(from) !== JSON.stringify(to)) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  const fromObj = from as Record<string, unknown>;\n  const toObj = to as Record<string, unknown>;\n  const allKeys = new Set([...Object.keys(fromObj), ...Object.keys(toObj)]);\n\n  for (const key of allKeys) {\n    const escaped = key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n    const path = `${basePath}/${escaped}`;\n    if (!(key in fromObj)) {\n      ops.push({ op: \"add\", path, value: toObj[key] });\n    } else if (!(key in toObj)) {\n      ops.push({ op: \"remove\", path });\n    } else {\n      ops.push(...diffJsonPatch(fromObj[key], toObj[key], path));\n    }\n  }\n\n  return ops;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBO,IAAM,aAAN,cAAyB,MAAM;AAAC;AAGvC,IAAM,iBAAiB,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAMxE,IAAM,iBAAiB;AAMvB,SAAS,SAAS,OAAwB;AACxC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO;AACjC,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB;AAAgB,aAAO;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,KAAqB;AACvC,MAAI,CAAC,eAAe,KAAK,GAAG,EAAG,OAAM,IAAI,WAAW,2BAA2B,KAAK,UAAU,GAAG,CAAC,EAAE;AACpG,SAAO,OAAO,GAAG;AACnB;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrD;AAEA,SAAS,UAAU,MAAwB;AACzC,MAAI,SAAS,GAAI,QAAO,CAAC;AACzB,MAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,UAAM,IAAI,WAAW,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,EAClF;AACA,QAAM,WAAW,KAAK,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,QAAQ;AACtD,aAAW,OAAO,UAAU;AAC1B,QAAI,eAAe,IAAI,GAAG,GAAG;AAC3B,YAAM,IAAI,WAAW,gCAAgC,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,SAAS,KAAU,OAAyC;AACnE,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WAAW,0CAA0C;AAAA,EACjE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM,WAAW,IAAI;AAC3B,UAAI,OAAO,OAAO,QAAQ;AACxB,cAAM,IAAI,WAAW,0BAA0B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAClF;AACA,eAAS,OAAO,GAAG;AAAA,IACrB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,GAAG;AACvD,cAAM,IAAI,WAAW,oBAAoB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAC5E;AACA,eAAS,OAAO,IAAI;AAAA,IACtB,OAAO;AACL,YAAM,IAAI,WAAW,wBAAwB,SAAS,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,IAC5F;AAAA,EACF;AACA,QAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,SAAS,IAAK,QAAO,CAAC,QAAQ,GAAG;AACrC,WAAO,CAAC,QAAQ,WAAW,IAAI,CAAC;AAAA,EAClC;AACA,SAAO,CAAC,QAAQ,IAAI;AACtB;AAEA,SAAS,MAAM,KAAU,MAAmB;AAC1C,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,QAAQ,IAAK,OAAM,IAAI,WAAW,2BAA2B;AACjE,UAAM,MAAM;AACZ,QAAI,MAAM,KAAK,OAAO,OAAO,OAAQ,OAAM,IAAI,WAAW,uBAAuB,IAAI,EAAE;AACvF,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,MACE,WAAW,QACX,OAAO,WAAW,YAClB,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GACjD;AACA,UAAM,IAAI,WAAW,mBAAmB,IAAI,EAAE;AAAA,EAChD;AACA,SAAO,OAAO,GAAa;AAC7B;AAEA,SAAS,MAAS,GAAS;AACzB,SAAO,MAAM,SAAY,IAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC;AAC5D;AAEA,SAAS,UAAU,GAAQ,GAAiB;AAC1C,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,MAAI,OAAO,MAAM,OAAO,EAAG,QAAO;AAClC,MAAI,OAAO,MAAM,SAAU,QAAO,MAAM;AACxC,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,MAAI,SAAS,MAAM,QAAQ,CAAC,EAAG,QAAO;AACtC,MAAI,MAAM;AACR,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AACtE,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,aAAW,KAAK,IAAI;AAClB,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC,EAAG,QAAO;AACxD,QAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAU,IAAsB;AAChD,QAAM,OAAO,GAAG;AAChB,QAAM,OAAO,GAAG,QAAQ;AAExB,MAAI,SAAS,OAAO;AAClB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,wBAAwB;AACnE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAI,QAAQ,KAAK;AACf,eAAO,KAAK,GAAG,KAAK;AAAA,MACtB,OAAO;AACL,cAAM,MAAM;AACZ,YAAI,MAAM,KAAK,MAAM,OAAO,QAAQ;AAClC,gBAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,QAC5D;AACA,eAAO,OAAO,KAAK,GAAG,GAAG,KAAK;AAAA,MAChC;AAAA,IACF,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,mBAAmB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,WAAW;AACtB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,4BAA4B;AACvE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAG,IAAI,GAAG;AAAA,IACnB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,qBAAqB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,UAAU;AACrB,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,OAAM,IAAI,WAAW,qBAAqB;AAClE,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,kCAAkC,IAAI,EAAE;AAAA,MAC/D;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,8BAA8B,IAAI,EAAE;AAAA,MAC3D;AACA,aAAO,OAAO,GAAa;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,sBAAsB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC/D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AACpE,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AAEpE,QAAI,KAAK,WAAW,MAAM,GAAG,GAAG;AAC9B,YAAM,IAAI,WAAW,mDAAmD;AAAA,IAC1E;AACA,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,UAAM,SAAS,KAAK,EAAE,IAAI,UAAU,MAAM,IAAI,CAAC;AAC/C,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,yBAAyB;AACpE,UAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,QAAI,CAAC,UAAU,QAAQ,GAAG,KAAK,EAAG,OAAM,IAAI,WAAW,oBAAoB,IAAI,EAAE;AACjF,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,mBAAmB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAE3B,SAAS,UAAU,OAAwB;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,IAAI;AACR,eAAW,KAAK,MAAO,MAAK,UAAU,CAAC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,QAAI,IAAI;AACR,eAAW,KAAK,OAAO,OAAO,KAAgC,EAAG,MAAK,UAAU,CAAC;AACjF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,eAAe,KAAc,KAA6B;AACxE,MAAI,IAAI,SAAS,eAAe;AAC9B,UAAM,IAAI,WAAW,kCAAkC,IAAI,MAAM,MAAM,aAAa,GAAG;AAAA,EACzF;AACA,MAAI,MAAW,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAC7C,aAAW,MAAM,KAAK;AACpB,UAAM,SAAS,KAAK,EAAE;AACtB,QAAI,UAAU,GAAG,IAAI,oBAAoB;AACvC,YAAM,IAAI,WAAW,4CAA4C,kBAAkB,GAAG;AAAA,IACxF;AAAA,EACF;AACA,SAAO;AACT;AAYO,SAAS,cAAc,MAAe,IAAa,WAAW,IAAmB;AACtF,QAAM,MAAqB,CAAC;AAE5B,MAAI,OAAO,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,MAAM,MAAM,QAAQ,EAAE,GAAG;AAC1E,QAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAC5D,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ,OAAO,QAAQ,OAAO,SAAS,UAAU;AAC5D,QAAI,SAAS,IAAI;AACf,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,EAAE,GAAG;AAC5C,QAAI,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,EAAE,GAAG;AAC/C,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAChB,QAAM,QAAQ;AACd,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAExE,aAAW,OAAO,SAAS;AACzB,UAAM,UAAU,IAAI,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI;AAC3D,UAAM,OAAO,GAAG,QAAQ,IAAI,OAAO;AACnC,QAAI,EAAE,OAAO,UAAU;AACrB,UAAI,KAAK,EAAE,IAAI,OAAO,MAAM,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD,WAAW,EAAE,OAAO,QAAQ;AAC1B,UAAI,KAAK,EAAE,IAAI,UAAU,KAAK,CAAC;AAAA,IACjC,OAAO;AACL,UAAI,KAAK,GAAG,cAAc,QAAQ,GAAG,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}

package/dist/patch.js

@@ -3,6 +3,22 @@ var PatchError = class extends Error {
 };
 var DANGEROUS_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
 var ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;
+function jsonType(value) {
+  if (value === null) return "null";
+  if (Array.isArray(value)) return "array";
+  switch (typeof value) {
+    case "object":
+      return "object";
+    case "string":
+      return "string";
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    default:
+      return "null";
+  }
+}
 function arrayIndex(seg) {
   if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);
   return Number(seg);
@@ -42,7 +58,7 @@ function navigate(doc, parts) {
       }
       parent = parent[part];
     } else {
-      throw new PatchError(`Cannot traverse into ${typeof parent} at ${JSON.stringify(part)}`);
+      throw new PatchError(`Cannot traverse into ${jsonType(parent)} at ${JSON.stringify(part)}`);
     }
   }
   const last = parts[parts.length - 1];
@@ -112,7 +128,7 @@ function applyOne(doc, op) {
     } else if (parent !== null && typeof parent === "object") {
       parent[key] = op.value;
     } else {
-      throw new PatchError(`Cannot add into ${typeof parent}`);
+      throw new PatchError(`Cannot add into ${jsonType(parent)}`);
     }
     return doc;
   }
@@ -122,7 +138,7 @@ function applyOne(doc, op) {
     if (parts.length === 0) return op.value;
     const [parent, key] = navigate(doc, parts);
     if (Array.isArray(parent)) {
-      const idx = key;
+      const idx = key === "-" ? -1 : key;
       if (idx < 0 || idx >= parent.length) {
         throw new PatchError(`Path not found for replace: ${path}`);
       }
@@ -133,7 +149,7 @@ function applyOne(doc, op) {
       }
       parent[key] = op.value;
     } else {
-      throw new PatchError(`Cannot replace in ${typeof parent}`);
+      throw new PatchError(`Cannot replace in ${jsonType(parent)}`);
     }
     return doc;
   }
@@ -142,7 +158,7 @@ function applyOne(doc, op) {
     if (parts.length === 0) throw new PatchError("Cannot remove root.");
     const [parent, key] = navigate(doc, parts);
     if (Array.isArray(parent)) {
-      const idx = key;
+      const idx = key === "-" ? -1 : key;
       if (idx < 0 || idx >= parent.length) {
         throw new PatchError(`Index out of range for remove: ${path}`);
       }
@@ -153,7 +169,7 @@ function applyOne(doc, op) {
       }
       delete parent[key];
     } else {
-      throw new PatchError(`Cannot remove from ${typeof parent}`);
+      throw new PatchError(`Cannot remove from ${jsonType(parent)}`);
     }
     return doc;
   }

package/dist/patch.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/patch.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator/patch\n *\n * RFC 6902 JSON Patch implementation, plus a small diff computer that\n * produces a patch from two values. Used by the Coordinator for\n * `decide.override` apply and by the playground UI (in the browser) to\n * compute the patch from a textarea edit.\n *\n * Implements all six RFC 6902 operations (add, remove, replace, move,\n * copy, test) with semantics identical to the Python reference. Path\n * segments that enable prototype pollution in a JavaScript runtime\n * (`__proto__`, `constructor`, `prototype`) are rejected, so the two\n * references accept and reject exactly the same patches.\n */\n\nimport type { JsonPatchOp } from \"./types.js\";\n\nexport class PatchError extends Error {}\n\n// Rejected in every JSON Pointer segment: these enable prototype pollution.\nconst DANGEROUS_KEYS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n// An array index is an RFC 6901 array index: \"0\" or a positive integer with no\n// leading zero. A shared strict rule keeps the two references in step -- JS\n// Number() and Python int() otherwise accept disjoint token sets (e.g. \"1e1\",\n// \"0x0a\", \"3.0\", \"\", \"1_0\"), which would apply the same patch differently.\nconst ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;\n\nfunction arrayIndex(seg: string): number {\n  if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);\n  return Number(seg);\n}\n\nfunction unescape(token: string): string {\n  return token.replace(/~1/g, \"/\").replace(/~0/g, \"~\");\n}\n\nfunction splitPath(path: string): string[] {\n  if (path === \"\") return [];\n  if (!path.startsWith(\"/\")) {\n    throw new PatchError(`JSON Pointer must start with '/': ${JSON.stringify(path)}`);\n  }\n  const segments = path.slice(1).split(\"/\").map(unescape);\n  for (const seg of segments) {\n    if (DANGEROUS_KEYS.has(seg)) {\n      throw new PatchError(`Refusing unsafe path segment ${JSON.stringify(seg)}`);\n    }\n  }\n  return segments;\n}\n\n/** Navigate to the parent of the target; return [parent, lastKey]. */\nfunction navigate(doc: any, parts: string[]): [any, string | number] {\n  if (parts.length === 0) {\n    throw new PatchError(\"Cannot operate on root with this helper.\");\n  }\n  let parent = doc;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (Array.isArray(parent)) {\n      const idx = arrayIndex(part);\n      if (idx >= parent.length) {\n        throw new PatchError(`Index out of range at /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[idx];\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, part)) {\n        throw new PatchError(`Path not found: /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[part];\n    } else {\n      throw new PatchError(`Cannot traverse into ${typeof parent} at ${JSON.stringify(part)}`);\n    }\n  }\n  const last = parts[parts.length - 1];\n  if (Array.isArray(parent)) {\n    if (last === \"-\") return [parent, \"-\"];\n    return [parent, arrayIndex(last)];\n  }\n  return [parent, last];\n}\n\nfunction getAt(doc: any, path: string): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) return doc;\n  const [parent, key] = navigate(doc, parts);\n  if (Array.isArray(parent)) {\n    if (key === \"-\") throw new PatchError(\"Cannot read '-' position.\");\n    const idx = key as number;\n    if (idx < 0 || idx >= parent.length) throw new PatchError(`Index out of range: ${path}`);\n    return parent[idx];\n  }\n  if (\n    parent === null ||\n    typeof parent !== \"object\" ||\n    !Object.prototype.hasOwnProperty.call(parent, key)\n  ) {\n    throw new PatchError(`Path not found: ${path}`);\n  }\n  return parent[key as string];\n}\n\nfunction clone<T>(v: T): T {\n  return v === undefined ? v : (JSON.parse(JSON.stringify(v)) as T);\n}\n\nfunction deepEqual(a: any, b: any): boolean {\n  if (a === b) return true;\n  if (a === null || b === null) return a === b;\n  if (typeof a !== typeof b) return false;\n  if (typeof a !== \"object\") return a === b;\n  const aArr = Array.isArray(a);\n  if (aArr !== Array.isArray(b)) return false;\n  if (aArr) {\n    if (a.length !== b.length) return false;\n    for (let i = 0; i < a.length; i++) if (!deepEqual(a[i], b[i])) return false;\n    return true;\n  }\n  const ak = Object.keys(a);\n  const bk = Object.keys(b);\n  if (ak.length !== bk.length) return false;\n  for (const k of ak) {\n    if (!Object.prototype.hasOwnProperty.call(b, k)) return false;\n    if (!deepEqual(a[k], b[k])) return false;\n  }\n  return true;\n}\n\nfunction applyOne(doc: any, op: JsonPatchOp): any {\n  const kind = op.op;\n  const path = op.path ?? \"\";\n\n  if (kind === \"add\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'add' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value; // replace whole document\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      if (key === \"-\") {\n        parent.push(op.value);\n      } else {\n        const idx = key as number;\n        if (idx < 0 || idx > parent.length) {\n          throw new PatchError(`Index out of range for add: ${path}`);\n        }\n        parent.splice(idx, 0, op.value);\n      }\n    } else if (parent !== null && typeof parent === \"object\") {\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot add into ${typeof parent}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"replace\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'replace' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value;\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      const idx = key as number;\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[idx] = op.value;\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot replace in ${typeof parent}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"remove\") {\n    const parts = splitPath(path);\n    if (parts.length === 0) throw new PatchError(\"Cannot remove root.\");\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      const idx = key as number;\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Index out of range for remove: ${path}`);\n      }\n      parent.splice(idx, 1);\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for remove: ${path}`);\n      }\n      delete parent[key as string];\n    } else {\n      throw new PatchError(`Cannot remove from ${typeof parent}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"copy\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'copy' requires 'from'\");\n    const value = clone(getAt(doc, src));\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"move\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'move' requires 'from'\");\n    // RFC 6902 4.4: 'from' MUST NOT be a proper prefix of 'path'.\n    if (path.startsWith(src + \"/\")) {\n      throw new PatchError(\"'move' cannot move a location into its own child.\");\n    }\n    const value = clone(getAt(doc, src));\n    doc = applyOne(doc, { op: \"remove\", path: src });\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"test\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'test' requires 'value'\");\n    const actual = getAt(doc, path);\n    if (!deepEqual(actual, op.value)) throw new PatchError(`'test' failed at ${path}`);\n    return doc;\n  }\n\n  throw new PatchError(`Unsupported op: ${JSON.stringify(kind)}`);\n}\n\nconst MAX_PATCH_OPS = 1000;\nconst MAX_DOCUMENT_NODES = 100_000;\n\nfunction nodeCount(value: unknown): number {\n  if (Array.isArray(value)) {\n    let n = 1;\n    for (const v of value) n += nodeCount(v);\n    return n;\n  }\n  if (value !== null && typeof value === \"object\") {\n    let n = 1;\n    for (const v of Object.values(value as Record<string, unknown>)) n += nodeCount(v);\n    return n;\n  }\n  return 1;\n}\n\nexport function applyJsonPatch(doc: unknown, ops: JsonPatchOp[]): unknown {\n  if (ops.length > MAX_PATCH_OPS) {\n    throw new PatchError(`Patch has too many operations (${ops.length} > ${MAX_PATCH_OPS})`);\n  }\n  let out: any = JSON.parse(JSON.stringify(doc));\n  for (const op of ops) {\n    out = applyOne(out, op);\n    if (nodeCount(out) > MAX_DOCUMENT_NODES) {\n      throw new PatchError(`Patched document exceeds the node limit (${MAX_DOCUMENT_NODES})`);\n    }\n  }\n  return out;\n}\n\n// ============================================================\n//   diff: produce a patch that transforms `from` into `to`\n// ============================================================\n\n/**\n * Compute an RFC 6902 patch that, when applied to `from`, produces\n * `to`. Walks objects key-by-key; arrays use a shallow whole-array\n * replace if any element differs. Sufficient for the playground's\n * draft-edit use case where drafts are small JSON objects.\n */\nexport function diffJsonPatch(from: unknown, to: unknown, basePath = \"\"): JsonPatchOp[] {\n  const ops: JsonPatchOp[] = [];\n\n  if (typeof from !== typeof to || Array.isArray(from) !== Array.isArray(to)) {\n    ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    return ops;\n  }\n\n  if (from === null || to === null || typeof from !== \"object\") {\n    if (from !== to) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  if (Array.isArray(from) && Array.isArray(to)) {\n    if (JSON.stringify(from) !== JSON.stringify(to)) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  const fromObj = from as Record<string, unknown>;\n  const toObj = to as Record<string, unknown>;\n  const allKeys = new Set([...Object.keys(fromObj), ...Object.keys(toObj)]);\n\n  for (const key of allKeys) {\n    const escaped = key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n    const path = `${basePath}/${escaped}`;\n    if (!(key in fromObj)) {\n      ops.push({ op: \"add\", path, value: toObj[key] });\n    } else if (!(key in toObj)) {\n      ops.push({ op: \"remove\", path });\n    } else {\n      ops.push(...diffJsonPatch(fromObj[key], toObj[key], path));\n    }\n  }\n\n  return ops;\n}\n"],"mappings":";AAiBO,IAAM,aAAN,cAAyB,MAAM;AAAC;AAGvC,IAAM,iBAAiB,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAMxE,IAAM,iBAAiB;AAEvB,SAAS,WAAW,KAAqB;AACvC,MAAI,CAAC,eAAe,KAAK,GAAG,EAAG,OAAM,IAAI,WAAW,2BAA2B,KAAK,UAAU,GAAG,CAAC,EAAE;AACpG,SAAO,OAAO,GAAG;AACnB;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrD;AAEA,SAAS,UAAU,MAAwB;AACzC,MAAI,SAAS,GAAI,QAAO,CAAC;AACzB,MAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,UAAM,IAAI,WAAW,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,EAClF;AACA,QAAM,WAAW,KAAK,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,QAAQ;AACtD,aAAW,OAAO,UAAU;AAC1B,QAAI,eAAe,IAAI,GAAG,GAAG;AAC3B,YAAM,IAAI,WAAW,gCAAgC,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,SAAS,KAAU,OAAyC;AACnE,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WAAW,0CAA0C;AAAA,EACjE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM,WAAW,IAAI;AAC3B,UAAI,OAAO,OAAO,QAAQ;AACxB,cAAM,IAAI,WAAW,0BAA0B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAClF;AACA,eAAS,OAAO,GAAG;AAAA,IACrB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,GAAG;AACvD,cAAM,IAAI,WAAW,oBAAoB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAC5E;AACA,eAAS,OAAO,IAAI;AAAA,IACtB,OAAO;AACL,YAAM,IAAI,WAAW,wBAAwB,OAAO,MAAM,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,IACzF;AAAA,EACF;AACA,QAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,SAAS,IAAK,QAAO,CAAC,QAAQ,GAAG;AACrC,WAAO,CAAC,QAAQ,WAAW,IAAI,CAAC;AAAA,EAClC;AACA,SAAO,CAAC,QAAQ,IAAI;AACtB;AAEA,SAAS,MAAM,KAAU,MAAmB;AAC1C,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,QAAQ,IAAK,OAAM,IAAI,WAAW,2BAA2B;AACjE,UAAM,MAAM;AACZ,QAAI,MAAM,KAAK,OAAO,OAAO,OAAQ,OAAM,IAAI,WAAW,uBAAuB,IAAI,EAAE;AACvF,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,MACE,WAAW,QACX,OAAO,WAAW,YAClB,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GACjD;AACA,UAAM,IAAI,WAAW,mBAAmB,IAAI,EAAE;AAAA,EAChD;AACA,SAAO,OAAO,GAAa;AAC7B;AAEA,SAAS,MAAS,GAAS;AACzB,SAAO,MAAM,SAAY,IAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC;AAC5D;AAEA,SAAS,UAAU,GAAQ,GAAiB;AAC1C,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,MAAI,OAAO,MAAM,OAAO,EAAG,QAAO;AAClC,MAAI,OAAO,MAAM,SAAU,QAAO,MAAM;AACxC,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,MAAI,SAAS,MAAM,QAAQ,CAAC,EAAG,QAAO;AACtC,MAAI,MAAM;AACR,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AACtE,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,aAAW,KAAK,IAAI;AAClB,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC,EAAG,QAAO;AACxD,QAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAU,IAAsB;AAChD,QAAM,OAAO,GAAG;AAChB,QAAM,OAAO,GAAG,QAAQ;AAExB,MAAI,SAAS,OAAO;AAClB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,wBAAwB;AACnE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAI,QAAQ,KAAK;AACf,eAAO,KAAK,GAAG,KAAK;AAAA,MACtB,OAAO;AACL,cAAM,MAAM;AACZ,YAAI,MAAM,KAAK,MAAM,OAAO,QAAQ;AAClC,gBAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,QAC5D;AACA,eAAO,OAAO,KAAK,GAAG,GAAG,KAAK;AAAA,MAChC;AAAA,IACF,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,mBAAmB,OAAO,MAAM,EAAE;AAAA,IACzD;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,WAAW;AACtB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,4BAA4B;AACvE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM;AACZ,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAG,IAAI,GAAG;AAAA,IACnB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,qBAAqB,OAAO,MAAM,EAAE;AAAA,IAC3D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,UAAU;AACrB,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,OAAM,IAAI,WAAW,qBAAqB;AAClE,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM;AACZ,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,kCAAkC,IAAI,EAAE;AAAA,MAC/D;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,8BAA8B,IAAI,EAAE;AAAA,MAC3D;AACA,aAAO,OAAO,GAAa;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,sBAAsB,OAAO,MAAM,EAAE;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AACpE,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AAEpE,QAAI,KAAK,WAAW,MAAM,GAAG,GAAG;AAC9B,YAAM,IAAI,WAAW,mDAAmD;AAAA,IAC1E;AACA,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,UAAM,SAAS,KAAK,EAAE,IAAI,UAAU,MAAM,IAAI,CAAC;AAC/C,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,yBAAyB;AACpE,UAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,QAAI,CAAC,UAAU,QAAQ,GAAG,KAAK,EAAG,OAAM,IAAI,WAAW,oBAAoB,IAAI,EAAE;AACjF,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,mBAAmB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAE3B,SAAS,UAAU,OAAwB;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,IAAI;AACR,eAAW,KAAK,MAAO,MAAK,UAAU,CAAC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,QAAI,IAAI;AACR,eAAW,KAAK,OAAO,OAAO,KAAgC,EAAG,MAAK,UAAU,CAAC;AACjF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,eAAe,KAAc,KAA6B;AACxE,MAAI,IAAI,SAAS,eAAe;AAC9B,UAAM,IAAI,WAAW,kCAAkC,IAAI,MAAM,MAAM,aAAa,GAAG;AAAA,EACzF;AACA,MAAI,MAAW,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAC7C,aAAW,MAAM,KAAK;AACpB,UAAM,SAAS,KAAK,EAAE;AACtB,QAAI,UAAU,GAAG,IAAI,oBAAoB;AACvC,YAAM,IAAI,WAAW,4CAA4C,kBAAkB,GAAG;AAAA,IACxF;AAAA,EACF;AACA,SAAO;AACT;AAYO,SAAS,cAAc,MAAe,IAAa,WAAW,IAAmB;AACtF,QAAM,MAAqB,CAAC;AAE5B,MAAI,OAAO,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,MAAM,MAAM,QAAQ,EAAE,GAAG;AAC1E,QAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAC5D,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ,OAAO,QAAQ,OAAO,SAAS,UAAU;AAC5D,QAAI,SAAS,IAAI;AACf,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,EAAE,GAAG;AAC5C,QAAI,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,EAAE,GAAG;AAC/C,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAChB,QAAM,QAAQ;AACd,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAExE,aAAW,OAAO,SAAS;AACzB,UAAM,UAAU,IAAI,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI;AAC3D,UAAM,OAAO,GAAG,QAAQ,IAAI,OAAO;AACnC,QAAI,EAAE,OAAO,UAAU;AACrB,UAAI,KAAK,EAAE,IAAI,OAAO,MAAM,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD,WAAW,EAAE,OAAO,QAAQ;AAC1B,UAAI,KAAK,EAAE,IAAI,UAAU,KAAK,CAAC;AAAA,IACjC,OAAO;AACL,UAAI,KAAK,GAAG,cAAc,QAAQ,GAAG,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/patch.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator/patch\n *\n * RFC 6902 JSON Patch implementation, plus a small diff computer that\n * produces a patch from two values. Used by the Coordinator for\n * `decide.override` apply and by the playground UI (in the browser) to\n * compute the patch from a textarea edit.\n *\n * Implements all six RFC 6902 operations (add, remove, replace, move,\n * copy, test) with semantics identical to the Python reference. Path\n * segments that enable prototype pollution in a JavaScript runtime\n * (`__proto__`, `constructor`, `prototype`) are rejected, so the two\n * references accept and reject exactly the same patches.\n */\n\nimport type { JsonPatchOp } from \"./types.js\";\n\nexport class PatchError extends Error {}\n\n// Rejected in every JSON Pointer segment: these enable prototype pollution.\nconst DANGEROUS_KEYS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n// An array index is an RFC 6901 array index: \"0\" or a positive integer with no\n// leading zero. A shared strict rule keeps the two references in step -- JS\n// Number() and Python int() otherwise accept disjoint token sets (e.g. \"1e1\",\n// \"0x0a\", \"3.0\", \"\", \"1_0\"), which would apply the same patch differently.\nconst ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;\n\n// The JSON type name of a value. Python and JavaScript name their own types\n// differently (dict against object, list against object, str against string).\n// The refusal names the JSON type, which both references and the\n// specification share.\nfunction jsonType(value: unknown): string {\n  if (value === null) return \"null\";\n  if (Array.isArray(value)) return \"array\";\n  switch (typeof value) {\n    case \"object\":  return \"object\";\n    case \"string\":  return \"string\";\n    case \"number\":  return \"number\";\n    case \"boolean\": return \"boolean\";\n    default:        return \"null\";\n  }\n}\n\nfunction arrayIndex(seg: string): number {\n  if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);\n  return Number(seg);\n}\n\nfunction unescape(token: string): string {\n  return token.replace(/~1/g, \"/\").replace(/~0/g, \"~\");\n}\n\nfunction splitPath(path: string): string[] {\n  if (path === \"\") return [];\n  if (!path.startsWith(\"/\")) {\n    throw new PatchError(`JSON Pointer must start with '/': ${JSON.stringify(path)}`);\n  }\n  const segments = path.slice(1).split(\"/\").map(unescape);\n  for (const seg of segments) {\n    if (DANGEROUS_KEYS.has(seg)) {\n      throw new PatchError(`Refusing unsafe path segment ${JSON.stringify(seg)}`);\n    }\n  }\n  return segments;\n}\n\n/** Navigate to the parent of the target; return [parent, lastKey]. */\nfunction navigate(doc: any, parts: string[]): [any, string | number] {\n  if (parts.length === 0) {\n    throw new PatchError(\"Cannot operate on root with this helper.\");\n  }\n  let parent = doc;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (Array.isArray(parent)) {\n      const idx = arrayIndex(part);\n      if (idx >= parent.length) {\n        throw new PatchError(`Index out of range at /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[idx];\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, part)) {\n        throw new PatchError(`Path not found: /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[part];\n    } else {\n      throw new PatchError(`Cannot traverse into ${jsonType(parent)} at ${JSON.stringify(part)}`);\n    }\n  }\n  const last = parts[parts.length - 1];\n  if (Array.isArray(parent)) {\n    if (last === \"-\") return [parent, \"-\"];\n    return [parent, arrayIndex(last)];\n  }\n  return [parent, last];\n}\n\nfunction getAt(doc: any, path: string): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) return doc;\n  const [parent, key] = navigate(doc, parts);\n  if (Array.isArray(parent)) {\n    if (key === \"-\") throw new PatchError(\"Cannot read '-' position.\");\n    const idx = key as number;\n    if (idx < 0 || idx >= parent.length) throw new PatchError(`Index out of range: ${path}`);\n    return parent[idx];\n  }\n  if (\n    parent === null ||\n    typeof parent !== \"object\" ||\n    !Object.prototype.hasOwnProperty.call(parent, key)\n  ) {\n    throw new PatchError(`Path not found: ${path}`);\n  }\n  return parent[key as string];\n}\n\nfunction clone<T>(v: T): T {\n  return v === undefined ? v : (JSON.parse(JSON.stringify(v)) as T);\n}\n\nfunction deepEqual(a: any, b: any): boolean {\n  if (a === b) return true;\n  if (a === null || b === null) return a === b;\n  if (typeof a !== typeof b) return false;\n  if (typeof a !== \"object\") return a === b;\n  const aArr = Array.isArray(a);\n  if (aArr !== Array.isArray(b)) return false;\n  if (aArr) {\n    if (a.length !== b.length) return false;\n    for (let i = 0; i < a.length; i++) if (!deepEqual(a[i], b[i])) return false;\n    return true;\n  }\n  const ak = Object.keys(a);\n  const bk = Object.keys(b);\n  if (ak.length !== bk.length) return false;\n  for (const k of ak) {\n    if (!Object.prototype.hasOwnProperty.call(b, k)) return false;\n    if (!deepEqual(a[k], b[k])) return false;\n  }\n  return true;\n}\n\nfunction applyOne(doc: any, op: JsonPatchOp): any {\n  const kind = op.op;\n  const path = op.path ?? \"\";\n\n  if (kind === \"add\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'add' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value; // replace whole document\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      if (key === \"-\") {\n        parent.push(op.value);\n      } else {\n        const idx = key as number;\n        if (idx < 0 || idx > parent.length) {\n          throw new PatchError(`Index out of range for add: ${path}`);\n        }\n        parent.splice(idx, 0, op.value);\n      }\n    } else if (parent !== null && typeof parent === \"object\") {\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot add into ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"replace\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'replace' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value;\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names the position after the last element, which no\n      // element occupies, so only \"add\" can use it. Left as a string it slips\n      // through a numeric range check and writes a \"-\" property on the array.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[idx] = op.value;\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot replace in ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"remove\") {\n    const parts = splitPath(path);\n    if (parts.length === 0) throw new PatchError(\"Cannot remove root.\");\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names no existing element, so it cannot be removed.\n      // Left as a string it passes the numeric range check and then splice\n      // coerces it to zero, removing the first element instead.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Index out of range for remove: ${path}`);\n      }\n      parent.splice(idx, 1);\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for remove: ${path}`);\n      }\n      delete parent[key as string];\n    } else {\n      throw new PatchError(`Cannot remove from ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"copy\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'copy' requires 'from'\");\n    const value = clone(getAt(doc, src));\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"move\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'move' requires 'from'\");\n    // RFC 6902 4.4: 'from' MUST NOT be a proper prefix of 'path'.\n    if (path.startsWith(src + \"/\")) {\n      throw new PatchError(\"'move' cannot move a location into its own child.\");\n    }\n    const value = clone(getAt(doc, src));\n    doc = applyOne(doc, { op: \"remove\", path: src });\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"test\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'test' requires 'value'\");\n    const actual = getAt(doc, path);\n    if (!deepEqual(actual, op.value)) throw new PatchError(`'test' failed at ${path}`);\n    return doc;\n  }\n\n  throw new PatchError(`Unsupported op: ${JSON.stringify(kind)}`);\n}\n\nconst MAX_PATCH_OPS = 1000;\nconst MAX_DOCUMENT_NODES = 100_000;\n\nfunction nodeCount(value: unknown): number {\n  if (Array.isArray(value)) {\n    let n = 1;\n    for (const v of value) n += nodeCount(v);\n    return n;\n  }\n  if (value !== null && typeof value === \"object\") {\n    let n = 1;\n    for (const v of Object.values(value as Record<string, unknown>)) n += nodeCount(v);\n    return n;\n  }\n  return 1;\n}\n\nexport function applyJsonPatch(doc: unknown, ops: JsonPatchOp[]): unknown {\n  if (ops.length > MAX_PATCH_OPS) {\n    throw new PatchError(`Patch has too many operations (${ops.length} > ${MAX_PATCH_OPS})`);\n  }\n  let out: any = JSON.parse(JSON.stringify(doc));\n  for (const op of ops) {\n    out = applyOne(out, op);\n    if (nodeCount(out) > MAX_DOCUMENT_NODES) {\n      throw new PatchError(`Patched document exceeds the node limit (${MAX_DOCUMENT_NODES})`);\n    }\n  }\n  return out;\n}\n\n// ============================================================\n//   diff: produce a patch that transforms `from` into `to`\n// ============================================================\n\n/**\n * Compute an RFC 6902 patch that, when applied to `from`, produces\n * `to`. Walks objects key-by-key; arrays use a shallow whole-array\n * replace if any element differs. Sufficient for the playground's\n * draft-edit use case where drafts are small JSON objects.\n */\nexport function diffJsonPatch(from: unknown, to: unknown, basePath = \"\"): JsonPatchOp[] {\n  const ops: JsonPatchOp[] = [];\n\n  if (typeof from !== typeof to || Array.isArray(from) !== Array.isArray(to)) {\n    ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    return ops;\n  }\n\n  if (from === null || to === null || typeof from !== \"object\") {\n    if (from !== to) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  if (Array.isArray(from) && Array.isArray(to)) {\n    if (JSON.stringify(from) !== JSON.stringify(to)) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  const fromObj = from as Record<string, unknown>;\n  const toObj = to as Record<string, unknown>;\n  const allKeys = new Set([...Object.keys(fromObj), ...Object.keys(toObj)]);\n\n  for (const key of allKeys) {\n    const escaped = key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n    const path = `${basePath}/${escaped}`;\n    if (!(key in fromObj)) {\n      ops.push({ op: \"add\", path, value: toObj[key] });\n    } else if (!(key in toObj)) {\n      ops.push({ op: \"remove\", path });\n    } else {\n      ops.push(...diffJsonPatch(fromObj[key], toObj[key], path));\n    }\n  }\n\n  return ops;\n}\n"],"mappings":";AAiBO,IAAM,aAAN,cAAyB,MAAM;AAAC;AAGvC,IAAM,iBAAiB,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAMxE,IAAM,iBAAiB;AAMvB,SAAS,SAAS,OAAwB;AACxC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO;AACjC,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB;AAAgB,aAAO;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,KAAqB;AACvC,MAAI,CAAC,eAAe,KAAK,GAAG,EAAG,OAAM,IAAI,WAAW,2BAA2B,KAAK,UAAU,GAAG,CAAC,EAAE;AACpG,SAAO,OAAO,GAAG;AACnB;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrD;AAEA,SAAS,UAAU,MAAwB;AACzC,MAAI,SAAS,GAAI,QAAO,CAAC;AACzB,MAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,UAAM,IAAI,WAAW,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,EAClF;AACA,QAAM,WAAW,KAAK,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,QAAQ;AACtD,aAAW,OAAO,UAAU;AAC1B,QAAI,eAAe,IAAI,GAAG,GAAG;AAC3B,YAAM,IAAI,WAAW,gCAAgC,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,SAAS,KAAU,OAAyC;AACnE,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WAAW,0CAA0C;AAAA,EACjE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM,WAAW,IAAI;AAC3B,UAAI,OAAO,OAAO,QAAQ;AACxB,cAAM,IAAI,WAAW,0BAA0B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAClF;AACA,eAAS,OAAO,GAAG;AAAA,IACrB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,GAAG;AACvD,cAAM,IAAI,WAAW,oBAAoB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAC5E;AACA,eAAS,OAAO,IAAI;AAAA,IACtB,OAAO;AACL,YAAM,IAAI,WAAW,wBAAwB,SAAS,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,IAC5F;AAAA,EACF;AACA,QAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,SAAS,IAAK,QAAO,CAAC,QAAQ,GAAG;AACrC,WAAO,CAAC,QAAQ,WAAW,IAAI,CAAC;AAAA,EAClC;AACA,SAAO,CAAC,QAAQ,IAAI;AACtB;AAEA,SAAS,MAAM,KAAU,MAAmB;AAC1C,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,QAAQ,IAAK,OAAM,IAAI,WAAW,2BAA2B;AACjE,UAAM,MAAM;AACZ,QAAI,MAAM,KAAK,OAAO,OAAO,OAAQ,OAAM,IAAI,WAAW,uBAAuB,IAAI,EAAE;AACvF,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,MACE,WAAW,QACX,OAAO,WAAW,YAClB,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GACjD;AACA,UAAM,IAAI,WAAW,mBAAmB,IAAI,EAAE;AAAA,EAChD;AACA,SAAO,OAAO,GAAa;AAC7B;AAEA,SAAS,MAAS,GAAS;AACzB,SAAO,MAAM,SAAY,IAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC;AAC5D;AAEA,SAAS,UAAU,GAAQ,GAAiB;AAC1C,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,MAAI,OAAO,MAAM,OAAO,EAAG,QAAO;AAClC,MAAI,OAAO,MAAM,SAAU,QAAO,MAAM;AACxC,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,MAAI,SAAS,MAAM,QAAQ,CAAC,EAAG,QAAO;AACtC,MAAI,MAAM;AACR,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AACtE,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,aAAW,KAAK,IAAI;AAClB,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC,EAAG,QAAO;AACxD,QAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAU,IAAsB;AAChD,QAAM,OAAO,GAAG;AAChB,QAAM,OAAO,GAAG,QAAQ;AAExB,MAAI,SAAS,OAAO;AAClB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,wBAAwB;AACnE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAI,QAAQ,KAAK;AACf,eAAO,KAAK,GAAG,KAAK;AAAA,MACtB,OAAO;AACL,cAAM,MAAM;AACZ,YAAI,MAAM,KAAK,MAAM,OAAO,QAAQ;AAClC,gBAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,QAC5D;AACA,eAAO,OAAO,KAAK,GAAG,GAAG,KAAK;AAAA,MAChC;AAAA,IACF,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,mBAAmB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,WAAW;AACtB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,4BAA4B;AACvE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAG,IAAI,GAAG;AAAA,IACnB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,qBAAqB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,UAAU;AACrB,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,OAAM,IAAI,WAAW,qBAAqB;AAClE,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,kCAAkC,IAAI,EAAE;AAAA,MAC/D;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,8BAA8B,IAAI,EAAE;AAAA,MAC3D;AACA,aAAO,OAAO,GAAa;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,sBAAsB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC/D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AACpE,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AAEpE,QAAI,KAAK,WAAW,MAAM,GAAG,GAAG;AAC9B,YAAM,IAAI,WAAW,mDAAmD;AAAA,IAC1E;AACA,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,UAAM,SAAS,KAAK,EAAE,IAAI,UAAU,MAAM,IAAI,CAAC;AAC/C,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,yBAAyB;AACpE,UAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,QAAI,CAAC,UAAU,QAAQ,GAAG,KAAK,EAAG,OAAM,IAAI,WAAW,oBAAoB,IAAI,EAAE;AACjF,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,mBAAmB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAE3B,SAAS,UAAU,OAAwB;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,IAAI;AACR,eAAW,KAAK,MAAO,MAAK,UAAU,CAAC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,QAAI,IAAI;AACR,eAAW,KAAK,OAAO,OAAO,KAAgC,EAAG,MAAK,UAAU,CAAC;AACjF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,eAAe,KAAc,KAA6B;AACxE,MAAI,IAAI,SAAS,eAAe;AAC9B,UAAM,IAAI,WAAW,kCAAkC,IAAI,MAAM,MAAM,aAAa,GAAG;AAAA,EACzF;AACA,MAAI,MAAW,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAC7C,aAAW,MAAM,KAAK;AACpB,UAAM,SAAS,KAAK,EAAE;AACtB,QAAI,UAAU,GAAG,IAAI,oBAAoB;AACvC,YAAM,IAAI,WAAW,4CAA4C,kBAAkB,GAAG;AAAA,IACxF;AAAA,EACF;AACA,SAAO;AACT;AAYO,SAAS,cAAc,MAAe,IAAa,WAAW,IAAmB;AACtF,QAAM,MAAqB,CAAC;AAE5B,MAAI,OAAO,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,MAAM,MAAM,QAAQ,EAAE,GAAG;AAC1E,QAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAC5D,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ,OAAO,QAAQ,OAAO,SAAS,UAAU;AAC5D,QAAI,SAAS,IAAI;AACf,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,EAAE,GAAG;AAC5C,QAAI,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,EAAE,GAAG;AAC/C,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAChB,QAAM,QAAQ;AACd,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAExE,aAAW,OAAO,SAAS;AACzB,UAAM,UAAU,IAAI,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI;AAC3D,UAAM,OAAO,GAAG,QAAQ,IAAI,OAAO;AACnC,QAAI,EAAE,OAAO,UAAU;AACrB,UAAI,KAAK,EAAE,IAAI,OAAO,MAAM,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD,WAAW,EAAE,OAAO,QAAQ;AAC1B,UAAI,KAAK,EAAE,IAAI,UAAU,KAAK,CAAC;AAAA,IACjC,OAAO;AACL,UAAI,KAAK,GAAG,cAAc,QAAQ,GAAG,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}

package/dist/types.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator. type vocabulary\n *\n * Wire-shape and in-memory types for the Coordinator. The schemas at\n * schemas/ are the normative wire types; these mirror them in\n * TypeScript for in-process use.\n */\n\nexport type ParticipantUri = string;\nexport type WorkspaceId    = string;\nexport type TaskId         = string;\nexport type ArtefactId     = string;\n\nexport type ParticipantType = \"human\" | \"agent\" | \"service\" | \"group\" | \"workspace\";\n\nexport interface Envelope {\n  jsonrpc: \"2.0\";\n  id?:     string | number;\n  method?: string;\n  params?: Record<string, unknown>;\n  result?: unknown;\n  error?:  { code: number; message: string; data?: unknown };\n  /** security-signed/1.0: top-level signature, signed over JCS of the\n   *  envelope with this field removed. Form: ``ed25519:<kid>:<b64>``. */\n  sig?: string;\n}\n\nexport type Mode = \"shadow\" | \"trial\" | \"production\";\nexport type WorkspaceState = \"active\" | \"paused\" | \"closed\";\nexport type PauseScope = \"task\" | \"participant\" | \"workspace\";\n\nexport type TaskState =\n  | \"created\"\n  | \"in_progress\"\n  | \"review_requested\"\n  | \"completed\"\n  | \"declined\"\n  | \"abstained\"\n  | \"escalated\"\n  | \"superseded\"\n  | \"paused\"\n  | \"cancelled\";\n\n// ============================================================\n//   Key records (security-signed/1.0)\n// ============================================================\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  use?: string;\n  alg?: string;\n}\n\n/** A participant's JWK plus the validity window. Lookup by\n *  (participant, kid, ts) so historical envelopes verify across\n *  rotation per security-signed/1.0 S3-S5. */\nexport interface KeyRecord {\n  jwk:         Jwk;\n  kid:         string;\n  valid_from:  string;            // ISO timestamp; inclusive\n  valid_until?: string;           // ISO timestamp; exclusive; absent = unbounded\n  revoked_at?: string;\n  revoked_reason?: string;\n}\n\n// ============================================================\n//   Participants\n// ============================================================\n\nexport interface Member {\n  uri:    ParticipantUri;\n  type:   ParticipantType;\n  role:   string;\n  joined: string;\n  display_name?: string;\n  capabilities?: Record<string, unknown>;\n  scopes?:       string[];\n  keys:          KeyRecord[];\n  paused:        boolean;         // control.pause scope=participant\n  oidc_sub?:     string;\n  oidc_auth_time?: number;        // unix seconds\n  oidc_acr?:     string;\n  vc_holder?:    string;\n}\n\n// ============================================================\n//   Routing hints\n// ============================================================\n\nexport interface TaskRoutingHints {\n  criticality?: \"low\" | \"medium\" | \"high\" | \"critical\";\n  deadline?:    string;\n  max_cost_usd?: number;\n  risk_tier?:   string;\n  [extra: string]: unknown;\n}\n\nexport interface ArtefactRoutingHints {\n  confidence?:        number | string;\n  model_id?:          string;\n  cost_consumed_usd?: number;\n  latency_ms?:        number;\n  [extra: string]:    unknown;\n}\n\n// ============================================================\n//   JSON Patch (RFC 6902)\n// ============================================================\n\nexport interface JsonPatchOp {\n  op:    \"add\" | \"replace\" | \"remove\" | \"copy\" | \"move\" | \"test\";\n  path:  string;\n  value?: unknown;\n  from?: string;\n}\n\n// ============================================================\n//   Override artefact (review/1.0)\n// ============================================================\n\nexport interface OverrideArtefact {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  reviewer:          ParticipantUri;\n  based_on_artefact: unknown;\n  diff:              JsonPatchOp[];\n  result:            unknown;\n  rationale:         string;\n  tags:              string[];\n  policy_refs:       string[];\n  ts:                string;\n  logical_id?:       string;\n  instance_id?:      string;\n  intent_preserved?: boolean;\n}\n\n// ============================================================\n//   Route decision artefact (routing/1.0)\n// ============================================================\n\nexport interface RouteDecisionArtefact {\n  id:             ArtefactId;\n  kind:           \"route_decision\";\n  decision_type:  \"task.route\" | \"review.depth\" | \"escalate.auto\";\n  outcome:        unknown;\n  produced_by:    ParticipantUri;\n  produced_at:    string;\n  task?:          TaskId;\n  policy_id?:     string;\n  hints_observed: Record<string, unknown>;\n  rationale:      string;\n  // Auxiliary fields per decision_type:\n  // task.route:     alternatives_considered\n  // review.depth:   sampling_probability\n  // escalate.auto:  escalation_target\n  [extra: string]: unknown;\n}\n\n// ============================================================\n//   Snapshot artefact (control/1.0)\n// ============================================================\n\nexport interface SnapshotArtefact {\n  id:           ArtefactId;\n  kind:         \"snapshot\";\n  ts:           string;\n  by:           ParticipantUri;\n  workspace:    WorkspaceId;\n  audit_seq:    number;\n  label?:       string;\n  include:      string[];\n  state:        Record<string, unknown>;\n}\n\n// ============================================================\n//   Whisper (whisper/1.0)\n// ============================================================\n\nexport interface WhisperPrompt {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  asker:             ParticipantUri;\n  askee:             ParticipantUri[];\n  question:          string;\n  options?:          Array<{ id: string; label?: string }>;\n  asked_at:          string;\n  deadline_ms:       number;\n  default_if_lapsed: unknown;\n  urgency:           \"low\" | \"medium\" | \"high\";\n  state:             \"pending\" | \"answered\" | \"lapsed\";\n  answered_at?:      string;\n  answered_by?:      ParticipantUri;\n  answer_option?:    string;\n  answer_text?:      string;\n  comment?:          string;\n  default_applied?:  unknown;\n}\n\n// ============================================================\n//   Deliberation (deliberation/1.0)\n// ============================================================\n\nexport interface DeliberationVote {\n  ts:            string;\n  voter:         ParticipantUri;\n  vote:          \"yea\" | \"nay\" | \"abstain\";\n  weight?:       number;\n  comment?:      string;\n  veto_invoked?: boolean;\n}\n\nexport interface Deliberation {\n  id:           string;\n  task_id?:     TaskId;\n  opener:       ParticipantUri;\n  participants: ParticipantUri[];\n  rule:         string;        // raw rule string\n  question?:    string;\n  weights?:     Record<ParticipantUri, number>;\n  veto?:        Record<ParticipantUri, boolean>;\n  deadline?:    string;\n  state:        \"open\" | \"closed\" | \"lapsed\";\n  comments:     { ts: string; from: ParticipantUri; text: string }[];\n  votes:        DeliberationVote[];\n  outcome?:     {\n    outcome:  \"approved\" | \"rejected\" | \"error\";\n    rule:     string;\n    tally?:   { yea: number; nay: number };\n    vetoes?:  ParticipantUri[];\n    reason?:  string;\n  };\n  opened_at:    string;\n}\n\n// ============================================================\n//   Handoff (handoff/1.0)\n// ============================================================\n\nexport interface HandoffTaskItem {\n  task_id:         TaskId;\n  title?:          string;\n  status_summary?: string;\n  next_action?:    string;\n  blockers?:       string[];\n}\n\nexport interface Handoff {\n  id:           string;\n  proposer:     ParticipantUri;\n  recipient:    ParticipantUri;     // single URI or \"group:...\"\n  proposed_at:  string;\n  tasks:        HandoffTaskItem[];\n  summary?:     string;\n  context_links: string[];\n  state:        \"proposed\" | \"accepted\" | \"declined\";\n  resolved_at?: string;\n  accepted_by?: ParticipantUri;\n  accepted_task_ids?: TaskId[];\n  accept_comment?:    string;\n  decline_reason?:    string;\n  decline_suggested_target?: ParticipantUri;\n}\n\n// ============================================================\n//   Review decision (review/1.0)\n// ============================================================\n\nexport interface ReviewDecision {\n  reviewer: ParticipantUri;\n  kind:     \"approve\" | \"reject\" | \"override\" | \"abstain\";\n  ts:       string;\n  comment?: string;\n  tags?:    string[];\n  override_artefact_id?: ArtefactId;\n  abstain_category?:     string;\n}\n\n// ============================================================\n//   Task\n// ============================================================\n\nexport interface Task {\n  id:           TaskId;\n  kind:         string;\n  state:        TaskState;\n  assignee:     ParticipantUri;\n  delegator:    ParticipantUri;\n  input:        Record<string, unknown>;\n  output?:      unknown;\n  confidence?:  number | string;\n  deadline?:    string;\n  created_at:   string;\n  updated_at:   string;\n  mode:         Mode;\n  review_required?: boolean;\n  routing_hints?:           TaskRoutingHints;\n  artefact_routing_hints?:  ArtefactRoutingHints;\n  review?: {\n    requested_at: string;\n    requested_to: ParticipantUri[];\n    rule:         string;\n    deadline?:    string;\n    decisions:    ReviewDecision[];\n  };\n  history:      { ts: string; from: ParticipantUri; state: TaskState; note?: string }[];\n  supersedes?:  TaskId;\n  superseded_by?: TaskId;\n  parent?:      TaskId;\n  paused:       boolean;\n  /** Transient: holds the artefact passed to review.request so\n   *  decide.override can use it as the patch base. */\n  pending_artefact?: unknown;\n}\n\n// ============================================================\n//   Audit\n// ============================================================\n\nexport interface AuditEntry {\n  seq:      number;\n  arrived:  string;\n  envelope: Envelope;\n  prev_hash?: string;\n}\n\n// ============================================================\n//   Workspace\n// ============================================================\n\nexport interface Workspace {\n  id:           WorkspaceId;\n  created:      string;\n  state:        WorkspaceState;\n  profiles:     string[];\n  mode:         Mode;\n  mode_ceiling: Mode;\n  routing_policy_uri?: string;\n  step_up_window_sec: number;\n  min_acr?: string;\n  members:         Map<ParticipantUri, Member>;\n  tasks:           Map<TaskId, Task>;\n  overrides:       Map<ArtefactId, OverrideArtefact>;\n  whispers:        Map<string, WhisperPrompt>;\n  deliberations:   Map<string, Deliberation>;\n  handoffs:        Map<string, Handoff>;\n  snapshots:       Map<ArtefactId, SnapshotArtefact>;\n  route_decisions: Map<ArtefactId, RouteDecisionArtefact>;\n  // task.create idempotency: caller-supplied key -> task_id.\n  idempotency_keys: Record<string, TaskId>;\n  audit:           AuditEntry[];\n  chain_head?:     string;\n  chain_enabled:   boolean;\n}\n\n/**\n * Listener callback invoked synchronously when an envelope is appended\n * to the workspace audit log.\n */\nexport type AuditListener = (workspace: Workspace, entry: AuditEntry) => void;\n\n/** True iff mode `a` is <= ceiling. */\nexport function modeLE(a: Mode, ceiling: Mode): boolean {\n  const order: Record<Mode, number> = { shadow: 0, trial: 1, production: 2 };\n  return order[a] <= order[ceiling];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA4WO,SAAS,OAAO,GAAS,SAAwB;AACtD,QAAM,QAA8B,EAAE,QAAQ,GAAG,OAAO,GAAG,YAAY,EAAE;AACzE,SAAO,MAAM,CAAC,KAAK,MAAM,OAAO;AAClC;","names":[]}
+{"version":3,"sources":["../src/types.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator. type vocabulary\n *\n * Wire-shape and in-memory types for the Coordinator. The schemas at\n * schemas/ are the normative wire types; these mirror them in\n * TypeScript for in-process use.\n */\n\nexport type ParticipantUri = string;\nexport type WorkspaceId    = string;\nexport type TaskId         = string;\nexport type ArtefactId     = string;\n\nexport type ParticipantType = \"human\" | \"agent\" | \"service\" | \"group\" | \"workspace\";\n\nexport interface Envelope {\n  jsonrpc: \"2.0\";\n  id?:     string | number;\n  method?: string;\n  params?: Record<string, unknown>;\n  result?: unknown;\n  error?:  { code: number; message: string; data?: unknown };\n  /** security-signed/1.0: top-level signature, signed over JCS of the\n   *  envelope with this field removed. Form: ``ed25519:<kid>:<b64>``. */\n  sig?: string;\n}\n\nexport type Mode = \"shadow\" | \"trial\" | \"production\";\nexport type WorkspaceState = \"active\" | \"paused\" | \"closed\";\nexport type PauseScope = \"task\" | \"participant\" | \"workspace\";\n\nexport type TaskState =\n  | \"created\"\n  | \"in_progress\"\n  | \"review_requested\"\n  | \"completed\"\n  | \"declined\"\n  | \"abstained\"\n  | \"escalated\"\n  | \"superseded\"\n  | \"paused\"\n  | \"cancelled\";\n\n// ============================================================\n//   Key records (security-signed/1.0)\n// ============================================================\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  use?: string;\n  alg?: string;\n}\n\n/** A participant's JWK plus the validity window. Lookup by\n *  (participant, kid, ts) so historical envelopes verify across\n *  rotation per security-signed/1.0 S3-S5. */\nexport interface KeyRecord {\n  jwk:         Jwk;\n  kid:         string;\n  valid_from:  string;            // ISO timestamp; inclusive\n  valid_until?: string;           // ISO timestamp; exclusive; absent = unbounded\n  revoked_at?: string;\n  revoked_reason?: string;\n}\n\n// ============================================================\n//   Participants\n// ============================================================\n\nexport interface Member {\n  uri:    ParticipantUri;\n  type:   ParticipantType;\n  role:   string;\n  joined: string;\n  display_name?: string;\n  capabilities?: Record<string, unknown>;\n  scopes?:       string[];\n  keys:          KeyRecord[];\n  paused:        boolean;         // control.pause scope=participant\n  oidc_sub?:     string;\n  oidc_auth_time?: number;        // unix seconds\n  oidc_acr?:     string;\n  vc_holder?:    string;\n}\n\n// ============================================================\n//   Routing hints\n// ============================================================\n\nexport interface TaskRoutingHints {\n  criticality?: \"low\" | \"medium\" | \"high\" | \"critical\";\n  deadline?:    string;\n  max_cost_usd?: number;\n  risk_tier?:   string;\n  [extra: string]: unknown;\n}\n\nexport interface ArtefactRoutingHints {\n  confidence?:        number | string;\n  model_id?:          string;\n  cost_consumed_usd?: number;\n  latency_ms?:        number;\n  [extra: string]:    unknown;\n}\n\n// ============================================================\n//   JSON Patch (RFC 6902)\n// ============================================================\n\nexport interface JsonPatchOp {\n  op:    \"add\" | \"replace\" | \"remove\" | \"copy\" | \"move\" | \"test\";\n  path:  string;\n  value?: unknown;\n  from?: string;\n}\n\n// ============================================================\n//   Override artefact (review/1.0)\n// ============================================================\n\nexport interface OverrideArtefact {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  reviewer:          ParticipantUri;\n  based_on_artefact: unknown;\n  diff:              JsonPatchOp[];\n  result:            unknown;\n  rationale:         string;\n  tags:              string[];\n  policy_refs:       string[];\n  ts:                string;\n  logical_id?:       string;\n  instance_id?:      string;\n  intent_preserved?: boolean;\n}\n\n// ============================================================\n//   Route decision artefact (routing/1.0)\n// ============================================================\n\nexport interface RouteDecisionArtefact {\n  id:             ArtefactId;\n  kind:           \"route_decision\";\n  decision_type:  \"task.route\" | \"review.depth\" | \"escalate.auto\";\n  outcome:        unknown;\n  produced_by:    ParticipantUri;\n  produced_at:    string;\n  task?:          TaskId;\n  policy_id?:     string;\n  hints_observed: Record<string, unknown>;\n  rationale:      string;\n  // Auxiliary fields per decision_type:\n  // task.route:     alternatives_considered\n  // review.depth:   sampling_probability\n  // escalate.auto:  escalation_target\n  [extra: string]: unknown;\n}\n\n// ============================================================\n//   Snapshot artefact (control/1.0)\n// ============================================================\n\nexport interface SnapshotArtefact {\n  id:           ArtefactId;\n  kind:         \"snapshot\";\n  produced_at:  string;\n  produced_by:  ParticipantUri;\n  content_hash: string;\n  content: {\n    workspace: WorkspaceId;\n    audit_seq: number;\n    label?:    string;\n    include:   string[];\n    state:     Record<string, unknown>;\n  };\n}\n\n// ============================================================\n//   Whisper (whisper/1.0)\n// ============================================================\n\nexport interface WhisperPrompt {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  asker:             ParticipantUri;\n  askee:             ParticipantUri[];\n  question:          string;\n  options?:          Array<{ id: string; label?: string }>;\n  asked_at:          string;\n  deadline_ms:       number;\n  default_if_lapsed: unknown;\n  urgency:           \"low\" | \"medium\" | \"high\";\n  state:             \"pending\" | \"answered\" | \"lapsed\";\n  answered_at?:      string;\n  answered_by?:      ParticipantUri;\n  answer_option?:    string;\n  answer_text?:      string;\n  comment?:          string;\n  default_applied?:  unknown;\n}\n\n// ============================================================\n//   Deliberation (deliberation/1.0)\n// ============================================================\n\nexport interface DeliberationVote {\n  ts:            string;\n  voter:         ParticipantUri;\n  vote:          \"yea\" | \"nay\" | \"abstain\";\n  weight?:       number;\n  comment?:      string;\n  veto_invoked?: boolean;\n}\n\nexport interface Deliberation {\n  id:           string;\n  task_id?:     TaskId;\n  opener:       ParticipantUri;\n  participants: ParticipantUri[];\n  rule:         string;        // raw rule string\n  question?:    string;\n  weights?:     Record<ParticipantUri, number>;\n  veto?:        Record<ParticipantUri, boolean>;\n  deadline?:    string;\n  state:        \"open\" | \"closed\" | \"lapsed\";\n  comments:     { ts: string; from: ParticipantUri; text: string }[];\n  votes:        DeliberationVote[];\n  outcome?:     {\n    outcome:  \"approved\" | \"rejected\" | \"error\";\n    rule:     string;\n    tally?:   { yea: number; nay: number };\n    vetoes?:  ParticipantUri[];\n    reason?:  string;\n  };\n  opened_at:    string;\n}\n\n// ============================================================\n//   Handoff (handoff/1.0)\n// ============================================================\n\nexport interface HandoffTaskItem {\n  task_id:         TaskId;\n  title?:          string;\n  status_summary?: string;\n  next_action?:    string;\n  blockers?:       string[];\n}\n\nexport interface Handoff {\n  id:           string;\n  proposer:     ParticipantUri;\n  recipient:    ParticipantUri;     // single URI or \"group:...\"\n  proposed_at:  string;\n  tasks:        HandoffTaskItem[];\n  summary?:     string;\n  context_links: string[];\n  state:        \"proposed\" | \"accepted\" | \"declined\";\n  resolved_at?: string;\n  accepted_by?: ParticipantUri;\n  accepted_task_ids?: TaskId[];\n  accept_comment?:    string;\n  decline_reason?:    string;\n  decline_suggested_target?: ParticipantUri;\n}\n\n// ============================================================\n//   Review decision (review/1.0)\n// ============================================================\n\nexport interface ReviewDecision {\n  reviewer: ParticipantUri;\n  kind:     \"approve\" | \"reject\" | \"override\" | \"abstain\";\n  ts:       string;\n  comment?: string;\n  tags?:    string[];\n  override_artefact_id?: ArtefactId;\n  abstain_category?:     string;\n}\n\n// ============================================================\n//   Task\n// ============================================================\n\nexport interface Task {\n  id:           TaskId;\n  kind:         string;\n  state:        TaskState;\n  assignee:     ParticipantUri;\n  delegator:    ParticipantUri;\n  input:        Record<string, unknown>;\n  output?:      unknown;\n  confidence?:  number | string;\n  deadline?:    string;\n  created_at:   string;\n  updated_at:   string;\n  mode:         Mode;\n  review_required?: boolean;\n  routing_hints?:           TaskRoutingHints;\n  artefact_routing_hints?:  ArtefactRoutingHints;\n  review?: {\n    requested_at: string;\n    requested_to: ParticipantUri[];\n    rule:         string;\n    deadline?:    string;\n    decisions:    ReviewDecision[];\n  };\n  history:      { ts: string; from: ParticipantUri; state: TaskState; note?: string }[];\n  supersedes?:  TaskId;\n  superseded_by?: TaskId;\n  parent?:      TaskId;\n  paused:       boolean;\n  paused_from?: TaskState;\n  /** Transient: holds the artefact passed to review.request so\n   *  decide.override can use it as the patch base. */\n  pending_artefact?: unknown;\n}\n\n// ============================================================\n//   Audit\n// ============================================================\n\nexport interface AuditEntry {\n  seq:      number;\n  arrived:  string;\n  /** The accepted call. Absent on a refusal entry. */\n  envelope?: Envelope;\n  /**\n   * The refused call, as received. Present only on a refusal entry, and held\n   * here rather than under `envelope` so a reader keyed on `envelope` passes\n   * the refusal by instead of replaying it (SPECIFICATION 10.1).\n   */\n  request?:  Envelope;\n  /** Present only on a refusal entry. */\n  outcome?:  RefusalOutcome;\n  prev_hash?: string;\n}\n\n/** Why a recorded call did not take effect. */\nexport interface RefusalOutcome {\n  status: \"refused\";\n  /** The error code the caller was answered with. */\n  code:   number;\n}\n\n// ============================================================\n//   Workspace\n// ============================================================\n\nexport interface Workspace {\n  id:           WorkspaceId;\n  created:      string;\n  state:        WorkspaceState;\n  profiles:     string[];\n  mode:         Mode;\n  mode_ceiling: Mode;\n  routing_policy_uri?: string;\n  step_up_window_sec: number;\n  min_acr?: string;\n  members:         Map<ParticipantUri, Member>;\n  tasks:           Map<TaskId, Task>;\n  overrides:       Map<ArtefactId, OverrideArtefact>;\n  whispers:        Map<string, WhisperPrompt>;\n  deliberations:   Map<string, Deliberation>;\n  handoffs:        Map<string, Handoff>;\n  snapshots:       Map<ArtefactId, SnapshotArtefact>;\n  route_decisions: Map<ArtefactId, RouteDecisionArtefact>;\n  // task.create idempotency: caller-supplied key -> task_id.\n  idempotency_keys: Record<string, TaskId>;\n  audit:           AuditEntry[];\n  chain_head?:     string;\n  chain_enabled:   boolean;\n}\n\n/**\n * Listener callback invoked synchronously when an envelope is appended\n * to the workspace audit log.\n */\nexport type AuditListener = (workspace: Workspace, entry: AuditEntry) => void;\n\n/** True iff mode `a` is <= ceiling. */\nexport function modeLE(a: Mode, ceiling: Mode): boolean {\n  const order: Record<Mode, number> = { shadow: 0, trial: 1, production: 2 };\n  return order[a] <= order[ceiling];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAgYO,SAAS,OAAO,GAAS,SAAwB;AACtD,QAAM,QAA8B,EAAE,QAAQ,GAAG,OAAO,GAAG,YAAY,EAAE;AACzE,SAAO,MAAM,CAAC,KAAK,MAAM,OAAO;AAClC;","names":[]}

package/dist/types.d.cts

@@ -114,13 +114,16 @@ interface RouteDecisionArtefact {
 interface SnapshotArtefact {
     id: ArtefactId;
     kind: "snapshot";
-    ts: string;
-    by: ParticipantUri;
-    workspace: WorkspaceId;
-    audit_seq: number;
-    label?: string;
-    include: string[];
-    state: Record<string, unknown>;
+    produced_at: string;
+    produced_by: ParticipantUri;
+    content_hash: string;
+    content: {
+        workspace: WorkspaceId;
+        audit_seq: number;
+        label?: string;
+        include: string[];
+        state: Record<string, unknown>;
+    };
 }
 interface WhisperPrompt {
     id: ArtefactId;
@@ -246,6 +249,7 @@ interface Task {
     superseded_by?: TaskId;
     parent?: TaskId;
     paused: boolean;
+    paused_from?: TaskState;
     /** Transient: holds the artefact passed to review.request so
      *  decide.override can use it as the patch base. */
     pending_artefact?: unknown;
@@ -253,9 +257,24 @@ interface Task {
 interface AuditEntry {
     seq: number;
     arrived: string;
-    envelope: Envelope;
+    /** The accepted call. Absent on a refusal entry. */
+    envelope?: Envelope;
+    /**
+     * The refused call, as received. Present only on a refusal entry, and held
+     * here rather than under `envelope` so a reader keyed on `envelope` passes
+     * the refusal by instead of replaying it (SPECIFICATION 10.1).
+     */
+    request?: Envelope;
+    /** Present only on a refusal entry. */
+    outcome?: RefusalOutcome;
     prev_hash?: string;
 }
+/** Why a recorded call did not take effect. */
+interface RefusalOutcome {
+    status: "refused";
+    /** The error code the caller was answered with. */
+    code: number;
+}
 interface Workspace {
     id: WorkspaceId;
     created: string;
@@ -287,4 +306,4 @@ type AuditListener = (workspace: Workspace, entry: AuditEntry) => void;
 /** True iff mode `a` is <= ceiling. */
 declare function modeLE(a: Mode, ceiling: Mode): boolean;
 
-export { type ArtefactId, type ArtefactRoutingHints, type AuditEntry, type AuditListener, type Deliberation, type DeliberationVote, type Envelope, type Handoff, type HandoffTaskItem, type JsonPatchOp, type Jwk, type KeyRecord, type Member, type Mode, type OverrideArtefact, type ParticipantType, type ParticipantUri, type PauseScope, type ReviewDecision, type RouteDecisionArtefact, type SnapshotArtefact, type Task, type TaskId, type TaskRoutingHints, type TaskState, type WhisperPrompt, type Workspace, type WorkspaceId, type WorkspaceState, modeLE };
+export { type ArtefactId, type ArtefactRoutingHints, type AuditEntry, type AuditListener, type Deliberation, type DeliberationVote, type Envelope, type Handoff, type HandoffTaskItem, type JsonPatchOp, type Jwk, type KeyRecord, type Member, type Mode, type OverrideArtefact, type ParticipantType, type ParticipantUri, type PauseScope, type RefusalOutcome, type ReviewDecision, type RouteDecisionArtefact, type SnapshotArtefact, type Task, type TaskId, type TaskRoutingHints, type TaskState, type WhisperPrompt, type Workspace, type WorkspaceId, type WorkspaceState, modeLE };