@brightbeamai/chap-coordinator 0.2.9 → 0.2.10

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { C as CoordinatorOptions, a as Coordinator } from './api-DE78DA0o.cjs';
-export { b as CoordinatorApi, c as CoordinatorError, d as CredentialVerifier, E as EscalationPolicyFn, H as Handler, I as IdFactory, P as PRIVILEGED_METHODS, R as ReviewDepthPolicyFn, e as RoutingPolicyFn, S as ScittReceiptVerifier, f as ScittSubmitter, T as TokenVerifier, g as call, m as makeApi } from './api-DE78DA0o.cjs';
+import { C as CoordinatorOptions, a as Coordinator } from './api-CcT_8H5j.cjs';
+export { b as CoordinatorApi, c as CoordinatorError, d as CredentialVerifier, E as EscalationPolicyFn, H as Handler, I as IdFactory, P as PRIVILEGED_METHODS, R as ReviewDepthPolicyFn, e as RoutingPolicyFn, S as ScittReceiptVerifier, f as ScittSubmitter, T as TokenVerifier, g as call, m as makeApi } from './api-CcT_8H5j.cjs';
 export { MethodName, MethodParams, MethodResult, MethodTable } from './methods.cjs';
 export { MemoryStore, Store, WorkspaceRecord } from './storage/store.cjs';
 export { ArtefactId, ArtefactRoutingHints, AuditEntry, AuditListener, Deliberation, DeliberationVote, Envelope, Handoff, HandoffTaskItem, JsonPatchOp, Jwk, KeyRecord, Member, Mode, OverrideArtefact, ParticipantType, ParticipantUri, PauseScope, ReviewDecision, RouteDecisionArtefact, SnapshotArtefact, Task, TaskId, TaskRoutingHints, TaskState, WhisperPrompt, Workspace, WorkspaceId, WorkspaceState, modeLE } from './types.cjs';

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as CoordinatorOptions, a as Coordinator } from './api-CPEk0V6i.js';
-export { b as CoordinatorApi, c as CoordinatorError, d as CredentialVerifier, E as EscalationPolicyFn, H as Handler, I as IdFactory, P as PRIVILEGED_METHODS, R as ReviewDepthPolicyFn, e as RoutingPolicyFn, S as ScittReceiptVerifier, f as ScittSubmitter, T as TokenVerifier, g as call, m as makeApi } from './api-CPEk0V6i.js';
+import { C as CoordinatorOptions, a as Coordinator } from './api-Cvkhcalw.js';
+export { b as CoordinatorApi, c as CoordinatorError, d as CredentialVerifier, E as EscalationPolicyFn, H as Handler, I as IdFactory, P as PRIVILEGED_METHODS, R as ReviewDepthPolicyFn, e as RoutingPolicyFn, S as ScittReceiptVerifier, f as ScittSubmitter, T as TokenVerifier, g as call, m as makeApi } from './api-Cvkhcalw.js';
 export { MethodName, MethodParams, MethodResult, MethodTable } from './methods.js';
 export { MemoryStore, Store, WorkspaceRecord } from './storage/store.js';
 export { ArtefactId, ArtefactRoutingHints, AuditEntry, AuditListener, Deliberation, DeliberationVote, Envelope, Handoff, HandoffTaskItem, JsonPatchOp, Jwk, KeyRecord, Member, Mode, OverrideArtefact, ParticipantType, ParticipantUri, PauseScope, ReviewDecision, RouteDecisionArtefact, SnapshotArtefact, Task, TaskId, TaskRoutingHints, TaskState, WhisperPrompt, Workspace, WorkspaceId, WorkspaceState, modeLE } from './types.js';

package/dist/index.js

@@ -211,6 +211,7 @@ var E = {
   NOT_AUTHORISED: -32011,
   PATCH_FAILED: -32012,
   REVIEW_LAPSED: -32013,
+  REVIEW_ALREADY_OPEN: -32014,
   // whisper/1.0 profile (profiles/whisper.md S6)
   WHISPER_ALREADY_ANSWERED: -32020,
   WHISPER_LAPSED: -32021,
@@ -237,6 +238,7 @@ var E = {
   SIG_KEY_NOT_FOUND: -32071,
   SIG_KEY_REVOKED: -32072,
   SIG_ROTATION_KEY_MISMATCH: -32073,
+  SIG_ARTEFACT_DIGEST_MISMATCH: -32074,
   // audit-scitt/1.0 profile (profiles/audit-scitt.md S8)
   SCITT_UNREACHABLE: -32080,
   SCITT_STATEMENT_REJECTED: -32081,
@@ -704,6 +706,12 @@ function registerAuditScitt(coord) {
     if (!(ws.chain_enabled || coord.options.enableChain)) {
       return { error: rpcError(E.PARAMS, "Chain not enabled for this workspace") };
     }
+    if (p.from_seq !== void 0 || p.to_seq !== void 0) {
+      return { error: rpcError(
+        E.PARAMS,
+        "Range verification is not implemented; omit from_seq and to_seq to verify the whole log."
+      ) };
+    }
     let start = ws.audit.findIndex((e) => e.prev_hash != null);
     if (start < 0) start = ws.audit.length;
     const errors = [];
@@ -715,16 +723,35 @@ function registerAuditScitt(coord) {
       }
       prev = sha256Hex(Buffer.concat([canonicalize(e.envelope), Buffer.from(expectedPrev, "utf-8")]));
     }
-    const storedHead = ws.chain_head ?? ZERO_HASH;
+    const storedHead = ws.chain_head === void 0 || ws.chain_head === null ? ZERO_HASH : ws.chain_head;
     if (prev !== storedHead) {
       errors.push("chain_head mismatch: replay does not match stored head");
     }
     if (errors.length) {
       return { error: rpcError(E.PARAMS, errors.join("; ")) };
     }
+    const entriesTotal = ws.audit.length;
+    const entriesChecked = entriesTotal - start;
+    const entriesUnchecked = start;
+    if (entriesUnchecked > 0) {
+      return { result: {
+        status: "not_evaluated",
+        ok: false,
+        reason: "unchained_prefix",
+        entries_total: entriesTotal,
+        entries_checked: entriesChecked,
+        entries_unchecked: entriesUnchecked,
+        checked_from_seq: entriesChecked > 0 ? ws.audit[start].seq : null,
+        chain_head: storedHead
+      } };
+    }
     return { result: {
+      status: "verified",
       ok: true,
-      entries_checked: ws.audit.length - start,
+      entries_total: entriesTotal,
+      entries_checked: entriesChecked,
+      entries_unchecked: 0,
+      checked_from_seq: entriesChecked > 0 ? ws.audit[start].seq : null,
       chain_head: storedHead
     } };
   });
@@ -2415,12 +2442,38 @@ var Coordinator = class {
     const reviewers = Array.isArray(to) ? to : typeof to === "string" ? [to] : [];
     if (!reviewers.length) return { error: rpcError(E.PARAMS, "review.request needs 'to'") };
     const now = this.now();
+    const rule = p.rule || "any_one_approves";
+    if (task.state === "review_requested" && task.review) {
+      if (contentHash(task.pending_artefact) !== contentHash(p.artefact)) {
+        return { error: rpcError(
+          E.REVIEW_ALREADY_OPEN,
+          "A review is already open on this task with different content. Decide, abstain, escalate or cancel it before requesting review of a new artefact."
+        ) };
+      }
+      if (rule !== task.review.rule) {
+        return { error: rpcError(
+          E.REVIEW_ALREADY_OPEN,
+          `Cannot change the decision rule of an open review (currently ${task.review.rule})`
+        ) };
+      }
+      for (const r of reviewers) {
+        if (!task.review.requested_to.includes(r)) task.review.requested_to.push(r);
+      }
+      if (p.deadline !== void 0) task.review.deadline = p.deadline;
+      task.updated_at = now;
+      return { result: {
+        state: "review_requested",
+        review_id: task.id,
+        amended: true,
+        requested_to: [...task.review.requested_to]
+      } };
+    }
     task.state = "review_requested";
     task.updated_at = now;
     task.review = {
       requested_at: now,
       requested_to: reviewers,
-      rule: p.rule || "any_one_approves",
+      rule,
       deadline: p.deadline,
       decisions: []
     };
@@ -2428,6 +2481,37 @@ var Coordinator = class {
     task.pending_artefact = p.artefact;
     return { result: { state: "review_requested", review_id: task.id } };
   }
+  /**
+   * Verify an optional `approved_artefact_digest` against the artefact under
+   * review (review/1.0 S3.2).
+   *
+   * The digest sits in params, so it is inside whatever the envelope signature
+   * covers: the decision then attests the content the reviewer saw rather than
+   * a task reference, and a relying party can check it without trusting the
+   * Coordinator that produced it. Absent, behaviour is exactly as before.
+   *
+   * On mismatch nothing is recorded and no state changes, so a client that
+   * computes the wrong digest refuses only its own decision.
+   */
+  checkArtefactDigest(p, task) {
+    const declared = p.approved_artefact_digest;
+    if (declared === void 0 || declared === null) return null;
+    if (typeof declared !== "string") {
+      return { error: rpcError(E.PARAMS, "approved_artefact_digest must be a string") };
+    }
+    if (task.pending_artefact === void 0) {
+      return { error: rpcError(E.PARAMS, "No artefact under review to bind a digest to") };
+    }
+    const actual = contentHash(task.pending_artefact);
+    if (declared !== actual) {
+      return { error: rpcError(
+        E.SIG_ARTEFACT_DIGEST_MISMATCH,
+        "approved_artefact_digest does not match the artefact under review",
+        { declared, actual }
+      ) };
+    }
+    return null;
+  }
   opDecide(p, kind) {
     const miss = missing(p, ["workspace", "from", "task_id"]);
     if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };
@@ -2444,6 +2528,8 @@ var Coordinator = class {
     }
     const notReviewer = this.requireReviewer(task, p.from);
     if (notReviewer) return notReviewer;
+    const digestError = this.checkArtefactDigest(p, task);
+    if (digestError) return digestError;
     const now = this.now();
     task.review.decisions.push({
       reviewer: p.from,
@@ -2478,6 +2564,8 @@ var Coordinator = class {
     }
     const notReviewer = this.requireReviewer(task, p.from);
     if (notReviewer) return notReviewer;
+    const digestError = this.checkArtefactDigest(p, task);
+    if (digestError) return digestError;
     const base = task.pending_artefact;
     if (base === void 0) return { error: rpcError(E.PARAMS, "No base artefact for override") };
     let applied;