@cat-factory/kernel 0.214.1 → 0.216.0

package/dist/domain/binary-generator-registry.d.ts

@@ -0,0 +1,66 @@
+import type { ApiContractDocument, ApiContractSummary, BinaryGeneratorCredential, BinaryGeneratorDefinition, BinaryModality } from '@cat-factory/contracts';
+/**
+ * The wire definition verbatim, re-exported so a deployment registering an integration imports
+ * one name from the layer it is already wiring against (the same courtesy
+ * `FoundationalServiceDefinition` does for the estate registry).
+ */
+export type { BinaryGeneratorDefinition };
+/**
+ * A registered integration as the ENGINE reads it: identity, what it produces, how to reach it,
+ * and its contracts SUMMARISED (operation names, sizes) — never the document bodies, which the
+ * brief renderer fetches separately for exactly the ids a step selected.
+ *
+ * The credential appears here as its DECLARATION only (a key name and how to present it). The
+ * value is resolved per dispatch, on the container executor's side of the seam, and travels on
+ * the job body alone.
+ */
+export interface BinaryGeneratorView {
+    id: string;
+    name: string;
+    summary: string;
+    description: string;
+    modalities: BinaryModality[];
+    mediaTypes: string[];
+    endpoint?: string;
+    guidance?: string;
+    credential?: BinaryGeneratorCredential;
+    contracts: ApiContractSummary[];
+}
+/**
+ * App-owned registry of the deployment's generative binary integrations. The composition root
+ * news ONE instance and a deployment registers its integrations on it by reference; the engine
+ * resolves a step's selection against it at admission and at every dispatch.
+ */
+export declare class BinaryGeneratorRegistry {
+    private readonly definitions;
+    /**
+     * Memoised projection, for the same reason the foundational registry memoises its own:
+     * building it parses every registered contract document, and a step's brief is resolved per
+     * dispatch (on the Worker, per isolate). Views and documents are built TOGETHER from one
+     * summary per contract, so an agent can never be handed a document whose operation list
+     * disagrees with the one its step was validated against.
+     */
+    private projection;
+    /** Register an integration. A registration whose id matches an earlier one replaces it. */
+    register(definition: BinaryGeneratorDefinition): void;
+    /** Register several integrations at once. */
+    registerAll(definitions: Iterable<BinaryGeneratorDefinition>): void;
+    /** The registered definitions, contract bodies included (registration order). */
+    all(): BinaryGeneratorDefinition[];
+    /** Every registered id — what a step's selection and a settled step's declaration resolve against. */
+    ids(): string[];
+    /** The engine-facing projection of every registered integration (no document bodies). */
+    views(): BinaryGeneratorView[];
+    /** The full contract documents of one registered integration, for its injected context file. */
+    documentsFor(id: string): ApiContractDocument[];
+    private build;
+}
+/**
+ * A fresh, EMPTY generator registry. Each facade news one and a deployment registers its
+ * integrations on it; the platform ships none (there is no image generator every organisation
+ * runs, and every one of them is metered), so the default selection set stays empty and a step
+ * that selects an id on such a deployment is refused at admission rather than dispatching an
+ * agent that cannot generate.
+ */
+export declare function defaultBinaryGeneratorRegistry(): BinaryGeneratorRegistry;
+//# sourceMappingURL=binary-generator-registry.d.ts.map

package/dist/domain/binary-generator-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-generator-registry.d.ts","sourceRoot":"","sources":["../../src/domain/binary-generator-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACf,MAAM,wBAAwB,CAAA;AAG/B;;;;GAIG;AACH,YAAY,EAAE,yBAAyB,EAAE,CAAA;AAqBzC;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,cAAc,EAAE,CAAA;IAC5B,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,yBAAyB,CAAA;IACtC,SAAS,EAAE,kBAAkB,EAAE,CAAA;CAChC;AAED;;;;GAIG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+C;IAC3E;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAGH;IAEf,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,yBAAyB,GAAG,IAAI,CAGpD;IAED,6CAA6C;IAC7C,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAElE;IAED,iFAAiF;IACjF,GAAG,IAAI,yBAAyB,EAAE,CAEjC;IAED,sGAAsG;IACtG,GAAG,IAAI,MAAM,EAAE,CAEd;IAED,yFAAyF;IACzF,KAAK,IAAI,mBAAmB,EAAE,CAE7B;IAED,gGAAgG;IAChG,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAE9C;IAED,OAAO,CAAC,KAAK;CAwCd;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,IAAI,uBAAuB,CAExE"}

package/dist/domain/binary-generator-registry.js

@@ -0,0 +1,89 @@
+import { summarizeContract } from './foundational-services.js';
+/**
+ * App-owned registry of the deployment's generative binary integrations. The composition root
+ * news ONE instance and a deployment registers its integrations on it by reference; the engine
+ * resolves a step's selection against it at admission and at every dispatch.
+ */
+export class BinaryGeneratorRegistry {
+    definitions = new Map();
+    /**
+     * Memoised projection, for the same reason the foundational registry memoises its own:
+     * building it parses every registered contract document, and a step's brief is resolved per
+     * dispatch (on the Worker, per isolate). Views and documents are built TOGETHER from one
+     * summary per contract, so an agent can never be handed a document whose operation list
+     * disagrees with the one its step was validated against.
+     */
+    projection = null;
+    /** Register an integration. A registration whose id matches an earlier one replaces it. */
+    register(definition) {
+        this.definitions.set(definition.id, definition);
+        this.projection = null;
+    }
+    /** Register several integrations at once. */
+    registerAll(definitions) {
+        for (const definition of definitions)
+            this.register(definition);
+    }
+    /** The registered definitions, contract bodies included (registration order). */
+    all() {
+        return [...this.definitions.values()];
+    }
+    /** Every registered id — what a step's selection and a settled step's declaration resolve against. */
+    ids() {
+        return [...this.definitions.keys()];
+    }
+    /** The engine-facing projection of every registered integration (no document bodies). */
+    views() {
+        return this.build().views;
+    }
+    /** The full contract documents of one registered integration, for its injected context file. */
+    documentsFor(id) {
+        return this.build().documents.get(id) ?? [];
+    }
+    build() {
+        if (this.projection)
+            return this.projection;
+        const views = [];
+        const documents = new Map();
+        for (const definition of this.definitions.values()) {
+            const summarized = (definition.contracts ?? []).map((contract) => ({
+                summary: summarizeContract({
+                    contractId: contract.contractId,
+                    format: contract.format,
+                    title: contract.title,
+                    // A registered definition has no repo provenance: its source of truth is the
+                    // deployment's own code, which no path of ours can name.
+                    path: null,
+                    body: contract.body,
+                }),
+                body: contract.body,
+            }));
+            views.push({
+                id: definition.id,
+                name: definition.name,
+                summary: definition.summary,
+                description: definition.description,
+                modalities: [...definition.modalities],
+                mediaTypes: [...(definition.mediaTypes ?? [])],
+                ...(definition.endpoint ? { endpoint: definition.endpoint } : {}),
+                ...(definition.guidance ? { guidance: definition.guidance } : {}),
+                ...(definition.credential ? { credential: definition.credential } : {}),
+                contracts: summarized.map((c) => c.summary),
+            });
+            documents.set(definition.id, summarized.map((c) => ({ ...c.summary, body: c.body })));
+        }
+        this.projection = { views, documents };
+        return this.projection;
+    }
+}
+/**
+ * A fresh, EMPTY generator registry. Each facade news one and a deployment registers its
+ * integrations on it; the platform ships none (there is no image generator every organisation
+ * runs, and every one of them is metered), so the default selection set stays empty and a step
+ * that selects an id on such a deployment is refused at admission rather than dispatching an
+ * agent that cannot generate.
+ */
+export function defaultBinaryGeneratorRegistry() {
+    return new BinaryGeneratorRegistry();
+}
+//# sourceMappingURL=binary-generator-registry.js.map

package/dist/domain/binary-generator-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-generator-registry.js","sourceRoot":"","sources":["../../src/domain/binary-generator-registry.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAkD9D;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IACjB,WAAW,GAAG,IAAI,GAAG,EAAqC,CAAA;IAC3E;;;;;;OAMG;IACK,UAAU,GAGP,IAAI,CAAA;IAEf,2FAA2F;IAC3F,QAAQ,CAAC,UAAqC;QAC5C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;IACxB,CAAC;IAED,6CAA6C;IAC7C,WAAW,CAAC,WAAgD;QAC1D,KAAK,MAAM,UAAU,IAAI,WAAW;YAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACjE,CAAC;IAED,iFAAiF;IACjF,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,sGAAsG;IACtG,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;IACrC,CAAC;IAED,yFAAyF;IACzF,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAA;IAC3B,CAAC;IAED,gGAAgG;IAChG,YAAY,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;IAC7C,CAAC;IAEO,KAAK;QAIX,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAA;QAC3C,MAAM,KAAK,GAA0B,EAAE,CAAA;QACvC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAA;QAC1D,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACjE,OAAO,EAAE,iBAAiB,CAAC;oBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,6EAA6E;oBAC7E,yDAAyD;oBACzD,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,QAAQ,CAAC,IAAI;iBACpB,CAAC;gBACF,IAAI,EAAE,QAAQ,CAAC,IAAI;aACpB,CAAC,CAAC,CAAA;YACH,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC;gBACtC,UAAU,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;gBAC9C,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aAC5C,CAAC,CAAA;YACF,SAAS,CAAC,GAAG,CACX,UAAU,CAAC,EAAE,EACb,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CACxD,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;QACtC,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B;IAC5C,OAAO,IAAI,uBAAuB,EAAE,CAAA;AACtC,CAAC"}

package/dist/domain/binary-generators.d.ts

@@ -0,0 +1,97 @@
+import type { BinaryModality, BinaryOutputConfig } from '@cat-factory/contracts';
+import type { BinaryGeneratorView } from './binary-generator-registry.js';
+import { BINARY_GENERATOR_CONTEXT_DIR, binaryGeneratorContextFileFor } from './binary-output-paths.js';
+export { BINARY_GENERATOR_CONTEXT_DIR, binaryGeneratorContextFileFor };
+/**
+ * One selected integration as a DISPATCH sees it — the projection the engine puts on
+ * `AgentRunContext`, so the container executor can resolve the credential without needing the
+ * registry or the step (it has neither: it rebuilds a dispatch from the context alone).
+ *
+ * Non-secret by construction, exactly like `ResolvedToolServer`: the credential's KEY NAME is
+ * here because the agent must be told which variable to read, and the VALUE travels on the job
+ * body's dedicated field, which the agent-context telemetry snapshot omits.
+ */
+export interface ResolvedBinaryGenerator {
+    id: string;
+    label: string;
+    modalities: BinaryModality[];
+    /** The environment variable the credential is delivered as; absent ⇒ none is declared. */
+    credentialKey?: string;
+    /** Whether a missing credential means the integration must not be called (defaults true). */
+    credentialRequired?: boolean;
+}
+/** Project a resolved selection into what the dispatch carries. Unresolved ids contribute
+ *  nothing — the BRIEF is where they are stated, because only prose can say what to do about
+ *  one, and a half-built entry here would look to the executor like something to authenticate. */
+export declare function dispatchBinaryGenerators(selection: ResolvedBinaryGeneratorSelection): ResolvedBinaryGenerator[];
+/** One way a step's generative-integration selection fails against the registry. */
+export type BinaryGeneratorSelectionIssue = 
+/** A selected id no registered integration answers to. */
+{
+    problem: 'unknown_generator';
+    generatorId: string;
+}
+/**
+ * A content type the step declares it must deliver that NO selected integration produces.
+ * About a requirement rather than an id, which is why it names no generator: the fix is to
+ * select one that makes this kind of thing (or to stop claiming the step delivers it).
+ */
+ | {
+    problem: 'modality_uncovered';
+    modality: BinaryModality;
+};
+/** A step's selection, resolved against the registry's views. */
+export interface ResolvedBinaryGeneratorSelection {
+    /** The integrations that resolved, in selection order. */
+    selected: BinaryGeneratorView[];
+    /** Selected ids the registry does not answer to, in selection order. */
+    unresolvedIds: string[];
+}
+/**
+ * Resolve a step's `generatorIds` against the registry's views. Pure and shared by admission and
+ * the brief, so the two can never disagree about which integrations a step has — the brief runs
+ * per dispatch and would otherwise re-derive a set admission already judged.
+ */
+export declare function resolveBinaryGeneratorSelection(config: BinaryOutputConfig | undefined, generators: readonly BinaryGeneratorView[]): ResolvedBinaryGeneratorSelection;
+/**
+ * Validate a step's generative selection against the RESOLVED registry: every selected id must
+ * be registered, and every content type the step declares it delivers must be produced by at
+ * least one of them.
+ *
+ * The coverage rule is the one worth having. A step that must deliver a theme song and selected
+ * only an image generator is broken in a way nothing downstream can detect — the agent will
+ * generate what it can, store it, and report the rest as an omission at the end of a paid run,
+ * which reads as a model failure rather than as the configuration error it is.
+ *
+ * Returns EVERY issue rather than the first, like its storage-side sibling, so one edit clears a
+ * step that lost three integrations instead of three refuse-fix-restart rounds.
+ */
+export declare function binaryGeneratorSelectionIssues(config: BinaryOutputConfig | undefined, generators: readonly BinaryGeneratorView[]): BinaryGeneratorSelectionIssue[];
+/** The content type in words, for a message a human reads. */
+export declare function describeModality(modality: BinaryModality): string;
+/**
+ * The operator-facing message for a refused generative selection, naming EVERY issue.
+ *
+ * Prose, not localized copy: the SPA keys its translated toast off the envelope's
+ * `details.reason` / `details.issues` and reveals this text under "Show details" (the standing
+ * split — the backend does not localize, and the operator remedy it writes must still be
+ * reachable).
+ */
+export declare function describeBinaryGeneratorSelectionIssues(agentKind: string, issues: readonly BinaryGeneratorSelectionIssue[]): string;
+/**
+ * The brief's GENERATION section: which integrations this step may call, what each produces, how
+ * to authenticate, and every gap.
+ *
+ * Every rule here exists because the alternative is an agent guessing. It names the content types
+ * per integration so a step holding both an image and a music generator cannot ask one for the
+ * other's output; it names the credential's ENVIRONMENT VARIABLE and says what an unset one means
+ * (the platform could not provide it — do not call, report), because the agent is the only party
+ * that can see whether the value arrived; and it states an unresolved id rather than dropping it,
+ * because a selection that silently shrinks reads as a step nobody configured.
+ */
+export declare function renderBinaryGeneratorSection(input: {
+    selection: ResolvedBinaryGeneratorSelection;
+    /** The content types the step declares it must deliver (`stepOptions.binaryOutput.modalities`). */
+    requestedModalities: BinaryModality[];
+}): string[];
+//# sourceMappingURL=binary-generators.d.ts.map

package/dist/domain/binary-generators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-generators.d.ts","sourceRoot":"","sources":["../../src/domain/binary-generators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AACzE,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC9B,MAAM,0BAA0B,CAAA;AAsBjC,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,CAAA;AAEtE;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,cAAc,EAAE,CAAA;IAC5B,0FAA0F;IAC1F,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,6FAA6F;IAC7F,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAC7B;AAED;;kGAEkG;AAClG,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,gCAAgC,GAC1C,uBAAuB,EAAE,CAQ3B;AAED,oFAAoF;AACpF,MAAM,MAAM,6BAA6B;AACvC,0DAA0D;AACxD;IAAE,OAAO,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AACvD;;;;GAIG;GACD;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAA;CAAE,CAAA;AAE/D,iEAAiE;AACjE,MAAM,WAAW,gCAAgC;IAC/C,0DAA0D;IAC1D,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,wEAAwE;IACxE,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,UAAU,EAAE,SAAS,mBAAmB,EAAE,GACzC,gCAAgC,CAUlC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,UAAU,EAAE,SAAS,mBAAmB,EAAE,GACzC,6BAA6B,EAAE,CAWjC;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAajE;AAED;;;;;;;GAOG;AACH,wBAAgB,sCAAsC,CACpD,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,6BAA6B,EAAE,GAC/C,MAAM,CAYR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,SAAS,EAAE,gCAAgC,CAAA;IAC3C,mGAAmG;IACnG,mBAAmB,EAAE,cAAc,EAAE,CAAA;CACtC,GAAG,MAAM,EAAE,CAoDX"}

package/dist/domain/binary-generators.js

@@ -0,0 +1,212 @@
+import { BINARY_GENERATOR_CONTEXT_DIR, binaryGeneratorContextFileFor, } from './binary-output-paths.js';
+// ---------------------------------------------------------------------------
+// Pure logic for the GENERATIVE half of a binary-output step: resolving a step's selected
+// integrations against the deployment's `BinaryGeneratorRegistry`, refusing a selection that
+// cannot do the step's job, and rendering what the agent is told about them.
+//
+// Deliberately a sibling of `binary-outputs.ts` rather than more of it, because the two halves
+// resolve against DIFFERENT registries and their failures need different fixes: an unresolved
+// storage id is a workspace-catalog problem (register the service, or fix the step), while an
+// unknown generator id is a DEPLOYMENT CODE problem (nobody registered that integration in this
+// build). Collapsing them into one refusal would send whoever reads it to the wrong place.
+//
+// No I/O and no registry access — every rule here is a function of a selection and a list of
+// views, so run admission and the dispatch-time brief apply identical rules and both facades get
+// identical behaviour by construction.
+// ---------------------------------------------------------------------------
+// The `.cat-context/` path vocabulary lives in a LEAF module (`binary-output-paths.ts`) that this
+// file and its `binary-outputs.ts` sibling both import: the two import each other, so a constant
+// derived across that cycle is a module-init TDZ crash in the assembled backend. Re-exported here
+// so every consumer keeps importing the name from where it always did.
+export { BINARY_GENERATOR_CONTEXT_DIR, binaryGeneratorContextFileFor };
+/** Project a resolved selection into what the dispatch carries. Unresolved ids contribute
+ *  nothing — the BRIEF is where they are stated, because only prose can say what to do about
+ *  one, and a half-built entry here would look to the executor like something to authenticate. */
+export function dispatchBinaryGenerators(selection) {
+    return selection.selected.map((generator) => ({
+        id: generator.id,
+        label: generator.name,
+        modalities: [...generator.modalities],
+        ...(generator.credential ? { credentialKey: generator.credential.key } : {}),
+        ...(generator.credential?.required === false ? { credentialRequired: false } : {}),
+    }));
+}
+/**
+ * Resolve a step's `generatorIds` against the registry's views. Pure and shared by admission and
+ * the brief, so the two can never disagree about which integrations a step has — the brief runs
+ * per dispatch and would otherwise re-derive a set admission already judged.
+ */
+export function resolveBinaryGeneratorSelection(config, generators) {
+    const byId = new Map(generators.map((generator) => [generator.id, generator]));
+    const selected = [];
+    const unresolvedIds = [];
+    for (const id of config?.generatorIds ?? []) {
+        const generator = byId.get(id);
+        if (generator)
+            selected.push(generator);
+        else
+            unresolvedIds.push(id);
+    }
+    return { selected, unresolvedIds };
+}
+/**
+ * Validate a step's generative selection against the RESOLVED registry: every selected id must
+ * be registered, and every content type the step declares it delivers must be produced by at
+ * least one of them.
+ *
+ * The coverage rule is the one worth having. A step that must deliver a theme song and selected
+ * only an image generator is broken in a way nothing downstream can detect — the agent will
+ * generate what it can, store it, and report the rest as an omission at the end of a paid run,
+ * which reads as a model failure rather than as the configuration error it is.
+ *
+ * Returns EVERY issue rather than the first, like its storage-side sibling, so one edit clears a
+ * step that lost three integrations instead of three refuse-fix-restart rounds.
+ */
+export function binaryGeneratorSelectionIssues(config, generators) {
+    const { selected, unresolvedIds } = resolveBinaryGeneratorSelection(config, generators);
+    const issues = unresolvedIds.map((generatorId) => ({
+        problem: 'unknown_generator',
+        generatorId,
+    }));
+    const covered = new Set(selected.flatMap((generator) => generator.modalities));
+    for (const modality of config?.modalities ?? []) {
+        if (!covered.has(modality))
+            issues.push({ problem: 'modality_uncovered', modality });
+    }
+    return issues;
+}
+/** The content type in words, for a message a human reads. */
+export function describeModality(modality) {
+    switch (modality) {
+        case 'image':
+            return 'images';
+        case 'audio':
+            return 'audio (music, speech or sound)';
+        case 'video':
+            return 'video';
+        case '3d':
+            return '3D models';
+        case 'document':
+            return 'documents';
+    }
+}
+/**
+ * The operator-facing message for a refused generative selection, naming EVERY issue.
+ *
+ * Prose, not localized copy: the SPA keys its translated toast off the envelope's
+ * `details.reason` / `details.issues` and reveals this text under "Show details" (the standing
+ * split — the backend does not localize, and the operator remedy it writes must still be
+ * reachable).
+ */
+export function describeBinaryGeneratorSelectionIssues(agentKind, issues) {
+    const clauses = issues.map((issue) => issue.problem === 'unknown_generator'
+        ? `'${issue.generatorId}' is not a generative integration this deployment registers`
+        : `no selected integration produces ${describeModality(issue.modality)}, which this step declares it delivers`);
+    const problems = clauses.length === 1 ? clauses[0] : clauses.map((c) => `\n  - ${c}`).join('');
+    return (`Step '${agentKind}' generates binary outputs, but its generative selection does not resolve: ${problems}` +
+        '\nGenerative integrations are registered in the deployment’s code (BinaryGeneratorRegistry), ' +
+        "not in the workspace catalog: register the integration, or fix the step's selection, then start again.");
+}
+/**
+ * The brief's GENERATION section: which integrations this step may call, what each produces, how
+ * to authenticate, and every gap.
+ *
+ * Every rule here exists because the alternative is an agent guessing. It names the content types
+ * per integration so a step holding both an image and a music generator cannot ask one for the
+ * other's output; it names the credential's ENVIRONMENT VARIABLE and says what an unset one means
+ * (the platform could not provide it — do not call, report), because the agent is the only party
+ * that can see whether the value arrived; and it states an unresolved id rather than dropping it,
+ * because a selection that silently shrinks reads as a step nobody configured.
+ */
+export function renderBinaryGeneratorSection(input) {
+    const { selected, unresolvedIds } = input.selection;
+    const lines = ['## Generation', ''];
+    if (selected.length === 0 && unresolvedIds.length === 0) {
+        return [
+            ...lines,
+            'No generative integration is configured for this step: generate through the capabilities you already have (your own model, or a tool server you were given). Do not call an outside generation API you were not given credentials for; if the work needs one, report that instead of improvising.',
+            '',
+        ];
+    }
+    if (selected.length > 0) {
+        lines.push('Generate every artifact through these integrations, and only these. Each is limited to the content types listed — never ask one for a kind of output it does not produce.', '');
+        for (const generator of selected) {
+            lines.push(`### \`${generator.id}\` — ${generator.name}`, '');
+            lines.push(`- Produces: ${generator.modalities.map(describeModality).join(', ')}.`);
+            if (generator.mediaTypes.length > 0) {
+                lines.push(`- Formats: ${generator.mediaTypes.join(', ')}.`);
+            }
+            else {
+                lines.push('- Formats: not declared — read them off its API contract rather than assuming one.');
+            }
+            if (generator.endpoint)
+                lines.push(`- Endpoint: ${generator.endpoint}`);
+            lines.push(`- ${generator.summary}`);
+            if (generator.description.trim())
+                lines.push('', generator.description.trim());
+            if (generator.guidance?.trim())
+                lines.push('', generator.guidance.trim());
+            lines.push('', ...credentialLines(generator), ...contractLines(generator), '');
+        }
+    }
+    if (unresolvedIds.length > 0) {
+        lines.push(`This step also selects ${unresolvedIds.map((id) => `\`${id}\``).join(', ')}, which this deployment does not register — no endpoint and no contract are available for ${unresolvedIds.length === 1 ? 'it' : 'them'}. Do not guess at ${unresolvedIds.length === 1 ? 'its' : 'their'} API; report the gap and deliver what the remaining integrations can produce.`, '');
+    }
+    const covered = new Set(selected.flatMap((generator) => generator.modalities));
+    const uncovered = input.requestedModalities.filter((modality) => !covered.has(modality));
+    if (input.requestedModalities.length > 0) {
+        lines.push(`This step is expected to deliver: ${input.requestedModalities.map(describeModality).join(', ')}.`);
+        if (uncovered.length > 0) {
+            lines.push(`No available integration produces ${uncovered.map(describeModality).join(', ')}. Do not attempt to produce ${uncovered.length === 1 ? 'it' : 'them'} another way — deliver the rest and report this gap by name.`);
+        }
+        lines.push('');
+    }
+    return lines;
+}
+/**
+ * What the agent is told about an integration's credential — including that it may not be there.
+ *
+ * THREE cases, not two, because `required` is a real declaration and collapsing it changes what
+ * the agent does. A REQUIRED credential that did not arrive means the integration must not be
+ * called; an OPTIONAL one (declared for an endpoint that genuinely works unauthenticated) means
+ * exactly the opposite — call it anyway. Telling an optional integration's agent "do not call it
+ * at all" would strand a working endpoint on the most ordinary misconfiguration there is, which
+ * is the failure `required: false` exists to prevent.
+ */
+function credentialLines(generator) {
+    const credential = generator.credential;
+    if (!credential) {
+        return [
+            `No credential is configured for \`${generator.id}\`: call it unauthenticated as its contract describes, and report a rejection rather than inventing a key.`,
+        ];
+    }
+    const usage = credential.usage
+        ? ` Send it as ${credential.usage}.`
+        : ' Its API contract states how to present it.';
+    const provided = `The credential for \`${generator.id}\` is provided to your process as the environment variable \`${credential.key}\`.${usage} Read it from the environment — never echo it, log it, commit it, or put it in your reply.`;
+    // `required` defaults to TRUE: an integration whose declaration says nothing is authenticated,
+    // which is the safe reading — being wrong that way costs a reported gap, while being wrong the
+    // other way burns the run on a call that 401s.
+    if (credential.required === false) {
+        return [
+            provided,
+            `\`${credential.key}\` is OPTIONAL for \`${generator.id}\`: if it is unset or empty, still call the integration, unauthenticated as its contract describes. Report a rejection rather than inventing a key.`,
+        ];
+    }
+    return [
+        provided,
+        `If \`${credential.key}\` is unset or empty, the platform could NOT provide the credential: do not call \`${generator.id}\` at all, and report that its credential was unavailable. An empty variable is not an empty key.`,
+    ];
+}
+/** Where an integration's API contract was injected, or the explicit statement that none exists. */
+function contractLines(generator) {
+    if (generator.contracts.length === 0) {
+        return [
+            `No API contract is registered for \`${generator.id}\`. Its endpoint and the notes above are all the interface you have; do not invent operations or fields, and report what you needed from it instead.`,
+        ];
+    }
+    return [
+        `Its API contract is provided at \`.cat-context/${binaryGeneratorContextFileFor(generator.id)}\` — treat it as the authoritative interface and do not invent endpoints or fields.`,
+    ];
+}
+//# sourceMappingURL=binary-generators.js.map

package/dist/domain/binary-generators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-generators.js","sourceRoot":"","sources":["../../src/domain/binary-generators.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,0BAA0B,CAAA;AAEjC,8EAA8E;AAC9E,0FAA0F;AAC1F,6FAA6F;AAC7F,6EAA6E;AAC7E,EAAE;AACF,+FAA+F;AAC/F,8FAA8F;AAC9F,8FAA8F;AAC9F,gGAAgG;AAChG,2FAA2F;AAC3F,EAAE;AACF,6FAA6F;AAC7F,iGAAiG;AACjG,uCAAuC;AACvC,8EAA8E;AAE9E,kGAAkG;AAClG,iGAAiG;AACjG,kGAAkG;AAClG,uEAAuE;AACvE,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,CAAA;AAqBtE;;kGAEkG;AAClG,MAAM,UAAU,wBAAwB,CACtC,SAA2C;IAE3C,OAAO,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,KAAK,EAAE,SAAS,CAAC,IAAI;QACrB,UAAU,EAAE,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC;QACrC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC,CAAC,CAAA;AACL,CAAC;AAqBD;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAsC,EACtC,UAA0C;IAE1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;IAC9E,MAAM,QAAQ,GAA0B,EAAE,CAAA;IAC1C,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9B,IAAI,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;;YAClC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC7B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,8BAA8B,CAC5C,MAAsC,EACtC,UAA0C;IAE1C,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,+BAA+B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACvF,MAAM,MAAM,GAAoC,aAAa,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,mBAA4B;QACrC,WAAW;KACZ,CAAC,CAAC,CAAA;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;IAC9E,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,QAAwB;IACvD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,QAAQ,CAAA;QACjB,KAAK,OAAO;YACV,OAAO,gCAAgC,CAAA;QACzC,KAAK,OAAO;YACV,OAAO,OAAO,CAAA;QAChB,KAAK,IAAI;YACP,OAAO,WAAW,CAAA;QACpB,KAAK,UAAU;YACb,OAAO,WAAW,CAAA;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sCAAsC,CACpD,SAAiB,EACjB,MAAgD;IAEhD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnC,KAAK,CAAC,OAAO,KAAK,mBAAmB;QACnC,CAAC,CAAC,IAAI,KAAK,CAAC,WAAW,6DAA6D;QACpF,CAAC,CAAC,oCAAoC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,wCAAwC,CACjH,CAAA;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9F,OAAO,CACL,SAAS,SAAS,8EAA8E,QAAQ,EAAE;QAC1G,+FAA+F;QAC/F,wGAAwG,CACzG,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC,SAAS,CAAA;IACnD,MAAM,KAAK,GAAa,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,GAAG,KAAK;YACR,mSAAmS;YACnS,EAAE;SACH,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,2KAA2K,EAC3K,EAAE,CACH,CAAA;QACD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,EAAE,QAAQ,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;YAC7D,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnF,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,cAAc,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC9D,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CACR,oFAAoF,CACrF,CAAA;YACH,CAAC;YACD,IAAI,SAAS,CAAC,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;YACvE,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;YACpC,IAAI,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;YAC9E,IAAI,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,0BAA0B,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,6FAA6F,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,qBAAqB,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,+EAA+E,EAClW,EAAE,CACH,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;IAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;IACxF,IAAI,KAAK,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CACR,qCAAqC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnG,CAAA;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CACR,qCAAqC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,8DAA8D,CACnN,CAAA;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,SAA8B;IACrD,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAA;IACvC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,qCAAqC,SAAS,CAAC,EAAE,4GAA4G;SAC9J,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK;QAC5B,CAAC,CAAC,eAAe,UAAU,CAAC,KAAK,GAAG;QACpC,CAAC,CAAC,6CAA6C,CAAA;IACjD,MAAM,QAAQ,GAAG,wBAAwB,SAAS,CAAC,EAAE,gEAAgE,UAAU,CAAC,GAAG,MAAM,KAAK,4FAA4F,CAAA;IAC1O,+FAA+F;IAC/F,+FAA+F;IAC/F,+CAA+C;IAC/C,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ;YACR,KAAK,UAAU,CAAC,GAAG,wBAAwB,SAAS,CAAC,EAAE,qJAAqJ;SAC7M,CAAA;IACH,CAAC;IACD,OAAO;QACL,QAAQ;QACR,QAAQ,UAAU,CAAC,GAAG,sFAAsF,SAAS,CAAC,EAAE,mGAAmG;KAC5N,CAAA;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,aAAa,CAAC,SAA8B;IACnD,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,uCAAuC,SAAS,CAAC,EAAE,sJAAsJ;SAC1M,CAAA;IACH,CAAC;IACD,OAAO;QACL,kDAAkD,6BAA6B,CAAC,SAAS,CAAC,EAAE,CAAC,qFAAqF;KACnL,CAAA;AACH,CAAC"}

package/dist/domain/binary-output-paths.d.ts

@@ -0,0 +1,25 @@
+/** The `.cat-context/` directory the binary-output brief and contract documents live under. */
+export declare const BINARY_OUTPUT_CONTEXT_DIR = "binary-output";
+/**
+ * The brief a binary-generating kind starts from: which integrations to generate with, which
+ * service to store through, which to consult for scope, and what could NOT be resolved. The trait
+ * guidance names this one stable path, and also names its ABSENCE as meaningful (the platform
+ * could not provide storage — do not attempt uploads; report instead), so a resolution failure
+ * degrades loudly rather than into a prompt pointing at a file that does not exist.
+ */
+export declare const BINARY_OUTPUT_BRIEF_FILE = "binary-output/brief.md";
+/**
+ * The sub-directory a selected generative integration's contract documents are injected under.
+ *
+ * Its OWN directory rather than a `generator-` filename prefix, because the two halves of a
+ * step's selection are named from different registries with the identical slug grammar: a catalog
+ * service legitimately called `generator-sprites` would land on exactly the path a generative
+ * integration called `sprites` writes, and one would silently overwrite the other. A slug cannot
+ * contain `/`, so a directory makes the collision structurally impossible rather than unlikely.
+ */
+export declare const BINARY_GENERATOR_CONTEXT_DIR = "binary-output/generators";
+/** The `.cat-context/` path one selected foundational SERVICE's contract documents live at. */
+export declare function binaryContextFileFor(serviceId: string): string;
+/** The `.cat-context/` path one selected generative INTEGRATION's contract documents live at. */
+export declare function binaryGeneratorContextFileFor(generatorId: string): string;
+//# sourceMappingURL=binary-output-paths.d.ts.map

package/dist/domain/binary-output-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-output-paths.d.ts","sourceRoot":"","sources":["../../src/domain/binary-output-paths.ts"],"names":[],"mappings":"AAmBA,+FAA+F;AAC/F,eAAO,MAAM,yBAAyB,kBAAkB,CAAA;AAExD;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,2BAA0C,CAAA;AAE/E;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,6BAA4C,CAAA;AAErF,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,iGAAiG;AACjG,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEzE"}

package/dist/domain/binary-output-paths.js

@@ -0,0 +1,47 @@
+// ---------------------------------------------------------------------------
+// The `.cat-context/binary-output/` PATH vocabulary — where a binary-generating step's brief and
+// each half of its selection's contract documents are injected.
+//
+// Its own LEAF module (no imports at all) because both halves of the feature need it and they
+// import each other: `binary-outputs.ts` renders the generator section, and `binary-generators.ts`
+// answers with paths under the same directory. That cycle is fine for FUNCTIONS, which resolve
+// lazily, and fatal for a CONSTANT: a module-level `` `${BINARY_OUTPUT_CONTEXT_DIR}/generators` ``
+// evaluated at import time throws `Cannot access 'BINARY_OUTPUT_CONTEXT_DIR' before
+// initialization` whenever the cycle is entered from the other side — which is to say, in the
+// assembled backend but not in a unit test that imports one module directly. Nothing typechecks
+// differently and no build fails; the process just dies on boot.
+//
+// So the shared VALUES live here, where neither module's evaluation order can matter. It is the
+// same remedy, for the same reason, that `@cat-factory/contracts`' `binary-modalities.ts` already
+// applies to the content-type vocabulary. Both modules re-export from here, so every consumer
+// (and the kernel barrel) keeps importing the name from where it always did.
+// ---------------------------------------------------------------------------
+/** The `.cat-context/` directory the binary-output brief and contract documents live under. */
+export const BINARY_OUTPUT_CONTEXT_DIR = 'binary-output';
+/**
+ * The brief a binary-generating kind starts from: which integrations to generate with, which
+ * service to store through, which to consult for scope, and what could NOT be resolved. The trait
+ * guidance names this one stable path, and also names its ABSENCE as meaningful (the platform
+ * could not provide storage — do not attempt uploads; report instead), so a resolution failure
+ * degrades loudly rather than into a prompt pointing at a file that does not exist.
+ */
+export const BINARY_OUTPUT_BRIEF_FILE = `${BINARY_OUTPUT_CONTEXT_DIR}/brief.md`;
+/**
+ * The sub-directory a selected generative integration's contract documents are injected under.
+ *
+ * Its OWN directory rather than a `generator-` filename prefix, because the two halves of a
+ * step's selection are named from different registries with the identical slug grammar: a catalog
+ * service legitimately called `generator-sprites` would land on exactly the path a generative
+ * integration called `sprites` writes, and one would silently overwrite the other. A slug cannot
+ * contain `/`, so a directory makes the collision structurally impossible rather than unlikely.
+ */
+export const BINARY_GENERATOR_CONTEXT_DIR = `${BINARY_OUTPUT_CONTEXT_DIR}/generators`;
+/** The `.cat-context/` path one selected foundational SERVICE's contract documents live at. */
+export function binaryContextFileFor(serviceId) {
+    return `${BINARY_OUTPUT_CONTEXT_DIR}/${serviceId}.md`;
+}
+/** The `.cat-context/` path one selected generative INTEGRATION's contract documents live at. */
+export function binaryGeneratorContextFileFor(generatorId) {
+    return `${BINARY_GENERATOR_CONTEXT_DIR}/${generatorId}.md`;
+}
+//# sourceMappingURL=binary-output-paths.js.map

package/dist/domain/binary-output-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-output-paths.js","sourceRoot":"","sources":["../../src/domain/binary-output-paths.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iGAAiG;AACjG,gEAAgE;AAChE,EAAE;AACF,8FAA8F;AAC9F,mGAAmG;AACnG,+FAA+F;AAC/F,mGAAmG;AACnG,oFAAoF;AACpF,8FAA8F;AAC9F,gGAAgG;AAChG,iEAAiE;AACjE,EAAE;AACF,gGAAgG;AAChG,kGAAkG;AAClG,8FAA8F;AAC9F,6EAA6E;AAC7E,8EAA8E;AAE9E,+FAA+F;AAC/F,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAA;AAExD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,yBAAyB,WAAW,CAAA;AAE/E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,yBAAyB,aAAa,CAAA;AAErF,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,GAAG,yBAAyB,IAAI,SAAS,KAAK,CAAA;AACvD,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,6BAA6B,CAAC,WAAmB;IAC/D,OAAO,GAAG,4BAA4B,IAAI,WAAW,KAAK,CAAA;AAC5D,CAAC"}