@cats-inc/cats-platform 0.1.21 → 0.2.8

package/build/server/products/work/shared/workGoldenPathMessages.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Owner-visible message rendering for the golden path (SPEC-114 FR-15, FR-27,
+ * FR-34, FR-37, FR-44).
+ *
+ * One rule governs everything here: a payload may contain a summary and
+ * *safely transportable references* only. Local filesystem paths, credentials,
+ * and raw provider output never appear, because Telegram cannot act on them and
+ * putting them in a chat message leaks the operator's machine layout.
+ *
+ * Text is localized at render time rather than at send time, so the durable
+ * outbox row holds exactly what the owner will read and a retry after a restart
+ * cannot silently change language.
+ */
+import type { CoreDeliveryGate, CoreDeliveryMode } from '../../../core/types.js';
+import { createTranslator, type MessageKey } from '../../../shared/i18n/index.js';
+import type { TransportWorkAction, TransportWorkDeliveryPayload, TransportWorkPayloadAction, TransportWorkProposalV1, TransportWorkReadiness, TransportWorkReadinessReason } from '../../../platform/transports/work-delivery/contracts.js';
+import type { WorkCompletionEvidenceResult } from '../state/workCompletionEvidence.js';
+export type WorkGoldenPathTranslator = ReturnType<typeof createTranslator>;
+export declare function createWorkGoldenPathTranslator(locale: string | null): WorkGoldenPathTranslator;
+export declare const READINESS_REASON_KEYS: Record<TransportWorkReadinessReason, MessageKey>;
+export declare const DELIVERY_MODE_KEYS: Record<CoreDeliveryMode, MessageKey>;
+export declare function describeDeliverySideEffectsLocalized(t: WorkGoldenPathTranslator, mode: CoreDeliveryMode): string;
+export declare function localizeTransportWorkAction(t: WorkGoldenPathTranslator, action: TransportWorkAction): string;
+/**
+ * Authenticated Desktop entry point for a work item.
+ *
+ * A route, never a filesystem path: the Desktop host resolves it against the
+ * owner's session, so it carries no authority on its own.
+ */
+export declare function buildWorkGoldenPathDeepLink(workItemId: string): string;
+export declare function renderAcceptedMessage(input: {
+    t: WorkGoldenPathTranslator;
+    workItemId: string;
+    goal: string;
+}): TransportWorkDeliveryPayload;
+export declare function renderNotReadyMessage(input: {
+    t: WorkGoldenPathTranslator;
+    readiness: TransportWorkReadiness;
+}): TransportWorkDeliveryPayload;
+export declare function renderProposalMessage(input: {
+    t: WorkGoldenPathTranslator;
+    workItemId: string;
+    proposal: TransportWorkProposalV1;
+    actions: readonly TransportWorkPayloadAction[];
+}): TransportWorkDeliveryPayload;
+export declare function renderProgressMessage(input: {
+    t: WorkGoldenPathTranslator;
+    workItemId: string;
+    stageKey: MessageKey;
+    milestoneKey: MessageKey;
+}): TransportWorkDeliveryPayload;
+export declare function renderDecisionMessage(input: {
+    t: WorkGoldenPathTranslator;
+    workItemId: string;
+    reason: string;
+    consequence: string;
+}): TransportWorkDeliveryPayload;
+export declare function renderResultMessage(input: {
+    t: WorkGoldenPathTranslator;
+    workItemId: string;
+    proposal: TransportWorkProposalV1;
+    summary: string;
+    evidence: WorkCompletionEvidenceResult;
+    commitId: string | null;
+    artifactTitle: string | null;
+    outstandingGates: readonly CoreDeliveryGate[];
+    /** Inline decision actions, when the result still needs one (FR-41). */
+    actions?: readonly TransportWorkPayloadAction[];
+}): TransportWorkDeliveryPayload;
+export declare function renderRefusalMessage(input: {
+    t: WorkGoldenPathTranslator;
+    reasonKey: MessageKey;
+    values?: Record<string, string>;
+}): TransportWorkDeliveryPayload;
+/**
+ * Last line of defence before a payload reaches a transport.
+ *
+ * The renderers above are careful, but "careful" is not a guarantee once a
+ * summary can come from a provider. This rejects the two classes of content
+ * that must never leave the host.
+ */
+export declare function assertSafeTransportPayload(payload: TransportWorkDeliveryPayload): void;
+//# sourceMappingURL=workGoldenPathMessages.d.ts.map

package/build/server/products/work/shared/workGoldenPathMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathMessages.d.ts","sourceRoot":"","sources":["../../../../../src/products/work/shared/workGoldenPathMessages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EACL,gBAAgB,EAGhB,KAAK,UAAU,EAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,mBAAmB,EACnB,4BAA4B,EAC5B,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,yDAAyD,CAAC;AACjE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAKvF,MAAM,MAAM,wBAAwB,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE3E,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM,GAAG,IAAI,GACpB,wBAAwB,CAE1B;AAOD,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,4BAA4B,EAAE,UAAU,CAclF,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAMnE,CAAC;AAqBF,wBAAgB,oCAAoC,CAClD,CAAC,EAAE,wBAAwB,EAC3B,IAAI,EAAE,gBAAgB,GACrB,MAAM,CAER;AAED,wBAAgB,2BAA2B,CACzC,CAAC,EAAE,wBAAwB,EAC3B,MAAM,EAAE,mBAAmB,GAC1B,MAAM,CAGR;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEtE;AAWD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,CAAC,EAAE,wBAAwB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,4BAA4B,CAS/B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,CAAC,EAAE,wBAAwB,CAAC;IAC5B,SAAS,EAAE,sBAAsB,CAAC;CACnC,GAAG,4BAA4B,CAY/B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,CAAC,EAAE,wBAAwB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,OAAO,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAChD,GAAG,4BAA4B,CA4B/B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,CAAC,EAAE,wBAAwB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,UAAU,CAAC;IACrB,YAAY,EAAE,UAAU,CAAC;CAC1B,GAAG,4BAA4B,CAS/B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,CAAC,EAAE,wBAAwB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,4BAA4B,CAY/B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,CAAC,EAAE,wBAAwB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,4BAA4B,CAAC;IACvC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,wEAAwE;IACxE,OAAO,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;CACjD,GAAG,4BAA4B,CAiC/B;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,CAAC,EAAE,wBAAwB,CAAC;IAC5B,SAAS,EAAE,UAAU,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,GAAG,4BAA4B,CAM/B;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,4BAA4B,GAAG,IAAI,CAStF"}

package/build/server/products/work/shared/workGoldenPathMessages.js

@@ -0,0 +1,211 @@
+/**
+ * Owner-visible message rendering for the golden path (SPEC-114 FR-15, FR-27,
+ * FR-34, FR-37, FR-44).
+ *
+ * One rule governs everything here: a payload may contain a summary and
+ * *safely transportable references* only. Local filesystem paths, credentials,
+ * and raw provider output never appear, because Telegram cannot act on them and
+ * putting them in a chat message leaks the operator's machine layout.
+ *
+ * Text is localized at render time rather than at send time, so the durable
+ * outbox row holds exactly what the owner will read and a retry after a restart
+ * cannot silently change language.
+ */
+import { createTranslator, messageKeys, normalizeMessageLocale, } from '../../../shared/i18n/index.js';
+/** Cap so one message cannot become a transcript dump. */
+const MAX_SUMMARY_CHARS = 600;
+export function createWorkGoldenPathTranslator(locale) {
+    return createTranslator(normalizeMessageLocale(locale));
+}
+function truncate(value, limit = MAX_SUMMARY_CHARS) {
+    const trimmed = value.trim();
+    return trimmed.length <= limit ? trimmed : `${trimmed.slice(0, limit - 1)}…`;
+}
+export const READINESS_REASON_KEYS = {
+    binding_disabled: messageKeys.workDeliveryReadinessBindingDisabled,
+    binding_unhealthy: messageKeys.workDeliveryReadinessBindingUnhealthy,
+    owner_not_authorized: messageKeys.workDeliveryReadinessOwnerNotAuthorized,
+    cat_not_bound: messageKeys.workDeliveryReadinessCatNotBound,
+    execution_target_missing: messageKeys.workDeliveryReadinessExecutionTargetMissing,
+    capability_profile_missing: messageKeys.workDeliveryReadinessCapabilityProfileMissing,
+    workspace_missing: messageKeys.workDeliveryReadinessWorkspaceMissing,
+    workspace_unreachable: messageKeys.workDeliveryReadinessWorkspaceUnreachable,
+    workspace_not_a_repository: messageKeys.workDeliveryReadinessWorkspaceNotARepository,
+    workspace_not_clean: messageKeys.workDeliveryReadinessWorkspaceNotClean,
+    delivery_policy_unresolved: messageKeys.workDeliveryReadinessDeliveryPolicyUnresolved,
+    background_service_unavailable: messageKeys.workDeliveryReadinessBackgroundServiceUnavailable,
+};
+export const DELIVERY_MODE_KEYS = {
+    artifact_only: messageKeys.sharedOperatorDeliveryModeArtifactOnly,
+    commit_only: messageKeys.sharedOperatorDeliveryModeCommitOnly,
+    push_branch: messageKeys.sharedOperatorDeliveryModePushBranch,
+    pr_with_checks: messageKeys.sharedOperatorDeliveryModePrWithChecks,
+    deploy_preview: messageKeys.sharedOperatorDeliveryModeDeployPreview,
+};
+const DELIVERY_GATE_KEYS = {
+    manual_review_required: messageKeys.sharedOperatorGateManualReviewRequired,
+    owner_approval_required: messageKeys.sharedOperatorGateOwnerApprovalRequired,
+    publish_artifact_required: messageKeys.sharedOperatorGatePublishArtifactRequired,
+};
+const SIDE_EFFECT_KEYS = {
+    artifact_only: messageKeys.workDeliverySideEffectsArtifactOnly,
+    commit_only: messageKeys.workDeliverySideEffectsCommitOnly,
+    push_branch: messageKeys.workDeliverySideEffectsPushBranch,
+    pr_with_checks: messageKeys.workDeliverySideEffectsPrWithChecks,
+    deploy_preview: messageKeys.workDeliverySideEffectsDeployPreview,
+};
+const ACTION_LABEL_KEYS = {
+    start_work: messageKeys.workDeliveryActionStartWork,
+    cancel: messageKeys.workDeliveryActionCancel,
+};
+export function describeDeliverySideEffectsLocalized(t, mode) {
+    return t(SIDE_EFFECT_KEYS[mode]);
+}
+export function localizeTransportWorkAction(t, action) {
+    const key = ACTION_LABEL_KEYS[action];
+    return key ? t(key) : action;
+}
+/**
+ * Authenticated Desktop entry point for a work item.
+ *
+ * A route, never a filesystem path: the Desktop host resolves it against the
+ * owner's session, so it carries no authority on its own.
+ */
+export function buildWorkGoldenPathDeepLink(workItemId) {
+    return `cats://work/items/${encodeURIComponent(workItemId)}`;
+}
+function renderGates(t, gates) {
+    return gates.length === 0
+        ? t(messageKeys.workDeliveryValueNone)
+        : gates.map((gate) => t(DELIVERY_GATE_KEYS[gate])).join(', ');
+}
+export function renderAcceptedMessage(input) {
+    return {
+        text: [
+            input.t(messageKeys.workDeliveryAcceptedTitle, { goal: truncate(input.goal, 160) }),
+            input.t(messageKeys.workDeliveryAcceptedBody),
+        ].join('\n'),
+        deepLink: buildWorkGoldenPathDeepLink(input.workItemId),
+        actions: [],
+    };
+}
+export function renderNotReadyMessage(input) {
+    return {
+        text: [
+            input.t(messageKeys.workDeliveryNotReadyTitle),
+            ...input.readiness.blockers.map((blocker) => `- ${input.t(READINESS_REASON_KEYS[blocker.reason])}`),
+            input.t(messageKeys.workDeliveryNotReadyFooter),
+        ].join('\n'),
+        deepLink: null,
+        actions: [],
+    };
+}
+export function renderProposalMessage(input) {
+    const { t, proposal } = input;
+    const lines = [
+        t(messageKeys.workDeliveryProposalTitle, { revision: String(proposal.revision) }),
+        t(messageKeys.workDeliveryProposalGoal, { goal: truncate(proposal.goal, 200) }),
+        // The label, not the workspace path: FR-44.
+        t(messageKeys.workDeliveryProposalTarget, { target: proposal.targetLabel }),
+        t(messageKeys.workDeliveryProposalDoneWhen, {
+            criteria: proposal.acceptanceCriteria.join('; ')
+                || t(messageKeys.workDeliveryValueNotSpecified),
+        }),
+        t(messageKeys.workDeliveryProposalDelivery, {
+            mode: t(DELIVERY_MODE_KEYS[proposal.deliveryMode]),
+        }),
+        t(messageKeys.workDeliveryProposalSideEffects, {
+            effects: proposal.sideEffects.join(' ') || t(messageKeys.workDeliveryValueNone),
+        }),
+        t(messageKeys.workDeliveryProposalGates, { gates: renderGates(t, proposal.deliveryGates) }),
+    ];
+    if (proposal.openQuestion !== null) {
+        lines.push(t(messageKeys.workDeliveryProposalQuestion, { question: proposal.openQuestion }));
+    }
+    lines.push(t(messageKeys.workDeliveryProposalConfirm));
+    return {
+        text: lines.join('\n'),
+        deepLink: buildWorkGoldenPathDeepLink(input.workItemId),
+        actions: [...input.actions],
+    };
+}
+export function renderProgressMessage(input) {
+    return {
+        text: input.t(messageKeys.workDeliveryProgress, {
+            stage: input.t(input.stageKey),
+            milestone: input.t(input.milestoneKey),
+        }),
+        deepLink: buildWorkGoldenPathDeepLink(input.workItemId),
+        actions: [],
+    };
+}
+export function renderDecisionMessage(input) {
+    return {
+        text: [
+            input.t(messageKeys.workDeliveryDecisionTitle),
+            input.t(messageKeys.workDeliveryDecisionReason, { reason: truncate(input.reason, 240) }),
+            input.t(messageKeys.workDeliveryDecisionConsequence, {
+                consequence: truncate(input.consequence, 240),
+            }),
+        ].join('\n'),
+        deepLink: buildWorkGoldenPathDeepLink(input.workItemId),
+        actions: [],
+    };
+}
+export function renderResultMessage(input) {
+    const { t } = input;
+    const lines = [
+        t(messageKeys.workDeliveryResultTitle, { goal: truncate(input.proposal.goal, 160) }),
+        truncate(input.summary),
+        t(messageKeys.workDeliveryProposalDelivery, {
+            mode: t(DELIVERY_MODE_KEYS[input.proposal.deliveryMode]),
+        }),
+    ];
+    if (input.commitId !== null) {
+        lines.push(t(messageKeys.workDeliveryResultCommit, { commitId: input.commitId }));
+    }
+    if (input.artifactTitle !== null) {
+        // The title and the Desktop link, never the artifact's local path.
+        lines.push(t(messageKeys.workDeliveryResultArtifact, { title: input.artifactTitle }));
+    }
+    lines.push(input.evidence.accepted
+        ? t(messageKeys.workDeliveryResultAcceptanceMet)
+        : t(messageKeys.workDeliveryResultAcceptanceUnmet, {
+            gaps: input.evidence.gaps.join(', '),
+        }));
+    if (input.outstandingGates.length > 0) {
+        lines.push(t(messageKeys.workDeliveryResultWaitingOn, {
+            gates: renderGates(t, input.outstandingGates),
+        }));
+    }
+    return {
+        text: lines.join('\n'),
+        deepLink: buildWorkGoldenPathDeepLink(input.workItemId),
+        actions: [...(input.actions ?? [])],
+    };
+}
+export function renderRefusalMessage(input) {
+    return {
+        text: input.t(input.reasonKey, input.values),
+        deepLink: null,
+        actions: [],
+    };
+}
+/**
+ * Last line of defence before a payload reaches a transport.
+ *
+ * The renderers above are careful, but "careful" is not a guarantee once a
+ * summary can come from a provider. This rejects the two classes of content
+ * that must never leave the host.
+ */
+export function assertSafeTransportPayload(payload) {
+    const unsafePath = /(^|\s)(\/(Users|home|var|tmp|etc)\/|[A-Za-z]:\\)/u;
+    if (unsafePath.test(payload.text)) {
+        throw new Error('Refusing to send a transport payload containing a local filesystem path.');
+    }
+    const secretLike = /\b(bot[_-]?token|api[_-]?key|secret|bearer\s+[\w.-]{10,})\b/iu;
+    if (secretLike.test(payload.text)) {
+        throw new Error('Refusing to send a transport payload containing credential-like content.');
+    }
+}
+//# sourceMappingURL=workGoldenPathMessages.js.map

package/build/server/products/work/shared/workGoldenPathMessages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathMessages.js","sourceRoot":"","sources":["../../../../../src/products/work/shared/workGoldenPathMessages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,sBAAsB,GAEvB,MAAM,+BAA+B,CAAC;AAWvC,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAI9B,MAAM,UAAU,8BAA8B,CAC5C,MAAqB;IAErB,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAK,GAAG,iBAAiB;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAqD;IACrF,gBAAgB,EAAE,WAAW,CAAC,oCAAoC;IAClE,iBAAiB,EAAE,WAAW,CAAC,qCAAqC;IACpE,oBAAoB,EAAE,WAAW,CAAC,uCAAuC;IACzE,aAAa,EAAE,WAAW,CAAC,gCAAgC;IAC3D,wBAAwB,EAAE,WAAW,CAAC,2CAA2C;IACjF,0BAA0B,EAAE,WAAW,CAAC,6CAA6C;IACrF,iBAAiB,EAAE,WAAW,CAAC,qCAAqC;IACpE,qBAAqB,EAAE,WAAW,CAAC,yCAAyC;IAC5E,0BAA0B,EAAE,WAAW,CAAC,4CAA4C;IACpF,mBAAmB,EAAE,WAAW,CAAC,sCAAsC;IACvE,0BAA0B,EAAE,WAAW,CAAC,6CAA6C;IACrF,8BAA8B,EAC5B,WAAW,CAAC,iDAAiD;CAChE,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAyC;IACtE,aAAa,EAAE,WAAW,CAAC,sCAAsC;IACjE,WAAW,EAAE,WAAW,CAAC,oCAAoC;IAC7D,WAAW,EAAE,WAAW,CAAC,oCAAoC;IAC7D,cAAc,EAAE,WAAW,CAAC,sCAAsC;IAClE,cAAc,EAAE,WAAW,CAAC,uCAAuC;CACpE,CAAC;AAEF,MAAM,kBAAkB,GAAyC;IAC/D,sBAAsB,EAAE,WAAW,CAAC,sCAAsC;IAC1E,uBAAuB,EAAE,WAAW,CAAC,uCAAuC;IAC5E,yBAAyB,EAAE,WAAW,CAAC,yCAAyC;CACjF,CAAC;AAEF,MAAM,gBAAgB,GAAyC;IAC7D,aAAa,EAAE,WAAW,CAAC,mCAAmC;IAC9D,WAAW,EAAE,WAAW,CAAC,iCAAiC;IAC1D,WAAW,EAAE,WAAW,CAAC,iCAAiC;IAC1D,cAAc,EAAE,WAAW,CAAC,mCAAmC;IAC/D,cAAc,EAAE,WAAW,CAAC,oCAAoC;CACjE,CAAC;AAEF,MAAM,iBAAiB,GAAqD;IAC1E,UAAU,EAAE,WAAW,CAAC,2BAA2B;IACnD,MAAM,EAAE,WAAW,CAAC,wBAAwB;CAC7C,CAAC;AAEF,MAAM,UAAU,oCAAoC,CAClD,CAA2B,EAC3B,IAAsB;IAEtB,OAAO,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,CAA2B,EAC3B,MAA2B;IAE3B,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,OAAO,qBAAqB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,WAAW,CAClB,CAA2B,EAC3B,KAAkC;IAElC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,qBAAqB,CAAC;QACtC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAIrC;IACC,OAAO;QACL,IAAI,EAAE;YACJ,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACnF,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,wBAAwB,CAAC;SAC9C,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,QAAQ,EAAE,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC;QACvD,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAGrC;IACC,OAAO;QACL,IAAI,EAAE;YACJ,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,yBAAyB,CAAC;YAC9C,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAC7B,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CACnE;YACD,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC;SAChD,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,KAAK,GAAG;QACZ,CAAC,CAAC,WAAW,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,CAAC,CAAC,WAAW,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/E,4CAA4C;QAC5C,CAAC,CAAC,WAAW,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3E,CAAC,CAAC,WAAW,CAAC,4BAA4B,EAAE;YAC1C,QAAQ,EAAE,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;mBAC3C,CAAC,CAAC,WAAW,CAAC,6BAA6B,CAAC;SAClD,CAAC;QACF,CAAC,CAAC,WAAW,CAAC,4BAA4B,EAAE;YAC1C,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;SACnD,CAAC;QACF,CAAC,CAAC,WAAW,CAAC,+BAA+B,EAAE;YAC7C,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,qBAAqB,CAAC;SAChF,CAAC;QACF,CAAC,CAAC,WAAW,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;KAC5F,CAAC;IACF,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACvD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC;QACvD,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACC,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,oBAAoB,EAAE;YAC9C,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC9B,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;SACvC,CAAC;QACF,QAAQ,EAAE,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC;QACvD,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACC,OAAO;QACL,IAAI,EAAE;YACJ,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,yBAAyB,CAAC;YAC9C,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACxF,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,+BAA+B,EAAE;gBACnD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;aAC9C,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,QAAQ,EAAE,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC;QACvD,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAWnC;IACC,MAAM,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG;QACZ,CAAC,CAAC,WAAW,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACpF,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC,CAAC,WAAW,CAAC,4BAA4B,EAAE;YAC1C,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;SACzD,CAAC;KACH,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACjC,mEAAmE;QACnE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,QAAQ,CAAC,QAAQ;QACrB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,+BAA+B,CAAC;QAChD,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,iCAAiC,EAAE;YACjD,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;SACrC,CAAC,CACL,CAAC;IACF,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,2BAA2B,EAAE;YACpD,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,gBAAgB,CAAC;SAC9C,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC;QACvD,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAIpC;IACC,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;QAC5C,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAqC;IAC9E,MAAM,UAAU,GAAG,mDAAmD,CAAC;IACvE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,UAAU,GAAG,+DAA+D,CAAC;IACnF,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC"}

package/build/server/products/work/shared/workGoldenPathMetadata.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Additive golden-path metadata on existing Cats Core records.
+ *
+ * ADR-112 section 1 forbids a new Core record family for this slice, so source
+ * provenance and the versioned proposal ride along in `metadata` on the Work
+ * Item that already owns them. Reading is defensive: metadata is untyped by
+ * construction, and a partially-written envelope must degrade to "no proposal"
+ * rather than throw somewhere deep in a transport handler.
+ */
+import type { CoreRecordMetadata } from '../../../core/types.js';
+import type { TransportWorkOriginV1, TransportWorkProposalV1 } from '../../../platform/transports/work-delivery/contracts.js';
+export declare const WORK_GOLDEN_PATH_METADATA_KEY = "workGoldenPath";
+export declare const WORK_GOLDEN_PATH_METADATA_VERSION = 1;
+export interface WorkGoldenPathMetadata {
+    schemaVersion: number;
+    origin: TransportWorkOriginV1 | null;
+    proposal: TransportWorkProposalV1 | null;
+    /**
+     * The locale the owner was speaking at intake.
+     *
+     * Kept beside the origin rather than inside it so `TransportWorkOriginV1`
+     * stays the shape SPEC-114 specifies, while later messages (progress, result)
+     * can still be rendered in the language the request arrived in.
+     */
+    locale: string | null;
+    /**
+     * The external user that authorized this work.
+     *
+     * Kept so a later action token (publish, deny) can be bound to the same
+     * person without guessing that a chat reference identifies a user.
+     */
+    externalUserRef: string | null;
+}
+export declare function readWorkGoldenPathMetadata(metadata: CoreRecordMetadata | unknown): WorkGoldenPathMetadata | null;
+/**
+ * Merges golden-path provenance into an existing metadata bag without
+ * disturbing sibling envelopes such as `workIntake`.
+ */
+export declare function writeWorkGoldenPathMetadata(metadata: CoreRecordMetadata | undefined, input: {
+    origin: TransportWorkOriginV1;
+    proposal: TransportWorkProposalV1;
+    locale: string | null;
+    externalUserRef: string;
+}): CoreRecordMetadata;
+//# sourceMappingURL=workGoldenPathMetadata.d.ts.map

package/build/server/products/work/shared/workGoldenPathMetadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathMetadata.d.ts","sourceRoot":"","sources":["../../../../../src/products/work/shared/workGoldenPathMetadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAsC,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACrG,OAAO,KAAK,EACV,qBAAqB,EACrB,uBAAuB,EACxB,MAAM,yDAAyD,CAAC;AAEjE,eAAO,MAAM,6BAA6B,mBAAmB,CAAC;AAE9D,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAEnD,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACrC,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACzC;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;OAKG;IACH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAuFD,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,GACrC,sBAAsB,GAAG,IAAI,CAiB/B;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,kBAAkB,GAAG,SAAS,EACxC,KAAK,EAAE;IACL,MAAM,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB,GACA,kBAAkB,CAWpB"}

package/build/server/products/work/shared/workGoldenPathMetadata.js

@@ -0,0 +1,122 @@
+/**
+ * Additive golden-path metadata on existing Cats Core records.
+ *
+ * ADR-112 section 1 forbids a new Core record family for this slice, so source
+ * provenance and the versioned proposal ride along in `metadata` on the Work
+ * Item that already owns them. Reading is defensive: metadata is untyped by
+ * construction, and a partially-written envelope must degrade to "no proposal"
+ * rather than throw somewhere deep in a transport handler.
+ */
+export const WORK_GOLDEN_PATH_METADATA_KEY = 'workGoldenPath';
+export const WORK_GOLDEN_PATH_METADATA_VERSION = 1;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function readString(value) {
+    return typeof value === 'string' && value.trim() !== '' ? value : null;
+}
+function readStringArray(value) {
+    return Array.isArray(value)
+        ? value.filter((entry) => typeof entry === 'string')
+        : [];
+}
+function readOrigin(value) {
+    if (!isRecord(value)) {
+        return null;
+    }
+    const bindingId = readString(value.bindingId);
+    const conversationId = readString(value.conversationId);
+    const workItemId = readString(value.workItemId);
+    const externalConversationRef = readString(value.externalConversationRef);
+    const externalUpdateRef = readString(value.externalUpdateRef);
+    const proposalDigest = readString(value.proposalDigest);
+    if (bindingId === null
+        || conversationId === null
+        || workItemId === null
+        || externalConversationRef === null
+        || externalUpdateRef === null
+        || proposalDigest === null
+        || typeof value.proposalRevision !== 'number') {
+        return null;
+    }
+    return {
+        version: 1,
+        transport: 'telegram',
+        bindingId,
+        externalConversationRef,
+        externalUpdateRef,
+        externalMessageRef: readString(value.externalMessageRef),
+        conversationId,
+        workItemId,
+        proposalRevision: value.proposalRevision,
+        proposalDigest,
+    };
+}
+function readProposal(value) {
+    if (!isRecord(value)) {
+        return null;
+    }
+    const goal = readString(value.goal);
+    const digest = readString(value.digest);
+    const targetLabel = readString(value.targetLabel);
+    const deliveryMode = readString(value.deliveryMode);
+    const createdAt = readString(value.createdAt);
+    if (goal === null
+        || digest === null
+        || targetLabel === null
+        || deliveryMode === null
+        || createdAt === null
+        || typeof value.revision !== 'number') {
+        return null;
+    }
+    return {
+        version: 1,
+        revision: value.revision,
+        digest,
+        goal,
+        targetLabel,
+        projectId: readString(value.projectId),
+        workspacePath: readString(value.workspacePath),
+        acceptanceCriteria: readStringArray(value.acceptanceCriteria),
+        deliveryMode: deliveryMode,
+        deliveryGates: readStringArray(value.deliveryGates),
+        sideEffects: readStringArray(value.sideEffects),
+        openQuestion: readString(value.openQuestion),
+        createdAt,
+    };
+}
+export function readWorkGoldenPathMetadata(metadata) {
+    if (!isRecord(metadata)) {
+        return null;
+    }
+    const envelope = metadata[WORK_GOLDEN_PATH_METADATA_KEY];
+    if (!isRecord(envelope)) {
+        return null;
+    }
+    return {
+        schemaVersion: typeof envelope.schemaVersion === 'number'
+            ? envelope.schemaVersion
+            : WORK_GOLDEN_PATH_METADATA_VERSION,
+        origin: readOrigin(envelope.origin),
+        proposal: readProposal(envelope.proposal),
+        locale: readString(envelope.locale),
+        externalUserRef: readString(envelope.externalUserRef),
+    };
+}
+/**
+ * Merges golden-path provenance into an existing metadata bag without
+ * disturbing sibling envelopes such as `workIntake`.
+ */
+export function writeWorkGoldenPathMetadata(metadata, input) {
+    return {
+        ...(isRecord(metadata) ? metadata : {}),
+        [WORK_GOLDEN_PATH_METADATA_KEY]: {
+            schemaVersion: WORK_GOLDEN_PATH_METADATA_VERSION,
+            origin: { ...input.origin },
+            proposal: { ...input.proposal },
+            locale: input.locale,
+            externalUserRef: input.externalUserRef,
+        },
+    };
+}
+//# sourceMappingURL=workGoldenPathMetadata.js.map

package/build/server/products/work/shared/workGoldenPathMetadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathMetadata.js","sourceRoot":"","sources":["../../../../../src/products/work/shared/workGoldenPathMetadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAgB,CAAC;AAE9D,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC;AAuBnD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACrE,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,uBAAuB,GAAG,UAAU,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1E,MAAM,iBAAiB,GAAG,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,IACE,SAAS,KAAK,IAAI;WACf,cAAc,KAAK,IAAI;WACvB,UAAU,KAAK,IAAI;WACnB,uBAAuB,KAAK,IAAI;WAChC,iBAAiB,KAAK,IAAI;WAC1B,cAAc,KAAK,IAAI;WACvB,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,EAC7C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,UAAU;QACrB,SAAS;QACT,uBAAuB;QACvB,iBAAiB;QACjB,kBAAkB,EAAE,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACxD,cAAc;QACd,UAAU;QACV,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,cAAc;KACf,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,IACE,IAAI,KAAK,IAAI;WACV,MAAM,KAAK,IAAI;WACf,WAAW,KAAK,IAAI;WACpB,YAAY,KAAK,IAAI;WACrB,SAAS,KAAK,IAAI;WAClB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EACrC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM;QACN,IAAI;QACJ,WAAW;QACX,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;QACtC,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9C,kBAAkB,EAAE,eAAe,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC7D,YAAY,EAAE,YAAgC;QAC9C,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,aAAa,CAAuB;QACzE,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;QAC5C,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAsC;IAEtC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,aAAa,EAAE,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ;YACvD,CAAC,CAAC,QAAQ,CAAC,aAAa;YACxB,CAAC,CAAC,iCAAiC;QACrC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnC,eAAe,EAAE,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAwC,EACxC,KAKC;IAED,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,CAAC,6BAA6B,CAAC,EAAE;YAC/B,aAAa,EAAE,iCAAiC;YAChD,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE;YAC3B,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC;KACF,CAAC;AACJ,CAAC"}

package/build/server/products/work/state/workCompletionEvidence.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Completion-evidence evaluation (SPEC-114 FR-30, FR-31).
+ *
+ * The rule this module exists to enforce: a provider returning a final
+ * assistant message is evidence that an execution *step* returned, not that the
+ * requested outcome happened. Cats accepts terminal completion only against the
+ * approved acceptance criteria plus mode-appropriate delivery evidence.
+ */
+import type { CoreArtifactRecord, CoreDeliveryMode } from '../../../core/types.js';
+export declare const WORK_COMPLETION_EVIDENCE_GAPS: readonly ["no_outcome_recorded", "outcome_not_successful", "no_ready_artifact", "no_commit_evidence", "no_validation_evidence", "acceptance_criteria_unmet"];
+export type WorkCompletionEvidenceGap = (typeof WORK_COMPLETION_EVIDENCE_GAPS)[number];
+export interface WorkCommitEvidence {
+    /** Immutable commit id. A branch name or "HEAD" is not acceptable. */
+    commitId: string;
+    changeSummary: string;
+    /** Validation the run performed (test command, typecheck, lint). */
+    validation: {
+        command: string;
+        passed: boolean;
+    } | null;
+    /** Runtime-owned location that contains this commit, never the operator's source worktree. */
+    deliveryWorkspacePath?: string | null;
+    /** Runtime session that owns the isolated delivery workspace. */
+    deliverySessionId?: string | null;
+}
+export interface WorkCompletionEvidenceInput {
+    deliveryMode: CoreDeliveryMode;
+    acceptanceCriteria: readonly string[];
+    /** Criteria the supervised run reported as satisfied, by exact text. */
+    satisfiedCriteria: readonly string[];
+    outcomeStatus: 'succeeded' | 'blocked' | 'failed' | 'cancelled' | null;
+    artifacts: readonly CoreArtifactRecord[];
+    commit: WorkCommitEvidence | null;
+}
+export interface WorkCompletionEvidenceResult {
+    accepted: boolean;
+    gaps: WorkCompletionEvidenceGap[];
+    /** Criteria still outstanding, for the decision/result message. */
+    unmetCriteria: string[];
+}
+export declare function evaluateWorkCompletionEvidence(input: WorkCompletionEvidenceInput): WorkCompletionEvidenceResult;
+//# sourceMappingURL=workCompletionEvidence.d.ts.map

package/build/server/products/work/state/workCompletionEvidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workCompletionEvidence.d.ts","sourceRoot":"","sources":["../../../../../src/products/work/state/workCompletionEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAEnF,eAAO,MAAM,6BAA6B,8JAOhC,CAAC;AAEX,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvF,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD,8FAA8F;IAC9F,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,gBAAgB,CAAC;IAC/B,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,wEAAwE;IACxE,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,aAAa,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,IAAI,CAAC;IACvE,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAClC,mEAAmE;IACnE,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAcD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,2BAA2B,GACjC,4BAA4B,CAoC9B"}

package/build/server/products/work/state/workCompletionEvidence.js

@@ -0,0 +1,59 @@
+/**
+ * Completion-evidence evaluation (SPEC-114 FR-30, FR-31).
+ *
+ * The rule this module exists to enforce: a provider returning a final
+ * assistant message is evidence that an execution *step* returned, not that the
+ * requested outcome happened. Cats accepts terminal completion only against the
+ * approved acceptance criteria plus mode-appropriate delivery evidence.
+ */
+export const WORK_COMPLETION_EVIDENCE_GAPS = [
+    'no_outcome_recorded',
+    'outcome_not_successful',
+    'no_ready_artifact',
+    'no_commit_evidence',
+    'no_validation_evidence',
+    'acceptance_criteria_unmet',
+];
+function normalize(value) {
+    return value.trim().toLowerCase();
+}
+/**
+ * A commit id must look like a real object id. This is what stops a run from
+ * "delivering" `commit_only` by reporting a branch name it never wrote.
+ */
+function isImmutableCommitId(commitId) {
+    return /^[0-9a-f]{7,40}$/u.test(commitId.trim());
+}
+export function evaluateWorkCompletionEvidence(input) {
+    const gaps = [];
+    if (input.outcomeStatus === null) {
+        gaps.push('no_outcome_recorded');
+    }
+    else if (input.outcomeStatus !== 'succeeded') {
+        gaps.push('outcome_not_successful');
+    }
+    const satisfied = new Set(input.satisfiedCriteria.map(normalize));
+    const unmetCriteria = input.acceptanceCriteria.filter((criterion) => !satisfied.has(normalize(criterion)));
+    if (unmetCriteria.length > 0) {
+        gaps.push('acceptance_criteria_unmet');
+    }
+    // Every repository-backed mode builds on a local commit. Push, PR, and
+    // preview are publication steps added *after* that evidence, not substitutes
+    // for proving the provider's edits were captured.
+    if (input.deliveryMode !== 'artifact_only') {
+        if (input.commit === null || !isImmutableCommitId(input.commit.commitId)) {
+            gaps.push('no_commit_evidence');
+        }
+        else if (input.commit.validation === null || !input.commit.validation.passed) {
+            gaps.push('no_validation_evidence');
+        }
+    }
+    else {
+        const hasReadyArtifact = input.artifacts.some((artifact) => artifact.status === 'ready' || artifact.status === 'published');
+        if (!hasReadyArtifact) {
+            gaps.push('no_ready_artifact');
+        }
+    }
+    return { accepted: gaps.length === 0, gaps, unmetCriteria };
+}
+//# sourceMappingURL=workCompletionEvidence.js.map

package/build/server/products/work/state/workCompletionEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workCompletionEvidence.js","sourceRoot":"","sources":["../../../../../src/products/work/state/workCompletionEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,qBAAqB;IACrB,wBAAwB;IACxB,mBAAmB;IACnB,oBAAoB;IACpB,wBAAwB;IACxB,2BAA2B;CACnB,CAAC;AAiCX,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAkC;IAElC,MAAM,IAAI,GAAgC,EAAE,CAAC;IAE7C,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnC,CAAC;SAAM,IAAI,KAAK,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACnD,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CACpD,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACzC,CAAC;IAED,uEAAuE;IACvE,6EAA6E;IAC7E,kDAAkD;IAClD,IAAI,KAAK,CAAC,YAAY,KAAK,eAAe,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC/E,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAC3C,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,CAC7E,CAAC;QACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AAC9D,CAAC"}

package/build/server/products/work/state/workExecutionTaskDelegate.d.ts

@@ -1,4 +1,5 @@
 import type { CoreStore } from '../../../core/store.js';
+import type { CatsCoreState, CoreTaskRecord } from '../../../core/types.js';
 import type { ToolResult } from '../../../platform/supervision/contracts.js';
 import type { SupervisedToolExecutor } from '../../../platform/supervision/toolBoundary.js';
 import { WORK_TASK_CREATE_FROM_WORK_ITEM_TOOL, type WorkTaskCreateFromWorkItemInput, type WorkTaskCreateFromWorkItemResult } from '../shared/workToolSurface.js';
@@ -19,5 +20,20 @@ export interface WorkExecutionTaskToolExecutors {
 }
 export declare function createWorkExecutionTaskDelegate(options: WorkExecutionTaskDelegateOptions): WorkExecutionTaskDelegate;
 export declare function createWorkExecutionTaskToolExecutors(delegate: WorkExecutionTaskDelegate): WorkExecutionTaskToolExecutors;
+/**
+ * The Core mutation behind `work.task.create_from_work_item`, exposed so a
+ * caller that must be atomic across several writes (the transport golden-path
+ * admission command) can compose it inside one `updateCore` transaction instead
+ * of chaining separate persisted steps.
+ *
+ * Throws `WorkExecutionTaskPrecheckError` on any precondition failure, which
+ * leaves the surrounding transaction untouched.
+ */
+export declare function applyWorkExecutionTaskCreation(core: CatsCoreState, input: WorkTaskCreateFromWorkItemInput, context: WorkExecutionTaskMutationContext, createdAt: Date): {
+    core: CatsCoreState;
+    task: CoreTaskRecord;
+    created: boolean;
+    linked: boolean;
+};
 export declare function createTaskFromWorkItem(coreStore: CoreStore, input: WorkTaskCreateFromWorkItemInput, context: WorkExecutionTaskMutationContext, now?: () => Date): Promise<ToolResult<WorkTaskCreateFromWorkItemResult>>;
 //# sourceMappingURL=workExecutionTaskDelegate.d.ts.map

package/build/server/products/work/state/workExecutionTaskDelegate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workExecutionTaskDelegate.d.ts","sourceRoot":"","sources":["../../../../../src/products/work/state/workExecutionTaskDelegate.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EACL,oCAAoC,EACpC,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EAEtC,MAAM,8BAA8B,CAAC;AAQtC,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,sBAAsB,CACpB,KAAK,EAAE,+BAA+B,EACtC,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,8BAA8B;IAC7C,CAAC,oCAAoC,CAAC,EAAE,sBAAsB,CAC5D,+BAA+B,EAC/B,gCAAgC,CACjC,CAAC;CACH;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,gCAAgC,GACxC,yBAAyB,CAQ3B;AAED,wBAAgB,oCAAoC,CAClD,QAAQ,EAAE,yBAAyB,GAClC,8BAA8B,CAKhC;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,+BAA+B,EACtC,OAAO,EAAE,gCAAgC,EACzC,GAAG,GAAE,MAAM,IAAuB,GACjC,OAAO,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAAC,CAgKvD"}
+{"version":3,"file":"workExecutionTaskDelegate.d.ts","sourceRoot":"","sources":["../../../../../src/products/work/state/workExecutionTaskDelegate.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAsB,MAAM,wBAAwB,CAAC;AAChG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EACL,oCAAoC,EACpC,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EAEtC,MAAM,8BAA8B,CAAC;AAQtC,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,sBAAsB,CACpB,KAAK,EAAE,+BAA+B,EACtC,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,8BAA8B;IAC7C,CAAC,oCAAoC,CAAC,EAAE,sBAAsB,CAC5D,+BAA+B,EAC/B,gCAAgC,CACjC,CAAC;CACH;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,gCAAgC,GACxC,yBAAyB,CAQ3B;AAED,wBAAgB,oCAAoC,CAClD,QAAQ,EAAE,yBAAyB,GAClC,8BAA8B,CAKhC;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,+BAA+B,EACtC,OAAO,EAAE,gCAAgC,EACzC,SAAS,EAAE,IAAI,GACd;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAgHlF;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,+BAA+B,EACtC,OAAO,EAAE,gCAAgC,EACzC,GAAG,GAAE,MAAM,IAAuB,GACjC,OAAO,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAAC,CA4DvD"}