@cats-inc/cats-platform 0.1.21 → 0.3.4

package/build/server/products/work/state/workGoldenPathAdmission.js

@@ -0,0 +1,249 @@
+/**
+ * Transport golden-path authorization/admission (SPEC-114 FR-20..FR-27).
+ *
+ * One product-owned command turns a *later* explicit owner event over an
+ * already-visible scope revision into exactly one approved Task and one queued
+ * supervised Run. ADR-112 section 4 forbids the transport from editing Core
+ * records itself, so Telegram calls this and nothing else.
+ *
+ * Atomicity is the reason this is a single `updateCore` mutator rather than a
+ * sequence of delegate calls: a crash between "Task approved" and "Run queued"
+ * would otherwise leave a half-admitted scope that a retry turns into a second
+ * Run.
+ */
+import { createHash } from 'node:crypto';
+import { appendCoreActivity, upsertCoreRun, writeApprovalDecision, } from '../../../core/model/index.js';
+import { applyWorkExecutionTaskCreation } from './workExecutionTaskDelegate.js';
+import { readWorkGoldenPathMetadata, WORK_GOLDEN_PATH_METADATA_KEY, } from '../shared/workGoldenPathMetadata.js';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Reads the run-scoped execution envelope defensively during restart recovery. */
+export function readWorkGoldenPathExecutionSnapshot(metadata) {
+    if (!isRecord(metadata)) {
+        return { executionTarget: null, toolScope: 'none', workspaceHeadOid: null };
+    }
+    const goldenPath = metadata[WORK_GOLDEN_PATH_METADATA_KEY];
+    if (!isRecord(goldenPath) || !isRecord(goldenPath.execution)) {
+        return { executionTarget: null, toolScope: 'none', workspaceHeadOid: null };
+    }
+    const execution = goldenPath.execution;
+    const rawTarget = isRecord(execution.target) ? execution.target : null;
+    const provider = rawTarget && typeof rawTarget.provider === 'string'
+        ? rawTarget.provider.trim()
+        : '';
+    const rawScope = execution.toolScope;
+    const toolScope = rawScope === 'read_only'
+        || rawScope === 'narrow_write'
+        || rawScope === 'broad_write'
+        ? rawScope
+        : 'none';
+    return {
+        executionTarget: provider === '' ? null : {
+            provider,
+            instance: rawTarget && typeof rawTarget.instance === 'string'
+                ? rawTarget.instance
+                : null,
+            model: rawTarget && typeof rawTarget.model === 'string' ? rawTarget.model : null,
+        },
+        toolScope,
+        workspaceHeadOid: typeof execution.workspaceHeadOid === 'string'
+            ? execution.workspaceHeadOid
+            : null,
+    };
+}
+/**
+ * Stable admission key over binding, work item, revision, and action.
+ *
+ * Deliberately excludes `ownerEventRef`: a replayed callback carries a *new*
+ * Telegram callback id but authorizes the same scope, and must land on the same
+ * Task and Run.
+ */
+export function buildWorkGoldenPathAdmissionKey(input) {
+    return [
+        'wgp-admit',
+        input.bindingId,
+        input.workItemId,
+        String(input.proposalRevision),
+        input.proposalDigest,
+    ].join(':');
+}
+/**
+ * Deterministic Run id for an admission key.
+ *
+ * Exported so a caller can tell "this scope is already admitted" apart from
+ * "this action is not allowed here" before it rejects a replayed button.
+ */
+export function resolveWorkGoldenPathRunId(admissionKey) {
+    return `run-wgp-${createHash('sha256').update(admissionKey).digest('hex').slice(0, 20)}`;
+}
+function admissionActivityId(admissionKey) {
+    return `activity-wgp-${createHash('sha256').update(admissionKey).digest('hex').slice(0, 20)}`;
+}
+function blocked(admissionKey, workItemId, reason, message) {
+    return {
+        status: 'blocked',
+        reason,
+        message,
+        admissionKey,
+        workItemId,
+        taskId: null,
+        runId: null,
+    };
+}
+class AdmissionBlockedError extends Error {
+    reason;
+    constructor(reason, message) {
+        super(message);
+        this.reason = reason;
+        this.name = 'AdmissionBlockedError';
+    }
+}
+function verifyScope(workItem, input) {
+    const metadata = readWorkGoldenPathMetadata(workItem.metadata);
+    if (metadata === null || metadata.proposal === null || metadata.origin === null) {
+        throw new AdmissionBlockedError('proposal_missing', `Work Item ${workItem.id} has no versioned golden-path proposal to authorize.`);
+    }
+    if (metadata.origin.bindingId !== input.bindingId) {
+        throw new AdmissionBlockedError('origin_mismatch', 'Authorization arrived on a different binding than the one that captured this work.');
+    }
+    if (metadata.proposal.revision !== input.proposalRevision) {
+        throw new AdmissionBlockedError('stale_revision', `Proposal revision ${input.proposalRevision} is stale; current revision is `
+            + `${metadata.proposal.revision}.`);
+    }
+    if (metadata.proposal.digest !== input.proposalDigest) {
+        throw new AdmissionBlockedError('digest_mismatch', 'The proposal changed after this action was offered; confirm the refreshed scope.');
+    }
+    return { proposal: metadata.proposal, origin: metadata.origin };
+}
+/**
+ * Finds an already-queued Run for this admission key.
+ *
+ * Both the deterministic id and the metadata key are checked so recovery works
+ * whether the previous attempt got as far as writing the Run or not.
+ */
+function findAdmittedRun(core, admissionKey) {
+    const runId = resolveWorkGoldenPathRunId(admissionKey);
+    return core.runs.find((run) => run.id === runId) ?? null;
+}
+export async function admitTransportWorkExecution(coreStore, input, now = () => new Date()) {
+    const admissionKey = buildWorkGoldenPathAdmissionKey(input);
+    if (!input.readiness.ready) {
+        return blocked(admissionKey, input.workItemId, 'not_ready', `Delegation readiness is incomplete: ${input.readiness.blockers
+            .map((entry) => entry.reason)
+            .join(', ')}.`);
+    }
+    const createdAt = now();
+    let resolvedTask = null;
+    let resolvedRun = null;
+    let alreadyAdmitted = false;
+    try {
+        await coreStore.updateCore((core) => {
+            const workItem = core.workItems.find((candidate) => candidate.id === input.workItemId)
+                ?? null;
+            if (workItem === null) {
+                throw new AdmissionBlockedError('work_item_not_found', `No Work Item found for id ${input.workItemId}.`);
+            }
+            const { proposal } = verifyScope(workItem, input);
+            const existingRun = findAdmittedRun(core, admissionKey);
+            if (existingRun !== null) {
+                // Replay: the same owner event already produced this Run.
+                alreadyAdmitted = true;
+                resolvedRun = existingRun;
+                resolvedTask = core.tasks.find((task) => task.id === existingRun.taskId) ?? null;
+                return core;
+            }
+            // 1. Task. Reuses the phase-scoped Work tool mutation so the intake
+            //    boundary invariant (FR-25) is enforced by the same code path that
+            //    enforces it for the agent-facing tool.
+            const taskWrite = applyWorkExecutionTaskCreation(core, {
+                workItemId: workItem.id,
+                title: proposal.goal,
+                summary: workItem.summary ?? undefined,
+                approvalNote: `Telegram owner authorization for revision ${proposal.revision}.`,
+            }, { actorRef: input.actorRef, actionId: input.ownerEventRef }, createdAt);
+            // 2. Owner approval. This is the later explicit owner event, recorded
+            //    with its transport provenance so Desktop can show FR-24 evidence.
+            const approvalWrite = writeApprovalDecision(taskWrite.core, {
+                taskId: taskWrite.task.id,
+                status: 'approved',
+                action: 'approve',
+                decidedByActorId: input.ownerActorId,
+                notes: `Authorized from Telegram binding ${input.bindingId}, revision `
+                    + `${proposal.revision}.`,
+                taskStatus: 'approved',
+            }, createdAt);
+            // 3. Supervised Run, queued. Deterministic id keyed by the admission key
+            //    is what makes a concurrent double-tap converge instead of forking.
+            const runWrite = upsertCoreRun(approvalWrite.core, {
+                id: resolveWorkGoldenPathRunId(admissionKey),
+                title: proposal.goal,
+                status: 'queued',
+                conversationId: workItem.conversationId,
+                taskId: approvalWrite.task.id,
+                orchestratorActorId: input.actorRef,
+                summary: workItem.summary,
+                metadata: {
+                    [WORK_GOLDEN_PATH_METADATA_KEY]: {
+                        schemaVersion: 1,
+                        admissionKey,
+                        bindingId: input.bindingId,
+                        workItemId: workItem.id,
+                        proposalRevision: proposal.revision,
+                        proposalDigest: proposal.digest,
+                        deliveryMode: proposal.deliveryMode,
+                        acceptanceCriteria: proposal.acceptanceCriteria,
+                        ownerEventRef: input.ownerEventRef,
+                        authorizedByActorId: input.ownerActorId,
+                        authorizedAt: createdAt.toISOString(),
+                        execution: {
+                            target: input.executionTarget ?? null,
+                            toolScope: input.toolScope ?? 'none',
+                            workspaceHeadOid: input.workspaceHeadOid ?? null,
+                        },
+                    },
+                },
+            }, createdAt);
+            const activityWrite = appendCoreActivity(runWrite.core, {
+                id: admissionActivityId(admissionKey),
+                kind: 'approval_decided',
+                actorId: input.ownerActorId,
+                projectId: workItem.projectId,
+                workItemId: workItem.id,
+                conversationId: workItem.conversationId,
+                taskId: approvalWrite.task.id,
+                runId: runWrite.run.id,
+                message: `Owner authorized execution from Telegram for "${proposal.goal}".`,
+                metadata: {
+                    [WORK_GOLDEN_PATH_METADATA_KEY]: {
+                        schemaVersion: 1,
+                        phase: 'execution_authorization',
+                        admissionKey,
+                        bindingId: input.bindingId,
+                        proposalRevision: proposal.revision,
+                        proposalDigest: proposal.digest,
+                    },
+                },
+            }, createdAt);
+            resolvedTask = approvalWrite.task;
+            resolvedRun = runWrite.run;
+            return activityWrite.core;
+        });
+    }
+    catch (error) {
+        if (error instanceof AdmissionBlockedError) {
+            return blocked(admissionKey, input.workItemId, error.reason, error.message);
+        }
+        return blocked(admissionKey, input.workItemId, 'task_precheck_failed', error instanceof Error ? error.message : 'Golden-path admission failed.');
+    }
+    const task = resolvedTask;
+    const run = resolvedRun;
+    return {
+        status: alreadyAdmitted ? 'already_admitted' : 'admitted',
+        admissionKey,
+        workItemId: input.workItemId,
+        taskId: task?.id ?? null,
+        runId: run?.id ?? null,
+    };
+}
+//# sourceMappingURL=workGoldenPathAdmission.js.map

package/build/server/products/work/state/workGoldenPathAdmission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathAdmission.js","sourceRoot":"","sources":["../../../../../src/products/work/state/workGoldenPathAdmission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAetC,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AA6C7C,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,mCAAmC,CACjD,QAAiB;IAEjB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,QAAQ,GAAG,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QAClE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC3B,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC;IACrC,MAAM,SAAS,GAAyB,QAAQ,KAAK,WAAW;WAC3D,QAAQ,KAAK,cAAc;WAC3B,QAAQ,KAAK,aAAa;QAC7B,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,CAAC;IACX,OAAO;QACL,eAAe,EAAE,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,QAAQ;YACR,QAAQ,EAAE,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;gBAC3D,CAAC,CAAC,SAAS,CAAC,QAAQ;gBACpB,CAAC,CAAC,IAAI;YACR,KAAK,EAAE,SAAS,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;SACjF;QACD,SAAS;QACT,gBAAgB,EAAE,OAAO,SAAS,CAAC,gBAAgB,KAAK,QAAQ;YAC9D,CAAC,CAAC,SAAS,CAAC,gBAAgB;YAC5B,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAK/C;IACC,OAAO;QACL,WAAW;QACX,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,UAAU;QAChB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC9B,KAAK,CAAC,cAAc;KACrB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,YAAoB;IAC7D,OAAO,WAAW,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB;IAC/C,OAAO,gBAAgB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,OAAO,CACd,YAAoB,EACpB,UAAkB,EAClB,MAA0C,EAC1C,OAAe;IAEf,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,MAAM;QACN,OAAO;QACP,YAAY;QACZ,UAAU;QACV,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,IAAI;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,qBAAsB,SAAQ,KAAK;IAE5B;IADX,YACW,MAA0C,EACnD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAoC;QAInD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,SAAS,WAAW,CAClB,QAA4B,EAC5B,KAAmC;IAEnC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAChF,MAAM,IAAI,qBAAqB,CAC7B,kBAAkB,EAClB,aAAa,QAAQ,CAAC,EAAE,sDAAsD,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,qBAAqB,CAC7B,iBAAiB,EACjB,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,IAAI,qBAAqB,CAC7B,gBAAgB,EAChB,qBAAqB,KAAK,CAAC,gBAAgB,iCAAiC;cAC1E,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,GAAG,CACnC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACtD,MAAM,IAAI,qBAAqB,CAC7B,iBAAiB,EACjB,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAmB,EAAE,YAAoB;IAChE,MAAM,KAAK,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,SAAoB,EACpB,KAAmC,EACnC,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;IAElC,MAAM,YAAY,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;IAE5D,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC3B,OAAO,OAAO,CACZ,YAAY,EACZ,KAAK,CAAC,UAAU,EAChB,WAAW,EACX,uCAAuC,KAAK,CAAC,SAAS,CAAC,QAAQ;aAC5D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,IAAI,YAAY,GAA0B,IAAI,CAAC;IAC/C,IAAI,WAAW,GAAyB,IAAI,CAAC;IAC7C,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,UAAU,CAAC;mBACjF,IAAI,CAAC;YACV,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,IAAI,qBAAqB,CAC7B,qBAAqB,EACrB,6BAA6B,KAAK,CAAC,UAAU,GAAG,CACjD,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAElD,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACxD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,0DAA0D;gBAC1D,eAAe,GAAG,IAAI,CAAC;gBACvB,WAAW,GAAG,WAAW,CAAC;gBAC1B,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;gBACjF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,oEAAoE;YACpE,uEAAuE;YACvE,4CAA4C;YAC5C,MAAM,SAAS,GAAG,8BAA8B,CAC9C,IAAI,EACJ;gBACE,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,KAAK,EAAE,QAAQ,CAAC,IAAI;gBACpB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,SAAS;gBACtC,YAAY,EAAE,6CAA6C,QAAQ,CAAC,QAAQ,GAAG;aAChF,EACD,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,EAC3D,SAAS,CACV,CAAC;YAEF,sEAAsE;YACtE,uEAAuE;YACvE,MAAM,aAAa,GAAG,qBAAqB,CACzC,SAAS,CAAC,IAAI,EACd;gBACE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;gBACzB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,SAAS;gBACjB,gBAAgB,EAAE,KAAK,CAAC,YAAY;gBACpC,KAAK,EAAE,oCAAoC,KAAK,CAAC,SAAS,aAAa;sBACnE,GAAG,QAAQ,CAAC,QAAQ,GAAG;gBAC3B,UAAU,EAAE,UAAU;aACvB,EACD,SAAS,CACV,CAAC;YAEF,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,QAAQ,GAAG,aAAa,CAC5B,aAAa,CAAC,IAAI,EAClB;gBACE,EAAE,EAAE,0BAA0B,CAAC,YAAY,CAAC;gBAC5C,KAAK,EAAE,QAAQ,CAAC,IAAI;gBACpB,MAAM,EAAE,QAAQ;gBAChB,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE;gBAC7B,mBAAmB,EAAE,KAAK,CAAC,QAAQ;gBACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE;oBACR,CAAC,6BAA6B,CAAC,EAAE;wBAC/B,aAAa,EAAE,CAAC;wBAChB,YAAY;wBACZ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;wBACnC,cAAc,EAAE,QAAQ,CAAC,MAAM;wBAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;wBAC/C,aAAa,EAAE,KAAK,CAAC,aAAa;wBAClC,mBAAmB,EAAE,KAAK,CAAC,YAAY;wBACvC,YAAY,EAAE,SAAS,CAAC,WAAW,EAAE;wBACrC,SAAS,EAAE;4BACT,MAAM,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI;4BACrC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,MAAM;4BACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;yBACjD;qBACF;iBACF;aACF,EACD,SAAS,CACV,CAAC;YAEF,MAAM,aAAa,GAAG,kBAAkB,CACtC,QAAQ,CAAC,IAAI,EACb;gBACE,EAAE,EAAE,mBAAmB,CAAC,YAAY,CAAC;gBACrC,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,KAAK,CAAC,YAAY;gBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE;gBAC7B,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE;gBACtB,OAAO,EAAE,iDAAiD,QAAQ,CAAC,IAAI,IAAI;gBAC3E,QAAQ,EAAE;oBACR,CAAC,6BAA6B,CAAC,EAAE;wBAC/B,aAAa,EAAE,CAAC;wBAChB,KAAK,EAAE,yBAAyB;wBAChC,YAAY;wBACZ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;wBACnC,cAAc,EAAE,QAAQ,CAAC,MAAM;qBAChC;iBACF;aACF,EACD,SAAS,CACV,CAAC;YAEF,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC;YAClC,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC;YAC3B,OAAO,aAAa,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,OAAO,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,OAAO,CACZ,YAAY,EACZ,KAAK,CAAC,UAAU,EAChB,sBAAsB,EACtB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,YAAqC,CAAC;IACnD,MAAM,GAAG,GAAG,WAAmC,CAAC;IAEhD,OAAO;QACL,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU;QACzD,YAAY;QACZ,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;QACxB,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,IAAI;KACvB,CAAC;AACJ,CAAC"}

package/build/server/products/work/state/workGoldenPathDeliveryEvidence.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Acceptance-evidence collection for the golden path (SPEC-114 FR-31, FR-39).
+ *
+ * This is where a model's account of its own work stops mattering. Everything
+ * returned here is something Cats caused and observed through the runtime
+ * delivery API: a commit that actually landed, a worktree that is actually
+ * clean afterwards, artifacts the session actually registered.
+ *
+ * The one thing Cats cannot verify mechanically is a free-text acceptance
+ * criterion. Those stay *claims*, carried separately, so the result message can
+ * show what was verified and what was merely asserted.
+ */
+import type { RuntimeDeliveryClient } from '../../../platform/runtime/deliveryClient.js';
+import type { WorkGoldenPathEvidenceCollector } from './workGoldenPathRuntimeExecutor.js';
+export interface CreateRuntimeEvidenceCollectorInput {
+    deliveryClient: RuntimeDeliveryClient;
+}
+/**
+ * The evidence collector the runtime executor plugs into.
+ *
+ * A collection failure is deliberately swallowed into "no evidence": the run
+ * then continues or ends unmet, which is safer than treating an unreachable
+ * delivery endpoint as proof of delivery.
+ */
+export declare function createRuntimeEvidenceCollector(input: CreateRuntimeEvidenceCollectorInput): WorkGoldenPathEvidenceCollector;
+/**
+ * Parses the bounded claim lines the opening instruction asks for.
+ *
+ * Deliberately strict: an unparsed response yields no claims, so a run
+ * continues rather than completing on prose that merely sounds finished.
+ */
+export declare function parseClaimedCriteria(responseText: string): string[];
+//# sourceMappingURL=workGoldenPathDeliveryEvidence.d.ts.map

package/build/server/products/work/state/workGoldenPathDeliveryEvidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathDeliveryEvidence.d.ts","sourceRoot":"","sources":["../../../../../src/products/work/state/workGoldenPathDeliveryEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,qBAAqB,EAEtB,MAAM,6CAA6C,CAAC;AAGrD,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AAW1F,MAAM,WAAW,mCAAmC;IAClD,cAAc,EAAE,qBAAqB,CAAC;CACvC;AAoGD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,mCAAmC,GACzC,+BAA+B,CAkDjC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CASnE"}

package/build/server/products/work/state/workGoldenPathDeliveryEvidence.js

@@ -0,0 +1,161 @@
+/**
+ * Acceptance-evidence collection for the golden path (SPEC-114 FR-31, FR-39).
+ *
+ * This is where a model's account of its own work stops mattering. Everything
+ * returned here is something Cats caused and observed through the runtime
+ * delivery API: a commit that actually landed, a worktree that is actually
+ * clean afterwards, artifacts the session actually registered.
+ *
+ * The one thing Cats cannot verify mechanically is a free-text acceptance
+ * criterion. Those stay *claims*, carried separately, so the result message can
+ * show what was verified and what was merely asserted.
+ */
+/**
+ * The post-commit check Cats performs itself.
+ *
+ * Named for exactly what it verifies. It proves the commit captured the work
+ * and left nothing behind; it does not claim the change is *correct*, and the
+ * label must not imply otherwise.
+ */
+const POST_COMMIT_CHECK = 'runtime repo status: worktree clean at the new HEAD';
+function buildCommitMessage(context) {
+    // Conventional Commits, per the repository convention. Bounded so a long goal
+    // cannot produce an unreadable subject line.
+    const subject = context.goal.trim().replace(/\s+/gu, ' ').slice(0, 68);
+    return `feat: ${subject}`;
+}
+function hasPendingChanges(snapshot) {
+    if (snapshot.clean === false) {
+        return true;
+    }
+    return snapshot.stagedCount + snapshot.modifiedCount + snapshot.untrackedCount > 0;
+}
+/**
+ * Collects evidence for every repository-backed delivery mode.
+ *
+ * Returns nothing when the agent has not changed anything, which is what makes
+ * an idle run loop and then fail honestly instead of committing an empty tree
+ * and calling it delivery.
+ */
+async function collectCommitEvidence(input) {
+    const before = await input.deliveryClient.inspectRepo({
+        sessionId: input.sessionId,
+    });
+    if (!before.supported || !before.repository) {
+        return null;
+    }
+    // A different HEAD means something else changed the repository after the
+    // owner admitted this run. Refuse to commit across that ownership boundary.
+    if (input.baselineHeadOid !== null && before.headOid !== input.baselineHeadOid) {
+        return null;
+    }
+    // This is the runtime-managed isolated worktree created for the run, so every
+    // change since the clean baseline belongs to this execution.
+    if (!hasPendingChanges(before)) {
+        return null;
+    }
+    const changeSummary = [
+        `${before.stagedCount} staged`,
+        `${before.modifiedCount} modified`,
+        `${before.untrackedCount} untracked`,
+    ].join(', ');
+    const commit = await input.deliveryClient.createCommit({
+        sessionId: input.sessionId,
+        message: buildCommitMessage({ goal: input.goal }),
+    });
+    if (commit.state !== 'completed' || commit.commitId === null) {
+        return null;
+    }
+    // Verify the post-condition rather than trusting the commit response: the
+    // worktree must be clean and HEAD must have moved.
+    const after = await input.deliveryClient.inspectRepo({
+        sessionId: input.sessionId,
+    });
+    const landed = !hasPendingChanges(after) && after.headOid !== before.headOid;
+    return {
+        commitId: commit.commitId,
+        changeSummary,
+        validation: { command: POST_COMMIT_CHECK, passed: landed },
+        deliveryWorkspacePath: input.deliveryWorkspacePath,
+        deliverySessionId: input.sessionId,
+    };
+}
+async function collectArtifactEvidence(input) {
+    const artifacts = await input.deliveryClient.previewArtifacts({
+        sessionId: input.sessionId,
+    });
+    const first = artifacts[0];
+    if (first === undefined) {
+        return null;
+    }
+    return {
+        title: first.label ?? first.id,
+        path: first.path,
+        mimeType: first.mediaType,
+        deliveryWorkspacePath: input.deliveryWorkspacePath,
+        deliverySessionId: input.sessionId,
+    };
+}
+/**
+ * The evidence collector the runtime executor plugs into.
+ *
+ * A collection failure is deliberately swallowed into "no evidence": the run
+ * then continues or ends unmet, which is safer than treating an unreachable
+ * delivery endpoint as proof of delivery.
+ */
+export function createRuntimeEvidenceCollector(input) {
+    return async ({ sessionId, goal, deliveryMode, workspacePath, deliveryWorkspacePath, acceptanceCriteria, claimedCriteria, baselineHeadOid, }) => {
+        // Only criteria the proposal actually stated can be claimed; an agent
+        // cannot invent a criterion and then satisfy it.
+        const satisfiedCriteria = acceptanceCriteria.filter((criterion) => claimedCriteria.some((entry) => entry.trim().toLowerCase() === criterion.trim().toLowerCase()));
+        try {
+            if (deliveryMode !== 'artifact_only') {
+                if (workspacePath === null) {
+                    return { satisfiedCriteria, artifact: null, commit: null };
+                }
+                return {
+                    satisfiedCriteria,
+                    artifact: null,
+                    commit: await collectCommitEvidence({
+                        deliveryClient: input.deliveryClient,
+                        workspacePath,
+                        sessionId,
+                        goal,
+                        baselineHeadOid,
+                        deliveryWorkspacePath: deliveryWorkspacePath ?? workspacePath,
+                    }),
+                };
+            }
+            return {
+                satisfiedCriteria,
+                artifact: await collectArtifactEvidence({
+                    deliveryClient: input.deliveryClient,
+                    workspacePath,
+                    sessionId,
+                    deliveryWorkspacePath: deliveryWorkspacePath ?? workspacePath,
+                }),
+                commit: null,
+            };
+        }
+        catch {
+            return { satisfiedCriteria, artifact: null, commit: null };
+        }
+    };
+}
+/**
+ * Parses the bounded claim lines the opening instruction asks for.
+ *
+ * Deliberately strict: an unparsed response yields no claims, so a run
+ * continues rather than completing on prose that merely sounds finished.
+ */
+export function parseClaimedCriteria(responseText) {
+    const claims = [];
+    for (const line of responseText.split('\n')) {
+        const match = /^\s*CRITERIA-MET:\s*(.+?)\s*$/u.exec(line);
+        if (match) {
+            claims.push(match[1]);
+        }
+    }
+    return claims;
+}
+//# sourceMappingURL=workGoldenPathDeliveryEvidence.js.map

package/build/server/products/work/state/workGoldenPathDeliveryEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathDeliveryEvidence.js","sourceRoot":"","sources":["../../../../../src/products/work/state/workGoldenPathDeliveryEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,qDAAqD,CAAC;AAMhF,SAAS,kBAAkB,CAAC,OAAyB;IACnD,8EAA8E;IAC9E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,OAAO,SAAS,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA6B;IACtD,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,aAAa,GAAG,QAAQ,CAAC,cAAc,GAAG,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAAC,KAOpC;IACC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC;QACpD,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,8EAA8E;IAC9E,6DAA6D;IAC7D,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,GAAG,MAAM,CAAC,WAAW,SAAS;QAC9B,GAAG,MAAM,CAAC,aAAa,WAAW;QAClC,GAAG,MAAM,CAAC,cAAc,YAAY;KACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC;QACrD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC;QACnD,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;IAE7E,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa;QACb,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE;QAC1D,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,iBAAiB,EAAE,KAAK,CAAC,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAKtC;IACC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC;QAC5D,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,SAAS;QACzB,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,iBAAiB,EAAE,KAAK,CAAC,SAAS;KACnC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAA0C;IAE1C,OAAO,KAAK,EAAE,EACZ,SAAS,EACT,IAAI,EACJ,YAAY,EACZ,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,eAAe,GAChB,EAAE,EAAE;QACH,sEAAsE;QACtE,iDAAiD;QACjD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAChE,eAAe,CAAC,IAAI,CAClB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CACzE,CAAC,CAAC;QAEL,IAAI,CAAC;YACH,IAAI,YAAY,KAAK,eAAe,EAAE,CAAC;gBACrC,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oBAC3B,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBAC7D,CAAC;gBACD,OAAO;oBACL,iBAAiB;oBACjB,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,MAAM,qBAAqB,CAAC;wBAClC,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,aAAa;wBACb,SAAS;wBACT,IAAI;wBACJ,eAAe;wBACf,qBAAqB,EAAE,qBAAqB,IAAI,aAAa;qBAC9D,CAAC;iBACH,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,iBAAiB;gBACjB,QAAQ,EAAE,MAAM,uBAAuB,CAAC;oBACtC,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,aAAa;oBACb,SAAS;oBACT,qBAAqB,EAAE,qBAAqB,IAAI,aAAa;iBAC9D,CAAC;gBACF,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/build/server/products/work/state/workGoldenPathIntake.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Golden-path intake (SPEC-114 FR-7, FR-8, FR-10).
+ *
+ * `/work <goal>` goes through the existing product-intent capture tool rather
+ * than a Telegram-only shortcut, so the golden path inherits its idempotency
+ * key and its intake-boundary marker. That marker is what later makes the
+ * authorization command provably a *separate* owner event (FR-20, FR-25): the
+ * capture records the update ref that produced it, and admission arrives with a
+ * different one.
+ */
+import type { CoreStore } from '../../../core/store.js';
+import type { CoreWorkItemRecord } from '../../../core/types.js';
+export interface GoldenPathIntakeInput {
+    goal: string;
+    bindingId: string;
+    conversationId: string;
+    externalMessageRef: string | null;
+    /** Opaque transport update reference; also the intake boundary action id. */
+    externalUpdateRef: string;
+}
+export interface GoldenPathIntakeContext {
+    actorRef: string;
+}
+export type GoldenPathIntakeResult = {
+    status: 'captured';
+    workItemId: string;
+    workItem: CoreWorkItemRecord;
+    created: boolean;
+} | {
+    status: 'rejected';
+    message: string;
+};
+export declare function captureGoldenPathWorkItem(coreStore: CoreStore, input: GoldenPathIntakeInput, context: GoldenPathIntakeContext, now?: () => Date): Promise<GoldenPathIntakeResult>;
+//# sourceMappingURL=workGoldenPathIntake.d.ts.map

package/build/server/products/work/state/workGoldenPathIntake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathIntake.d.ts","sourceRoot":"","sources":["../../../../../src/products/work/state/workGoldenPathIntake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,6EAA6E;IAC7E,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC1F;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,qBAAqB,EAC5B,OAAO,EAAE,uBAAuB,EAChC,GAAG,GAAE,MAAM,IAAuB,GACjC,OAAO,CAAC,sBAAsB,CAAC,CA6CjC"}

package/build/server/products/work/state/workGoldenPathIntake.js

@@ -0,0 +1,50 @@
+/**
+ * Golden-path intake (SPEC-114 FR-7, FR-8, FR-10).
+ *
+ * `/work <goal>` goes through the existing product-intent capture tool rather
+ * than a Telegram-only shortcut, so the golden path inherits its idempotency
+ * key and its intake-boundary marker. That marker is what later makes the
+ * authorization command provably a *separate* owner event (FR-20, FR-25): the
+ * capture records the update ref that produced it, and admission arrives with a
+ * different one.
+ */
+import { createWorkIntakeDelegate } from './workIntakeDelegate.js';
+export async function captureGoldenPathWorkItem(coreStore, input, context, now = () => new Date()) {
+    const delegate = createWorkIntakeDelegate({ coreStore, now });
+    const captured = await delegate.capture({
+        title: input.goal.trim(),
+        status: 'planned',
+        source: {
+            surface: 'telegram',
+            conversationId: input.conversationId,
+            transportBindingId: input.bindingId,
+            sourceMessageId: input.externalMessageRef ?? input.externalUpdateRef,
+            sourceText: input.goal.trim(),
+        },
+    }, {
+        actorRef: context.actorRef,
+        // Binding the intake boundary to the originating update is what stops the
+        // same owner message from both capturing and authorizing work.
+        actionId: input.externalUpdateRef,
+    });
+    if (captured.status !== 'applied') {
+        return {
+            status: 'rejected',
+            message: captured.status === 'rejected'
+                ? captured.error.message
+                : 'Work capture did not apply.',
+        };
+    }
+    const core = await coreStore.readCore();
+    const workItem = core.workItems.find((candidate) => candidate.id === captured.result.workItemId) ?? null;
+    if (workItem === null) {
+        return { status: 'rejected', message: 'Captured Work Item was not found after write.' };
+    }
+    return {
+        status: 'captured',
+        workItemId: workItem.id,
+        workItem,
+        created: captured.result.created,
+    };
+}
+//# sourceMappingURL=workGoldenPathIntake.js.map

package/build/server/products/work/state/workGoldenPathIntake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathIntake.js","sourceRoot":"","sources":["../../../../../src/products/work/state/workGoldenPathIntake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAmBnE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAoB,EACpB,KAA4B,EAC5B,OAAgC,EAChC,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;IAElC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CACrC;QACE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE;YACN,OAAO,EAAE,UAAU;YACnB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,kBAAkB,EAAE,KAAK,CAAC,SAAS;YACnC,eAAe,EAAE,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,iBAAiB;YACpE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;SAC9B;KACF,EACD;QACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,0EAA0E;QAC1E,+DAA+D;QAC/D,QAAQ,EAAE,KAAK,CAAC,iBAAiB;KAClC,CACF,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,UAAU;gBACrC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO;gBACxB,CAAC,CAAC,6BAA6B;SAClC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,UAAU,CAC3D,IAAI,IAAI,CAAC;IACV,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;IAC1F,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,QAAQ;QACR,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO;KACjC,CAAC;AACJ,CAAC"}

package/build/server/products/work/state/workGoldenPathLifecycle.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Run lifecycle actions for the golden path (SPEC-114 FR-29, FR-35).
+ *
+ * Timeout, retry, and resume all reduce to one question: may this Run be
+ * driven again, and what does the authoritative record say happened? Core's
+ * `CoreRunStatus` stays the answer — these transitions move it, record why, and
+ * refuse the moves that would resurrect finished work.
+ *
+ * Retry and resume are deliberately different. Retry says "that attempt did not
+ * work, start the loop again" and is only valid from a stuck state. Resume says
+ * "nothing is driving this any more" — the usual cause being a host restart
+ * while the Run was mid-flight — and is only valid from a live one.
+ */
+import type { CoreStore } from '../../../core/store.js';
+import type { CoreRunStatus } from '../../../core/types.js';
+export declare const WORK_GOLDEN_PATH_LIFECYCLE_METADATA_KEY = "workGoldenPathLifecycle";
+export type WorkGoldenPathLifecycleAction = 'retry' | 'resume' | 'timeout';
+export type WorkGoldenPathLifecycleStatus = 'redrivable' | 'recorded' | 'refused';
+export interface WorkGoldenPathLifecycleResult {
+    status: WorkGoldenPathLifecycleStatus;
+    action: WorkGoldenPathLifecycleAction;
+    runId: string | null;
+    runStatus: CoreRunStatus | null;
+    reason: string | null;
+}
+export interface ApplyWorkGoldenPathLifecycleInput {
+    workItemId: string;
+    action: WorkGoldenPathLifecycleAction;
+    actorRef: string;
+    /** Who asked. Absent for `timeout`, which nobody asks for. */
+    ownerActorId?: string | null;
+    /** Free-text cause, recorded on the Run for `timeout`. */
+    detail?: string | null;
+}
+/**
+ * Applies one lifecycle action to a golden-path Run.
+ *
+ * `redrivable` means the caller should start the runner again; `recorded` means
+ * the state changed but nothing should be driven (a timeout waits for the
+ * owner); `refused` means the action was invalid for the current state and
+ * nothing was written.
+ */
+export declare function applyWorkGoldenPathLifecycleAction(coreStore: CoreStore, input: ApplyWorkGoldenPathLifecycleInput, now?: () => Date): Promise<WorkGoldenPathLifecycleResult>;
+//# sourceMappingURL=workGoldenPathLifecycle.d.ts.map

package/build/server/products/work/state/workGoldenPathLifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workGoldenPathLifecycle.d.ts","sourceRoot":"","sources":["../../../../../src/products/work/state/workGoldenPathLifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAiB,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAG3E,eAAO,MAAM,uCAAuC,4BAA4B,CAAC;AAEjF,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3E,MAAM,MAAM,6BAA6B,GACrC,YAAY,GACZ,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,6BAA6B,CAAC;IACtC,MAAM,EAAE,6BAA6B,CAAC;IACtC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,6BAA6B,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAoDD;;;;;;;GAOG;AACH,wBAAsB,kCAAkC,CACtD,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,iCAAiC,EACxC,GAAG,GAAE,MAAM,IAAuB,GACjC,OAAO,CAAC,6BAA6B,CAAC,CAkGxC"}