npm - @caupulican/pi-adaptative - Versions diffs - 0.81.40 → 0.81.42 - Mend

@caupulican/pi-adaptative 0.81.40 → 0.81.42

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (599) hide show

package/dist/core/orchestration/work-state-projection.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"work-state-projection.d.ts","sourceRoot":"","sources":["../../../src/core/orchestration/work-state-projection.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EACN,KAAK,sBAAsB,EAG3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAErF,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,8BAA8B;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACjD,YAAY,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACxD,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,GAAG,uBAAuB,CAa7E;AAkBD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,SAAS,GAAG,gBAAgB,EAAE,CAiBjF;AAwBD,2GAA2G;AAC3G,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC7C,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IACjC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACpC,GAAG,0BAA0B,CAyC7B","sourcesContent":["import { getTrustedRequirementEvidence } from \"../goals/goal-acceptance.ts\";\nimport type { GoalState } from \"../goals/goal-state.ts\";\nimport {\n\ttype OpenTaskStepProjection,\n\tprojectOpenTaskSteps,\n\tresolveTaskStepRequirementIds,\n} from \"../tasks/task-projection.ts\";\nimport type { TaskStepsState } from \"../tasks/task-state.ts\";\nimport type { AcceptanceCriterion, EvidenceContract } from \"./contracts.ts\";\nimport type { CreateObjectiveInput, TaskRuntimeProjection } from \"./task-runtime.ts\";\n\nexport interface GoalObjectiveProjection extends CreateObjectiveInput {\n\tobjectiveId: string;\n\tacceptanceCriteria: readonly AcceptanceCriterion[];\n}\n\nexport interface RequirementExecutionProjection {\n\trequirementId: string;\n\tforegroundStepIds: readonly string[];\n\tdelegatedTaskIds: readonly string[];\n}\n\nexport interface SessionWorkStateProjection {\n\tobjectiveId?: string;\n\topenTaskSteps: readonly OpenTaskStepProjection[];\n\trequirements: readonly RequirementExecutionProjection[];\n\tunlinkedOpenTaskStepIds: readonly string[];\n\tunknownRequirementIds: readonly string[];\n\tunboundDelegatedTaskIds: readonly string[];\n}\n\nexport function goalObjectiveId(goalId: string): string {\n\treturn `goal:${goalId}`;\n}\n\nexport function projectGoalObjective(goal: GoalState): GoalObjectiveProjection {\n\treturn {\n\t\tobjectiveId: goalObjectiveId(goal.goalId),\n\t\ttitle: `Goal ${goal.goalId}`,\n\t\tdescription: goal.userGoal,\n\t\tconstraints: [],\n\t\tacceptanceCriteria: goal.requirements.map((requirement) => ({\n\t\t\tid: requirement.id,\n\t\t\tdescription: requirement.text,\n\t\t\trequired: true,\n\t\t})),\n\t\triskBudget: {},\n\t};\n}\n\nfunction orchestrationEvidenceKind(kind: GoalState[\"evidence\"][number][\"kind\"]): EvidenceContract[\"kind\"] {\n\tswitch (kind) {\n\t\tcase \"test\":\n\t\t\treturn \"test\";\n\t\tcase \"tool\":\n\t\t\treturn \"command\";\n\t\tcase \"worker\":\n\t\t\treturn \"review\";\n\t\tcase \"user\":\n\t\t\treturn \"external\";\n\t\tcase \"file\":\n\t\tcase \"finding\":\n\t\t\treturn \"observation\";\n\t}\n}\n\nexport function projectGoalAcceptanceEvidence(goal: GoalState): EvidenceContract[] {\n\treturn goal.requirements.flatMap((requirement) =>\n\t\tgetTrustedRequirementEvidence(goal, requirement).map((evidence) => ({\n\t\t\tevidenceId: `goal-evidence:${goal.goalId}:${requirement.id}:${evidence.id}`,\n\t\t\tcriterionId: requirement.id,\n\t\t\tkind: orchestrationEvidenceKind(evidence.kind),\n\t\t\tsummary: evidence.summary,\n\t\t\tartifactIds: [],\n\t\t\ttrusted: true,\n\t\t\tcreatedAt: evidence.createdAt,\n\t\t\tmetadata: {\n\t\t\t\tsourceGoalEvidenceId: evidence.id,\n\t\t\t\tsourceKind: evidence.kind,\n\t\t\t\t...(evidence.uri ? { uri: evidence.uri } : {}),\n\t\t\t},\n\t\t})),\n\t);\n}\n\nfunction collectRelatedDelegatedTaskIds(\n\truntime: TaskRuntimeProjection \| undefined,\n\tobjectiveId: string,\n\tboundLaneId: string \| undefined,\n): string[] {\n\tif (!runtime \|\| !boundLaneId) return [];\n\tconst direct = runtime.tasks[boundLaneId];\n\tif (!direct \|\| direct.task.objectiveId !== objectiveId) return [];\n\tconst related = new Set([boundLaneId]);\n\tlet changed = true;\n\twhile (changed) {\n\t\tchanged = false;\n\t\tfor (const task of Object.values(runtime.tasks)) {\n\t\t\tif (task.task.objectiveId !== objectiveId \|\| !task.task.verificationOfTaskId) continue;\n\t\t\tif (!related.has(task.task.verificationOfTaskId) \|\| related.has(task.task.taskId)) continue;\n\t\t\trelated.add(task.task.taskId);\n\t\t\tchanged = true;\n\t\t}\n\t}\n\treturn [...related];\n}\n\n/** One read model joining outcome criteria, foreground planning, and delegated execution by stable ids. */\nexport function projectSessionWorkState(args: {\n\tgoalState: GoalState \| undefined;\n\ttaskStepsState: TaskStepsState \| undefined;\n\ttaskRuntime?: TaskRuntimeProjection;\n}): SessionWorkStateProjection {\n\tconst openTaskSteps = projectOpenTaskSteps(args.taskStepsState);\n\tconst goal = args.goalState;\n\tif (!goal) {\n\t\treturn {\n\t\t\topenTaskSteps,\n\t\t\trequirements: [],\n\t\t\tunlinkedOpenTaskStepIds: openTaskSteps.map((step) => step.id),\n\t\t\tunknownRequirementIds: [...new Set(openTaskSteps.flatMap((step) => step.requirementIds ?? []))],\n\t\t\tunboundDelegatedTaskIds: [],\n\t\t};\n\t}\n\n\tconst objectiveId = goalObjectiveId(goal.goalId);\n\tconst foregroundByRequirement = new Map(goal.requirements.map((requirement) => [requirement.id, [] as string[]]));\n\tconst unknownRequirementIds = new Set<string>();\n\tconst unlinkedOpenTaskStepIds: string[] = [];\n\tfor (const step of openTaskSteps) {\n\t\tconst resolved = resolveTaskStepRequirementIds(step, goal.requirements);\n\t\tfor (const unknownId of resolved.unknownIds) unknownRequirementIds.add(unknownId);\n\t\tif (resolved.matchedIds.length === 0) unlinkedOpenTaskStepIds.push(step.id);\n\t\tfor (const requirementId of resolved.matchedIds) foregroundByRequirement.get(requirementId)?.push(step.id);\n\t}\n\n\tconst requirements = goal.requirements.map((requirement) => ({\n\t\trequirementId: requirement.id,\n\t\tforegroundStepIds: foregroundByRequirement.get(requirement.id) ?? [],\n\t\tdelegatedTaskIds: collectRelatedDelegatedTaskIds(args.taskRuntime, objectiveId, requirement.boundLaneId),\n\t}));\n\tconst linkedDelegatedTaskIds = new Set(requirements.flatMap((requirement) => requirement.delegatedTaskIds));\n\tconst unboundDelegatedTaskIds = Object.values(args.taskRuntime?.tasks ?? {})\n\t\t.filter((task) => task.task.objectiveId === objectiveId && !linkedDelegatedTaskIds.has(task.task.taskId))\n\t\t.map((task) => task.task.taskId);\n\treturn {\n\t\tobjectiveId,\n\t\topenTaskSteps,\n\t\trequirements,\n\t\tunlinkedOpenTaskStepIds,\n\t\tunknownRequirementIds: [...unknownRequirementIds],\n\t\tunboundDelegatedTaskIds,\n\t};\n}\n"]}
1	+ {"version":3,"file":"work-state-projection.d.ts","sourceRoot":"","sources":["../../../src/core/orchestration/work-state-projection.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EACN,KAAK,sBAAsB,EAG3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAErF,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,8BAA8B;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACjD,YAAY,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACxD,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,GAAG,uBAAuB,CAa7E;AAkBD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,SAAS,GAAG,gBAAgB,EAAE,CAiBjF;AAwBD,2GAA2G;AAC3G,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC7C,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IACjC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACpC,GAAG,0BAA0B,CAyC7B","sourcesContent":["import { getTrustedRequirementEvidence } from \"../goals/goal-acceptance.ts\";\nimport type { GoalState } from \"../goals/goal-state.ts\";\nimport {\n\ttype OpenTaskStepProjection,\n\tprojectOpenTaskSteps,\n\tresolveTaskStepRequirementIds,\n} from \"../tasks/task-projection.ts\";\nimport type { TaskStepsState } from \"../tasks/task-state.ts\";\nimport type { AcceptanceCriterion, EvidenceContract } from \"./contracts.ts\";\nimport type { CreateObjectiveInput, TaskRuntimeProjection } from \"./task-runtime.ts\";\n\nexport interface GoalObjectiveProjection extends CreateObjectiveInput {\n\tobjectiveId: string;\n\tacceptanceCriteria: readonly AcceptanceCriterion[];\n}\n\nexport interface RequirementExecutionProjection {\n\trequirementId: string;\n\tforegroundStepIds: readonly string[];\n\tdelegatedTaskIds: readonly string[];\n}\n\nexport interface SessionWorkStateProjection {\n\tobjectiveId?: string;\n\topenTaskSteps: readonly OpenTaskStepProjection[];\n\trequirements: readonly RequirementExecutionProjection[];\n\tunlinkedOpenTaskStepIds: readonly string[];\n\tunknownRequirementIds: readonly string[];\n\tunboundDelegatedTaskIds: readonly string[];\n}\n\nexport function goalObjectiveId(goalId: string): string {\n\treturn `goal:${goalId}`;\n}\n\nexport function projectGoalObjective(goal: GoalState): GoalObjectiveProjection {\n\treturn {\n\t\tobjectiveId: goalObjectiveId(goal.goalId),\n\t\ttitle: `Goal ${goal.goalId}`,\n\t\tdescription: goal.userGoal,\n\t\tconstraints: [],\n\t\tacceptanceCriteria: goal.requirements.map((requirement) => ({\n\t\t\tid: requirement.id,\n\t\t\tdescription: requirement.text,\n\t\t\trequired: true,\n\t\t})),\n\t\triskBudget: goal.tokenBudget !== undefined ? { maxTokens: goal.tokenBudget } : {},\n\t};\n}\n\nfunction orchestrationEvidenceKind(kind: GoalState[\"evidence\"][number][\"kind\"]): EvidenceContract[\"kind\"] {\n\tswitch (kind) {\n\t\tcase \"test\":\n\t\t\treturn \"test\";\n\t\tcase \"tool\":\n\t\t\treturn \"command\";\n\t\tcase \"worker\":\n\t\t\treturn \"review\";\n\t\tcase \"user\":\n\t\t\treturn \"external\";\n\t\tcase \"file\":\n\t\tcase \"finding\":\n\t\t\treturn \"observation\";\n\t}\n}\n\nexport function projectGoalAcceptanceEvidence(goal: GoalState): EvidenceContract[] {\n\treturn goal.requirements.flatMap((requirement) =>\n\t\tgetTrustedRequirementEvidence(goal, requirement).map((evidence) => ({\n\t\t\tevidenceId: `goal-evidence:${goal.goalId}:${requirement.id}:${evidence.id}`,\n\t\t\tcriterionId: requirement.id,\n\t\t\tkind: orchestrationEvidenceKind(evidence.kind),\n\t\t\tsummary: evidence.summary,\n\t\t\tartifactIds: [],\n\t\t\ttrusted: true,\n\t\t\tcreatedAt: evidence.createdAt,\n\t\t\tmetadata: {\n\t\t\t\tsourceGoalEvidenceId: evidence.id,\n\t\t\t\tsourceKind: evidence.kind,\n\t\t\t\t...(evidence.uri ? { uri: evidence.uri } : {}),\n\t\t\t},\n\t\t})),\n\t);\n}\n\nfunction collectRelatedDelegatedTaskIds(\n\truntime: TaskRuntimeProjection \| undefined,\n\tobjectiveId: string,\n\tboundLaneId: string \| undefined,\n): string[] {\n\tif (!runtime \|\| !boundLaneId) return [];\n\tconst direct = runtime.tasks[boundLaneId];\n\tif (!direct \|\| direct.task.objectiveId !== objectiveId) return [];\n\tconst related = new Set([boundLaneId]);\n\tlet changed = true;\n\twhile (changed) {\n\t\tchanged = false;\n\t\tfor (const task of Object.values(runtime.tasks)) {\n\t\t\tif (task.task.objectiveId !== objectiveId \|\| !task.task.verificationOfTaskId) continue;\n\t\t\tif (!related.has(task.task.verificationOfTaskId) \|\| related.has(task.task.taskId)) continue;\n\t\t\trelated.add(task.task.taskId);\n\t\t\tchanged = true;\n\t\t}\n\t}\n\treturn [...related];\n}\n\n/** One read model joining outcome criteria, foreground planning, and delegated execution by stable ids. */\nexport function projectSessionWorkState(args: {\n\tgoalState: GoalState \| undefined;\n\ttaskStepsState: TaskStepsState \| undefined;\n\ttaskRuntime?: TaskRuntimeProjection;\n}): SessionWorkStateProjection {\n\tconst openTaskSteps = projectOpenTaskSteps(args.taskStepsState);\n\tconst goal = args.goalState;\n\tif (!goal) {\n\t\treturn {\n\t\t\topenTaskSteps,\n\t\t\trequirements: [],\n\t\t\tunlinkedOpenTaskStepIds: openTaskSteps.map((step) => step.id),\n\t\t\tunknownRequirementIds: [...new Set(openTaskSteps.flatMap((step) => step.requirementIds ?? []))],\n\t\t\tunboundDelegatedTaskIds: [],\n\t\t};\n\t}\n\n\tconst objectiveId = goalObjectiveId(goal.goalId);\n\tconst foregroundByRequirement = new Map(goal.requirements.map((requirement) => [requirement.id, [] as string[]]));\n\tconst unknownRequirementIds = new Set<string>();\n\tconst unlinkedOpenTaskStepIds: string[] = [];\n\tfor (const step of openTaskSteps) {\n\t\tconst resolved = resolveTaskStepRequirementIds(step, goal.requirements);\n\t\tfor (const unknownId of resolved.unknownIds) unknownRequirementIds.add(unknownId);\n\t\tif (resolved.matchedIds.length === 0) unlinkedOpenTaskStepIds.push(step.id);\n\t\tfor (const requirementId of resolved.matchedIds) foregroundByRequirement.get(requirementId)?.push(step.id);\n\t}\n\n\tconst requirements = goal.requirements.map((requirement) => ({\n\t\trequirementId: requirement.id,\n\t\tforegroundStepIds: foregroundByRequirement.get(requirement.id) ?? [],\n\t\tdelegatedTaskIds: collectRelatedDelegatedTaskIds(args.taskRuntime, objectiveId, requirement.boundLaneId),\n\t}));\n\tconst linkedDelegatedTaskIds = new Set(requirements.flatMap((requirement) => requirement.delegatedTaskIds));\n\tconst unboundDelegatedTaskIds = Object.values(args.taskRuntime?.tasks ?? {})\n\t\t.filter((task) => task.task.objectiveId === objectiveId && !linkedDelegatedTaskIds.has(task.task.taskId))\n\t\t.map((task) => task.task.taskId);\n\treturn {\n\t\tobjectiveId,\n\t\topenTaskSteps,\n\t\trequirements,\n\t\tunlinkedOpenTaskStepIds,\n\t\tunknownRequirementIds: [...unknownRequirementIds],\n\t\tunboundDelegatedTaskIds,\n\t};\n}\n"]}

package/dist/core/orchestration/work-state-projection.js CHANGED Viewed

@@ -14,7 +14,7 @@ export function projectGoalObjective(goal) {
             description: requirement.text,
             required: true,
         })),
-        riskBudget: {},
+        riskBudget: goal.tokenBudget !== undefined ? { maxTokens: goal.tokenBudget } : {},
     };
 }
 function orchestrationEvidenceKind(kind) {

package/dist/core/orchestration/work-state-projection.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"work-state-projection.js","sourceRoot":"","sources":["../../../src/core/orchestration/work-state-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAE5E,OAAO,EAEN,oBAAoB,EACpB,6BAA6B,GAC7B,MAAM,6BAA6B,CAAC;AAyBrC,MAAM,UAAU,eAAe,CAAC,MAAc,EAAU;IACvD,OAAO,QAAQ,MAAM,EAAE,CAAC;AAAA,CACxB;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAe,EAA2B;IAC9E,OAAO;QACN,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QACzC,KAAK,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE;QAC5B,WAAW,EAAE,IAAI,CAAC,QAAQ;QAC1B,WAAW,EAAE,EAAE;QACf,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,QAAQ,EAAE,IAAI;SACd,CAAC,CAAC;QACH,UAAU,EAAE,EAAE;KACd,CAAC;AAAA,CACF;AAED,SAAS,yBAAyB,CAAC,IAA2C,EAA4B;IACzG,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,MAAM;YACV,OAAO,MAAM,CAAC;QACf,KAAK,MAAM;YACV,OAAO,SAAS,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,QAAQ,CAAC;QACjB,KAAK,MAAM;YACV,OAAO,UAAU,CAAC;QACnB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACb,OAAO,aAAa,CAAC;IACvB,CAAC;AAAA,CACD;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAe,EAAsB;IAClF,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAChD,6BAA6B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnE,UAAU,EAAE,iBAAiB,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,EAAE;QAC3E,WAAW,EAAE,WAAW,CAAC,EAAE;QAC3B,IAAI,EAAE,yBAAyB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC9C,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE;YACT,oBAAoB,EAAE,QAAQ,CAAC,EAAE;YACjC,UAAU,EAAE,QAAQ,CAAC,IAAI;YACzB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C;KACD,CAAC,CAAC,CACH,CAAC;AAAA,CACF;AAED,SAAS,8BAA8B,CACtC,OAA0C,EAC1C,WAAmB,EACnB,WAA+B,EACpB;IACX,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACvC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QAChB,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;gBAAE,SAAS;YACvF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC5F,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AAAA,CACpB;AAED,2GAA2G;AAC3G,MAAM,UAAU,uBAAuB,CAAC,IAIvC,EAA8B;IAC9B,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO;YACN,aAAa;YACb,YAAY,EAAE,EAAE;YAChB,uBAAuB,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,qBAAqB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/F,uBAAuB,EAAE,EAAE;SAC3B,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,EAAc,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;IAChD,MAAM,uBAAuB,GAAa,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACxE,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU;YAAE,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClF,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,KAAK,MAAM,aAAa,IAAI,QAAQ,CAAC,UAAU;YAAE,uBAAuB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5D,aAAa,EAAE,WAAW,CAAC,EAAE;QAC7B,iBAAiB,EAAE,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QACpE,gBAAgB,EAAE,8BAA8B,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC;KACxG,CAAC,CAAC,CAAC;IACJ,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5G,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;SAC1E,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACxG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO;QACN,WAAW;QACX,aAAa;QACb,YAAY;QACZ,uBAAuB;QACvB,qBAAqB,EAAE,CAAC,GAAG,qBAAqB,CAAC;QACjD,uBAAuB;KACvB,CAAC;AAAA,CACF","sourcesContent":["import { getTrustedRequirementEvidence } from \"../goals/goal-acceptance.ts\";\nimport type { GoalState } from \"../goals/goal-state.ts\";\nimport {\n\ttype OpenTaskStepProjection,\n\tprojectOpenTaskSteps,\n\tresolveTaskStepRequirementIds,\n} from \"../tasks/task-projection.ts\";\nimport type { TaskStepsState } from \"../tasks/task-state.ts\";\nimport type { AcceptanceCriterion, EvidenceContract } from \"./contracts.ts\";\nimport type { CreateObjectiveInput, TaskRuntimeProjection } from \"./task-runtime.ts\";\n\nexport interface GoalObjectiveProjection extends CreateObjectiveInput {\n\tobjectiveId: string;\n\tacceptanceCriteria: readonly AcceptanceCriterion[];\n}\n\nexport interface RequirementExecutionProjection {\n\trequirementId: string;\n\tforegroundStepIds: readonly string[];\n\tdelegatedTaskIds: readonly string[];\n}\n\nexport interface SessionWorkStateProjection {\n\tobjectiveId?: string;\n\topenTaskSteps: readonly OpenTaskStepProjection[];\n\trequirements: readonly RequirementExecutionProjection[];\n\tunlinkedOpenTaskStepIds: readonly string[];\n\tunknownRequirementIds: readonly string[];\n\tunboundDelegatedTaskIds: readonly string[];\n}\n\nexport function goalObjectiveId(goalId: string): string {\n\treturn `goal:${goalId}`;\n}\n\nexport function projectGoalObjective(goal: GoalState): GoalObjectiveProjection {\n\treturn {\n\t\tobjectiveId: goalObjectiveId(goal.goalId),\n\t\ttitle: `Goal ${goal.goalId}`,\n\t\tdescription: goal.userGoal,\n\t\tconstraints: [],\n\t\tacceptanceCriteria: goal.requirements.map((requirement) => ({\n\t\t\tid: requirement.id,\n\t\t\tdescription: requirement.text,\n\t\t\trequired: true,\n\t\t})),\n\t\triskBudget: {},\n\t};\n}\n\nfunction orchestrationEvidenceKind(kind: GoalState[\"evidence\"][number][\"kind\"]): EvidenceContract[\"kind\"] {\n\tswitch (kind) {\n\t\tcase \"test\":\n\t\t\treturn \"test\";\n\t\tcase \"tool\":\n\t\t\treturn \"command\";\n\t\tcase \"worker\":\n\t\t\treturn \"review\";\n\t\tcase \"user\":\n\t\t\treturn \"external\";\n\t\tcase \"file\":\n\t\tcase \"finding\":\n\t\t\treturn \"observation\";\n\t}\n}\n\nexport function projectGoalAcceptanceEvidence(goal: GoalState): EvidenceContract[] {\n\treturn goal.requirements.flatMap((requirement) =>\n\t\tgetTrustedRequirementEvidence(goal, requirement).map((evidence) => ({\n\t\t\tevidenceId: `goal-evidence:${goal.goalId}:${requirement.id}:${evidence.id}`,\n\t\t\tcriterionId: requirement.id,\n\t\t\tkind: orchestrationEvidenceKind(evidence.kind),\n\t\t\tsummary: evidence.summary,\n\t\t\tartifactIds: [],\n\t\t\ttrusted: true,\n\t\t\tcreatedAt: evidence.createdAt,\n\t\t\tmetadata: {\n\t\t\t\tsourceGoalEvidenceId: evidence.id,\n\t\t\t\tsourceKind: evidence.kind,\n\t\t\t\t...(evidence.uri ? { uri: evidence.uri } : {}),\n\t\t\t},\n\t\t})),\n\t);\n}\n\nfunction collectRelatedDelegatedTaskIds(\n\truntime: TaskRuntimeProjection \| undefined,\n\tobjectiveId: string,\n\tboundLaneId: string \| undefined,\n): string[] {\n\tif (!runtime \|\| !boundLaneId) return [];\n\tconst direct = runtime.tasks[boundLaneId];\n\tif (!direct \|\| direct.task.objectiveId !== objectiveId) return [];\n\tconst related = new Set([boundLaneId]);\n\tlet changed = true;\n\twhile (changed) {\n\t\tchanged = false;\n\t\tfor (const task of Object.values(runtime.tasks)) {\n\t\t\tif (task.task.objectiveId !== objectiveId \|\| !task.task.verificationOfTaskId) continue;\n\t\t\tif (!related.has(task.task.verificationOfTaskId) \|\| related.has(task.task.taskId)) continue;\n\t\t\trelated.add(task.task.taskId);\n\t\t\tchanged = true;\n\t\t}\n\t}\n\treturn [...related];\n}\n\n/** One read model joining outcome criteria, foreground planning, and delegated execution by stable ids. */\nexport function projectSessionWorkState(args: {\n\tgoalState: GoalState \| undefined;\n\ttaskStepsState: TaskStepsState \| undefined;\n\ttaskRuntime?: TaskRuntimeProjection;\n}): SessionWorkStateProjection {\n\tconst openTaskSteps = projectOpenTaskSteps(args.taskStepsState);\n\tconst goal = args.goalState;\n\tif (!goal) {\n\t\treturn {\n\t\t\topenTaskSteps,\n\t\t\trequirements: [],\n\t\t\tunlinkedOpenTaskStepIds: openTaskSteps.map((step) => step.id),\n\t\t\tunknownRequirementIds: [...new Set(openTaskSteps.flatMap((step) => step.requirementIds ?? []))],\n\t\t\tunboundDelegatedTaskIds: [],\n\t\t};\n\t}\n\n\tconst objectiveId = goalObjectiveId(goal.goalId);\n\tconst foregroundByRequirement = new Map(goal.requirements.map((requirement) => [requirement.id, [] as string[]]));\n\tconst unknownRequirementIds = new Set<string>();\n\tconst unlinkedOpenTaskStepIds: string[] = [];\n\tfor (const step of openTaskSteps) {\n\t\tconst resolved = resolveTaskStepRequirementIds(step, goal.requirements);\n\t\tfor (const unknownId of resolved.unknownIds) unknownRequirementIds.add(unknownId);\n\t\tif (resolved.matchedIds.length === 0) unlinkedOpenTaskStepIds.push(step.id);\n\t\tfor (const requirementId of resolved.matchedIds) foregroundByRequirement.get(requirementId)?.push(step.id);\n\t}\n\n\tconst requirements = goal.requirements.map((requirement) => ({\n\t\trequirementId: requirement.id,\n\t\tforegroundStepIds: foregroundByRequirement.get(requirement.id) ?? [],\n\t\tdelegatedTaskIds: collectRelatedDelegatedTaskIds(args.taskRuntime, objectiveId, requirement.boundLaneId),\n\t}));\n\tconst linkedDelegatedTaskIds = new Set(requirements.flatMap((requirement) => requirement.delegatedTaskIds));\n\tconst unboundDelegatedTaskIds = Object.values(args.taskRuntime?.tasks ?? {})\n\t\t.filter((task) => task.task.objectiveId === objectiveId && !linkedDelegatedTaskIds.has(task.task.taskId))\n\t\t.map((task) => task.task.taskId);\n\treturn {\n\t\tobjectiveId,\n\t\topenTaskSteps,\n\t\trequirements,\n\t\tunlinkedOpenTaskStepIds,\n\t\tunknownRequirementIds: [...unknownRequirementIds],\n\t\tunboundDelegatedTaskIds,\n\t};\n}\n"]}
1	+ {"version":3,"file":"work-state-projection.js","sourceRoot":"","sources":["../../../src/core/orchestration/work-state-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAE5E,OAAO,EAEN,oBAAoB,EACpB,6BAA6B,GAC7B,MAAM,6BAA6B,CAAC;AAyBrC,MAAM,UAAU,eAAe,CAAC,MAAc,EAAU;IACvD,OAAO,QAAQ,MAAM,EAAE,CAAC;AAAA,CACxB;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAe,EAA2B;IAC9E,OAAO;QACN,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QACzC,KAAK,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE;QAC5B,WAAW,EAAE,IAAI,CAAC,QAAQ;QAC1B,WAAW,EAAE,EAAE;QACf,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,QAAQ,EAAE,IAAI;SACd,CAAC,CAAC;QACH,UAAU,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;KACjF,CAAC;AAAA,CACF;AAED,SAAS,yBAAyB,CAAC,IAA2C,EAA4B;IACzG,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,MAAM;YACV,OAAO,MAAM,CAAC;QACf,KAAK,MAAM;YACV,OAAO,SAAS,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,QAAQ,CAAC;QACjB,KAAK,MAAM;YACV,OAAO,UAAU,CAAC;QACnB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACb,OAAO,aAAa,CAAC;IACvB,CAAC;AAAA,CACD;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAe,EAAsB;IAClF,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAChD,6BAA6B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnE,UAAU,EAAE,iBAAiB,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,EAAE;QAC3E,WAAW,EAAE,WAAW,CAAC,EAAE;QAC3B,IAAI,EAAE,yBAAyB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC9C,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE;YACT,oBAAoB,EAAE,QAAQ,CAAC,EAAE;YACjC,UAAU,EAAE,QAAQ,CAAC,IAAI;YACzB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C;KACD,CAAC,CAAC,CACH,CAAC;AAAA,CACF;AAED,SAAS,8BAA8B,CACtC,OAA0C,EAC1C,WAAmB,EACnB,WAA+B,EACpB;IACX,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACvC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QAChB,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;gBAAE,SAAS;YACvF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC5F,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AAAA,CACpB;AAED,2GAA2G;AAC3G,MAAM,UAAU,uBAAuB,CAAC,IAIvC,EAA8B;IAC9B,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO;YACN,aAAa;YACb,YAAY,EAAE,EAAE;YAChB,uBAAuB,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,qBAAqB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/F,uBAAuB,EAAE,EAAE;SAC3B,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,EAAc,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;IAChD,MAAM,uBAAuB,GAAa,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACxE,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU;YAAE,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClF,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,KAAK,MAAM,aAAa,IAAI,QAAQ,CAAC,UAAU;YAAE,uBAAuB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5D,aAAa,EAAE,WAAW,CAAC,EAAE;QAC7B,iBAAiB,EAAE,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QACpE,gBAAgB,EAAE,8BAA8B,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC;KACxG,CAAC,CAAC,CAAC;IACJ,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5G,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;SAC1E,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACxG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO;QACN,WAAW;QACX,aAAa;QACb,YAAY;QACZ,uBAAuB;QACvB,qBAAqB,EAAE,CAAC,GAAG,qBAAqB,CAAC;QACjD,uBAAuB;KACvB,CAAC;AAAA,CACF","sourcesContent":["import { getTrustedRequirementEvidence } from \"../goals/goal-acceptance.ts\";\nimport type { GoalState } from \"../goals/goal-state.ts\";\nimport {\n\ttype OpenTaskStepProjection,\n\tprojectOpenTaskSteps,\n\tresolveTaskStepRequirementIds,\n} from \"../tasks/task-projection.ts\";\nimport type { TaskStepsState } from \"../tasks/task-state.ts\";\nimport type { AcceptanceCriterion, EvidenceContract } from \"./contracts.ts\";\nimport type { CreateObjectiveInput, TaskRuntimeProjection } from \"./task-runtime.ts\";\n\nexport interface GoalObjectiveProjection extends CreateObjectiveInput {\n\tobjectiveId: string;\n\tacceptanceCriteria: readonly AcceptanceCriterion[];\n}\n\nexport interface RequirementExecutionProjection {\n\trequirementId: string;\n\tforegroundStepIds: readonly string[];\n\tdelegatedTaskIds: readonly string[];\n}\n\nexport interface SessionWorkStateProjection {\n\tobjectiveId?: string;\n\topenTaskSteps: readonly OpenTaskStepProjection[];\n\trequirements: readonly RequirementExecutionProjection[];\n\tunlinkedOpenTaskStepIds: readonly string[];\n\tunknownRequirementIds: readonly string[];\n\tunboundDelegatedTaskIds: readonly string[];\n}\n\nexport function goalObjectiveId(goalId: string): string {\n\treturn `goal:${goalId}`;\n}\n\nexport function projectGoalObjective(goal: GoalState): GoalObjectiveProjection {\n\treturn {\n\t\tobjectiveId: goalObjectiveId(goal.goalId),\n\t\ttitle: `Goal ${goal.goalId}`,\n\t\tdescription: goal.userGoal,\n\t\tconstraints: [],\n\t\tacceptanceCriteria: goal.requirements.map((requirement) => ({\n\t\t\tid: requirement.id,\n\t\t\tdescription: requirement.text,\n\t\t\trequired: true,\n\t\t})),\n\t\triskBudget: goal.tokenBudget !== undefined ? { maxTokens: goal.tokenBudget } : {},\n\t};\n}\n\nfunction orchestrationEvidenceKind(kind: GoalState[\"evidence\"][number][\"kind\"]): EvidenceContract[\"kind\"] {\n\tswitch (kind) {\n\t\tcase \"test\":\n\t\t\treturn \"test\";\n\t\tcase \"tool\":\n\t\t\treturn \"command\";\n\t\tcase \"worker\":\n\t\t\treturn \"review\";\n\t\tcase \"user\":\n\t\t\treturn \"external\";\n\t\tcase \"file\":\n\t\tcase \"finding\":\n\t\t\treturn \"observation\";\n\t}\n}\n\nexport function projectGoalAcceptanceEvidence(goal: GoalState): EvidenceContract[] {\n\treturn goal.requirements.flatMap((requirement) =>\n\t\tgetTrustedRequirementEvidence(goal, requirement).map((evidence) => ({\n\t\t\tevidenceId: `goal-evidence:${goal.goalId}:${requirement.id}:${evidence.id}`,\n\t\t\tcriterionId: requirement.id,\n\t\t\tkind: orchestrationEvidenceKind(evidence.kind),\n\t\t\tsummary: evidence.summary,\n\t\t\tartifactIds: [],\n\t\t\ttrusted: true,\n\t\t\tcreatedAt: evidence.createdAt,\n\t\t\tmetadata: {\n\t\t\t\tsourceGoalEvidenceId: evidence.id,\n\t\t\t\tsourceKind: evidence.kind,\n\t\t\t\t...(evidence.uri ? { uri: evidence.uri } : {}),\n\t\t\t},\n\t\t})),\n\t);\n}\n\nfunction collectRelatedDelegatedTaskIds(\n\truntime: TaskRuntimeProjection \| undefined,\n\tobjectiveId: string,\n\tboundLaneId: string \| undefined,\n): string[] {\n\tif (!runtime \|\| !boundLaneId) return [];\n\tconst direct = runtime.tasks[boundLaneId];\n\tif (!direct \|\| direct.task.objectiveId !== objectiveId) return [];\n\tconst related = new Set([boundLaneId]);\n\tlet changed = true;\n\twhile (changed) {\n\t\tchanged = false;\n\t\tfor (const task of Object.values(runtime.tasks)) {\n\t\t\tif (task.task.objectiveId !== objectiveId \|\| !task.task.verificationOfTaskId) continue;\n\t\t\tif (!related.has(task.task.verificationOfTaskId) \|\| related.has(task.task.taskId)) continue;\n\t\t\trelated.add(task.task.taskId);\n\t\t\tchanged = true;\n\t\t}\n\t}\n\treturn [...related];\n}\n\n/** One read model joining outcome criteria, foreground planning, and delegated execution by stable ids. */\nexport function projectSessionWorkState(args: {\n\tgoalState: GoalState \| undefined;\n\ttaskStepsState: TaskStepsState \| undefined;\n\ttaskRuntime?: TaskRuntimeProjection;\n}): SessionWorkStateProjection {\n\tconst openTaskSteps = projectOpenTaskSteps(args.taskStepsState);\n\tconst goal = args.goalState;\n\tif (!goal) {\n\t\treturn {\n\t\t\topenTaskSteps,\n\t\t\trequirements: [],\n\t\t\tunlinkedOpenTaskStepIds: openTaskSteps.map((step) => step.id),\n\t\t\tunknownRequirementIds: [...new Set(openTaskSteps.flatMap((step) => step.requirementIds ?? []))],\n\t\t\tunboundDelegatedTaskIds: [],\n\t\t};\n\t}\n\n\tconst objectiveId = goalObjectiveId(goal.goalId);\n\tconst foregroundByRequirement = new Map(goal.requirements.map((requirement) => [requirement.id, [] as string[]]));\n\tconst unknownRequirementIds = new Set<string>();\n\tconst unlinkedOpenTaskStepIds: string[] = [];\n\tfor (const step of openTaskSteps) {\n\t\tconst resolved = resolveTaskStepRequirementIds(step, goal.requirements);\n\t\tfor (const unknownId of resolved.unknownIds) unknownRequirementIds.add(unknownId);\n\t\tif (resolved.matchedIds.length === 0) unlinkedOpenTaskStepIds.push(step.id);\n\t\tfor (const requirementId of resolved.matchedIds) foregroundByRequirement.get(requirementId)?.push(step.id);\n\t}\n\n\tconst requirements = goal.requirements.map((requirement) => ({\n\t\trequirementId: requirement.id,\n\t\tforegroundStepIds: foregroundByRequirement.get(requirement.id) ?? [],\n\t\tdelegatedTaskIds: collectRelatedDelegatedTaskIds(args.taskRuntime, objectiveId, requirement.boundLaneId),\n\t}));\n\tconst linkedDelegatedTaskIds = new Set(requirements.flatMap((requirement) => requirement.delegatedTaskIds));\n\tconst unboundDelegatedTaskIds = Object.values(args.taskRuntime?.tasks ?? {})\n\t\t.filter((task) => task.task.objectiveId === objectiveId && !linkedDelegatedTaskIds.has(task.task.taskId))\n\t\t.map((task) => task.task.taskId);\n\treturn {\n\t\tobjectiveId,\n\t\topenTaskSteps,\n\t\trequirements,\n\t\tunlinkedOpenTaskStepIds,\n\t\tunknownRequirementIds: [...unknownRequirementIds],\n\t\tunboundDelegatedTaskIds,\n\t};\n}\n"]}

package/dist/core/orchestration/worker-execution-contract.d.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import { type OrchestrationModelBinding, type OrchestrationProfile, type WorkerExecutionAuthorityContract, type WorkerExecutionContract } from "./contracts.ts";
+import { type OrchestrationModelBinding, type OrchestrationProfile, type ResourcePointer, type WorkerExecutionAuthorityContract, type WorkerExecutionContract } from "./contracts.ts";
 export declare class WorkerExecutionContractError extends Error {
     constructor(message: string);
 }
@@ -8,12 +8,14 @@ export declare function createWorkerExecutionContract(args: {
         profile: OrchestrationProfile;
         modelBinding: OrchestrationModelBinding;
         authority: WorkerExecutionAuthorityContract;
+        resourcePointers?: readonly ResourcePointer[];
         soul?: string;
     };
     verifier?: {
         profile: OrchestrationProfile;
         modelBinding: OrchestrationModelBinding;
         authority: WorkerExecutionAuthorityContract;
+        resourcePointers?: readonly ResourcePointer[];
         soul?: string;
     };
 }): WorkerExecutionContract;

package/dist/core/orchestration/worker-execution-contract.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"worker-execution-contract.d.ts","sourceRoot":"","sources":["../../../src/core/orchestration/worker-execution-contract.ts"],"names":[],"mappings":"AAGA,OAAO,EAIN,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,gCAAgC,EACrC,KAAK,uBAAuB,EAE5B,MAAM,gBAAgB,CAAC;AAIxB,qBAAa,4BAA6B,SAAQ,KAAK;IACtD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AAuID,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CA2BpF;AAsBD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IACnD,MAAM,EAAE;QACP,OAAO,EAAE,oBAAoB,CAAC;QAC9B,YAAY,EAAE,yBAAyB,CAAC;QACxC,SAAS,EAAE,gCAAgC,CAAC;QAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,QAAQ,CAAC,EAAE;QACV,OAAO,EAAE,oBAAoB,CAAC;QAC9B,YAAY,EAAE,yBAAyB,CAAC;QACxC,SAAS,EAAE,gCAAgC,CAAC;QAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACF,GAAG,uBAAuB,CAM1B;AAED,wBAAgB,+BAA+B,CAC9C,QAAQ,EAAE,uBAAuB,GAC/B,uBAAuB,GAAG,SAAS,CAIrC","sourcesContent":["import path from \"node:path\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport { isPlainRecord } from \"../util/value-guards.ts\";\nimport {\n\tisHarnessCapability,\n\tORCHESTRATION_SCHEMA_VERSION,\n\tORCHESTRATION_THINKING_LEVELS,\n\ttype OrchestrationModelBinding,\n\ttype OrchestrationProfile,\n\ttype WorkerExecutionAuthorityContract,\n\ttype WorkerExecutionContract,\n\ttype WorkerProfileExecutionContract,\n} from \"./contracts.ts\";\nimport { OrchestrationProfileError, parseOrchestrationProfile } from \"./profile-registry.ts\";\nimport { intersectRiskBudgets, validateRiskBudget } from \"./risk-budget.ts\";\n\nexport class WorkerExecutionContractError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WorkerExecutionContractError\";\n\t}\n}\n\nfunction exactKeys(record: Record<string, unknown>, allowed: readonly string[]): boolean {\n\tconst allowedSet = new Set(allowed);\n\treturn Object.keys(record).every((key) => allowedSet.has(key));\n}\n\nfunction parseModelBinding(value: unknown, label: string): OrchestrationModelBinding {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!exactKeys(value, [\"provider\", \"modelId\", \"thinkingLevel\"]) \|\|\n\t\ttypeof value.provider !== \"string\" \|\|\n\t\t!value.provider.trim() \|\|\n\t\ttypeof value.modelId !== \"string\" \|\|\n\t\t!value.modelId.trim() \|\|\n\t\ttypeof value.thinkingLevel !== \"string\" \|\|\n\t\t!ORCHESTRATION_THINKING_LEVELS.includes(value.thinkingLevel as (typeof ORCHESTRATION_THINKING_LEVELS)[number])\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} model binding is invalid.`);\n\t}\n\treturn {\n\t\tprovider: value.provider,\n\t\tmodelId: value.modelId,\n\t\tthinkingLevel: value.thinkingLevel as (typeof ORCHESTRATION_THINKING_LEVELS)[number],\n\t};\n}\n\nfunction stringArray(value: unknown, label: string): string[] {\n\tif (!Array.isArray(value) \|\| !value.every((entry) => typeof entry === \"string\" && entry.length > 0)) {\n\t\tthrow new WorkerExecutionContractError(`${label} must be an array of non-empty strings.`);\n\t}\n\tif (new Set(value).size !== value.length) {\n\t\tthrow new WorkerExecutionContractError(`${label} contains duplicates.`);\n\t}\n\treturn [...value];\n}\n\nfunction parseAuthority(\n\tvalue: unknown,\n\tprofile: OrchestrationProfile,\n\tlabel: string,\n): WorkerExecutionAuthorityContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!exactKeys(value, [\"capabilities\", \"toolNames\", \"readPaths\", \"writePaths\", \"deniedPaths\", \"budget\"])\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority is invalid.`);\n\t}\n\tconst capabilities = stringArray(value.capabilities, `${label} authority capabilities`);\n\tif (!capabilities.every(isHarnessCapability)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority contains an unknown capability.`);\n\t}\n\tif (capabilities.some((capability) => !profile.capabilityCeiling.includes(capability))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority exceeds its profile capability ceiling.`);\n\t}\n\tconst toolNames = stringArray(value.toolNames, `${label} authority toolNames`);\n\tif (toolNames.some((toolName) => !profile.toolNames.includes(toolName))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority contains a tool outside its profile.`);\n\t}\n\tconst readPaths = stringArray(value.readPaths, `${label} authority readPaths`);\n\tconst writePaths = stringArray(value.writePaths, `${label} authority writePaths`);\n\tconst deniedPaths = stringArray(value.deniedPaths, `${label} authority deniedPaths`);\n\tif ([...readPaths, ...writePaths, ...deniedPaths].some((entry) => !path.isAbsolute(entry))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority paths must be absolute.`);\n\t}\n\tif (!isPlainRecord(value.budget)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority budget is invalid.`);\n\t}\n\tconst budget = structuredClone(value.budget);\n\ttry {\n\t\tvalidateRiskBudget(budget, `${label} authority budget`);\n\t} catch (error) {\n\t\tthrow new WorkerExecutionContractError(error instanceof Error ? error.message : String(error));\n\t}\n\tif (!isDeepStrictEqual(intersectRiskBudgets(profile.budget, budget), budget)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority exceeds its profile budget.`);\n\t}\n\tconst readGranted = capabilities.some(\n\t\t(capability) => capability === \"filesystem.read\" \|\| capability === \"worktree.read\",\n\t);\n\tconst writeGranted = capabilities.some(\n\t\t(capability) => capability === \"filesystem.write\" \|\| capability === \"worktree.mutate\",\n\t);\n\tif (readGranted && readPaths.length === 0) {\n\t\tthrow new WorkerExecutionContractError(`${label} read authority lacks a positive path scope.`);\n\t}\n\tif (writeGranted && writePaths.length === 0) {\n\t\tthrow new WorkerExecutionContractError(`${label} write authority lacks a positive path scope.`);\n\t}\n\treturn {\n\t\tcapabilities: capabilities as WorkerExecutionAuthorityContract[\"capabilities\"],\n\t\ttoolNames,\n\t\treadPaths,\n\t\twritePaths,\n\t\tdeniedPaths,\n\t\tbudget,\n\t};\n}\n\nfunction parseProfileContract(value: unknown, label: string): WorkerProfileExecutionContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!exactKeys(value, [\"schemaVersion\", \"profile\", \"modelBinding\", \"authority\", \"soul\"]) \|\|\n\t\tvalue.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} is invalid.`);\n\t}\n\tlet profile: OrchestrationProfile;\n\ttry {\n\t\tprofile = parseOrchestrationProfile(value.profile);\n\t} catch (error) {\n\t\tthrow new WorkerExecutionContractError(\n\t\t\terror instanceof OrchestrationProfileError ? error.message : `${label} profile is invalid.`,\n\t\t);\n\t}\n\tif (profile.role === \"orchestrator\") {\n\t\tthrow new WorkerExecutionContractError(`${label} cannot materialize an orchestrator profile.`);\n\t}\n\tconst modelBinding = parseModelBinding(value.modelBinding, label);\n\tif (!profile.modelPolicy.candidates.some((candidate) => isDeepStrictEqual(candidate, modelBinding))) {\n\t\tthrow new WorkerExecutionContractError(`${label} model binding is not declared by its profile.`);\n\t}\n\tif (value.soul !== undefined && (typeof value.soul !== \"string\" \|\| !value.soul.trim())) {\n\t\tthrow new WorkerExecutionContractError(`${label} soul is invalid.`);\n\t}\n\tconst authority = parseAuthority(value.authority, profile, label);\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofile,\n\t\tmodelBinding,\n\t\tauthority,\n\t\t...(typeof value.soul === \"string\" ? { soul: value.soul } : {}),\n\t};\n}\n\nexport function parseWorkerExecutionContract(value: unknown): WorkerExecutionContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!exactKeys(value, [\"schemaVersion\", \"worker\", \"verifier\"]) \|\|\n\t\tvalue.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION\n\t) {\n\t\tthrow new WorkerExecutionContractError(\"Worker execution contract is invalid.\");\n\t}\n\tconst worker = parseProfileContract(value.worker, \"Worker execution contract\");\n\tconst verifier = value.verifier\n\t\t? parseProfileContract(value.verifier, \"Worker verifier execution contract\")\n\t\t: undefined;\n\tif (worker.profile.requireIndependentVerification) {\n\t\tif (!verifier \|\| worker.profile.verificationProfileId !== verifier.profile.profileId) {\n\t\t\tthrow new WorkerExecutionContractError(\"Worker execution contract is missing its owner-pinned verifier.\");\n\t\t}\n\t\tif (verifier.profile.role !== \"verifier\") {\n\t\t\tthrow new WorkerExecutionContractError(\"Worker verifier execution contract does not use a verifier profile.\");\n\t\t}\n\t} else if (verifier) {\n\t\tthrow new WorkerExecutionContractError(\"Worker execution contract has an unexpected verifier.\");\n\t}\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tworker,\n\t\t...(verifier ? { verifier } : {}),\n\t};\n}\n\nfunction snapshotProfile(profile: OrchestrationProfile): OrchestrationProfile {\n\tconst { sourcePath: _sourcePath, ...persisted } = profile;\n\treturn structuredClone(persisted) as OrchestrationProfile;\n}\n\nfunction snapshotResolvedProfile(source: {\n\tprofile: OrchestrationProfile;\n\tmodelBinding: OrchestrationModelBinding;\n\tauthority: WorkerExecutionAuthorityContract;\n\tsoul?: string;\n}): WorkerProfileExecutionContract {\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofile: snapshotProfile(source.profile),\n\t\tmodelBinding: structuredClone(source.modelBinding),\n\t\tauthority: structuredClone(source.authority),\n\t\t...(source.soul ? { soul: source.soul } : {}),\n\t};\n}\n\nexport function createWorkerExecutionContract(args: {\n\tworker: {\n\t\tprofile: OrchestrationProfile;\n\t\tmodelBinding: OrchestrationModelBinding;\n\t\tauthority: WorkerExecutionAuthorityContract;\n\t\tsoul?: string;\n\t};\n\tverifier?: {\n\t\tprofile: OrchestrationProfile;\n\t\tmodelBinding: OrchestrationModelBinding;\n\t\tauthority: WorkerExecutionAuthorityContract;\n\t\tsoul?: string;\n\t};\n}): WorkerExecutionContract {\n\treturn parseWorkerExecutionContract({\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tworker: snapshotResolvedProfile(args.worker),\n\t\t...(args.verifier ? { verifier: snapshotResolvedProfile(args.verifier) } : {}),\n\t});\n}\n\nexport function verifierWorkerExecutionContract(\n\tcontract: WorkerExecutionContract,\n): WorkerExecutionContract \| undefined {\n\treturn contract.verifier\n\t\t? parseWorkerExecutionContract({ schemaVersion: ORCHESTRATION_SCHEMA_VERSION, worker: contract.verifier })\n\t\t: undefined;\n}\n"]}
1	+ {"version":3,"file":"worker-execution-contract.d.ts","sourceRoot":"","sources":["../../../src/core/orchestration/worker-execution-contract.ts"],"names":[],"mappings":"AAGA,OAAO,EAeN,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EAEpB,KAAK,gCAAgC,EACrC,KAAK,uBAAuB,EAE5B,MAAM,gBAAgB,CAAC;AAIxB,qBAAa,4BAA6B,SAAQ,KAAK;IACtD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AAwMD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CA2BpF;AAwBD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IACnD,MAAM,EAAE;QACP,OAAO,EAAE,oBAAoB,CAAC;QAC9B,YAAY,EAAE,yBAAyB,CAAC;QACxC,SAAS,EAAE,gCAAgC,CAAC;QAC5C,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;QAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,QAAQ,CAAC,EAAE;QACV,OAAO,EAAE,oBAAoB,CAAC;QAC9B,YAAY,EAAE,yBAAyB,CAAC;QACxC,SAAS,EAAE,gCAAgC,CAAC;QAC5C,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;QAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACF,GAAG,uBAAuB,CAM1B;AAED,wBAAgB,+BAA+B,CAC9C,QAAQ,EAAE,uBAAuB,GAC/B,uBAAuB,GAAG,SAAS,CAIrC","sourcesContent":["import path from \"node:path\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport { hasOnlyKeys, isPlainRecord } from \"../util/value-guards.ts\";\nimport {\n\tisHarnessCapability,\n\tisResourcePointerKind,\n\tMAX_ORCHESTRATION_COLLECTION_LENGTH,\n\tMAX_ORCHESTRATION_IDENTIFIER_LENGTH,\n\tMAX_ORCHESTRATION_MODEL_ID_LENGTH,\n\tMAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH,\n\tMAX_WORKER_AUTHORITY_PATH_LENGTH,\n\tMAX_WORKER_AUTHORITY_PATHS,\n\tMAX_WORKER_RESOURCE_METADATA_NAME_LENGTH,\n\tMAX_WORKER_RESOURCE_PATH_LENGTH,\n\tMAX_WORKER_RESOURCE_POINTERS,\n\tMAX_WORKER_SOUL_LENGTH,\n\tORCHESTRATION_SCHEMA_VERSION,\n\tORCHESTRATION_THINKING_LEVELS,\n\ttype OrchestrationModelBinding,\n\ttype OrchestrationProfile,\n\ttype ResourcePointer,\n\ttype RiskBudget,\n\ttype WorkerExecutionAuthorityContract,\n\ttype WorkerExecutionContract,\n\ttype WorkerProfileExecutionContract,\n} from \"./contracts.ts\";\nimport { OrchestrationProfileError, parseOrchestrationProfile } from \"./profile-registry.ts\";\nimport { intersectRiskBudgets, parseRiskBudget } from \"./risk-budget.ts\";\n\nexport class WorkerExecutionContractError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WorkerExecutionContractError\";\n\t}\n}\n\nfunction parseModelBinding(value: unknown, label: string): OrchestrationModelBinding {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!hasOnlyKeys(value, [\"provider\", \"modelId\", \"thinkingLevel\"]) \|\|\n\t\ttypeof value.provider !== \"string\" \|\|\n\t\tvalue.provider.length > MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH \|\|\n\t\t!value.provider.trim() \|\|\n\t\ttypeof value.modelId !== \"string\" \|\|\n\t\tvalue.modelId.length > MAX_ORCHESTRATION_MODEL_ID_LENGTH \|\|\n\t\t!value.modelId.trim() \|\|\n\t\ttypeof value.thinkingLevel !== \"string\" \|\|\n\t\t!ORCHESTRATION_THINKING_LEVELS.includes(value.thinkingLevel as (typeof ORCHESTRATION_THINKING_LEVELS)[number])\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} model binding is invalid.`);\n\t}\n\treturn {\n\t\tprovider: value.provider,\n\t\tmodelId: value.modelId,\n\t\tthinkingLevel: value.thinkingLevel as (typeof ORCHESTRATION_THINKING_LEVELS)[number],\n\t};\n}\n\nfunction stringArray(\n\tvalue: unknown,\n\tlabel: string,\n\toptions: { maxEntries?: number; maxLength?: number } = {},\n): string[] {\n\tconst maxEntries = options.maxEntries ?? MAX_ORCHESTRATION_COLLECTION_LENGTH;\n\tconst maxLength = options.maxLength ?? MAX_ORCHESTRATION_IDENTIFIER_LENGTH;\n\tif (\n\t\t!Array.isArray(value) \|\|\n\t\tvalue.length > maxEntries \|\|\n\t\t!value.every((entry) => typeof entry === \"string\" && entry.length > 0 && entry.length <= maxLength)\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} must be an array of non-empty strings.`);\n\t}\n\tif (new Set(value).size !== value.length) {\n\t\tthrow new WorkerExecutionContractError(`${label} contains duplicates.`);\n\t}\n\treturn [...value];\n}\n\nfunction parseResourcePointers(value: unknown, label: string): ResourcePointer[] {\n\tif (!Array.isArray(value) \|\| value.length > MAX_WORKER_RESOURCE_POINTERS) {\n\t\tthrow new WorkerExecutionContractError(`${label} resource pointers are invalid.`);\n\t}\n\tconst ids = new Set<string>();\n\treturn value.map((candidate) => {\n\t\tif (\n\t\t\t!isPlainRecord(candidate) \|\|\n\t\t\t!hasOnlyKeys(candidate, [\"id\", \"kind\", \"uri\", \"readOnly\", \"digest\", \"metadata\"]) \|\|\n\t\t\ttypeof candidate.id !== \"string\" \|\|\n\t\t\t!/^(skill\|prompt):[a-f0-9]{64}$/i.test(candidate.id) \|\|\n\t\t\ttypeof candidate.kind !== \"string\" \|\|\n\t\t\t!isResourcePointerKind(candidate.kind) \|\|\n\t\t\t(candidate.kind !== \"skill\" && candidate.kind !== \"prompt\") \|\|\n\t\t\t!candidate.id.startsWith(`${candidate.kind}:`) \|\|\n\t\t\ttypeof candidate.uri !== \"string\" \|\|\n\t\t\tcandidate.uri.length === 0 \|\|\n\t\t\tcandidate.uri.length > MAX_WORKER_RESOURCE_PATH_LENGTH + 16 \|\|\n\t\t\t!candidate.uri.startsWith(\"file:\") \|\|\n\t\t\tcandidate.readOnly !== true \|\|\n\t\t\t(candidate.digest !== undefined &&\n\t\t\t\t(typeof candidate.digest !== \"string\" \|\| !/^[a-f0-9]{64}$/i.test(candidate.digest))) \|\|\n\t\t\t(candidate.metadata !== undefined &&\n\t\t\t\t(!isPlainRecord(candidate.metadata) \|\|\n\t\t\t\t\ttypeof candidate.metadata.name !== \"string\" \|\|\n\t\t\t\t\tcandidate.metadata.name.length === 0 \|\|\n\t\t\t\t\tcandidate.metadata.name.length > MAX_WORKER_RESOURCE_METADATA_NAME_LENGTH \|\|\n\t\t\t\t\t!hasOnlyKeys(candidate.metadata, [\"name\"])))\n\t\t) {\n\t\t\tthrow new WorkerExecutionContractError(`${label} resource pointer is invalid.`);\n\t\t}\n\t\tif (ids.has(candidate.id)) {\n\t\t\tthrow new WorkerExecutionContractError(`${label} resource pointers contain duplicates.`);\n\t\t}\n\t\tids.add(candidate.id);\n\t\treturn {\n\t\t\tid: candidate.id,\n\t\t\tkind: candidate.kind,\n\t\t\turi: candidate.uri,\n\t\t\treadOnly: true,\n\t\t\t...(typeof candidate.digest === \"string\" ? { digest: candidate.digest } : {}),\n\t\t\t...(isPlainRecord(candidate.metadata) && typeof candidate.metadata.name === \"string\"\n\t\t\t\t? { metadata: { name: candidate.metadata.name } }\n\t\t\t\t: {}),\n\t\t};\n\t});\n}\n\nfunction parseAuthority(\n\tvalue: unknown,\n\tprofile: OrchestrationProfile,\n\tlabel: string,\n): WorkerExecutionAuthorityContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!hasOnlyKeys(value, [\"capabilities\", \"toolNames\", \"readPaths\", \"writePaths\", \"deniedPaths\", \"budget\"])\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority is invalid.`);\n\t}\n\tconst capabilities = stringArray(value.capabilities, `${label} authority capabilities`);\n\tif (!capabilities.every(isHarnessCapability)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority contains an unknown capability.`);\n\t}\n\tif (capabilities.some((capability) => !profile.capabilityCeiling.includes(capability))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority exceeds its profile capability ceiling.`);\n\t}\n\tconst toolNames = stringArray(value.toolNames, `${label} authority toolNames`);\n\tif (toolNames.some((toolName) => !profile.toolNames.includes(toolName))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority contains a tool outside its profile.`);\n\t}\n\tconst pathArrayOptions = {\n\t\tmaxEntries: MAX_WORKER_AUTHORITY_PATHS,\n\t\tmaxLength: MAX_WORKER_AUTHORITY_PATH_LENGTH,\n\t};\n\tconst readPaths = stringArray(value.readPaths, `${label} authority readPaths`, pathArrayOptions);\n\tconst writePaths = stringArray(value.writePaths, `${label} authority writePaths`, pathArrayOptions);\n\tconst deniedPaths = stringArray(value.deniedPaths, `${label} authority deniedPaths`, pathArrayOptions);\n\tif (\n\t\t[...readPaths, ...writePaths, ...deniedPaths].some(\n\t\t\t(entry) => !path.isAbsolute(entry) && !path.win32.isAbsolute(entry),\n\t\t)\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority paths must be absolute.`);\n\t}\n\tlet budget: RiskBudget;\n\ttry {\n\t\tbudget = parseRiskBudget(value.budget, `${label} authority budget`);\n\t} catch (error) {\n\t\tthrow new WorkerExecutionContractError(error instanceof Error ? error.message : String(error));\n\t}\n\tif (!isDeepStrictEqual(intersectRiskBudgets(profile.budget, budget), budget)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority exceeds its profile budget.`);\n\t}\n\tconst readGranted = capabilities.some(\n\t\t(capability) => capability === \"filesystem.read\" \|\| capability === \"worktree.read\",\n\t);\n\tconst writeGranted = capabilities.some(\n\t\t(capability) => capability === \"filesystem.write\" \|\| capability === \"worktree.mutate\",\n\t);\n\tif (readGranted && readPaths.length === 0) {\n\t\tthrow new WorkerExecutionContractError(`${label} read authority lacks a positive path scope.`);\n\t}\n\tif (writeGranted && writePaths.length === 0) {\n\t\tthrow new WorkerExecutionContractError(`${label} write authority lacks a positive path scope.`);\n\t}\n\treturn {\n\t\tcapabilities: capabilities as WorkerExecutionAuthorityContract[\"capabilities\"],\n\t\ttoolNames,\n\t\treadPaths,\n\t\twritePaths,\n\t\tdeniedPaths,\n\t\tbudget,\n\t};\n}\n\nfunction parseProfileContract(value: unknown, label: string): WorkerProfileExecutionContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!hasOnlyKeys(value, [\"schemaVersion\", \"profile\", \"modelBinding\", \"authority\", \"resourcePointers\", \"soul\"]) \|\|\n\t\tvalue.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} is invalid.`);\n\t}\n\tlet profile: OrchestrationProfile;\n\ttry {\n\t\tprofile = parseOrchestrationProfile(value.profile);\n\t} catch (error) {\n\t\tthrow new WorkerExecutionContractError(\n\t\t\terror instanceof OrchestrationProfileError ? error.message : `${label} profile is invalid.`,\n\t\t);\n\t}\n\tif (profile.role === \"orchestrator\") {\n\t\tthrow new WorkerExecutionContractError(`${label} cannot materialize an orchestrator profile.`);\n\t}\n\tconst modelBinding = parseModelBinding(value.modelBinding, label);\n\tif (!profile.modelPolicy.candidates.some((candidate) => isDeepStrictEqual(candidate, modelBinding))) {\n\t\tthrow new WorkerExecutionContractError(`${label} model binding is not declared by its profile.`);\n\t}\n\tif (\n\t\tvalue.soul !== undefined &&\n\t\t(typeof value.soul !== \"string\" \|\| value.soul.length > MAX_WORKER_SOUL_LENGTH \|\| !value.soul.trim())\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} soul is invalid.`);\n\t}\n\tconst authority = parseAuthority(value.authority, profile, label);\n\tconst resourcePointers = parseResourcePointers(value.resourcePointers ?? [], label);\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofile,\n\t\tmodelBinding,\n\t\tauthority,\n\t\tresourcePointers,\n\t\t...(typeof value.soul === \"string\" ? { soul: value.soul } : {}),\n\t};\n}\n\nexport function parseWorkerExecutionContract(value: unknown): WorkerExecutionContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!hasOnlyKeys(value, [\"schemaVersion\", \"worker\", \"verifier\"]) \|\|\n\t\tvalue.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION\n\t) {\n\t\tthrow new WorkerExecutionContractError(\"Worker execution contract is invalid.\");\n\t}\n\tconst worker = parseProfileContract(value.worker, \"Worker execution contract\");\n\tconst verifier = value.verifier\n\t\t? parseProfileContract(value.verifier, \"Worker verifier execution contract\")\n\t\t: undefined;\n\tif (worker.profile.requireIndependentVerification) {\n\t\tif (!verifier \|\| worker.profile.verificationProfileId !== verifier.profile.profileId) {\n\t\t\tthrow new WorkerExecutionContractError(\"Worker execution contract is missing its owner-pinned verifier.\");\n\t\t}\n\t\tif (verifier.profile.role !== \"verifier\") {\n\t\t\tthrow new WorkerExecutionContractError(\"Worker verifier execution contract does not use a verifier profile.\");\n\t\t}\n\t} else if (verifier) {\n\t\tthrow new WorkerExecutionContractError(\"Worker execution contract has an unexpected verifier.\");\n\t}\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tworker,\n\t\t...(verifier ? { verifier } : {}),\n\t};\n}\n\nfunction snapshotProfile(profile: OrchestrationProfile): OrchestrationProfile {\n\tconst { sourcePath: _sourcePath, ...persisted } = profile;\n\treturn structuredClone(persisted) as OrchestrationProfile;\n}\n\nfunction snapshotResolvedProfile(source: {\n\tprofile: OrchestrationProfile;\n\tmodelBinding: OrchestrationModelBinding;\n\tauthority: WorkerExecutionAuthorityContract;\n\tresourcePointers?: readonly ResourcePointer[];\n\tsoul?: string;\n}): WorkerProfileExecutionContract {\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofile: snapshotProfile(source.profile),\n\t\tmodelBinding: structuredClone(source.modelBinding),\n\t\tauthority: structuredClone(source.authority),\n\t\tresourcePointers: structuredClone(source.resourcePointers ?? []),\n\t\t...(source.soul ? { soul: source.soul } : {}),\n\t};\n}\n\nexport function createWorkerExecutionContract(args: {\n\tworker: {\n\t\tprofile: OrchestrationProfile;\n\t\tmodelBinding: OrchestrationModelBinding;\n\t\tauthority: WorkerExecutionAuthorityContract;\n\t\tresourcePointers?: readonly ResourcePointer[];\n\t\tsoul?: string;\n\t};\n\tverifier?: {\n\t\tprofile: OrchestrationProfile;\n\t\tmodelBinding: OrchestrationModelBinding;\n\t\tauthority: WorkerExecutionAuthorityContract;\n\t\tresourcePointers?: readonly ResourcePointer[];\n\t\tsoul?: string;\n\t};\n}): WorkerExecutionContract {\n\treturn parseWorkerExecutionContract({\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tworker: snapshotResolvedProfile(args.worker),\n\t\t...(args.verifier ? { verifier: snapshotResolvedProfile(args.verifier) } : {}),\n\t});\n}\n\nexport function verifierWorkerExecutionContract(\n\tcontract: WorkerExecutionContract,\n): WorkerExecutionContract \| undefined {\n\treturn contract.verifier\n\t\t? parseWorkerExecutionContract({ schemaVersion: ORCHESTRATION_SCHEMA_VERSION, worker: contract.verifier })\n\t\t: undefined;\n}\n"]}

package/dist/core/orchestration/worker-execution-contract.js CHANGED Viewed

@@ -1,25 +1,23 @@
 import path from "node:path";
 import { isDeepStrictEqual } from "node:util";
-import { isPlainRecord } from "../util/value-guards.js";
-import { isHarnessCapability, ORCHESTRATION_SCHEMA_VERSION, ORCHESTRATION_THINKING_LEVELS, } from "./contracts.js";
+import { hasOnlyKeys, isPlainRecord } from "../util/value-guards.js";
+import { isHarnessCapability, isResourcePointerKind, MAX_ORCHESTRATION_COLLECTION_LENGTH, MAX_ORCHESTRATION_IDENTIFIER_LENGTH, MAX_ORCHESTRATION_MODEL_ID_LENGTH, MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH, MAX_WORKER_AUTHORITY_PATH_LENGTH, MAX_WORKER_AUTHORITY_PATHS, MAX_WORKER_RESOURCE_METADATA_NAME_LENGTH, MAX_WORKER_RESOURCE_PATH_LENGTH, MAX_WORKER_RESOURCE_POINTERS, MAX_WORKER_SOUL_LENGTH, ORCHESTRATION_SCHEMA_VERSION, ORCHESTRATION_THINKING_LEVELS, } from "./contracts.js";
 import { OrchestrationProfileError, parseOrchestrationProfile } from "./profile-registry.js";
-import { intersectRiskBudgets, validateRiskBudget } from "./risk-budget.js";
+import { intersectRiskBudgets, parseRiskBudget } from "./risk-budget.js";
 export class WorkerExecutionContractError extends Error {
     constructor(message) {
         super(message);
         this.name = "WorkerExecutionContractError";
     }
 }
-function exactKeys(record, allowed) {
-    const allowedSet = new Set(allowed);
-    return Object.keys(record).every((key) => allowedSet.has(key));
-}
 function parseModelBinding(value, label) {
     if (!isPlainRecord(value) ||
-        !exactKeys(value, ["provider", "modelId", "thinkingLevel"]) ||
+        !hasOnlyKeys(value, ["provider", "modelId", "thinkingLevel"]) ||
         typeof value.provider !== "string" ||
+        value.provider.length > MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH ||
         !value.provider.trim() ||
         typeof value.modelId !== "string" ||
+        value.modelId.length > MAX_ORCHESTRATION_MODEL_ID_LENGTH ||
         !value.modelId.trim() ||
         typeof value.thinkingLevel !== "string" ||
         !ORCHESTRATION_THINKING_LEVELS.includes(value.thinkingLevel)) {
@@ -31,8 +29,12 @@ function parseModelBinding(value, label) {
         thinkingLevel: value.thinkingLevel,
     };
 }
-function stringArray(value, label) {
-    if (!Array.isArray(value) || !value.every((entry) => typeof entry === "string" && entry.length > 0)) {
+function stringArray(value, label, options = {}) {
+    const maxEntries = options.maxEntries ?? MAX_ORCHESTRATION_COLLECTION_LENGTH;
+    const maxLength = options.maxLength ?? MAX_ORCHESTRATION_IDENTIFIER_LENGTH;
+    if (!Array.isArray(value) ||
+        value.length > maxEntries ||
+        !value.every((entry) => typeof entry === "string" && entry.length > 0 && entry.length <= maxLength)) {
         throw new WorkerExecutionContractError(`${label} must be an array of non-empty strings.`);
     }
     if (new Set(value).size !== value.length) {
@@ -40,9 +42,54 @@ function stringArray(value, label) {
     }
     return [...value];
 }
+function parseResourcePointers(value, label) {
+    if (!Array.isArray(value) || value.length > MAX_WORKER_RESOURCE_POINTERS) {
+        throw new WorkerExecutionContractError(`${label} resource pointers are invalid.`);
+    }
+    const ids = new Set();
+    return value.map((candidate) => {
+        if (!isPlainRecord(candidate) ||
+            !hasOnlyKeys(candidate, ["id", "kind", "uri", "readOnly", "digest", "metadata"]) ||
+            typeof candidate.id !== "string" ||
+            !/^(skill|prompt):[a-f0-9]{64}$/i.test(candidate.id) ||
+            typeof candidate.kind !== "string" ||
+            !isResourcePointerKind(candidate.kind) ||
+            (candidate.kind !== "skill" && candidate.kind !== "prompt") ||
+            !candidate.id.startsWith(`${candidate.kind}:`) ||
+            typeof candidate.uri !== "string" ||
+            candidate.uri.length === 0 ||
+            candidate.uri.length > MAX_WORKER_RESOURCE_PATH_LENGTH + 16 ||
+            !candidate.uri.startsWith("file:") ||
+            candidate.readOnly !== true ||
+            (candidate.digest !== undefined &&
+                (typeof candidate.digest !== "string" || !/^[a-f0-9]{64}$/i.test(candidate.digest))) ||
+            (candidate.metadata !== undefined &&
+                (!isPlainRecord(candidate.metadata) ||
+                    typeof candidate.metadata.name !== "string" ||
+                    candidate.metadata.name.length === 0 ||
+                    candidate.metadata.name.length > MAX_WORKER_RESOURCE_METADATA_NAME_LENGTH ||
+                    !hasOnlyKeys(candidate.metadata, ["name"])))) {
+            throw new WorkerExecutionContractError(`${label} resource pointer is invalid.`);
+        }
+        if (ids.has(candidate.id)) {
+            throw new WorkerExecutionContractError(`${label} resource pointers contain duplicates.`);
+        }
+        ids.add(candidate.id);
+        return {
+            id: candidate.id,
+            kind: candidate.kind,
+            uri: candidate.uri,
+            readOnly: true,
+            ...(typeof candidate.digest === "string" ? { digest: candidate.digest } : {}),
+            ...(isPlainRecord(candidate.metadata) && typeof candidate.metadata.name === "string"
+                ? { metadata: { name: candidate.metadata.name } }
+                : {}),
+        };
+    });
+}
 function parseAuthority(value, profile, label) {
     if (!isPlainRecord(value) ||
-        !exactKeys(value, ["capabilities", "toolNames", "readPaths", "writePaths", "deniedPaths", "budget"])) {
+        !hasOnlyKeys(value, ["capabilities", "toolNames", "readPaths", "writePaths", "deniedPaths", "budget"])) {
         throw new WorkerExecutionContractError(`${label} authority is invalid.`);
     }
     const capabilities = stringArray(value.capabilities, `${label} authority capabilities`);
@@ -56,18 +103,19 @@ function parseAuthority(value, profile, label) {
     if (toolNames.some((toolName) => !profile.toolNames.includes(toolName))) {
         throw new WorkerExecutionContractError(`${label} authority contains a tool outside its profile.`);
     }
-    const readPaths = stringArray(value.readPaths, `${label} authority readPaths`);
-    const writePaths = stringArray(value.writePaths, `${label} authority writePaths`);
-    const deniedPaths = stringArray(value.deniedPaths, `${label} authority deniedPaths`);
-    if ([...readPaths, ...writePaths, ...deniedPaths].some((entry) => !path.isAbsolute(entry))) {
+    const pathArrayOptions = {
+        maxEntries: MAX_WORKER_AUTHORITY_PATHS,
+        maxLength: MAX_WORKER_AUTHORITY_PATH_LENGTH,
+    };
+    const readPaths = stringArray(value.readPaths, `${label} authority readPaths`, pathArrayOptions);
+    const writePaths = stringArray(value.writePaths, `${label} authority writePaths`, pathArrayOptions);
+    const deniedPaths = stringArray(value.deniedPaths, `${label} authority deniedPaths`, pathArrayOptions);
+    if ([...readPaths, ...writePaths, ...deniedPaths].some((entry) => !path.isAbsolute(entry) && !path.win32.isAbsolute(entry))) {
         throw new WorkerExecutionContractError(`${label} authority paths must be absolute.`);
     }
-    if (!isPlainRecord(value.budget)) {
-        throw new WorkerExecutionContractError(`${label} authority budget is invalid.`);
-    }
-    const budget = structuredClone(value.budget);
+    let budget;
     try {
-        validateRiskBudget(budget, `${label} authority budget`);
+        budget = parseRiskBudget(value.budget, `${label} authority budget`);
     }
     catch (error) {
         throw new WorkerExecutionContractError(error instanceof Error ? error.message : String(error));
@@ -94,7 +142,7 @@ function parseAuthority(value, profile, label) {
 }
 function parseProfileContract(value, label) {
     if (!isPlainRecord(value) ||
-        !exactKeys(value, ["schemaVersion", "profile", "modelBinding", "authority", "soul"]) ||
+        !hasOnlyKeys(value, ["schemaVersion", "profile", "modelBinding", "authority", "resourcePointers", "soul"]) ||
         value.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION) {
         throw new WorkerExecutionContractError(`${label} is invalid.`);
     }
@@ -112,21 +160,24 @@ function parseProfileContract(value, label) {
     if (!profile.modelPolicy.candidates.some((candidate) => isDeepStrictEqual(candidate, modelBinding))) {
         throw new WorkerExecutionContractError(`${label} model binding is not declared by its profile.`);
     }
-    if (value.soul !== undefined && (typeof value.soul !== "string" || !value.soul.trim())) {
+    if (value.soul !== undefined &&
+        (typeof value.soul !== "string" || value.soul.length > MAX_WORKER_SOUL_LENGTH || !value.soul.trim())) {
         throw new WorkerExecutionContractError(`${label} soul is invalid.`);
     }
     const authority = parseAuthority(value.authority, profile, label);
+    const resourcePointers = parseResourcePointers(value.resourcePointers ?? [], label);
     return {
         schemaVersion: ORCHESTRATION_SCHEMA_VERSION,
         profile,
         modelBinding,
         authority,
+        resourcePointers,
         ...(typeof value.soul === "string" ? { soul: value.soul } : {}),
     };
 }
 export function parseWorkerExecutionContract(value) {
     if (!isPlainRecord(value) ||
-        !exactKeys(value, ["schemaVersion", "worker", "verifier"]) ||
+        !hasOnlyKeys(value, ["schemaVersion", "worker", "verifier"]) ||
         value.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION) {
         throw new WorkerExecutionContractError("Worker execution contract is invalid.");
     }
@@ -161,6 +212,7 @@ function snapshotResolvedProfile(source) {
         profile: snapshotProfile(source.profile),
         modelBinding: structuredClone(source.modelBinding),
         authority: structuredClone(source.authority),
+        resourcePointers: structuredClone(source.resourcePointers ?? []),
         ...(source.soul ? { soul: source.soul } : {}),
     };
 }

package/dist/core/orchestration/worker-execution-contract.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"worker-execution-contract.js","sourceRoot":"","sources":["../../../src/core/orchestration/worker-execution-contract.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EACN,mBAAmB,EACnB,4BAA4B,EAC5B,6BAA6B,GAM7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACtD,YAAY,OAAe,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAAA,CAC3C;CACD;AAED,SAAS,SAAS,CAAC,MAA+B,EAAE,OAA0B,EAAW;IACxF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAAA,CAC/D;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa,EAA6B;IACpF,IACC,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE;QACtB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QACrB,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,CAAC,6BAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,aAA+D,CAAC,EAC7G,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,KAAK,CAAC,aAA+D;KACpF,CAAC;AAAA,CACF;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa,EAAY;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AAAA,CAClB;AAED,SAAS,cAAc,CACtB,KAAc,EACd,OAA6B,EAC7B,KAAa,EACsB;IACnC,IACC,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,EACnG,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACxF,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,oDAAoD,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC/E,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,uBAAuB,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACrF,IAAI,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,EAAE,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC;QACJ,kBAAkB,CAAC,MAAM,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,4BAA4B,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CACpC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,iBAAiB,IAAI,UAAU,KAAK,eAAe,CAClF,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CACrC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,iBAAiB,CACrF,CAAC;IACF,IAAI,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,8CAA8C,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,YAAY,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAC;IACjG,CAAC;IACD,OAAO;QACN,YAAY,EAAE,YAAgE;QAC9E,SAAS;QACT,SAAS;QACT,UAAU;QACV,WAAW;QACX,MAAM;KACN,CAAC;AAAA,CACF;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa,EAAkC;IAC5F,IACC,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACpF,KAAK,CAAC,aAAa,KAAK,4BAA4B,EACnD,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAA6B,CAAC;IAClC,IAAI,CAAC;QACJ,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,4BAA4B,CACrC,KAAK,YAAY,yBAAyB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAC3F,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,8CAA8C,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO;QACN,aAAa,EAAE,4BAA4B;QAC3C,OAAO;QACP,YAAY;QACZ,SAAS;QACT,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AAAA,CACF;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc,EAA2B;IACrF,IACC,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,KAAK,CAAC,aAAa,KAAK,4BAA4B,EACnD,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,uCAAuC,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ;QAC9B,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,oCAAoC,CAAC;QAC5E,CAAC,CAAC,SAAS,CAAC;IACb,IAAI,MAAM,CAAC,OAAO,CAAC,8BAA8B,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,qBAAqB,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACtF,MAAM,IAAI,4BAA4B,CAAC,iEAAiE,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC1C,MAAM,IAAI,4BAA4B,CAAC,qEAAqE,CAAC,CAAC;QAC/G,CAAC;IACF,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,4BAA4B,CAAC,uDAAuD,CAAC,CAAC;IACjG,CAAC;IACD,OAAO;QACN,aAAa,EAAE,4BAA4B;QAC3C,MAAM;QACN,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjC,CAAC;AAAA,CACF;AAED,SAAS,eAAe,CAAC,OAA6B,EAAwB;IAC7E,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC;IAC1D,OAAO,eAAe,CAAC,SAAS,CAAyB,CAAC;AAAA,CAC1D;AAED,SAAS,uBAAuB,CAAC,MAKhC,EAAkC;IAClC,OAAO;QACN,aAAa,EAAE,4BAA4B;QAC3C,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC;QACxC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC;QAClD,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AAAA,CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,IAa7C,EAA2B;IAC3B,OAAO,4BAA4B,CAAC;QACnC,aAAa,EAAE,4BAA4B;QAC3C,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,+BAA+B,CAC9C,QAAiC,EACK;IACtC,OAAO,QAAQ,CAAC,QAAQ;QACvB,CAAC,CAAC,4BAA4B,CAAC,EAAE,aAAa,EAAE,4BAA4B,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC1G,CAAC,CAAC,SAAS,CAAC;AAAA,CACb","sourcesContent":["import path from \"node:path\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport { isPlainRecord } from \"../util/value-guards.ts\";\nimport {\n\tisHarnessCapability,\n\tORCHESTRATION_SCHEMA_VERSION,\n\tORCHESTRATION_THINKING_LEVELS,\n\ttype OrchestrationModelBinding,\n\ttype OrchestrationProfile,\n\ttype WorkerExecutionAuthorityContract,\n\ttype WorkerExecutionContract,\n\ttype WorkerProfileExecutionContract,\n} from \"./contracts.ts\";\nimport { OrchestrationProfileError, parseOrchestrationProfile } from \"./profile-registry.ts\";\nimport { intersectRiskBudgets, validateRiskBudget } from \"./risk-budget.ts\";\n\nexport class WorkerExecutionContractError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WorkerExecutionContractError\";\n\t}\n}\n\nfunction exactKeys(record: Record<string, unknown>, allowed: readonly string[]): boolean {\n\tconst allowedSet = new Set(allowed);\n\treturn Object.keys(record).every((key) => allowedSet.has(key));\n}\n\nfunction parseModelBinding(value: unknown, label: string): OrchestrationModelBinding {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!exactKeys(value, [\"provider\", \"modelId\", \"thinkingLevel\"]) \|\|\n\t\ttypeof value.provider !== \"string\" \|\|\n\t\t!value.provider.trim() \|\|\n\t\ttypeof value.modelId !== \"string\" \|\|\n\t\t!value.modelId.trim() \|\|\n\t\ttypeof value.thinkingLevel !== \"string\" \|\|\n\t\t!ORCHESTRATION_THINKING_LEVELS.includes(value.thinkingLevel as (typeof ORCHESTRATION_THINKING_LEVELS)[number])\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} model binding is invalid.`);\n\t}\n\treturn {\n\t\tprovider: value.provider,\n\t\tmodelId: value.modelId,\n\t\tthinkingLevel: value.thinkingLevel as (typeof ORCHESTRATION_THINKING_LEVELS)[number],\n\t};\n}\n\nfunction stringArray(value: unknown, label: string): string[] {\n\tif (!Array.isArray(value) \|\| !value.every((entry) => typeof entry === \"string\" && entry.length > 0)) {\n\t\tthrow new WorkerExecutionContractError(`${label} must be an array of non-empty strings.`);\n\t}\n\tif (new Set(value).size !== value.length) {\n\t\tthrow new WorkerExecutionContractError(`${label} contains duplicates.`);\n\t}\n\treturn [...value];\n}\n\nfunction parseAuthority(\n\tvalue: unknown,\n\tprofile: OrchestrationProfile,\n\tlabel: string,\n): WorkerExecutionAuthorityContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!exactKeys(value, [\"capabilities\", \"toolNames\", \"readPaths\", \"writePaths\", \"deniedPaths\", \"budget\"])\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority is invalid.`);\n\t}\n\tconst capabilities = stringArray(value.capabilities, `${label} authority capabilities`);\n\tif (!capabilities.every(isHarnessCapability)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority contains an unknown capability.`);\n\t}\n\tif (capabilities.some((capability) => !profile.capabilityCeiling.includes(capability))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority exceeds its profile capability ceiling.`);\n\t}\n\tconst toolNames = stringArray(value.toolNames, `${label} authority toolNames`);\n\tif (toolNames.some((toolName) => !profile.toolNames.includes(toolName))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority contains a tool outside its profile.`);\n\t}\n\tconst readPaths = stringArray(value.readPaths, `${label} authority readPaths`);\n\tconst writePaths = stringArray(value.writePaths, `${label} authority writePaths`);\n\tconst deniedPaths = stringArray(value.deniedPaths, `${label} authority deniedPaths`);\n\tif ([...readPaths, ...writePaths, ...deniedPaths].some((entry) => !path.isAbsolute(entry))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority paths must be absolute.`);\n\t}\n\tif (!isPlainRecord(value.budget)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority budget is invalid.`);\n\t}\n\tconst budget = structuredClone(value.budget);\n\ttry {\n\t\tvalidateRiskBudget(budget, `${label} authority budget`);\n\t} catch (error) {\n\t\tthrow new WorkerExecutionContractError(error instanceof Error ? error.message : String(error));\n\t}\n\tif (!isDeepStrictEqual(intersectRiskBudgets(profile.budget, budget), budget)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority exceeds its profile budget.`);\n\t}\n\tconst readGranted = capabilities.some(\n\t\t(capability) => capability === \"filesystem.read\" \|\| capability === \"worktree.read\",\n\t);\n\tconst writeGranted = capabilities.some(\n\t\t(capability) => capability === \"filesystem.write\" \|\| capability === \"worktree.mutate\",\n\t);\n\tif (readGranted && readPaths.length === 0) {\n\t\tthrow new WorkerExecutionContractError(`${label} read authority lacks a positive path scope.`);\n\t}\n\tif (writeGranted && writePaths.length === 0) {\n\t\tthrow new WorkerExecutionContractError(`${label} write authority lacks a positive path scope.`);\n\t}\n\treturn {\n\t\tcapabilities: capabilities as WorkerExecutionAuthorityContract[\"capabilities\"],\n\t\ttoolNames,\n\t\treadPaths,\n\t\twritePaths,\n\t\tdeniedPaths,\n\t\tbudget,\n\t};\n}\n\nfunction parseProfileContract(value: unknown, label: string): WorkerProfileExecutionContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!exactKeys(value, [\"schemaVersion\", \"profile\", \"modelBinding\", \"authority\", \"soul\"]) \|\|\n\t\tvalue.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} is invalid.`);\n\t}\n\tlet profile: OrchestrationProfile;\n\ttry {\n\t\tprofile = parseOrchestrationProfile(value.profile);\n\t} catch (error) {\n\t\tthrow new WorkerExecutionContractError(\n\t\t\terror instanceof OrchestrationProfileError ? error.message : `${label} profile is invalid.`,\n\t\t);\n\t}\n\tif (profile.role === \"orchestrator\") {\n\t\tthrow new WorkerExecutionContractError(`${label} cannot materialize an orchestrator profile.`);\n\t}\n\tconst modelBinding = parseModelBinding(value.modelBinding, label);\n\tif (!profile.modelPolicy.candidates.some((candidate) => isDeepStrictEqual(candidate, modelBinding))) {\n\t\tthrow new WorkerExecutionContractError(`${label} model binding is not declared by its profile.`);\n\t}\n\tif (value.soul !== undefined && (typeof value.soul !== \"string\" \|\| !value.soul.trim())) {\n\t\tthrow new WorkerExecutionContractError(`${label} soul is invalid.`);\n\t}\n\tconst authority = parseAuthority(value.authority, profile, label);\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofile,\n\t\tmodelBinding,\n\t\tauthority,\n\t\t...(typeof value.soul === \"string\" ? { soul: value.soul } : {}),\n\t};\n}\n\nexport function parseWorkerExecutionContract(value: unknown): WorkerExecutionContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!exactKeys(value, [\"schemaVersion\", \"worker\", \"verifier\"]) \|\|\n\t\tvalue.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION\n\t) {\n\t\tthrow new WorkerExecutionContractError(\"Worker execution contract is invalid.\");\n\t}\n\tconst worker = parseProfileContract(value.worker, \"Worker execution contract\");\n\tconst verifier = value.verifier\n\t\t? parseProfileContract(value.verifier, \"Worker verifier execution contract\")\n\t\t: undefined;\n\tif (worker.profile.requireIndependentVerification) {\n\t\tif (!verifier \|\| worker.profile.verificationProfileId !== verifier.profile.profileId) {\n\t\t\tthrow new WorkerExecutionContractError(\"Worker execution contract is missing its owner-pinned verifier.\");\n\t\t}\n\t\tif (verifier.profile.role !== \"verifier\") {\n\t\t\tthrow new WorkerExecutionContractError(\"Worker verifier execution contract does not use a verifier profile.\");\n\t\t}\n\t} else if (verifier) {\n\t\tthrow new WorkerExecutionContractError(\"Worker execution contract has an unexpected verifier.\");\n\t}\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tworker,\n\t\t...(verifier ? { verifier } : {}),\n\t};\n}\n\nfunction snapshotProfile(profile: OrchestrationProfile): OrchestrationProfile {\n\tconst { sourcePath: _sourcePath, ...persisted } = profile;\n\treturn structuredClone(persisted) as OrchestrationProfile;\n}\n\nfunction snapshotResolvedProfile(source: {\n\tprofile: OrchestrationProfile;\n\tmodelBinding: OrchestrationModelBinding;\n\tauthority: WorkerExecutionAuthorityContract;\n\tsoul?: string;\n}): WorkerProfileExecutionContract {\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofile: snapshotProfile(source.profile),\n\t\tmodelBinding: structuredClone(source.modelBinding),\n\t\tauthority: structuredClone(source.authority),\n\t\t...(source.soul ? { soul: source.soul } : {}),\n\t};\n}\n\nexport function createWorkerExecutionContract(args: {\n\tworker: {\n\t\tprofile: OrchestrationProfile;\n\t\tmodelBinding: OrchestrationModelBinding;\n\t\tauthority: WorkerExecutionAuthorityContract;\n\t\tsoul?: string;\n\t};\n\tverifier?: {\n\t\tprofile: OrchestrationProfile;\n\t\tmodelBinding: OrchestrationModelBinding;\n\t\tauthority: WorkerExecutionAuthorityContract;\n\t\tsoul?: string;\n\t};\n}): WorkerExecutionContract {\n\treturn parseWorkerExecutionContract({\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tworker: snapshotResolvedProfile(args.worker),\n\t\t...(args.verifier ? { verifier: snapshotResolvedProfile(args.verifier) } : {}),\n\t});\n}\n\nexport function verifierWorkerExecutionContract(\n\tcontract: WorkerExecutionContract,\n): WorkerExecutionContract \| undefined {\n\treturn contract.verifier\n\t\t? parseWorkerExecutionContract({ schemaVersion: ORCHESTRATION_SCHEMA_VERSION, worker: contract.verifier })\n\t\t: undefined;\n}\n"]}
1	+ {"version":3,"file":"worker-execution-contract.js","sourceRoot":"","sources":["../../../src/core/orchestration/worker-execution-contract.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EACN,mBAAmB,EACnB,qBAAqB,EACrB,mCAAmC,EACnC,mCAAmC,EACnC,iCAAiC,EACjC,uCAAuC,EACvC,gCAAgC,EAChC,0BAA0B,EAC1B,wCAAwC,EACxC,+BAA+B,EAC/B,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,6BAA6B,GAQ7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEzE,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACtD,YAAY,OAAe,EAAE;QAC5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAAA,CAC3C;CACD;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa,EAA6B;IACpF,IACC,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,uCAAuC;QAC/D,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE;QACtB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,iCAAiC;QACxD,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QACrB,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,CAAC,6BAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,aAA+D,CAAC,EAC7G,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,KAAK,CAAC,aAA+D;KACpF,CAAC;AAAA,CACF;AAED,SAAS,WAAW,CACnB,KAAc,EACd,KAAa,EACb,OAAO,GAAgD,EAAE,EAC9C;IACX,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mCAAmC,CAAC;IAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mCAAmC,CAAC;IAC3E,IACC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,MAAM,GAAG,UAAU;QACzB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,EAClG,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AAAA,CAClB;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa,EAAqB;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QAC1E,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;QAC/B,IACC,CAAC,aAAa,CAAC,SAAS,CAAC;YACzB,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAChF,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ;YAChC,CAAC,gCAAgC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAClC,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC;YACtC,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC;YAC3D,CAAC,SAAS,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,IAAI,GAAG,CAAC;YAC9C,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ;YACjC,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;YAC1B,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,+BAA+B,GAAG,EAAE;YAC3D,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAClC,SAAS,CAAC,QAAQ,KAAK,IAAI;YAC3B,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS;gBAC9B,CAAC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACrF,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS;gBAChC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC;oBAClC,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;oBAC3C,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;oBACpC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,wCAAwC;oBACzE,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAC7C,CAAC;YACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;QAC1F,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACtB,OAAO;YACN,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,QAAQ,EAAE,IAAI;YACd,GAAG,CAAC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBACnF,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;SACN,CAAC;IAAA,CACF,CAAC,CAAC;AAAA,CACH;AAED,SAAS,cAAc,CACtB,KAAc,EACd,OAA6B,EAC7B,KAAa,EACsB;IACnC,IACC,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,EACrG,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACxF,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,oDAAoD,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC/E,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,gBAAgB,GAAG;QACxB,UAAU,EAAE,0BAA0B;QACtC,SAAS,EAAE,gCAAgC;KAC3C,CAAC;IACF,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACpG,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;IACvG,IACC,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,EAAE,GAAG,WAAW,CAAC,CAAC,IAAI,CACjD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CACnE,EACA,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,4BAA4B,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CACpC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,iBAAiB,IAAI,UAAU,KAAK,eAAe,CAClF,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CACrC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,iBAAiB,CACrF,CAAC;IACF,IAAI,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,8CAA8C,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,YAAY,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAC;IACjG,CAAC;IACD,OAAO;QACN,YAAY,EAAE,YAAgE;QAC9E,SAAS;QACT,SAAS;QACT,UAAU;QACV,WAAW;QACX,MAAM;KACN,CAAC;AAAA,CACF;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa,EAAkC;IAC5F,IACC,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC1G,KAAK,CAAC,aAAa,KAAK,4BAA4B,EACnD,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAA6B,CAAC;IAClC,IAAI,CAAC;QACJ,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,4BAA4B,CACrC,KAAK,YAAY,yBAAyB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAC3F,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,8CAA8C,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;IAClG,CAAC;IACD,IACC,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,sBAAsB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EACnG,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACpF,OAAO;QACN,aAAa,EAAE,4BAA4B;QAC3C,OAAO;QACP,YAAY;QACZ,SAAS;QACT,gBAAgB;QAChB,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AAAA,CACF;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc,EAA2B;IACrF,IACC,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5D,KAAK,CAAC,aAAa,KAAK,4BAA4B,EACnD,CAAC;QACF,MAAM,IAAI,4BAA4B,CAAC,uCAAuC,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ;QAC9B,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,oCAAoC,CAAC;QAC5E,CAAC,CAAC,SAAS,CAAC;IACb,IAAI,MAAM,CAAC,OAAO,CAAC,8BAA8B,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,qBAAqB,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACtF,MAAM,IAAI,4BAA4B,CAAC,iEAAiE,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC1C,MAAM,IAAI,4BAA4B,CAAC,qEAAqE,CAAC,CAAC;QAC/G,CAAC;IACF,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,4BAA4B,CAAC,uDAAuD,CAAC,CAAC;IACjG,CAAC;IACD,OAAO;QACN,aAAa,EAAE,4BAA4B;QAC3C,MAAM;QACN,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjC,CAAC;AAAA,CACF;AAED,SAAS,eAAe,CAAC,OAA6B,EAAwB;IAC7E,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC;IAC1D,OAAO,eAAe,CAAC,SAAS,CAAyB,CAAC;AAAA,CAC1D;AAED,SAAS,uBAAuB,CAAC,MAMhC,EAAkC;IAClC,OAAO;QACN,aAAa,EAAE,4BAA4B;QAC3C,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC;QACxC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC;QAClD,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC;QAC5C,gBAAgB,EAAE,eAAe,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AAAA,CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,IAe7C,EAA2B;IAC3B,OAAO,4BAA4B,CAAC;QACnC,aAAa,EAAE,4BAA4B;QAC3C,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,+BAA+B,CAC9C,QAAiC,EACK;IACtC,OAAO,QAAQ,CAAC,QAAQ;QACvB,CAAC,CAAC,4BAA4B,CAAC,EAAE,aAAa,EAAE,4BAA4B,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC1G,CAAC,CAAC,SAAS,CAAC;AAAA,CACb","sourcesContent":["import path from \"node:path\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport { hasOnlyKeys, isPlainRecord } from \"../util/value-guards.ts\";\nimport {\n\tisHarnessCapability,\n\tisResourcePointerKind,\n\tMAX_ORCHESTRATION_COLLECTION_LENGTH,\n\tMAX_ORCHESTRATION_IDENTIFIER_LENGTH,\n\tMAX_ORCHESTRATION_MODEL_ID_LENGTH,\n\tMAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH,\n\tMAX_WORKER_AUTHORITY_PATH_LENGTH,\n\tMAX_WORKER_AUTHORITY_PATHS,\n\tMAX_WORKER_RESOURCE_METADATA_NAME_LENGTH,\n\tMAX_WORKER_RESOURCE_PATH_LENGTH,\n\tMAX_WORKER_RESOURCE_POINTERS,\n\tMAX_WORKER_SOUL_LENGTH,\n\tORCHESTRATION_SCHEMA_VERSION,\n\tORCHESTRATION_THINKING_LEVELS,\n\ttype OrchestrationModelBinding,\n\ttype OrchestrationProfile,\n\ttype ResourcePointer,\n\ttype RiskBudget,\n\ttype WorkerExecutionAuthorityContract,\n\ttype WorkerExecutionContract,\n\ttype WorkerProfileExecutionContract,\n} from \"./contracts.ts\";\nimport { OrchestrationProfileError, parseOrchestrationProfile } from \"./profile-registry.ts\";\nimport { intersectRiskBudgets, parseRiskBudget } from \"./risk-budget.ts\";\n\nexport class WorkerExecutionContractError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WorkerExecutionContractError\";\n\t}\n}\n\nfunction parseModelBinding(value: unknown, label: string): OrchestrationModelBinding {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!hasOnlyKeys(value, [\"provider\", \"modelId\", \"thinkingLevel\"]) \|\|\n\t\ttypeof value.provider !== \"string\" \|\|\n\t\tvalue.provider.length > MAX_ORCHESTRATION_MODEL_PROVIDER_LENGTH \|\|\n\t\t!value.provider.trim() \|\|\n\t\ttypeof value.modelId !== \"string\" \|\|\n\t\tvalue.modelId.length > MAX_ORCHESTRATION_MODEL_ID_LENGTH \|\|\n\t\t!value.modelId.trim() \|\|\n\t\ttypeof value.thinkingLevel !== \"string\" \|\|\n\t\t!ORCHESTRATION_THINKING_LEVELS.includes(value.thinkingLevel as (typeof ORCHESTRATION_THINKING_LEVELS)[number])\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} model binding is invalid.`);\n\t}\n\treturn {\n\t\tprovider: value.provider,\n\t\tmodelId: value.modelId,\n\t\tthinkingLevel: value.thinkingLevel as (typeof ORCHESTRATION_THINKING_LEVELS)[number],\n\t};\n}\n\nfunction stringArray(\n\tvalue: unknown,\n\tlabel: string,\n\toptions: { maxEntries?: number; maxLength?: number } = {},\n): string[] {\n\tconst maxEntries = options.maxEntries ?? MAX_ORCHESTRATION_COLLECTION_LENGTH;\n\tconst maxLength = options.maxLength ?? MAX_ORCHESTRATION_IDENTIFIER_LENGTH;\n\tif (\n\t\t!Array.isArray(value) \|\|\n\t\tvalue.length > maxEntries \|\|\n\t\t!value.every((entry) => typeof entry === \"string\" && entry.length > 0 && entry.length <= maxLength)\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} must be an array of non-empty strings.`);\n\t}\n\tif (new Set(value).size !== value.length) {\n\t\tthrow new WorkerExecutionContractError(`${label} contains duplicates.`);\n\t}\n\treturn [...value];\n}\n\nfunction parseResourcePointers(value: unknown, label: string): ResourcePointer[] {\n\tif (!Array.isArray(value) \|\| value.length > MAX_WORKER_RESOURCE_POINTERS) {\n\t\tthrow new WorkerExecutionContractError(`${label} resource pointers are invalid.`);\n\t}\n\tconst ids = new Set<string>();\n\treturn value.map((candidate) => {\n\t\tif (\n\t\t\t!isPlainRecord(candidate) \|\|\n\t\t\t!hasOnlyKeys(candidate, [\"id\", \"kind\", \"uri\", \"readOnly\", \"digest\", \"metadata\"]) \|\|\n\t\t\ttypeof candidate.id !== \"string\" \|\|\n\t\t\t!/^(skill\|prompt):[a-f0-9]{64}$/i.test(candidate.id) \|\|\n\t\t\ttypeof candidate.kind !== \"string\" \|\|\n\t\t\t!isResourcePointerKind(candidate.kind) \|\|\n\t\t\t(candidate.kind !== \"skill\" && candidate.kind !== \"prompt\") \|\|\n\t\t\t!candidate.id.startsWith(`${candidate.kind}:`) \|\|\n\t\t\ttypeof candidate.uri !== \"string\" \|\|\n\t\t\tcandidate.uri.length === 0 \|\|\n\t\t\tcandidate.uri.length > MAX_WORKER_RESOURCE_PATH_LENGTH + 16 \|\|\n\t\t\t!candidate.uri.startsWith(\"file:\") \|\|\n\t\t\tcandidate.readOnly !== true \|\|\n\t\t\t(candidate.digest !== undefined &&\n\t\t\t\t(typeof candidate.digest !== \"string\" \|\| !/^[a-f0-9]{64}$/i.test(candidate.digest))) \|\|\n\t\t\t(candidate.metadata !== undefined &&\n\t\t\t\t(!isPlainRecord(candidate.metadata) \|\|\n\t\t\t\t\ttypeof candidate.metadata.name !== \"string\" \|\|\n\t\t\t\t\tcandidate.metadata.name.length === 0 \|\|\n\t\t\t\t\tcandidate.metadata.name.length > MAX_WORKER_RESOURCE_METADATA_NAME_LENGTH \|\|\n\t\t\t\t\t!hasOnlyKeys(candidate.metadata, [\"name\"])))\n\t\t) {\n\t\t\tthrow new WorkerExecutionContractError(`${label} resource pointer is invalid.`);\n\t\t}\n\t\tif (ids.has(candidate.id)) {\n\t\t\tthrow new WorkerExecutionContractError(`${label} resource pointers contain duplicates.`);\n\t\t}\n\t\tids.add(candidate.id);\n\t\treturn {\n\t\t\tid: candidate.id,\n\t\t\tkind: candidate.kind,\n\t\t\turi: candidate.uri,\n\t\t\treadOnly: true,\n\t\t\t...(typeof candidate.digest === \"string\" ? { digest: candidate.digest } : {}),\n\t\t\t...(isPlainRecord(candidate.metadata) && typeof candidate.metadata.name === \"string\"\n\t\t\t\t? { metadata: { name: candidate.metadata.name } }\n\t\t\t\t: {}),\n\t\t};\n\t});\n}\n\nfunction parseAuthority(\n\tvalue: unknown,\n\tprofile: OrchestrationProfile,\n\tlabel: string,\n): WorkerExecutionAuthorityContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!hasOnlyKeys(value, [\"capabilities\", \"toolNames\", \"readPaths\", \"writePaths\", \"deniedPaths\", \"budget\"])\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority is invalid.`);\n\t}\n\tconst capabilities = stringArray(value.capabilities, `${label} authority capabilities`);\n\tif (!capabilities.every(isHarnessCapability)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority contains an unknown capability.`);\n\t}\n\tif (capabilities.some((capability) => !profile.capabilityCeiling.includes(capability))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority exceeds its profile capability ceiling.`);\n\t}\n\tconst toolNames = stringArray(value.toolNames, `${label} authority toolNames`);\n\tif (toolNames.some((toolName) => !profile.toolNames.includes(toolName))) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority contains a tool outside its profile.`);\n\t}\n\tconst pathArrayOptions = {\n\t\tmaxEntries: MAX_WORKER_AUTHORITY_PATHS,\n\t\tmaxLength: MAX_WORKER_AUTHORITY_PATH_LENGTH,\n\t};\n\tconst readPaths = stringArray(value.readPaths, `${label} authority readPaths`, pathArrayOptions);\n\tconst writePaths = stringArray(value.writePaths, `${label} authority writePaths`, pathArrayOptions);\n\tconst deniedPaths = stringArray(value.deniedPaths, `${label} authority deniedPaths`, pathArrayOptions);\n\tif (\n\t\t[...readPaths, ...writePaths, ...deniedPaths].some(\n\t\t\t(entry) => !path.isAbsolute(entry) && !path.win32.isAbsolute(entry),\n\t\t)\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority paths must be absolute.`);\n\t}\n\tlet budget: RiskBudget;\n\ttry {\n\t\tbudget = parseRiskBudget(value.budget, `${label} authority budget`);\n\t} catch (error) {\n\t\tthrow new WorkerExecutionContractError(error instanceof Error ? error.message : String(error));\n\t}\n\tif (!isDeepStrictEqual(intersectRiskBudgets(profile.budget, budget), budget)) {\n\t\tthrow new WorkerExecutionContractError(`${label} authority exceeds its profile budget.`);\n\t}\n\tconst readGranted = capabilities.some(\n\t\t(capability) => capability === \"filesystem.read\" \|\| capability === \"worktree.read\",\n\t);\n\tconst writeGranted = capabilities.some(\n\t\t(capability) => capability === \"filesystem.write\" \|\| capability === \"worktree.mutate\",\n\t);\n\tif (readGranted && readPaths.length === 0) {\n\t\tthrow new WorkerExecutionContractError(`${label} read authority lacks a positive path scope.`);\n\t}\n\tif (writeGranted && writePaths.length === 0) {\n\t\tthrow new WorkerExecutionContractError(`${label} write authority lacks a positive path scope.`);\n\t}\n\treturn {\n\t\tcapabilities: capabilities as WorkerExecutionAuthorityContract[\"capabilities\"],\n\t\ttoolNames,\n\t\treadPaths,\n\t\twritePaths,\n\t\tdeniedPaths,\n\t\tbudget,\n\t};\n}\n\nfunction parseProfileContract(value: unknown, label: string): WorkerProfileExecutionContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!hasOnlyKeys(value, [\"schemaVersion\", \"profile\", \"modelBinding\", \"authority\", \"resourcePointers\", \"soul\"]) \|\|\n\t\tvalue.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} is invalid.`);\n\t}\n\tlet profile: OrchestrationProfile;\n\ttry {\n\t\tprofile = parseOrchestrationProfile(value.profile);\n\t} catch (error) {\n\t\tthrow new WorkerExecutionContractError(\n\t\t\terror instanceof OrchestrationProfileError ? error.message : `${label} profile is invalid.`,\n\t\t);\n\t}\n\tif (profile.role === \"orchestrator\") {\n\t\tthrow new WorkerExecutionContractError(`${label} cannot materialize an orchestrator profile.`);\n\t}\n\tconst modelBinding = parseModelBinding(value.modelBinding, label);\n\tif (!profile.modelPolicy.candidates.some((candidate) => isDeepStrictEqual(candidate, modelBinding))) {\n\t\tthrow new WorkerExecutionContractError(`${label} model binding is not declared by its profile.`);\n\t}\n\tif (\n\t\tvalue.soul !== undefined &&\n\t\t(typeof value.soul !== \"string\" \|\| value.soul.length > MAX_WORKER_SOUL_LENGTH \|\| !value.soul.trim())\n\t) {\n\t\tthrow new WorkerExecutionContractError(`${label} soul is invalid.`);\n\t}\n\tconst authority = parseAuthority(value.authority, profile, label);\n\tconst resourcePointers = parseResourcePointers(value.resourcePointers ?? [], label);\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofile,\n\t\tmodelBinding,\n\t\tauthority,\n\t\tresourcePointers,\n\t\t...(typeof value.soul === \"string\" ? { soul: value.soul } : {}),\n\t};\n}\n\nexport function parseWorkerExecutionContract(value: unknown): WorkerExecutionContract {\n\tif (\n\t\t!isPlainRecord(value) \|\|\n\t\t!hasOnlyKeys(value, [\"schemaVersion\", \"worker\", \"verifier\"]) \|\|\n\t\tvalue.schemaVersion !== ORCHESTRATION_SCHEMA_VERSION\n\t) {\n\t\tthrow new WorkerExecutionContractError(\"Worker execution contract is invalid.\");\n\t}\n\tconst worker = parseProfileContract(value.worker, \"Worker execution contract\");\n\tconst verifier = value.verifier\n\t\t? parseProfileContract(value.verifier, \"Worker verifier execution contract\")\n\t\t: undefined;\n\tif (worker.profile.requireIndependentVerification) {\n\t\tif (!verifier \|\| worker.profile.verificationProfileId !== verifier.profile.profileId) {\n\t\t\tthrow new WorkerExecutionContractError(\"Worker execution contract is missing its owner-pinned verifier.\");\n\t\t}\n\t\tif (verifier.profile.role !== \"verifier\") {\n\t\t\tthrow new WorkerExecutionContractError(\"Worker verifier execution contract does not use a verifier profile.\");\n\t\t}\n\t} else if (verifier) {\n\t\tthrow new WorkerExecutionContractError(\"Worker execution contract has an unexpected verifier.\");\n\t}\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tworker,\n\t\t...(verifier ? { verifier } : {}),\n\t};\n}\n\nfunction snapshotProfile(profile: OrchestrationProfile): OrchestrationProfile {\n\tconst { sourcePath: _sourcePath, ...persisted } = profile;\n\treturn structuredClone(persisted) as OrchestrationProfile;\n}\n\nfunction snapshotResolvedProfile(source: {\n\tprofile: OrchestrationProfile;\n\tmodelBinding: OrchestrationModelBinding;\n\tauthority: WorkerExecutionAuthorityContract;\n\tresourcePointers?: readonly ResourcePointer[];\n\tsoul?: string;\n}): WorkerProfileExecutionContract {\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tprofile: snapshotProfile(source.profile),\n\t\tmodelBinding: structuredClone(source.modelBinding),\n\t\tauthority: structuredClone(source.authority),\n\t\tresourcePointers: structuredClone(source.resourcePointers ?? []),\n\t\t...(source.soul ? { soul: source.soul } : {}),\n\t};\n}\n\nexport function createWorkerExecutionContract(args: {\n\tworker: {\n\t\tprofile: OrchestrationProfile;\n\t\tmodelBinding: OrchestrationModelBinding;\n\t\tauthority: WorkerExecutionAuthorityContract;\n\t\tresourcePointers?: readonly ResourcePointer[];\n\t\tsoul?: string;\n\t};\n\tverifier?: {\n\t\tprofile: OrchestrationProfile;\n\t\tmodelBinding: OrchestrationModelBinding;\n\t\tauthority: WorkerExecutionAuthorityContract;\n\t\tresourcePointers?: readonly ResourcePointer[];\n\t\tsoul?: string;\n\t};\n}): WorkerExecutionContract {\n\treturn parseWorkerExecutionContract({\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tworker: snapshotResolvedProfile(args.worker),\n\t\t...(args.verifier ? { verifier: snapshotResolvedProfile(args.verifier) } : {}),\n\t});\n}\n\nexport function verifierWorkerExecutionContract(\n\tcontract: WorkerExecutionContract,\n): WorkerExecutionContract \| undefined {\n\treturn contract.verifier\n\t\t? parseWorkerExecutionContract({ schemaVersion: ORCHESTRATION_SCHEMA_VERSION, worker: contract.verifier })\n\t\t: undefined;\n}\n"]}

package/dist/core/orchestration/worker-result-adapter.d.ts CHANGED Viewed

@@ -1,8 +1,12 @@
 import type { WorkerClaim } from "../autonomy/contracts.ts";
 import { type WorkerResultContract } from "./contracts.ts";
 import type { StartedDelegationAttempt } from "./delegation-ledger.ts";
-/** Sole host-owned conversion from an untrusted claim to a fenced durable result. */
-export declare function createWorkerResultContract(args: {
+/** Matches the default text-read ceiling while keeping synchronous result capture bounded. */
+export declare const MAX_WORKER_ARTIFACT_HASH_BYTES: number;
+/** A terminal result may report many files; bound their cumulative synchronous reads too. */
+export declare const MAX_WORKER_ARTIFACT_HASH_TOTAL_BYTES: number;
+/** Inputs shared by every worker terminal path before the durable result is committed. */
+export interface CreateWorkerResultContractInput {
     handle: StartedDelegationAttempt;
     claim: WorkerClaim;
     accepted: boolean;
@@ -17,5 +21,7 @@ export declare function createWorkerResultContract(args: {
     verificationCriterionIds?: readonly string[];
     reasonCode?: string;
     createdAt?: string;
-}): WorkerResultContract;
+}
+/** Sole host-owned conversion from an untrusted claim to a fenced durable result. */
+export declare function createWorkerResultContract(args: CreateWorkerResultContractInput): WorkerResultContract;
 //# sourceMappingURL=worker-result-adapter.d.ts.map

package/dist/core/orchestration/worker-result-adapter.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"worker-result-adapter.d.ts","sourceRoot":"","sources":["../../../src/core/orchestration/worker-result-adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAIN,KAAK,oBAAoB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAqEvE,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,wBAAwB,CAAC;IACjC,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,oBAAoB,CA6CvB","sourcesContent":["import { existsSync, statSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\nimport type { WorkerClaim } from \"../autonomy/contracts.ts\";\nimport {\n\ttype ArtifactContract,\n\ttype EvidenceContract,\n\tORCHESTRATION_SCHEMA_VERSION,\n\ttype WorkerResultContract,\n} from \"./contracts.ts\";\nimport type { StartedDelegationAttempt } from \"./delegation-ledger.ts\";\n\nfunction artifactForChangedFile(cwd: string, changedPath: string, index: number, createdAt: string): ArtifactContract {\n\tconst absolutePath = path.isAbsolute(changedPath) ? path.resolve(changedPath) : path.resolve(cwd, changedPath);\n\tlet sizeBytes: number \| undefined;\n\ttry {\n\t\tif (existsSync(absolutePath)) sizeBytes = statSync(absolutePath).size;\n\t} catch {\n\t\t// The path remains useful evidence even if it disappeared before metadata collection.\n\t}\n\treturn {\n\t\tartifactId: `changed-file-${index + 1}`,\n\t\tkind: \"file\",\n\t\turi: pathToFileURL(absolutePath).href,\n\t\t...(sizeBytes !== undefined ? { sizeBytes } : {}),\n\t\tcreatedAt,\n\t};\n}\n\nfunction evidenceForClaim(claim: WorkerClaim, createdAt: string): EvidenceContract[] {\n\tconst findings = claim.evidence?.findings ?? [];\n\treturn findings.map((finding, index) => ({\n\t\tevidenceId: `worker-finding-${index + 1}`,\n\t\tkind: \"observation\",\n\t\tsummary: finding.summary,\n\t\tartifactIds: [],\n\t\ttrusted: false,\n\t\tcreatedAt,\n\t\t...(finding.confidence !== undefined ? { metadata: { confidence: finding.confidence } } : {}),\n\t}));\n}\n\nfunction verificationEvidence(\n\tclaim: WorkerClaim,\n\taccepted: boolean,\n\tcriterionIds: readonly string[],\n\tcreatedAt: string,\n): EvidenceContract[] {\n\tif (!claim.verification) return [];\n\tconst trustedReview = accepted;\n\treturn [\n\t\t{\n\t\t\tevidenceId: \"independent-review\",\n\t\t\tkind: \"review\",\n\t\t\tsummary: claim.summary,\n\t\t\tartifactIds: [],\n\t\t\ttrusted: trustedReview,\n\t\t\tcreatedAt,\n\t\t\tmetadata: {\n\t\t\t\tsubjectTaskId: claim.verification.subjectTaskId,\n\t\t\t\tverdict: claim.verification.verdict,\n\t\t\t\treasonCodes: [...claim.verification.reasonCodes],\n\t\t\t},\n\t\t},\n\t\t...criterionIds.map(\n\t\t\t(criterionId, index): EvidenceContract => ({\n\t\t\t\tevidenceId: `independent-review-criterion-${index + 1}`,\n\t\t\t\tcriterionId,\n\t\t\t\tkind: \"review\",\n\t\t\t\tsummary: claim.summary,\n\t\t\t\tartifactIds: [],\n\t\t\t\ttrusted: trustedReview && claim.verification?.verdict === \"accepted\",\n\t\t\t\tcreatedAt,\n\t\t\t\tmetadata: { subjectTaskId: claim.verification?.subjectTaskId ?? \"\" },\n\t\t\t}),\n\t\t),\n\t];\n}\n\n/** Sole host-owned conversion from an untrusted claim to a fenced durable result. */\nexport function createWorkerResultContract(args: {\n\thandle: StartedDelegationAttempt;\n\tclaim: WorkerClaim;\n\taccepted: boolean;\n\tcostUsd?: number;\n\tcwd: string;\n\tinputTokens?: number;\n\toutputTokens?: number;\n\ttotalTokens?: number;\n\twallClockMs: number;\n\ttoolCalls: number;\n\tverificationRequired?: boolean;\n\tverificationCriterionIds?: readonly string[];\n\treasonCode?: string;\n\tcreatedAt?: string;\n}): WorkerResultContract {\n\tconst createdAt = args.createdAt ?? new Date().toISOString();\n\tconst claim = args.claim;\n\tconst status: WorkerResultContract[\"status\"] =\n\t\tclaim.status === \"completed\"\n\t\t\t? args.accepted && !args.verificationRequired\n\t\t\t\t? \"completed\"\n\t\t\t\t: \"partial\"\n\t\t\t: claim.status;\n\tconst artifacts = claim.changedFiles.map((changedPath, index) =>\n\t\tartifactForChangedFile(args.cwd, changedPath, index, createdAt),\n\t);\n\tconst blockers = claim.blockers ?? [];\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tresultId: `result-${args.handle.attemptId}-${args.handle.fencingToken}`,\n\t\tobjectiveId: args.handle.objectiveId,\n\t\ttaskId: args.handle.taskId,\n\t\tattemptId: args.handle.attemptId,\n\t\tleaseId: args.handle.leaseId,\n\t\tfencingToken: args.handle.fencingToken,\n\t\tstatus,\n\t\treasonCode: args.reasonCode ?? `worker_${claim.status}`,\n\t\tsummary: claim.summary,\n\t\tartifacts,\n\t\tevidence: [\n\t\t\t...evidenceForClaim(claim, createdAt),\n\t\t\t...verificationEvidence(claim, args.accepted, args.verificationCriterionIds ?? [], createdAt),\n\t\t],\n\t\terrors: blockers.map((message) => ({ code: \"worker_blocker\", message, retryable: false })),\n\t\t...(args.verificationRequired\n\t\t\t? { nextAction: \"independent_verification_required\" }\n\t\t\t: !args.accepted \|\| claim.parentReviewRequired\n\t\t\t\t? { nextAction: \"parent_review\" }\n\t\t\t\t: {}),\n\t\tusage: {\n\t\t\t...(args.inputTokens !== undefined ? { inputTokens: args.inputTokens } : {}),\n\t\t\t...(args.outputTokens !== undefined ? { outputTokens: args.outputTokens } : {}),\n\t\t\t...(args.totalTokens !== undefined ? { totalTokens: args.totalTokens } : {}),\n\t\t\t...(args.costUsd !== undefined ? { costUsd: args.costUsd } : {}),\n\t\t\twallClockMs: args.wallClockMs,\n\t\t\ttoolCalls: args.toolCalls,\n\t\t},\n\t\tcreatedAt,\n\t};\n}\n"]}
1	+ {"version":3,"file":"worker-result-adapter.d.ts","sourceRoot":"","sources":["../../../src/core/orchestration/worker-result-adapter.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EAIN,KAAK,oBAAoB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEvE,8FAA8F;AAC9F,eAAO,MAAM,8BAA8B,QAAmB,CAAC;AAC/D,6FAA6F;AAC7F,eAAO,MAAM,oCAAoC,QAAmB,CAAC;AAqOrE,0FAA0F;AAC1F,MAAM,WAAW,+BAA+B;IAC/C,MAAM,EAAE,wBAAwB,CAAC;IACjC,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,+BAA+B,GAAG,oBAAoB,CAqDtG","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { closeSync, fstatSync, lstatSync, openSync, readSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\nimport type { WorkerClaim } from \"../autonomy/contracts.ts\";\nimport { normalizeWorkerClaimForHost } from \"../delegation/worker-claim.ts\";\nimport { sameFileVersion } from \"../util/bounded-file.ts\";\nimport {\n\ttype ArtifactContract,\n\ttype EvidenceContract,\n\tORCHESTRATION_SCHEMA_VERSION,\n\ttype WorkerResultContract,\n} from \"./contracts.ts\";\nimport type { StartedDelegationAttempt } from \"./delegation-ledger.ts\";\n\n/** Matches the default text-read ceiling while keeping synchronous result capture bounded. /\nexport const MAX_WORKER_ARTIFACT_HASH_BYTES = 16 1024 * 1024;\n/** A terminal result may report many files; bound their cumulative synchronous reads too. /\nexport const MAX_WORKER_ARTIFACT_HASH_TOTAL_BYTES = 32 1024 * 1024;\nconst WORKER_ARTIFACT_HASH_CHUNK_BYTES = 64 * 1024;\n\ntype HostFileState = \"regular\" \| \"missing\" \| \"non_regular\" \| \"read_error\";\n\ninterface ChangedFileArtifactObservation {\n\tartifact: ArtifactContract;\n\tfileState: HostFileState;\n\tdigestBytesCaptured: number;\n}\n\nfunction metadataForFileState(fileState: HostFileState, digestStatus: string): ArtifactContract[\"metadata\"] {\n\treturn {\n\t\thostObservation: \"file_state_captured\",\n\t\tfileState,\n\t\tdigestStatus,\n\t};\n}\n\nfunction artifactForChangedFile(\n\tcwd: string,\n\tchangedPath: string,\n\tindex: number,\n\tcreatedAt: string,\n\tremainingDigestBytes: number,\n): ChangedFileArtifactObservation {\n\tconst absolutePath = path.isAbsolute(changedPath) ? path.resolve(changedPath) : path.resolve(cwd, changedPath);\n\tconst artifactId = `changed-file-${index + 1}`;\n\tconst base = {\n\t\tartifactId,\n\t\tkind: \"file\" as const,\n\t\turi: pathToFileURL(absolutePath).href,\n\t\tcreatedAt,\n\t};\n\tlet initialStats: ReturnType<typeof lstatSync>;\n\ttry {\n\t\tinitialStats = lstatSync(absolutePath);\n\t} catch (error: unknown) {\n\t\tif (isMissingFileError(error)) {\n\t\t\treturn {\n\t\t\t\tartifact: { ...base, metadata: metadataForFileState(\"missing\", \"not_available\") },\n\t\t\t\tfileState: \"missing\",\n\t\t\t\tdigestBytesCaptured: 0,\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tartifact: { ...base, metadata: metadataForFileState(\"read_error\", \"not_available\") },\n\t\t\tfileState: \"read_error\",\n\t\t\tdigestBytesCaptured: 0,\n\t\t};\n\t}\n\n\tif (!initialStats.isFile()) {\n\t\treturn {\n\t\t\tartifact: {\n\t\t\t\t...base,\n\t\t\t\tsizeBytes: initialStats.size,\n\t\t\t\tmetadata: metadataForFileState(\"non_regular\", \"not_applicable\"),\n\t\t\t},\n\t\t\tfileState: \"non_regular\",\n\t\t\tdigestBytesCaptured: 0,\n\t\t};\n\t}\n\n\tlet fileDescriptor: number \| undefined;\n\ttry {\n\t\tfileDescriptor = openSync(absolutePath, \"r\");\n\t\tconst stats = fstatSync(fileDescriptor);\n\t\tif (!stats.isFile()) {\n\t\t\treturn {\n\t\t\t\tartifact: {\n\t\t\t\t\t...base,\n\t\t\t\t\tsizeBytes: stats.size,\n\t\t\t\t\tmetadata: metadataForFileState(\"non_regular\", \"not_applicable\"),\n\t\t\t\t},\n\t\t\t\tfileState: \"non_regular\",\n\t\t\t\tdigestBytesCaptured: 0,\n\t\t\t};\n\t\t}\n\t\tif (!sameFileVersion(initialStats, stats)) throw new Error(\"File changed before hashing\");\n\t\tif (stats.size > MAX_WORKER_ARTIFACT_HASH_BYTES) {\n\t\t\treturn {\n\t\t\t\tartifact: {\n\t\t\t\t\t...base,\n\t\t\t\t\tsizeBytes: stats.size,\n\t\t\t\t\tmetadata: {\n\t\t\t\t\t\t...metadataForFileState(\"regular\", \"omitted_size_limit\"),\n\t\t\t\t\t\tdigestMaxBytes: MAX_WORKER_ARTIFACT_HASH_BYTES,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tfileState: \"regular\",\n\t\t\t\tdigestBytesCaptured: 0,\n\t\t\t};\n\t\t}\n\t\tif (stats.size > remainingDigestBytes) {\n\t\t\treturn {\n\t\t\t\tartifact: {\n\t\t\t\t\t...base,\n\t\t\t\t\tsizeBytes: stats.size,\n\t\t\t\t\tmetadata: {\n\t\t\t\t\t\t...metadataForFileState(\"regular\", \"omitted_aggregate_limit\"),\n\t\t\t\t\t\tdigestTotalMaxBytes: MAX_WORKER_ARTIFACT_HASH_TOTAL_BYTES,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tfileState: \"regular\",\n\t\t\t\tdigestBytesCaptured: 0,\n\t\t\t};\n\t\t}\n\n\t\tconst hash = createHash(\"sha256\");\n\t\tconst buffer = Buffer.allocUnsafe(Math.min(WORKER_ARTIFACT_HASH_CHUNK_BYTES, Math.max(stats.size, 1)));\n\t\tlet bytesHashed = 0;\n\t\twhile (bytesHashed < stats.size) {\n\t\t\tconst bytesRead = readSync(\n\t\t\t\tfileDescriptor,\n\t\t\t\tbuffer,\n\t\t\t\t0,\n\t\t\t\tMath.min(buffer.length, stats.size - bytesHashed),\n\t\t\t\tbytesHashed,\n\t\t\t);\n\t\t\tif (bytesRead === 0) throw new Error(\"File changed while hashing\");\n\t\t\thash.update(buffer.subarray(0, bytesRead));\n\t\t\tbytesHashed += bytesRead;\n\t\t}\n\t\tif (!sameFileVersion(stats, fstatSync(fileDescriptor))) throw new Error(\"File changed while hashing\");\n\t\treturn {\n\t\t\tartifact: {\n\t\t\t\t...base,\n\t\t\t\tdigest: hash.digest(\"hex\"),\n\t\t\t\tsizeBytes: stats.size,\n\t\t\t\tmetadata: {\n\t\t\t\t\t...metadataForFileState(\"regular\", \"computed\"),\n\t\t\t\t\tdigestAlgorithm: \"sha256\",\n\t\t\t\t\tdigestBytes: bytesHashed,\n\t\t\t\t},\n\t\t\t},\n\t\t\tfileState: \"regular\",\n\t\t\tdigestBytesCaptured: bytesHashed,\n\t\t};\n\t} catch {\n\t\treturn {\n\t\t\tartifact: {\n\t\t\t\t...base,\n\t\t\t\tsizeBytes: initialStats.size,\n\t\t\t\tmetadata: metadataForFileState(\"read_error\", \"not_available\"),\n\t\t\t},\n\t\t\tfileState: \"read_error\",\n\t\t\tdigestBytesCaptured: 0,\n\t\t};\n\t} finally {\n\t\tif (fileDescriptor !== undefined) {\n\t\t\ttry {\n\t\t\t\tcloseSync(fileDescriptor);\n\t\t\t} catch {\n\t\t\t\t// The captured state remains valid even if the descriptor close reports an error.\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction isMissingFileError(error: unknown): boolean {\n\treturn typeof error === \"object\" && error !== null && \"code\" in error && error.code === \"ENOENT\";\n}\n\nfunction hostFileStateEvidence(\n\tobservations: readonly ChangedFileArtifactObservation[],\n\tcreatedAt: string,\n): EvidenceContract[] {\n\treturn observations.map(({ artifact, fileState }, index) => ({\n\t\tevidenceId: `host-file-state-${index + 1}`,\n\t\tkind: \"observation\",\n\t\tsummary: \"Host captured file state.\",\n\t\tartifactIds: [artifact.artifactId],\n\t\ttrusted: true,\n\t\tcreatedAt,\n\t\tmetadata: { observation: \"file_state_captured\", fileState },\n\t}));\n}\n\nfunction evidenceForClaim(claim: WorkerClaim, createdAt: string): EvidenceContract[] {\n\tconst findings = claim.evidence?.findings ?? [];\n\treturn findings.map((finding, index) => ({\n\t\tevidenceId: `worker-finding-${index + 1}`,\n\t\tkind: \"observation\",\n\t\tsummary: finding.summary,\n\t\tartifactIds: [],\n\t\ttrusted: false,\n\t\tcreatedAt,\n\t\t...(finding.confidence !== undefined ? { metadata: { confidence: finding.confidence } } : {}),\n\t}));\n}\n\nfunction verificationEvidence(\n\tclaim: WorkerClaim,\n\taccepted: boolean,\n\tcriterionIds: readonly string[],\n\tcreatedAt: string,\n): EvidenceContract[] {\n\tif (!claim.verification) return [];\n\tconst trustedReview = accepted;\n\treturn [\n\t\t{\n\t\t\tevidenceId: \"independent-review\",\n\t\t\tkind: \"review\",\n\t\t\tsummary: claim.summary,\n\t\t\tartifactIds: [],\n\t\t\ttrusted: trustedReview,\n\t\t\tcreatedAt,\n\t\t\tmetadata: {\n\t\t\t\tsubjectTaskId: claim.verification.subjectTaskId,\n\t\t\t\tverdict: claim.verification.verdict,\n\t\t\t\treasonCodes: [...claim.verification.reasonCodes],\n\t\t\t},\n\t\t},\n\t\t...criterionIds.map(\n\t\t\t(criterionId, index): EvidenceContract => ({\n\t\t\t\tevidenceId: `independent-review-criterion-${index + 1}`,\n\t\t\t\tcriterionId,\n\t\t\t\tkind: \"review\",\n\t\t\t\tsummary: claim.summary,\n\t\t\t\tartifactIds: [],\n\t\t\t\ttrusted: trustedReview && claim.verification?.verdict === \"accepted\",\n\t\t\t\tcreatedAt,\n\t\t\t\tmetadata: { subjectTaskId: claim.verification?.subjectTaskId ?? \"\" },\n\t\t\t}),\n\t\t),\n\t];\n}\n\n/** Inputs shared by every worker terminal path before the durable result is committed. /\nexport interface CreateWorkerResultContractInput {\n\thandle: StartedDelegationAttempt;\n\tclaim: WorkerClaim;\n\taccepted: boolean;\n\tcostUsd?: number;\n\tcwd: string;\n\tinputTokens?: number;\n\toutputTokens?: number;\n\ttotalTokens?: number;\n\twallClockMs: number;\n\ttoolCalls: number;\n\tverificationRequired?: boolean;\n\tverificationCriterionIds?: readonly string[];\n\treasonCode?: string;\n\tcreatedAt?: string;\n}\n\n/* Sole host-owned conversion from an untrusted claim to a fenced durable result. */\nexport function createWorkerResultContract(args: CreateWorkerResultContractInput): WorkerResultContract {\n\tconst createdAt = args.createdAt ?? new Date().toISOString();\n\t// Result construction is reachable from recovery/error paths as well as the native runner.\n\t// Normalize first so no claim can expand file iteration, hashing, evidence, or durable results.\n\tconst claim = normalizeWorkerClaimForHost(args.claim);\n\tconst status: WorkerResultContract[\"status\"] =\n\t\tclaim.status === \"completed\"\n\t\t\t? args.accepted && !args.verificationRequired\n\t\t\t\t? \"completed\"\n\t\t\t\t: \"partial\"\n\t\t\t: claim.status;\n\tconst changedFileObservations: ChangedFileArtifactObservation[] = [];\n\tlet remainingDigestBytes = MAX_WORKER_ARTIFACT_HASH_TOTAL_BYTES;\n\tfor (const [index, changedPath] of claim.changedFiles.entries()) {\n\t\tconst observation = artifactForChangedFile(args.cwd, changedPath, index, createdAt, remainingDigestBytes);\n\t\tchangedFileObservations.push(observation);\n\t\tremainingDigestBytes -= observation.digestBytesCaptured;\n\t}\n\tconst artifacts = changedFileObservations.map(({ artifact }) => artifact);\n\tconst blockers = claim.blockers ?? [];\n\treturn {\n\t\tschemaVersion: ORCHESTRATION_SCHEMA_VERSION,\n\t\tresultId: `result-${args.handle.attemptId}-${args.handle.fencingToken}`,\n\t\tobjectiveId: args.handle.objectiveId,\n\t\ttaskId: args.handle.taskId,\n\t\tattemptId: args.handle.attemptId,\n\t\tleaseId: args.handle.leaseId,\n\t\tfencingToken: args.handle.fencingToken,\n\t\tstatus,\n\t\treasonCode: args.reasonCode ?? `worker_${claim.status}`,\n\t\tsummary: claim.summary,\n\t\tartifacts,\n\t\tevidence: [\n\t\t\t...evidenceForClaim(claim, createdAt),\n\t\t\t...hostFileStateEvidence(changedFileObservations, createdAt),\n\t\t\t...verificationEvidence(claim, args.accepted, args.verificationCriterionIds ?? [], createdAt),\n\t\t],\n\t\terrors: blockers.map((message) => ({ code: \"worker_blocker\", message, retryable: false })),\n\t\t...(args.verificationRequired\n\t\t\t? { nextAction: \"independent_verification_required\" }\n\t\t\t: !args.accepted \|\| claim.parentReviewRequired\n\t\t\t\t? { nextAction: \"parent_review\" }\n\t\t\t\t: {}),\n\t\tusage: {\n\t\t\t...(args.inputTokens !== undefined ? { inputTokens: args.inputTokens } : {}),\n\t\t\t...(args.outputTokens !== undefined ? { outputTokens: args.outputTokens } : {}),\n\t\t\t...(args.totalTokens !== undefined ? { totalTokens: args.totalTokens } : {}),\n\t\t\t...(args.costUsd !== undefined ? { costUsd: args.costUsd } : {}),\n\t\t\twallClockMs: args.wallClockMs,\n\t\t\ttoolCalls: args.toolCalls,\n\t\t},\n\t\tcreatedAt,\n\t};\n}\n"]}