@danceiny/gotry 0.0.1-rc.21 → 0.0.1-rc.24

package/dist/src/booking-surface/validation.js

@@ -2,37 +2,32 @@ import { readFileSync } from 'node:fs';
 import { Ajv2020 } from 'ajv/dist/2020.js';
 import { BOOKING_READ_ACTION_KINDS, BOOKING_BLOCKER_CODES, BOOKING_GAP_CODES } from './contracts.js';
 const schema = JSON.parse(readFileSync(new URL('../../../schemas/booking.surface.schema.json', import.meta.url), 'utf8'));
-const ajv = new Ajv2020({
-    allErrors: true,
-    strict: true
-});
+/** Canonical schema bytes (single source of truth) for prompt/tool derivations elsewhere. */
+export const bookingSurfaceSchema = schema;
+const ajv = new Ajv2020({ allErrors: true, strict: true });
 ajv.addSchema(schema);
 const validate = ajv.compile(schema);
-const validateActionCanonical = ajv.compile({
-    $ref: `${schema.$id}#/$defs/Action`
-});
-const validateBlockerCanonical = ajv.compile({
-    $ref: `${schema.$id}#/$defs/Blocker`
-});
-const validateApprovalCanonical = ajv.compile({
-    $ref: `${schema.$id}#/$defs/Approval`
-});
-const validateEventCanonical = ajv.compile({
-    $ref: `${schema.$id}#/$defs/Event`
-});
+const validateActionCanonical = ajv.compile({ $ref: `${schema.$id}#/$defs/Action` });
+const validateBlockerCanonical = ajv.compile({ $ref: `${schema.$id}#/$defs/Blocker` });
+const validateApprovalCanonical = ajv.compile({ $ref: `${schema.$id}#/$defs/Approval` });
+const validateEventCanonical = ajv.compile({ $ref: `${schema.$id}#/$defs/Event` });
 const kinds = new Set(BOOKING_READ_ACTION_KINDS);
 const codes = new Set(BOOKING_BLOCKER_CODES);
 const gapCodes = new Set(BOOKING_GAP_CODES);
-const safeOpaque = (value)=>typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9:._-]*$/.test(value);
-const safeRequestKey = (value)=>typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9:._-]{7,127}$/.test(value) && !secret.test(value);
+const safeOpaque = (value) => typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9:._-]*$/.test(value);
+const safeRequestKey = (value) => typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9:._-]{7,127}$/.test(value) && !secret.test(value);
 const secret = /(?:Bearer\s+\S|\bsk-(?!ill(?:s)?\b)[A-Za-z0-9_-]{12,}|\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)/i;
+// `.example` is reserved for documentation, so these identifiers cannot be a
+// real mailbox. Do not allowlist lookalikes on routable domains.
 const technicalEmail = /^(?:schema|version)@[a-z0-9-]+\.example$/i;
 const currencyAmount = /\b(?:[A-Z]{3}\s*\d+(?:\.\d+)?|\d+(?:\.\d+)?\s*[A-Z]{3})\b/;
 const rfc3339DateTime = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,9}))?(Z|([+-])(\d{2}):(\d{2}))$/;
 export function isBookingDateTime(value) {
-    if (typeof value !== 'string') return false;
+    if (typeof value !== 'string')
+        return false;
     const match = rfc3339DateTime.exec(value);
-    if (!match) return false;
+    if (!match)
+        return false;
     const [, yearText, monthText, dayText, hourText, minuteText, secondText] = match;
     const year = Number(yearText);
     const month = Number(monthText);
@@ -42,9 +37,11 @@ export function isBookingDateTime(value) {
     const second = Number(secondText);
     const offsetHour = match[9] === undefined ? 0 : Number(match[9]);
     const offsetMinute = match[10] === undefined ? 0 : Number(match[10]);
-    if (month < 1 || month > 12 || hour > 23 || minute > 59 || second > 59 || offsetHour > 23 || offsetMinute > 59) return false;
+    if (month < 1 || month > 12 || hour > 23 || minute > 59 || second > 59 || offsetHour > 23 || offsetMinute > 59)
+        return false;
     const daysInMonth = new Date(Date.UTC(year, month, 0)).getUTCDate();
-    if (day < 1 || day > daysInMonth) return false;
+    if (day < 1 || day > daysInMonth)
+        return false;
     return !Number.isNaN(Date.parse(value));
 }
 function normalizedWords(value) {
@@ -53,20 +50,24 @@ function normalizedWords(value) {
 function hasSupplierCost(value) {
     const normalized = normalizedWords(value);
     const lower = normalized.toLowerCase();
-    return /\b(?:supplier|vendor|internal)\b/.test(lower) && /\b(?:cost|rate|price)\b/.test(lower) && currencyAmount.test(normalized.toUpperCase());
+    return (/\b(?:supplier|vendor|internal)\b/.test(lower) &&
+        /\b(?:cost|rate|price)\b/.test(lower) &&
+        currencyAmount.test(normalized.toUpperCase()));
 }
 function hasInternationalPhone(value) {
     const normalized = value.normalize('NFKC');
-    for (const plusIndex of normalized.split('').flatMap((char, index)=>char === '+' ? [
-            index
-        ] : [])){
+    for (const plusIndex of normalized.split('').flatMap((char, index) => char === '+' ? [index] : [])) {
         let digits = '';
-        for (const char of normalized.slice(plusIndex + 1, plusIndex + 48)){
-            if (/\d/u.test(char)) digits += char;
-            else if (/\p{L}|@/u.test(char)) break;
-            if (digits.length > 15) break;
+        for (const char of normalized.slice(plusIndex + 1, plusIndex + 48)) {
+            if (/\d/u.test(char))
+                digits += char;
+            else if (/\p{L}|@/u.test(char))
+                break;
+            if (digits.length > 15)
+                break;
         }
-        if (/^[1-9]\d{7,14}$/.test(digits)) return true;
+        if (/^[1-9]\d{7,14}$/.test(digits))
+            return true;
     }
     return false;
 }
@@ -74,246 +75,177 @@ function hasPaymentCard(value) {
     const normalized = value.normalize('NFKC');
     const candidates = normalized.match(/(?:\d[ -]?){12,18}\d/g) ?? [];
     const explicitlyLabeled = /\b(?:card|payment|visa|mastercard)\b/i.test(normalized);
-    return candidates.some((candidate)=>(explicitlyLabeled || /[ -]/.test(candidate)) && luhn(candidate));
+    return candidates.some((candidate) => (explicitlyLabeled || /[ -]/.test(candidate)) && luhn(candidate));
 }
 function hasSensitiveText(value, opts = {}) {
     const normalized = value.normalize('NFKC');
-    if (normalized.includes('@') && !technicalEmail.test(normalized.trim())) return true;
-    return secret.test(normalized) || hasInternationalPhone(normalized) || hasSupplierCost(normalized) || !opts.allowOpaqueNumericId && hasPaymentCard(normalized);
-}
-function luhn(value) {
-    const digits = value.replaceAll(/\D/g, '');
-    if (digits.length < 13 || digits.length > 19) return false;
-    let sum = 0;
-    for(let i = digits.length - 1, parity = 0; i >= 0; i--, parity++){
-        let n = Number(digits[i]);
-        if (parity % 2 === 1) {
-            n *= 2;
-            if (n > 9) n -= 9;
-        }
-        sum += n;
+    if (normalized.includes('@') && !technicalEmail.test(normalized.trim()))
+        return true;
+    return secret.test(normalized) || hasInternationalPhone(normalized) || hasSupplierCost(normalized) || (!opts.allowOpaqueNumericId && hasPaymentCard(normalized));
+}
+function luhn(value) { const digits = value.replaceAll(/\D/g, ''); if (digits.length < 13 || digits.length > 19)
+    return false; let sum = 0; for (let i = digits.length - 1, parity = 0; i >= 0; i--, parity++) {
+    let n = Number(digits[i]);
+    if (parity % 2 === 1) {
+        n *= 2;
+        if (n > 9)
+            n -= 9;
     }
-    return sum % 10 === 0;
-}
+    sum += n;
+} return sum % 10 === 0; }
 const opaqueFieldNames = new Set([
-    'eventId',
-    'taskId',
-    'contextRef',
-    'actionId',
-    'hotelRef',
-    'offerRef',
-    'offerVersionRef',
-    'checkedOfferVersionRef',
-    'currentOfferVersionRef',
-    'verifiedOfferRef',
-    'orderRef',
-    'searchSessionRef',
-    'handoffRef',
-    'questionId',
-    'blockerId',
-    'approvalId',
-    'sourceActionId',
-    'targetActionId',
-    'sourceTurnId',
-    'turnId',
-    'requestKey',
-    'taskHandle',
-    'nonce',
-    'deliveryNonce',
-    'optionDigest',
-    'sourceReceiptDigest',
-    'valueDigest'
+    'eventId', 'taskId', 'contextRef', 'actionId', 'hotelRef', 'offerRef', 'offerVersionRef', 'checkedOfferVersionRef', 'currentOfferVersionRef', 'verifiedOfferRef',
+    'orderRef', 'searchSessionRef', 'handoffRef', 'questionId', 'blockerId', 'approvalId',
+    'sourceActionId', 'targetActionId', 'sourceTurnId', 'turnId', 'requestKey', 'taskHandle',
+    'nonce', 'deliveryNonce', 'optionDigest', 'sourceReceiptDigest', 'valueDigest',
 ]);
 function isOpaqueFieldPath(path) {
     const clean = path.replace(/\[\]$/g, '');
     const field = clean.split('.').at(-1);
     return field ? opaqueFieldNames.has(field) || field.endsWith('Ref') || field.endsWith('Refs') : false;
 }
-const scan = (v, path = '$')=>typeof v === 'string' ? hasSensitiveText(v, {
-        allowOpaqueNumericId: isOpaqueFieldPath(path)
-    }) : Array.isArray(v) ? v.some((child)=>scan(child, `${path}[]`)) : !!v && typeof v === 'object' ? Object.entries(v).some(([k, x])=>/cost|price/i.test(k) ? /supplier|internal|wholesale/i.test(String(x)) : scan(x, `${path}.${k}`)) : false;
-export function isSafeBookingRequestKey(value) {
-    return safeRequestKey(value);
-}
-function errors(v) {
-    return (v.errors ?? []).map((e)=>`${e.instancePath || '$'}: ${e.message ?? e.keyword}`);
-}
+const scan = (v, path = '$') => typeof v === 'string'
+    ? hasSensitiveText(v, { allowOpaqueNumericId: isOpaqueFieldPath(path) })
+    : Array.isArray(v)
+        ? v.some((child) => scan(child, `${path}[]`))
+        : !!v && typeof v === 'object'
+            ? Object.entries(v).some(([k, x]) => /cost|price/i.test(k) ? /supplier|internal|wholesale/i.test(String(x)) : scan(x, `${path}.${k}`))
+            : false;
+export function isSafeBookingRequestKey(value) { return safeRequestKey(value); }
+function errors(v) { return (v.errors ?? []).map(e => `${e.instancePath || '$'}: ${e.message ?? e.keyword}`); }
 function workspaceErrors(workspace, path) {
     const e = [];
-    if (!workspace || typeof workspace !== 'object' || Array.isArray(workspace)) return e;
+    if (!workspace || typeof workspace !== 'object' || Array.isArray(workspace))
+        return e;
     const loadedOffers = Array.isArray(workspace.loadedOffers) ? workspace.loadedOffers : [];
-    const offerRefs = loadedOffers.map((offer)=>offer?.offerRef).filter((ref)=>typeof ref === 'string');
-    const offerVersionRefs = loadedOffers.map((offer)=>offer?.offerVersionRef).filter((ref)=>typeof ref === 'string');
-    if (new Set(offerRefs).size !== offerRefs.length) e.push(`${path}.loadedOffers: duplicate offerRef`);
-    if (new Set(offerVersionRefs).size !== offerVersionRefs.length) e.push(`${path}.loadedOffers: duplicate offerVersionRef`);
+    const offerRefs = loadedOffers.map((offer) => offer?.offerRef).filter((ref) => typeof ref === 'string');
+    const offerVersionRefs = loadedOffers.map((offer) => offer?.offerVersionRef).filter((ref) => typeof ref === 'string');
+    if (new Set(offerRefs).size !== offerRefs.length)
+        e.push(`${path}.loadedOffers: duplicate offerRef`);
+    if (new Set(offerVersionRefs).size !== offerVersionRefs.length)
+        e.push(`${path}.loadedOffers: duplicate offerVersionRef`);
     const verified = workspace.verifiedOffer;
     if (verified !== undefined) {
-        if (!loadedOffers.some((offer)=>offer?.offerRef === verified.offerRef && offer?.offerVersionRef === verified.offerVersionRef)) e.push(`${path}.verifiedOffer: loaded offer version required`);
-        if (!safeOpaque(verified.verifiedOfferRef) || !isBookingDateTime(verified.expiresAt)) e.push(`${path}.verifiedOffer: safe ref and parseable expiry required`);
+        if (!loadedOffers.some((offer) => offer?.offerRef === verified.offerRef && offer?.offerVersionRef === verified.offerVersionRef))
+            e.push(`${path}.verifiedOffer: loaded offer version required`);
+        if (!safeOpaque(verified.verifiedOfferRef) || !isBookingDateTime(verified.expiresAt))
+            e.push(`${path}.verifiedOffer: safe ref and parseable expiry required`);
     }
     return e;
 }
 function cross(value) {
     const e = [];
-    if (scan(value)) e.push('$: unsafe PII/payment/supplier-cost/credential text');
-    if (!value || typeof value !== 'object' || Array.isArray(value)) return e;
+    if (scan(value))
+        e.push('$: unsafe PII/payment/supplier-cost/credential text');
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return e;
     const x = value;
     const semantic = x.kind === 'action.receipt.continuation' ? x.receipt : x;
-    if (x.workspace && x.kind !== 'user.turn.ingress') e.push(...workspaceErrors(x.workspace, '$.workspace'));
-    if (x.schemaVersion === 'booking.surface' && Array.isArray(x.loadedOffers)) e.push(...workspaceErrors(x, '$'));
+    if (x.workspace && x.kind !== 'user.turn.ingress')
+        e.push(...workspaceErrors(x.workspace, '$.workspace'));
+    if (x.schemaVersion === 'booking.surface' && Array.isArray(x.loadedOffers))
+        e.push(...workspaceErrors(x, '$'));
     if (x.kind === 'user.turn.ingress') {
-        if (!safeRequestKey(x.requestKey)) e.push('$.requestKey: safe opaque request key required');
+        if (!safeRequestKey(x.requestKey))
+            e.push('$.requestKey: safe opaque request key required');
         const workspace = x.workspace;
         e.push(...workspaceErrors(workspace, '$.workspace'));
         const visibleHotels = Array.isArray(workspace?.visibleHotels) ? workspace.visibleHotels : [];
         const loadedOffers = Array.isArray(workspace?.loadedOffers) ? workspace.loadedOffers : [];
-        if (workspace?.focusedHotelRef !== undefined && !visibleHotels.some((hotel)=>hotel?.hotelRef === workspace.focusedHotelRef)) e.push('$.workspace.focusedHotelRef: visible hotel required');
-        const selectedOffer = workspace?.selectedOfferRef === undefined ? undefined : loadedOffers.find((offer)=>offer?.offerRef === workspace.selectedOfferRef);
-        if (workspace?.selectedOfferRef !== undefined && !selectedOffer) e.push('$.workspace.selectedOfferRef: loaded offer required');
-        if (selectedOffer && !visibleHotels.some((hotel)=>hotel?.hotelRef === selectedOffer.hotelRef)) e.push('$.workspace.selectedOfferRef: offer hotel must be visible');
+        if (workspace?.focusedHotelRef !== undefined && !visibleHotels.some((hotel) => hotel?.hotelRef === workspace.focusedHotelRef))
+            e.push('$.workspace.focusedHotelRef: visible hotel required');
+        const selectedOffer = workspace?.selectedOfferRef === undefined ? undefined : loadedOffers.find((offer) => offer?.offerRef === workspace.selectedOfferRef);
+        if (workspace?.selectedOfferRef !== undefined && !selectedOffer)
+            e.push('$.workspace.selectedOfferRef: loaded offer required');
+        if (selectedOffer && !visibleHotels.some((hotel) => hotel?.hotelRef === selectedOffer.hotelRef))
+            e.push('$.workspace.selectedOfferRef: offer hotel must be visible');
     }
-    if (semantic !== x && semantic?.resultContract?.hardCriteriaMet === true && semantic.resultContract.blockers?.length) e.push('$.receipt.resultContract: hardCriteriaMet cannot coexist with blockers');
+    if (semantic !== x && semantic?.resultContract?.hardCriteriaMet === true && semantic.resultContract.blockers?.length)
+        e.push('$.receipt.resultContract: hardCriteriaMet cannot coexist with blockers');
     if (kinds.has(x.kind)) {
         const allowed = {
-            'search.patch': [
-                'patch'
-            ],
-            'search.run': [],
-            'results.view.patch': [
-                'patch'
-            ],
-            'hotel.focus': [
-                'hotelRef'
-            ],
-            'hotel.select': [
-                'hotelRef'
-            ],
-            'offers.query': [
-                'hotelRefs',
-                'criteria'
-            ],
-            'offers.view.patch': [
-                'hotelRef',
-                'criteria'
-            ],
-            'offers.compare': [
-                'offerRefs',
-                'requestedCount'
-            ],
-            'offer.select': [
-                'offerRef',
-                'offerVersionRef'
-            ],
-            'offer.check': [
-                'offerRef',
-                'offerVersionRef'
-            ],
-            'checkout.prepare': [
-                'offerRef',
-                'offerVersionRef',
-                'verifiedOfferRef'
-            ],
-            'order.observe': [
-                'orderRef'
-            ]
+            'search.patch': ['patch'], 'search.run': [], 'results.view.patch': ['patch'],
+            'hotel.focus': ['hotelRef'], 'hotel.select': ['hotelRef'],
+            'offers.query': ['hotelRefs', 'criteria'], 'offers.view.patch': ['hotelRef', 'criteria'],
+            'offers.compare': ['offerRefs', 'requestedCount'], 'offer.select': ['offerRef', 'offerVersionRef'],
+            'offer.check': ['offerRef', 'offerVersionRef'], 'checkout.prepare': ['offerRef', 'offerVersionRef', 'verifiedOfferRef'], 'order.observe': ['orderRef'],
         };
         const input = x.input;
-        if (!input || typeof input !== 'object' || Array.isArray(input) || Object.keys(input).some((k)=>!allowed[x.kind].includes(k))) e.push('$.input: closed kind-specific input required');
+        if (!input || typeof input !== 'object' || Array.isArray(input) || Object.keys(input).some(k => !allowed[x.kind].includes(k)))
+            e.push('$.input: closed kind-specific input required');
     }
-    if (x.kind === 'action.receipt' && x.resultContract?.hardCriteriaMet === true && x.resultContract.blockers?.length) e.push('$.resultContract: hardCriteriaMet cannot coexist with blockers');
-    if (x.kind === 'user.turn' && Array.isArray(x.request?.approval)) e.push('$.request.approval: at most one approval');
+    if (x.kind === 'action.receipt' && x.resultContract?.hardCriteriaMet === true && x.resultContract.blockers?.length)
+        e.push('$.resultContract: hardCriteriaMet cannot coexist with blockers');
+    if (x.kind === 'user.turn' && Array.isArray(x.request?.approval))
+        e.push('$.request.approval: at most one approval');
     if (x.kind === 'action.receipt' || x.kind === 'action.receipt.continuation') {
         const r = x.kind === 'action.receipt.continuation' ? x.receipt : x;
-        if (r?.resultContract?.gapCodes?.some((code)=>!gapCodes.has(String(code)))) e.push('$.resultContract.gapCodes: unregistered gap code');
+        if (r?.resultContract?.gapCodes?.some((code) => !gapCodes.has(String(code))))
+            e.push('$.resultContract.gapCodes: unregistered gap code');
         const observation = r?.observation;
         if (observation?.kind === 'offer.availability') {
-            if (r.status === 'applied' && (observation.available !== true || !observation.verifiedOfferRef || observation.currentOfferVersionRef !== observation.checkedOfferVersionRef || observation.changedFactRefs?.length || observation.gapCodes?.length)) e.push('$.observation: applied availability requires unchanged checked/current version, verified ref, and no gaps');
-            if (r.status === 'applied' && (r.resultContract?.outcome !== 'complete' || r.resultContract?.hardCriteriaMet !== true || r.resultContract?.gapCodes?.length || r.resultContract?.blockers?.length)) e.push('$.resultContract: applied availability requires complete hard-criteria result without gaps or blockers');
-            if (r.status === 'changed' && (observation.available !== true || !observation.currentOfferVersionRef || observation.currentOfferVersionRef === observation.checkedOfferVersionRef || !observation.changedFactRefs?.length || observation.verifiedOfferRef)) e.push('$.observation: changed availability requires available replacement current version without verified ref');
-            if ((r.status === 'unavailable' || r.status === 'no_match') && (observation.available !== false || observation.currentOfferVersionRef || observation.verifiedOfferRef)) e.push('$.observation: negative availability must not expose current or verified version');
-            if (r.status !== 'applied' && observation.verifiedOfferRef) e.push('$.observation: only applied availability may expose verified ref');
+            if (r.status === 'applied' && (observation.available !== true || !observation.verifiedOfferRef || observation.currentOfferVersionRef !== observation.checkedOfferVersionRef || observation.changedFactRefs?.length || observation.gapCodes?.length))
+                e.push('$.observation: applied availability requires unchanged checked/current version, verified ref, and no gaps');
+            if (r.status === 'applied' && (r.resultContract?.outcome !== 'complete' || r.resultContract?.hardCriteriaMet !== true || r.resultContract?.gapCodes?.length || r.resultContract?.blockers?.length))
+                e.push('$.resultContract: applied availability requires complete hard-criteria result without gaps or blockers');
+            if (r.status === 'changed' && (observation.available !== true || !observation.currentOfferVersionRef || observation.currentOfferVersionRef === observation.checkedOfferVersionRef || !observation.changedFactRefs?.length || observation.verifiedOfferRef))
+                e.push('$.observation: changed availability requires available replacement current version without verified ref');
+            if ((r.status === 'unavailable' || r.status === 'no_match') && (observation.available !== false || observation.currentOfferVersionRef || observation.verifiedOfferRef))
+                e.push('$.observation: negative availability must not expose current or verified version');
+            if (r.status !== 'applied' && observation.verifiedOfferRef)
+                e.push('$.observation: only applied availability may expose verified ref');
         }
     }
     const blocker = x.blocker ?? x.question?.blocker;
-    if (blocker && !/^(searchDraft|results|offers|checkout)(\.[A-Za-z][A-Za-z0-9_]*){0,3}$/.test(blocker.criterionPath ?? '')) e.push('$.blocker.criterionPath: closed criterion path required');
-    if (blocker?.evidence?.factRefs && new Set(blocker.evidence.factRefs).size !== blocker.evidence.factRefs.length) e.push('$.blocker.evidence.factRefs: unique refs required');
+    if (blocker && !/^(searchDraft|results|offers|checkout)(\.[A-Za-z][A-Za-z0-9_]*){0,3}$/.test(blocker.criterionPath ?? ''))
+        e.push('$.blocker.criterionPath: closed criterion path required');
+    if (blocker?.evidence?.factRefs && new Set(blocker.evidence.factRefs).size !== blocker.evidence.factRefs.length)
+        e.push('$.blocker.evidence.factRefs: unique refs required');
     if (x.kind === 'question' && blocker && Array.isArray(x.question?.approvalOptions)) {
-        for (const [i, option] of x.question.approvalOptions.entries()){
+        for (const [i, option] of x.question.approvalOptions.entries()) {
             const result = validateApprovalAgainstBlocker(option?.approval, blocker);
-            if (!result.ok) e.push(...result.errors.map((error)=>`$.question.approvalOptions[${i}].${error.slice(2)}`));
-            if (option?.approval?.taskId !== x.taskId) e.push(`$.question.approvalOptions[${i}].approval.taskId: must match event`);
-            if (option?.approval?.contextRef !== x.contextRef) e.push(`$.question.approvalOptions[${i}].approval.contextRef: must match event`);
+            if (!result.ok)
+                e.push(...result.errors.map(error => `$.question.approvalOptions[${i}].${error.slice(2)}`));
+            if (option?.approval?.taskId !== x.taskId)
+                e.push(`$.question.approvalOptions[${i}].approval.taskId: must match event`);
+            if (option?.approval?.contextRef !== x.contextRef)
+                e.push(`$.question.approvalOptions[${i}].approval.contextRef: must match event`);
         }
     }
     if (kinds.has(String(x.kind)) && x.relaxationApprovalRef) {
         const ref = x.relaxationApprovalRef;
-        if (ref.contextRef !== x.contextRef) e.push('$.relaxationApprovalRef.contextRef: must match action');
-        if (ref.sourceRevision !== x.expectedRevision) e.push('$.relaxationApprovalRef.sourceRevision: must equal action revision');
-        if (ref.targetActionKind !== x.kind) e.push('$.relaxationApprovalRef.targetActionKind: must match action kind');
-        if (ref.targetActionId !== x.actionId) e.push('$.relaxationApprovalRef.targetActionId: must match action id');
-        if (!safeOpaque(ref.nonce) || !isBookingDateTime(ref.expiresAt)) e.push('$.relaxationApprovalRef: invalid expiry or nonce');
+        if (ref.contextRef !== x.contextRef)
+            e.push('$.relaxationApprovalRef.contextRef: must match action');
+        if (ref.sourceRevision !== x.expectedRevision)
+            e.push('$.relaxationApprovalRef.sourceRevision: must equal action revision');
+        if (ref.targetActionKind !== x.kind)
+            e.push('$.relaxationApprovalRef.targetActionKind: must match action kind');
+        if (ref.targetActionId !== x.actionId)
+            e.push('$.relaxationApprovalRef.targetActionId: must match action id');
+        // Expiry and one-time consumption are runtime concerns; validation checks only structure/binding.
+        if (!safeOpaque(ref.nonce) || !isBookingDateTime(ref.expiresAt))
+            e.push('$.relaxationApprovalRef: invalid expiry or nonce');
     }
-    if (x.kind === 'question' && (!Array.isArray(x.question?.approvalOptions) || x.question.approvalOptions.length < 1 || x.question.approvalOptions.length > 2)) e.push('$.question.approvalOptions: one or two options required');
+    if (x.kind === 'question' && (!Array.isArray(x.question?.approvalOptions) || x.question.approvalOptions.length < 1 || x.question.approvalOptions.length > 2))
+        e.push('$.question.approvalOptions: one or two options required');
     return e;
 }
-export function validateBookingSurface(value) {
-    const ok = validate(value);
-    const e = ok ? [] : errors(validate);
-    e.push(...cross(value));
-    return e.length ? {
-        ok: false,
-        errors: e
-    } : {
-        ok: true
-    };
-}
-function fromCanonical(fn, value) {
-    const ok = fn(value);
-    const e = ok ? [] : errors(fn);
-    e.push(...cross(value));
-    return e.length ? {
-        ok: false,
-        errors: e
-    } : {
-        ok: true
-    };
-}
-export function validateBookingReadAction(value) {
-    return fromCanonical(validateActionCanonical, value);
-}
-export function validateCriterionBlocker(value) {
-    return fromCanonical(validateBlockerCanonical, value);
-}
-export function validateRelaxationApproval(value) {
-    return fromCanonical(validateApprovalCanonical, value);
-}
-export function validateBookingSurfaceEvent(value) {
-    return fromCanonical(validateEventCanonical, value);
-}
+export function validateBookingSurface(value) { const ok = validate(value); const e = ok ? [] : errors(validate); e.push(...cross(value)); return e.length ? { ok: false, errors: e } : { ok: true }; }
+function fromCanonical(fn, value) { const ok = fn(value); const e = ok ? [] : errors(fn); e.push(...cross(value)); return e.length ? { ok: false, errors: e } : { ok: true }; }
+export function validateBookingReadAction(value) { return fromCanonical(validateActionCanonical, value); }
+export function validateCriterionBlocker(value) { return fromCanonical(validateBlockerCanonical, value); }
+export function validateRelaxationApproval(value) { return fromCanonical(validateApprovalCanonical, value); }
+export function validateBookingSurfaceEvent(value) { return fromCanonical(validateEventCanonical, value); }
 export function validateApprovalAgainstBlocker(approval, blocker) {
     const a = approval;
     const b = blocker;
     const blockerResult = validateCriterionBlocker(b);
-    if (!blockerResult.ok) return blockerResult;
+    if (!blockerResult.ok)
+        return blockerResult;
     const approvalResult = validateRelaxationApproval(a);
-    if (!approvalResult.ok) return approvalResult;
-    const fields = [
-        'blockerId',
-        'sourceActionId',
-        'sourceReceiptDigest',
-        'scope',
-        'code',
-        'criterionPath',
-        'valueDigest'
-    ];
-    const mismatches = fields.filter((field)=>a[field] !== b?.[field]);
-    return mismatches.length ? {
-        ok: false,
-        errors: mismatches.map((field)=>`$.${field}: approval does not match blocker`)
-    } : {
-        ok: true
-    };
+    if (!approvalResult.ok)
+        return approvalResult;
+    const fields = ['blockerId', 'sourceActionId', 'sourceReceiptDigest', 'scope', 'code', 'criterionPath', 'valueDigest'];
+    const mismatches = fields.filter(field => a[field] !== b?.[field]);
+    return mismatches.length ? { ok: false, errors: mismatches.map(field => `$.${field}: approval does not match blocker`) } : { ok: true };
 }
-
-
-//# sourceURL=ts/src/booking-surface/validation.ts

package/dist/src/bridge.js

@@ -1,34 +1,41 @@
+/**
+ * GoTry 桥接工具集(纯 Node 版,无 Python 依赖):
+ *   - ensureStateDir: 状态目录创建
+ *   - recordLatency: 延迟日志追加
+ *   - readJson / writeJson: JSON 文件安全读写
+ *
+ * 历史:曾有 callFeasibilityEngine 用 spawn(.venv/bin/python) 起 Python CLI,
+ * 作为 TS 求解的回退路径。D-7 切轨后 unified solveChoiceSegment 是唯一求解入口,
+ * Python oracle 路径于 v0.0.1-rc.2 移除——npm 一键分发不再需要 Python 运行时依赖。
+ */
 import { appendFile, mkdir, readFile, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
+/** 状态目录:动机画像 / wish pool 的落盘位置(红线 6:用户数据可见、可编辑、可删除) */
 export async function ensureStateDir(root) {
     const dir = join(root, 'gotry-state');
-    await mkdir(dir, {
-        recursive: true
-    });
+    await mkdir(dir, { recursive: true });
     return dir;
 }
+/** JSON 安全读取:文件不存在返回 fallback,解析失败抛错 */
 export async function readJson(path, fallback) {
     try {
         const text = await readFile(path, 'utf-8');
         return JSON.parse(text);
-    } catch (e) {
-        if (e.code === 'ENOENT') return fallback;
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return fallback;
         throw e;
     }
 }
+/** JSON 原子写入 */
 export async function writeJson(path, value) {
     const tmp = `${path}.tmp`;
     await writeFile(tmp, JSON.stringify(value, null, 2), 'utf-8');
     const { rename } = await import('node:fs/promises');
     await rename(tmp, path);
 }
+/** 桥接延迟日志(追加式;T5 成本工程的度量数据源之一) */
 export async function recordLatency(logPath, latencyMs, kind) {
-    await appendFile(logPath, JSON.stringify({
-        ts: new Date().toISOString(),
-        kind,
-        latencyMs
-    }) + '\n');
+    await appendFile(logPath, JSON.stringify({ ts: new Date().toISOString(), kind, latencyMs }) + '\n');
 }
-
-
-//# sourceURL=ts/src/bridge.ts