@devflow-tools/sdk 0.17.2 → 0.17.4

package/dist/action-lease.d.ts

@@ -0,0 +1,65 @@
+import type { CanonicalAction } from './types/task-context-envelope.js';
+export type ToolFieldClass = 'locked' | 'constrained' | 'advisory' | 'transport';
+export interface ToolFieldPolicyV1 {
+    class: ToolFieldClass;
+    type?: 'string' | 'number' | 'boolean' | 'array' | 'object';
+    enum?: Array<string | number | boolean>;
+    minimum?: number;
+    maximum?: number;
+    pattern?: string;
+}
+export interface ToolFieldManifestV1 {
+    schemaVersion: 'tool-field-manifest.v1';
+    tool: string;
+    version: string;
+    fields: Record<string, ToolFieldPolicyV1>;
+}
+export interface ActionLeaseV1 {
+    schemaVersion: 'action-lease.v1';
+    leaseId: string;
+    taskSpecHash: string;
+    manifestVersion: string;
+    tool: string;
+    projectRealpathHash: string;
+    operationMode: string;
+    lockedInputHash: string;
+    targets: Array<{
+        identityId: string;
+        path: string;
+        expectedState: 'existing' | 'missing' | 'unknown';
+        contentHash?: string;
+    }>;
+    verificationPlanHash: string;
+    issuedAt: number;
+    expiresAt: number;
+    leaseHash: string;
+}
+export declare function canonicalToolFieldManifest(action: CanonicalAction): ToolFieldManifestV1;
+export declare function issueActionLease(input: {
+    taskSpecHash: string;
+    action: CanonicalAction;
+    manifest: ToolFieldManifestV1;
+    projectRoot: string;
+    targets: ActionLeaseV1['targets'];
+    issuedAt?: number;
+    ttlMs?: number;
+}): ActionLeaseV1;
+export declare function validateActionLease(input: {
+    lease: ActionLeaseV1;
+    manifest: ToolFieldManifestV1;
+    authenticated: boolean;
+    activeTaskSpecHash: string;
+    projectRoot: string;
+    toolName: string;
+    operationMode: string;
+    args: Record<string, unknown>;
+    currentTargets: ActionLeaseV1['targets'];
+    now?: number;
+}): {
+    valid: true;
+} | {
+    valid: false;
+    reason: string;
+};
+export declare function projectRealpathHash(projectRoot: string): string;
+//# sourceMappingURL=action-lease.d.ts.map

package/dist/action-lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-lease.d.ts","sourceRoot":"","sources":["../src/action-lease.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAGxE,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,aAAa,GAAG,UAAU,GAAG,WAAW,CAAC;AAEjF,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,cAAc,CAAC;IACtB,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5D,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,wBAAwB,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,iBAAiB,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,KAAK,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;QAClD,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,eAAe,GAAG,mBAAmB,CASvF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,aAAa,CAkBhB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,cAAc,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAyBrD;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAI/D"}

package/dist/action-lease.js

@@ -0,0 +1,153 @@
+import { createHash } from 'node:crypto';
+import { existsSync, realpathSync } from 'node:fs';
+import { dirname, isAbsolute, relative, resolve } from 'node:path';
+import { stableRuntimeHash } from './task-runtime.js';
+export function canonicalToolFieldManifest(action) {
+    const fields = Object.fromEntries(Object.keys(action.input).map(field => [field, { class: 'locked' }]));
+    for (const [field, policy] of Object.entries(action.binding.safeInputVariations ?? {})) {
+        fields[field] = { class: 'constrained', ...policy };
+    }
+    fields.evidenceRefs = { class: 'advisory', type: 'array' };
+    return { schemaVersion: 'tool-field-manifest.v1', tool: action.tool, version: '1.0.0', fields };
+}
+export function issueActionLease(input) {
+    if (input.manifest.tool !== input.action.tool)
+        throw new Error('ACTION_LEASE_MANIFEST_TOOL_MISMATCH');
+    const issuedAt = input.issuedAt ?? Date.now();
+    const body = {
+        schemaVersion: 'action-lease.v1',
+        leaseId: `lease:${stableRuntimeHash({ taskSpecHash: input.taskSpecHash, tool: input.action.tool, issuedAt }).slice(0, 32)}`,
+        taskSpecHash: input.taskSpecHash,
+        manifestVersion: input.manifest.version,
+        tool: input.action.tool,
+        projectRealpathHash: projectRealpathHash(input.projectRoot),
+        operationMode: input.action.binding.operationMode ?? 'unknown',
+        lockedInputHash: stableRuntimeHash(lockedInput(input.action.input, input.manifest)),
+        targets: input.targets.map(target => ({ ...target })),
+        verificationPlanHash: stableRuntimeHash(input.action.verificationPlan),
+        issuedAt,
+        expiresAt: issuedAt + (input.ttlMs ?? 10 * 60_000),
+    };
+    return { ...body, leaseHash: stableRuntimeHash(body) };
+}
+export function validateActionLease(input) {
+    if (!input.authenticated)
+        return invalid('action_lease_unauthenticated');
+    if (input.lease.schemaVersion !== 'action-lease.v1')
+        return invalid('action_lease_schema_unsupported');
+    const { leaseHash: _hash, ...body } = input.lease;
+    if (stableRuntimeHash(body) !== input.lease.leaseHash)
+        return invalid('action_lease_hash_mismatch');
+    if ((input.now ?? Date.now()) > input.lease.expiresAt)
+        return invalid('action_lease_expired');
+    if (input.lease.taskSpecHash !== input.activeTaskSpecHash)
+        return invalid('action_lease_task_mismatch');
+    if (input.manifest.tool !== input.lease.tool || input.manifest.version !== input.lease.manifestVersion) {
+        return invalid('action_lease_manifest_mismatch');
+    }
+    if (projectRealpathHash(input.projectRoot) !== input.lease.projectRealpathHash)
+        return invalid('action_lease_project_mismatch');
+    if (!pathsContained(input.projectRoot, input.args))
+        return invalid('action_lease_path_escape');
+    if (input.toolName !== input.lease.tool)
+        return invalid('action_lease_tool_mismatch');
+    if (input.operationMode !== input.lease.operationMode)
+        return invalid('action_lease_mode_mismatch');
+    if (!targetsEqual(input.lease.targets, input.currentTargets))
+        return invalid('action_lease_target_stale');
+    if (stableRuntimeHash(lockedInput(input.args, input.manifest)) !== input.lease.lockedInputHash) {
+        return invalid('action_lease_locked_field_mismatch');
+    }
+    for (const [field, value] of Object.entries(input.args)) {
+        if (field.startsWith('_devflow_'))
+            continue;
+        const policy = input.manifest.fields[field];
+        if (!policy)
+            return invalid(`action_lease_unknown_field:${field}`);
+        if (policy.class === 'constrained' && !matches(value, policy))
+            return invalid(`action_lease_constraint:${field}`);
+    }
+    return { valid: true };
+}
+export function projectRealpathHash(projectRoot) {
+    let path = resolve(projectRoot);
+    try {
+        path = realpathSync(path);
+    }
+    catch { /* Creation targets may not exist yet. */ }
+    return createHash('sha256').update(path).digest('hex');
+}
+function lockedInput(args, manifest) {
+    return Object.fromEntries(Object.entries(args)
+        .filter(([field]) => manifest.fields[field]?.class === 'locked')
+        .sort(([a], [b]) => a.localeCompare(b)));
+}
+function pathsContained(projectRoot, args) {
+    let root = resolve(projectRoot);
+    try {
+        root = realpathSync(root);
+    }
+    catch {
+        return false;
+    }
+    for (const field of ['filePath', 'targetPath', 'path']) {
+        const value = args[field];
+        if (typeof value !== 'string')
+            continue;
+        let target = isAbsolute(value) ? resolve(value) : resolve(root, value);
+        try {
+            target = realpathSync(target);
+        }
+        catch {
+            const parent = dirname(target);
+            if (existsSync(parent))
+                target = resolve(realpathSync(parent), target.split('/').at(-1));
+        }
+        const rel = relative(root, target);
+        if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`) || isAbsolute(rel))
+            return false;
+    }
+    return true;
+}
+function targetsEqual(left, right) {
+    if (left.length !== right.length)
+        return false;
+    const current = new Map(right.map(target => [target.identityId, normalizeTarget(target)]));
+    return left.every(rawExpected => {
+        const expected = normalizeTarget(rawExpected);
+        const actual = current.get(expected.identityId);
+        if (!actual || actual.path !== expected.path)
+            return false;
+        if (expected.expectedState !== 'unknown' && actual.expectedState !== expected.expectedState)
+            return false;
+        return expected.contentHash === undefined || expected.contentHash === actual.contentHash;
+    });
+}
+function normalizeTarget(target) {
+    return { ...target, path: target.path.normalize('NFKC').replaceAll('\\', '/') };
+}
+function matches(value, policy) {
+    if (policy.type && runtimeType(value) !== policy.type)
+        return false;
+    if (policy.enum && !policy.enum.includes(value))
+        return false;
+    if (typeof value === 'number' && (!Number.isFinite(value)
+        || policy.minimum !== undefined && value < policy.minimum
+        || policy.maximum !== undefined && value > policy.maximum))
+        return false;
+    if (typeof value === 'string' && policy.pattern && !new RegExp(policy.pattern, 'u').test(value))
+        return false;
+    return true;
+}
+function runtimeType(value) {
+    if (Array.isArray(value))
+        return 'array';
+    if (value && typeof value === 'object')
+        return 'object';
+    if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {
+        return typeof value;
+    }
+    return 'other';
+}
+function invalid(reason) { return { valid: false, reason }; }
+//# sourceMappingURL=action-lease.js.map

package/dist/action-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-lease.js","sourceRoot":"","sources":["../src/action-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAyCtD,MAAM,UAAU,0BAA0B,CAAC,MAAuB;IAChE,MAAM,MAAM,GAAsC,MAAM,CAAC,WAAW,CAClE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAiB,EAAE,CAAC,CAAC,CAC9E,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,YAAY,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3D,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAQhC;IACC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,iBAA0B;QACzC,OAAO,EAAE,SAAS,iBAAiB,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QAC3H,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;QACvC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;QACvB,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC;QAC3D,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,SAAS;QAC9D,eAAe,EAAE,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACrD,oBAAoB,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACtE,QAAQ;QACR,SAAS,EAAE,QAAQ,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,CAAC;KACnD,CAAC;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAWnC;IACC,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,iBAAiB;QAAE,OAAO,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACvG,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IAClD,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACpG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,kBAAkB;QAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACxG,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACvG,OAAO,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,mBAAmB;QAAE,OAAO,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAChI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACpG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC;QAAE,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC1G,IAAI,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC/F,OAAO,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,IAAI,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAChC,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC;IACtF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,QAA6B;IAC/E,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,QAAQ,CAAC;SAC/D,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB,EAAE,IAA6B;IACxE,IAAI,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAChC,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,IAAI,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,UAAU,CAAC,MAAM,CAAC;gBAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACxH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,IAA8B,EAAE,KAA+B;IACnF,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;QAC9B,MAAM,QAAQ,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC3D,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAC1G,OAAO,QAAQ,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,MAAwC;IAC/D,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,MAAyB;IACxD,IAAI,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;WACpD,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO;WACtD,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,OAAO,KAAwC,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,IAAsC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC"}

package/dist/action-lease.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=action-lease.test.d.ts.map

package/dist/action-lease.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-lease.test.d.ts","sourceRoot":"","sources":["../src/action-lease.test.ts"],"names":[],"mappings":""}

package/dist/action-lease.test.js

@@ -0,0 +1,67 @@
+import { mkdirSync, mkdtempSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterEach, describe, expect, it } from 'vitest';
+import { canonicalToolFieldManifest, issueActionLease, validateActionLease } from './action-lease.js';
+const roots = [];
+afterEach(() => { for (const root of roots.splice(0))
+    rmSync(root, { recursive: true, force: true }); });
+function fixture() {
+    const root = mkdtempSync(join(tmpdir(), 'devflow-action-lease-'));
+    roots.push(root);
+    mkdirSync(join(root, 'src'));
+    writeFileSync(join(root, 'src', 'FlightMonitorPage.tsx'), 'export const FlightMonitorPage = 1;');
+    const action = {
+        tool: 'react_audit_performance', status: 'required', required: true,
+        input: { projectRoot: root, filePath: 'src/FlightMonitorPage.tsx', scope: 'related' },
+        binding: {
+            projectRoot: root, sessionId: 'session', requestId: 'request', targetAnchors: [],
+            requiredContextReceipt: 'context', requiredPolicyFacets: [], operationMode: 'analyze',
+            safeInputVariations: {
+                componentName: { type: 'string', enum: ['FlightMonitorPage'] },
+                maxFindings: { type: 'number', minimum: 1, maximum: 50 },
+            },
+        },
+        verificationPlan: [],
+    };
+    const manifest = canonicalToolFieldManifest(action);
+    const targets = [{
+            identityId: 'artifact:flight', path: 'src/FlightMonitorPage.tsx',
+            expectedState: 'existing', contentHash: 'content:1',
+        }];
+    const lease = issueActionLease({
+        taskSpecHash: 'spec:1', action, manifest, projectRoot: root, targets, issuedAt: 100, ttlMs: 100,
+    });
+    return { root, action, manifest, targets, lease };
+}
+describe('ActionLease.v1', () => {
+    it('allows bounded safe refinements and rejects unknown or changed semantic fields', () => {
+        const x = fixture();
+        const base = {
+            lease: x.lease, manifest: x.manifest, authenticated: true, activeTaskSpecHash: 'spec:1',
+            projectRoot: x.root, toolName: x.action.tool, operationMode: 'analyze', currentTargets: x.targets, now: 150,
+        };
+        expect(validateActionLease({ ...base, args: { ...x.action.input, componentName: 'FlightMonitorPage', maxFindings: 8 } })).toEqual({ valid: true });
+        expect(validateActionLease({ ...base, args: { ...x.action.input, componentName: 'OtherPage' } })).toMatchObject({ valid: false });
+        expect(validateActionLease({ ...base, args: { ...x.action.input, surprise: true } })).toMatchObject({ valid: false });
+    });
+    it('fails closed for expiry, cross-project, stale content, mode drift, and symlink escape', () => {
+        const x = fixture();
+        const base = {
+            lease: x.lease, manifest: x.manifest, authenticated: true, activeTaskSpecHash: 'spec:1',
+            projectRoot: x.root, toolName: x.action.tool, operationMode: 'analyze',
+            args: x.action.input, currentTargets: x.targets, now: 150,
+        };
+        expect(validateActionLease({ ...base, now: 201 })).toMatchObject({ reason: 'action_lease_expired' });
+        expect(validateActionLease({ ...base, projectRoot: mkdtempSync(join(tmpdir(), 'other-project-')) })).toMatchObject({ reason: 'action_lease_project_mismatch' });
+        expect(validateActionLease({ ...base, currentTargets: [{ ...x.targets[0], contentHash: 'changed' }] })).toMatchObject({ reason: 'action_lease_target_stale' });
+        expect(validateActionLease({ ...base, operationMode: 'modify' })).toMatchObject({ reason: 'action_lease_mode_mismatch' });
+        const outside = mkdtempSync(join(tmpdir(), 'outside-target-'));
+        roots.push(outside);
+        writeFileSync(join(outside, 'escape.tsx'), 'escape');
+        symlinkSync(join(outside, 'escape.tsx'), join(x.root, 'src', 'escape.tsx'));
+        expect(validateActionLease({ ...base, args: { ...x.action.input, filePath: 'src/escape.tsx' } }))
+            .toMatchObject({ reason: 'action_lease_path_escape' });
+    });
+});
+//# sourceMappingURL=action-lease.test.js.map

package/dist/action-lease.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-lease.test.js","sourceRoot":"","sources":["../src/action-lease.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzD,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEtG,MAAM,KAAK,GAAa,EAAE,CAAC;AAC3B,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzG,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,uBAAuB,CAAC,EAAE,qCAAqC,CAAC,CAAC;IACjG,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI;QACnE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,2BAA2B,EAAE,KAAK,EAAE,SAAS,EAAE;QACrF,OAAO,EAAE;YACP,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE;YAChF,sBAAsB,EAAE,SAAS,EAAE,oBAAoB,EAAE,EAAE,EAAE,aAAa,EAAE,SAAS;YACrF,mBAAmB,EAAE;gBACnB,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,mBAAmB,CAAC,EAAE;gBAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;aACzD;SACF;QACD,gBAAgB,EAAE,EAAE;KACrB,CAAC;IACF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,CAAC;YACf,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,2BAA2B;YAChE,aAAa,EAAE,UAAmB,EAAE,WAAW,EAAE,WAAW;SAC7D,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG;KAChG,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACpD,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ;YACvF,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG;SAC5G,CAAC;QACF,MAAM,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnJ,MAAM,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAClI,MAAM,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ;YACvF,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS;YACtE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG;SAC1D,CAAC;QACF,MAAM,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAChK,MAAM,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAChK,MAAM,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAC1H,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrD,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;aAC9F,aAAa,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/canonical-action-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-action-binding.d.ts","sourceRoot":"","sources":["../src/canonical-action-binding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAexE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAE/E;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GAAG;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAiBxG"}
+{"version":3,"file":"canonical-action-binding.d.ts","sourceRoot":"","sources":["../src/canonical-action-binding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAgBxE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAE/E;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GAAG;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CA2BxG"}

package/dist/canonical-action-binding.js

@@ -11,6 +11,7 @@ const TRANSPORT_FIELDS = new Set([
     '_devflow_worker_id',
     '_devflow_worker_context_receipt',
 ]);
+const STRUCTURAL_EVIDENCE_FIELDS = new Set(['evidenceRefs']);
 export function canonicalActionInputHash(input) {
     return createHash('sha256').update(stableJson(normalizeActionInput(input))).digest('hex');
 }
@@ -21,7 +22,17 @@ export function validateCanonicalActionBinding(input) {
     const expectedHash = input.action.binding.normalizedInputHash
         ?? canonicalActionInputHash(input.action.input);
     const actualInputHash = canonicalActionInputHash(input.args);
-    if (expectedHash !== actualInputHash) {
+    const safeVariations = input.action.binding.safeInputVariations ?? {};
+    const variedFields = Object.keys(safeVariations)
+        .filter(field => input.action.input[field] === undefined && input.args[field] !== undefined);
+    for (const field of variedFields) {
+        if (!matchesSafeVariation(input.args[field], safeVariations[field])) {
+            return { valid: false, reason: `canonical_safe_input_invalid:${field}`, actualInputHash };
+        }
+    }
+    const lockedActualInput = Object.fromEntries(Object.entries(input.args)
+        .filter(([field]) => !variedFields.includes(field) && !STRUCTURAL_EVIDENCE_FIELDS.has(field)));
+    if (expectedHash !== canonicalActionInputHash(lockedActualInput)) {
         return { valid: false, reason: 'canonical_input_hash_mismatch', actualInputHash };
     }
     for (const target of input.action.binding.operationTargets ?? []) {
@@ -32,6 +43,23 @@ export function validateCanonicalActionBinding(input) {
     }
     return { valid: true, actualInputHash };
 }
+function matchesSafeVariation(value, policy) {
+    if (typeof value !== policy.type)
+        return false;
+    if (policy.enum && !policy.enum.some(candidate => candidate === value))
+        return false;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            return false;
+        if (policy.minimum !== undefined && value < policy.minimum)
+            return false;
+        if (policy.maximum !== undefined && value > policy.maximum)
+            return false;
+    }
+    if (typeof value === 'string' && policy.pattern && !new RegExp(policy.pattern, 'u').test(value))
+        return false;
+    return true;
+}
 function normalizeActionInput(input) {
     return Object.fromEntries(Object.entries(input)
         .filter(([key, value]) => !TRANSPORT_FIELDS.has(key) && !key.startsWith('_devflow_') && value !== undefined)

package/dist/canonical-action-binding.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-action-binding.js","sourceRoot":"","sources":["../src/canonical-action-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,kBAAkB;IAClB,qBAAqB;IACrB,+BAA+B;IAC/B,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;IACpB,iCAAiC;CAClC,CAAC,CAAC;AAEH,MAAM,UAAU,wBAAwB,CAAC,KAA8B;IACrE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAI9C;IACC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB;WACxD,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,YAAY,KAAK,eAAe,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,eAAe,EAAE,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,IAAI,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA8B;IAC1D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAC5C,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,SAAS,CAAC;SAC3G,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACnH,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SACvE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SACxD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;SACpE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,IAAc;IACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACpF,CAAC"}
+{"version":3,"file":"canonical-action-binding.js","sourceRoot":"","sources":["../src/canonical-action-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,kBAAkB;IAClB,qBAAqB;IACrB,+BAA+B;IAC/B,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;IACpB,iCAAiC;CAClC,CAAC,CAAC;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAE7D,MAAM,UAAU,wBAAwB,CAAC,KAA8B;IACrE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAI9C;IACC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB;WACxD,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC;IACtE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;SAC7C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/F,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,KAAK,CAAE,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,KAAK,EAAE,EAAE,eAAe,EAAE,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;SACpE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,YAAY,KAAK,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,eAAe,EAAE,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,IAAI,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,MAA8E;IAE9E,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACzE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA8B;IAC1D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAC5C,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,SAAS,CAAC;SAC3G,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACnH,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SACvE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SACxD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;SACpE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,IAAc;IACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACpF,CAAC"}

package/dist/canonical-action-binding.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=canonical-action-binding.test.d.ts.map

package/dist/canonical-action-binding.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-action-binding.test.d.ts","sourceRoot":"","sources":["../src/canonical-action-binding.test.ts"],"names":[],"mappings":""}

package/dist/canonical-action-binding.test.js

@@ -0,0 +1,42 @@
+import { describe, expect, it } from 'vitest';
+import { canonicalActionInputHash, validateCanonicalActionBinding } from './canonical-action-binding.js';
+function action() {
+    const input = { projectRoot: '/project', filePath: 'src/FlightMonitorPage.tsx', scope: 'related' };
+    return {
+        tool: 'react_audit_performance', input, status: 'recommended', required: false,
+        binding: {
+            projectRoot: '/project', sessionId: 'session', requestId: 'request',
+            targetAnchors: ['src/FlightMonitorPage.tsx'], requiredContextReceipt: 'context',
+            requiredPolicyFacets: [], normalizedInputHash: canonicalActionInputHash(input),
+            operationTargets: [{ path: 'src/FlightMonitorPage.tsx', expectedState: 'existing' }],
+            safeInputVariations: {
+                componentName: { type: 'string', enum: ['FlightMonitorPage'] },
+                maxFindings: { type: 'number', minimum: 1, maximum: 50 },
+            },
+        },
+        verificationPlan: [],
+    };
+}
+describe('canonical action safe input variations', () => {
+    it('allows declared bounded read-only refinements', () => {
+        expect(validateCanonicalActionBinding({
+            action: action(), toolName: 'react_audit_performance',
+            args: {
+                projectRoot: '/project', filePath: 'src/FlightMonitorPage.tsx', scope: 'related',
+                componentName: 'FlightMonitorPage', maxFindings: 8,
+            },
+        }).valid).toBe(true);
+    });
+    it('rejects unknown, out-of-range, and target-changing input', () => {
+        for (const args of [
+            { projectRoot: '/project', filePath: 'src/FlightMonitorPage.tsx', scope: 'related', maxFindings: 500 },
+            { projectRoot: '/project', filePath: 'src/FlightMonitorPage.tsx', scope: 'related', componentName: 'OtherPage' },
+            { projectRoot: '/project', filePath: 'src/Other.tsx', scope: 'related', maxFindings: 8 },
+            { projectRoot: '/project', filePath: 'src/FlightMonitorPage.tsx', scope: 'related', surprise: true },
+        ]) {
+            expect(validateCanonicalActionBinding({ action: action(), toolName: 'react_audit_performance', args }).valid)
+                .toBe(false);
+        }
+    });
+});
+//# sourceMappingURL=canonical-action-binding.test.js.map

package/dist/canonical-action-binding.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-action-binding.test.js","sourceRoot":"","sources":["../src/canonical-action-binding.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAEzG,SAAS,MAAM;IACb,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,2BAA2B,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnG,OAAO;QACL,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK;QAC9E,OAAO,EAAE;YACP,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;YACnE,aAAa,EAAE,CAAC,2BAA2B,CAAC,EAAE,sBAAsB,EAAE,SAAS;YAC/E,oBAAoB,EAAE,EAAE,EAAE,mBAAmB,EAAE,wBAAwB,CAAC,KAAK,CAAC;YAC9E,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;YACpF,mBAAmB,EAAE;gBACnB,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,mBAAmB,CAAC,EAAE;gBAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;aACzD;SACF;QACD,gBAAgB,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,8BAA8B,CAAC;YACpC,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,yBAAyB;YACrD,IAAI,EAAE;gBACJ,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,2BAA2B,EAAE,KAAK,EAAE,SAAS;gBAChF,aAAa,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC;aACnD;SACF,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,KAAK,MAAM,IAAI,IAAI;YACjB,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,2BAA2B,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE;YACtG,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,2BAA2B,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE;YAChH,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE;YACxF,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,2BAA2B,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;SACrG,EAAE,CAAC;YACF,MAAM,CAAC,8BAA8B,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;iBAC1G,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/capability-rollout.d.ts

@@ -27,4 +27,60 @@ export interface CapabilityRolloutResolution {
 }
 export declare const DEFAULT_CAPABILITY_ROLLOUT: Readonly<CapabilityRolloutConfig>;
 export declare function resolveCapabilityRollout(projectRoot: string, env?: NodeJS.ProcessEnv): CapabilityRolloutResolution;
+export type EvidenceRuntimeRolloutStage = 'off' | 'shadow' | 'project' | 'percentage';
+export type EvidenceRuntimeRolloutSetting = {
+    stage: 'off' | 'shadow';
+} | {
+    stage: 'project';
+    projects: string[];
+} | {
+    stage: 'percentage';
+    percentage: number;
+    salt: string;
+};
+export interface EvidenceRuntimeRolloutConfig {
+    artifactIdentity: EvidenceRuntimeRolloutSetting;
+    channelOutcomes: EvidenceRuntimeRolloutSetting;
+    actionLease: EvidenceRuntimeRolloutSetting;
+    onlineTerminalProjection: EvidenceRuntimeRolloutSetting;
+    memoryAutoSkip: EvidenceRuntimeRolloutSetting;
+    knowledgePublish: EvidenceRuntimeRolloutSetting;
+}
+export type EvidenceRuntimeRolloutKey = keyof EvidenceRuntimeRolloutConfig;
+export interface EvidenceRuntimeRolloutDiagnostic {
+    code: 'invalid_evidence_rollout' | 'unknown_evidence_rollout_key';
+    source: 'project' | 'environment';
+    message: string;
+    key?: EvidenceRuntimeRolloutKey;
+    value?: unknown;
+    environmentVariable?: string;
+}
+export interface EvidenceRuntimeRolloutResolution {
+    config: EvidenceRuntimeRolloutConfig;
+    projectId: string;
+    diagnostics: EvidenceRuntimeRolloutDiagnostic[];
+}
+export interface EvidenceRuntimeRolloutDecision {
+    stage: EvidenceRuntimeRolloutStage;
+    writeEvents: boolean;
+    shadowCompare: boolean;
+    readCandidate: boolean;
+    projectTerminalOutcome: boolean;
+    preserveEvents: true;
+    rewriteOutcomes: false;
+}
+export declare const DEFAULT_EVIDENCE_RUNTIME_ROLLOUT: Readonly<EvidenceRuntimeRolloutConfig>;
+/** Resolve the independently reversible evidence-runtime rollout controls. */
+export declare function resolveEvidenceRuntimeRollout(projectRoot: string, env?: NodeJS.ProcessEnv): EvidenceRuntimeRolloutResolution;
+export declare function decideEvidenceRuntimeRollout(input: {
+    setting: EvidenceRuntimeRolloutSetting;
+    projectId: string;
+    bucketKey: string;
+}): EvidenceRuntimeRolloutDecision;
+/**
+ * Rollback retains append-only evidence by returning every active capability to
+ * shadow, while disabling all candidate reads and terminal projections.
+ */
+export declare function rollbackEvidenceRuntimeRollout(config: EvidenceRuntimeRolloutConfig): EvidenceRuntimeRolloutConfig;
+export declare function evidenceRuntimeProjectId(projectRoot: string): string;
 //# sourceMappingURL=capability-rollout.d.ts.map

package/dist/capability-rollout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability-rollout.d.ts","sourceRoot":"","sources":["../src/capability-rollout.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;AAElD,MAAM,WAAW,uBAAuB;IACtC,gBAAgB,EAAE,WAAW,CAAC;IAC9B,cAAc,EAAE,WAAW,CAAC;IAC5B,iBAAiB,EAAE,WAAW,CAAC;IAC/B,kBAAkB,EAAE,WAAW,CAAC;IAChC,kBAAkB,EAAE,WAAW,CAAC;IAChC,mBAAmB,EAAE,WAAW,CAAC;IACjC,gBAAgB,EAAE,WAAW,CAAC;IAC9B,kBAAkB,EAAE,WAAW,CAAC;IAChC,eAAe,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,uBAAuB,CAAC;AAEjE,MAAM,MAAM,+BAA+B,GACvC,mBAAmB,GACnB,kBAAkB,GAClB,wBAAwB,GACxB,uBAAuB,GACvB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,+BAA+B,CAAC;IACtC,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,uBAAuB,CAAC;IAChC,WAAW,EAAE,2BAA2B,EAAE,CAAC;CAC5C;AAED,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,uBAAuB,CAUvE,CAAC;AAwBH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,2BAA2B,CAwD7B"}
+{"version":3,"file":"capability-rollout.d.ts","sourceRoot":"","sources":["../src/capability-rollout.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;AAElD,MAAM,WAAW,uBAAuB;IACtC,gBAAgB,EAAE,WAAW,CAAC;IAC9B,cAAc,EAAE,WAAW,CAAC;IAC5B,iBAAiB,EAAE,WAAW,CAAC;IAC/B,kBAAkB,EAAE,WAAW,CAAC;IAChC,kBAAkB,EAAE,WAAW,CAAC;IAChC,mBAAmB,EAAE,WAAW,CAAC;IACjC,gBAAgB,EAAE,WAAW,CAAC;IAC9B,kBAAkB,EAAE,WAAW,CAAC;IAChC,eAAe,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,uBAAuB,CAAC;AAEjE,MAAM,MAAM,+BAA+B,GACvC,mBAAmB,GACnB,kBAAkB,GAClB,wBAAwB,GACxB,uBAAuB,GACvB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,+BAA+B,CAAC;IACtC,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,uBAAuB,CAAC;IAChC,WAAW,EAAE,2BAA2B,EAAE,CAAC;CAC5C;AAED,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,uBAAuB,CAUvE,CAAC;AAwBH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,2BAA2B,CAwD7B;AA2ED,MAAM,MAAM,2BAA2B,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC;AAEtF,MAAM,MAAM,6BAA6B,GACrC;IAAE,KAAK,EAAE,KAAK,GAAG,QAAQ,CAAA;CAAE,GAC3B;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,4BAA4B;IAC3C,gBAAgB,EAAE,6BAA6B,CAAC;IAChD,eAAe,EAAE,6BAA6B,CAAC;IAC/C,WAAW,EAAE,6BAA6B,CAAC;IAC3C,wBAAwB,EAAE,6BAA6B,CAAC;IACxD,cAAc,EAAE,6BAA6B,CAAC;IAC9C,gBAAgB,EAAE,6BAA6B,CAAC;CACjD;AAED,MAAM,MAAM,yBAAyB,GAAG,MAAM,4BAA4B,CAAC;AAE3E,MAAM,WAAW,gCAAgC;IAC/C,IAAI,EAAE,0BAA0B,GAAG,8BAA8B,CAAC;IAClE,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,yBAAyB,CAAC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,4BAA4B,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,gCAAgC,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,2BAA2B,CAAC;IACnC,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,sBAAsB,EAAE,OAAO,CAAC;IAChC,cAAc,EAAE,IAAI,CAAC;IACrB,eAAe,EAAE,KAAK,CAAC;CACxB;AAgBD,eAAO,MAAM,gCAAgC,EAAE,QAAQ,CAAC,4BAA4B,CAOlF,CAAC;AAEH,8EAA8E;AAC9E,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,MAAM,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,gCAAgC,CAqClC;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,OAAO,EAAE,6BAA6B,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,8BAA8B,CAkBjC;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,4BAA4B,GACnC,4BAA4B,CAK9B;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEpE"}