@dsh-enhanced/assistant-delivery 0.1.65 → 0.1.67

package/lib/work-item-engineering-context.js

@@ -0,0 +1,151 @@
+import { createHash } from 'node:crypto';
+import { isProxy } from 'node:util/types';
+import { acceptanceCanonicalJson } from '@dsh-enhanced/task-acceptance-contract';
+const HEX = /^[a-f0-9]{64}$/u;
+function fail() { throw new Error('invalid work item engineering context'); }
+const hash = (text) => createHash('sha256').update(text, 'utf8').digest('hex');
+const digest = (value) => hash(acceptanceCanonicalJson(value));
+const positive = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value > 0;
+const size = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+const identifier = (value) => typeof value === 'string' && value.length > 0 && Buffer.byteLength(value) <= 4096 && !/\p{Cc}/u.test(value) && Buffer.from(value).toString('utf8') === value;
+const hex = (value) => typeof value === 'string' && HEX.test(value);
+function exact(value, required, optional = []) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return fail();
+    const record = value, keys = Object.keys(record);
+    if (required.some(key => !Object.hasOwn(record, key)) || keys.some(key => !required.includes(key) && !optional.includes(key)))
+        return fail();
+    return record;
+}
+/** Snapshot plain inert data without invoking peer accessors or repairing original Unicode. */
+export function engineeringContextData(value) {
+    const ancestors = new Set();
+    let entries = 0;
+    const visit = (part, depth) => {
+        if (part === null || typeof part === 'string' || typeof part === 'boolean' || typeof part === 'number' && Number.isFinite(part))
+            return;
+        if (!part || typeof part !== 'object' || isProxy(part) || depth > 20 || ancestors.has(part) || ++entries > 20000)
+            fail();
+        const array = Array.isArray(part), prototype = Object.getPrototypeOf(part);
+        if (prototype !== (array ? Array.prototype : Object.prototype) && prototype !== null)
+            fail();
+        ancestors.add(part);
+        for (const key of Reflect.ownKeys(part)) {
+            if (array && key === 'length')
+                continue;
+            const descriptor = Object.getOwnPropertyDescriptor(part, key);
+            if (typeof key !== 'string' || !descriptor.enumerable || !Object.hasOwn(descriptor, 'value'))
+                fail();
+            visit(descriptor.value, depth + 1);
+        }
+        ancestors.delete(part);
+    };
+    visit(value, 0);
+    const text = acceptanceCanonicalJson(value);
+    if (Buffer.byteLength(text) > 524288)
+        fail();
+    const result = JSON.parse(text);
+    const freeze = (part) => { if (part && typeof part === 'object') {
+        for (const child of Object.values(part))
+            freeze(child);
+        Object.freeze(part);
+    } };
+    freeze(result);
+    return result;
+}
+function textRecord(value, report) {
+    const record = exact(value, report ? ['itemId', 'revision', 'text', 'fullTextDigest', 'fullBytes'] : ['itemId', 'text', 'fullTextDigest', 'fullBytes']);
+    if (!identifier(record.itemId) || report && !positive(record.revision) || typeof record.text !== 'string' || !size(record.fullBytes) || !hex(record.fullTextDigest)
+        || !report && !record.text.trim() || Buffer.from(record.text).toString('utf8') !== record.text || Buffer.byteLength(record.text) !== record.fullBytes || hash(record.text) !== record.fullTextDigest)
+        fail();
+    return record;
+}
+/** Defense in depth: source authority is still the producer-owned ephemeral capability. */
+export function validateWorkItemEngineeringMaterial(value) {
+    const data = engineeringContextData(value), material = exact(data, ['protocol', 'itemId', 'rootItemId', 'feedbackProofDigest', 'nodes', 'continuationInputs', 'parentReports', 'materialDigest']);
+    if (material.protocol !== 'assistant-work-items/engineering-material/v1' || !identifier(material.itemId) || !identifier(material.rootItemId) || !hex(material.feedbackProofDigest) || !hex(material.materialDigest)
+        || !Array.isArray(material.nodes) || material.nodes.length < 1 || material.nodes.length > 33 || !Array.isArray(material.continuationInputs) || !Array.isArray(material.parentReports))
+        fail();
+    const nodes = material.nodes, inputs = material.continuationInputs, reports = material.parentReports;
+    const ids = new Set(), selected = [];
+    for (const [index, value] of nodes.entries()) {
+        const node = exact(value, ['itemId', 'planProtocol', 'planDigest', 'input', 'parent']);
+        if (!identifier(node.itemId) || ids.has(node.itemId) || !hex(node.planDigest))
+            fail();
+        ids.add(node.itemId);
+        if (index === 0) {
+            const input = exact(node.input, ['kind', 'inboxId', 'sourceDigest', 'executionRef', 'completionSequence', 'binding']), binding = exact(input.binding, ['id', 'version', 'generation']);
+            if (node.itemId !== material.rootItemId || node.parent !== null || node.planProtocol !== 'assistant-work-items/foreground-diagnosis-plan/v1' || input.kind !== 'foreground'
+                || !identifier(input.inboxId) || input.executionRef !== input.inboxId || !hex(input.sourceDigest) || !positive(input.completionSequence) || !identifier(binding.id) || !positive(binding.version) || !positive(binding.generation))
+                fail();
+        }
+        else {
+            const input = exact(node.input, ['kind', 'sourceDigest', 'inputSha256', 'inputBytes'], ['replyId']), parent = exact(node.parent, ['itemId', 'rootItemId', 'report', 'outcomeRevision', 'productionDigest']);
+            if (node.planProtocol !== 'assistant-work-items/owner-continuation-plan/v2' || input.kind !== 'continuation'
+                || !hex(input.sourceDigest) || !hex(input.inputSha256) || !size(input.inputBytes) || input.inputBytes > 16384 || parent.itemId !== nodes[index - 1].itemId
+                || parent.rootItemId !== material.rootItemId || !hex(parent.productionDigest) || parent.outcomeRevision !== null && !positive(parent.outcomeRevision)
+                || (node.planProtocol === 'assistant-work-items/owner-continuation-plan/v2' ? !identifier(input.replyId) : Object.hasOwn(input, 'replyId')))
+                fail();
+            if (parent.report !== null) {
+                const report = exact(parent.report, ['itemId', 'revision', 'digest', 'fullTextDigest', 'fullBytes', 'status', 'truncated']);
+                if (report.itemId !== parent.itemId || !positive(report.revision) || !hex(report.digest) || !hex(report.fullTextDigest) || !size(report.fullBytes) || report.fullBytes > 65536
+                    || !['progress', 'waiting', 'ready', 'blocked', 'failed'].includes(String(report.status)) || typeof report.truncated !== 'boolean')
+                    fail();
+                selected.push(report);
+            }
+        }
+    }
+    if (nodes.at(-1).itemId !== material.itemId || inputs.length !== nodes.length - 1 || reports.length !== selected.length)
+        fail();
+    let inputBytes = 0, reportBytes = 0;
+    for (const [index, value] of inputs.entries()) {
+        const record = textRecord(value, false), node = nodes[index + 1], input = node.input;
+        if (record.itemId !== node.itemId || record.fullTextDigest !== input.inputSha256 || record.fullBytes !== input.inputBytes)
+            fail();
+        inputBytes += record.fullBytes;
+    }
+    for (const [index, value] of reports.entries()) {
+        const record = textRecord(value, true), ref = selected[index];
+        if (record.itemId !== ref.itemId || record.revision !== ref.revision || record.fullTextDigest !== ref.fullTextDigest || record.fullBytes !== ref.fullBytes)
+            fail();
+        reportBytes += record.fullBytes;
+    }
+    if (inputBytes > 16384 || reportBytes > 262144)
+        fail();
+    const { materialDigest, ...unsigned } = material;
+    if (digest(unsigned) !== materialDigest)
+        fail();
+    return data;
+}
+export function frameWorkItemEngineeringContext(material, rootText) {
+    if (typeof rootText !== 'string' || !rootText.trim() || Buffer.from(rootText).toString('utf8') !== rootText)
+        fail();
+    const objective = acceptanceCanonicalJson({ protocol: 'work-item-owner-objective/v1', inputs: material.nodes.map((node, index) => ({ itemId: node.itemId, source: node.input, text: index === 0 ? rootText : material.continuationInputs[index - 1].text })) });
+    if (Buffer.byteLength(objective) > 16384)
+        fail();
+    const unsigned = { protocol: 'assistant-delivery/work-item-engineering-context/v1', itemId: material.itemId, rootItemId: material.rootItemId, feedbackProofDigest: material.feedbackProofDigest,
+        materialDigest: material.materialDigest, nodes: material.nodes, objective: { protocol: 'work-item-owner-objective/v1', fullTextDigest: hash(objective), fullBytes: Buffer.byteLength(objective) }, reports: material.nodes.flatMap(node => node.parent?.report ? [node.parent.report] : []) };
+    return Object.freeze({ manifest: engineeringContextData({ ...unsigned, manifestDigest: digest(unsigned) }), objective });
+}
+export function pageWorkItemEngineeringContext(source, material, input) {
+    const selector = exact(input.selector, input.selector.kind === 'objective' ? ['kind'] : ['kind', 'itemId', 'revision']);
+    let text = source.objective;
+    if (selector.kind === 'parent-report') {
+        if (!identifier(selector.itemId) || !positive(selector.revision))
+            fail();
+        const report = material.parentReports.find(report => report.itemId === selector.itemId && report.revision === selector.revision);
+        if (!report)
+            fail();
+        text = report.text;
+    }
+    else if (selector.kind !== 'objective')
+        fail();
+    const bytes = Buffer.from(text), offset = input.offset ?? 0, limit = input.maxBytes ?? 4096;
+    if (!Number.isSafeInteger(offset) || offset < 0 || offset > bytes.length || offset < bytes.length && (bytes[offset] & 0xc0) === 0x80 || !Number.isSafeInteger(limit) || limit < 4 || limit > 8192)
+        fail();
+    let end = Math.min(offset + limit, bytes.length);
+    while (end > offset && end < bytes.length && (bytes[end] & 0xc0) === 0x80)
+        end--;
+    return Object.freeze({ manifestDigest: source.manifest.manifestDigest, fullTextDigest: hash(text), fullBytes: bytes.length, text: bytes.subarray(offset, end).toString('utf8'), offset, returnedBytes: end - offset, ...(end < bytes.length ? { nextOffset: end } : {}) });
+}
+//# sourceMappingURL=work-item-engineering-context.js.map

package/lib/work-item-engineering-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-engineering-context.js","sourceRoot":"","sources":["../src/work-item-engineering-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAuChF,MAAM,GAAG,GAAC,iBAAiB,CAAA;AAC3B,SAAS,IAAI,KAAS,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA,CAAA,CAAC;AAC/E,MAAM,IAAI,GAAC,CAAC,IAAW,EAAQ,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvF,MAAM,MAAM,GAAC,CAAC,KAAa,EAAQ,EAAE,CAAA,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAA;AACzE,MAAM,QAAQ,GAAC,CAAC,KAAa,EAAiB,EAAE,CAAA,OAAO,KAAK,KAAG,QAAQ,IAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAE,KAAK,GAAC,CAAC,CAAA;AAC7G,MAAM,IAAI,GAAC,CAAC,KAAa,EAAiB,EAAE,CAAA,OAAO,KAAK,KAAG,QAAQ,IAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAE,KAAK,IAAE,CAAC,CAAA;AAC1G,MAAM,UAAU,GAAC,CAAC,KAAa,EAAiB,EAAE,CAAA,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,MAAM,GAAC,CAAC,IAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAE,IAAI,IAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,KAAK,CAAA;AAC9L,MAAM,GAAG,GAAC,CAAC,KAAa,EAAiB,EAAE,CAAA,OAAO,KAAK,KAAG,QAAQ,IAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACnF,SAAS,KAAK,CAAC,KAAa,EAAC,QAA0B,EAAC,WAA2B,EAAE;IACnF,IAAG,CAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAC,OAAO,IAAI,EAAE,CAAA;IACtE,MAAM,MAAM,GAAC,KAA+B,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrE,IAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC,IAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO,IAAI,EAAE,CAAA;IACjI,OAAO,MAAM,CAAA;AACf,CAAC;AACD,+FAA+F;AAC/F,MAAM,UAAU,sBAAsB,CAAI,KAAO;IAC/C,MAAM,SAAS,GAAC,IAAI,GAAG,EAAU,CAAC;IAAA,IAAI,OAAO,GAAC,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAC,CAAC,IAAY,EAAC,KAAY,EAAM,EAAE;QAC5C,IAAG,IAAI,KAAG,IAAI,IAAE,OAAO,IAAI,KAAG,QAAQ,IAAE,OAAO,IAAI,KAAG,SAAS,IAAE,OAAO,IAAI,KAAG,QAAQ,IAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAC,OAAM;QACrH,IAAG,CAAC,IAAI,IAAE,OAAO,IAAI,KAAG,QAAQ,IAAE,OAAO,CAAC,IAAI,CAAC,IAAE,KAAK,GAAC,EAAE,IAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,EAAE,OAAO,GAAC,KAAK;YAAC,IAAI,EAAE,CAAA;QACtG,MAAM,KAAK,GAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,SAAS,GAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACrE,IAAG,SAAS,KAAG,CAAC,KAAK,CAAA,CAAC,CAAA,KAAK,CAAC,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,SAAS,CAAC,IAAE,SAAS,KAAG,IAAI;YAAC,IAAI,EAAE,CAAA;QAChF,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnB,KAAI,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,CAAC;YACtC,IAAG,KAAK,IAAE,GAAG,KAAG,QAAQ;gBAAC,SAAQ;YACjC,MAAM,UAAU,GAAC,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAC,GAAG,CAAE,CAAA;YAC3D,IAAG,OAAO,GAAG,KAAG,QAAQ,IAAE,CAAC,UAAU,CAAC,UAAU,IAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAC,OAAO,CAAC;gBAAC,IAAI,EAAE,CAAA;YAC3F,KAAK,CAAC,UAAU,CAAC,KAAK,EAAC,KAAK,GAAC,CAAC,CAAC,CAAA;QACjC,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC,CAAA;IACD,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC,CAAA;IACd,MAAM,IAAI,GAAC,uBAAuB,CAAC,KAAK,CAAC,CAAA;IACzC,IAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAC,MAAM;QAAC,IAAI,EAAE,CAAA;IACxC,MAAM,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAA;IAClC,MAAM,MAAM,GAAC,CAAC,IAAY,EAAM,EAAE,GAAC,IAAG,IAAI,IAAE,OAAO,IAAI,KAAG,QAAQ,EAAC,CAAC;QAAA,KAAI,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAAA,CAAC,CAAA,CAAC,CAAA;IAC9I,MAAM,CAAC,MAAM,CAAC,CAAC;IAAA,OAAO,MAAM,CAAA;AAC9B,CAAC;AACD,SAAS,UAAU,CAAC,KAAa,EAAC,MAAc;IAC9C,MAAM,MAAM,GAAC,KAAK,CAAC,KAAK,EAAC,MAAM,CAAA,CAAC,CAAA,CAAC,QAAQ,EAAC,UAAU,EAAC,MAAM,EAAC,gBAAgB,EAAC,WAAW,CAAC,CAAA,CAAC,CAAA,CAAC,QAAQ,EAAC,MAAM,EAAC,gBAAgB,EAAC,WAAW,CAAC,CAAC,CAAA;IACzI,IAAG,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAE,MAAM,IAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAE,OAAO,MAAM,CAAC,IAAI,KAAG,QAAQ,IAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAE,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;WAClJ,CAAC,MAAM,IAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,MAAM,CAAC,IAAI,IAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAG,MAAM,CAAC,SAAS,IAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAG,MAAM,CAAC,cAAc;QAAC,IAAI,EAAE,CAAA;IAC9L,OAAO,MAAM,CAAA;AACf,CAAC;AACD,2FAA2F;AAC3F,MAAM,UAAU,mCAAmC,CAAC,KAAa;IAC/D,MAAM,IAAI,GAAC,sBAAsB,CAAC,KAAK,CAAC,EAAC,QAAQ,GAAC,KAAK,CAAC,IAAI,EAAC,CAAC,UAAU,EAAC,QAAQ,EAAC,YAAY,EAAC,qBAAqB,EAAC,OAAO,EAAC,oBAAoB,EAAC,eAAe,EAAC,gBAAgB,CAAC,CAAC,CAAA;IACpL,IAAG,QAAQ,CAAC,QAAQ,KAAG,8CAA8C,IAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;WACpM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAC,CAAC,IAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAC,EAAE,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAC,IAAI,EAAE,CAAA;IACjL,MAAM,KAAK,GAAC,QAAQ,CAAC,KAAkB,EAAC,MAAM,GAAC,QAAQ,CAAC,kBAA+B,EAAC,OAAO,GAAC,QAAQ,CAAC,aAA0B,CAAA;IACnI,MAAM,GAAG,GAAC,IAAI,GAAG,EAAU,EAAC,QAAQ,GAAwB,EAAE,CAAA;IAC9D,KAAI,MAAM,CAAC,KAAK,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAC,CAAC;QAC1C,MAAM,IAAI,GAAC,KAAK,CAAC,KAAK,EAAC,CAAC,QAAQ,EAAC,cAAc,EAAC,YAAY,EAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,CAAA;QAC/E,IAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;YAAC,IAAI,EAAE,CAAA;QAC/E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAgB,CAAC,CAAA;QAC9B,IAAG,KAAK,KAAG,CAAC,EAAC,CAAC;YACZ,MAAM,KAAK,GAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,SAAS,EAAC,cAAc,EAAC,cAAc,EAAC,oBAAoB,EAAC,SAAS,CAAC,CAAC,EAAC,OAAO,GAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAC,CAAC,IAAI,EAAC,SAAS,EAAC,YAAY,CAAC,CAAC,CAAA;YACxK,IAAG,IAAI,CAAC,MAAM,KAAG,QAAQ,CAAC,UAAU,IAAE,IAAI,CAAC,MAAM,KAAG,IAAI,IAAE,IAAI,CAAC,YAAY,KAAG,mDAAmD,IAAE,KAAK,CAAC,IAAI,KAAG,YAAY;mBACxJ,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAE,KAAK,CAAC,YAAY,KAAG,KAAK,CAAC,OAAO,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,IAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;gBAAC,IAAI,EAAE,CAAA;QAC9N,CAAC;aAAI,CAAC;YACJ,MAAM,KAAK,GAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAC,CAAC,MAAM,EAAC,cAAc,EAAC,aAAa,EAAC,YAAY,CAAC,EAAC,CAAC,SAAS,CAAC,CAAC,EAAC,MAAM,GAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAC,CAAC,QAAQ,EAAC,YAAY,EAAC,QAAQ,EAAC,iBAAiB,EAAC,kBAAkB,CAAC,CAAC,CAAA;YAC5L,IAAG,IAAI,CAAC,YAAY,KAAG,iDAAiD,IAAE,KAAK,CAAC,IAAI,KAAG,cAAc;mBACjG,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAE,KAAK,CAAC,UAAU,GAAC,KAAK,IAAE,MAAM,CAAC,MAAM,KAAI,KAAK,CAAC,KAAK,GAAC,CAAC,CAAqB,CAAC,MAAM;mBAC9J,MAAM,CAAC,UAAU,KAAG,QAAQ,CAAC,UAAU,IAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAE,MAAM,CAAC,eAAe,KAAG,IAAI,IAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC;mBACxI,CAAC,IAAI,CAAC,YAAY,KAAG,iDAAiD,CAAA,CAAC,CAAA,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,KAAK,EAAC,SAAS,CAAC,CAAC;gBAAC,IAAI,EAAE,CAAA;YAC5I,IAAG,MAAM,CAAC,MAAM,KAAG,IAAI,EAAC,CAAC;gBACvB,MAAM,MAAM,GAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAC,CAAC,QAAQ,EAAC,UAAU,EAAC,QAAQ,EAAC,gBAAgB,EAAC,WAAW,EAAC,QAAQ,EAAC,WAAW,CAAC,CAAC,CAAA;gBAClH,IAAG,MAAM,CAAC,MAAM,KAAG,MAAM,CAAC,MAAM,IAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAE,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAE,MAAM,CAAC,SAAS,GAAC,KAAK;uBAC3J,CAAC,CAAC,UAAU,EAAC,SAAS,EAAC,OAAO,EAAC,SAAS,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAE,OAAO,MAAM,CAAC,SAAS,KAAG,SAAS;oBAAC,IAAI,EAAE,CAAA;gBAClI,QAAQ,CAAC,IAAI,CAAC,MAAyC,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAqB,CAAC,MAAM,KAAG,QAAQ,CAAC,MAAM,IAAE,MAAM,CAAC,MAAM,KAAG,KAAK,CAAC,MAAM,GAAC,CAAC,IAAE,OAAO,CAAC,MAAM,KAAG,QAAQ,CAAC,MAAM;QAAC,IAAI,EAAE,CAAA;IACtI,IAAI,UAAU,GAAC,CAAC,EAAC,WAAW,GAAC,CAAC,CAAA;IAC9B,KAAI,MAAM,CAAC,KAAK,EAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAC,CAAC;QAC3C,MAAM,MAAM,GAAC,UAAU,CAAC,KAAK,EAAC,KAAK,CAAC,EAAC,IAAI,GAAC,KAAK,CAAC,KAAK,GAAC,CAAC,CAAoB,EAAC,KAAK,GAAC,IAAI,CAAC,KAAqC,CAAA;QAC5H,IAAG,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,MAAM,CAAC,cAAc,KAAG,KAAK,CAAC,WAAW,IAAE,MAAM,CAAC,SAAS,KAAG,KAAK,CAAC,UAAU;YAAC,IAAI,EAAE,CAAA;QACrH,UAAU,IAAE,MAAM,CAAC,SAAmB,CAAA;IACxC,CAAC;IACD,KAAI,MAAM,CAAC,KAAK,EAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAC,CAAC;QAC5C,MAAM,MAAM,GAAC,UAAU,CAAC,KAAK,EAAC,IAAI,CAAC,EAAC,GAAG,GAAC,QAAQ,CAAC,KAAK,CAAE,CAAA;QACxD,IAAG,MAAM,CAAC,MAAM,KAAG,GAAG,CAAC,MAAM,IAAE,MAAM,CAAC,QAAQ,KAAG,GAAG,CAAC,QAAQ,IAAE,MAAM,CAAC,cAAc,KAAG,GAAG,CAAC,cAAc,IAAE,MAAM,CAAC,SAAS,KAAG,GAAG,CAAC,SAAS;YAAC,IAAI,EAAE,CAAA;QAClJ,WAAW,IAAE,MAAM,CAAC,SAAmB,CAAA;IACzC,CAAC;IACD,IAAG,UAAU,GAAC,KAAK,IAAE,WAAW,GAAC,MAAM;QAAC,IAAI,EAAE,CAAA;IAC9C,MAAM,EAAC,cAAc,EAAC,GAAG,QAAQ,EAAC,GAAC,QAAQ,CAAA;IAC3C,IAAG,MAAM,CAAC,QAAQ,CAAC,KAAG,cAAc;QAAC,IAAI,EAAE,CAAA;IAC3C,OAAO,IAA6C,CAAA;AACtD,CAAC;AACD,MAAM,UAAU,+BAA+B,CAAC,QAA8C,EAAC,QAAe;IAC5G,IAAG,OAAO,QAAQ,KAAG,QAAQ,IAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,QAAQ;QAAC,IAAI,EAAE,CAAA;IACzG,MAAM,SAAS,GAAC,uBAAuB,CAAC,EAAC,QAAQ,EAAC,8BAA8B,EAAC,MAAM,EAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAC,KAAK,EAAC,EAAE,CAAA,CAAC,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,EAAC,MAAM,EAAC,IAAI,CAAC,KAAK,EAAC,IAAI,EAAC,KAAK,KAAG,CAAC,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,QAAQ,CAAC,kBAAkB,CAAC,KAAK,GAAC,CAAC,CAAE,CAAC,IAAI,EAAC,CAAC,CAAC,EAAC,CAAC,CAAA;IACvO,IAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,GAAC,KAAK;QAAC,IAAI,EAAE,CAAA;IAC5C,MAAM,QAAQ,GAAC,EAAC,QAAQ,EAAC,qDAA8D,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,UAAU,EAAC,QAAQ,CAAC,UAAU,EAAC,mBAAmB,EAAC,QAAQ,CAAC,mBAAmB;QAC5L,cAAc,EAAC,QAAQ,CAAC,cAAc,EAAC,KAAK,EAAC,QAAQ,CAAC,KAAK,EAAC,SAAS,EAAC,EAAC,QAAQ,EAAC,8BAAuC,EAAC,cAAc,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,SAAS,EAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAC,EAAC,OAAO,EAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,MAAM,EAAE,MAAM,CAAA,CAAC,CAAA,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAA;IACnR,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,sBAAsB,CAAC,EAAC,GAAG,QAAQ,EAAC,cAAc,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAC,CAAC,EAAC,SAAS,EAAC,CAAC,CAAA;AAClH,CAAC;AACD,MAAM,UAAU,8BAA8B,CAAC,MAA6E,EAAC,QAA8C,EAAC,KAA8C;IACxN,MAAM,QAAQ,GAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAG,WAAW,CAAA,CAAC,CAAA,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,CAAC,MAAM,EAAC,QAAQ,EAAC,UAAU,CAAC,CAAC,CAAA;IAC5G,IAAI,IAAI,GAAC,MAAM,CAAC,SAAS,CAAA;IACzB,IAAG,QAAQ,CAAC,IAAI,KAAG,eAAe,EAAC,CAAC;QAClC,IAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAC,IAAI,EAAE,CAAA;QACpE,MAAM,MAAM,GAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,MAAM,KAAG,QAAQ,CAAC,MAAM,IAAE,MAAM,CAAC,QAAQ,KAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACtH,IAAG,CAAC,MAAM;YAAC,IAAI,EAAE,CAAC;QAAA,IAAI,GAAC,MAAM,CAAC,IAAI,CAAA;IACpC,CAAC;SAAK,IAAG,QAAQ,CAAC,IAAI,KAAG,WAAW;QAAC,IAAI,EAAE,CAAA;IAC3C,MAAM,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,MAAM,GAAC,KAAK,CAAC,MAAM,IAAE,CAAC,EAAC,KAAK,GAAC,KAAK,CAAC,QAAQ,IAAE,IAAI,CAAA;IAC/E,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAE,MAAM,GAAC,CAAC,IAAE,MAAM,GAAC,KAAK,CAAC,MAAM,IAAE,MAAM,GAAC,KAAK,CAAC,MAAM,IAAE,CAAC,KAAK,CAAC,MAAM,CAAE,GAAC,IAAI,CAAC,KAAG,IAAI,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAE,KAAK,GAAC,CAAC,IAAE,KAAK,GAAC,IAAI;QAAC,IAAI,EAAE,CAAA;IAC5K,IAAI,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAC,KAAK,EAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3C,OAAM,GAAG,GAAC,MAAM,IAAE,GAAG,GAAC,KAAK,CAAC,MAAM,IAAE,CAAC,KAAK,CAAC,GAAG,CAAE,GAAC,IAAI,CAAC,KAAG,IAAI;QAAC,GAAG,EAAE,CAAA;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,cAAc,EAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAC,cAAc,EAAC,IAAI,CAAC,IAAI,CAAC,EAAC,SAAS,EAAC,KAAK,CAAC,MAAM,EAAC,IAAI,EAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,MAAM,EAAC,aAAa,EAAC,GAAG,GAAC,MAAM,EAAC,GAAG,CAAC,GAAG,GAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,EAAC,UAAU,EAAC,GAAG,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAA;AACnP,CAAC"}

package/lib/work-item-feedback-schema.d.ts

@@ -0,0 +1,2 @@
+export declare const workItemFeedbackSchema = "\n  CREATE TABLE delivery_work_item_feedback (\n    inbox_id TEXT PRIMARY KEY REFERENCES inbox_messages(id),\n    operation_id TEXT NOT NULL UNIQUE,\n    admission_sequence INTEGER NOT NULL UNIQUE CHECK(admission_sequence>=1),\n    item_id TEXT NOT NULL,\n    source_digest TEXT NOT NULL CHECK(length(source_digest)=64),\n    source_json TEXT NOT NULL CHECK(json_valid(source_json)),\n    state TEXT NOT NULL CHECK(state IN ('pending','frozen','recorded','conflict','cancelled')),\n    command_json TEXT CHECK(command_json IS NULL OR json_valid(command_json)),\n    proof_digest TEXT CHECK(proof_digest IS NULL OR length(proof_digest)=64),\n    canonical_json TEXT CHECK(canonical_json IS NULL OR json_valid(canonical_json)),\n    CHECK(state!='frozen' OR (command_json IS NOT NULL AND proof_digest IS NOT NULL)),\n    CHECK(state!='recorded' OR canonical_json IS NOT NULL)\n  ) STRICT;\n  CREATE INDEX delivery_work_item_feedback_pending ON delivery_work_item_feedback(state,admission_sequence);\n  CREATE TRIGGER delivery_work_item_feedback_source_immutable\n    BEFORE UPDATE OF inbox_id,operation_id,admission_sequence,item_id,source_digest,source_json ON delivery_work_item_feedback\n    BEGIN SELECT RAISE(ABORT,'work item feedback source is immutable'); END;\n  CREATE TRIGGER delivery_work_item_feedback_selection_immutable BEFORE UPDATE ON delivery_work_item_feedback\n    WHEN (OLD.command_json IS NOT NULL AND NEW.command_json IS NOT OLD.command_json)\n      OR (OLD.proof_digest IS NOT NULL AND NEW.proof_digest IS NOT OLD.proof_digest)\n      OR (OLD.canonical_json IS NOT NULL AND NEW.canonical_json IS NOT OLD.canonical_json)\n      OR (OLD.state IN ('recorded','conflict','cancelled') AND NEW.state!=OLD.state)\n    BEGIN SELECT RAISE(ABORT,'work item feedback selection is immutable'); END;\n  CREATE TRIGGER delivery_work_item_feedback_no_delete BEFORE DELETE ON delivery_work_item_feedback\n    BEGIN SELECT RAISE(ABORT,'work item feedback source is durable'); END;\n";
+//# sourceMappingURL=work-item-feedback-schema.d.ts.map

package/lib/work-item-feedback-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-feedback-schema.d.ts","sourceRoot":"","sources":["../src/work-item-feedback-schema.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,u8DA2BlC,CAAA"}

package/lib/work-item-feedback-schema.js

@@ -0,0 +1,29 @@
+export const workItemFeedbackSchema = `
+  CREATE TABLE delivery_work_item_feedback (
+    inbox_id TEXT PRIMARY KEY REFERENCES inbox_messages(id),
+    operation_id TEXT NOT NULL UNIQUE,
+    admission_sequence INTEGER NOT NULL UNIQUE CHECK(admission_sequence>=1),
+    item_id TEXT NOT NULL,
+    source_digest TEXT NOT NULL CHECK(length(source_digest)=64),
+    source_json TEXT NOT NULL CHECK(json_valid(source_json)),
+    state TEXT NOT NULL CHECK(state IN ('pending','frozen','recorded','conflict','cancelled')),
+    command_json TEXT CHECK(command_json IS NULL OR json_valid(command_json)),
+    proof_digest TEXT CHECK(proof_digest IS NULL OR length(proof_digest)=64),
+    canonical_json TEXT CHECK(canonical_json IS NULL OR json_valid(canonical_json)),
+    CHECK(state!='frozen' OR (command_json IS NOT NULL AND proof_digest IS NOT NULL)),
+    CHECK(state!='recorded' OR canonical_json IS NOT NULL)
+  ) STRICT;
+  CREATE INDEX delivery_work_item_feedback_pending ON delivery_work_item_feedback(state,admission_sequence);
+  CREATE TRIGGER delivery_work_item_feedback_source_immutable
+    BEFORE UPDATE OF inbox_id,operation_id,admission_sequence,item_id,source_digest,source_json ON delivery_work_item_feedback
+    BEGIN SELECT RAISE(ABORT,'work item feedback source is immutable'); END;
+  CREATE TRIGGER delivery_work_item_feedback_selection_immutable BEFORE UPDATE ON delivery_work_item_feedback
+    WHEN (OLD.command_json IS NOT NULL AND NEW.command_json IS NOT OLD.command_json)
+      OR (OLD.proof_digest IS NOT NULL AND NEW.proof_digest IS NOT OLD.proof_digest)
+      OR (OLD.canonical_json IS NOT NULL AND NEW.canonical_json IS NOT OLD.canonical_json)
+      OR (OLD.state IN ('recorded','conflict','cancelled') AND NEW.state!=OLD.state)
+    BEGIN SELECT RAISE(ABORT,'work item feedback selection is immutable'); END;
+  CREATE TRIGGER delivery_work_item_feedback_no_delete BEFORE DELETE ON delivery_work_item_feedback
+    BEGIN SELECT RAISE(ABORT,'work item feedback source is durable'); END;
+`;
+//# sourceMappingURL=work-item-feedback-schema.js.map

package/lib/work-item-feedback-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-feedback-schema.js","sourceRoot":"","sources":["../src/work-item-feedback-schema.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BrC,CAAA"}

package/lib/work-item-feedback-store.d.ts

@@ -0,0 +1,29 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { InboxRecord } from './types.js';
+import type { ObjectiveCommand } from './feedback-command.js';
+import type { WorkItemFeedbackIntent, WorkItemFeedbackSource } from './work-item-feedback.js';
+export declare class WorkItemFeedbackStore {
+    private readonly database;
+    private readonly transaction;
+    private readonly getInbox;
+    constructor(database: DatabaseSync, transaction: <T>(fn: () => T) => T, getInbox: (id: string) => InboxRecord | undefined);
+    get(inboxId: string): WorkItemFeedbackIntent | undefined;
+    admit(source: WorkItemFeedbackSource, fence: () => void): WorkItemFeedbackIntent;
+    /**
+     * Insert the result intent and hand the Inbox off exactly once. A mixed
+     * result+continuation reply runs this and the continuation insert in one
+     * outer transaction, so the canonical result owns the handoff and the
+     * continuation reuses the processed Inbox.
+     */
+    admitInTransaction(source: WorkItemFeedbackSource, fence: () => void): WorkItemFeedbackIntent;
+    pending(afterSequence: number, limit: number): readonly WorkItemFeedbackIntent[];
+    freeze(inboxId: string, command: ObjectiveCommand, proofDigest: string, fence: () => void): WorkItemFeedbackIntent;
+    settle(inboxId: string, state: 'recorded' | 'conflict' | 'cancelled', canonical: WorkItemFeedbackIntent['canonical'] | undefined, fence: () => void): void;
+    findOutcome(outcomeId: string, operationId: string): WorkItemFeedbackIntent | undefined;
+    byOperation(operationId: string): WorkItemFeedbackIntent | undefined;
+    /** Cross-service canonical append can commit before this SQLite ACK; its stable operation remains the recovery key. */
+    withOwnerWriterFence<T>(operationId: string, callback: (intent: WorkItemFeedbackIntent) => T, verify: (intent: WorkItemFeedbackIntent, result: T) => NonNullable<WorkItemFeedbackIntent['canonical']>): T;
+    pendingAcknowledgements(afterSequence: number, limit: number): readonly WorkItemFeedbackIntent[];
+    cancelBefore(bindingId: string, sequence: number): void;
+}
+//# sourceMappingURL=work-item-feedback-store.d.ts.map

package/lib/work-item-feedback-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-feedback-store.d.ts","sourceRoot":"","sources":["../src/work-item-feedback-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAG7F,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAc,OAAO,CAAC,QAAQ,CAAC,WAAW;IAAkB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAA7F,QAAQ,EAAC,YAAY,EAAkB,WAAW,EAAC,CAAC,CAAC,EAAE,EAAE,EAAC,MAAI,CAAC,KAAG,CAAC,EAAkB,QAAQ,EAAC,CAAC,EAAE,EAAC,MAAM,KAAG,WAAW,GAAC,SAAS;IAC7J,GAAG,CAAC,OAAO,EAAC,MAAM,GAAE,sBAAsB,GAAC,SAAS;IASpD,KAAK,CAAC,MAAM,EAAC,sBAAsB,EAAC,KAAK,EAAC,MAAI,IAAI,GAAE,sBAAsB;IAG1E;;;;;OAKG;IACH,kBAAkB,CAAC,MAAM,EAAC,sBAAsB,EAAC,KAAK,EAAC,MAAI,IAAI,GAAE,sBAAsB;IAUvF,OAAO,CAAC,aAAa,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,GAAE,SAAS,sBAAsB,EAAE;IAK5E,MAAM,CAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,gBAAgB,EAAC,WAAW,EAAC,MAAM,EAAC,KAAK,EAAC,MAAI,IAAI,GAAE,sBAAsB;IAexG,MAAM,CAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,UAAU,GAAC,UAAU,GAAC,WAAW,EAAC,SAAS,EAAC,sBAAsB,CAAC,WAAW,CAAC,GAAC,SAAS,EAAC,KAAK,EAAC,MAAI,IAAI,GAAE,IAAI;IAQ1I,WAAW,CAAC,SAAS,EAAC,MAAM,EAAC,WAAW,EAAC,MAAM,GAAE,sBAAsB,GAAC,SAAS;IAKjF,WAAW,CAAC,WAAW,EAAC,MAAM,GAAE,sBAAsB,GAAC,SAAS;IAIhE,uHAAuH;IACvH,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAC,MAAM,EAAC,QAAQ,EAAC,CAAC,MAAM,EAAC,sBAAsB,KAAG,CAAC,EACpF,MAAM,EAAC,CAAC,MAAM,EAAC,sBAAsB,EAAC,MAAM,EAAC,CAAC,KAAG,WAAW,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,GAAE,CAAC;IAYtG,uBAAuB,CAAC,aAAa,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,GAAE,SAAS,sBAAsB,EAAE;IAM5F,YAAY,CAAC,SAAS,EAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,GAAE,IAAI;CAGpD"}

package/lib/work-item-feedback-store.js

@@ -0,0 +1,111 @@
+import { workItemReplyCanonical, workItemReplyDigest } from './work-item-replies.js';
+export class WorkItemFeedbackStore {
+    database;
+    transaction;
+    getInbox;
+    constructor(database, transaction, getInbox) {
+        this.database = database;
+        this.transaction = transaction;
+        this.getInbox = getInbox;
+    }
+    get(inboxId) {
+        const row = this.database.prepare('SELECT * FROM delivery_work_item_feedback WHERE inbox_id=?').get(inboxId);
+        if (!row)
+            return undefined;
+        const source = JSON.parse(row.source_json);
+        if (workItemReplyDigest(source) !== row.source_digest || source.inboxId !== row.inbox_id || source.operationId !== row.operation_id
+            || source.admissionCursor.sequence !== row.admission_sequence || source.target.itemId !== row.item_id)
+            throw new Error('invalid work item feedback source');
+        return { source, sourceDigest: row.source_digest, state: row.state, ...(row.command_json === null ? {} : { command: JSON.parse(row.command_json) }),
+            ...(row.proof_digest === null ? {} : { proofDigest: row.proof_digest }), ...(row.canonical_json === null ? {} : { canonical: JSON.parse(row.canonical_json) }) };
+    }
+    admit(source, fence) {
+        return this.transaction(() => this.admitInTransaction(source, fence));
+    }
+    /**
+     * Insert the result intent and hand the Inbox off exactly once. A mixed
+     * result+continuation reply runs this and the continuation insert in one
+     * outer transaction, so the canonical result owns the handoff and the
+     * continuation reuses the processed Inbox.
+     */
+    admitInTransaction(source, fence) {
+        fence();
+        const inbox = this.getInbox(source.inboxId);
+        if (!inbox || !['received', 'authorized'].includes(inbox.status) || inbox.envelopeHash !== source.envelopeHash || inbox.envelope.text !== source.inputText)
+            throw new Error('feedback Inbox changed');
+        this.database.prepare(`INSERT INTO delivery_work_item_feedback(inbox_id,operation_id,admission_sequence,item_id,source_digest,source_json,state) VALUES(?,?,?,?,?,?,'pending')`)
+            .run(source.inboxId, source.operationId, source.admissionCursor.sequence, source.target.itemId, workItemReplyDigest(source), workItemReplyCanonical(source));
+        const handed = this.database.prepare("UPDATE inbox_messages SET status='processed',binding_id=?,failure_code=NULL WHERE id=? AND status IN ('received','authorized')").run(source.binding.id, source.inboxId);
+        if (handed.changes !== 1)
+            throw new Error('feedback Inbox handoff lost');
+        return this.get(source.inboxId);
+    }
+    pending(afterSequence, limit) {
+        const rows = this.database.prepare(`SELECT inbox_id FROM delivery_work_item_feedback WHERE state IN ('pending','frozen') AND admission_sequence>? ORDER BY admission_sequence LIMIT ?`)
+            .all(afterSequence, limit);
+        return rows.map(row => this.get(row.inbox_id));
+    }
+    freeze(inboxId, command, proofDigest, fence) {
+        return this.transaction(() => {
+            fence();
+            const current = this.get(inboxId);
+            if (!current)
+                throw new Error('feedback intent missing');
+            if (current.state !== 'pending')
+                return current;
+            // Canonical work-item identity, not an individual report/outbox, orders votes.
+            const earlier = this.database.prepare(`SELECT 1 FROM delivery_work_item_feedback WHERE item_id=? AND admission_sequence<? AND state IN ('pending','frozen')
+        AND json_extract(source_json,'$.scope')=json_extract(?,'$.scope') AND json_extract(source_json,'$.owner')=json_extract(?,'$.owner') LIMIT 1`)
+                .get(current.source.target.itemId, current.source.admissionCursor.sequence, workItemReplyCanonical(current.source), workItemReplyCanonical(current.source));
+            if (earlier)
+                return current;
+            this.database.prepare("UPDATE delivery_work_item_feedback SET command_json=?,proof_digest=?,state='frozen' WHERE inbox_id=? AND state='pending'")
+                .run(workItemReplyCanonical(command), proofDigest, inboxId);
+            return this.get(inboxId);
+        });
+    }
+    settle(inboxId, state, canonical, fence) {
+        this.transaction(() => {
+            fence();
+            const current = this.get(inboxId);
+            if (!current || !['pending', 'frozen'].includes(current.state))
+                return;
+            this.database.prepare('UPDATE delivery_work_item_feedback SET state=?,canonical_json=? WHERE inbox_id=? AND state IN (\'pending\',\'frozen\')')
+                .run(state, canonical === undefined ? null : workItemReplyCanonical(canonical), inboxId);
+        });
+    }
+    findOutcome(outcomeId, operationId) {
+        const row = this.database.prepare("SELECT inbox_id FROM delivery_work_item_feedback WHERE state='recorded' AND operation_id=? AND json_extract(canonical_json,'$.outcomeId')=?")
+            .get(operationId, outcomeId);
+        return row === undefined ? undefined : this.get(row.inbox_id);
+    }
+    byOperation(operationId) {
+        const row = this.database.prepare('SELECT inbox_id FROM delivery_work_item_feedback WHERE operation_id=?').get(operationId);
+        return row ? this.get(row.inbox_id) : undefined;
+    }
+    /** Cross-service canonical append can commit before this SQLite ACK; its stable operation remains the recovery key. */
+    withOwnerWriterFence(operationId, callback, verify) {
+        return this.transaction(() => {
+            const intent = this.byOperation(operationId);
+            if (!intent || intent.state !== 'frozen')
+                throw new Error('owner feedback writer requires exact frozen intent');
+            const result = callback(intent);
+            const canonical = verify(intent, result);
+            const updated = this.database.prepare("UPDATE delivery_work_item_feedback SET state='recorded',canonical_json=? WHERE inbox_id=? AND state='frozen'")
+                .run(workItemReplyCanonical(canonical), intent.source.inboxId);
+            if (updated.changes !== 1)
+                throw new Error('owner feedback ACK lost its frozen source');
+            return result;
+        });
+    }
+    pendingAcknowledgements(afterSequence, limit) {
+        const rows = this.database.prepare(`SELECT inbox_id FROM delivery_work_item_feedback f WHERE state IN ('recorded','conflict') AND admission_sequence>?
+      AND NOT EXISTS(SELECT 1 FROM outbox_messages o WHERE o.idempotency_key='feedback:'||f.inbox_id||':ack') ORDER BY admission_sequence LIMIT ?`)
+            .all(afterSequence, limit);
+        return rows.map(row => this.get(row.inbox_id));
+    }
+    cancelBefore(bindingId, sequence) {
+        this.database.prepare("UPDATE delivery_work_item_feedback SET state='cancelled' WHERE state IN ('pending','frozen') AND admission_sequence<? AND json_extract(source_json,'$.binding.id')=?").run(sequence, bindingId);
+    }
+}
+//# sourceMappingURL=work-item-feedback-store.js.map

package/lib/work-item-feedback-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-feedback-store.js","sourceRoot":"","sources":["../src/work-item-feedback-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAEpF,MAAM,OAAO,qBAAqB;IACH;IAAuC;IAA8C;IAAlH,YAA6B,QAAqB,EAAkB,WAA4B,EAAkB,QAA2C;QAAhI,aAAQ,GAAR,QAAQ,CAAa;QAAkB,gBAAW,GAAX,WAAW,CAAiB;QAAkB,aAAQ,GAAR,QAAQ,CAAmC;IAAE,CAAC;IAChK,GAAG,CAAC,OAAc;QAChB,MAAM,GAAG,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,OAAO,CAA6B,CAAA;QACtI,IAAG,CAAC,GAAG;YAAC,OAAO,SAAS,CAAA;QACxB,MAAM,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA2B,CAAA;QAClE,IAAG,mBAAmB,CAAC,MAAM,CAAC,KAAG,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,KAAG,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAG,GAAG,CAAC,YAAY;eACvH,MAAM,CAAC,eAAe,CAAC,QAAQ,KAAG,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAG,GAAG,CAAC,OAAO;YAAC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACxJ,OAAO,EAAC,MAAM,EAAC,YAAY,EAAC,GAAG,CAAC,aAAa,EAAC,KAAK,EAAC,GAAG,CAAC,KAAK,EAAC,GAAG,CAAC,GAAG,CAAC,YAAY,KAAG,IAAI,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAqB,EAAC,CAAC;YACtJ,GAAG,CAAC,GAAG,CAAC,YAAY,KAAG,IAAI,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,GAAG,CAAC,YAAY,EAAC,CAAC,EAAC,GAAG,CAAC,GAAG,CAAC,cAAc,KAAG,IAAI,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAqD,EAAC,CAAC,EAAC,CAAA;IACpM,CAAC;IACD,KAAK,CAAC,MAA6B,EAAC,KAAc;QAChD,OAAO,IAAI,CAAC,WAAW,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC,CAAA;IACpE,CAAC;IACD;;;;;OAKG;IACH,kBAAkB,CAAC,MAA6B,EAAC,KAAc;QAC7D,KAAK,EAAE,CAAA;QACP,MAAM,KAAK,GAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACzC,IAAG,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,KAAG,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAG,MAAM,CAAC,SAAS;YAAC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC9L,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,yJAAyJ,CAAC;aAC7K,GAAG,CAAC,MAAM,CAAC,OAAO,EAAC,MAAM,CAAC,WAAW,EAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,mBAAmB,CAAC,MAAM,CAAC,EAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAA;QACzJ,MAAM,MAAM,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,gIAAgI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC1M,IAAG,MAAM,CAAC,OAAO,KAAG,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QACpE,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAE,CAAA;IAClC,CAAC;IACD,OAAO,CAAC,aAAoB,EAAC,KAAY;QACvC,MAAM,IAAI,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,mJAAmJ,CAAC;aAClL,GAAG,CAAC,aAAa,EAAC,KAAK,CAAwB,CAAA;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA,EAAE,CAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,CAAC,OAAc,EAAC,OAAwB,EAAC,WAAkB,EAAC,KAAc;QAC9E,OAAO,IAAI,CAAC,WAAW,CAAC,GAAE,EAAE;YAC1B,KAAK,EAAE,CAAC;YAAA,MAAM,OAAO,GAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACvC,IAAG,CAAC,OAAO;gBAAC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;YACtD,IAAG,OAAO,CAAC,KAAK,KAAG,SAAS;gBAAC,OAAO,OAAO,CAAA;YAC3C,+EAA+E;YAC/E,MAAM,OAAO,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oJAC0G,CAAC;iBAC5I,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;YAC1J,IAAG,OAAO;gBAAC,OAAO,OAAO,CAAA;YACzB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,0HAA0H,CAAC;iBAC9I,GAAG,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,CAAA;YAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,CAAC,OAAc,EAAC,KAAuC,EAAC,SAAuD,EAAC,KAAc;QAClI,IAAI,CAAC,WAAW,CAAC,GAAE,EAAE;YACnB,KAAK,EAAE,CAAC;YAAA,MAAM,OAAO,GAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACvC,IAAG,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAC,OAAM;YACnE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,wHAAwH,CAAC;iBAC5I,GAAG,CAAC,KAAK,EAAC,SAAS,KAAG,SAAS,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,sBAAsB,CAAC,SAAS,CAAC,EAAC,OAAO,CAAC,CAAA;QACpF,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,WAAW,CAAC,SAAgB,EAAC,WAAkB;QAC7C,MAAM,GAAG,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,6IAA6I,CAAC;aAC3K,GAAG,CAAC,WAAW,EAAC,SAAS,CAAgC,CAAA;QAC5D,OAAO,GAAG,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACzD,CAAC;IACD,WAAW,CAAC,WAAkB;QAC5B,MAAM,GAAG,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAgC,CAAA;QACxJ,OAAO,GAAG,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,SAAS,CAAA;IAC7C,CAAC;IACD,uHAAuH;IACvH,oBAAoB,CAAI,WAAkB,EAAC,QAA2C,EACpF,MAAiG;QACjG,OAAO,IAAI,CAAC,WAAW,CAAC,GAAE,EAAE;YAC1B,MAAM,MAAM,GAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;YAC1C,IAAG,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAG,QAAQ;gBAAC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;YAC3G,MAAM,MAAM,GAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC7B,MAAM,SAAS,GAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAA;YACrC,MAAM,OAAO,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,8GAA8G,CAAC;iBAChJ,GAAG,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAC/D,IAAG,OAAO,CAAC,OAAO,KAAG,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;YACnF,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,uBAAuB,CAAC,aAAoB,EAAC,KAAY;QACvD,MAAM,IAAI,GAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;kJAC6G,CAAC;aAC5I,GAAG,CAAC,aAAa,EAAC,KAAK,CAAwB,CAAA;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA,EAAE,CAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,CAAA;IAC/C,CAAC;IACD,YAAY,CAAC,SAAgB,EAAC,QAAe;QAC3C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sKAAsK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAA;IACvN,CAAC;CACF"}

package/lib/work-item-feedback.d.ts

@@ -0,0 +1,157 @@
+import type { TrustedTaskLearningProjectionReceipt } from '@dsh-enhanced/assistant-evaluation';
+import type { OwnerForegroundTaskSourceContent, OwnerForegroundTaskSourceScope, OwnerRouteValidationReceipt } from './types.js';
+import type { OwnerForegroundLearningTask } from './service.js';
+import type { WorkItemReplySource } from './work-item-replies.js';
+import type { ObjectiveCommand, ObjectiveFeedbackStatus } from './feedback-command.js';
+export type WorkItemFeedbackSelection = Readonly<{
+    kind: 'natural';
+    value: ObjectiveFeedbackStatus | 'withdraw';
+}> | Readonly<{
+    kind: 'explicit';
+    command: ObjectiveCommand;
+}>;
+export interface WorkItemFeedbackSource {
+    readonly protocol: 'assistant-delivery/work-item-feedback/v1';
+    readonly inboxId: string;
+    readonly envelopeHash: string;
+    readonly inputText: string;
+    readonly inputSha256: string;
+    readonly admissionCursor: WorkItemReplySource['admissionCursor'];
+    readonly occurredAt: number;
+    readonly owner: WorkItemReplySource['owner'];
+    readonly principalId: string;
+    readonly binding: WorkItemReplySource['binding'];
+    readonly scope: WorkItemReplySource['scope'];
+    readonly target: WorkItemReplySource['target'];
+    readonly selection: WorkItemFeedbackSelection;
+    readonly operationId: string;
+}
+export interface WorkItemFeedbackIntent {
+    readonly source: WorkItemFeedbackSource;
+    readonly sourceDigest: string;
+    readonly state: 'pending' | 'frozen' | 'recorded' | 'conflict' | 'cancelled';
+    readonly command?: ObjectiveCommand;
+    readonly proofDigest?: string;
+    readonly canonical?: Readonly<{
+        version: number;
+        objectiveStatus: ObjectiveFeedbackStatus | 'unknown';
+        outcomeId?: string;
+    }>;
+}
+/** Structural public identity keeps older optional Evaluation type exports loadable while disabled. */
+export interface WorkItemFeedbackProofIdentity {
+    readonly protocol: 'assistant-work-items/owner-report-feedback/v1';
+    readonly itemId: string;
+    readonly reportRevision: number;
+    readonly reportDigest: string;
+    readonly sourceId: string;
+    readonly itemKind: string;
+    readonly scope: Readonly<{
+        workspace: string;
+        preset: string;
+    }>;
+    readonly owner: Readonly<{
+        ownerRouteId: string;
+        principalId: string;
+        principalRecordId: string;
+        principalVersion: number;
+    }>;
+    readonly originBindingId: string;
+    readonly production: Readonly<{
+        automationId: string;
+        occurrenceId: string;
+        runId: string;
+        definitionHash: string;
+        definitionVersion: number;
+        executionStatus: 'succeeded' | 'failed' | 'timed-out' | 'cancelled';
+        completedAt: number;
+        quiescent: true;
+        budgetSettlementState: 'finalized';
+    }>;
+    readonly supplier: Readonly<{
+        provider: string;
+        model: string;
+        reasoningEffort?: string;
+    }>;
+    readonly planDigest: string;
+    readonly proofDigest: string;
+}
+/** Full proof text is verified privately. This identity's proofDigest binds that original text, never its presentation. */
+export interface OwnerWorkItemLearningTask {
+    readonly protocol: 'assistant-delivery/owner-work-item-learning/v1';
+    readonly owner: Readonly<OwnerRouteValidationReceipt>;
+    readonly canonical: TrustedTaskLearningProjectionReceipt;
+    readonly judgement: 'owner-feedback';
+    readonly ownerRevision: Readonly<{
+        version: number;
+        action: 'initial' | 'correct';
+        operationId: string;
+    }>;
+    readonly proofIdentity: Readonly<WorkItemFeedbackProofIdentity>;
+    readonly sourceDigest: string;
+    readonly presentation: Readonly<{
+        brief: Readonly<{
+            text: string;
+            truncated: boolean;
+            redacted: boolean;
+        }>;
+        report: Readonly<{
+            text: string;
+            truncated: boolean;
+            redacted: boolean;
+        }>;
+        feedback: Readonly<{
+            inboxId: string;
+            text: string;
+            truncated: boolean;
+            redacted: boolean;
+        }>;
+    }>;
+    readonly presentationDigest: string;
+}
+/** Exact immutable expectations; foreground v1 identities remain unchanged. */
+export type OwnerWorkItemLearningSourceExpectation = Readonly<{
+    kind: 'work-item';
+    itemId: string;
+    outcomeId: string;
+    expectedSourceDigest: string;
+    expectedContentDigest: string;
+    canonical: Readonly<{
+        version: number;
+        digest: string;
+        objectiveStatus: 'achieved' | 'not-achieved';
+    }>;
+}>;
+export type OwnerLearningSourceExpectation = Readonly<{
+    kind: 'foreground';
+    inboxId: string;
+    expectedSourceDigest: string;
+}> | OwnerWorkItemLearningSourceExpectation;
+export type OwnerLearningSourceSnapshot = Readonly<{
+    kind: 'foreground';
+    inboxId: string;
+    content?: Readonly<OwnerForegroundTaskSourceContent> | undefined;
+    currentCanonical?: TrustedTaskLearningProjectionReceipt | undefined;
+    task?: Readonly<OwnerForegroundLearningTask> | undefined;
+    ownerRevision?: Readonly<{
+        outcomeId: string;
+        version: number;
+        action: 'initial' | 'correct' | 'withdraw';
+        objectiveStatus: string;
+        operationId?: string;
+    }> | undefined;
+}> | Readonly<{
+    kind: 'work-item';
+    itemId: string;
+    task?: Readonly<OwnerWorkItemLearningTask> | undefined;
+    currentCanonical?: TrustedTaskLearningProjectionReceipt | undefined;
+    ownerRevision?: Readonly<{
+        outcomeId: string;
+        version: number;
+        action: 'initial' | 'correct' | 'withdraw';
+        objectiveStatus: string;
+        operationId?: string;
+    }> | undefined;
+}>;
+export type OwnerWorkItemLearningTaskFenceInput = OwnerForegroundTaskSourceScope & Omit<OwnerWorkItemLearningSourceExpectation, 'kind'>;
+//# sourceMappingURL=work-item-feedback.d.ts.map

package/lib/work-item-feedback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-feedback.d.ts","sourceRoot":"","sources":["../src/work-item-feedback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAA;AAC9F,OAAO,KAAK,EAAE,gCAAgC,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAA;AAC/H,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAA;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAEtF,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAC,IAAI,EAAC,SAAS,CAAC;IAAA,KAAK,EAAC,uBAAuB,GAAC,UAAU,CAAA;CAAC,CAAC,GAAG,QAAQ,CAAC;IAAC,IAAI,EAAC,UAAU,CAAC;IAAA,OAAO,EAAC,gBAAgB,CAAA;CAAC,CAAC,CAAA;AAClK,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAC,0CAA0C,CAAA;IAC5D,QAAQ,CAAC,OAAO,EAAC,MAAM,CAAA;IACvB,QAAQ,CAAC,YAAY,EAAC,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAC,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAC,MAAM,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAA;IAC/D,QAAQ,CAAC,UAAU,EAAC,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC3C,QAAQ,CAAC,WAAW,EAAC,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC/C,QAAQ,CAAC,KAAK,EAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC3C,QAAQ,CAAC,MAAM,EAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC7C,QAAQ,CAAC,SAAS,EAAC,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,WAAW,EAAC,MAAM,CAAA;CAC5B;AACD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAC,sBAAsB,CAAA;IACtC,QAAQ,CAAC,YAAY,EAAC,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAC,SAAS,GAAC,QAAQ,GAAC,UAAU,GAAC,UAAU,GAAC,WAAW,CAAA;IACnE,QAAQ,CAAC,OAAO,CAAC,EAAC,gBAAgB,CAAA;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAC,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAC,QAAQ,CAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,eAAe,EAAC,uBAAuB,GAAC,SAAS,CAAC;QAAA,SAAS,CAAC,EAAC,MAAM,CAAA;KAAC,CAAC,CAAA;CACnH;AACD,uGAAuG;AACvG,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAC,+CAA+C,CAAA;IACjE,QAAQ,CAAC,MAAM,EAAC,MAAM,CAAA;IACtB,QAAQ,CAAC,cAAc,EAAC,MAAM,CAAA;IAC9B,QAAQ,CAAC,YAAY,EAAC,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAC,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAC,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAC,QAAQ,CAAC;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAA;KAAC,CAAC,CAAA;IACzD,QAAQ,CAAC,KAAK,EAAC,QAAQ,CAAC;QAAC,YAAY,EAAC,MAAM,CAAC;QAAA,WAAW,EAAC,MAAM,CAAC;QAAA,iBAAiB,EAAC,MAAM,CAAC;QAAA,gBAAgB,EAAC,MAAM,CAAA;KAAC,CAAC,CAAA;IAClH,QAAQ,CAAC,eAAe,EAAC,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAC,QAAQ,CAAC;QAAC,YAAY,EAAC,MAAM,CAAC;QAAA,YAAY,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAC;QAAA,iBAAiB,EAAC,MAAM,CAAC;QAChI,eAAe,EAAC,WAAW,GAAC,QAAQ,GAAC,WAAW,GAAC,WAAW,CAAC;QAAA,WAAW,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,IAAI,CAAC;QAAA,qBAAqB,EAAC,WAAW,CAAA;KAAC,CAAC,CAAA;IACpI,QAAQ,CAAC,QAAQ,EAAC,QAAQ,CAAC;QAAC,QAAQ,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAC;QAAA,eAAe,CAAC,EAAC,MAAM,CAAA;KAAC,CAAC,CAAA;IAClF,QAAQ,CAAC,UAAU,EAAC,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAC,MAAM,CAAA;CAC5B;AACD,2HAA2H;AAC3H,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAC,gDAAgD,CAAA;IAClE,QAAQ,CAAC,KAAK,EAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAA;IACpD,QAAQ,CAAC,SAAS,EAAC,oCAAoC,CAAA;IACvD,QAAQ,CAAC,SAAS,EAAC,gBAAgB,CAAA;IACnC,QAAQ,CAAC,aAAa,EAAC,QAAQ,CAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,SAAS,GAAC,SAAS,CAAC;QAAA,WAAW,EAAC,MAAM,CAAA;KAAC,CAAC,CAAA;IAC/F,QAAQ,CAAC,aAAa,EAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAA;IAC9D,QAAQ,CAAC,YAAY,EAAC,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAC,QAAQ,CAAC;QAC7B,KAAK,EAAC,QAAQ,CAAC;YAAC,IAAI,EAAC,MAAM,CAAC;YAAA,SAAS,EAAC,OAAO,CAAC;YAAA,QAAQ,EAAC,OAAO,CAAA;SAAC,CAAC,CAAA;QAChE,MAAM,EAAC,QAAQ,CAAC;YAAC,IAAI,EAAC,MAAM,CAAC;YAAA,SAAS,EAAC,OAAO,CAAC;YAAA,QAAQ,EAAC,OAAO,CAAA;SAAC,CAAC,CAAA;QACjE,QAAQ,EAAC,QAAQ,CAAC;YAAC,OAAO,EAAC,MAAM,CAAC;YAAA,IAAI,EAAC,MAAM,CAAC;YAAA,SAAS,EAAC,OAAO,CAAC;YAAA,QAAQ,EAAC,OAAO,CAAA;SAAC,CAAC,CAAA;KACnF,CAAC,CAAA;IACF,QAAQ,CAAC,kBAAkB,EAAC,MAAM,CAAA;CACnC;AAED,+EAA+E;AAC/E,MAAM,MAAM,sCAAsC,GAAG,QAAQ,CAAC;IAC5D,IAAI,EAAC,WAAW,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,oBAAoB,EAAC,MAAM,CAAC;IAAA,qBAAqB,EAAC,MAAM,CAAA;IACxG,SAAS,EAAC,QAAQ,CAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAC;QAAA,eAAe,EAAC,UAAU,GAAC,cAAc,CAAA;KAAC,CAAC,CAAA;CAC7F,CAAC,CAAA;AACF,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAC,IAAI,EAAC,YAAY,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,oBAAoB,EAAC,MAAM,CAAA;CAAC,CAAC,GAAG,sCAAsC,CAAA;AAC9J,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAC,IAAI,EAAC,YAAY,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,OAAO,CAAC,EAAC,QAAQ,CAAC,gCAAgC,CAAC,GAAC,SAAS,CAAC;IACjJ,gBAAgB,CAAC,EAAC,oCAAoC,GAAC,SAAS,CAAC;IAAA,IAAI,CAAC,EAAC,QAAQ,CAAC,2BAA2B,CAAC,GAAC,SAAS,CAAC;IACvH,aAAa,CAAC,EAAC,QAAQ,CAAC;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,SAAS,GAAC,SAAS,GAAC,UAAU,CAAC;QAAA,eAAe,EAAC,MAAM,CAAC;QAAA,WAAW,CAAC,EAAC,MAAM,CAAA;KAAC,CAAC,GAAC,SAAS,CAAA;CAAC,CAAC,GACvJ,QAAQ,CAAC;IAAC,IAAI,EAAC,WAAW,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,IAAI,CAAC,EAAC,QAAQ,CAAC,yBAAyB,CAAC,GAAC,SAAS,CAAC;IAAA,gBAAgB,CAAC,EAAC,oCAAoC,GAAC,SAAS,CAAC;IAC9J,aAAa,CAAC,EAAC,QAAQ,CAAC;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,SAAS,GAAC,SAAS,GAAC,UAAU,CAAC;QAAA,eAAe,EAAC,MAAM,CAAC;QAAA,WAAW,CAAC,EAAC,MAAM,CAAA;KAAC,CAAC,GAAC,SAAS,CAAA;CAAC,CAAC,CAAA;AACzJ,MAAM,MAAM,mCAAmC,GAAG,8BAA8B,GAAG,IAAI,CAAC,sCAAsC,EAAC,MAAM,CAAC,CAAA"}

package/lib/work-item-feedback.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=work-item-feedback.js.map

package/lib/work-item-feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-feedback.js","sourceRoot":"","sources":["../src/work-item-feedback.ts"],"names":[],"mappings":""}

package/lib/work-item-replies-schema.d.ts

@@ -0,0 +1,3 @@
+/** Delivery-owned authority and handoff journals. Input and report identity never change after admission. */
+export declare const workItemRepliesSchema = "\n  CREATE TABLE delivery_work_item_reports (\n    outbox_id TEXT PRIMARY KEY REFERENCES outbox_messages(id),\n    intent_hash TEXT NOT NULL CHECK(length(intent_hash)=64),\n    target_json TEXT NOT NULL CHECK(json_valid(target_json)),\n    binding_json TEXT NOT NULL CHECK(json_valid(binding_json))\n  ) STRICT;\n  CREATE TRIGGER delivery_work_item_reports_no_update BEFORE UPDATE ON delivery_work_item_reports\n    BEGIN SELECT RAISE(ABORT, 'work item report target is immutable'); END;\n  CREATE TRIGGER delivery_work_item_reports_no_delete BEFORE DELETE ON delivery_work_item_reports\n    BEGIN SELECT RAISE(ABORT, 'work item report target is durable'); END;\n  CREATE TABLE delivery_work_item_reply_streams (\n    stream_key TEXT PRIMARY KEY CHECK(length(stream_key)=64),\n    head_item_id TEXT NOT NULL,\n    revision INTEGER NOT NULL CHECK(revision>=0)\n  ) STRICT;\n  CREATE TABLE delivery_work_item_replies (\n    inbox_id TEXT PRIMARY KEY REFERENCES inbox_messages(id),\n    stream_key TEXT NOT NULL REFERENCES delivery_work_item_reply_streams(stream_key),\n    admission_sequence INTEGER NOT NULL UNIQUE CHECK(admission_sequence>=1),\n    source_digest TEXT NOT NULL CHECK(length(source_digest)=64),\n    source_json TEXT NOT NULL CHECK(json_valid(source_json)),\n    execution_parent_item_id TEXT,\n    child_item_id TEXT,\n    child_plan_digest TEXT CHECK(child_plan_digest IS NULL OR length(child_plan_digest)=64),\n    state TEXT NOT NULL CHECK(state IN ('pending','routed','cancelled')),\n    CHECK((child_item_id IS NULL AND child_plan_digest IS NULL) OR\n      (child_item_id IS NOT NULL AND child_plan_digest IS NOT NULL AND execution_parent_item_id IS NOT NULL)),\n    CHECK(state != 'routed' OR child_item_id IS NOT NULL)\n  ) STRICT;\n  CREATE INDEX delivery_work_item_replies_pending ON delivery_work_item_replies(state, admission_sequence);\n  CREATE TRIGGER delivery_work_item_replies_source_immutable\n    BEFORE UPDATE OF inbox_id,stream_key,admission_sequence,source_digest,source_json ON delivery_work_item_replies\n    BEGIN SELECT RAISE(ABORT, 'work item reply source is immutable'); END;\n  CREATE TRIGGER delivery_work_item_replies_selection_immutable BEFORE UPDATE ON delivery_work_item_replies\n    WHEN (OLD.execution_parent_item_id IS NOT NULL AND NEW.execution_parent_item_id IS NOT OLD.execution_parent_item_id)\n      OR (OLD.child_item_id IS NOT NULL AND (NEW.child_item_id IS NOT OLD.child_item_id OR NEW.child_plan_digest IS NOT OLD.child_plan_digest))\n      OR (OLD.state = 'cancelled' AND NEW.state != 'cancelled')\n      OR (OLD.state = 'routed' AND NEW.state = 'pending')\n    BEGIN SELECT RAISE(ABORT, 'work item reply selection is immutable'); END;\n  CREATE TRIGGER delivery_work_item_replies_no_delete BEFORE DELETE ON delivery_work_item_replies\n    BEGIN SELECT RAISE(ABORT, 'work item reply source is durable'); END;\n";
+//# sourceMappingURL=work-item-replies-schema.d.ts.map

package/lib/work-item-replies-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-replies-schema.d.ts","sourceRoot":"","sources":["../src/work-item-replies-schema.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,eAAO,MAAM,qBAAqB,6zFA0CjC,CAAA"}

package/lib/work-item-replies-schema.js

@@ -0,0 +1,45 @@
+/** Delivery-owned authority and handoff journals. Input and report identity never change after admission. */
+export const workItemRepliesSchema = `
+  CREATE TABLE delivery_work_item_reports (
+    outbox_id TEXT PRIMARY KEY REFERENCES outbox_messages(id),
+    intent_hash TEXT NOT NULL CHECK(length(intent_hash)=64),
+    target_json TEXT NOT NULL CHECK(json_valid(target_json)),
+    binding_json TEXT NOT NULL CHECK(json_valid(binding_json))
+  ) STRICT;
+  CREATE TRIGGER delivery_work_item_reports_no_update BEFORE UPDATE ON delivery_work_item_reports
+    BEGIN SELECT RAISE(ABORT, 'work item report target is immutable'); END;
+  CREATE TRIGGER delivery_work_item_reports_no_delete BEFORE DELETE ON delivery_work_item_reports
+    BEGIN SELECT RAISE(ABORT, 'work item report target is durable'); END;
+  CREATE TABLE delivery_work_item_reply_streams (
+    stream_key TEXT PRIMARY KEY CHECK(length(stream_key)=64),
+    head_item_id TEXT NOT NULL,
+    revision INTEGER NOT NULL CHECK(revision>=0)
+  ) STRICT;
+  CREATE TABLE delivery_work_item_replies (
+    inbox_id TEXT PRIMARY KEY REFERENCES inbox_messages(id),
+    stream_key TEXT NOT NULL REFERENCES delivery_work_item_reply_streams(stream_key),
+    admission_sequence INTEGER NOT NULL UNIQUE CHECK(admission_sequence>=1),
+    source_digest TEXT NOT NULL CHECK(length(source_digest)=64),
+    source_json TEXT NOT NULL CHECK(json_valid(source_json)),
+    execution_parent_item_id TEXT,
+    child_item_id TEXT,
+    child_plan_digest TEXT CHECK(child_plan_digest IS NULL OR length(child_plan_digest)=64),
+    state TEXT NOT NULL CHECK(state IN ('pending','routed','cancelled')),
+    CHECK((child_item_id IS NULL AND child_plan_digest IS NULL) OR
+      (child_item_id IS NOT NULL AND child_plan_digest IS NOT NULL AND execution_parent_item_id IS NOT NULL)),
+    CHECK(state != 'routed' OR child_item_id IS NOT NULL)
+  ) STRICT;
+  CREATE INDEX delivery_work_item_replies_pending ON delivery_work_item_replies(state, admission_sequence);
+  CREATE TRIGGER delivery_work_item_replies_source_immutable
+    BEFORE UPDATE OF inbox_id,stream_key,admission_sequence,source_digest,source_json ON delivery_work_item_replies
+    BEGIN SELECT RAISE(ABORT, 'work item reply source is immutable'); END;
+  CREATE TRIGGER delivery_work_item_replies_selection_immutable BEFORE UPDATE ON delivery_work_item_replies
+    WHEN (OLD.execution_parent_item_id IS NOT NULL AND NEW.execution_parent_item_id IS NOT OLD.execution_parent_item_id)
+      OR (OLD.child_item_id IS NOT NULL AND (NEW.child_item_id IS NOT OLD.child_item_id OR NEW.child_plan_digest IS NOT OLD.child_plan_digest))
+      OR (OLD.state = 'cancelled' AND NEW.state != 'cancelled')
+      OR (OLD.state = 'routed' AND NEW.state = 'pending')
+    BEGIN SELECT RAISE(ABORT, 'work item reply selection is immutable'); END;
+  CREATE TRIGGER delivery_work_item_replies_no_delete BEFORE DELETE ON delivery_work_item_replies
+    BEGIN SELECT RAISE(ABORT, 'work item reply source is durable'); END;
+`;
+//# sourceMappingURL=work-item-replies-schema.js.map

package/lib/work-item-replies-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-replies-schema.js","sourceRoot":"","sources":["../src/work-item-replies-schema.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CpC,CAAA"}