@dsh-enhanced/assistant-growth-contract 0.1.47 → 0.1.49

package/lib/revision-regression.js

@@ -0,0 +1,155 @@
+import { createPublicKey, verify } from 'node:crypto';
+import { canonicalGrowthJson } from './canonical.js';
+import { validatePluginRevisionParentBinding } from './revision-verification.js';
+const domain = 'assistant-growth/revision-regression/v1\0';
+const digest = /^[a-f0-9]{64}$/u;
+const identifier = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,199}$/u;
+const keys = ['protocol', 'verificationId', 'authority', 'plan', 'parent', 'source', 'contractDigest',
+    'schemaDigest', 'environment', 'model', 'candidateVerificationDigest', 'sourceDigest',
+    'schemaCompatibilityDigest', 'budget', 'observations', 'verifiedAt', 'expiresAt'];
+function fail(label) { throw new Error(`invalid plugin revision regression ${label}`); }
+function record(value, expected, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)
+        || Object.getPrototypeOf(value) !== Object.prototype || Object.getOwnPropertySymbols(value).length
+        || !Object.values(Object.getOwnPropertyDescriptors(value)).every(item => item.enumerable && 'value' in item)
+        || Object.keys(value).sort().join('\0') !== [...expected].sort().join('\0'))
+        fail(label);
+    return value;
+}
+function id(value, label) {
+    if (typeof value !== 'string' || !identifier.test(value) || value.normalize('NFC') !== value)
+        fail(label);
+}
+function sha(value, label) {
+    if (typeof value !== 'string' || !digest.test(value))
+        fail(label);
+}
+function integer(value, label, min, max) {
+    if (!Number.isSafeInteger(value) || Number(value) < min || Number(value) > max)
+        fail(label);
+}
+function text(value, label, maximum = 500) {
+    if (typeof value !== 'string' || !value || !value.isWellFormed() || value.normalize('NFC').trim() !== value
+        || Buffer.byteLength(value) > maximum || /[\p{Cc}]/u.test(value))
+        fail(label);
+}
+function rows(value) {
+    if (!Array.isArray(value) || value.length < 2 || value.length > 8
+        || Object.getPrototypeOf(value) !== Array.prototype || Object.getOwnPropertySymbols(value).length
+        || Object.getOwnPropertyNames(value).length !== value.length + 1
+        || !Object.entries(Object.getOwnPropertyDescriptors(value)).every(([key, entry]) => key === 'length'
+            || /^(0|[1-9][0-9]*)$/u.test(key) && entry.enumerable && 'value' in entry)
+        || !Array.from({ length: value.length }, (_, index) => Object.hasOwn(value, index)).every(Boolean))
+        fail('observation array');
+    return value;
+}
+export function validateRevisionRegressionAcceptanceAuthorityRef(value) {
+    const ref = record(value, ['protocol', 'authorityId', 'keyId', 'authorityDigest', 'namePrefix', 'expiresAt'], 'authority');
+    if (ref.protocol !== 'assistant-growth/revision-regression-acceptance-authority/v1')
+        fail('authority protocol');
+    id(ref.authorityId, 'authorityId');
+    id(ref.keyId, 'keyId');
+    sha(ref.authorityDigest, 'authorityDigest');
+    if (typeof ref.namePrefix !== 'string' || ref.namePrefix.length < 2 || ref.namePrefix.length > 48
+        || !/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*-$/u.test(ref.namePrefix))
+        fail('namePrefix');
+    integer(ref.expiresAt, 'authority expiry', 1, 8_640_000_000_000_000);
+}
+export function validatePluginRevisionRegressionRequest(value) {
+    const request = record(value, ['protocol', 'planId'], 'request');
+    if (request.protocol !== 'assistant-growth/revision-regression-request/v1')
+        fail('request protocol');
+    id(request.planId, 'request planId');
+}
+export function validatePluginRevisionRegressionCertificate(value) {
+    const item = record(value, [...keys, 'signature'], 'certificate');
+    if (item.protocol !== 'assistant-growth/revision-regression/v1')
+        fail('protocol');
+    id(item.verificationId, 'verificationId');
+    validateRevisionRegressionAcceptanceAuthorityRef(item.authority);
+    const authority = item.authority;
+    const plan = record(item.plan, ['id', 'digest', 'name', 'sourceTreeDigest', 'sourcePatchDigest', 'artifactSha256',
+        'artifactBytes', 'generatorDigest'], 'plan');
+    id(plan.id, 'plan id');
+    if (typeof plan.name !== 'string' || plan.name.length > 64 || !/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u.test(plan.name)
+        || !plan.name.startsWith(authority.namePrefix))
+        fail('plan name');
+    for (const key of ['digest', 'sourceTreeDigest', 'sourcePatchDigest', 'artifactSha256', 'generatorDigest'])
+        sha(plan[key], key);
+    integer(plan.artifactBytes, 'artifact bytes', 1, 512 * 1024);
+    validatePluginRevisionParentBinding(item.parent);
+    const source = record(item.source, ['referenceDigest', 'ownerDigest', 'growthRunDigest'], 'source');
+    for (const key of ['referenceDigest', 'ownerDigest', 'growthRunDigest'])
+        sha(source[key], key);
+    for (const key of ['contractDigest', 'schemaDigest', 'candidateVerificationDigest', 'sourceDigest',
+        'schemaCompatibilityDigest'])
+        sha(item[key], key);
+    const environment = record(item.environment, ['node', 'cordis', 'tools', 'systemPrompt'], 'environment');
+    for (const key of ['node', 'cordis', 'tools', 'systemPrompt']) {
+        if (typeof environment[key] !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9.+-]{0,63}$/u.test(environment[key]))
+            fail(key);
+    }
+    const model = record(item.model, ['provider', 'model',
+        ...(item.model && typeof item.model === 'object' && Object.hasOwn(item.model, 'reasoningEffort') ? ['reasoningEffort'] : [])], 'model');
+    text(model.provider, 'provider');
+    text(model.model, 'model');
+    if (Object.hasOwn(model, 'reasoningEffort'))
+        text(model.reasoningEffort, 'reasoningEffort');
+    const budget = record(item.budget, ['maxCases', 'maxDurationMs', 'maxRuns'], 'budget');
+    integer(budget.maxCases, 'cases', 2, 8);
+    integer(budget.maxDurationMs, 'duration', 1_000, 1_800_000);
+    integer(budget.maxRuns, 'runs', 2 + 2 * Number(budget.maxCases), 64);
+    const observations = rows(item.observations);
+    if (observations.length > Number(budget.maxCases))
+        fail('observations exceed budget');
+    const cases = new Set(), jobs = new Set();
+    for (const entry of observations) {
+        const observation = record(entry, ['caseId', 'parent', 'candidate'], 'observation');
+        id(observation.caseId, 'caseId');
+        if (cases.has(String(observation.caseId)))
+            fail('duplicate case');
+        cases.add(String(observation.caseId));
+        for (const side of ['parent', 'candidate']) {
+            const result = record(observation[side], ['jobId', 'operationDigest', 'observationDigest'], `${side} observation`);
+            id(result.jobId, `${side} jobId`);
+            sha(result.operationDigest, `${side} operationDigest`);
+            sha(result.observationDigest, `${side} observationDigest`);
+            if (jobs.has(String(result.jobId)))
+                fail('duplicate observation job');
+            jobs.add(String(result.jobId));
+        }
+    }
+    integer(item.verifiedAt, 'verifiedAt', 1, 8_640_000_000_000_000);
+    integer(item.expiresAt, 'expiresAt', 1, 8_640_000_000_000_000);
+    if (Number(item.expiresAt) <= Number(item.verifiedAt) || Number(item.expiresAt) > authority.expiresAt)
+        fail('certificate expiry');
+    if (typeof item.signature !== 'string' || !/^[A-Za-z0-9_-]{86}$/u.test(item.signature)
+        || Buffer.from(item.signature, 'base64url').length !== 64
+        || Buffer.from(item.signature, 'base64url').toString('base64url') !== item.signature)
+        fail('signature');
+    if (Buffer.byteLength(canonicalGrowthJson(item)) > 65_536)
+        fail('certificate bytes');
+}
+export function pluginRevisionRegressionSigningPayload(value) {
+    const body = record(value, keys, 'signing body');
+    validatePluginRevisionRegressionCertificate({ ...body, signature: 'A'.repeat(86) });
+    return domain + canonicalGrowthJson(body);
+}
+/** Signature and authority equality only; consumers must recheck parent certificate bindings, provenance and source currency. */
+export function verifyPluginRevisionRegressionCertificate(value, authority, publicKey, now = Date.now()) {
+    try {
+        validateRevisionRegressionAcceptanceAuthorityRef(authority);
+        validatePluginRevisionRegressionCertificate(value);
+        if (!Number.isSafeInteger(now) || value.verifiedAt > now || value.expiresAt <= now
+            || canonicalGrowthJson(value.authority) !== canonicalGrowthJson(authority))
+            return false;
+        const { signature, ...body } = value;
+        const key = createPublicKey(publicKey);
+        return key.asymmetricKeyType === 'ed25519'
+            && verify(null, Buffer.from(pluginRevisionRegressionSigningPayload(body)), key, Buffer.from(signature, 'base64url'));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=revision-regression.js.map

package/lib/revision-regression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-regression.js","sourceRoot":"","sources":["../src/revision-regression.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,mCAAmC,EACE,MAAM,4BAA4B,CAAA;AA+ChF,MAAM,MAAM,GAAG,2CAA2C,CAAA;AAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,UAAU,GAAG,uCAAuC,CAAA;AAC1D,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB;IACnG,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,6BAA6B,EAAE,cAAc;IACrF,2BAA2B,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,CAAU,CAAA;AAE5F,SAAS,IAAI,CAAC,KAAa,IAAW,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;AACtG,SAAS,MAAM,CAAC,KAAc,EAAE,QAA2B,EAAE,KAAa;IACxE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAC1D,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM;WAC/F,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,IAAI,CAAC;WACzG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1F,OAAO,KAAgC,CAAA;AACzC,CAAC;AACD,SAAS,EAAE,CAAC,KAAc,EAAE,KAAa;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,IAAI,CAAC,KAAK,CAAC,CAAA;AAC3G,CAAC;AACD,SAAS,GAAG,CAAC,KAAc,EAAE,KAAa;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW,EAAE,GAAW;IACtE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG;QAAE,IAAI,CAAC,KAAK,CAAC,CAAA;AAC7F,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,OAAO,GAAG,GAAG;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK;WACtG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,KAAK,CAAC,CAAA;AACjF,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;WAC5D,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM;WAC9F,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;WAC7D,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ;eAC/F,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,OAAO,IAAI,KAAK,CAAC;WACzE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC/H,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gDAAgD,CAAC,KAAc;IAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAA;IAC1H,IAAI,GAAG,CAAC,QAAQ,KAAK,8DAA8D;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAA;IAC/G,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAAC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;IACvG,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE;WAC5F,CAAC,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,YAAY,CAAC,CAAA;IAClF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAA;AACtE,CAAC;AAED,MAAM,UAAU,uCAAuC,CAAC,KAAc;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAA;IAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,iDAAiD;QAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACpG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,2CAA2C,CAAC,KAAc;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC,EAAE,aAAa,CAAC,CAAA;IACjE,IAAI,IAAI,CAAC,QAAQ,KAAK,yCAAyC;QAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACjF,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;IACzC,gDAAgD,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB;QAC/G,eAAe,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAA;IAC9C,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;IACtB,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;WAC5G,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IACnE,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IAC/H,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,CAAA;IAC5D,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAA;IACnG,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,CAAC;QAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IAC9F,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,cAAc,EAAE,6BAA6B,EAAE,cAAc;QAChG,2BAA2B,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IACnD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,aAAa,CAAC,CAAA;IACxG,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;QAC9D,IAAI,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAW,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/H,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO;QACnD,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IACzI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC;QAAE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;IAC3F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAA;IACtF,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACvC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;IAC3D,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC5C,IAAI,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IACrF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,EAAE,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IACzD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,aAAa,CAAC,CAAA;QACnF,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAChC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACjE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;QACrC,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,EAAE,GAAG,IAAI,cAAc,CAAC,CAAA;YAClH,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,IAAI,kBAAkB,CAAC,CAAA;YACzF,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAA;YAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;YACrE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAA;IAChE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAA;IAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,SAAS;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAA;IACjI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;WACjF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,MAAM,KAAK,EAAE;WACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IACzG,IAAI,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;AACtF,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,KAA6D;IAClH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;IAChD,2CAA2C,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACnF,OAAO,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;AAC3C,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,yCAAyC,CAAC,KAAc,EACtE,SAAmD,EAAE,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACxF,IAAI,CAAC;QACH,gDAAgD,CAAC,SAAS,CAAC,CAAA;QAC3D,2CAA2C,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;eAC7E,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,mBAAmB,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAA;QAC1F,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;QACpC,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;QACtC,OAAO,GAAG,CAAC,iBAAiB,KAAK,SAAS;eACrC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;IACxH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAC1B,CAAC"}

package/lib/revision-verification.d.ts

@@ -0,0 +1,42 @@
+import { type PluginCreationVerificationCertificate } from './creation-verification.js';
+/** Owner policy frozen before a revision candidate can be written. */
+export interface RevisionAcceptanceAuthorityRef {
+    protocol: 'assistant-growth/revision-acceptance-authority/v1';
+    authorityId: string;
+    keyId: string;
+    authorityDigest: string;
+    namePrefix: string;
+    expiresAt: number;
+}
+/** Exact adopted version and retained source on which the revision is based. */
+export interface PluginRevisionParentBinding {
+    planId: string;
+    certificateDigest: string;
+    artifactSha256: string;
+    sourceArchiveDigest: string;
+    sourceDigest: string;
+}
+export type PluginRevisionVerificationCertificate = Omit<PluginCreationVerificationCertificate, 'protocol' | 'authority'> & {
+    protocol: 'assistant-growth/revision-verification/v1';
+    authority: RevisionAcceptanceAuthorityRef;
+    parent: PluginRevisionParentBinding;
+};
+/** Host-only request; the producer must reread the current parent and candidate. */
+export interface PluginRevisionVerificationRequest {
+    protocol: 'assistant-growth/revision-verification-request/v1';
+    planId: string;
+}
+export type PluginRevisionVerificationResult = {
+    status: 'verified';
+    certificate: PluginRevisionVerificationCertificate;
+} | {
+    status: 'rejected' | 'unknown';
+    reason: string;
+};
+export declare function validateRevisionAcceptanceAuthorityRef(value: unknown): asserts value is RevisionAcceptanceAuthorityRef;
+export declare function validatePluginRevisionParentBinding(value: unknown): asserts value is PluginRevisionParentBinding;
+export declare function validatePluginRevisionVerificationCertificate(value: unknown): asserts value is PluginRevisionVerificationCertificate;
+export declare function pluginRevisionVerificationSigningPayload(value: Omit<PluginRevisionVerificationCertificate, 'signature'>): string;
+/** Signature and authority equality only; consumers must also recheck provenance and parent currency. */
+export declare function verifyPluginRevisionVerificationCertificate(value: unknown, authority: RevisionAcceptanceAuthorityRef, publicKey: string, now?: number): value is PluginRevisionVerificationCertificate;
+//# sourceMappingURL=revision-verification.d.ts.map

package/lib/revision-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-verification.d.ts","sourceRoot":"","sources":["../src/revision-verification.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,qCAAqC,EAAE,MAAM,4BAA4B,CAAA;AAEhF,sEAAsE;AACtE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,mDAAmD,CAAA;IAC7D,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,gFAAgF;AAChF,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,MAAM,qCAAqC,GAAG,IAAI,CAAC,qCAAqC,EAAE,UAAU,GAAG,WAAW,CAAC,GAAG;IAC1H,QAAQ,EAAE,2CAA2C,CAAA;IACrD,SAAS,EAAE,8BAA8B,CAAA;IACzC,MAAM,EAAE,2BAA2B,CAAA;CACpC,CAAA;AAED,oFAAoF;AACpF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,mDAAmD,CAAA;IAC7D,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,gCAAgC,GACxC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,qCAAqC,CAAA;CAAE,GAC1E;IAAE,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAiBtD,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,8BAA8B,CAWtH;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,2BAA2B,CAOhH;AAED,wBAAgB,6CAA6C,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,qCAAqC,CAYpI;AAED,wBAAgB,wCAAwC,CAAC,KAAK,EAAE,IAAI,CAAC,qCAAqC,EAAE,WAAW,CAAC,GAAG,MAAM,CAIhI;AAED,yGAAyG;AACzG,wBAAgB,2CAA2C,CAAC,KAAK,EAAE,OAAO,EACxE,SAAS,EAAE,8BAA8B,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,KAAK,IAAI,qCAAqC,CAWhI"}

package/lib/revision-verification.js

@@ -0,0 +1,82 @@
+import { createPublicKey, verify } from 'node:crypto';
+import { canonicalGrowthJson } from './canonical.js';
+import { validatePluginCreationVerificationCertificate } from './creation-verification.js';
+const domain = 'assistant-growth/revision-verification/v1\0';
+const digest = /^[a-f0-9]{64}$/u;
+const identifier = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,199}$/u;
+const certificateKeys = ['protocol', 'verificationId', 'authority', 'plan', 'parent', 'source', 'contractDigest',
+    'schemaDigest', 'environment', 'model', 'budget', 'sessions', 'observations', 'reviewDigest', 'verifiedAt', 'expiresAt'];
+function fail(label) { throw new Error(`invalid plugin revision verification ${label}`); }
+function record(value, keys, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)
+        || Object.getPrototypeOf(value) !== Object.prototype || Object.getOwnPropertySymbols(value).length
+        || !Object.values(Object.getOwnPropertyDescriptors(value)).every(item => item.enumerable && 'value' in item)
+        || Object.keys(value).sort().join('\0') !== [...keys].sort().join('\0'))
+        fail(label);
+    return value;
+}
+export function validateRevisionAcceptanceAuthorityRef(value) {
+    const ref = record(value, ['protocol', 'authorityId', 'keyId', 'authorityDigest', 'namePrefix', 'expiresAt'], 'authority');
+    if (ref.protocol !== 'assistant-growth/revision-acceptance-authority/v1')
+        fail('authority protocol');
+    for (const key of ['authorityId', 'keyId']) {
+        if (typeof ref[key] !== 'string' || !identifier.test(ref[key]) || ref[key].normalize('NFC') !== ref[key])
+            fail(key);
+    }
+    if (typeof ref.authorityDigest !== 'string' || !digest.test(ref.authorityDigest))
+        fail('authorityDigest');
+    if (typeof ref.namePrefix !== 'string' || ref.namePrefix.length < 2 || ref.namePrefix.length > 48
+        || !/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*-$/u.test(ref.namePrefix))
+        fail('namePrefix');
+    if (!Number.isSafeInteger(ref.expiresAt) || Number(ref.expiresAt) < 1
+        || Number(ref.expiresAt) > 8_640_000_000_000_000)
+        fail('authority expiry');
+}
+export function validatePluginRevisionParentBinding(value) {
+    const parent = record(value, ['planId', 'certificateDigest', 'artifactSha256', 'sourceArchiveDigest', 'sourceDigest'], 'parent');
+    if (typeof parent.planId !== 'string' || !identifier.test(parent.planId)
+        || parent.planId.normalize('NFC') !== parent.planId)
+        fail('parent planId');
+    for (const key of ['certificateDigest', 'artifactSha256', 'sourceArchiveDigest', 'sourceDigest']) {
+        if (typeof parent[key] !== 'string' || !digest.test(parent[key]))
+            fail(`parent ${key}`);
+    }
+}
+export function validatePluginRevisionVerificationCertificate(value) {
+    const item = record(value, [...certificateKeys, 'signature'], 'certificate');
+    if (item.protocol !== 'assistant-growth/revision-verification/v1')
+        fail('protocol');
+    const authority = item.authority;
+    validateRevisionAcceptanceAuthorityRef(authority);
+    validatePluginRevisionParentBinding(item.parent);
+    const { parent: _parent, ...creationShape } = item;
+    validatePluginCreationVerificationCertificate({ ...creationShape,
+        protocol: 'assistant-growth/creation-verification/v1',
+        authority: { ...authority, protocol: 'assistant-growth/creation-acceptance-authority/v1' },
+    });
+    if (Buffer.byteLength(canonicalGrowthJson(item)) > 65_536)
+        fail('certificate bytes');
+}
+export function pluginRevisionVerificationSigningPayload(value) {
+    const body = record(value, certificateKeys, 'signing body');
+    validatePluginRevisionVerificationCertificate({ ...body, signature: 'A'.repeat(86) });
+    return domain + canonicalGrowthJson(body);
+}
+/** Signature and authority equality only; consumers must also recheck provenance and parent currency. */
+export function verifyPluginRevisionVerificationCertificate(value, authority, publicKey, now = Date.now()) {
+    try {
+        validateRevisionAcceptanceAuthorityRef(authority);
+        validatePluginRevisionVerificationCertificate(value);
+        if (!Number.isSafeInteger(now) || value.verifiedAt > now || value.expiresAt <= now
+            || canonicalGrowthJson(value.authority) !== canonicalGrowthJson(authority))
+            return false;
+        const { signature, ...body } = value;
+        const key = createPublicKey(publicKey);
+        return key.asymmetricKeyType === 'ed25519'
+            && verify(null, Buffer.from(pluginRevisionVerificationSigningPayload(body)), key, Buffer.from(signature, 'base64url'));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=revision-verification.js.map

package/lib/revision-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-verification.js","sourceRoot":"","sources":["../src/revision-verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,6CAA6C,EACR,MAAM,4BAA4B,CAAA;AAqChF,MAAM,MAAM,GAAG,6CAA6C,CAAA;AAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,UAAU,GAAG,uCAAuC,CAAA;AAC1D,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB;IAC9G,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,CAAU,CAAA;AAEnI,SAAS,IAAI,CAAC,KAAa,IAAW,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;AACxG,SAAS,MAAM,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa;IACpE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAC1D,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM;WAC/F,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,IAAI,CAAC;WACzG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IACtF,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,KAAc;IACnE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAA;IAC1H,IAAI,GAAG,CAAC,QAAQ,KAAK,mDAAmD;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAA;IACpG,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACrH,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACzG,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE;WAC5F,CAAC,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,YAAY,CAAC,CAAA;IAClF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;WAChE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,qBAAqB;QAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;AAC9E,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,KAAc;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;IAChI,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;WACnE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,eAAe,CAAC,CAAA;IAC5E,KAAK,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,cAAc,CAAC,EAAE,CAAC;QACjG,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAA;IACzF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6CAA6C,CAAC,KAAc;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,eAAe,EAAE,WAAW,CAAC,EAAE,aAAa,CAAC,CAAA;IAC5E,IAAI,IAAI,CAAC,QAAQ,KAAK,2CAA2C;QAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACnF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IAChC,sCAAsC,CAAC,SAAS,CAAC,CAAA;IACjD,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,EAAE,GAAG,IAAI,CAAA;IAClD,6CAA6C,CAAC,EAAE,GAAG,aAAa;QAC9D,QAAQ,EAAE,2CAA2C;QACrD,SAAS,EAAE,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,mDAAmD,EAAE;KAC3F,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;AACtF,CAAC;AAED,MAAM,UAAU,wCAAwC,CAAC,KAA+D;IACtH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,cAAc,CAAC,CAAA;IAC3D,6CAA6C,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACrF,OAAO,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;AAC3C,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,2CAA2C,CAAC,KAAc,EACxE,SAAyC,EAAE,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC9E,IAAI,CAAC;QACH,sCAAsC,CAAC,SAAS,CAAC,CAAA;QACjD,6CAA6C,CAAC,KAAK,CAAC,CAAA;QACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;eAC7E,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,mBAAmB,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAA;QAC1F,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;QACpC,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;QACtC,OAAO,GAAG,CAAC,iBAAiB,KAAK,SAAS;eACrC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;IAC1H,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAC1B,CAAC"}

package/lib/source-owner.d.ts

@@ -0,0 +1,17 @@
+/** Original source provenance survives a new conversation Session, never owner rotation. */
+export interface SourceOwnerReceipt {
+    readonly receiptVersion: 2;
+    readonly authorityId: string;
+    readonly authorityHash: string;
+    readonly principalId: string;
+    readonly principalRecordId: string;
+    readonly principalVersion: number;
+    readonly workspace: string;
+    readonly agentPreset: string;
+    readonly bindingVersion: number;
+    readonly generation: number;
+}
+/** Only a current authenticated route may continue an older source's finite authority.
+ * This does not renew a grant, change immutable evidence, or authorize a caller Agent. */
+export declare function isSourceOwnerContinuation(current: SourceOwnerReceipt, original: SourceOwnerReceipt): boolean;
+//# sourceMappingURL=source-owner.d.ts.map

package/lib/source-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-owner.d.ts","sourceRoot":"","sources":["../src/source-owner.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED;0FAC0F;AAC1F,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAc5G"}

package/lib/source-owner.js

@@ -0,0 +1,19 @@
+/** Only a current authenticated route may continue an older source's finite authority.
+ * This does not renew a grant, change immutable evidence, or authorize a caller Agent. */
+export function isSourceOwnerContinuation(current, original) {
+    const stable = ['authorityId', 'authorityHash', 'principalId', 'principalRecordId',
+        'workspace', 'agentPreset'];
+    for (const receipt of [current, original]) {
+        if (!receipt || receipt.receiptVersion !== 2
+            || stable.some(key => typeof receipt[key] !== 'string' || !receipt[key] || receipt[key].trim() !== receipt[key])
+            || !/^[a-f0-9]{64}$/u.test(receipt.authorityHash)
+            || ![receipt.principalVersion, receipt.bindingVersion, receipt.generation]
+                .every(value => Number.isSafeInteger(value) && value > 0))
+            return false;
+    }
+    return stable.every(key => current[key] === original[key])
+        && current.principalVersion === original.principalVersion
+        && current.generation >= original.generation
+        && (current.generation !== original.generation || current.bindingVersion === original.bindingVersion);
+}
+//# sourceMappingURL=source-owner.js.map

package/lib/source-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-owner.js","sourceRoot":"","sources":["../src/source-owner.ts"],"names":[],"mappings":"AAcA;0FAC0F;AAC1F,MAAM,UAAU,yBAAyB,CAAC,OAA2B,EAAE,QAA4B;IACjG,MAAM,MAAM,GAAG,CAAC,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,mBAAmB;QAChF,WAAW,EAAE,aAAa,CAAU,CAAA;IACtC,KAAK,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC;eACvC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;eAC7G,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;eAC9C,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC;iBACvE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC;WACrD,OAAO,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;WACtD,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;WACzC,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,CAAC,CAAA;AACzG,CAAC"}

package/lib/source-run.d.ts

@@ -0,0 +1,76 @@
+import { type CreationAcceptanceAuthorityRef } from './creation-verification.js';
+import { type RevisionAcceptanceAuthorityRef } from './revision-verification.js';
+import { type RevisionRegressionAcceptanceAuthorityRef } from './revision-regression.js';
+/** Private Host provenance, never candidate input or a semantic acceptance oracle. */
+export interface SourceGrowthRunBinding {
+    protocol: 'assistant-growth/source-run/v1';
+    runId: string;
+    intentDigest: string;
+    configDigest: string;
+    ownerDigest: string;
+    source: {
+        outcomeId: string;
+        projection: {
+            subjectKind: 'foreground-turn';
+            subjectRef: string;
+            version: number;
+            digest: string;
+            disposition: 'upsert';
+            evidenceOutcomeId?: string;
+        };
+        sourceDigest: string;
+    };
+    model: {
+        provider: string;
+        model: string;
+        reasoningEffort?: string;
+    };
+    modelOrigin: 'explicit-growth-override' | 'inherited-owner-task';
+    /** Owner policy frozen before the first author model call; absent on historical runs. */
+    creationAcceptance?: CreationAcceptanceAuthorityRef;
+    /** Independent owner policy for revising an adopted version; absent on historical runs. */
+    revisionAcceptance?: RevisionAcceptanceAuthorityRef;
+    /** Independent parent-behavior policy; absent on historical runs and never inferred from revisionAcceptance. */
+    revisionRegressionAcceptance?: RevisionRegressionAcceptanceAuthorityRef;
+    budget: {
+        budgetId: string;
+        amount: number;
+        maxModelCalls: number;
+        maxToolCalls: number;
+        maxOutputTokens: number;
+        maxDurationMs: number;
+        maxPlansPerWake: number;
+    };
+    native: {
+        owner: 'assistant-growth-usage';
+        automationId: string;
+        definitionHash: string;
+        occurrenceId: string;
+    };
+    sessionId: string;
+    toolContractDigest: string;
+    executionContractDigest: string;
+    createdAt: number;
+    /** Generation and enqueue deadline, not a renewed build/adoption allowance. */
+    generationDeadlineAt: number;
+    /** Original durable source window; later stages also need their own grants. */
+    expiresAt: number;
+}
+export interface SourceGrowthRunRequest {
+    runId: string;
+    intentDigest: string;
+}
+/** Transient Host provider absence, distinct from an invalidated durable run. */
+export declare class SourceGrowthRunUnavailableError extends Error {
+}
+export interface SourceGrowthRunProducer {
+    protocol: 'assistant-growth-source-run-producer/v1';
+    /** Reread the durable run and current owner/source/config; no fallback. */
+    inspect(input: SourceGrowthRunRequest): SourceGrowthRunBinding | undefined;
+}
+/** Strict shape checking is necessary but does not authenticate the producer. */
+export declare function validateSourceGrowthRunBinding(value: unknown): asserts value is SourceGrowthRunBinding;
+/** Matches the existing Control Plane evidence canonicalization, including absent optional feedback. */
+export declare function sourceGrowthEvidenceDigest(value: unknown): string;
+export declare function sourceGrowthRunDigest(binding: SourceGrowthRunBinding): string;
+//# sourceMappingURL=source-run.d.ts.map

package/lib/source-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-run.d.ts","sourceRoot":"","sources":["../src/source-run.ts"],"names":[],"mappings":"AAEA,OAAO,EAA0C,KAAK,8BAA8B,EAAE,MAAM,4BAA4B,CAAA;AACxH,OAAO,EAA0C,KAAK,8BAA8B,EAAE,MAAM,4BAA4B,CAAA;AACxH,OAAO,EAAoD,KAAK,wCAAwC,EAAE,MAAM,0BAA0B,CAAA;AAE1I,sFAAsF;AACtF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,gCAAgC,CAAA;IAC1C,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE;YACV,WAAW,EAAE,iBAAiB,CAAA;YAC9B,UAAU,EAAE,MAAM,CAAA;YAClB,OAAO,EAAE,MAAM,CAAA;YACf,MAAM,EAAE,MAAM,CAAA;YACd,WAAW,EAAE,QAAQ,CAAA;YACrB,iBAAiB,CAAC,EAAE,MAAM,CAAA;SAC3B,CAAA;QACD,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;IACD,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACpE,WAAW,EAAE,0BAA0B,GAAG,sBAAsB,CAAA;IAChE,yFAAyF;IACzF,kBAAkB,CAAC,EAAE,8BAA8B,CAAA;IACnD,2FAA2F;IAC3F,kBAAkB,CAAC,EAAE,8BAA8B,CAAA;IACnD,gHAAgH;IAChH,4BAA4B,CAAC,EAAE,wCAAwC,CAAA;IACvE,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAA;QAChB,MAAM,EAAE,MAAM,CAAA;QACd,aAAa,EAAE,MAAM,CAAA;QACrB,YAAY,EAAE,MAAM,CAAA;QACpB,eAAe,EAAE,MAAM,CAAA;QACvB,aAAa,EAAE,MAAM,CAAA;QACrB,eAAe,EAAE,MAAM,CAAA;KACxB,CAAA;IACD,MAAM,EAAE;QACN,KAAK,EAAE,wBAAwB,CAAA;QAC/B,YAAY,EAAE,MAAM,CAAA;QACpB,cAAc,EAAE,MAAM,CAAA;QACtB,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;IACD,SAAS,EAAE,MAAM,CAAA;IACjB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,+EAA+E;IAC/E,oBAAoB,EAAE,MAAM,CAAA;IAC5B,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,sBAAsB;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE;AAC/E,iFAAiF;AACjF,qBAAa,+BAAgC,SAAQ,KAAK;CAAG;AAC7D,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,yCAAyC,CAAA;IACnD,2EAA2E;IAC3E,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,sBAAsB,GAAG,SAAS,CAAA;CAC3E;AAsBD,iFAAiF;AACjF,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAuDtG;AAED,wGAAwG;AACxG,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAsBjE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAG7E"}

package/lib/source-run.js

@@ -0,0 +1,145 @@
+import { createHash } from 'node:crypto';
+import { assertExactGrowthKeys, isGrowthRecord } from './canonical.js';
+import { validateCreationAcceptanceAuthorityRef } from './creation-verification.js';
+import { validateRevisionAcceptanceAuthorityRef } from './revision-verification.js';
+import { validateRevisionRegressionAcceptanceAuthorityRef } from './revision-regression.js';
+/** Transient Host provider absence, distinct from an invalidated durable run. */
+export class SourceGrowthRunUnavailableError extends Error {
+}
+const digest = /^[a-f0-9]{64}$/u;
+function invalid(label) { throw new Error(`invalid source growth run ${label}`); }
+function record(value, keys, label) {
+    if (!isGrowthRecord(value))
+        invalid(label);
+    if (Object.getOwnPropertySymbols(value).length
+        || !Object.values(Object.getOwnPropertyDescriptors(value)).every(item => item.enumerable && 'value' in item))
+        invalid(label);
+    assertExactGrowthKeys(value, keys, `source growth run ${label}`);
+    return value;
+}
+function text(value, label, limit = 500) {
+    if (typeof value !== 'string' || !value || value.length > limit || value.normalize('NFC').trim() !== value
+        || /[\p{Cc}]/u.test(value))
+        invalid(label);
+}
+function hash(value, label) {
+    if (typeof value !== 'string' || !digest.test(value))
+        invalid(label);
+}
+function integer(value, label, minimum = 1) {
+    if (!Number.isSafeInteger(value) || Number(value) < minimum)
+        invalid(label);
+}
+/** Strict shape checking is necessary but does not authenticate the producer. */
+export function validateSourceGrowthRunBinding(value) {
+    const binding = record(value, ['protocol', 'runId', 'intentDigest', 'configDigest', 'ownerDigest', 'source',
+        'model', 'modelOrigin', 'budget', 'native', 'sessionId', 'toolContractDigest', 'executionContractDigest',
+        'createdAt', 'generationDeadlineAt', 'expiresAt',
+        ...(isGrowthRecord(value) && Object.hasOwn(value, 'creationAcceptance') ? ['creationAcceptance'] : []),
+        ...(isGrowthRecord(value) && Object.hasOwn(value, 'revisionAcceptance') ? ['revisionAcceptance'] : []),
+        ...(isGrowthRecord(value) && Object.hasOwn(value, 'revisionRegressionAcceptance') ? ['revisionRegressionAcceptance'] : [])], 'binding');
+    if (binding['protocol'] !== 'assistant-growth/source-run/v1')
+        invalid('protocol');
+    for (const key of ['runId', 'sessionId'])
+        text(binding[key], key);
+    for (const key of ['intentDigest', 'configDigest', 'ownerDigest', 'toolContractDigest', 'executionContractDigest'])
+        hash(binding[key], key);
+    const source = record(binding['source'], ['outcomeId', 'projection', 'sourceDigest'], 'source');
+    text(source['outcomeId'], 'outcomeId');
+    hash(source['sourceDigest'], 'sourceDigest');
+    if (!isGrowthRecord(source['projection']))
+        invalid('projection');
+    const projection = record(source['projection'], ['subjectKind', 'subjectRef', 'version', 'digest', 'disposition',
+        ...(Object.hasOwn(source['projection'], 'evidenceOutcomeId') ? ['evidenceOutcomeId'] : [])], 'projection');
+    if (projection['subjectKind'] !== 'foreground-turn' || projection['disposition'] !== 'upsert')
+        invalid('projection kind');
+    text(projection['subjectRef'], 'subjectRef');
+    integer(projection['version'], 'projection version');
+    hash(projection['digest'], 'projection digest');
+    if (Object.hasOwn(projection, 'evidenceOutcomeId'))
+        text(projection['evidenceOutcomeId'], 'evidenceOutcomeId');
+    if (!isGrowthRecord(binding['model']))
+        invalid('model');
+    const model = record(binding['model'], ['provider', 'model',
+        ...(Object.hasOwn(binding['model'], 'reasoningEffort') ? ['reasoningEffort'] : [])], 'model');
+    text(model['provider'], 'provider');
+    text(model['model'], 'model');
+    if (Object.hasOwn(model, 'reasoningEffort'))
+        text(model['reasoningEffort'], 'reasoningEffort');
+    if (!['explicit-growth-override', 'inherited-owner-task'].includes(String(binding['modelOrigin'])))
+        invalid('model origin');
+    const budget = record(binding['budget'], ['budgetId', 'amount', 'maxModelCalls', 'maxToolCalls',
+        'maxOutputTokens', 'maxDurationMs', 'maxPlansPerWake'], 'budget');
+    text(budget['budgetId'], 'budgetId');
+    for (const key of ['amount', 'maxModelCalls', 'maxToolCalls', 'maxOutputTokens', 'maxDurationMs', 'maxPlansPerWake'])
+        integer(budget[key], key);
+    const native = record(binding['native'], ['owner', 'automationId', 'definitionHash', 'occurrenceId'], 'native');
+    if (native['owner'] !== 'assistant-growth-usage' || native['automationId'] !== binding['runId'])
+        invalid('native owner or identity');
+    text(native['occurrenceId'], 'occurrenceId');
+    hash(native['definitionHash'], 'definitionHash');
+    for (const key of ['createdAt', 'generationDeadlineAt', 'expiresAt']) {
+        integer(binding[key], key, 0);
+        if (Number(binding[key]) > 8_640_000_000_000_000)
+            invalid(key);
+    }
+    if (Number(binding['createdAt']) >= Number(binding['generationDeadlineAt'])
+        || Number(binding['generationDeadlineAt']) > Number(binding['expiresAt'])
+        || Number(binding['generationDeadlineAt']) - Number(binding['createdAt']) > Number(budget['maxDurationMs']))
+        invalid('deadline');
+    if (Object.hasOwn(binding, 'creationAcceptance')) {
+        validateCreationAcceptanceAuthorityRef(binding['creationAcceptance']);
+        if (binding['creationAcceptance'].expiresAt < Number(binding['createdAt']))
+            invalid('creation acceptance expiry');
+    }
+    if (Object.hasOwn(binding, 'revisionAcceptance')) {
+        validateRevisionAcceptanceAuthorityRef(binding['revisionAcceptance']);
+        if (binding['revisionAcceptance'].expiresAt < Number(binding['createdAt']))
+            invalid('revision acceptance expiry');
+    }
+    if (Object.hasOwn(binding, 'revisionRegressionAcceptance')) {
+        validateRevisionRegressionAcceptanceAuthorityRef(binding['revisionRegressionAcceptance']);
+        if (binding['revisionRegressionAcceptance'].expiresAt < Number(binding['createdAt']))
+            invalid('revision regression acceptance expiry');
+    }
+}
+/** Matches the existing Control Plane evidence canonicalization, including absent optional feedback. */
+export function sourceGrowthEvidenceDigest(value) {
+    const active = new Set();
+    let nodes = 0;
+    function visit(item, depth) {
+        if (++nodes > 32_768 || depth > 64)
+            invalid('evidence size');
+        if (item === null || typeof item === 'string' || typeof item === 'boolean')
+            return JSON.stringify(item);
+        if (typeof item === 'number' && Number.isFinite(item)
+            && (!Number.isInteger(item) || Number.isSafeInteger(item)))
+            return JSON.stringify(item);
+        if (typeof item !== 'object' || active.has(item))
+            invalid('evidence value');
+        active.add(item);
+        try {
+            if (Array.isArray(item))
+                return `[${item.map(entry => visit(entry, depth + 1)).join(',')}]`;
+            if (!isGrowthRecord(item))
+                invalid('evidence object');
+            const entries = Object.entries(item).filter(([, entry]) => entry !== undefined)
+                .sort(([left], [right]) => left.localeCompare(right));
+            if (entries.some(([key]) => ['__proto__', 'constructor', 'prototype'].includes(key)))
+                invalid('evidence key');
+            return `{${entries.map(([key, entry]) => `${JSON.stringify(key)}:${visit(entry, depth + 1)}`).join(',')}}`;
+        }
+        finally {
+            active.delete(item);
+        }
+    }
+    const canonical = visit(value, 0);
+    if (Buffer.byteLength(canonical) > 1_048_576)
+        invalid('evidence bytes');
+    return createHash('sha256').update(canonical).digest('hex');
+}
+export function sourceGrowthRunDigest(binding) {
+    validateSourceGrowthRunBinding(binding);
+    return sourceGrowthEvidenceDigest(binding);
+}
+//# sourceMappingURL=source-run.js.map

package/lib/source-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-run.js","sourceRoot":"","sources":["../src/source-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACtE,OAAO,EAAE,sCAAsC,EAAuC,MAAM,4BAA4B,CAAA;AACxH,OAAO,EAAE,sCAAsC,EAAuC,MAAM,4BAA4B,CAAA;AACxH,OAAO,EAAE,gDAAgD,EAAiD,MAAM,0BAA0B,CAAA;AAuD1I,iFAAiF;AACjF,MAAM,OAAO,+BAAgC,SAAQ,KAAK;CAAG;AAO7D,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,SAAS,OAAO,CAAC,KAAa,IAAW,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;AAChG,SAAS,MAAM,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa;IACpE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM;WACzC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,IAAI,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9H,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,qBAAqB,KAAK,EAAE,CAAC,CAAA;IAChE,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,KAAK,GAAG,GAAG;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK;WACrG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;AAC9C,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;AACtE,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa,EAAE,OAAO,GAAG,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ;QACzG,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,yBAAyB;QACxG,WAAW,EAAE,sBAAsB,EAAE,WAAW;QAChD,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACzI,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,gCAAgC;QAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IACjF,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IACjE,KAAK,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,oBAAoB,EAAE,yBAAyB,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IAC3I,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC/F,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAA;IAC5C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa;QAC9G,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;IAC5G,IAAI,UAAU,CAAC,aAAa,CAAC,KAAK,iBAAiB,IAAI,UAAU,CAAC,aAAa,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACzH,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAA;IAC5C,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC,CAAA;IACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,CAAA;IAC/C,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC;QAAE,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,CAAA;IAC9G,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO;QACzD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAC/F,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7B,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC;QAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC,CAAA;IAC9F,IAAI,CAAC,CAAC,0BAA0B,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IAC3H,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc;QAC7F,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAA;IACnE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;IACpC,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IAC/I,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC/G,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,wBAAwB,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,0BAA0B,CAAC,CAAA;IACpI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,CAAA;IAChD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,sBAAsB,EAAE,WAAW,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAC7B,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,qBAAqB;YAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;WACtE,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;WACtE,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IAClI,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACjD,sCAAsC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAA;QACrE,IAAK,OAAO,CAAC,oBAAoB,CAAoC,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAAE,OAAO,CAAC,4BAA4B,CAAC,CAAA;IACvJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACjD,sCAAsC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAA;QACrE,IAAK,OAAO,CAAC,oBAAoB,CAAoC,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAAE,OAAO,CAAC,4BAA4B,CAAC,CAAA;IACvJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,8BAA8B,CAAC,EAAE,CAAC;QAC3D,gDAAgD,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAA;QACzF,IAAK,OAAO,CAAC,8BAA8B,CAA8C,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAAE,OAAO,CAAC,uCAAuC,CAAC,CAAA;IACtL,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,SAAS,KAAK,CAAC,IAAa,EAAE,KAAa;QACzC,IAAI,EAAE,KAAK,GAAG,MAAM,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO,CAAC,eAAe,CAAC,CAAA;QAC5D,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACvG,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;eAChD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACzF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC3E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;YAC3F,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;YACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;iBAC5E,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;YACvD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,CAAC,cAAc,CAAC,CAAA;YAC7G,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;QAC5G,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;IACnC,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACjC,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,SAAS;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACvE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,8BAA8B,CAAC,OAAO,CAAC,CAAA;IACvC,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAA;AAC5C,CAAC"}

package/lib/version.d.ts

@@ -1,2 +1,2 @@
-export declare const version = "0.1.47";
+export declare const version = "0.1.49";
 //# sourceMappingURL=version.d.ts.map

package/lib/version.js

@@ -1,2 +1,2 @@
-export const version = '0.1.47';
+export const version = '0.1.49';
 //# sourceMappingURL=version.js.map