@dsh-enhanced/assistant-work-items 0.0.0-stage → 0.1.67

package/lib/evaluation.js

@@ -0,0 +1,295 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { WorkItemError } from './types.js';
+/**
+ * Protocol identity of the work-item → Evaluation producer seam.
+ *
+ * The `assistant-evaluation` plugin validates this exact string on the
+ * registration it hands back, so the two plugins agree on a versioned contract
+ * without either importing the other's implementation.
+ */
+export const WORK_ITEM_EVALUATION_PROTOCOL = 'assistant-work-items/evaluation/v1';
+/** Stable prefix of every Evaluation idempotency key this producer emits. */
+export const WORK_ITEM_EVALUATION_ID_PREFIX = 'work-items';
+/** Bounded export attempts per settled revision; the row stays `pending`. */
+export const WORK_ITEM_EVALUATION_MAX_ATTEMPTS = 5;
+/** Bounded exports per drain pass, so a busy ledger cannot starve the host. */
+export const WORK_ITEM_EVALUATION_MAX_PER_SWEEP = 10;
+/** Runtime guard; `assistant-evaluation` keeps an equivalent local copy. */
+export function isWorkItemEvaluationProducer(value) {
+    return typeof value === 'object' && value !== null
+        && typeof value.trustedWorkItemProducerGeneration === 'function'
+        && typeof value.registerTrustedWorkItemEvaluationSink === 'function';
+}
+/** Stable identity of one settled revision for Evaluation's idempotency check. */
+export function workItemEvaluationIdempotencyKey(itemId, revision, evidenceState) {
+    return `${WORK_ITEM_EVALUATION_ID_PREFIX}/${itemId}/${String(revision)}/${evidenceState}`;
+}
+/**
+ * Situation taxonomy shared by every work item of one admitted kind.
+ *
+ * Grouping by kind (not by item) keeps downstream learning comparable; the
+ * per-item identity lives in the idempotency key and evidence refs instead.
+ */
+export function workItemEvaluationSituation(kind) {
+    return `work-item:${kind}`;
+}
+/** Only durable, independently sourced facts; no model prose reaches Evaluation. */
+function metricsFor(item, outcome) {
+    if (item === undefined)
+        return Object.freeze({});
+    const latencyMs = Math.max(0, outcome.settledAt - item.createdAt);
+    const retries = Math.max(0, item.attempt - 1);
+    return Object.freeze(retries > 0 ? { latencyMs, retries } : { latencyMs });
+}
+function digestOf(claims) {
+    return createHash('sha256').update(JSON.stringify([
+        claims.scope.workspace,
+        claims.scope.preset,
+        claims.itemId,
+        claims.outcomeRevision,
+        claims.settledBy,
+        claims.evidenceState,
+        claims.situation,
+        claims.objectiveStatus,
+        claims.deliveryStatus,
+        claims.occurredAt,
+        claims.idempotencyKey,
+        claims.metrics,
+    ])).digest('hex');
+}
+/**
+ * Project one store outcome into the exact claims Evaluation accepts.
+ *
+ * `execution` is the bounded ledger count bag when the caller could read it;
+ * omitting it keeps the live-record fallback so a direct projection call still
+ * works. Returns `null` for revisions that are not exportable at all: a window
+ * still `pending` can change, so publishing it would contradict a later
+ * revision.
+ */
+export function workItemEvaluationClaims(outcome, scope, item, execution) {
+    if (outcome.evidenceState === 'pending')
+        return null;
+    const evidenceState = outcome.evidenceState;
+    const base = {
+        scope: Object.freeze({ workspace: scope.workspace, preset: scope.preset }),
+        itemId: outcome.itemId,
+        outcomeRevision: outcome.revision,
+        settledBy: outcome.settledBy,
+        evidenceState,
+        situation: workItemEvaluationSituation(item?.kind ?? 'work-item'),
+        occurredAt: outcome.settledAt,
+        idempotencyKey: workItemEvaluationIdempotencyKey(outcome.itemId, outcome.revision, evidenceState),
+        metrics: execution ?? metricsFor(item, outcome),
+        objectiveStatus: 'unknown',
+        deliveryStatus: 'unknown',
+    };
+    return Object.freeze({ ...base, digest: digestOf(base) });
+}
+/**
+ * Bounded work-item → Evaluation exporter.
+ *
+ * Evaluation owns the append; this class owns only its own outbox columns. A
+ * pass is bounded by `maxPerSweep`, never runs on a timer (it is triggered by
+ * registration and by the transaction boundaries that can create a new settled
+ * revision), and a failed append leaves the row `pending` with a capped attempt
+ * count that health can surface instead of silently dropping evidence.
+ */
+export class WorkItemEvaluationExporter {
+    #options;
+    #generation = randomUUID();
+    #registration;
+    #draining;
+    #degraded = null;
+    constructor(options) {
+        this.#options = options;
+    }
+    get generation() {
+        return this.#generation;
+    }
+    get connected() {
+        return this.#registration !== undefined;
+    }
+    get degraded() {
+        return this.#degraded;
+    }
+    /** Capability consumed by `assistant-evaluation`; stable for this instance. */
+    trustedWorkItemProducerGeneration() {
+        return this.#generation;
+    }
+    /**
+     * Accept the exact registration Evaluation built for this generation.
+     *
+     * Exactly one sink may be registered: a second registration is refused so
+     * evidence cannot be double-exported under two capabilities, and the returned
+     * disposer only clears the registration it owns.
+     */
+    registerTrustedWorkItemEvaluationSink(registration) {
+        if (typeof registration !== 'object' || registration === null || Array.isArray(registration)) {
+            fail('invalid-state', 'work-item Evaluation registration is invalid');
+        }
+        if (registration.protocol !== WORK_ITEM_EVALUATION_PROTOCOL) {
+            fail('invalid-state', 'work-item Evaluation registration protocol is mismatched');
+        }
+        if (registration.generation !== this.#generation) {
+            fail('invalid-state', 'work-item Evaluation registration generation is mismatched');
+        }
+        if (typeof registration.append !== 'function') {
+            fail('invalid-state', 'work-item Evaluation registration cannot append');
+        }
+        const owner = registration.owner;
+        if (typeof owner !== 'object' || owner === null
+            || typeof owner.ownsTrustedWorkItemEvaluationRegistration !== 'function'
+            || owner.ownsTrustedWorkItemEvaluationRegistration(registration) !== true) {
+            fail('invalid-state', 'work-item Evaluation registration is not owned by its producer host');
+        }
+        if (this.#registration !== undefined) {
+            fail('invalid-state', 'a work-item Evaluation sink is already registered');
+        }
+        const current = Object.freeze({ ...registration });
+        this.#registration = current;
+        // Registration is itself a boundary that may have missed settlements, so
+        // one bounded pass runs immediately; the next transactions keep it fed.
+        void this.drain().catch(error => {
+            // The registration boundary must not surface a rejection to the producer;
+            // the failed pass is already visible through `degraded` health.
+            this.#degraded = describe(error);
+            this.#options.warn?.(`assistant-work-items: Evaluation export pass failed: ${describe(error)}`);
+        });
+        return () => {
+            if (this.#registration !== current)
+                return;
+            this.#registration = undefined;
+            this.#degraded = null;
+        };
+    }
+    /** Withdraw any sink on service disposal. */
+    dispose() {
+        this.#registration = undefined;
+    }
+    /**
+     * Run bounded export passes serially; a caller never joins a stale pass.
+     *
+     * A drain that arrives while one is in flight queues exactly one follow-up
+     * pass instead of returning the in-flight result: the settlement that
+     * prompted the second call may have committed after the first pass read its
+     * candidates, and silently joining it would postpone that evidence until the
+     * next unrelated transaction.
+     *
+     * Never rejects: every failure is recorded as degraded health so a caller on
+     * a transaction boundary cannot fail because Export is unavailable.
+     */
+    drain(limit = this.#options.maxPerSweep ?? WORK_ITEM_EVALUATION_MAX_PER_SWEEP) {
+        const running = this.#draining;
+        if (running === undefined) {
+            const pass = this.#drainOnce(limit).finally(() => {
+                if (this.#draining === pass)
+                    this.#draining = undefined;
+            });
+            this.#draining = pass;
+            return pass;
+        }
+        const follow = running.then(() => this.#drainOnce(limit));
+        const tracked = follow.finally(() => {
+            if (this.#draining === tracked)
+                this.#draining = undefined;
+        });
+        this.#draining = tracked;
+        return tracked;
+    }
+    async #drainOnce(limit) {
+        this.#degraded = null;
+        if (!this.#options.enabled())
+            return;
+        const store = this.#options.store();
+        if (store === undefined)
+            return;
+        const registration = this.#registration;
+        if (registration === undefined)
+            return;
+        let candidates;
+        try {
+            candidates = store.outcomesAwaitingEvaluation(limit, WORK_ITEM_EVALUATION_MAX_ATTEMPTS);
+        }
+        catch (error) {
+            this.#degraded = describe(error);
+            this.#options.warn?.(`assistant-work-items: Evaluation outbox read failed: ${describe(error)}`);
+            return;
+        }
+        if (candidates.length === 0) {
+            // Nothing sweeps now, but an exhausted row is still a real gap between a
+            // settled outcome and the trusted lane; keep it visible in health.
+            try {
+                if (store.countExhaustedEvaluations(WORK_ITEM_EVALUATION_MAX_ATTEMPTS) > 0) {
+                    this.#degraded = 'export-attempts-exhausted';
+                }
+            }
+            catch (error) {
+                this.#degraded = describe(error);
+            }
+            return;
+        }
+        const scope = this.#options.scope();
+        if (scope === null) {
+            // No exact workspace+preset means no honest Evaluation scope, so the
+            // settled revisions are terminally skipped rather than guessed.
+            this.#degraded = 'owner-route-unavailable';
+            for (const outcome of candidates) {
+                try {
+                    store.markOutcomeSkipped(outcome.itemId, outcome.revision, this.#options.now());
+                }
+                catch (error) {
+                    this.#degraded = describe(error);
+                }
+            }
+            return;
+        }
+        for (const outcome of candidates) {
+            if (this.#registration !== registration)
+                return;
+            let claims;
+            try {
+                // The item row is read outside the append guard because a store fault
+                // here must not reject a pass that other transactions already awaited.
+                const item = store.findItemById(outcome.itemId);
+                claims = workItemEvaluationClaims(outcome, scope, item, store.workItemExecutionMetrics(outcome.itemId, outcome.settledAt));
+            }
+            catch (error) {
+                this.#degraded = describe(error);
+                this.#options.warn?.(`assistant-work-items: Evaluation claims read failed: ${describe(error)}`);
+                continue;
+            }
+            if (claims === null)
+                continue;
+            try {
+                await registration.append(claims);
+            }
+            catch (error) {
+                this.#degraded = describe(error);
+                this.#options.warn?.(`assistant-work-items: Evaluation export failed: ${describe(error)}`);
+                try {
+                    store.recordOutcomeEvaluationAttempt(outcome.itemId, outcome.revision, WORK_ITEM_EVALUATION_MAX_ATTEMPTS);
+                }
+                catch (recordError) {
+                    this.#degraded = describe(recordError);
+                }
+                continue;
+            }
+            try {
+                store.markOutcomeExported(outcome.itemId, outcome.revision, claims.digest, this.#options.now());
+            }
+            catch (error) {
+                // The append succeeded, so the row must not be retried; a state race is
+                // still reported instead of being erased.
+                this.#degraded = describe(error);
+                this.#options.warn?.(`assistant-work-items: Evaluation export marker failed: ${describe(error)}`);
+            }
+        }
+    }
+}
+function fail(code, message) {
+    throw new WorkItemError(code, message);
+}
+function describe(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=evaluation.js.map

package/lib/evaluation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluation.js","sourceRoot":"","sources":["../src/evaluation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAapD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oCAAoC,CAAA;AACjF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,8BAA8B,GAAG,YAAY,CAAA;AAC1D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAA;AAClD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,CAAA;AAwCpD,4EAA4E;AAC5E,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;WAC7C,OAAQ,KAA6C,CAAC,iCAAiC,KAAK,UAAU;WACtG,OAAQ,KAA6C,CAAC,qCAAqC,KAAK,UAAU,CAAA;AACjH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gCAAgC,CAC9C,MAAc,EACd,QAAgB,EAChB,aAA8C;IAE9C,OAAO,GAAG,8BAA8B,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAA;AAC3F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,OAAO,aAAa,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED,oFAAoF;AACpF,SAAS,UAAU,CAAC,IAAgC,EAAE,OAA8B;IAClF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,MAAgD;IAChE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,SAAS;QACtB,MAAM,CAAC,KAAK,CAAC,MAAM;QACnB,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,eAAe;QACtB,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,aAAa;QACpB,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,eAAe;QACtB,MAAM,CAAC,cAAc;QACrB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,cAAc;QACrB,MAAM,CAAC,OAAO;KACf,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAA8B,EAC9B,KAA8B,EAC9B,IAAgC,EAChC,SAA8C;IAE9C,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACpD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAA;IAC3C,MAAM,IAAI,GAA6C;QACrD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,eAAe,EAAE,OAAO,CAAC,QAAQ;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa;QACb,SAAS,EAAE,2BAA2B,CAAC,IAAI,EAAE,IAAI,IAAI,WAAW,CAAC;QACjE,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,cAAc,EAAE,gCAAgC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC;QACjG,OAAO,EAAE,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;QAC/C,eAAe,EAAE,SAAS;QAC1B,cAAc,EAAE,SAAS;KAC1B,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC3D,CAAC;AAcD;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA0B;IAC5B,QAAQ,CAAmC;IAC3C,WAAW,GAAG,UAAU,EAAE,CAAA;IACnC,aAAa,CAA4C;IACzD,SAAS,CAA2B;IACpC,SAAS,GAAkB,IAAI,CAAA;IAE/B,YAAY,OAA0C;QACpD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS,CAAA;IACzC,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED,+EAA+E;IAC/E,iCAAiC;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED;;;;;;OAMG;IACH,qCAAqC,CAAC,YAAsD;QAC1F,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7F,IAAI,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAA;QACvE,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,KAAK,6BAA6B,EAAE,CAAC;YAC5D,IAAI,CAAC,eAAe,EAAE,0DAA0D,CAAC,CAAA;QACnF,CAAC;QACD,IAAI,YAAY,CAAC,UAAU,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,CAAC,eAAe,EAAE,4DAA4D,CAAC,CAAA;QACrF,CAAC;QACD,IAAI,OAAO,YAAY,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC9C,IAAI,CAAC,eAAe,EAAE,iDAAiD,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAA;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;eAC1C,OAAO,KAAK,CAAC,yCAAyC,KAAK,UAAU;eACrE,KAAK,CAAC,yCAAyC,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5E,IAAI,CAAC,eAAe,EAAE,qEAAqE,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAA;QAClD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAA;QAC5B,yEAAyE;QACzE,wEAAwE;QACxE,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC9B,0EAA0E;YAC1E,gEAAgE;YAChE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,wDAAwD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACjG,CAAC,CAAC,CAAA;QACF,OAAO,GAAG,EAAE;YACV,IAAI,IAAI,CAAC,aAAa,KAAK,OAAO;gBAAE,OAAM;YAC1C,IAAI,CAAC,aAAa,GAAG,SAAS,CAAA;YAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACvB,CAAC,CAAA;IACH,CAAC;IAED,6CAA6C;IAC7C,OAAO;QACL,IAAI,CAAC,aAAa,GAAG,SAAS,CAAA;IAChC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,kCAAkC;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAA;QAC9B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC/C,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;oBAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;YACzD,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;YACrB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAClC,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO;gBAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC5D,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAA;QACxB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;YAAE,OAAM;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;QACnC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAM;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAA;QACvC,IAAI,YAAY,KAAK,SAAS;YAAE,OAAM;QACtC,IAAI,UAA4C,CAAA;QAChD,IAAI,CAAC;YACH,UAAU,GAAG,KAAK,CAAC,0BAA0B,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAA;QACzF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,wDAAwD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC/F,OAAM;QACR,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,yEAAyE;YACzE,mEAAmE;YACnE,IAAI,CAAC;gBACH,IAAI,KAAK,CAAC,yBAAyB,CAAC,iCAAiC,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3E,IAAI,CAAC,SAAS,GAAG,2BAA2B,CAAA;gBAC9C,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAClC,CAAC;YACD,OAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;QACnC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,qEAAqE;YACrE,gEAAgE;YAChE,IAAI,CAAC,SAAS,GAAG,yBAAyB,CAAA;YAC1C,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAA;gBACjF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAClC,CAAC;YACH,CAAC;YACD,OAAM;QACR,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,aAAa,KAAK,YAAY;gBAAE,OAAM;YAC/C,IAAI,MAAuC,CAAA;YAC3C,IAAI,CAAC;gBACH,sEAAsE;gBACtE,uEAAuE;gBACvE,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBAC/C,MAAM,GAAG,wBAAwB,CAC/B,OAAO,EACP,KAAK,EACL,IAAI,EACJ,KAAK,CAAC,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAClE,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,wDAAwD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBAC/F,SAAQ;YACV,CAAC;YACD,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAQ;YAC7B,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,mDAAmD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBAC1F,IAAI,CAAC;oBACH,KAAK,CAAC,8BAA8B,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAA;gBAC3G,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;gBACxC,CAAC;gBACD,SAAQ;YACV,CAAC;YACD,IAAI,CAAC;gBACH,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAA;YACjG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wEAAwE;gBACxE,0CAA0C;gBAC1C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,0DAA0D,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACnG,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,SAAS,IAAI,CAAC,IAAoD,EAAE,OAAe;IACjF,MAAM,IAAI,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC"}

package/lib/event-follow.d.ts

@@ -0,0 +1,93 @@
+import type { WorkItemThreadSourceRegistration } from './types.js';
+/**
+ * Event Triggers as a followed-thread source (subscription pass-through, slice 1).
+ *
+ * A work item may follow `event-triggers` refs shaped
+ * `<triggerId>@<afterSequence>@<configDigest>`; with `acceptHeadRef` an
+ * admission may also pass `<triggerId>@head`, which is rewritten to that
+ * canonical form before it is validated or stored.
+ * The follow closes once the first authenticated source event after that cursor
+ * exists. The event only proves something happened on the subscription, never
+ * that the objective was achieved, so a closure always reports outcome
+ * `unknown` and the settled outcome stays unverified.
+ *
+ * Everything here is passive: resolution runs inside the existing bounded
+ * settlement pass, and this module adds no timers or change subscriptions.
+ */
+export declare const EVENT_TRIGGERS_FOLLOW_SOURCE = "event-triggers";
+/** Owner scope exactly as `eventTriggers.inspectOwnerSources` matches it. */
+export interface EventFollowOwnerScope {
+    readonly principalId: string;
+    readonly principalRecordId: string;
+    readonly principalVersion: number;
+    readonly workspace: string;
+    readonly preset: string;
+}
+interface SourceSnapshot {
+    readonly protocol: string;
+    readonly sourceId: string;
+    readonly kind: string;
+    readonly version: string;
+    readonly configDigest: string;
+    readonly target: {
+        readonly automationId: string;
+    };
+    readonly highWaterSequence: number;
+}
+interface OwnerSource {
+    readonly triggerId: string;
+    readonly automationId: string;
+    readonly kind: string;
+}
+/** Structural subset of the Event Triggers service; it is never imported. */
+export interface EventFollowReader {
+    inspectOwnerSources(scope: EventFollowOwnerScope): readonly OwnerSource[];
+    sourceSnapshot(triggerId: string): Readonly<SourceSnapshot>;
+    firstEventAfter(snapshot: Readonly<SourceSnapshot>, afterSequence: number, deadlineAt: number): Readonly<{
+        sequence: number;
+        envelope: unknown;
+    }> | undefined;
+}
+export declare function eventFollowReader(value: unknown): EventFollowReader | undefined;
+export interface EventFollowRef {
+    readonly triggerId: string;
+    readonly afterSequence: number;
+    readonly configDigest: string;
+}
+/** Trigger id of an admission-only `<triggerId>@head` alias; never a stored ref. */
+export declare function parseEventFollowHeadRef(ref: string): string | undefined;
+/** Parse `<triggerId>@<afterSequence>@<configDigest>`; anything else is not an event follow. */
+export declare function parseEventFollowRef(ref: string): EventFollowRef | undefined;
+/**
+ * Same bytes as `externalEventDigest` for an envelope Event Triggers already
+ * parsed and digest-checked; kept local so the optional peer is not imported.
+ */
+export declare function eventEnvelopeDigest(envelope: unknown): string;
+/**
+ * Follow protocol version carried in the generation. Event Triggers exposes its
+ * package version only on per-trigger snapshots, which vanish when a trigger is
+ * disabled or its observer expires, so a stable constant is used instead; an
+ * Event Triggers version change surfaces per follow because `firstEventAfter`
+ * only matches envelopes of the snapshot's version.
+ */
+export declare const EVENT_FOLLOW_PROTOCOL = "v1";
+/**
+ * The source generation depends only on the owner identity, never on runtime
+ * trigger state (observer expiry, goal retirement, automation pause, config
+ * edits). Per-trigger config isolation lives in the ref's config digest, so one
+ * trigger's change degrades only the follows on that trigger.
+ */
+export declare function eventFollowGeneration(owner: EventFollowOwnerScope): string;
+/**
+ * Build the `event-triggers` registration. `owner` is read live on every call so
+ * a revoked or changed owner route fails closed instead of reusing old scope.
+ */
+export declare function eventFollowRegistration(input: {
+    readonly reader: EventFollowReader;
+    readonly owner: () => EventFollowOwnerScope;
+    readonly now?: () => number;
+    /** Accept the admission-only `<triggerId>@head` alias (`follows.eventTriggers.acceptHeadRef`). */
+    readonly acceptHeadRef?: boolean;
+}): WorkItemThreadSourceRegistration;
+export {};
+//# sourceMappingURL=event-follow.d.ts.map

package/lib/event-follow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-follow.d.ts","sourceRoot":"","sources":["../src/event-follow.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAyB,gCAAgC,EAAE,MAAM,YAAY,CAAA;AAEzF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,4BAA4B,mBAAmB,CAAA;AAE5D,6EAA6E;AAC7E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;IAClD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CACnC;AAED,UAAU,WAAW;IAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAE1G,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,GAAG,SAAS,WAAW,EAAE,CAAA;IACzE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAA;IAC3D,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG,SAAS,CAAA;CAC9J;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,GAAG,SAAS,CAK/E;AAMD,MAAM,WAAW,cAAc;IAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE;AAI7H,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGvE;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAK3E;AASD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAE7D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,OAAO,CAAA;AAEzC;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAK1E;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,qBAAqB,CAAA;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,kGAAkG;IAClG,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CACjC,GAAG,gCAAgC,CA2DnC"}

package/lib/event-follow.js

@@ -0,0 +1,150 @@
+import { createHash } from 'node:crypto';
+/**
+ * Event Triggers as a followed-thread source (subscription pass-through, slice 1).
+ *
+ * A work item may follow `event-triggers` refs shaped
+ * `<triggerId>@<afterSequence>@<configDigest>`; with `acceptHeadRef` an
+ * admission may also pass `<triggerId>@head`, which is rewritten to that
+ * canonical form before it is validated or stored.
+ * The follow closes once the first authenticated source event after that cursor
+ * exists. The event only proves something happened on the subscription, never
+ * that the objective was achieved, so a closure always reports outcome
+ * `unknown` and the settled outcome stays unverified.
+ *
+ * Everything here is passive: resolution runs inside the existing bounded
+ * settlement pass, and this module adds no timers or change subscriptions.
+ */
+export const EVENT_TRIGGERS_FOLLOW_SOURCE = 'event-triggers';
+export function eventFollowReader(value) {
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const candidate = value;
+    return typeof candidate.inspectOwnerSources === 'function' && typeof candidate.sourceSnapshot === 'function'
+        && typeof candidate.firstEventAfter === 'function' ? candidate : undefined;
+}
+// Trigger ids follow Event Triggers' stable lowercase identifier shape; the
+// trailing segment is the trigger's 64-hex config digest at admission.
+const REF = /^([a-z0-9][a-z0-9._:-]{0,199})@(0|[1-9][0-9]{0,15})@([a-f0-9]{64})$/;
+const HEAD_REF = /^([a-z0-9][a-z0-9._:-]{0,199})@head$/;
+/** Trigger id of an admission-only `<triggerId>@head` alias; never a stored ref. */
+export function parseEventFollowHeadRef(ref) {
+    const match = typeof ref === 'string' ? HEAD_REF.exec(ref) : null;
+    return match === null ? undefined : match[1];
+}
+/** Parse `<triggerId>@<afterSequence>@<configDigest>`; anything else is not an event follow. */
+export function parseEventFollowRef(ref) {
+    const match = typeof ref === 'string' ? REF.exec(ref) : null;
+    if (match === null)
+        return undefined;
+    const afterSequence = Number(match[2]);
+    return Number.isSafeInteger(afterSequence) ? { triggerId: match[1], afterSequence, configDigest: match[3] } : undefined;
+}
+function canonical(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(',')}]`;
+    const input = value;
+    return `{${Object.keys(input).sort().map(key => `${JSON.stringify(key)}:${canonical(input[key])}`).join(',')}}`;
+}
+/**
+ * Same bytes as `externalEventDigest` for an envelope Event Triggers already
+ * parsed and digest-checked; kept local so the optional peer is not imported.
+ */
+export function eventEnvelopeDigest(envelope) {
+    return createHash('sha256').update(canonical(envelope)).digest('hex');
+}
+/**
+ * Follow protocol version carried in the generation. Event Triggers exposes its
+ * package version only on per-trigger snapshots, which vanish when a trigger is
+ * disabled or its observer expires, so a stable constant is used instead; an
+ * Event Triggers version change surfaces per follow because `firstEventAfter`
+ * only matches envelopes of the snapshot's version.
+ */
+export const EVENT_FOLLOW_PROTOCOL = 'v1';
+/**
+ * The source generation depends only on the owner identity, never on runtime
+ * trigger state (observer expiry, goal retirement, automation pause, config
+ * edits). Per-trigger config isolation lives in the ref's config digest, so one
+ * trigger's change degrades only the follows on that trigger.
+ */
+export function eventFollowGeneration(owner) {
+    const digest = createHash('sha256')
+        .update(JSON.stringify([owner.principalRecordId, owner.principalVersion, owner.workspace, owner.preset]))
+        .digest('hex');
+    return `event-triggers/${EVENT_FOLLOW_PROTOCOL}/${digest}`;
+}
+/**
+ * Build the `event-triggers` registration. `owner` is read live on every call so
+ * a revoked or changed owner route fails closed instead of reusing old scope.
+ */
+export function eventFollowRegistration(input) {
+    const { reader, owner } = input;
+    const now = input.now ?? Date.now;
+    const generation = eventFollowGeneration(owner());
+    // Snapshot of one followed trigger, only while it is still an owner source
+    // under the admitted config digest; other triggers' state is irrelevant.
+    const ownedSnapshot = (ref) => {
+        const scope = owner();
+        if (eventFollowGeneration(scope) !== generation)
+            return undefined;
+        if (!reader.inspectOwnerSources(scope).some(source => source.triggerId === ref.triggerId))
+            return undefined;
+        const snapshot = reader.sourceSnapshot(ref.triggerId);
+        return snapshot.configDigest === ref.configDigest ? snapshot : undefined;
+    };
+    // `<triggerId>@head` pins the cursor and digest from one synchronous
+    // `sourceSnapshot` read inside admission (no await before the row is
+    // written), so an event between the caller's own snapshot read and admission
+    // cannot fail it. The canonical ref still goes through `validate`, and an
+    // explicit three-part ref passes through unchanged.
+    const canonicalize = (ref) => {
+        const triggerId = parseEventFollowHeadRef(ref);
+        if (triggerId === undefined)
+            return ref;
+        const scope = owner();
+        if (eventFollowGeneration(scope) !== generation)
+            return undefined;
+        if (!reader.inspectOwnerSources(scope).some(source => source.triggerId === triggerId))
+            return undefined;
+        const snapshot = reader.sourceSnapshot(triggerId);
+        return `${triggerId}@${String(snapshot.highWaterSequence)}@${snapshot.configDigest}`;
+    };
+    return Object.freeze({
+        source: EVENT_TRIGGERS_FOLLOW_SOURCE,
+        generation,
+        ...(input.acceptHeadRef === true ? { canonicalize } : {}),
+        // Admission-time fence: the cursor must be exactly the current high water
+        // (a store-global sequence) and the digest the trigger's current config, so
+        // a forged low cursor cannot close a follow on an event that already
+        // existed, and a future cursor cannot be pre-armed.
+        validate(ref) {
+            const parsed = parseEventFollowRef(ref);
+            if (parsed === undefined)
+                return false;
+            const snapshot = ownedSnapshot(parsed);
+            return snapshot !== undefined && parsed.afterSequence === snapshot.highWaterSequence;
+        },
+        resolve(ref) {
+            const parsed = parseEventFollowRef(ref);
+            if (parsed === undefined)
+                return undefined;
+            const snapshot = ownedSnapshot(parsed);
+            if (snapshot === undefined)
+                return undefined;
+            if (parsed.afterSequence > snapshot.highWaterSequence)
+                return undefined;
+            // Security relies on the admission-time high-water check in `validate`:
+            // this cursor is replayed from the stored ref and is trusted only because
+            // admission refused any cursor below the high water at that moment.
+            // Event Triggers revalidates the trigger, config digest, envelope digest
+            // and signing skew for every candidate.
+            const event = reader.firstEventAfter({ ...snapshot, highWaterSequence: parsed.afterSequence }, parsed.afterSequence, now());
+            if (event === undefined) {
+                return Object.freeze({ state: 'open', outcome: 'unknown', digest: `${snapshot.configDigest}@${snapshot.highWaterSequence}` });
+            }
+            return Object.freeze({ state: 'closed', outcome: 'unknown', digest: eventEnvelopeDigest(event.envelope) });
+        },
+    });
+}
+//# sourceMappingURL=event-follow.js.map

package/lib/event-follow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-follow.js","sourceRoot":"","sources":["../src/event-follow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAA;AA8B5D,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzD,MAAM,SAAS,GAAG,KAAmC,CAAA;IACrD,OAAO,OAAO,SAAS,CAAC,mBAAmB,KAAK,UAAU,IAAI,OAAO,SAAS,CAAC,cAAc,KAAK,UAAU;WACvG,OAAO,SAAS,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,SAA8B,CAAC,CAAC,CAAC,SAAS,CAAA;AACnG,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,MAAM,GAAG,GAAG,qEAAqE,CAAA;AAIjF,MAAM,QAAQ,GAAG,sCAAsC,CAAA;AAEvD,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACjE,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;AAC/C,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACtC,OAAO,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3H,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACtE,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;AACjH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAA;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA4B;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;SACxG,MAAM,CAAC,KAAK,CAAC,CAAA;IAChB,OAAO,kBAAkB,qBAAqB,IAAI,MAAM,EAAE,CAAA;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAMvC;IACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACjC,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,EAAE,CAAC,CAAA;IACjD,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,aAAa,GAAG,CAAC,GAAmB,EAAwC,EAAE;QAClF,MAAM,KAAK,GAAG,KAAK,EAAE,CAAA;QACrB,IAAI,qBAAqB,CAAC,KAAK,CAAC,KAAK,UAAU;YAAE,OAAO,SAAS,CAAA;QACjE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3G,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACrD,OAAO,QAAQ,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,CAAC,CAAA;IACD,qEAAqE;IACrE,qEAAqE;IACrE,6EAA6E;IAC7E,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,YAAY,GAAG,CAAC,GAAW,EAAsB,EAAE;QACvD,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,GAAG,CAAA;QACvC,MAAM,KAAK,GAAG,KAAK,EAAE,CAAA;QACrB,IAAI,qBAAqB,CAAC,KAAK,CAAC,KAAK,UAAU;YAAE,OAAO,SAAS,CAAA;QACjE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;QACvG,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;QACjD,OAAO,GAAG,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAA;IACtF,CAAC,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,4BAA4B;QACpC,UAAU;QACV,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,0EAA0E;QAC1E,4EAA4E;QAC5E,qEAAqE;QACrE,oDAAoD;QACpD,QAAQ,CAAC,GAAW;YAClB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAA;YACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;YACtC,OAAO,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,iBAAiB,CAAA;QACtF,CAAC;QACD,OAAO,CAAC,GAAW;YACjB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;YACtC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAC5C,IAAI,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC,iBAAiB;gBAAE,OAAO,SAAS,CAAA;YACvE,wEAAwE;YACxE,0EAA0E;YAC1E,oEAAoE;YACpE,yEAAyE;YACzE,wCAAwC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3H,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAe,EAAE,OAAO,EAAE,SAAkB,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;YACjJ,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAiB,EAAE,OAAO,EAAE,SAAkB,EAAE,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC9H,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/lib/feedback-targets.d.ts

@@ -0,0 +1,91 @@
+import type { NormalizedConfig } from './config.js';
+import type { PeerAutomationsService, PeerDeliveryService, PeerOwnerRouteReceipt, WorkItemReplyConsumerRegistration, WorkItemReportTarget } from './peers.js';
+import type { WorkItemStore } from './store.js';
+import { type WorkItemNotification, type WorkItemRecord, type WorkItemReportRecord } from './types.js';
+export type OwnerWorkItemFeedbackSelector = Readonly<{
+    itemId: string;
+    reportRevision: number;
+    reportDigest: string;
+}>;
+/** Structural SDK surface; the implementation checks this against Evaluation's
+ * shared proof without requiring a new optional-peer export in published .d.ts. */
+export interface OwnerWorkItemFeedbackProof {
+    protocol: 'assistant-work-items/owner-report-feedback/v1';
+    itemId: string;
+    reportRevision: number;
+    reportDigest: string;
+    sourceId: string;
+    itemKind: string;
+    scope: Readonly<{
+        workspace: string;
+        preset: string;
+    }>;
+    owner: Readonly<{
+        ownerRouteId: string;
+        principalId: string;
+        principalRecordId: string;
+        principalVersion: number;
+    }>;
+    originBindingId: string;
+    production: Readonly<{
+        automationId: string;
+        occurrenceId: string;
+        runId: string;
+        definitionHash: string;
+        definitionVersion: number;
+        executionStatus: 'succeeded' | 'failed' | 'timed-out' | 'cancelled';
+        completedAt: number;
+        quiescent: true;
+        budgetSettlementState: 'finalized';
+    }>;
+    supplier: Readonly<{
+        provider: string;
+        model: string;
+        reasoningEffort?: string;
+    }>;
+    planDigest: string;
+    task: Readonly<{
+        brief: string;
+        briefTruncated: boolean;
+    }>;
+    report: Readonly<{
+        status: 'ready' | 'blocked' | 'failed';
+        text: string;
+        truncated: boolean;
+        recordedAt: number;
+    }>;
+    proofDigest: string;
+}
+/** Preserve the existing typed-report identity, including v1/v2 plan digest,
+ * while excluding mutable outbox delivery bookkeeping. */
+export declare function workItemReportDigest(item: WorkItemRecord, report: WorkItemReportRecord, text: string, planDigest: string): string;
+export interface WorkItemFeedbackTargetDependencies {
+    readonly config: NormalizedConfig;
+    readonly store: () => WorkItemStore | undefined;
+    readonly delivery: () => PeerDeliveryService | undefined;
+    readonly automations: () => PeerAutomationsService | undefined;
+    /** Pure local current-service/fiber generation check. */
+    readonly current: () => boolean;
+}
+/** Historical result reader. It never starts/reconciles an automation, checks
+ * a live execution grant, reserves budget, or turns testimony into success. */
+export declare class WorkItemOwnerFeedbackTargets {
+    #private;
+    private readonly dependencies;
+    constructor(dependencies: WorkItemFeedbackTargetDependencies);
+    private current;
+    /** Local-only metadata for an engineering callback already inside this
+     * reader's writer frame. It never mints authority outside that frame. */
+    engineeringFrameOwner(): Readonly<PeerOwnerRouteReceipt> | undefined;
+    inspectReport(input: Parameters<WorkItemReplyConsumerRegistration['inspectReport']>[0], notification: (item: WorkItemRecord, report: WorkItemReportRecord) => WorkItemNotification): WorkItemReportTarget | undefined;
+    private read;
+    issue(input: unknown): unknown | undefined;
+    resolve(capability: unknown): Readonly<OwnerWorkItemFeedbackProof> | undefined;
+    /** A group is validated as one source frame, rather than trusting A's cached
+     * result after a later B producer callback. The last phase reads only this
+     * owned ledger, configuration and local service identities. */
+    withTargetsFence<T>(capabilities: readonly unknown[], callback: (proofs: readonly (Readonly<OwnerWorkItemFeedbackProof> | undefined)[]) => T): T;
+    available(): boolean;
+    close(): void;
+}
+//# sourceMappingURL=feedback-targets.d.ts.map