@dsh-enhanced/assistant-work-items 0.0.0-stage → 0.1.67

package/lib/policy-notice.d.ts

@@ -0,0 +1,31 @@
+/**
+ * WP21 slice 2: Policy-change notices and follow-up ownership.
+ *
+ * Both are deterministic projections over durable ledger state. A Policy
+ * change never cancels, parks or wakes work: it only records, once per
+ * (item, policyVersion), that a live item's frozen mandate basis no longer
+ * matches what the current Policy decides. Dispatch re-verification
+ * (`WorkItemAuthority.check`) stays the only gate that parks an item.
+ */
+import type { WorkItemAuthority } from './authority.js';
+import type { WorkItemStore } from './store.js';
+import type { WorkItemFollowUpInput, WorkItemPolicyChange, WorkItemPolicyChangeResult } from './types.js';
+/** Upper bound on live items one notice call assesses; larger ledgers continue via `next`. */
+export declare const MAX_POLICY_NOTICE_ITEMS = 1000;
+export declare function normalizePolicyChange(value: unknown): WorkItemPolicyChange;
+export declare function normalizeFollowUp(value: unknown): WorkItemFollowUpInput;
+/**
+ * Compute which live items a Policy version affects and record one durable
+ * notice per affected item.
+ *
+ * Idempotent across restarts: the notice is keyed by (item, policyVersion) in
+ * the ledger, so replaying the same version writes nothing new. Items Policy
+ * cannot answer for are reported and retried by the next call with the same
+ * version. No item state, lease or dispatch is touched.
+ *
+ * One call assesses at most {@link MAX_POLICY_NOTICE_ITEMS} live items in
+ * admission order; it never truncates silently: `remaining` counts the live
+ * items after the page and `next` continues the pass.
+ */
+export declare function noticePolicyChange(store: WorkItemStore, authority: WorkItemAuthority, change: WorkItemPolicyChange, pageSize?: number): WorkItemPolicyChangeResult;
+//# sourceMappingURL=policy-notice.d.ts.map

package/lib/policy-notice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-notice.d.ts","sourceRoot":"","sources":["../src/policy-notice.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAE3B,MAAM,YAAY,CAAA;AAGnB,8FAA8F;AAC9F,eAAO,MAAM,uBAAuB,OAAO,CAAA;AAsB3C,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAa1E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAUvE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,aAAa,EACpB,SAAS,EAAE,iBAAiB,EAC5B,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,GAAE,MAAgC,GACzC,0BAA0B,CAiD5B"}

package/lib/policy-notice.js

@@ -0,0 +1,137 @@
+/**
+ * WP21 slice 2: Policy-change notices and follow-up ownership.
+ *
+ * Both are deterministic projections over durable ledger state. A Policy
+ * change never cancels, parks or wakes work: it only records, once per
+ * (item, policyVersion), that a live item's frozen mandate basis no longer
+ * matches what the current Policy decides. Dispatch re-verification
+ * (`WorkItemAuthority.check`) stays the only gate that parks an item.
+ */
+import { WorkItemError } from './types.js';
+/** Upper bound on live items one notice call assesses; larger ledgers continue via `next`. */
+export const MAX_POLICY_NOTICE_ITEMS = 1000;
+const MAX_TOKEN = 256;
+function invalid(message) {
+    throw new WorkItemError('invalid-input', message);
+}
+/** Printable, bounded, non-empty identity token. */
+function token(value, field) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > MAX_TOKEN || !/^[\x21-\x7e]+$/.test(value)) {
+        invalid(`${field} must be a printable token of 1-${MAX_TOKEN} characters`);
+    }
+    return value;
+}
+function exactKeys(value, keys, what) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        invalid(`${what} must be an object`);
+    const record = value;
+    for (const key of Object.keys(record))
+        if (!keys.includes(key))
+            invalid(`${what} has unknown field ${key}`);
+    return record;
+}
+export function normalizePolicyChange(value) {
+    const record = exactKeys(value, ['protocol', 'policyVersion', 'after'], 'policy change');
+    if (record['protocol'] !== 'work-items/policy-change/v1')
+        invalid('policy change protocol is not work-items/policy-change/v1');
+    const policyVersion = token(record['policyVersion'], 'policyVersion');
+    if (record['after'] === undefined)
+        return Object.freeze({ protocol: 'work-items/policy-change/v1', policyVersion });
+    const after = exactKeys(record['after'], ['createdAt', 'id'], 'policy change cursor');
+    const createdAt = after['createdAt'];
+    if (typeof createdAt !== 'number' || !Number.isSafeInteger(createdAt) || createdAt < 0)
+        invalid('cursor createdAt must be a non-negative integer');
+    return Object.freeze({
+        protocol: 'work-items/policy-change/v1',
+        policyVersion,
+        after: Object.freeze({ createdAt, id: token(after['id'], 'cursor id') }),
+    });
+}
+export function normalizeFollowUp(value) {
+    const record = exactKeys(value, ['protocol', 'itemId', 'bindingId', 'messageId', 'sourceDigest'], 'follow-up');
+    if (record['protocol'] !== 'work-items/follow-up/v1')
+        invalid('follow-up protocol is not work-items/follow-up/v1');
+    return Object.freeze({
+        protocol: 'work-items/follow-up/v1',
+        itemId: token(record['itemId'], 'itemId'),
+        bindingId: token(record['bindingId'], 'bindingId'),
+        messageId: token(record['messageId'], 'messageId'),
+        sourceDigest: token(record['sourceDigest'], 'sourceDigest'),
+    });
+}
+/**
+ * Compute which live items a Policy version affects and record one durable
+ * notice per affected item.
+ *
+ * Idempotent across restarts: the notice is keyed by (item, policyVersion) in
+ * the ledger, so replaying the same version writes nothing new. Items Policy
+ * cannot answer for are reported and retried by the next call with the same
+ * version. No item state, lease or dispatch is touched.
+ *
+ * One call assesses at most {@link MAX_POLICY_NOTICE_ITEMS} live items in
+ * admission order; it never truncates silently: `remaining` counts the live
+ * items after the page and `next` continues the pass.
+ */
+export function noticePolicyChange(store, authority, change, pageSize = MAX_POLICY_NOTICE_ITEMS) {
+    // A peer that cannot evaluate at all leaves the ledger untouched, including
+    // locally-judged malformed bases that need no Policy call.
+    const missing = authority.assessUnavailable();
+    if (missing !== null)
+        return Object.freeze({ outcome: 'unavailable', detail: missing });
+    const limit = Math.max(1, Math.min(Math.trunc(pageSize), MAX_POLICY_NOTICE_ITEMS));
+    const page = store.listLiveItemsPage({ ...(change.after === undefined ? {} : { after: change.after }), limit });
+    const notified = [];
+    const alreadyNotified = [];
+    const unavailable = [];
+    let unaffected = 0;
+    let legacy = 0;
+    // Assess everything first (evaluate is side-effect free), then write every
+    // affected notice in one transaction.
+    const affected = [];
+    for (const item of page.items) {
+        const assessment = authority.assess(item);
+        if (assessment.kind === 'unavailable') {
+            unavailable.push(item.id);
+            continue;
+        }
+        if (assessment.kind === 'legacy') {
+            legacy += 1;
+            continue;
+        }
+        if (assessment.kind === 'allow') {
+            unaffected += 1;
+            continue;
+        }
+        const basis = item.authority;
+        affected.push(Object.freeze({
+            itemId: item.id,
+            notice: Object.freeze({
+                reasonCode: assessment.reasonCode,
+                frozenRuleId: basis?.mandate?.ruleId ?? basis?.ruleId ?? null,
+                currentRuleId: assessment.currentRuleId,
+                decisionId: basis?.mandate?.decisionId ?? null,
+            }),
+        }));
+    }
+    const recorded = store.recordPolicyNotices(change.policyVersion, affected);
+    recorded.forEach((notice, index) => {
+        if (notice === undefined)
+            alreadyNotified.push(affected[index].itemId);
+        else
+            notified.push(notice);
+    });
+    const last = page.items.at(-1);
+    const next = page.remaining > 0 && last !== undefined ? Object.freeze({ createdAt: last.createdAt, id: last.id }) : null;
+    return Object.freeze({
+        outcome: 'noticed',
+        policyVersion: change.policyVersion,
+        notified: Object.freeze(notified),
+        alreadyNotified: Object.freeze(alreadyNotified),
+        unaffected,
+        legacy,
+        unavailable: Object.freeze(unavailable),
+        next,
+        remaining: page.remaining,
+    });
+}
+//# sourceMappingURL=policy-notice.js.map

package/lib/policy-notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-notice.js","sourceRoot":"","sources":["../src/policy-notice.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE1C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAA;AAC3C,MAAM,SAAS,GAAG,GAAG,CAAA;AAErB,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;AACnD,CAAC;AAED,oDAAoD;AACpD,SAAS,KAAK,CAAC,KAAc,EAAE,KAAa;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjH,OAAO,CAAC,GAAG,KAAK,mCAAmC,SAAS,aAAa,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAuB,EAAE,IAAY;IACtE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAA;IAC7G,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,IAAI,sBAAsB,GAAG,EAAE,CAAC,CAAA;IAC3G,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,eAAe,CAAC,CAAA;IACxF,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,6BAA6B;QAAE,OAAO,CAAC,2DAA2D,CAAC,CAAA;IAC9H,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAA;IACrE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,6BAA6B,EAAE,aAAa,EAAE,CAAC,CAAA;IACnH,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAA;IACrF,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAA;IACpC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,CAAC,iDAAiD,CAAC,CAAA;IAClJ,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,6BAA6B;QACvC,aAAa;QACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;KACzE,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,WAAW,CAAC,CAAA;IAC9G,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,yBAAyB;QAAE,OAAO,CAAC,mDAAmD,CAAC,CAAA;IAClH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,yBAAyB;QACnC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACzC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAClD,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAClD,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;KAC5D,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAoB,EACpB,SAA4B,EAC5B,MAA4B,EAC5B,WAAmB,uBAAuB;IAE1C,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAA;IAC7C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IACvF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAA;IAClF,MAAM,IAAI,GAAG,KAAK,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/G,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,MAAM,eAAe,GAAa,EAAE,CAAA;IACpC,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,QAAQ,GAAuH,EAAE,CAAA;IACvI,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC9E,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAAC,UAAU,IAAI,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAA;QAC5B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI;gBAC7D,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;aAC/C,CAAC;SACH,CAAC,CAAC,CAAA;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;IAC1E,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACjC,IAAI,MAAM,KAAK,SAAS;YAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC,MAAM,CAAC,CAAA;;YAClE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;QAC/C,UAAU;QACV,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,IAAI;QACJ,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAA;AACJ,CAAC"}

package/lib/reply-contract.d.ts

@@ -0,0 +1,67 @@
+import type { NormalizedConfig } from './config.js';
+import type { WorkItemReplySource } from './peers.js';
+import type { WorkItemRecord } from './types.js';
+import { type ContinuationActivation, type ContinuationParent, type ContinuationProductionProof, type ContinuationSource, type WorkItemContinuationPlan } from './continuation-contract.js';
+export interface ReplySupplierEvidence {
+    readonly kind: 'diagnosis-plan' | 'continuation-plan';
+    readonly itemId: string;
+    /** SHA-256 of the complete canonical parent plan, including its own digest. */
+    readonly planDigest: string;
+    readonly production: ContinuationProductionProof;
+}
+export declare function immutableReply(source: WorkItemReplySource): {
+    protocol: "assistant-delivery/work-item-reply/v1";
+    id: string;
+    sourceDigest: string;
+    admissionCursor: Readonly<{
+        epoch: string;
+        sequence: number;
+    }>;
+    inputSha256: string;
+    inputBytes: number;
+    scope: Readonly<{
+        workspace: string;
+        preset: string;
+    }>;
+    principalId: string;
+    owner: Readonly<{
+        principalRecordId: string;
+        principalVersion: number;
+    }>;
+    binding: Readonly<{
+        id: string;
+        version: number;
+        generation: number;
+    }>;
+    target: Readonly<{
+        outboxId: string;
+        providerMessageId: string;
+        itemId: string;
+        reportRevision: number;
+        reportDigest: string;
+        streamId: string;
+    }>;
+};
+export interface WorkItemReplyContinuationPlan extends Omit<WorkItemContinuationPlan, 'protocol' | 'source' | 'authorization'> {
+    readonly protocol: 'assistant-work-items/owner-continuation-plan/v2';
+    readonly source: WorkItemContinuationPlan['source'] & Readonly<{
+        origin: Readonly<{
+            kind: 'owner-report-reply';
+            reply: ReturnType<typeof immutableReply>;
+            supplier: ReplySupplierEvidence;
+        }>;
+    }>;
+    readonly authorization: Omit<WorkItemContinuationPlan['authorization'], 'modelOrigin'> & Readonly<{
+        modelOrigin: 'inherited-parent-execution';
+    }>;
+}
+export type StoredContinuationPlan = WorkItemContinuationPlan | WorkItemReplyContinuationPlan;
+export declare const isReplyContinuationPlan: (plan: StoredContinuationPlan) => plan is WorkItemReplyContinuationPlan;
+export declare function createReplyContinuationPlan(item: WorkItemRecord, source: WorkItemReplySource, parent: ContinuationParent, supplier: Readonly<{
+    modelSelection: ContinuationSource['modelSelection'];
+    evidence: ReplySupplierEvidence;
+}>, config: NormalizedConfig, activation: ContinuationActivation, schemas: readonly {
+    name: string;
+}[]): Readonly<WorkItemReplyContinuationPlan>;
+export declare function parseStoredContinuationPlan(text: string): Readonly<StoredContinuationPlan>;
+//# sourceMappingURL=reply-contract.d.ts.map

package/lib/reply-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reply-contract.d.ts","sourceRoot":"","sources":["../src/reply-contract.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,EACL,KAAK,sBAAsB,EAAE,KAAK,kBAAkB,EAAE,KAAK,2BAA2B,EAAE,KAAK,kBAAkB,EAAE,KAAK,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AAEpL,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAC,gBAAgB,GAAC,mBAAmB,CAAA;IAClD,QAAQ,CAAC,MAAM,EAAC,MAAM,CAAA;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAC,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAC,2BAA2B,CAAA;CAChD;AACD,wBAAgB,cAAc,CAAC,MAAM,EAAC,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASxD;AACD,MAAM,WAAW,6BAA8B,SAAQ,IAAI,CAAC,wBAAwB,EAAC,UAAU,GAAC,QAAQ,GAAC,eAAe,CAAC;IACvH,QAAQ,CAAC,QAAQ,EAAC,iDAAiD,CAAA;IACnE,QAAQ,CAAC,MAAM,EAAC,wBAAwB,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;QAC5D,MAAM,EAAC,QAAQ,CAAC;YAAC,IAAI,EAAC,oBAAoB,CAAC;YAAA,KAAK,EAAC,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;YAAA,QAAQ,EAAC,qBAAqB,CAAA;SAAC,CAAC,CAAA;KACpH,CAAC,CAAA;IACF,QAAQ,CAAC,aAAa,EAAC,IAAI,CAAC,wBAAwB,CAAC,eAAe,CAAC,EAAC,aAAa,CAAC,GAAG,QAAQ,CAAC;QAAC,WAAW,EAAC,4BAA4B,CAAA;KAAC,CAAC,CAAA;CAC5I;AACD,MAAM,MAAM,sBAAsB,GAAC,wBAAwB,GAAC,6BAA6B,CAAA;AACzF,eAAO,MAAM,uBAAuB,GAAE,MAAK,sBAAsB,KAAE,IAAI,IAAI,6BAAgG,CAAA;AAE3K,wBAAgB,2BAA2B,CAAC,IAAI,EAAC,cAAc,EAAC,MAAM,EAAC,mBAAmB,EAAC,MAAM,EAAC,kBAAkB,EAClH,QAAQ,EAAC,QAAQ,CAAC;IAAC,cAAc,EAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAAA,QAAQ,EAAC,qBAAqB,CAAA;CAAC,CAAC,EACvG,MAAM,EAAC,gBAAgB,EAAC,UAAU,EAAC,sBAAsB,EAAC,OAAO,EAAC,SAAS;IAAC,IAAI,EAAC,MAAM,CAAA;CAAC,EAAE,GAAE,QAAQ,CAAC,6BAA6B,CAAC,CAcpI;AACD,wBAAgB,2BAA2B,CAAC,IAAI,EAAC,MAAM,GAAE,QAAQ,CAAC,sBAAsB,CAAC,CAcxF"}

package/lib/reply-contract.js

@@ -0,0 +1,58 @@
+import { acceptanceCanonicalJson, acceptanceDigest } from '@dsh-enhanced/task-acceptance-contract';
+import { MAX_CONTINUATION_INPUT_BYTES, MAX_CONTINUATION_PLAN_BYTES, continuationDigest } from './continuation-record.js';
+import { continuationFail, createContinuationPlan, parseContinuationPlan } from './continuation-contract.js';
+export function immutableReply(source) {
+    if (source.protocol !== 'assistant-delivery/work-item-reply/v1' || typeof source.id !== 'string' || !source.id
+        || !/^[a-f0-9]{64}$/u.test(source.sourceDigest) || source.inputSha256 !== continuationDigest(source.inputText)
+        || source.inputBytes !== Buffer.byteLength(source.inputText) || source.inputBytes < 1 || source.inputBytes > MAX_CONTINUATION_INPUT_BYTES
+        || Buffer.from(source.inputText, 'utf8').toString('utf8') !== source.inputText)
+        continuationFail('reply source bytes invalid');
+    // ACK, delivery status and mutable stream head do not change source identity.
+    return { protocol: source.protocol, id: source.id, sourceDigest: source.sourceDigest, admissionCursor: source.admissionCursor,
+        inputSha256: source.inputSha256, inputBytes: source.inputBytes, scope: source.scope, principalId: source.principalId,
+        owner: source.owner, binding: source.binding, target: source.target };
+}
+export const isReplyContinuationPlan = (plan) => plan.protocol === 'assistant-work-items/owner-continuation-plan/v2';
+export function createReplyContinuationPlan(item, source, parent, supplier, config, activation, schemas) {
+    if (!config.ownerReplyContinuation || source.state === 'cancelled' || source.executionParentItemId !== parent.itemId
+        || source.scope.workspace !== item.scope.workspace || source.scope.preset !== item.scope.preset || source.principalId !== item.scope.principalId
+        || source.owner.principalRecordId !== item.owner.principalRecordId || source.owner.principalVersion !== item.owner.principalVersion
+        || source.binding.id !== item.originBindingId || source.binding.version !== item.owner.bindingVersion || source.binding.generation !== item.owner.generation
+        || supplier.evidence.itemId !== parent.itemId || acceptanceCanonicalJson(supplier.evidence.production) !== acceptanceCanonicalJson(parent.production))
+        continuationFail('reply source admission association differs');
+    const base = createContinuationPlan(item, { sourceDigest: source.sourceDigest, inputText: source.inputText, modelSelection: supplier.modelSelection }, parent, config, activation, schemas);
+    const { digest: _digest, ...common } = base;
+    const unsigned = { ...common, protocol: 'assistant-work-items/owner-continuation-plan/v2',
+        source: { ...base.source, origin: { kind: 'owner-report-reply', reply: immutableReply(source), supplier: supplier.evidence } },
+        authorization: { ...base.authorization, modelOrigin: 'inherited-parent-execution' } };
+    const value = { ...unsigned, digest: acceptanceDigest(unsigned) }, text = acceptanceCanonicalJson(value);
+    if (Buffer.byteLength(text) > MAX_CONTINUATION_PLAN_BYTES)
+        continuationFail('reply plan exceeds byte bound');
+    return Object.freeze(JSON.parse(text));
+}
+export function parseStoredContinuationPlan(text) {
+    if (typeof text !== 'string' || Buffer.byteLength(text) > MAX_CONTINUATION_PLAN_BYTES)
+        continuationFail('stored plan exceeds bound');
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch {
+        continuationFail('stored plan is not JSON');
+    }
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        continuationFail('stored plan malformed');
+    if (value.protocol !== 'assistant-work-items/owner-continuation-plan/v2')
+        return parseContinuationPlan(text);
+    const plan = value;
+    if (acceptanceCanonicalJson(plan) !== text || Object.keys(plan).sort().join() !== ['protocol', 'item', 'source', 'parent', 'authorization', 'activation', 'toolSchemas', 'contract', 'digest'].sort().join()
+        || !plan.source || !plan.source.origin || plan.source.origin.kind !== 'owner-report-reply' || !plan.source.origin.reply || !plan.source.origin.supplier
+        || plan.source.origin.reply.protocol !== 'assistant-delivery/work-item-reply/v1'
+        || plan.authorization?.modelOrigin !== 'inherited-parent-execution')
+        continuationFail('stored reply plan malformed');
+    const { digest, ...unsigned } = plan;
+    if (typeof digest !== 'string' || digest !== acceptanceDigest(unsigned))
+        continuationFail('stored reply plan digest differs');
+    return Object.freeze(plan);
+}
+//# sourceMappingURL=reply-contract.js.map

package/lib/reply-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reply-contract.js","sourceRoot":"","sources":["../src/reply-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AAIlG,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACxH,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,qBAAqB,EAC0E,MAAM,4BAA4B,CAAA;AASpL,MAAM,UAAU,cAAc,CAAC,MAA0B;IACvD,IAAG,MAAM,CAAC,QAAQ,KAAG,uCAAuC,IAAI,OAAO,MAAM,CAAC,EAAE,KAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE;WACpG,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,WAAW,KAAG,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;WACzG,MAAM,CAAC,UAAU,KAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,GAAC,CAAC,IAAI,MAAM,CAAC,UAAU,GAAC,4BAA4B;WAChI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,MAAM,CAAC,SAAS;QAAE,gBAAgB,CAAC,4BAA4B,CAAC,CAAA;IAC7H,8EAA8E;IAC9E,OAAO,EAAC,QAAQ,EAAC,MAAM,CAAC,QAAQ,EAAC,EAAE,EAAC,MAAM,CAAC,EAAE,EAAC,YAAY,EAAC,MAAM,CAAC,YAAY,EAAC,eAAe,EAAC,MAAM,CAAC,eAAe;QACnH,WAAW,EAAC,MAAM,CAAC,WAAW,EAAC,UAAU,EAAC,MAAM,CAAC,UAAU,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,WAAW,EAAC,MAAM,CAAC,WAAW;QAC7G,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,CAAA;AACnE,CAAC;AASD,MAAM,CAAC,MAAM,uBAAuB,GAAC,CAAC,IAA2B,EAAuC,EAAE,CAAA,IAAI,CAAC,QAAQ,KAAG,iDAAiD,CAAA;AAE3K,MAAM,UAAU,2BAA2B,CAAC,IAAmB,EAAC,MAA0B,EAAC,MAAyB,EAClH,QAAuG,EACvG,MAAuB,EAAC,UAAiC,EAAC,OAAgC;IAC1F,IAAG,CAAC,MAAM,CAAC,sBAAsB,IAAI,MAAM,CAAC,KAAK,KAAG,WAAW,IAAI,MAAM,CAAC,qBAAqB,KAAG,MAAM,CAAC,MAAM;WAC1G,MAAM,CAAC,KAAK,CAAC,SAAS,KAAG,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,KAAG,IAAI,CAAC,KAAK,CAAC,WAAW;WACvI,MAAM,CAAC,KAAK,CAAC,iBAAiB,KAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,KAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB;WAC5H,MAAM,CAAC,OAAO,CAAC,EAAE,KAAG,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,KAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,KAAK,CAAC,UAAU;WACnJ,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAG,MAAM,CAAC,MAAM,IAAI,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAG,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,gBAAgB,CAAC,4CAA4C,CAAC,CAAA;IACnN,MAAM,IAAI,GAAC,sBAAsB,CAAC,IAAI,EAAC,EAAC,YAAY,EAAC,MAAM,CAAC,YAAY,EAAC,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,cAAc,EAAC,QAAQ,CAAC,cAAc,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,UAAU,EAAC,OAAO,CAAC,CAAA;IAC7K,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,GAAG,MAAM,EAAC,GAAC,IAAI,CAAA;IACrC,MAAM,QAAQ,GAAC,EAAC,GAAG,MAAM,EAAC,QAAQ,EAAC,iDAA0D;QAC3F,MAAM,EAAC,EAAC,GAAG,IAAI,CAAC,MAAM,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,oBAA6B,EAAC,KAAK,EAAC,cAAc,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,EAAC;QAC3H,aAAa,EAAC,EAAC,GAAG,IAAI,CAAC,aAAa,EAAC,WAAW,EAAC,4BAAqC,EAAC,EAAC,CAAA;IAC1F,MAAM,KAAK,GAAC,EAAC,GAAG,QAAQ,EAAC,MAAM,EAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAC,EAAC,IAAI,GAAC,uBAAuB,CAAC,KAAK,CAAC,CAAA;IAC/F,IAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAC,2BAA2B;QAAE,gBAAgB,CAAC,+BAA+B,CAAC,CAAA;IACzG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkC,CAAC,CAAA;AACzE,CAAC;AACD,MAAM,UAAU,2BAA2B,CAAC,IAAW;IACrD,IAAG,OAAO,IAAI,KAAG,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAC,2BAA2B;QAAE,gBAAgB,CAAC,2BAA2B,CAAC,CAAA;IAC/H,IAAI,KAAa,CAAA;IACjB,IAAI,CAAC;QAAA,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAAA,CAAC;IAAC,MAAM,CAAC;QAAA,gBAAgB,CAAC,yBAAyB,CAAC,CAAA;IAAA,CAAC;IAChF,IAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAG,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAA;IACvG,IAAI,KAA6B,CAAC,QAAQ,KAAG,iDAAiD;QAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAA;IAClI,MAAM,IAAI,GAAC,KAAsC,CAAA;IACjD,IAAG,uBAAuB,CAAC,IAAI,CAAC,KAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAG,CAAC,UAAU,EAAC,MAAM,EAAC,QAAQ,EAAC,QAAQ,EAAC,eAAe,EAAC,YAAY,EAAC,aAAa,EAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE;WAC1L,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAG,oBAAoB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ;WAClJ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAG,uCAAuC;WAC3E,IAAI,CAAC,aAAa,EAAE,WAAW,KAAG,4BAA4B;QAAE,gBAAgB,CAAC,6BAA6B,CAAC,CAAA;IACpH,MAAM,EAAC,MAAM,EAAC,GAAG,QAAQ,EAAC,GAAC,IAAI,CAAA;IAC/B,IAAG,OAAO,MAAM,KAAG,QAAQ,IAAI,MAAM,KAAG,gBAAgB,CAAC,QAAQ,CAAC;QAAE,gBAAgB,CAAC,kCAAkC,CAAC,CAAA;IACxH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AAC5B,CAAC"}