@dsh-enhanced/plugin-control-plane 0.1.64 → 0.1.66

package/lib/in-process-reload.d.ts

@@ -0,0 +1,191 @@
+import { ControlPlaneStoreError } from './store.js';
+/**
+ * In-process reload protocol.
+ *
+ * An in-process reload replaces the mounted plugin tree of a *running* Host
+ * process (Cordis Loader/Include refresh) instead of restarting the systemd
+ * unit. Consequently the Host **process generation** must not change: the only
+ * evidence that may be claimed is a monotonic `inProcessGeneration` plus a
+ * probe of the freshly mounted fibers. A process restart belongs to the
+ * existing `{ kind: 'reload' }` attestation path and must never be reported
+ * through this module.
+ *
+ * This module is pure policy/orchestration over an injected Host port. It never
+ * touches the filesystem, Cordis or systemd, and it never reports a reload
+ * without a probe digest produced by the Host adapter.
+ */
+export type InProcessReloadRefusalReason = 'not-awaiting-reload' | 'not-rollback-eligible' | 'stale-fence' | 'warrant-digest-mismatch' | 'warrant-expired' | 'artifact-digest-mismatch' | 'patch-digest-mismatch' | 'invalid-target' | 'never-hot-reload' | 'process-subtree-change' | 'unproven-process-authority' | 'loader-unavailable' | 'host-generation-changed' | 'in-process-generation-not-monotonic' | 'unproven-reload' | 'probe-failed' | 'probe-digest-invalid';
+/** Typed refusal. Distinct `reason` values are stable machine-readable codes. */
+export declare class InProcessReloadRefusal extends ControlPlaneStoreError {
+    readonly reason: InProcessReloadRefusalReason;
+    constructor(reason: InProcessReloadRefusalReason, message: string);
+}
+/** Plugins that must never be replaced inside a live Host process. */
+export declare const IN_PROCESS_RELOAD_DENYLIST: readonly string[];
+export interface InProcessReloadTarget {
+    /** Published plugin package name being reloaded. */
+    package: string;
+    version: string;
+    /** SHA-256 of the sealed artifact that must be mounted after the reload. */
+    artifactDigest: string;
+    /** SHA-256 of the profile/bundle patch applied by the Host adapter. */
+    patchDigest: string;
+    /** True when the patch changes the unit or the dependency subtree: those require a process restart. */
+    changesProcessSubtree: boolean;
+    /** True when the candidate would hold process/cgroup authority that this Host has not proven. */
+    holdsUnprovenProcessAuthority: boolean;
+}
+/**
+ * Minimal plan projection consumed by this protocol. It is structurally
+ * satisfied by `PluginActivationPlan`; the reload decision only needs status,
+ * fence and generation binding.
+ */
+export interface InProcessReloadSnapshot {
+    planId: string;
+    planDigest: string;
+    /** Must be `'awaiting-reload'` for a reload to be prepared or applied. */
+    status: string;
+    activation: {
+        id: string;
+        fence: number;
+    };
+    /** Host process generation (must stay unchanged across the reload). */
+    hostGeneration: number;
+    /** Monotonic per-process reload generation (starts at 1). */
+    inProcessGeneration: number;
+    /** Identity of the tree that is currently mounted in this Host process. */
+    running: {
+        artifactDigest: string;
+        patchDigest: string;
+    };
+    target: InProcessReloadTarget;
+}
+/** JSON-safe, signed-input shaped probe produced by the Host adapter. */
+export interface InProcessReloadHostProbe {
+    /** Number of probe assertions that ran; must be >= 1. */
+    checks: number;
+    /** Number of failed assertions; must be 0 for any success claim. */
+    failures: number;
+    /** True only when the probe actually observed replaced fibers. */
+    reloaded: boolean;
+    /** Number of old fibers observed as disposed. */
+    fibersDisposed: number;
+    /** SHA-256 over the complete probe observation. */
+    probeDigest: string;
+}
+export interface InProcessReloadHostActivationInput {
+    warrantDigest: string;
+    target: InProcessReloadTarget;
+    previousHostGeneration: number;
+    previousInProcessGeneration: number;
+}
+export interface InProcessReloadHostActivationResult {
+    previousHostGeneration: number;
+    currentHostGeneration: number;
+    previousInProcessGeneration: number;
+    currentInProcessGeneration: number;
+    probe: InProcessReloadHostProbe;
+}
+export interface InProcessReloadHostRollbackInput {
+    warrantDigest: string;
+    target: InProcessReloadTarget;
+    /** Generation that the failed/undesired reload produced. */
+    reloadedInProcessGeneration: number;
+}
+export interface InProcessReloadHostRollbackResult {
+    hostGeneration: number;
+    inProcessGeneration: number;
+    restored: boolean;
+    profileRestored: boolean;
+    probe: InProcessReloadHostProbe;
+}
+/**
+ * Host-side capability seam. `@dsh-enhanced/assistant-delivery`'s
+ * `in-process-reload-runtime` exports a structurally compatible implementation;
+ * the Host wires it in. When it is absent, no reload happens.
+ */
+export interface InProcessReloadHostPort {
+    activate(input: InProcessReloadHostActivationInput): Promise<InProcessReloadHostActivationResult>;
+    rollback(input: InProcessReloadHostRollbackInput): Promise<InProcessReloadHostRollbackResult>;
+}
+export interface InProcessReloadWarrant {
+    schemaVersion: 1;
+    kind: 'dsh-in-process-reload-warrant';
+    planId: string;
+    planDigest: string;
+    activationId: string;
+    fence: number;
+    target: InProcessReloadTarget;
+    previousHostGeneration: number;
+    previousInProcessGeneration: number;
+    requestedAt: number;
+    expiresAt: number;
+    digest: string;
+}
+export type InProcessReloadWarrantBody = Omit<InProcessReloadWarrant, 'digest'>;
+export declare function inProcessReloadWarrantDigest(warrant: InProcessReloadWarrantBody): string;
+export interface PrepareInProcessReloadInput {
+    snapshot: InProcessReloadSnapshot;
+    requestedAt: number;
+    ttlMs: number;
+}
+/**
+ * Prepare an in-process reload warrant. Only a plan parked at `awaiting-reload`
+ * with a matching target may produce a warrant; every other state refuses.
+ */
+export declare function prepareInProcessReload(input: PrepareInProcessReloadInput): InProcessReloadWarrant;
+export type InProcessReloadOutcomeCode = 'host-activation-failed' | 'host-generation-changed' | 'in-process-generation-not-monotonic' | 'host-rollback-failed' | 'restore-unproven' | 'probe-failed' | 'probe-digest-invalid' | 'unproven-reload';
+export interface InProcessReloadApplied {
+    status: 'reloaded';
+    reloaded: true;
+    previousHostGeneration: number;
+    currentHostGeneration: number;
+    previousInProcessGeneration: number;
+    currentInProcessGeneration: number;
+    fibersDisposed: number;
+    probeDigest: string;
+    warrantDigest: string;
+}
+export interface InProcessReloadRollbackPending {
+    status: 'rollback-pending';
+    code: InProcessReloadOutcomeCode;
+    detail: string;
+    warrantDigest: string;
+}
+export type InProcessReloadApplyResult = InProcessReloadApplied | InProcessReloadRollbackPending;
+/**
+ * Apply a prepared warrant through the Host port.
+ *
+ * Refusals (state/fence/digest/expiry) throw `InProcessReloadRefusal` and never
+ * touch the Host. Operational failures — a Host exception, a moved process
+ * generation, a non-monotonic in-process generation, or any probe assertion
+ * failure — return `rollback-pending`; this function has no path that reports
+ * a reload without a valid, failure-free probe digest.
+ */
+export declare function applyInProcessReload(input: {
+    warrant: InProcessReloadWarrant;
+    snapshot: InProcessReloadSnapshot;
+    port: InProcessReloadHostPort;
+    now: number;
+}): Promise<InProcessReloadApplyResult>;
+export interface InProcessReloadRolledBack {
+    status: 'rolled-back';
+    restored: true;
+    hostGeneration: number;
+    inProcessGeneration: number;
+    probeDigest: string;
+    warrantDigest: string;
+}
+export type InProcessReloadRollbackResult = InProcessReloadRolledBack | InProcessReloadRollbackPending;
+/**
+ * Roll back a failed (or deliberately reverted) in-process reload. A rollback
+ * claim requires both an explicit profile restore and a failure-free probe; a
+ * partial rollback stays `rollback-pending`.
+ */
+export declare function rollbackInProcessReload(input: {
+    warrant: InProcessReloadWarrant;
+    snapshot: InProcessReloadSnapshot;
+    port: InProcessReloadHostPort;
+    now: number;
+}): Promise<InProcessReloadRollbackResult>;
+//# sourceMappingURL=in-process-reload.d.ts.map

package/lib/in-process-reload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-process-reload.d.ts","sourceRoot":"","sources":["../src/in-process-reload.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAEnD;;;;;;;;;;;;;;GAcG;AAEH,MAAM,MAAM,4BAA4B,GACpC,qBAAqB,GACrB,uBAAuB,GACvB,aAAa,GACb,yBAAyB,GACzB,iBAAiB,GACjB,0BAA0B,GAC1B,uBAAuB,GACvB,gBAAgB,GAChB,kBAAkB,GAClB,wBAAwB,GACxB,4BAA4B,GAC5B,oBAAoB,GACpB,yBAAyB,GACzB,qCAAqC,GACrC,iBAAiB,GACjB,cAAc,GACd,sBAAsB,CAAA;AAsB1B,iFAAiF;AACjF,qBAAa,sBAAuB,SAAQ,sBAAsB;IACpD,QAAQ,CAAC,MAAM,EAAE,4BAA4B;gBAApC,MAAM,EAAE,4BAA4B,EAAE,OAAO,EAAE,MAAM;CAI3E;AAMD,sEAAsE;AACtE,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAKtD,CAAA;AAqCF,MAAM,WAAW,qBAAqB;IACpC,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,4EAA4E;IAC5E,cAAc,EAAE,MAAM,CAAA;IACtB,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAA;IACnB,uGAAuG;IACvG,qBAAqB,EAAE,OAAO,CAAA;IAC9B,iGAAiG;IACjG,6BAA6B,EAAE,OAAO,CAAA;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACzC,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAA;IACtB,6DAA6D;IAC7D,mBAAmB,EAAE,MAAM,CAAA;IAC3B,2EAA2E;IAC3E,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD,MAAM,EAAE,qBAAqB,CAAA;CAC9B;AAED,yEAAyE;AACzE,MAAM,WAAW,wBAAwB;IACvC,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAA;IACd,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAA;IAChB,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAA;IACjB,iDAAiD;IACjD,cAAc,EAAE,MAAM,CAAA;IACtB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,kCAAkC;IACjD,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,qBAAqB,CAAA;IAC7B,sBAAsB,EAAE,MAAM,CAAA;IAC9B,2BAA2B,EAAE,MAAM,CAAA;CACpC;AAED,MAAM,WAAW,mCAAmC;IAClD,sBAAsB,EAAE,MAAM,CAAA;IAC9B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,0BAA0B,EAAE,MAAM,CAAA;IAClC,KAAK,EAAE,wBAAwB,CAAA;CAChC;AAED,MAAM,WAAW,gCAAgC;IAC/C,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,qBAAqB,CAAA;IAC7B,4DAA4D;IAC5D,2BAA2B,EAAE,MAAM,CAAA;CACpC;AAED,MAAM,WAAW,iCAAiC;IAChD,cAAc,EAAE,MAAM,CAAA;IACtB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,QAAQ,EAAE,OAAO,CAAA;IACjB,eAAe,EAAE,OAAO,CAAA;IACxB,KAAK,EAAE,wBAAwB,CAAA;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAA;IACjG,QAAQ,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAA;CAC9F;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,CAAA;IAChB,IAAI,EAAE,+BAA+B,CAAA;IACrC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,qBAAqB,CAAA;IAC7B,sBAAsB,EAAE,MAAM,CAAA;IAC9B,2BAA2B,EAAE,MAAM,CAAA;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAA;AAE/E,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,CAA6B;AAkDtH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,uBAAuB,CAAA;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,sBAAsB,CAwBjG;AA4BD,MAAM,MAAM,0BAA0B,GAClC,wBAAwB,GACxB,yBAAyB,GACzB,qCAAqC,GACrC,sBAAsB,GACtB,kBAAkB,GAClB,cAAc,GACd,sBAAsB,GACtB,iBAAiB,CAAA;AAErB,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,UAAU,CAAA;IAClB,QAAQ,EAAE,IAAI,CAAA;IACd,sBAAsB,EAAE,MAAM,CAAA;IAC9B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,0BAA0B,EAAE,MAAM,CAAA;IAClC,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,kBAAkB,CAAA;IAC1B,IAAI,EAAE,0BAA0B,CAAA;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,0BAA0B,GAAG,sBAAsB,GAAG,8BAA8B,CAAA;AAehG;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,OAAO,EAAE,sBAAsB,CAAA;IAC/B,QAAQ,EAAE,uBAAuB,CAAA;IACjC,IAAI,EAAE,uBAAuB,CAAA;IAC7B,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA0CtC;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,aAAa,CAAA;IACrB,QAAQ,EAAE,IAAI,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,6BAA6B,GAAG,yBAAyB,GAAG,8BAA8B,CAAA;AAEtG;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,OAAO,EAAE,sBAAsB,CAAA;IAC/B,QAAQ,EAAE,uBAAuB,CAAA;IACjC,IAAI,EAAE,uBAAuB,CAAA;IAC7B,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAkCzC"}

package/lib/in-process-reload.js

@@ -0,0 +1,284 @@
+import { createHash } from 'node:crypto';
+import { ControlPlaneStoreError } from './store.js';
+const REFUSAL_CODES = Object.freeze({
+    'not-awaiting-reload': 'invalid-state',
+    'not-rollback-eligible': 'invalid-state',
+    'stale-fence': 'conflict',
+    'warrant-digest-mismatch': 'conflict',
+    'warrant-expired': 'expired',
+    'artifact-digest-mismatch': 'conflict',
+    'patch-digest-mismatch': 'conflict',
+    'invalid-target': 'invalid-input',
+    'never-hot-reload': 'conflict',
+    'process-subtree-change': 'conflict',
+    'unproven-process-authority': 'conflict',
+    'loader-unavailable': 'invalid-state',
+    'host-generation-changed': 'conflict',
+    'in-process-generation-not-monotonic': 'conflict',
+    'unproven-reload': 'invalid-input',
+    'probe-failed': 'invalid-input',
+    'probe-digest-invalid': 'invalid-input',
+});
+/** Typed refusal. Distinct `reason` values are stable machine-readable codes. */
+export class InProcessReloadRefusal extends ControlPlaneStoreError {
+    reason;
+    constructor(reason, message) {
+        super(REFUSAL_CODES[reason], message);
+        this.reason = reason;
+        this.name = 'InProcessReloadRefusal';
+    }
+}
+const DIGEST = /^[a-f0-9]{64}$/u;
+const ID = /^[A-Za-z0-9][A-Za-z0-9._:/@-]{0,199}$/u;
+const PACKAGE = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]{0,213}$/u;
+/** Plugins that must never be replaced inside a live Host process. */
+export const IN_PROCESS_RELOAD_DENYLIST = Object.freeze([
+    '@dsh-enhanced/plugin-control-plane',
+    '@dsh-enhanced/assistant-delivery',
+    '@dsh-enhanced/assistant-isolation',
+    '@dsh-enhanced/lark-channel',
+]);
+function canonical(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(',')}]`;
+    if (typeof value === 'object' && value !== null) {
+        return `{${Object.entries(value).filter(([, item]) => item !== undefined)
+            .sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${canonical(item)}`).join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+function digestOf(value) { return createHash('sha256').update(canonical(value)).digest('hex'); }
+function textOf(value, label, pattern = ID) {
+    if (typeof value !== 'string' || !pattern.test(value))
+        throw new InProcessReloadRefusal('invalid-target', `${label} is invalid`);
+    return value;
+}
+function digestField(value, label) {
+    if (typeof value !== 'string' || !DIGEST.test(value))
+        throw new InProcessReloadRefusal('invalid-target', `${label} must be a SHA-256 digest`);
+    return value;
+}
+function integerOf(value, label, minimum = 1) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < minimum) {
+        throw new InProcessReloadRefusal('invalid-target', `${label} must be an integer >= ${minimum}`);
+    }
+    return value;
+}
+function sameTarget(left, right) {
+    return left.package === right.package && left.version === right.version
+        && left.artifactDigest === right.artifactDigest && left.patchDigest === right.patchDigest
+        && left.changesProcessSubtree === right.changesProcessSubtree
+        && left.holdsUnprovenProcessAuthority === right.holdsUnprovenProcessAuthority;
+}
+export function inProcessReloadWarrantDigest(warrant) { return digestOf(warrant); }
+function assertTarget(target) {
+    textOf(target.package, 'target package', PACKAGE);
+    textOf(target.version, 'target version');
+    digestField(target.artifactDigest, 'target artifactDigest');
+    digestField(target.patchDigest, 'target patchDigest');
+    if (typeof target.changesProcessSubtree !== 'boolean')
+        throw new InProcessReloadRefusal('invalid-target', 'target changesProcessSubtree must be boolean');
+    if (typeof target.holdsUnprovenProcessAuthority !== 'boolean')
+        throw new InProcessReloadRefusal('invalid-target', 'target holdsUnprovenProcessAuthority must be boolean');
+}
+function assertReloadable(target) {
+    if (IN_PROCESS_RELOAD_DENYLIST.includes(target.package)) {
+        throw new InProcessReloadRefusal('never-hot-reload', `${target.package} must never be reloaded inside a live Host process`);
+    }
+    if (target.changesProcessSubtree) {
+        throw new InProcessReloadRefusal('process-subtree-change', `${target.package} changes the unit/dependency subtree and requires a process restart`);
+    }
+    if (target.holdsUnprovenProcessAuthority) {
+        throw new InProcessReloadRefusal('unproven-process-authority', `${target.package} would hold unproven process/cgroup authority`);
+    }
+}
+/**
+ * An in-process reload can only replace the running *configuration/patch* of an
+ * already-mounted artifact. Replacing the installed artifact code would need a
+ * module re-import that the pinned Loader does not perform (ESM import caching),
+ * so it stays a process-restart obligation.
+ */
+function assertInProcessScope(snapshot) {
+    if (snapshot.running.artifactDigest !== snapshot.target.artifactDigest) {
+        throw new InProcessReloadRefusal('artifact-digest-mismatch', 'in-process reload cannot replace the installed artifact; the artifact change requires a process restart');
+    }
+    if (snapshot.running.patchDigest === snapshot.target.patchDigest) {
+        throw new InProcessReloadRefusal('patch-digest-mismatch', 'in-process reload requires a changed profile patch');
+    }
+}
+function assertSnapshot(snapshot) {
+    textOf(snapshot.planId, 'snapshot planId');
+    digestField(snapshot.planDigest, 'snapshot planDigest');
+    textOf(snapshot.activation.id, 'snapshot activation id');
+    integerOf(snapshot.activation.fence, 'snapshot fence');
+    integerOf(snapshot.hostGeneration, 'snapshot hostGeneration');
+    integerOf(snapshot.inProcessGeneration, 'snapshot inProcessGeneration');
+    digestField(snapshot.running.artifactDigest, 'snapshot running artifactDigest');
+    digestField(snapshot.running.patchDigest, 'snapshot running patchDigest');
+    assertTarget(snapshot.target);
+}
+/**
+ * Prepare an in-process reload warrant. Only a plan parked at `awaiting-reload`
+ * with a matching target may produce a warrant; every other state refuses.
+ */
+export function prepareInProcessReload(input) {
+    const { snapshot, requestedAt, ttlMs } = input;
+    assertSnapshot(snapshot);
+    if (snapshot.status !== 'awaiting-reload') {
+        throw new InProcessReloadRefusal('not-awaiting-reload', `in-process reload requires plan status awaiting-reload, got ${snapshot.status}`);
+    }
+    assertReloadable(snapshot.target);
+    assertInProcessScope(snapshot);
+    integerOf(requestedAt, 'requestedAt', 0);
+    integerOf(ttlMs, 'ttlMs');
+    const body = {
+        schemaVersion: 1,
+        kind: 'dsh-in-process-reload-warrant',
+        planId: snapshot.planId,
+        planDigest: snapshot.planDigest,
+        activationId: snapshot.activation.id,
+        fence: snapshot.activation.fence,
+        target: { ...snapshot.target },
+        previousHostGeneration: snapshot.hostGeneration,
+        previousInProcessGeneration: snapshot.inProcessGeneration,
+        requestedAt,
+        expiresAt: requestedAt + ttlMs,
+    };
+    return Object.freeze({ ...body, digest: inProcessReloadWarrantDigest(body) });
+}
+function assertWarrantStillBound(warrant, snapshot, now) {
+    if (typeof warrant.digest !== 'string' || !DIGEST.test(warrant.digest)) {
+        throw new InProcessReloadRefusal('warrant-digest-mismatch', 'in-process reload warrant digest is invalid');
+    }
+    const { digest: _digest, ...body } = warrant;
+    if (inProcessReloadWarrantDigest(body) !== warrant.digest) {
+        throw new InProcessReloadRefusal('warrant-digest-mismatch', 'in-process reload warrant digest does not match its body');
+    }
+    if (warrant.planId !== snapshot.planId || warrant.planDigest !== snapshot.planDigest) {
+        throw new InProcessReloadRefusal('stale-fence', 'in-process reload warrant belongs to another plan revision');
+    }
+    if (warrant.activationId !== snapshot.activation.id || warrant.fence !== snapshot.activation.fence) {
+        throw new InProcessReloadRefusal('stale-fence', 'in-process reload warrant is fenced out by a newer activation');
+    }
+    if (warrant.previousHostGeneration !== snapshot.hostGeneration
+        || warrant.previousInProcessGeneration !== snapshot.inProcessGeneration) {
+        throw new InProcessReloadRefusal('stale-fence', 'in-process reload warrant generation binding is stale');
+    }
+    if (!sameTarget(warrant.target, snapshot.target)) {
+        throw new InProcessReloadRefusal('artifact-digest-mismatch', 'in-process reload warrant target no longer matches the plan');
+    }
+    if (!Number.isSafeInteger(now) || now > warrant.expiresAt) {
+        throw new InProcessReloadRefusal('warrant-expired', 'in-process reload warrant is outside its validity interval');
+    }
+}
+function probed(value) {
+    return typeof value === 'object' && value !== null
+        && Number.isSafeInteger(value.checks) && value.checks >= 1
+        && Number.isSafeInteger(value.failures) && value.failures >= 0
+        && typeof value.reloaded === 'boolean'
+        && Number.isSafeInteger(value.fibersDisposed) && value.fibersDisposed >= 0
+        && typeof value.probeDigest === 'string' && DIGEST.test(value.probeDigest);
+}
+function failure(detail, code, warrantDigest) {
+    return { status: 'rollback-pending', code, detail, warrantDigest };
+}
+/**
+ * Apply a prepared warrant through the Host port.
+ *
+ * Refusals (state/fence/digest/expiry) throw `InProcessReloadRefusal` and never
+ * touch the Host. Operational failures — a Host exception, a moved process
+ * generation, a non-monotonic in-process generation, or any probe assertion
+ * failure — return `rollback-pending`; this function has no path that reports
+ * a reload without a valid, failure-free probe digest.
+ */
+export async function applyInProcessReload(input) {
+    const { warrant, snapshot, port, now } = input;
+    assertSnapshot(snapshot);
+    assertWarrantStillBound(warrant, snapshot, now);
+    if (snapshot.status !== 'awaiting-reload') {
+        throw new InProcessReloadRefusal('not-awaiting-reload', `in-process reload requires plan status awaiting-reload, got ${snapshot.status}`);
+    }
+    assertReloadable(snapshot.target);
+    assertInProcessScope(snapshot);
+    let result;
+    try {
+        result = await port.activate({
+            warrantDigest: warrant.digest,
+            target: { ...warrant.target },
+            previousHostGeneration: warrant.previousHostGeneration,
+            previousInProcessGeneration: warrant.previousInProcessGeneration,
+        });
+    }
+    catch (error) {
+        return failure(`Host activation failed: ${error instanceof Error ? error.message : String(error)}`, 'host-activation-failed', warrant.digest);
+    }
+    if (result.previousHostGeneration !== warrant.previousHostGeneration
+        || result.currentHostGeneration !== warrant.previousHostGeneration) {
+        return failure('Host process generation changed during an in-process reload', 'host-generation-changed', warrant.digest);
+    }
+    if (result.previousInProcessGeneration !== warrant.previousInProcessGeneration
+        || result.currentInProcessGeneration !== warrant.previousInProcessGeneration + 1) {
+        return failure('in-process generation is not monotonic', 'in-process-generation-not-monotonic', warrant.digest);
+    }
+    if (!probed(result.probe))
+        return failure('Host probe is missing or malformed', 'probe-failed', warrant.digest);
+    if (result.probe.failures !== 0)
+        return failure(`Host probe reported ${result.probe.failures} failure(s)`, 'probe-failed', warrant.digest);
+    if (!result.probe.reloaded)
+        return failure('Host probe did not observe replaced fibers', 'unproven-reload', warrant.digest);
+    return {
+        status: 'reloaded',
+        reloaded: true,
+        previousHostGeneration: warrant.previousHostGeneration,
+        currentHostGeneration: result.currentHostGeneration,
+        previousInProcessGeneration: warrant.previousInProcessGeneration,
+        currentInProcessGeneration: result.currentInProcessGeneration,
+        fibersDisposed: result.probe.fibersDisposed,
+        probeDigest: result.probe.probeDigest,
+        warrantDigest: warrant.digest,
+    };
+}
+/**
+ * Roll back a failed (or deliberately reverted) in-process reload. A rollback
+ * claim requires both an explicit profile restore and a failure-free probe; a
+ * partial rollback stays `rollback-pending`.
+ */
+export async function rollbackInProcessReload(input) {
+    const { warrant, snapshot, port, now } = input;
+    assertSnapshot(snapshot);
+    assertWarrantStillBound(warrant, snapshot, now);
+    if (snapshot.status !== 'rollback-pending' && snapshot.status !== 'reloaded') {
+        throw new InProcessReloadRefusal('not-rollback-eligible', `in-process reload rollback requires rollback-pending or reloaded, got ${snapshot.status}`);
+    }
+    assertReloadable(snapshot.target);
+    let result;
+    try {
+        result = await port.rollback({
+            warrantDigest: warrant.digest,
+            target: { ...warrant.target },
+            reloadedInProcessGeneration: snapshot.inProcessGeneration,
+        });
+    }
+    catch (error) {
+        return failure(`Host rollback failed: ${error instanceof Error ? error.message : String(error)}`, 'host-rollback-failed', warrant.digest);
+    }
+    if (result.hostGeneration !== warrant.previousHostGeneration) {
+        return failure('Host process generation changed during rollback', 'host-generation-changed', warrant.digest);
+    }
+    if (!result.restored || !result.profileRestored)
+        return failure('Host did not prove the profile restore', 'restore-unproven', warrant.digest);
+    if (!probed(result.probe))
+        return failure('Host rollback probe is missing or malformed', 'probe-failed', warrant.digest);
+    if (result.probe.failures !== 0 || !result.probe.reloaded) {
+        return failure('Host rollback probe did not prove a serving tree', 'probe-failed', warrant.digest);
+    }
+    return {
+        status: 'rolled-back',
+        restored: true,
+        hostGeneration: result.hostGeneration,
+        inProcessGeneration: result.inProcessGeneration,
+        probeDigest: result.probe.probeDigest,
+        warrantDigest: warrant.digest,
+    };
+}
+//# sourceMappingURL=in-process-reload.js.map

package/lib/in-process-reload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-process-reload.js","sourceRoot":"","sources":["../src/in-process-reload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAqCnD,MAAM,aAAa,GAA4G,MAAM,CAAC,MAAM,CAAC;IAC3I,qBAAqB,EAAE,eAAe;IACtC,uBAAuB,EAAE,eAAe;IACxC,aAAa,EAAE,UAAU;IACzB,yBAAyB,EAAE,UAAU;IACrC,iBAAiB,EAAE,SAAS;IAC5B,0BAA0B,EAAE,UAAU;IACtC,uBAAuB,EAAE,UAAU;IACnC,gBAAgB,EAAE,eAAe;IACjC,kBAAkB,EAAE,UAAU;IAC9B,wBAAwB,EAAE,UAAU;IACpC,4BAA4B,EAAE,UAAU;IACxC,oBAAoB,EAAE,eAAe;IACrC,yBAAyB,EAAE,UAAU;IACrC,qCAAqC,EAAE,UAAU;IACjD,iBAAiB,EAAE,eAAe;IAClC,cAAc,EAAE,eAAe;IAC/B,sBAAsB,EAAE,eAAe;CACxC,CAAC,CAAA;AAEF,iFAAiF;AACjF,MAAM,OAAO,sBAAuB,SAAQ,sBAAsB;IAC3C;IAArB,YAAqB,MAAoC,EAAE,OAAe;QACxE,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAA;QADlB,WAAM,GAAN,MAAM,CAA8B;QAEvD,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAED,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,EAAE,GAAG,wCAAwC,CAAA;AACnD,MAAM,OAAO,GAAG,2DAA2D,CAAA;AAE3E,sEAAsE;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAsB,MAAM,CAAC,MAAM,CAAC;IACzE,oCAAoC;IACpC,kCAAkC;IAClC,mCAAmC;IACnC,4BAA4B;CAC7B,CAAC,CAAA;AAEF,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACjG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACxI,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAEhH,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa,EAAE,OAAO,GAAG,EAAE;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,gBAAgB,EAAE,GAAG,KAAK,aAAa,CAAC,CAAA;IAChI,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,gBAAgB,EAAE,GAAG,KAAK,2BAA2B,CAAC,CAAA;IAC7I,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa,EAAE,OAAO,GAAG,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QACjF,MAAM,IAAI,sBAAsB,CAAC,gBAAgB,EAAE,GAAG,KAAK,0BAA0B,OAAO,EAAE,CAAC,CAAA;IACjG,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAA2B,EAAE,KAA4B;IAC3E,OAAO,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAClE,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;WACtF,IAAI,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;WAC1D,IAAI,CAAC,6BAA6B,KAAK,KAAK,CAAC,6BAA6B,CAAA;AACjF,CAAC;AA2GD,MAAM,UAAU,4BAA4B,CAAC,OAAmC,IAAY,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;AAEtH,SAAS,YAAY,CAAC,MAA6B;IACjD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAA;IACjD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACxC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAA;IAC3D,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAA;IACrD,IAAI,OAAO,MAAM,CAAC,qBAAqB,KAAK,SAAS;QAAE,MAAM,IAAI,sBAAsB,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAA;IACzJ,IAAI,OAAO,MAAM,CAAC,6BAA6B,KAAK,SAAS;QAAE,MAAM,IAAI,sBAAsB,CAAC,gBAAgB,EAAE,sDAAsD,CAAC,CAAA;AAC3K,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA6B;IACrD,IAAI,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,EAAE,GAAG,MAAM,CAAC,OAAO,oDAAoD,CAAC,CAAA;IAC7H,CAAC;IACD,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;QACjC,MAAM,IAAI,sBAAsB,CAAC,wBAAwB,EAAE,GAAG,MAAM,CAAC,OAAO,qEAAqE,CAAC,CAAA;IACpJ,CAAC;IACD,IAAI,MAAM,CAAC,6BAA6B,EAAE,CAAC;QACzC,MAAM,IAAI,sBAAsB,CAAC,4BAA4B,EAAE,GAAG,MAAM,CAAC,OAAO,+CAA+C,CAAC,CAAA;IAClI,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,QAAiC;IAC7D,IAAI,QAAQ,CAAC,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,EAAE,yGAAyG,CAAC,CAAA;IACzK,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACjE,MAAM,IAAI,sBAAsB,CAAC,uBAAuB,EAAE,oDAAoD,CAAC,CAAA;IACjH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAiC;IACvD,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IAC1C,WAAW,CAAC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAA;IACvD,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAA;IACxD,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;IACtD,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAA;IAC7D,SAAS,CAAC,QAAQ,CAAC,mBAAmB,EAAE,8BAA8B,CAAC,CAAA;IACvE,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAA;IAC/E,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAA;IACzE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IAC9C,cAAc,CAAC,QAAQ,CAAC,CAAA;IACxB,IAAI,QAAQ,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,sBAAsB,CAAC,qBAAqB,EAAE,+DAA+D,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3I,CAAC;IACD,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACjC,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IAC9B,SAAS,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC,CAAA;IACxC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACzB,MAAM,IAAI,GAA+B;QACvC,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK;QAChC,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE;QAC9B,sBAAsB,EAAE,QAAQ,CAAC,cAAc;QAC/C,2BAA2B,EAAE,QAAQ,CAAC,mBAAmB;QACzD,WAAW;QACX,SAAS,EAAE,WAAW,GAAG,KAAK;KAC/B,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA+B,EAAE,QAAiC,EAAE,GAAW;IAC9G,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,EAAE,6CAA6C,CAAC,CAAA;IAC5G,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IAC5C,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1D,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,EAAE,0DAA0D,CAAC,CAAA;IACzH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACrF,MAAM,IAAI,sBAAsB,CAAC,aAAa,EAAE,4DAA4D,CAAC,CAAA;IAC/G,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACnG,MAAM,IAAI,sBAAsB,CAAC,aAAa,EAAE,+DAA+D,CAAC,CAAA;IAClH,CAAC;IACD,IAAI,OAAO,CAAC,sBAAsB,KAAK,QAAQ,CAAC,cAAc;WACzD,OAAO,CAAC,2BAA2B,KAAK,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAC1E,MAAM,IAAI,sBAAsB,CAAC,aAAa,EAAE,uDAAuD,CAAC,CAAA;IAC1G,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,EAAE,6DAA6D,CAAC,CAAA;IAC7H,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,sBAAsB,CAAC,iBAAiB,EAAE,4DAA4D,CAAC,CAAA;IACnH,CAAC;AACH,CAAC;AAiCD,SAAS,MAAM,CAAC,KAA+B;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;WAC7C,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;WACvD,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC;WAC3D,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;WACnC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC;WACvE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,IAAgC,EAAE,aAAqB;IACtF,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;AACpE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAK1C;IACC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;IAC9C,cAAc,CAAC,QAAQ,CAAC,CAAA;IACxB,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,sBAAsB,CAAC,qBAAqB,EAAE,+DAA+D,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3I,CAAC;IACD,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACjC,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IAC9B,IAAI,MAA2C,CAAA;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC;YAC3B,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;YAC7B,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;YACtD,2BAA2B,EAAE,OAAO,CAAC,2BAA2B;SACjE,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,wBAAwB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/I,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,KAAK,OAAO,CAAC,sBAAsB;WAC/D,MAAM,CAAC,qBAAqB,KAAK,OAAO,CAAC,sBAAsB,EAAE,CAAC;QACrE,OAAO,OAAO,CAAC,6DAA6D,EAAE,yBAAyB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1H,CAAC;IACD,IAAI,MAAM,CAAC,2BAA2B,KAAK,OAAO,CAAC,2BAA2B;WACzE,MAAM,CAAC,0BAA0B,KAAK,OAAO,CAAC,2BAA2B,GAAG,CAAC,EAAE,CAAC;QACnF,OAAO,OAAO,CAAC,wCAAwC,EAAE,qCAAqC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IACjH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,oCAAoC,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/G,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,QAAQ,aAAa,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1I,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC,4CAA4C,EAAE,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3H,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,IAAI;QACd,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;QACtD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,2BAA2B,EAAE,OAAO,CAAC,2BAA2B;QAChE,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc;QAC3C,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;QACrC,aAAa,EAAE,OAAO,CAAC,MAAM;KAC9B,CAAA;AACH,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAK7C;IACC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;IAC9C,cAAc,CAAC,QAAQ,CAAC,CAAA;IACxB,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC7E,MAAM,IAAI,sBAAsB,CAAC,uBAAuB,EAAE,yEAAyE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACvJ,CAAC;IACD,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,MAAyC,CAAA;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC;YAC3B,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;YAC7B,2BAA2B,EAAE,QAAQ,CAAC,mBAAmB;SAC1D,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3I,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,sBAAsB,EAAE,CAAC;QAC7D,OAAO,OAAO,CAAC,iDAAiD,EAAE,yBAAyB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC9G,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAO,OAAO,CAAC,wCAAwC,EAAE,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7I,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,6CAA6C,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IACxH,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1D,OAAO,OAAO,CAAC,kDAAkD,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IACpG,CAAC;IACD,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;QACrC,aAAa,EAAE,OAAO,CAAC,MAAM;KAC9B,CAAA;AACH,CAAC"}

package/lib/index.d.ts

@@ -5,11 +5,13 @@ export declare const name = "dsh-enhanced-plugin-control-plane";
 export { PluginControlPlaneService, normalizeControlPlaneConfig, version };
 export { Config } from './service.js';
 export type { NormalizedControlPlaneConfig } from './service.js';
-export type { CreationCapabilityConfig, CreationCapabilityOwner, CreationCapabilityReceipt, CreationCapabilitySourceArchive, CreationCapabilityTaskAssociation } from './creation-capability-types.js';
+export type { CreationCapabilityConfig, CreationCapabilityOwner, CreationCapabilityReceipt, CreationCapabilitySourceArchive, CreationCapabilityTaskAssociation, CreationCapabilityOrdinaryUseReport, CreationCapabilityOrdinaryUseStratum, CreationCapabilityOrdinaryUseMeasures, CreationCapabilityOrdinaryUseModel, CreationCapabilityOrdinaryUseQuality, CreationCapabilityOrdinaryUseLatency, CreationCapabilityAvailabilityAttribution, CreationCapabilityAttributionStratum, CreationCapabilityAttributionArm, CreationCapabilityAttributionDelta, CreationCapabilityOrdinaryUseTrend, CreationCapabilityTrendWindow, CreationCapabilityTrendCell, CreationCapabilityTrendStratum, CreationCapabilityTrendDifferenceInDifferences, CreationCapabilityTrendParallelCheck, CreationCapabilityTrendFlag } from './creation-capability-types.js';
 export type { CreationCapabilitySourceSnapshot } from './creation-capability-source.js';
-export { inspectCreationCapabilityTaskAssociations } from './creation-capability-feedback.js';
-export type { CreationCapabilityFeedbackInput } from './creation-capability-feedback.js';
-export { validateCreationCapabilityConfig, verifyCreationCapabilityReceipt } from './creation-capability-journal.js';
+export { inspectCreationCapabilityAvailabilityAttribution, inspectCreationCapabilityOrdinaryUseReport, inspectCreationCapabilityOrdinaryUseTrend, inspectCreationCapabilityTaskAssociations } from './creation-capability-feedback.js';
+export type { CreationCapabilityAttributionInput, CreationCapabilityFeedbackInput, CreationCapabilityTrendInput } from './creation-capability-feedback.js';
+export { assertCreationCapabilityTrendSnapshot, createCreationCapabilityTrendSnapshot, TREND_SNAPSHOT_DEFAULT_PAGE, TREND_SNAPSHOT_MAX_PAGE } from './creation-capability-trend-snapshot.js';
+export type { CreationCapabilityTrendSnapshot, CreationCapabilityTrendSnapshotPage, CreationCapabilityTrendSnapshotQuery, CreationCapabilityTrendSnapshotRecord } from './creation-capability-trend-snapshot.js';
+export { creationCapabilityAuthorityDigest, creationCapabilityPublicKey, validateCreationCapabilityConfig, verifyCreationCapabilityReceipt } from './creation-capability-journal.js';
 export * from './catalog.js';
 export * from './errors.js';
 export * from './source-workspace.js';
@@ -23,6 +25,7 @@ export type { SourceAdoptionAuthorityConfig } from './source-adoption-authority.
 export * from './attestation.js';
 export * from './host-attestor.js';
 export * from './runtime-observer.js';
+export * from './in-process-reload.js';
 export type { ForegroundDeploymentConfig } from './foreground-deployment-runtime.js';
 export type * from './task-observation-types.js';
 export { validateTaskObservationAuthorityConfig } from './task-observation-authority.js';
@@ -41,6 +44,7 @@ export * from './types.js';
 export * from './trust.js';
 export type * from './source-job-types.js';
 export { validateSourceBaselineConfig } from './source-baseline.js';
+export { validateSourceBuildConfig } from './source-build.js';
 export type { SourceBaselineConfig } from './source-baseline.js';
 export { parseSourceMaintenanceRecord, signSourceMaintenanceRecord, sourceBaselineChain, sourceMaintenanceDigest, sourceMaintenanceSourceFieldsDigest, verifySourceMaintenanceRecords } from './source-maintenance.js';
 export type { SourceMaintenanceRecord, SourceMaintenanceAnchor } from './source-maintenance.js';
@@ -56,4 +60,8 @@ export type { LiveQualificationTerms, LiveQualificationBatch, LiveQualificationR
 export { validateSystemdHostAuthorityConfig } from './systemd-host-authority.js';
 export type { SystemdHostAuthorityConfig } from './systemd-host-authority.js';
 export * from './host-maintenance.js';
+export { planEmptyAdoptionHandoff, applyEmptyAdoptionHandoff, verifyEmptyAdoptionHandoff } from './creation-capability-empty-handoff.js';
+export type { EmptyAdoptionScope, EmptyAdoptionPlan, EmptyAdoptionProof } from './creation-capability-empty-handoff.js';
+export { planSealedAdoptionHandoff, applySealedAdoptionHandoff, verifySealedAdoptionHandoff, readSealedAdoptionHandoffDigest, readSealedReverificationSource, assertSealedReplayPlanIdIsolated } from './creation-capability-sealed-handoff.js';
+export type { SealedAdoptionScope, SealedAdoptionPlan, SealedAdoptionProof, SealedAdoptionHistory, SealedAdoptionRow, SealedPendingReverification, SealedReverificationSource, SealedReplayPlanIdIsolation } from './creation-capability-sealed-handoff.js';
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAA;AAClG,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,eAAO,MAAM,IAAI,sCAAsC,CAAA;AACvD,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,OAAO,EAAE,CAAA;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,YAAY,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAChE,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,yBAAyB,EACxF,+BAA+B,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAA;AAC5G,YAAY,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAA;AACvF,OAAO,EAAE,yCAAyC,EAAE,MAAM,mCAAmC,CAAA;AAC7F,YAAY,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAA;AACxF,OAAO,EAAE,gCAAgC,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAA;AACpH,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,uBAAuB,CAAA;AACrC,cAAc,eAAe,CAAA;AAC7B,YAAY,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAC7E,OAAO,EAAE,qCAAqC,EAAE,MAAM,gCAAgC,CAAA;AACtF,YAAY,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAC1G,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AACvE,OAAO,EAAE,qCAAqC,EAAE,MAAM,gCAAgC,CAAA;AACtF,YAAY,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAA;AACnF,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,YAAY,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AACpF,mBAAmB,6BAA6B,CAAA;AAChD,OAAO,EAAE,sCAAsC,EAAE,MAAM,iCAAiC,CAAA;AACxF,YAAY,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAA;AACrF,YAAY,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AAC5E,cAAc,4BAA4B,CAAA;AAC1C,cAAc,sBAAsB,CAAA;AACpC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AACpF,YAAY,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAA;AACjF,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,mBAAmB,uBAAuB,CAAA;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAA;AACnE,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAChE,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,uBAAuB,EAC9G,mCAAmC,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAA;AACtG,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAC/F,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAE9E,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAExD;AAED,eAAe,yBAAyB,CAAA;AAExC,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACxF,YAAY,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAE1E,OAAO,EAAE,wCAAwC,EAAE,MAAM,mCAAmC,CAAA;AAC5F,YAAY,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAA;AACzF,YAAY,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AAC9E,YAAY,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AACvH,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAA;AAChF,YAAY,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAC7E,cAAc,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAA;AAClG,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,eAAO,MAAM,IAAI,sCAAsC,CAAA;AACvD,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,OAAO,EAAE,CAAA;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,YAAY,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAChE,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,yBAAyB,EACxF,+BAA+B,EAAE,iCAAiC,EAAE,mCAAmC,EACvG,oCAAoC,EAAE,qCAAqC,EAAE,kCAAkC,EAC/G,oCAAoC,EAAE,oCAAoC,EAAE,yCAAyC,EACrH,oCAAoC,EAAE,gCAAgC,EAAE,kCAAkC,EAAE,kCAAkC,EAC9I,6BAA6B,EAAE,2BAA2B,EAAE,8BAA8B,EAC1F,8CAA8C,EAAE,oCAAoC,EACpF,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AACrE,YAAY,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAA;AACvF,OAAO,EAAE,gDAAgD,EAAE,0CAA0C,EACnG,yCAAyC,EAAE,yCAAyC,EAAE,MAAM,mCAAmC,CAAA;AACjI,YAAY,EAAE,kCAAkC,EAAE,+BAA+B,EAC/E,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AACzE,OAAO,EAAE,qCAAqC,EAAE,qCAAqC,EAAE,2BAA2B,EAChH,uBAAuB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,YAAY,EAAE,+BAA+B,EAAE,mCAAmC,EAAE,oCAAoC,EACtH,qCAAqC,EAAE,MAAM,yCAAyC,CAAA;AACxF,OAAO,EAAE,iCAAiC,EAAE,2BAA2B,EAAE,gCAAgC,EACvG,+BAA+B,EAAE,MAAM,kCAAkC,CAAA;AAC3E,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,uBAAuB,CAAA;AACrC,cAAc,eAAe,CAAA;AAC7B,YAAY,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAC7E,OAAO,EAAE,qCAAqC,EAAE,MAAM,gCAAgC,CAAA;AACtF,YAAY,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAC1G,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AACvE,OAAO,EAAE,qCAAqC,EAAE,MAAM,gCAAgC,CAAA;AACtF,YAAY,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAA;AACnF,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AACtC,YAAY,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AACpF,mBAAmB,6BAA6B,CAAA;AAChD,OAAO,EAAE,sCAAsC,EAAE,MAAM,iCAAiC,CAAA;AACxF,YAAY,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAA;AACrF,YAAY,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AAC5E,cAAc,4BAA4B,CAAA;AAC1C,cAAc,sBAAsB,CAAA;AACpC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AACpF,YAAY,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAA;AACjF,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,mBAAmB,uBAAuB,CAAA;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAC7D,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAChE,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,uBAAuB,EAC9G,mCAAmC,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAA;AACtG,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAC/F,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAE9E,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAExD;AAED,eAAe,yBAAyB,CAAA;AAExC,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACxF,YAAY,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAE1E,OAAO,EAAE,wCAAwC,EAAE,MAAM,mCAAmC,CAAA;AAC5F,YAAY,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAA;AACzF,YAAY,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AAC9E,YAAY,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AACvH,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAA;AAChF,YAAY,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAC7E,cAAc,uBAAuB,CAAA;AAGrC,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAA;AACxI,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AACvH,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,2BAA2B,EACzF,+BAA+B,EAAE,8BAA8B,EAAE,gCAAgC,EAAE,MAAM,yCAAyC,CAAA;AACpJ,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,iBAAiB,EAClH,2BAA2B,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAA"}

package/lib/index.js

@@ -3,8 +3,9 @@ import { version } from './version.js';
 export const name = 'dsh-enhanced-plugin-control-plane';
 export { PluginControlPlaneService, normalizeControlPlaneConfig, version };
 export { Config } from './service.js';
-export { inspectCreationCapabilityTaskAssociations } from './creation-capability-feedback.js';
-export { validateCreationCapabilityConfig, verifyCreationCapabilityReceipt } from './creation-capability-journal.js';
+export { inspectCreationCapabilityAvailabilityAttribution, inspectCreationCapabilityOrdinaryUseReport, inspectCreationCapabilityOrdinaryUseTrend, inspectCreationCapabilityTaskAssociations } from './creation-capability-feedback.js';
+export { assertCreationCapabilityTrendSnapshot, createCreationCapabilityTrendSnapshot, TREND_SNAPSHOT_DEFAULT_PAGE, TREND_SNAPSHOT_MAX_PAGE } from './creation-capability-trend-snapshot.js';
+export { creationCapabilityAuthorityDigest, creationCapabilityPublicKey, validateCreationCapabilityConfig, verifyCreationCapabilityReceipt } from './creation-capability-journal.js';
 export * from './catalog.js';
 export * from './errors.js';
 export * from './source-workspace.js';
@@ -14,6 +15,7 @@ export { validateSourceAdoptionAuthorityConfig } from './source-adoption-authori
 export * from './attestation.js';
 export * from './host-attestor.js';
 export * from './runtime-observer.js';
+export * from './in-process-reload.js';
 export { validateTaskObservationAuthorityConfig } from './task-observation-authority.js';
 export * from './effect-blocked-replay.js';
 export * from './replay-endpoint.js';
@@ -26,6 +28,7 @@ export * from './store.js';
 export * from './types.js';
 export * from './trust.js';
 export { validateSourceBaselineConfig } from './source-baseline.js';
+export { validateSourceBuildConfig } from './source-build.js';
 export { parseSourceMaintenanceRecord, signSourceMaintenanceRecord, sourceBaselineChain, sourceMaintenanceDigest, sourceMaintenanceSourceFieldsDigest, verifySourceMaintenanceRecords } from './source-maintenance.js';
 export function apply(ctx, config) {
     new PluginControlPlaneService(ctx, config);
@@ -34,4 +37,7 @@ export default PluginControlPlaneService;
 export { validateLiveQualificationAuthorityConfig } from './live-qualification-authority.js';
 export { validateSystemdHostAuthorityConfig } from './systemd-host-authority.js';
 export * from './host-maintenance.js';
+// Fixed-purpose Host/installer maintenance; never mounted as a model tool.
+export { planEmptyAdoptionHandoff, applyEmptyAdoptionHandoff, verifyEmptyAdoptionHandoff } from './creation-capability-empty-handoff.js';
+export { planSealedAdoptionHandoff, applySealedAdoptionHandoff, verifySealedAdoptionHandoff, readSealedAdoptionHandoffDigest, readSealedReverificationSource, assertSealedReplayPlanIdIsolated } from './creation-capability-sealed-handoff.js';
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAe,MAAM,cAAc,CAAA;AAClG,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,IAAI,GAAG,mCAAmC,CAAA;AACvD,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,OAAO,EAAE,CAAA;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAKrC,OAAO,EAAE,yCAAyC,EAAE,MAAM,mCAAmC,CAAA;AAE7F,OAAO,EAAE,gCAAgC,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAA;AACpH,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,uBAAuB,CAAA;AACrC,cAAc,eAAe,CAAA;AAE7B,OAAO,EAAE,qCAAqC,EAAE,MAAM,gCAAgC,CAAA;AAGtF,OAAO,EAAE,qCAAqC,EAAE,MAAM,gCAAgC,CAAA;AAEtF,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AAGrC,OAAO,EAAE,sCAAsC,EAAE,MAAM,iCAAiC,CAAA;AAGxF,cAAc,4BAA4B,CAAA;AAC1C,cAAc,sBAAsB,CAAA;AACpC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AAEpF,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAE1B,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAA;AAEnE,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,uBAAuB,EAC9G,mCAAmC,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAA;AAItG,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAc;IAChD,IAAI,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AAC5C,CAAC;AAED,eAAe,yBAAyB,CAAA;AAKxC,OAAO,EAAE,wCAAwC,EAAE,MAAM,mCAAmC,CAAA;AAI5F,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAA;AAEhF,cAAc,uBAAuB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAe,MAAM,cAAc,CAAA;AAClG,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,IAAI,GAAG,mCAAmC,CAAA;AACvD,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,OAAO,EAAE,CAAA;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAWrC,OAAO,EAAE,gDAAgD,EAAE,0CAA0C,EACnG,yCAAyC,EAAE,yCAAyC,EAAE,MAAM,mCAAmC,CAAA;AAGjI,OAAO,EAAE,qCAAqC,EAAE,qCAAqC,EAAE,2BAA2B,EAChH,uBAAuB,EAAE,MAAM,yCAAyC,CAAA;AAG1E,OAAO,EAAE,iCAAiC,EAAE,2BAA2B,EAAE,gCAAgC,EACvG,+BAA+B,EAAE,MAAM,kCAAkC,CAAA;AAC3E,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,uBAAuB,CAAA;AACrC,cAAc,eAAe,CAAA;AAE7B,OAAO,EAAE,qCAAqC,EAAE,MAAM,gCAAgC,CAAA;AAGtF,OAAO,EAAE,qCAAqC,EAAE,MAAM,gCAAgC,CAAA;AAEtF,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AAGtC,OAAO,EAAE,sCAAsC,EAAE,MAAM,iCAAiC,CAAA;AAGxF,cAAc,4BAA4B,CAAA;AAC1C,cAAc,sBAAsB,CAAA;AACpC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AAEpF,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAE1B,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAE7D,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,uBAAuB,EAC9G,mCAAmC,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAA;AAItG,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAc;IAChD,IAAI,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AAC5C,CAAC;AAED,eAAe,yBAAyB,CAAA;AAKxC,OAAO,EAAE,wCAAwC,EAAE,MAAM,mCAAmC,CAAA;AAI5F,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAA;AAEhF,cAAc,uBAAuB,CAAA;AAErC,2EAA2E;AAC3E,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAA;AAExI,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,2BAA2B,EACzF,+BAA+B,EAAE,8BAA8B,EAAE,gCAAgC,EAAE,MAAM,yCAAyC,CAAA"}

package/lib/linux-source-build.d.ts

@@ -0,0 +1,16 @@
+import type { LinuxRepositoryRunner } from '@dsh-enhanced/assistant-isolation';
+import { type LinuxSourceBuildConfig, type SourceBuildResult, type runDockerPreparedChecks } from './source-build.js';
+import type { LinuxSourcePreparedEvidence } from './types.js';
+export declare const LINUX_SOURCE_PACK_PATH = ".dsh-native-artifact/package.tgz";
+/** Retain the full repository command and both archive/pack integrity checks. */
+export declare const LINUX_PREPARED_SOURCE_BUILD_SCRIPT: string;
+export interface LinuxSourceBuildInput extends Omit<Parameters<typeof runDockerPreparedChecks>[0], 'config' | 'sourceJob'> {
+    config: LinuxSourceBuildConfig;
+    runner: LinuxRepositoryRunner;
+    sourceJob: {
+        id: string;
+    };
+}
+/** Whole-repository Linux preparation. The runner owns authorization, budget and cgroup receipts. */
+export declare function runLinuxPreparedChecks(provided: LinuxSourceBuildInput): Promise<SourceBuildResult<LinuxSourcePreparedEvidence>>;
+//# sourceMappingURL=linux-source-build.d.ts.map

package/lib/linux-source-build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-source-build.d.ts","sourceRoot":"","sources":["../src/linux-source-build.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AAG9E,OAAO,EACL,KAAK,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAC9G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAA;AAM7D,eAAO,MAAM,sBAAsB,qCAAqC,CAAA;AAGxE,iFAAiF;AACjF,eAAO,MAAM,kCAAkC,QAS8D,CAAA;AAG7G,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACxH,MAAM,EAAE,sBAAsB,CAAA;IAC9B,MAAM,EAAE,qBAAqB,CAAA;IAC7B,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1B;AAgFD,qGAAqG;AACrG,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC,CAiBrI"}