@dynamicalsystems/idl 0.6.1 → 0.7.0

package/dist/index.cjs

@@ -626,6 +626,68 @@ const ordinaryAuthorityV1 = {
 const EXECUTOR_PROTOCOL_VERSION = "dsg.run.executor/1";
 const PROVIDER_PROTOCOL_VERSION = "dsg.run.provider/1";
 //#endregion
+//#region src/run/event.v1.ts
+const EVENT_PROFILE = "dsg.run.event/1";
+/** The wire prefix that lets a collector pick these lines out of ordinary
+*  job logs. One space, then the JSON object, then a newline. */
+const EVENT_LINE_PREFIX = "DSGEV ";
+/** The lifecycle spine every catalog carries without declaring it: the
+*  kinds the console draws for any workload, whatever it models. A
+*  workload emitting only started and finished is fully described. */
+const LIFECYCLE_KINDS = [
+	"started",
+	"phase.entered",
+	"phase.exited",
+	"progress",
+	"checkpoint",
+	"artifact",
+	"warning",
+	"failure",
+	"finished"
+];
+const EventSchema = closed({
+	profile: _sinclair_typebox.Type.Literal(EVENT_PROFILE),
+	/** The operation this event belongs to; injected into the job's
+	*  environment by the plane, never chosen by the workload. */
+	operation: NonEmptyString,
+	/** Monotonic within one operation, from 1. Ordering lives here. */
+	sequence: _sinclair_typebox.Type.Integer({
+		minimum: 1,
+		maximum: Number.MAX_SAFE_INTEGER
+	}),
+	at: UtcSecond,
+	/** A lifecycle kind or one the pinned catalog declares. */
+	kind: NonEmptyString,
+	/** Digest of the catalog the payload validates against. */
+	catalogSha256: Hex64,
+	/** Validated against the catalog by digest, not by this schema: a
+	*  modeler's vocabulary is theirs, and the plane refuses a payload the
+	*  catalog does not admit. Artifacts are references, never contents. */
+	payload: _sinclair_typebox.Type.Record(_sinclair_typebox.Type.String(), _sinclair_typebox.Type.Unknown())
+});
+const EventStreamSealSchema = closed({
+	profile: _sinclair_typebox.Type.Literal(EVENT_PROFILE),
+	operation: NonEmptyString,
+	catalogSha256: Hex64,
+	/** sha256 over the newline-joined canonical event lines, in sequence. */
+	streamSha256: Hex64,
+	eventCount: SafeInt,
+	/** Sequence numbers missing from an otherwise ordered stream. */
+	gaps: _sinclair_typebox.Type.Array(_sinclair_typebox.Type.Integer({
+		minimum: 1,
+		maximum: Number.MAX_SAFE_INTEGER
+	})),
+	truncatedAtSequence: _sinclair_typebox.Type.Union([_sinclair_typebox.Type.Integer({ minimum: 1 }), _sinclair_typebox.Type.Null()])
+});
+const eventV1 = {
+	literal: EVENT_PROFILE,
+	rootShape: "event",
+	shapes: {
+		event: EventSchema,
+		streamSeal: EventStreamSealSchema
+	}
+};
+//#endregion
 //#region src/index.ts
 /** Every profile this version of the package defines, keyed by literal.
 * Profile modules are added here as they are extracted; the rules test
@@ -634,6 +696,7 @@ const PROVIDER_PROTOCOL_VERSION = "dsg.run.provider/1";
 const PROFILES = {
 	[dispatchConsumeV1.literal]: dispatchConsumeV1,
 	[operationV1.literal]: operationV1,
+	[eventV1.literal]: eventV1,
 	[signedLawV1.literal]: signedLawV1,
 	[resourceDescriptorV1.literal]: resourceDescriptorV1,
 	[adoptionFactV1.literal]: adoptionFactV1,
@@ -654,11 +717,16 @@ exports.DispatchConsumeRequestSchema = DispatchConsumeRequestSchema;
 exports.DispatchLeaseSchema = DispatchLeaseSchema;
 exports.DispatchRefusalCodeSchema = DispatchRefusalCodeSchema;
 exports.DispatchRefusalSchema = DispatchRefusalSchema;
+exports.EVENT_LINE_PREFIX = EVENT_LINE_PREFIX;
+exports.EVENT_PROFILE = EVENT_PROFILE;
 exports.EXECUTOR_PROTOCOL_VERSION = EXECUTOR_PROTOCOL_VERSION;
+exports.EventSchema = EventSchema;
+exports.EventStreamSealSchema = EventStreamSealSchema;
 exports.ExecutionDocumentSchema = ExecutionDocumentSchema;
 exports.ExecutionLawSchema = ExecutionLawSchema;
 exports.ExecutionResourcesSchema = ExecutionResourcesSchema;
 exports.Hex64 = Hex64;
+exports.LIFECYCLE_KINDS = LIFECYCLE_KINDS;
 exports.NonEmptyString = NonEmptyString;
 exports.OPERATION_PROFILE = OPERATION_PROFILE;
 exports.ORDINARY_AUTHORITY_PROFILE = ORDINARY_AUTHORITY_PROFILE;

package/dist/index.d.cts

@@ -661,6 +661,54 @@ type ExecutorProtocolVersion = typeof EXECUTOR_PROTOCOL_VERSION;
 declare const PROVIDER_PROTOCOL_VERSION: "dsg.run.provider/1";
 type ProviderProtocolVersion = typeof PROVIDER_PROTOCOL_VERSION;
 //#endregion
+//#region src/run/event.v1.d.ts
+declare const EVENT_PROFILE: "dsg.run.event/1";
+/** The wire prefix that lets a collector pick these lines out of ordinary
+ *  job logs. One space, then the JSON object, then a newline. */
+declare const EVENT_LINE_PREFIX: "DSGEV ";
+/** The lifecycle spine every catalog carries without declaring it: the
+ *  kinds the console draws for any workload, whatever it models. A
+ *  workload emitting only started and finished is fully described. */
+declare const LIFECYCLE_KINDS: readonly ["started", "phase.entered", "phase.exited", "progress", "checkpoint", "artifact", "warning", "failure", "finished"];
+declare const EventSchemaValue: import("@sinclair/typebox").TObject<{
+  profile: import("@sinclair/typebox").TLiteral<"dsg.run.event/1">;
+  /** The operation this event belongs to; injected into the job's
+   *  environment by the plane, never chosen by the workload. */
+  operation: import("@sinclair/typebox").TString;
+  /** Monotonic within one operation, from 1. Ordering lives here. */
+  sequence: import("@sinclair/typebox").TInteger;
+  at: import("@sinclair/typebox").TString;
+  /** A lifecycle kind or one the pinned catalog declares. */
+  kind: import("@sinclair/typebox").TString;
+  /** Digest of the catalog the payload validates against. */
+  catalogSha256: import("@sinclair/typebox").TString;
+  /** Validated against the catalog by digest, not by this schema: a
+   *  modeler's vocabulary is theirs, and the plane refuses a payload the
+   *  catalog does not admit. Artifacts are references, never contents. */
+  payload: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>;
+}>;
+declare const EventSchema: typeof EventSchemaValue;
+type Event = Static<typeof EventSchema>;
+/** What the plane seals into the outcome: the ordered stream's own digest,
+ *  the catalog it validated against, and the count - enough for an
+ *  offline reader holding the exported stream to recompute the verdict
+ *  without the plane. `truncatedAtSequence` is the event ceiling's mark:
+ *  a runaway logger is bounded, and the bound is visible rather than a
+ *  silently short stream. */
+declare const EventStreamSealSchemaValue: import("@sinclair/typebox").TObject<{
+  profile: import("@sinclair/typebox").TLiteral<"dsg.run.event/1">;
+  operation: import("@sinclair/typebox").TString;
+  catalogSha256: import("@sinclair/typebox").TString;
+  /** sha256 over the newline-joined canonical event lines, in sequence. */
+  streamSha256: import("@sinclair/typebox").TString;
+  eventCount: import("@sinclair/typebox").TInteger;
+  /** Sequence numbers missing from an otherwise ordered stream. */
+  gaps: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TInteger>;
+  truncatedAtSequence: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TInteger, import("@sinclair/typebox").TNull]>;
+}>;
+declare const EventStreamSealSchema: typeof EventStreamSealSchemaValue;
+type EventStreamSeal = Static<typeof EventStreamSealSchema>;
+//#endregion
 //#region src/index.d.ts
 /** Every profile this version of the package defines, keyed by literal.
  * Profile modules are added here as they are extracted; the rules test
@@ -668,5 +716,5 @@ type ProviderProtocolVersion = typeof PROVIDER_PROTOCOL_VERSION;
  * registered does not exist. */
 declare const PROFILES: Readonly<Record<string, ProfileEntry>>;
 //#endregion
-export { ADOPTION_FACT_PROFILE, type Accepted, AcceptedSchema, type AdoptionFact, AdoptionFactSchema, BOOTSTRAP_PROFILE, type BootstrapAction, BootstrapActionSchema, type BootstrapIntent, BootstrapIntentSchema, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, type DispatchConsumeRequest, DispatchConsumeRequestSchema, type DispatchLease, DispatchLeaseSchema, type DispatchRefusal, type DispatchRefusalCode, DispatchRefusalCodeSchema, DispatchRefusalSchema, EXECUTOR_PROTOCOL_VERSION, type ExecutionDocument, ExecutionDocumentSchema, type ExecutionLaw, ExecutionLawSchema, type ExecutionResources, ExecutionResourcesSchema, type ExecutorProtocolVersion, Hex64, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, type OperationBefore, OperationBeforeSchema, type OperationCleanup, OperationCleanupSchema, type OperationCost, OperationCostSchema, type OperationEvidence, OperationEvidenceSchema, type OperationExecution, OperationExecutionSchema, type OperationRequest, OperationRequestSchema, type OperationStatus, OperationStatusSchema, type OrdinaryAuthority, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, type ProfileEntry, type ProviderProtocolVersion, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, type Readback, ReadbackSchema, Reference, type ResourceDescriptor, ResourceDescriptorSchema, type RevocationPointer, RevocationPointerSchema, RevocationSchema, type RevocationSnapshot, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, SafeInt, type SignedBootstrapIntent, SignedBootstrapIntentSchema, type SignedLawBundle, SignedLawBundleSchema, UtcSecond, closed };
+export { ADOPTION_FACT_PROFILE, type Accepted, AcceptedSchema, type AdoptionFact, AdoptionFactSchema, BOOTSTRAP_PROFILE, type BootstrapAction, BootstrapActionSchema, type BootstrapIntent, BootstrapIntentSchema, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, type DispatchConsumeRequest, DispatchConsumeRequestSchema, type DispatchLease, DispatchLeaseSchema, type DispatchRefusal, type DispatchRefusalCode, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, type Event, EventSchema, type EventStreamSeal, EventStreamSealSchema, type ExecutionDocument, ExecutionDocumentSchema, type ExecutionLaw, ExecutionLawSchema, type ExecutionResources, ExecutionResourcesSchema, type ExecutorProtocolVersion, Hex64, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, type OperationBefore, OperationBeforeSchema, type OperationCleanup, OperationCleanupSchema, type OperationCost, OperationCostSchema, type OperationEvidence, OperationEvidenceSchema, type OperationExecution, OperationExecutionSchema, type OperationRequest, OperationRequestSchema, type OperationStatus, OperationStatusSchema, type OrdinaryAuthority, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, type ProfileEntry, type ProviderProtocolVersion, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, type Readback, ReadbackSchema, Reference, type ResourceDescriptor, ResourceDescriptorSchema, type RevocationPointer, RevocationPointerSchema, RevocationSchema, type RevocationSnapshot, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, SafeInt, type SignedBootstrapIntent, SignedBootstrapIntentSchema, type SignedLawBundle, SignedLawBundleSchema, UtcSecond, closed };
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/primitives.ts","../src/kernel/dispatch-consume.v1.ts","../src/run/operation.v1.ts","../src/infra/signed-law.v1.ts","../src/infra/resource-descriptor.v1.ts","../src/infra/adoption-fact.v1.ts","../src/registry/revocations.v1.ts","../src/kernel/bootstrap.v1.ts","../src/kernel/ordinary-authority.v1.ts","../src/run/contract-versions.ts","../src/index.ts"],"mappings":";;;cAOa,SAAU,UAAU,aAAW,YAAc,MAAI,QAAQ;;cAIzD,mCAAK;;cAGL,uCAAS;cAIT,4CAAc;cAEd,qCAAO;;;;;;cAOP,iCAAG;;cAGH,WAAS;;;;;;;KAQV;WACD;WACA,QAAQ,SAAS,eAAe;;;WAGhC;;;;WAIA;;;;cCnBE;;cAGA;cAEP,+DAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwB1B,qCAAqC;KAEtC,yBAAyB,cAAc;cAE7C,sDAAwB;;;;;;;;;;;;;;;;;;;;;;;;cAqBjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,4DAA8B,oCAAA,2DAAA,wDAAA,0DAAA,iDAAA,2DAAA,+EAAA;cASvB,kCAAkC;KAEnC,sBAAsB,cAAc;cAE1C,wDAA0B;;;;;cAKnB,8BAA8B;KAC/B,kBAAkB,cAAc;;;cC3E/B;cAEP,2DAA6B;;;;;cAKtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,qDAAuB;;;;;;;;;;cAIhB,2BAA2B;KAC5B,eAAe,cAAc;cAEnC,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,wDAA0B;;;;cAInB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,yDAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,iDAAmB;;;;;;;;cAQZ,uBAAuB;KACxB,WAAW,cAAc;cAE/B,2DAA6B,oCAAA,gDAAA,iDAAA,mDAAA,gDAAA,kDAAA;cAQtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,yDAA2B,oCAAA,iDAAA,iDAAA,gDAAA;cAMpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,0DAA4B,oCAAA,iDAAA;cACrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,sDAAwB,oCAAA,kDAAA,qDAAA;cAKjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,iDAAmB;;;;;;;;;;;;;cAUZ,uBAAuB;KACxB,WAAW,cAAc;cAIxB,mDAAqB;;;;;;;;;;;;;KACtB,kBAAkB;;;cCrIjB;;cAEA;;;;;cAMA;;;cAIA;cAiPA,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KACtB,kBAAkB,cAAc;;;cC3P/B;;;cAGA;cAIP,2DAA6B;;;;;;;;;;;;;;;;;;;;;;cAsBtB,iCAAiC;KAElC,qBAAqB,cAAc;;;cCjClC;cAEP,qDAAuB;;;;;;;;;;;;;;;;;;cAqBhB,2BAA2B;KAC5B,eAAe,cAAc;;;cC9B5B;cAOP,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;cAmDd,yBAAyB;KAC1B,qBAAqB,cAAc;cAEzC,0DAA4B;;;;;cAQrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cClEjC;cAEP,wDAA0B,oCAAA,kEAAA,+DAAA,+DAAA;cAMnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,wDAA0B;;;;;;;;;;;;;;;;;;;;;;;;cA2BnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,8DAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAIzB,oCAAoC;KAErC,wBAAwB,cAAc;;;cC/CrC;cAKP,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwBrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cCtCjC;KACD,iCAAiC;cAEhC;KACD,iCAAiC;;;;;;;cCwFhC,UAAU,SAAS,eAAe"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/primitives.ts","../src/kernel/dispatch-consume.v1.ts","../src/run/operation.v1.ts","../src/infra/signed-law.v1.ts","../src/infra/resource-descriptor.v1.ts","../src/infra/adoption-fact.v1.ts","../src/registry/revocations.v1.ts","../src/kernel/bootstrap.v1.ts","../src/kernel/ordinary-authority.v1.ts","../src/run/contract-versions.ts","../src/run/event.v1.ts","../src/index.ts"],"mappings":";;;cAOa,SAAU,UAAU,aAAW,YAAc,MAAI,QAAQ;;cAIzD,mCAAK;;cAGL,uCAAS;cAIT,4CAAc;cAEd,qCAAO;;;;;;cAOP,iCAAG;;cAGH,WAAS;;;;;;;KAQV;WACD;WACA,QAAQ,SAAS,eAAe;;;WAGhC;;;;WAIA;;;;cCnBE;;cAGA;cAEP,+DAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwB1B,qCAAqC;KAEtC,yBAAyB,cAAc;cAE7C,sDAAwB;;;;;;;;;;;;;;;;;;;;;;;;cAqBjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,4DAA8B,oCAAA,2DAAA,wDAAA,0DAAA,iDAAA,2DAAA,+EAAA;cASvB,kCAAkC;KAEnC,sBAAsB,cAAc;cAE1C,wDAA0B;;;;;cAKnB,8BAA8B;KAC/B,kBAAkB,cAAc;;;cC3E/B;cAEP,2DAA6B;;;;;cAKtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,qDAAuB;;;;;;;;;;cAIhB,2BAA2B;KAC5B,eAAe,cAAc;cAEnC,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,wDAA0B;;;;cAInB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,yDAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,iDAAmB;;;;;;;;cAQZ,uBAAuB;KACxB,WAAW,cAAc;cAE/B,2DAA6B,oCAAA,gDAAA,iDAAA,mDAAA,gDAAA,kDAAA;cAQtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,yDAA2B,oCAAA,iDAAA,iDAAA,gDAAA;cAMpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,0DAA4B,oCAAA,iDAAA;cACrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,sDAAwB,oCAAA,kDAAA,qDAAA;cAKjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,iDAAmB;;;;;;;;;;;;;cAUZ,uBAAuB;KACxB,WAAW,cAAc;cAIxB,mDAAqB;;;;;;;;;;;;;KACtB,kBAAkB;;;cCrIjB;;cAEA;;;;;cAMA;;;cAIA;cAiPA,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KACtB,kBAAkB,cAAc;;;cC3P/B;;;cAGA;cAIP,2DAA6B;;;;;;;;;;;;;;;;;;;;;;cAsBtB,iCAAiC;KAElC,qBAAqB,cAAc;;;cCjClC;cAEP,qDAAuB;;;;;;;;;;;;;;;;;;cAqBhB,2BAA2B;KAC5B,eAAe,cAAc;;;cC9B5B;cAOP,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;cAmDd,yBAAyB;KAC1B,qBAAqB,cAAc;cAEzC,0DAA4B;;;;;cAQrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cClEjC;cAEP,wDAA0B,oCAAA,kEAAA,+DAAA,+DAAA;cAMnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,wDAA0B;;;;;;;;;;;;;;;;;;;;;;;;cA2BnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,8DAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAIzB,oCAAoC;KAErC,wBAAwB,cAAc;;;cC/CrC;cAKP,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwBrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cCtCjC;KACD,iCAAiC;cAEhC;KACD,iCAAiC;;;cCiBhC;;;cAIA;;;;cAKA;cAYP,8CAAgB;;;;;;;;;;;;;;;;;cAiBT,oBAAoB;KACrB,QAAQ,cAAc;;;;;;;cAQ5B,wDAA0B;;;;;;;;;;;cAWnB,8BAA8B;KAC/B,kBAAkB,cAAc;;;;;;;cCqB/B,UAAU,SAAS,eAAe"}

package/dist/index.d.mts

@@ -661,6 +661,54 @@ type ExecutorProtocolVersion = typeof EXECUTOR_PROTOCOL_VERSION;
 declare const PROVIDER_PROTOCOL_VERSION: "dsg.run.provider/1";
 type ProviderProtocolVersion = typeof PROVIDER_PROTOCOL_VERSION;
 //#endregion
+//#region src/run/event.v1.d.ts
+declare const EVENT_PROFILE: "dsg.run.event/1";
+/** The wire prefix that lets a collector pick these lines out of ordinary
+ *  job logs. One space, then the JSON object, then a newline. */
+declare const EVENT_LINE_PREFIX: "DSGEV ";
+/** The lifecycle spine every catalog carries without declaring it: the
+ *  kinds the console draws for any workload, whatever it models. A
+ *  workload emitting only started and finished is fully described. */
+declare const LIFECYCLE_KINDS: readonly ["started", "phase.entered", "phase.exited", "progress", "checkpoint", "artifact", "warning", "failure", "finished"];
+declare const EventSchemaValue: import("@sinclair/typebox").TObject<{
+  profile: import("@sinclair/typebox").TLiteral<"dsg.run.event/1">;
+  /** The operation this event belongs to; injected into the job's
+   *  environment by the plane, never chosen by the workload. */
+  operation: import("@sinclair/typebox").TString;
+  /** Monotonic within one operation, from 1. Ordering lives here. */
+  sequence: import("@sinclair/typebox").TInteger;
+  at: import("@sinclair/typebox").TString;
+  /** A lifecycle kind or one the pinned catalog declares. */
+  kind: import("@sinclair/typebox").TString;
+  /** Digest of the catalog the payload validates against. */
+  catalogSha256: import("@sinclair/typebox").TString;
+  /** Validated against the catalog by digest, not by this schema: a
+   *  modeler's vocabulary is theirs, and the plane refuses a payload the
+   *  catalog does not admit. Artifacts are references, never contents. */
+  payload: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>;
+}>;
+declare const EventSchema: typeof EventSchemaValue;
+type Event = Static<typeof EventSchema>;
+/** What the plane seals into the outcome: the ordered stream's own digest,
+ *  the catalog it validated against, and the count - enough for an
+ *  offline reader holding the exported stream to recompute the verdict
+ *  without the plane. `truncatedAtSequence` is the event ceiling's mark:
+ *  a runaway logger is bounded, and the bound is visible rather than a
+ *  silently short stream. */
+declare const EventStreamSealSchemaValue: import("@sinclair/typebox").TObject<{
+  profile: import("@sinclair/typebox").TLiteral<"dsg.run.event/1">;
+  operation: import("@sinclair/typebox").TString;
+  catalogSha256: import("@sinclair/typebox").TString;
+  /** sha256 over the newline-joined canonical event lines, in sequence. */
+  streamSha256: import("@sinclair/typebox").TString;
+  eventCount: import("@sinclair/typebox").TInteger;
+  /** Sequence numbers missing from an otherwise ordered stream. */
+  gaps: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TInteger>;
+  truncatedAtSequence: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TInteger, import("@sinclair/typebox").TNull]>;
+}>;
+declare const EventStreamSealSchema: typeof EventStreamSealSchemaValue;
+type EventStreamSeal = Static<typeof EventStreamSealSchema>;
+//#endregion
 //#region src/index.d.ts
 /** Every profile this version of the package defines, keyed by literal.
  * Profile modules are added here as they are extracted; the rules test
@@ -668,5 +716,5 @@ type ProviderProtocolVersion = typeof PROVIDER_PROTOCOL_VERSION;
  * registered does not exist. */
 declare const PROFILES: Readonly<Record<string, ProfileEntry>>;
 //#endregion
-export { ADOPTION_FACT_PROFILE, type Accepted, AcceptedSchema, type AdoptionFact, AdoptionFactSchema, BOOTSTRAP_PROFILE, type BootstrapAction, BootstrapActionSchema, type BootstrapIntent, BootstrapIntentSchema, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, type DispatchConsumeRequest, DispatchConsumeRequestSchema, type DispatchLease, DispatchLeaseSchema, type DispatchRefusal, type DispatchRefusalCode, DispatchRefusalCodeSchema, DispatchRefusalSchema, EXECUTOR_PROTOCOL_VERSION, type ExecutionDocument, ExecutionDocumentSchema, type ExecutionLaw, ExecutionLawSchema, type ExecutionResources, ExecutionResourcesSchema, type ExecutorProtocolVersion, Hex64, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, type OperationBefore, OperationBeforeSchema, type OperationCleanup, OperationCleanupSchema, type OperationCost, OperationCostSchema, type OperationEvidence, OperationEvidenceSchema, type OperationExecution, OperationExecutionSchema, type OperationRequest, OperationRequestSchema, type OperationStatus, OperationStatusSchema, type OrdinaryAuthority, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, type ProfileEntry, type ProviderProtocolVersion, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, type Readback, ReadbackSchema, Reference, type ResourceDescriptor, ResourceDescriptorSchema, type RevocationPointer, RevocationPointerSchema, RevocationSchema, type RevocationSnapshot, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, SafeInt, type SignedBootstrapIntent, SignedBootstrapIntentSchema, type SignedLawBundle, SignedLawBundleSchema, UtcSecond, closed };
+export { ADOPTION_FACT_PROFILE, type Accepted, AcceptedSchema, type AdoptionFact, AdoptionFactSchema, BOOTSTRAP_PROFILE, type BootstrapAction, BootstrapActionSchema, type BootstrapIntent, BootstrapIntentSchema, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, type DispatchConsumeRequest, DispatchConsumeRequestSchema, type DispatchLease, DispatchLeaseSchema, type DispatchRefusal, type DispatchRefusalCode, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, type Event, EventSchema, type EventStreamSeal, EventStreamSealSchema, type ExecutionDocument, ExecutionDocumentSchema, type ExecutionLaw, ExecutionLawSchema, type ExecutionResources, ExecutionResourcesSchema, type ExecutorProtocolVersion, Hex64, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, type OperationBefore, OperationBeforeSchema, type OperationCleanup, OperationCleanupSchema, type OperationCost, OperationCostSchema, type OperationEvidence, OperationEvidenceSchema, type OperationExecution, OperationExecutionSchema, type OperationRequest, OperationRequestSchema, type OperationStatus, OperationStatusSchema, type OrdinaryAuthority, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, type ProfileEntry, type ProviderProtocolVersion, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, type Readback, ReadbackSchema, Reference, type ResourceDescriptor, ResourceDescriptorSchema, type RevocationPointer, RevocationPointerSchema, RevocationSchema, type RevocationSnapshot, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, SafeInt, type SignedBootstrapIntent, SignedBootstrapIntentSchema, type SignedLawBundle, SignedLawBundleSchema, UtcSecond, closed };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/primitives.ts","../src/kernel/dispatch-consume.v1.ts","../src/run/operation.v1.ts","../src/infra/signed-law.v1.ts","../src/infra/resource-descriptor.v1.ts","../src/infra/adoption-fact.v1.ts","../src/registry/revocations.v1.ts","../src/kernel/bootstrap.v1.ts","../src/kernel/ordinary-authority.v1.ts","../src/run/contract-versions.ts","../src/index.ts"],"mappings":";;;cAOa,SAAU,UAAU,aAAW,YAAc,MAAI,QAAQ;;cAIzD,mCAAK;;cAGL,uCAAS;cAIT,4CAAc;cAEd,qCAAO;;;;;;cAOP,iCAAG;;cAGH,WAAS;;;;;;;KAQV;WACD;WACA,QAAQ,SAAS,eAAe;;;WAGhC;;;;WAIA;;;;cCnBE;;cAGA;cAEP,+DAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwB1B,qCAAqC;KAEtC,yBAAyB,cAAc;cAE7C,sDAAwB;;;;;;;;;;;;;;;;;;;;;;;;cAqBjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,4DAA8B,oCAAA,2DAAA,wDAAA,0DAAA,iDAAA,2DAAA,+EAAA;cASvB,kCAAkC;KAEnC,sBAAsB,cAAc;cAE1C,wDAA0B;;;;;cAKnB,8BAA8B;KAC/B,kBAAkB,cAAc;;;cC3E/B;cAEP,2DAA6B;;;;;cAKtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,qDAAuB;;;;;;;;;;cAIhB,2BAA2B;KAC5B,eAAe,cAAc;cAEnC,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,wDAA0B;;;;cAInB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,yDAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,iDAAmB;;;;;;;;cAQZ,uBAAuB;KACxB,WAAW,cAAc;cAE/B,2DAA6B,oCAAA,gDAAA,iDAAA,mDAAA,gDAAA,kDAAA;cAQtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,yDAA2B,oCAAA,iDAAA,iDAAA,gDAAA;cAMpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,0DAA4B,oCAAA,iDAAA;cACrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,sDAAwB,oCAAA,kDAAA,qDAAA;cAKjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,iDAAmB;;;;;;;;;;;;;cAUZ,uBAAuB;KACxB,WAAW,cAAc;cAIxB,mDAAqB;;;;;;;;;;;;;KACtB,kBAAkB;;;cCrIjB;;cAEA;;;;;cAMA;;;cAIA;cAiPA,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KACtB,kBAAkB,cAAc;;;cC3P/B;;;cAGA;cAIP,2DAA6B;;;;;;;;;;;;;;;;;;;;;;cAsBtB,iCAAiC;KAElC,qBAAqB,cAAc;;;cCjClC;cAEP,qDAAuB;;;;;;;;;;;;;;;;;;cAqBhB,2BAA2B;KAC5B,eAAe,cAAc;;;cC9B5B;cAOP,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;cAmDd,yBAAyB;KAC1B,qBAAqB,cAAc;cAEzC,0DAA4B;;;;;cAQrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cClEjC;cAEP,wDAA0B,oCAAA,kEAAA,+DAAA,+DAAA;cAMnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,wDAA0B;;;;;;;;;;;;;;;;;;;;;;;;cA2BnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,8DAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAIzB,oCAAoC;KAErC,wBAAwB,cAAc;;;cC/CrC;cAKP,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwBrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cCtCjC;KACD,iCAAiC;cAEhC;KACD,iCAAiC;;;;;;;cCwFhC,UAAU,SAAS,eAAe"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/primitives.ts","../src/kernel/dispatch-consume.v1.ts","../src/run/operation.v1.ts","../src/infra/signed-law.v1.ts","../src/infra/resource-descriptor.v1.ts","../src/infra/adoption-fact.v1.ts","../src/registry/revocations.v1.ts","../src/kernel/bootstrap.v1.ts","../src/kernel/ordinary-authority.v1.ts","../src/run/contract-versions.ts","../src/run/event.v1.ts","../src/index.ts"],"mappings":";;;cAOa,SAAU,UAAU,aAAW,YAAc,MAAI,QAAQ;;cAIzD,mCAAK;;cAGL,uCAAS;cAIT,4CAAc;cAEd,qCAAO;;;;;;cAOP,iCAAG;;cAGH,WAAS;;;;;;;KAQV;WACD;WACA,QAAQ,SAAS,eAAe;;;WAGhC;;;;WAIA;;;;cCnBE;;cAGA;cAEP,+DAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwB1B,qCAAqC;KAEtC,yBAAyB,cAAc;cAE7C,sDAAwB;;;;;;;;;;;;;;;;;;;;;;;;cAqBjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,4DAA8B,oCAAA,2DAAA,wDAAA,0DAAA,iDAAA,2DAAA,+EAAA;cASvB,kCAAkC;KAEnC,sBAAsB,cAAc;cAE1C,wDAA0B;;;;;cAKnB,8BAA8B;KAC/B,kBAAkB,cAAc;;;cC3E/B;cAEP,2DAA6B;;;;;cAKtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,qDAAuB;;;;;;;;;;cAIhB,2BAA2B;KAC5B,eAAe,cAAc;cAEnC,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,wDAA0B;;;;cAInB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,yDAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,iDAAmB;;;;;;;;cAQZ,uBAAuB;KACxB,WAAW,cAAc;cAE/B,2DAA6B,oCAAA,gDAAA,iDAAA,mDAAA,gDAAA,kDAAA;cAQtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,yDAA2B,oCAAA,iDAAA,iDAAA,gDAAA;cAMpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,0DAA4B,oCAAA,iDAAA;cACrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,sDAAwB,oCAAA,kDAAA,qDAAA;cAKjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,iDAAmB;;;;;;;;;;;;;cAUZ,uBAAuB;KACxB,WAAW,cAAc;cAIxB,mDAAqB;;;;;;;;;;;;;KACtB,kBAAkB;;;cCrIjB;;cAEA;;;;;cAMA;;;cAIA;cAiPA,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KACtB,kBAAkB,cAAc;;;cC3P/B;;;cAGA;cAIP,2DAA6B;;;;;;;;;;;;;;;;;;;;;;cAsBtB,iCAAiC;KAElC,qBAAqB,cAAc;;;cCjClC;cAEP,qDAAuB;;;;;;;;;;;;;;;;;;cAqBhB,2BAA2B;KAC5B,eAAe,cAAc;;;cC9B5B;cAOP,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;cAmDd,yBAAyB;KAC1B,qBAAqB,cAAc;cAEzC,0DAA4B;;;;;cAQrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cClEjC;cAEP,wDAA0B,oCAAA,kEAAA,+DAAA,+DAAA;cAMnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,wDAA0B;;;;;;;;;;;;;;;;;;;;;;;;cA2BnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,8DAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAIzB,oCAAoC;KAErC,wBAAwB,cAAc;;;cC/CrC;cAKP,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwBrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cCtCjC;KACD,iCAAiC;cAEhC;KACD,iCAAiC;;;cCiBhC;;;cAIA;;;;cAKA;cAYP,8CAAgB;;;;;;;;;;;;;;;;;cAiBT,oBAAoB;KACrB,QAAQ,cAAc;;;;;;;cAQ5B,wDAA0B;;;;;;;;;;;cAWnB,8BAA8B;KAC/B,kBAAkB,cAAc;;;;;;;cCqB/B,UAAU,SAAS,eAAe"}

package/dist/index.mjs

@@ -625,6 +625,68 @@ const ordinaryAuthorityV1 = {
 const EXECUTOR_PROTOCOL_VERSION = "dsg.run.executor/1";
 const PROVIDER_PROTOCOL_VERSION = "dsg.run.provider/1";
 //#endregion
+//#region src/run/event.v1.ts
+const EVENT_PROFILE = "dsg.run.event/1";
+/** The wire prefix that lets a collector pick these lines out of ordinary
+*  job logs. One space, then the JSON object, then a newline. */
+const EVENT_LINE_PREFIX = "DSGEV ";
+/** The lifecycle spine every catalog carries without declaring it: the
+*  kinds the console draws for any workload, whatever it models. A
+*  workload emitting only started and finished is fully described. */
+const LIFECYCLE_KINDS = [
+	"started",
+	"phase.entered",
+	"phase.exited",
+	"progress",
+	"checkpoint",
+	"artifact",
+	"warning",
+	"failure",
+	"finished"
+];
+const EventSchema = closed({
+	profile: Type.Literal(EVENT_PROFILE),
+	/** The operation this event belongs to; injected into the job's
+	*  environment by the plane, never chosen by the workload. */
+	operation: NonEmptyString,
+	/** Monotonic within one operation, from 1. Ordering lives here. */
+	sequence: Type.Integer({
+		minimum: 1,
+		maximum: Number.MAX_SAFE_INTEGER
+	}),
+	at: UtcSecond,
+	/** A lifecycle kind or one the pinned catalog declares. */
+	kind: NonEmptyString,
+	/** Digest of the catalog the payload validates against. */
+	catalogSha256: Hex64,
+	/** Validated against the catalog by digest, not by this schema: a
+	*  modeler's vocabulary is theirs, and the plane refuses a payload the
+	*  catalog does not admit. Artifacts are references, never contents. */
+	payload: Type.Record(Type.String(), Type.Unknown())
+});
+const EventStreamSealSchema = closed({
+	profile: Type.Literal(EVENT_PROFILE),
+	operation: NonEmptyString,
+	catalogSha256: Hex64,
+	/** sha256 over the newline-joined canonical event lines, in sequence. */
+	streamSha256: Hex64,
+	eventCount: SafeInt,
+	/** Sequence numbers missing from an otherwise ordered stream. */
+	gaps: Type.Array(Type.Integer({
+		minimum: 1,
+		maximum: Number.MAX_SAFE_INTEGER
+	})),
+	truncatedAtSequence: Type.Union([Type.Integer({ minimum: 1 }), Type.Null()])
+});
+const eventV1 = {
+	literal: EVENT_PROFILE,
+	rootShape: "event",
+	shapes: {
+		event: EventSchema,
+		streamSeal: EventStreamSealSchema
+	}
+};
+//#endregion
 //#region src/index.ts
 /** Every profile this version of the package defines, keyed by literal.
 * Profile modules are added here as they are extracted; the rules test
@@ -633,6 +695,7 @@ const PROVIDER_PROTOCOL_VERSION = "dsg.run.provider/1";
 const PROFILES = {
 	[dispatchConsumeV1.literal]: dispatchConsumeV1,
 	[operationV1.literal]: operationV1,
+	[eventV1.literal]: eventV1,
 	[signedLawV1.literal]: signedLawV1,
 	[resourceDescriptorV1.literal]: resourceDescriptorV1,
 	[adoptionFactV1.literal]: adoptionFactV1,
@@ -641,6 +704,6 @@ const PROFILES = {
 	[ordinaryAuthorityV1.literal]: ordinaryAuthorityV1
 };
 //#endregion
-export { ADOPTION_FACT_PROFILE, AcceptedSchema, AdoptionFactSchema, BOOTSTRAP_PROFILE, BootstrapActionSchema, BootstrapIntentSchema, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, DispatchConsumeRequestSchema, DispatchLeaseSchema, DispatchRefusalCodeSchema, DispatchRefusalSchema, EXECUTOR_PROTOCOL_VERSION, ExecutionDocumentSchema, ExecutionLawSchema, ExecutionResourcesSchema, Hex64, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, OperationBeforeSchema, OperationCleanupSchema, OperationCostSchema, OperationEvidenceSchema, OperationExecutionSchema, OperationRequestSchema, OperationStatusSchema, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, ReadbackSchema, Reference, ResourceDescriptorSchema, RevocationPointerSchema, RevocationSchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, SafeInt, SignedBootstrapIntentSchema, SignedLawBundleSchema, UtcSecond, closed };
+export { ADOPTION_FACT_PROFILE, AcceptedSchema, AdoptionFactSchema, BOOTSTRAP_PROFILE, BootstrapActionSchema, BootstrapIntentSchema, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, DispatchConsumeRequestSchema, DispatchLeaseSchema, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, EventSchema, EventStreamSealSchema, ExecutionDocumentSchema, ExecutionLawSchema, ExecutionResourcesSchema, Hex64, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, OperationBeforeSchema, OperationCleanupSchema, OperationCostSchema, OperationEvidenceSchema, OperationExecutionSchema, OperationRequestSchema, OperationStatusSchema, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, ReadbackSchema, Reference, ResourceDescriptorSchema, RevocationPointerSchema, RevocationSchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, SafeInt, SignedBootstrapIntentSchema, SignedLawBundleSchema, UtcSecond, closed };
 
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["digest","closed"],"sources":["../src/primitives.ts","../src/kernel/dispatch-consume.v1.ts","../src/run/operation.v1.ts","../src/infra/resource-descriptor.v1.ts","../src/infra/signed-law.v1.ts","../src/infra/adoption-fact.v1.ts","../src/registry/revocations.v1.ts","../src/kernel/bootstrap.v1.ts","../src/kernel/ordinary-authority.v1.ts","../src/run/contract-versions.ts","../src/index.ts"],"sourcesContent":["// The shared primitives every profile builds from. No profile defines its\n// own: a digest is Hex64 everywhere, a timestamp is UtcSecond everywhere,\n// an open object exists nowhere.\nimport { type TObject, type TProperties, type TSchema, Type } from \"@sinclair/typebox\";\nimport { ORN_PATTERN, SHA256_PATTERN } from \"@dynamicalsystems/orn-schemas\";\n\n/** Closed object: an extra field is a different protocol. */\nexport const closed = <T extends TProperties>(properties: T): TObject<T> =>\n  Type.Object(properties, { additionalProperties: false });\n\n/** Lowercase sha256 hex. Every digest on the wire. */\nexport const Hex64 = Type.String({ pattern: \"^[0-9a-f]{64}$\" });\n\n/** Exact UTC second, Z suffix, no fractional part. */\nexport const UtcSecond = Type.String({\n  pattern: \"^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z$\",\n});\n\nexport const NonEmptyString = Type.String({ minLength: 1 });\n\nexport const SafeInt = Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER });\n\n/** An ORN, validated by the grammar dsg-orn owns. Built from the exported\n * pattern, not the exported schema object: the upstream schemas carry\n * JSON Schema $id metadata, and embedding the same $id in several route\n * schemas makes validators refuse the duplicate. The pattern is the wire\n * truth; the metadata is not. */\nexport const Orn = Type.String({ pattern: ORN_PATTERN });\n\n/** The pair of an ORN and the sha256 pinning a version (dsg-orn Reference). */\nexport const Reference = closed({\n  orn: Orn,\n  sha256: Type.String({ pattern: SHA256_PATTERN }),\n});\n\n/** One wire profile: the literal, and every top-level shape that crosses\n * the seam it names. Shape names are stable identifiers (\"request\",\n * \"lease\", \"refusal\"); vectors address a shape as \"<literal>#<shape>\". */\nexport type ProfileEntry = {\n  readonly literal: `dsg.${string}.${string}/${number}`;\n  readonly shapes: Readonly<Record<string, TSchema>>;\n  /** Set ONLY when the wire cannot carry the literal as a field of any\n   * shape (a frozen /1); names exactly where the literal lives instead. */\n  readonly literalNote?: string;\n  /** Names the shape non-TS consumers validate a whole document against;\n   * the emitted JSON Schema gains a root $ref to it. Only meaningful for\n   * profiles with a single document root. */\n  readonly rootShape?: string;\n};\n","// dsg.kernel.dispatch-consume/1\n// Owner: dsg-kernel (the consume route produces the lease and the refusal;\n// the plane produces the request).\n//\n// K05/I3: the dispatch-authorization consume contract between the kernel\n// and the plane. Immediately before its first non-cleanup cloud mutation -\n// identity, bucket and IAM preparation included, not only job submission -\n// the plane consumes a short-lived, single-operation dispatch authorization\n// bound to operation, generation, envelope digest, law digest and\n// reservation. The committed consume event is the authorization ordering\n// point; it is not atomic with any provider API. A replay returns the\n// original lease and never renews it; a renewal is a new recorded\n// authorization decision for the same operation and reservation.\n//\n// Lifted verbatim from dsg-kernel packages/core/src/dispatch.ts at commit\n// c2d39d95 (wire shapes only; the record-held event payloads stay in the\n// kernel). This file is frozen: changes ship as dispatch-consume.v2.ts.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport {\n  closed,\n  Hex64,\n  NonEmptyString,\n  Orn,\n  Reference,\n  UtcSecond,\n  type ProfileEntry,\n} from \"../primitives.js\";\n\nexport const DISPATCH_CONSUME_PROFILE = \"dsg.kernel.dispatch-consume/1\" as const;\n\n/** The bounded clock skew a lease check must tolerate, in seconds. */\nexport const DISPATCH_MAX_SKEW_SECONDS = 300;\n\nconst DispatchConsumeRequestSchemaValue = closed({\n  profile: Type.Literal(DISPATCH_CONSUME_PROFILE),\n  /** The kernel operation identity from the accepted OperationRequest. */\n  operationId: NonEmptyString,\n  /** The workspace generation the plane admitted the operation at. */\n  generation: Type.Integer({ minimum: 0 }),\n  /** The Case the operation belongs to - the stream the consume event\n   *  lands on and the stream the reservation was recorded on. */\n  caseOrn: Orn,\n  /** SHA256(JCS(complete OperationRequest)) - the M010 envelope digest. */\n  envelopeSha256: Hex64,\n  /** The exact retained signed-law bytes the Case pins. */\n  lawSha256: Hex64,\n  /** The K04 reservation the authorization is bound to: sha256 is the\n   *  reservation event's record id. */\n  reservation: Reference,\n  requestedAt: UtcSecond,\n  /** False: first consumption or idempotent replay of it. True: an explicit\n   *  renewal - a new recorded authorization decision for the same operation\n   *  and reservation after lease expiry with the work known unsubmitted. A\n   *  replay never renews; only this flag does, and it re-runs every\n   *  revocation check at the current record state. */\n  renewal: Type.Boolean(),\n});\nexport const DispatchConsumeRequestSchema: typeof DispatchConsumeRequestSchemaValue =\n  DispatchConsumeRequestSchemaValue;\nexport type DispatchConsumeRequest = Static<typeof DispatchConsumeRequestSchema>;\n\nconst DispatchLeaseSchemaValue = closed({\n  profile: Type.Literal(DISPATCH_CONSUME_PROFILE),\n  /** The consume event's record id: the committed ordering point. */\n  leaseId: Hex64,\n  operationId: NonEmptyString,\n  generation: Type.Integer({ minimum: 0 }),\n  caseOrn: Orn,\n  envelopeSha256: Hex64,\n  lawSha256: Hex64,\n  reservation: Reference,\n  consumedAt: UtcSecond,\n  /** Fixed maximum duration from consumedAt; the plane checks validity\n   *  before each new non-cleanup call, Batch submission included. */\n  expiresAt: UtcSecond,\n  /** The bounded clock skew a lease check must tolerate, in seconds. */\n  maxSkewSeconds: Type.Integer({ minimum: 0, maximum: DISPATCH_MAX_SKEW_SECONDS }),\n  renewal: Type.Literal(\"new-authorization-required\"),\n  /** False when this response replays an earlier committed consumption:\n   *  the lease bytes, expiry included, are the original's. */\n  fresh: Type.Boolean(),\n});\nexport const DispatchLeaseSchema: typeof DispatchLeaseSchemaValue = DispatchLeaseSchemaValue;\nexport type DispatchLease = Static<typeof DispatchLeaseSchema>;\n\nconst DispatchRefusalCodeSchemaValue = Type.Union([\n  Type.Literal(\"unknown_operation\"),\n  Type.Literal(\"no_reservation\"),\n  Type.Literal(\"binding_mismatch\"),\n  Type.Literal(\"revoked\"),\n  Type.Literal(\"authority_refused\"),\n  Type.Literal(\"renewal_requires_existing_consumption\"),\n  Type.Literal(\"unavailable\"),\n]);\nexport const DispatchRefusalCodeSchema: typeof DispatchRefusalCodeSchemaValue =\n  DispatchRefusalCodeSchemaValue;\nexport type DispatchRefusalCode = Static<typeof DispatchRefusalCodeSchema>;\n\nconst DispatchRefusalSchemaValue = closed({\n  profile: Type.Literal(DISPATCH_CONSUME_PROFILE),\n  code: DispatchRefusalCodeSchema,\n  issues: Type.Array(NonEmptyString, { minItems: 1 }),\n});\nexport const DispatchRefusalSchema: typeof DispatchRefusalSchemaValue = DispatchRefusalSchemaValue;\nexport type DispatchRefusal = Static<typeof DispatchRefusalSchema>;\n\nexport const dispatchConsumeV1: ProfileEntry = {\n  literal: DISPATCH_CONSUME_PROFILE,\n  shapes: {\n    request: DispatchConsumeRequestSchema,\n    lease: DispatchLeaseSchema,\n    refusal: DispatchRefusalSchema,\n  },\n};\n","// dsg.run.operation/1\n// Owner: dsg-run (the protocol listener accepts the request and answers\n// the receipt; the kernel validates, records and reads back).\n//\n// Closed, versioned compute-operation vocabulary shared by the kernel and\n// the dsg.run plane. The document is deliberately references-only: payload\n// bytes remain retained artifacts, while this request carries the immutable\n// identity, generation fence, law, reservation and plan digest.\n//\n// The envelope digest bound at dispatch (M010) is sha256 over the RFC 8785\n// canonical form of the complete OperationRequest; the digest vectors in\n// the conformance package pin that meaning.\n//\n// Lifted verbatim from dsg-kernel packages/core/src/operation.ts at commit\n// 0f8d64d7 (equal, field for field, to dsg-run service/src/protocol/\n// schemas.ts 134-246 - the R01 cross-validation held). Known /2 candidate,\n// kept loose here because a released /1 is frozen: acceptedAt is\n// minLength 1, not an exact UTC second, and the plane emits fractional\n// seconds today.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport {\n  closed,\n  Hex64,\n  NonEmptyString,\n  Reference,\n  SafeInt,\n  type ProfileEntry,\n} from \"../primitives.js\";\n\nexport const OPERATION_PROFILE = \"dsg.run.operation/1\" as const;\n\nconst ExecutionResourcesSchemaValue = closed({\n  maxGpuSeconds: SafeInt,\n  maxRunSeconds: SafeInt,\n  maxParallelism: SafeInt,\n});\nexport const ExecutionResourcesSchema: typeof ExecutionResourcesSchemaValue =\n  ExecutionResourcesSchemaValue;\nexport type ExecutionResources = Static<typeof ExecutionResourcesSchema>;\n\nconst ExecutionLawSchemaValue = closed({\n  bundle: Reference,\n  registryRelease: Reference,\n});\nexport const ExecutionLawSchema: typeof ExecutionLawSchemaValue = ExecutionLawSchemaValue;\nexport type ExecutionLaw = Static<typeof ExecutionLawSchema>;\n\nconst ExecutionDocumentSchemaValue = closed({\n  schemaVersion: Type.Literal(1),\n  classContract: Reference,\n  law: ExecutionLawSchema,\n  workload: Reference,\n  inputs: Type.Array(Reference),\n  resources: ExecutionResourcesSchema,\n  costBound: Reference,\n  placement: Reference,\n  results: Reference,\n  secrets: Type.Array(Reference),\n});\nexport const ExecutionDocumentSchema: typeof ExecutionDocumentSchemaValue =\n  ExecutionDocumentSchemaValue;\nexport type ExecutionDocument = Static<typeof ExecutionDocumentSchema>;\n\nconst OperationBeforeSchemaValue = closed({\n  operationId: Type.Union([NonEmptyString, Type.Null()]),\n  planDigest: Type.Union([Hex64, Type.Null()]),\n});\nexport const OperationBeforeSchema: typeof OperationBeforeSchemaValue = OperationBeforeSchemaValue;\nexport type OperationBefore = Static<typeof OperationBeforeSchema>;\n\nconst OperationRequestSchemaValue = closed({\n  profile: Type.Literal(OPERATION_PROFILE),\n  operationId: NonEmptyString,\n  case: Reference,\n  workspace: NonEmptyString,\n  expectedGeneration: SafeInt,\n  before: OperationBeforeSchema,\n  planDigest: Hex64,\n  document: ExecutionDocumentSchema,\n  authority: Reference,\n  reservation: Reference,\n});\nexport const OperationRequestSchema: typeof OperationRequestSchemaValue =\n  OperationRequestSchemaValue;\nexport type OperationRequest = Static<typeof OperationRequestSchema>;\n\nconst AcceptedSchemaValue = closed({\n  profile: Type.Literal(OPERATION_PROFILE),\n  operationId: NonEmptyString,\n  actionId: NonEmptyString,\n  generation: SafeInt,\n  planDigest: Hex64,\n  acceptedAt: NonEmptyString,\n});\nexport const AcceptedSchema: typeof AcceptedSchemaValue = AcceptedSchemaValue;\nexport type Accepted = Static<typeof AcceptedSchema>;\n\nconst OperationExecutionSchemaValue = Type.Union([\n  Type.Literal(\"queued\"),\n  Type.Literal(\"running\"),\n  Type.Literal(\"succeeded\"),\n  Type.Literal(\"failed\"),\n  Type.Literal(\"canceled\"),\n  Type.Literal(\"unknown\"),\n]);\nexport const OperationExecutionSchema: typeof OperationExecutionSchemaValue =\n  OperationExecutionSchemaValue;\nexport type OperationExecution = Static<typeof OperationExecutionSchema>;\n\nconst OperationCleanupSchemaValue = Type.Union([\n  Type.Literal(\"pending\"),\n  Type.Literal(\"present\"),\n  Type.Literal(\"absent\"),\n  Type.Literal(\"unknown\"),\n]);\nexport const OperationCleanupSchema: typeof OperationCleanupSchemaValue =\n  OperationCleanupSchemaValue;\nexport type OperationCleanup = Static<typeof OperationCleanupSchema>;\n\nconst OperationEvidenceSchemaValue = Type.Union([Type.Literal(\"pending\"), Type.Literal(\"ready\")]);\nexport const OperationEvidenceSchema: typeof OperationEvidenceSchemaValue =\n  OperationEvidenceSchemaValue;\nexport type OperationEvidence = Static<typeof OperationEvidenceSchema>;\n\nconst OperationCostSchemaValue = Type.Union([\n  Type.Literal(\"reserved\"),\n  Type.Literal(\"provisional\"),\n  Type.Literal(\"reconciled\"),\n]);\nexport const OperationCostSchema: typeof OperationCostSchemaValue = OperationCostSchemaValue;\nexport type OperationCost = Static<typeof OperationCostSchema>;\n\nconst ReadbackSchemaValue = closed({\n  operationId: NonEmptyString,\n  generation: SafeInt,\n  planDigest: Hex64,\n  execution: OperationExecutionSchema,\n  cleanup: OperationCleanupSchema,\n  evidence: OperationEvidenceSchema,\n  evidenceRef: Type.Union([Reference, Type.Null()]),\n  cost: OperationCostSchema,\n});\nexport const ReadbackSchema: typeof ReadbackSchemaValue = ReadbackSchemaValue;\nexport type Readback = Static<typeof ReadbackSchema>;\n\n// I-001 names the status as the same closed readback shape. Keeping this\n// alias prevents callers from inventing a second status wire contract.\nexport const OperationStatusSchema = ReadbackSchema;\nexport type OperationStatus = Readback;\n\nexport const operationV1: ProfileEntry = {\n  literal: OPERATION_PROFILE,\n  shapes: {\n    request: OperationRequestSchema,\n    accepted: AcceptedSchema,\n    readback: ReadbackSchema,\n  },\n};\n","// dsg.infra.resource-descriptor/1\n// Owner: dsg-infra (policy/resource-descriptor.schema.json is the source;\n// law_contract.py validates this exact shape and evaluate_descriptor\n// returns its canonical digest). A concrete provider-neutral resource: the\n// thing rendered from a workload and gated against the signed law's\n// capability limits before any provider API sees it. Distinct from\n// signed-law's capabilityProfile, which states allowed LIMITS; this\n// document states one concrete resource checked against them.\n//\n// The wire carries kind \"dsg.infra.resource-descriptor\" plus\n// schemaVersion 1; the /1 literal itself is the version marker signed-law\n// fields pin (scope.resourceDescriptorVersion, capabilities\n// .descriptorVersion), so the constant lives here and signed-law imports\n// it. Lifted verbatim from dsg-infra policy/resource-descriptor.schema.json\n// at fccf709.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport { closed, NonEmptyString, type ProfileEntry } from \"../primitives.js\";\n\nexport const RESOURCE_DESCRIPTOR_PROFILE = \"dsg.infra.resource-descriptor/1\" as const;\n/** The document kind: the profile literal without its version suffix; the\n * version rides in schemaVersion. Frozen /1 wire choice. */\nexport const RESOURCE_DESCRIPTOR_KIND = \"dsg.infra.resource-descriptor\" as const;\n\nconst prefixedDigest = Type.String({ pattern: \"^sha256:[0-9a-f]{64}$\" });\n\nconst ResourceDescriptorSchemaValue = closed({\n  schemaVersion: Type.Literal(1),\n  kind: Type.Literal(RESOURCE_DESCRIPTOR_KIND),\n  workloadClass: NonEmptyString,\n  lifecycle: Type.Union([Type.Literal(\"ephemeral\"), Type.Literal(\"durable\")]),\n  machineType: Type.String({ pattern: \"^[a-z][a-z0-9]*-[a-z0-9]+-[0-9]+$\" }),\n  accelerator: Type.Union([Type.String({ minLength: 1 }), Type.Null()]),\n  acceleratorCount: Type.Integer({ minimum: 0 }),\n  vcpuCount: Type.Integer({ minimum: 1 }),\n  memoryGiB: Type.Integer({ minimum: 1 }),\n  maxRunSeconds: Type.Integer({ minimum: 1 }),\n  maxParallelism: Type.Integer({ minimum: 1 }),\n  region: NonEmptyString,\n  imageDigest: prefixedDigest,\n  moduleDigest: prefixedDigest,\n  externalIp: Type.Literal(false),\n  network: Type.Literal(\"private\"),\n  reservation: closed({\n    gpuSeconds: Type.Integer({ minimum: 0 }),\n    usdMicroUnits: Type.Integer({ minimum: 0 }),\n  }),\n});\nexport const ResourceDescriptorSchema: typeof ResourceDescriptorSchemaValue =\n  ResourceDescriptorSchemaValue;\nexport type ResourceDescriptor = Static<typeof ResourceDescriptorSchema>;\n\nexport const resourceDescriptorV1: ProfileEntry = {\n  literal: RESOURCE_DESCRIPTOR_PROFILE,\n  literalNote:\n    \"carried as kind (unversioned) plus schemaVersion on the document; the /1 literal is the version marker signed-law pins\",\n  rootShape: \"descriptor\",\n  shapes: { descriptor: ResourceDescriptorSchema },\n};\n","// dsg.infra.signed-law/1\n// Owner: dsg-infra (the S02 law producer; both prior copies were generated\n// from dsg-infra policy/law-bundle.schema.json, source SHA-256\n// bc3692395cf994567115c76d8fce66a7e9ebe7b2c50c70e1c83b8b10693a838c).\n//\n// The literal is the signing DOMAIN: it appears as the `domain` member of\n// the canonical signature input (JCS of {domain, payload, payloadSha256,\n// testOnly}), not as a field of the bundle itself; the bundle carries\n// `kind` plus `schemaVersion` instead. Lifted verbatim from dsg-kernel\n// packages/signing/src/law-schema.ts at ffafe305, byte-identical to the\n// module registry copy at 1f8c994.\nimport { Type, type Static } from \"@sinclair/typebox\";\nimport type { ProfileEntry } from \"../primitives.js\";\nimport { RESOURCE_DESCRIPTOR_PROFILE } from \"./resource-descriptor.v1.js\";\n\nexport const SIGNED_LAW_PROFILE = \"dsg.infra.signed-law/1\" as const;\n/** The signature-input domain member is exactly the profile literal. */\nexport const SIGNED_LAW_DOMAIN = SIGNED_LAW_PROFILE;\n\n/** The scope vocabulary version today's laws cite in\n * standingOrder.scopeReference. The FIELD stays an open nonempty string on\n * purpose (a law may cite a future scope); this constant is the value in\n * force, exported so no consumer hand-types it. */\nexport const SCOPE_REFERENCE = \"dsg.infra.scope/1\" as const;\n\n/** The price-profile version today's laws cite in priceProfile.reference.\n * Same rule: the field stays open; this is the value in force. */\nexport const PRICE_PROFILE_REFERENCE = \"dsg.infra.price-profile/1\" as const;\n\nconst nullableString = Type.Union([Type.String({ minLength: 1 }), Type.Null()]);\nconst authority = Type.Object(\n  {\n    issuerType: Type.Literal(\"human\"),\n    issuerReference: nullableString,\n    designationReference: nullableString,\n    signatureReference: nullableString,\n    humanSignatureRequired: Type.Literal(true),\n    releaseAutomationMayIssue: Type.Literal(false),\n  },\n  { additionalProperties: false },\n);\nconst utcSecond = Type.String({\n  pattern: \"^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z$\",\n});\nconst standingOrder = Type.Object(\n  {\n    reference: nullableString,\n    designationReference: nullableString,\n    scopeReference: Type.String({ minLength: 1 }),\n    issuedAt: Type.Union([utcSecond, Type.Null()]),\n    expiresAt: Type.Union([utcSecond, Type.Null()]),\n  },\n  { additionalProperties: false },\n);\nconst scope = Type.Object(\n  {\n    actions: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n    workloadClasses: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n    providers: Type.Array(Type.Literal(\"provider-neutral\"), { minItems: 1, uniqueItems: true }),\n    regions: Type.Array(Type.String({ minLength: 1 }), { uniqueItems: true }),\n    resourceDescriptorVersion: Type.Literal(RESOURCE_DESCRIPTOR_PROFILE),\n  },\n  { additionalProperties: false },\n);\nconst validity = Type.Object(\n  {\n    clock: Type.Literal(\"UTC\"),\n    notBefore: Type.Union([utcSecond, Type.Null()]),\n    notAfter: Type.Union([utcSecond, Type.Null()]),\n  },\n  { additionalProperties: false },\n);\nconst revocation = Type.Object(\n  {\n    snapshotReference: nullableString,\n    failClosed: Type.Literal(true),\n    checks: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n  },\n  { additionalProperties: false },\n);\nconst ceiling = Type.Object(\n  {\n    unit: Type.String({ minLength: 1 }),\n    period: Type.String({ minLength: 1 }),\n    scope: Type.Union([Type.Literal(\"person\"), Type.Literal(\"organization\")]),\n    value: Type.Union([Type.Integer({ minimum: 0 }), Type.Null()]),\n  },\n  { additionalProperties: false },\n);\nconst capabilityProfile = Type.Object(\n  {\n    lifecycle: Type.Union([Type.Literal(\"ephemeral\"), Type.Literal(\"durable\")]),\n    machinePrefixes: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n    accelerators: Type.Array(Type.String({ minLength: 1 }), { uniqueItems: true }),\n    maxRunSeconds: Type.Union([Type.Integer({ minimum: 0 }), Type.Null()]),\n    maxParallelism: Type.Union([Type.Integer({ minimum: 1 }), Type.Null()]),\n    maxGpuInstances: Type.Union([Type.Integer({ minimum: 0 }), Type.Null()]),\n    maxVcpus: Type.Union([Type.Integer({ minimum: 1 }), Type.Null()]),\n    network: Type.Literal(\"private\"),\n    externalIpAllowed: Type.Literal(false),\n  },\n  { additionalProperties: false },\n);\nconst capabilities = Type.Object(\n  {\n    providerNeutral: Type.Literal(true),\n    descriptorVersion: Type.Literal(RESOURCE_DESCRIPTOR_PROFILE),\n    profiles: Type.Record(Type.String(), capabilityProfile, { minProperties: 1 }),\n  },\n  { additionalProperties: false },\n);\nconst priceProfile = Type.Object(\n  {\n    reference: Type.String({ minLength: 1 }),\n    status: Type.Union([Type.Literal(\"unassigned\"), Type.Literal(\"retained\")]),\n    currency: Type.Literal(\"USD\"),\n    unit: Type.Literal(\"micro_usd\"),\n    basis: Type.Literal(\"retained-conservative-on-demand\"),\n    rates: Type.Object(\n      {\n        vcpuSecond: Type.Optional(Type.Integer({ minimum: 0 })),\n        memoryGiBSecond: Type.Optional(Type.Integer({ minimum: 0 })),\n        gpuSecond: Type.Optional(Type.Integer({ minimum: 0 })),\n        startup: Type.Optional(Type.Integer({ minimum: 0 })),\n      },\n      { additionalProperties: false },\n    ),\n    safetyFactorBps: Type.Union([Type.Integer({ minimum: 10000 }), Type.Null()]),\n    validFrom: Type.Union([utcSecond, Type.Null()]),\n    validUntil: Type.Union([utcSecond, Type.Null()]),\n  },\n  { additionalProperties: false },\n);\nconst bootstrap = Type.Object(\n  {\n    mode: Type.Literal(\"finite-human-root\"),\n    rootReferences: Type.Array(Type.String({ minLength: 1 }), { uniqueItems: true }),\n    allowedActions: Type.Array(\n      Type.Union([\n        Type.Literal(\"enroll_human_root\"),\n        Type.Literal(\"initialize_kernel_record\"),\n        Type.Literal(\"restore_kernel_record\"),\n        Type.Literal(\"cutover_single_writer\"),\n      ]),\n      { minItems: 1, uniqueItems: true },\n    ),\n    maxUses: Type.Integer({ minimum: 1, maximum: 1 }),\n    expiresAt: Type.Union([utcSecond, Type.Null()]),\n    projectCreationAllowed: Type.Literal(false),\n    requiresHumanSignature: Type.Literal(true),\n    automationCanSatisfy: Type.Literal(false),\n  },\n  { additionalProperties: false },\n);\nconst digest = Type.String({ pattern: \"^sha256:[0-9a-f]{64}$\" });\nconst policyBundle = Type.Object(\n  {\n    digest: digest,\n    manifest: Type.Record(\n      Type.String({ pattern: \"^policy/[A-Za-z0-9._-]+\\\\.rego$\" }),\n      Type.String({ pattern: \"^[0-9a-f]{64}$\" }),\n      { additionalProperties: false, minProperties: 1 },\n    ),\n  },\n  { additionalProperties: false },\n);\nconst lawInputProfile = Type.Object(\n  {\n    requiresRunCeiling: Type.Boolean(),\n    requiresExpirationLabel: Type.Boolean(),\n    maxRunSeconds: Type.Integer({ minimum: 1 }),\n    allowExternalIp: Type.Literal(false),\n    machinePrefixes: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n    accelerators: Type.Array(Type.String({ minLength: 1 }), { uniqueItems: true }),\n    maxGpuInstances: Type.Integer({ minimum: 0 }),\n    maxTotalVcpus: Type.Integer({ minimum: 1 }),\n    maxParallelism: Type.Integer({ minimum: 1 }),\n    network: Type.Literal(\"private\"),\n  },\n  { additionalProperties: false },\n);\nconst lawInputs = Type.Object(\n  {\n    cloudflare: Type.Object(\n      {\n        approvedZoneId: Type.String({ minLength: 1 }),\n        approvedAccountId: Type.String({ minLength: 1 }),\n      },\n      { additionalProperties: false },\n    ),\n    planLimits: Type.Object(\n      {\n        maxGpuInstances: Type.Integer({ minimum: 0 }),\n        maxTotalVcpus: Type.Integer({ minimum: 1 }),\n        approvedLocations: Type.Array(Type.String({ minLength: 1 }), {\n          minItems: 1,\n          uniqueItems: true,\n        }),\n      },\n      { additionalProperties: false },\n    ),\n    profiles: Type.Object(\n      { compute: lawInputProfile, plane: lawInputProfile },\n      { additionalProperties: false },\n    ),\n  },\n  { additionalProperties: false },\n);\nconst evaluationInputs = Type.Object(\n  { policyBundle: policyBundle, lawInputs: lawInputs },\n  { additionalProperties: false },\n);\nconst lawDocument = Type.Object(\n  {\n    schemaVersion: Type.Literal(1),\n    kind: Type.Literal(\"dsg.infra.law\"),\n    lawId: Type.String({ minLength: 1 }),\n    status: Type.Union([Type.Literal(\"unissued\"), Type.Literal(\"issued\")]),\n    authority: authority,\n    standingOrder: standingOrder,\n    scope: scope,\n    validity: validity,\n    revocation: revocation,\n    ceilings: Type.Object(\n      {\n        gpuSecondsPerPersonUtcWeek: ceiling,\n        usdMicroUnitsPerPersonUtcMonth: ceiling,\n        usdMicroUnitsPerOrganizationUtcMonth: ceiling,\n      },\n      { additionalProperties: false },\n    ),\n    capabilities: capabilities,\n    priceProfile: priceProfile,\n    bootstrap: bootstrap,\n    evaluationInputs: evaluationInputs,\n  },\n  { additionalProperties: false },\n);\nconst signature = Type.Object(\n  {\n    algorithm: Type.Literal(\"Ed25519\"),\n    keyClass: Type.Union([\n      Type.Literal(\"synthetic-test-only\"),\n      Type.Literal(\"human-authority\"),\n      Type.Literal(\"release-automation\"),\n    ]),\n    publicKeyHex: Type.String({ pattern: \"^[0-9a-f]{64}$\" }),\n    signatureHex: Type.String({ pattern: \"^[0-9a-f]{128}$\" }),\n  },\n  { additionalProperties: false },\n);\nconst signedLawBundle = Type.Object(\n  {\n    schemaVersion: Type.Literal(1),\n    kind: Type.Union([\n      Type.Literal(\"dsg.infra.signed-law\"),\n      Type.Literal(\"dsg.infra.signed-law-fixture\"),\n    ]),\n    testOnly: Type.Boolean(),\n    deployedAuthority: Type.Boolean(),\n    payload: lawDocument,\n    canonicalPayload: Type.String({ minLength: 1 }),\n    payloadSha256: Type.String({ pattern: \"^[0-9a-f]{64}$\" }),\n    canonicalSignatureInput: Type.String({ minLength: 1 }),\n    signature: signature,\n  },\n  { additionalProperties: false },\n);\nexport const SignedLawBundleSchema = signedLawBundle;\nexport type SignedLawBundle = Static<typeof SignedLawBundleSchema>;\n\nexport const signedLawV1: ProfileEntry = {\n  literal: SIGNED_LAW_PROFILE,\n  literalNote:\n    \"carried as the domain member of the canonical signature input, not as a bundle field\",\n  shapes: { bundle: SignedLawBundleSchema },\n};\n","// dsg.infra.adoption-fact/1\n// Owner: dsg-infra (governance/adoption.py is the producer: it verifies an\n// exported kernel bootstrap record snapshot offline - canonical digest,\n// event hash chain, stream heads, artifact bytes - and emits the accepted\n// root-authorizing operation as this fact). The tofu baseline root\n// consumes it and re-validates independently: its deployment-specific\n// conditions (which root string, testOnly false for the real baseline)\n// are that root's own law, deliberately NOT part of this shape - a\n// synthetic testOnly fact is a valid FACT, just never a valid deployed\n// authorization.\n//\n// Lifted from dsg-infra governance/adoption.py at e9d9501 and\n// infrastructure/environments/dsg-run/adoption.tf (S01, commit fccf709).\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport { closed, Hex64, NonEmptyString, Orn, type ProfileEntry } from \"../primitives.js\";\n\nexport const ADOPTION_FACT_PROFILE = \"dsg.infra.adoption-fact/1\" as const;\n\nconst AdoptionFactSchemaValue = closed({\n  profile: Type.Literal(ADOPTION_FACT_PROFILE),\n  /** The root the record names as active baseline owner. */\n  root: NonEmptyString,\n  lineage: NonEmptyString,\n  /** The accepted root-authorizing operation. */\n  operation: NonEmptyString,\n  /** Count of accepted root operations; ownership needs at least one. */\n  generation: Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER }),\n  /** Canonical digest of the verified record snapshot. */\n  snapshotSha256: Hex64,\n  /** initialize establishes the first owner; cutover transfers it. restore\n   *  and enrollment move custody and human roots, never root ownership. */\n  action: Type.Union([\n    Type.Literal(\"initialize_kernel_record\"),\n    Type.Literal(\"cutover_single_writer\"),\n  ]),\n  signer: Orn,\n  humanRoot: NonEmptyString,\n  testOnly: Type.Boolean(),\n});\nexport const AdoptionFactSchema: typeof AdoptionFactSchemaValue = AdoptionFactSchemaValue;\nexport type AdoptionFact = Static<typeof AdoptionFactSchema>;\n\nexport const adoptionFactV1: ProfileEntry = {\n  literal: ADOPTION_FACT_PROFILE,\n  rootShape: \"fact\",\n  shapes: { fact: AdoptionFactSchema },\n};\n","// dsg.registry.revocations/1\n// Owner: dsg-infra-module-registry (the S03 trust producer). Signed,\n// monotonically versioned revocation snapshots with retained trust\n// history; timestamps are epoch seconds by frozen choice of /1 (recorded\n// in FROZEN_EXEMPTIONS; exact-second strings would be a /2).\n// Lifted verbatim from dsg-infra-module-registry src/revocation.ts at\n// 1f8c994.\nimport { Type, type Static } from \"@sinclair/typebox\";\nimport type { ProfileEntry } from \"../primitives.js\";\n\nexport const REVOCATIONS_PROFILE = \"dsg.registry.revocations/1\" as const;\n\nconst closed = { additionalProperties: false };\nconst text = Type.String({ minLength: 1 });\nconst digest = Type.String({ pattern: \"^[0-9a-f]{64}$\" });\nconst time = Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER });\n\nconst RevocationSchemaValue = Type.Object(\n  {\n    domain: Type.Literal(REVOCATIONS_PROFILE),\n    version: Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER }),\n    issuedAt: time,\n    expiresAt: time,\n    previousSha256: Type.Union([digest, Type.Null()]),\n    testOnly: Type.Literal(true),\n    signerKey: digest,\n    revoked: Type.Array(\n      Type.Object(\n        {\n          kind: Type.Union([\n            Type.Literal(\"principal\"),\n            Type.Literal(\"standing-order\"),\n            Type.Literal(\"law\"),\n            Type.Literal(\"class\"),\n            Type.Literal(\"key\"),\n          ]),\n          id: text,\n          effectiveAt: time,\n          reason: text,\n        },\n        closed,\n      ),\n    ),\n    trustHistory: Type.Array(\n      Type.Object(\n        {\n          principal: text,\n          publicKey: digest,\n          role: Type.Union([\n            Type.Literal(\"human\"),\n            Type.Literal(\"release\"),\n            Type.Literal(\"collector\"),\n          ]),\n          action: Type.Union([\n            Type.Literal(\"enroll\"),\n            Type.Literal(\"rotate\"),\n            Type.Literal(\"compromise\"),\n          ]),\n          effectiveAt: time,\n          authoritySha256: digest,\n          replacesKey: Type.Union([digest, Type.Null()]),\n        },\n        closed,\n      ),\n    ),\n  },\n  closed,\n);\nexport const RevocationSchema: typeof RevocationSchemaValue = RevocationSchemaValue;\nexport type RevocationSnapshot = Static<typeof RevocationSchema>;\n\nconst RevocationPointerSchemaValue = Type.Object(\n  {\n    version: Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER }),\n    sha256: digest,\n    url: Type.String({ pattern: \"^/revocations/v/[1-9][0-9]*/snapshot\\\\.json$\" }),\n  },\n  closed,\n);\nexport const RevocationPointerSchema: typeof RevocationPointerSchemaValue =\n  RevocationPointerSchemaValue;\nexport type RevocationPointer = Static<typeof RevocationPointerSchema>;\n\nexport const revocationsV1: ProfileEntry = {\n  literal: REVOCATIONS_PROFILE,\n  shapes: { snapshot: RevocationSchema, pointer: RevocationPointerSchema },\n};\n","// dsg.kernel.bootstrap/1\n// Owner: dsg-kernel (K14). The finite bootstrap intent: a signed,\n// single-use, expiring authorization for exactly one of four record\n// actions, binding plan and resource-spec digests. enroll_human_root\n// (M030) is the additive action that anchors ordinary-authority\n// enrollment; initialization is never reinterpreted as enrollment. The\n// record-held bootstrap event payloads stay in the kernel.\n//\n// Lifted verbatim from dsg-kernel packages/core/src/contracts.ts at\n// 00b33ac1. createdAt/expiresAt are frozen /1 nonempty strings, recorded\n// in FROZEN_EXEMPTIONS; exact-second patterns would be a /2 against\n// already-recorded signed intents.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport { closed, Hex64, NonEmptyString, Orn, type ProfileEntry } from \"../primitives.js\";\n\nexport const BOOTSTRAP_PROFILE = \"dsg.kernel.bootstrap/1\" as const;\n\nconst BootstrapActionSchemaValue = Type.Union([\n  Type.Literal(\"initialize_kernel_record\"),\n  Type.Literal(\"restore_kernel_record\"),\n  Type.Literal(\"cutover_single_writer\"),\n  Type.Literal(\"enroll_human_root\"),\n]);\nexport const BootstrapActionSchema: typeof BootstrapActionSchemaValue = BootstrapActionSchemaValue;\nexport type BootstrapAction = Static<typeof BootstrapActionSchema>;\n\nconst BootstrapIntentSchemaValue = closed({\n  version: Type.Literal(BOOTSTRAP_PROFILE),\n  operation: NonEmptyString,\n  action: BootstrapActionSchema,\n  lineage: NonEmptyString,\n  humanRoot: NonEmptyString,\n  signer: Orn,\n  scope: NonEmptyString,\n  resources: Type.Array(\n    closed({\n      identity: NonEmptyString,\n      specSha256: Hex64,\n    }),\n    { minItems: 1, uniqueItems: true },\n  ),\n  planSha256: Hex64,\n  preconditionsSha256: Hex64,\n  createdAt: NonEmptyString,\n  expiresAt: NonEmptyString,\n  maxUses: Type.Literal(1),\n  cost: closed({\n    currency: Type.Literal(\"USD\"),\n    maxMicroUsd: Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER }),\n    assumptionsSha256: Hex64,\n  }),\n  testOnly: Type.Boolean(),\n});\nexport const BootstrapIntentSchema: typeof BootstrapIntentSchemaValue = BootstrapIntentSchemaValue;\nexport type BootstrapIntent = Static<typeof BootstrapIntentSchema>;\n\nconst SignedBootstrapIntentSchemaValue = closed({\n  body: BootstrapIntentSchema,\n  signature: Type.String({ pattern: \"^[0-9a-f]{128}$\" }),\n});\nexport const SignedBootstrapIntentSchema: typeof SignedBootstrapIntentSchemaValue =\n  SignedBootstrapIntentSchemaValue;\nexport type SignedBootstrapIntent = Static<typeof SignedBootstrapIntentSchema>;\n\nexport const bootstrapV1: ProfileEntry = {\n  literal: BOOTSTRAP_PROFILE,\n  shapes: { intent: BootstrapIntentSchema, signed: SignedBootstrapIntentSchema },\n};\n","// dsg.kernel.ordinary-authority/1\n// Owner: dsg-kernel (K02, M029/M030). The canonical ordinary-rights\n// artifact: who may issue law, exactly what they may permit, for how long,\n// and under which three ceilings. Closed and versioned; every set is an\n// explicit allow-list, never an omitted-means-unlimited default. A\n// verified finite enroll_human_root intent binds this document's digest as\n// both plan and resource spec. The revocation view a standing-order check\n// runs against stays in the kernel: independently supplied input, not a\n// wire document.\n//\n// Lifted verbatim from dsg-kernel packages/signing/src/enrollment.ts at\n// 00b33ac1.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport { closed, Hex64, NonEmptyString, Orn, UtcSecond, type ProfileEntry } from \"../primitives.js\";\n\nexport const ORDINARY_AUTHORITY_PROFILE = \"dsg.kernel.ordinary-authority/1\" as const;\n\nconst names = Type.Array(NonEmptyString, { minItems: 1, uniqueItems: true });\nconst ceilingValue = Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER });\n\nconst OrdinaryAuthoritySchemaValue = closed({\n  version: Type.Literal(ORDINARY_AUTHORITY_PROFILE),\n  reference: NonEmptyString,\n  actor: Orn,\n  publicKeyHex: Hex64,\n  keyClass: Type.Union([Type.Literal(\"synthetic-test-only\"), Type.Literal(\"human-authority\")]),\n  designation: closed({\n    role: Type.Literal(\"law-issuer\"),\n    designationReference: NonEmptyString,\n  }),\n  scope: closed({\n    scopeReference: NonEmptyString,\n    actions: names,\n    workloadClasses: names,\n    regions: names,\n  }),\n  validity: closed({ notBefore: UtcSecond, notAfter: UtcSecond }),\n  ceilings: closed({\n    gpuSecondsPerPersonUtcWeek: ceilingValue,\n    usdMicroUnitsPerPersonUtcMonth: ceilingValue,\n    usdMicroUnitsPerOrganizationUtcMonth: ceilingValue,\n  }),\n  revoked: Type.Boolean(),\n});\nexport const OrdinaryAuthoritySchema: typeof OrdinaryAuthoritySchemaValue =\n  OrdinaryAuthoritySchemaValue;\nexport type OrdinaryAuthority = Static<typeof OrdinaryAuthoritySchema>;\n\nexport const ordinaryAuthorityV1: ProfileEntry = {\n  literal: ORDINARY_AUTHORITY_PROFILE,\n  rootShape: \"authority\",\n  shapes: { authority: OrdinaryAuthoritySchema },\n};\n","// In-process contract versions of the dsg-run plane. Under ruling I7 these\n// are NOT profiles: an executor or provider adapter is a TypeScript plugin\n// interface inside one process, with no serialized shape or digest of its\n// own - its documents (operation requests, descriptors) already have\n// profiles. The literals live here so no consumer repo defines a\n// dsg.*.*/N string and the CI grep stays absolute. When R06 gives\n// executors a real serialized job document, THAT becomes a profile module\n// beside this file.\nexport const EXECUTOR_PROTOCOL_VERSION = \"dsg.run.executor/1\" as const;\nexport type ExecutorProtocolVersion = typeof EXECUTOR_PROTOCOL_VERSION;\n\nexport const PROVIDER_PROTOCOL_VERSION = \"dsg.run.provider/1\" as const;\nexport type ProviderProtocolVersion = typeof PROVIDER_PROTOCOL_VERSION;\n","export { closed, Hex64, NonEmptyString, Orn, Reference, SafeInt, UtcSecond } from \"./primitives.js\";\nexport type { ProfileEntry } from \"./primitives.js\";\nexport {\n  DISPATCH_CONSUME_PROFILE,\n  DISPATCH_MAX_SKEW_SECONDS,\n  DispatchConsumeRequestSchema,\n  DispatchLeaseSchema,\n  DispatchRefusalCodeSchema,\n  DispatchRefusalSchema,\n} from \"./kernel/dispatch-consume.v1.js\";\nexport type {\n  DispatchConsumeRequest,\n  DispatchLease,\n  DispatchRefusal,\n  DispatchRefusalCode,\n} from \"./kernel/dispatch-consume.v1.js\";\nexport {\n  AcceptedSchema,\n  ExecutionDocumentSchema,\n  ExecutionLawSchema,\n  ExecutionResourcesSchema,\n  OPERATION_PROFILE,\n  OperationBeforeSchema,\n  OperationCleanupSchema,\n  OperationCostSchema,\n  OperationEvidenceSchema,\n  OperationExecutionSchema,\n  OperationRequestSchema,\n  OperationStatusSchema,\n  ReadbackSchema,\n} from \"./run/operation.v1.js\";\nexport type {\n  Accepted,\n  ExecutionDocument,\n  ExecutionLaw,\n  ExecutionResources,\n  OperationBefore,\n  OperationCleanup,\n  OperationCost,\n  OperationEvidence,\n  OperationExecution,\n  OperationRequest,\n  OperationStatus,\n  Readback,\n} from \"./run/operation.v1.js\";\nexport {\n  PRICE_PROFILE_REFERENCE,\n  SCOPE_REFERENCE,\n  SIGNED_LAW_DOMAIN,\n  SIGNED_LAW_PROFILE,\n  SignedLawBundleSchema,\n} from \"./infra/signed-law.v1.js\";\nexport {\n  RESOURCE_DESCRIPTOR_KIND,\n  RESOURCE_DESCRIPTOR_PROFILE,\n  ResourceDescriptorSchema,\n} from \"./infra/resource-descriptor.v1.js\";\nexport type { ResourceDescriptor } from \"./infra/resource-descriptor.v1.js\";\nexport { ADOPTION_FACT_PROFILE, AdoptionFactSchema } from \"./infra/adoption-fact.v1.js\";\nexport type { AdoptionFact } from \"./infra/adoption-fact.v1.js\";\nexport type { SignedLawBundle } from \"./infra/signed-law.v1.js\";\nexport {\n  REVOCATIONS_PROFILE,\n  RevocationPointerSchema,\n  RevocationSchema,\n} from \"./registry/revocations.v1.js\";\nexport type { RevocationPointer, RevocationSnapshot } from \"./registry/revocations.v1.js\";\nexport {\n  BOOTSTRAP_PROFILE,\n  BootstrapActionSchema,\n  BootstrapIntentSchema,\n  SignedBootstrapIntentSchema,\n} from \"./kernel/bootstrap.v1.js\";\nexport type {\n  BootstrapAction,\n  BootstrapIntent,\n  SignedBootstrapIntent,\n} from \"./kernel/bootstrap.v1.js\";\nexport {\n  ORDINARY_AUTHORITY_PROFILE,\n  OrdinaryAuthoritySchema,\n} from \"./kernel/ordinary-authority.v1.js\";\nexport type { OrdinaryAuthority } from \"./kernel/ordinary-authority.v1.js\";\nexport { EXECUTOR_PROTOCOL_VERSION, PROVIDER_PROTOCOL_VERSION } from \"./run/contract-versions.js\";\nexport type { ExecutorProtocolVersion, ProviderProtocolVersion } from \"./run/contract-versions.js\";\n\nimport type { ProfileEntry } from \"./primitives.js\";\nimport { dispatchConsumeV1 } from \"./kernel/dispatch-consume.v1.js\";\nimport { operationV1 } from \"./run/operation.v1.js\";\nimport { signedLawV1 } from \"./infra/signed-law.v1.js\";\nimport { resourceDescriptorV1 } from \"./infra/resource-descriptor.v1.js\";\nimport { adoptionFactV1 } from \"./infra/adoption-fact.v1.js\";\nimport { revocationsV1 } from \"./registry/revocations.v1.js\";\nimport { bootstrapV1 } from \"./kernel/bootstrap.v1.js\";\nimport { ordinaryAuthorityV1 } from \"./kernel/ordinary-authority.v1.js\";\n\n/** Every profile this version of the package defines, keyed by literal.\n * Profile modules are added here as they are extracted; the rules test\n * and the schema emitter walk this registry, so a module that is not\n * registered does not exist. */\nexport const PROFILES: Readonly<Record<string, ProfileEntry>> = {\n  [dispatchConsumeV1.literal]: dispatchConsumeV1,\n  [operationV1.literal]: operationV1,\n  [signedLawV1.literal]: signedLawV1,\n  [resourceDescriptorV1.literal]: resourceDescriptorV1,\n  [adoptionFactV1.literal]: adoptionFactV1,\n  [revocationsV1.literal]: revocationsV1,\n  [bootstrapV1.literal]: bootstrapV1,\n  [ordinaryAuthorityV1.literal]: ordinaryAuthorityV1,\n};\n"],"mappings":";;;;AAOA,MAAa,UAAiC,eAC5C,KAAK,OAAO,YAAY,EAAE,sBAAsB,MAAM,CAAC;;AAGzD,MAAa,QAAQ,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC;;AAG9D,MAAa,YAAY,KAAK,OAAO,EACnC,SAAS,2DACX,CAAC;AAED,MAAa,iBAAiB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AAE1D,MAAa,UAAU,KAAK,QAAQ;CAAE,SAAS;CAAG,SAAS,OAAO;AAAiB,CAAC;;;;;;AAOpF,MAAa,MAAM,KAAK,OAAO,EAAE,SAAS,YAAY,CAAC;;AAGvD,MAAa,YAAY,OAAO;CAC9B,KAAK;CACL,QAAQ,KAAK,OAAO,EAAE,SAAS,eAAe,CAAC;AACjD,CAAC;;;ACLD,MAAa,2BAA2B;;AAGxC,MAAa,4BAA4B;AA0BzC,MAAa,+BAxB6B,OAAO;CAC/C,SAAS,KAAK,QAAQ,wBAAwB;;CAE9C,aAAa;;CAEb,YAAY,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;;;CAGvC,SAAS;;CAET,gBAAgB;;CAEhB,WAAW;;;CAGX,aAAa;CACb,aAAa;;;;;;CAMb,SAAS,KAAK,QAAQ;AACxB,CAEE;AAwBF,MAAa,sBArBoB,OAAO;CACtC,SAAS,KAAK,QAAQ,wBAAwB;;CAE9C,SAAS;CACT,aAAa;CACb,YAAY,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CACvC,SAAS;CACT,gBAAgB;CAChB,WAAW;CACX,aAAa;CACb,YAAY;;;CAGZ,WAAW;;CAEX,gBAAgB,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAA;CAAmC,CAAC;CAC/E,SAAS,KAAK,QAAQ,4BAA4B;;;CAGlD,OAAO,KAAK,QAAQ;AACtB,CACoE;AAYpE,MAAa,4BAT0B,KAAK,MAAM;CAChD,KAAK,QAAQ,mBAAmB;CAChC,KAAK,QAAQ,gBAAgB;CAC7B,KAAK,QAAQ,kBAAkB;CAC/B,KAAK,QAAQ,SAAS;CACtB,KAAK,QAAQ,mBAAmB;CAChC,KAAK,QAAQ,uCAAuC;CACpD,KAAK,QAAQ,aAAa;AAC5B,CAEE;AAQF,MAAa,wBALsB,OAAO;CACxC,SAAS,KAAK,QAAQ,wBAAwB;CAC9C,MAAM;CACN,QAAQ,KAAK,MAAM,gBAAgB,EAAE,UAAU,EAAE,CAAC;AACpD,CACwE;AAGxE,MAAa,oBAAkC;CAC7C,SAAS;CACT,QAAQ;EACN,SAAS;EACT,OAAO;EACP,SAAS;CACX;AACF;;;ACpFA,MAAa,oBAAoB;AAOjC,MAAa,2BALyB,OAAO;CAC3C,eAAe;CACf,eAAe;CACf,gBAAgB;AAClB,CAEE;AAOF,MAAa,qBAJmB,OAAO;CACrC,QAAQ;CACR,iBAAiB;AACnB,CACkE;AAelE,MAAa,0BAZwB,OAAO;CAC1C,eAAe,KAAK,QAAQ,CAAC;CAC7B,eAAe;CACf,KAAK;CACL,UAAU;CACV,QAAQ,KAAK,MAAM,SAAS;CAC5B,WAAW;CACX,WAAW;CACX,WAAW;CACX,SAAS;CACT,SAAS,KAAK,MAAM,SAAS;AAC/B,CAEE;AAOF,MAAa,wBAJsB,OAAO;CACxC,aAAa,KAAK,MAAM,CAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC;CACrD,YAAY,KAAK,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AAC7C,CACwE;AAexE,MAAa,yBAZuB,OAAO;CACzC,SAAS,KAAK,QAAQ,iBAAiB;CACvC,aAAa;CACb,MAAM;CACN,WAAW;CACX,oBAAoB;CACpB,QAAQ;CACR,YAAY;CACZ,UAAU;CACV,WAAW;CACX,aAAa;AACf,CAEE;AAWF,MAAa,iBARe,OAAO;CACjC,SAAS,KAAK,QAAQ,iBAAiB;CACvC,aAAa;CACb,UAAU;CACV,YAAY;CACZ,YAAY;CACZ,YAAY;AACd,CAC0D;AAW1D,MAAa,2BARyB,KAAK,MAAM;CAC/C,KAAK,QAAQ,QAAQ;CACrB,KAAK,QAAQ,SAAS;CACtB,KAAK,QAAQ,WAAW;CACxB,KAAK,QAAQ,QAAQ;CACrB,KAAK,QAAQ,UAAU;CACvB,KAAK,QAAQ,SAAS;AACxB,CAEE;AASF,MAAa,yBANuB,KAAK,MAAM;CAC7C,KAAK,QAAQ,SAAS;CACtB,KAAK,QAAQ,SAAS;CACtB,KAAK,QAAQ,QAAQ;CACrB,KAAK,QAAQ,SAAS;AACxB,CAEE;AAIF,MAAa,0BADwB,KAAK,MAAM,CAAC,KAAK,QAAQ,SAAS,GAAG,KAAK,QAAQ,OAAO,CAAC,CAE7F;AAQF,MAAa,sBALoB,KAAK,MAAM;CAC1C,KAAK,QAAQ,UAAU;CACvB,KAAK,QAAQ,aAAa;CAC1B,KAAK,QAAQ,YAAY;AAC3B,CACoE;AAapE,MAAa,iBAVe,OAAO;CACjC,aAAa;CACb,YAAY;CACZ,YAAY;CACZ,WAAW;CACX,SAAS;CACT,UAAU;CACV,aAAa,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAChD,MAAM;AACR,CAC0D;AAK1D,MAAa,wBAAwB;AAGrC,MAAa,cAA4B;CACvC,SAAS;CACT,QAAQ;EACN,SAAS;EACT,UAAU;EACV,UAAU;CACZ;AACF;;;AC3IA,MAAa,8BAA8B;;;AAG3C,MAAa,2BAA2B;AAExC,MAAM,iBAAiB,KAAK,OAAO,EAAE,SAAS,wBAAwB,CAAC;AAwBvE,MAAa,2BAtByB,OAAO;CAC3C,eAAe,KAAK,QAAQ,CAAC;CAC7B,MAAM,KAAK,QAAQ,wBAAwB;CAC3C,eAAe;CACf,WAAW,KAAK,MAAM,CAAC,KAAK,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,CAAC,CAAC;CAC1E,aAAa,KAAK,OAAO,EAAE,SAAS,oCAAoC,CAAC;CACzE,aAAa,KAAK,MAAM,CAAC,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CACpE,kBAAkB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC7C,WAAW,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CACtC,WAAW,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CACtC,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC1C,gBAAgB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC3C,QAAQ;CACR,aAAa;CACb,cAAc;CACd,YAAY,KAAK,QAAQ,KAAK;CAC9B,SAAS,KAAK,QAAQ,SAAS;CAC/B,aAAa,OAAO;EAClB,YAAY,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;EACvC,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC5C,CAAC;AACH,CAEE;AAGF,MAAa,uBAAqC;CAChD,SAAS;CACT,aACE;CACF,WAAW;CACX,QAAQ,EAAE,YAAY,yBAAyB;AACjD;;;AC1CA,MAAa,qBAAqB;;AAElC,MAAa,oBAAoB;;;;;AAMjC,MAAa,kBAAkB;;;AAI/B,MAAa,0BAA0B;AAEvC,MAAM,iBAAiB,KAAK,MAAM,CAAC,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAC9E,MAAM,YAAY,KAAK,OACrB;CACE,YAAY,KAAK,QAAQ,OAAO;CAChC,iBAAiB;CACjB,sBAAsB;CACtB,oBAAoB;CACpB,wBAAwB,KAAK,QAAQ,IAAI;CACzC,2BAA2B,KAAK,QAAQ,KAAK;AAC/C,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,YAAY,KAAK,OAAO,EAC5B,SAAS,2DACX,CAAC;AACD,MAAM,gBAAgB,KAAK,OACzB;CACE,WAAW;CACX,sBAAsB;CACtB,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,UAAU,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAC7C,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;AAChD,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,QAAQ,KAAK,OACjB;CACE,SAAS,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CACrF,iBAAiB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CAC7F,WAAW,KAAK,MAAM,KAAK,QAAQ,kBAAkB,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CAC1F,SAAS,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC;CACxE,2BAA2B,KAAK,QAAQ,2BAA2B;AACrE,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,WAAW,KAAK,OACpB;CACE,OAAO,KAAK,QAAQ,KAAK;CACzB,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAC9C,UAAU,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;AAC/C,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,aAAa,KAAK,OACtB;CACE,mBAAmB;CACnB,YAAY,KAAK,QAAQ,IAAI;CAC7B,QAAQ,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;AACtF,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,UAAU,KAAK,OACnB;CACE,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAClC,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,OAAO,KAAK,MAAM,CAAC,KAAK,QAAQ,QAAQ,GAAG,KAAK,QAAQ,cAAc,CAAC,CAAC;CACxE,OAAO,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAC/D,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,oBAAoB,KAAK,OAC7B;CACE,WAAW,KAAK,MAAM,CAAC,KAAK,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,CAAC,CAAC;CAC1E,iBAAiB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CAC7F,cAAc,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC;CAC7E,eAAe,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CACrE,gBAAgB,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CACtE,iBAAiB,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CACvE,UAAU,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CAChE,SAAS,KAAK,QAAQ,SAAS;CAC/B,mBAAmB,KAAK,QAAQ,KAAK;AACvC,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,eAAe,KAAK,OACxB;CACE,iBAAiB,KAAK,QAAQ,IAAI;CAClC,mBAAmB,KAAK,QAAQ,2BAA2B;CAC3D,UAAU,KAAK,OAAO,KAAK,OAAO,GAAG,mBAAmB,EAAE,eAAe,EAAE,CAAC;AAC9E,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,eAAe,KAAK,OACxB;CACE,WAAW,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACvC,QAAQ,KAAK,MAAM,CAAC,KAAK,QAAQ,YAAY,GAAG,KAAK,QAAQ,UAAU,CAAC,CAAC;CACzE,UAAU,KAAK,QAAQ,KAAK;CAC5B,MAAM,KAAK,QAAQ,WAAW;CAC9B,OAAO,KAAK,QAAQ,iCAAiC;CACrD,OAAO,KAAK,OACV;EACE,YAAY,KAAK,SAAS,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;EACtD,iBAAiB,KAAK,SAAS,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;EAC3D,WAAW,KAAK,SAAS,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;EACrD,SAAS,KAAK,SAAS,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;CACrD,GACA,EAAE,sBAAsB,MAAM,CAChC;CACA,iBAAiB,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,IAAM,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CAC3E,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAC9C,YAAY,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,YAAY,KAAK,OACrB;CACE,MAAM,KAAK,QAAQ,mBAAmB;CACtC,gBAAgB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC;CAC/E,gBAAgB,KAAK,MACnB,KAAK,MAAM;EACT,KAAK,QAAQ,mBAAmB;EAChC,KAAK,QAAQ,0BAA0B;EACvC,KAAK,QAAQ,uBAAuB;EACpC,KAAK,QAAQ,uBAAuB;CACtC,CAAC,GACD;EAAE,UAAU;EAAG,aAAa;CAAK,CACnC;CACA,SAAS,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS;CAAE,CAAC;CAChD,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAC9C,wBAAwB,KAAK,QAAQ,KAAK;CAC1C,wBAAwB,KAAK,QAAQ,IAAI;CACzC,sBAAsB,KAAK,QAAQ,KAAK;AAC1C,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAMA,WAAS,KAAK,OAAO,EAAE,SAAS,wBAAwB,CAAC;AAC/D,MAAM,eAAe,KAAK,OACxB;CACE,QAAQA;CACR,UAAU,KAAK,OACb,KAAK,OAAO,EAAE,SAAS,kCAAkC,CAAC,GAC1D,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC,GACzC;EAAE,sBAAsB;EAAO,eAAe;CAAE,CAClD;AACF,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,kBAAkB,KAAK,OAC3B;CACE,oBAAoB,KAAK,QAAQ;CACjC,yBAAyB,KAAK,QAAQ;CACtC,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC1C,iBAAiB,KAAK,QAAQ,KAAK;CACnC,iBAAiB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CAC7F,cAAc,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC;CAC7E,iBAAiB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC5C,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC1C,gBAAgB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC3C,SAAS,KAAK,QAAQ,SAAS;AACjC,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,YAAY,KAAK,OACrB;CACE,YAAY,KAAK,OACf;EACE,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;EAC5C,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;CACA,YAAY,KAAK,OACf;EACE,iBAAiB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;EAC5C,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;EAC1C,mBAAmB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;GAC3D,UAAU;GACV,aAAa;EACf,CAAC;CACH,GACA,EAAE,sBAAsB,MAAM,CAChC;CACA,UAAU,KAAK,OACb;EAAE,SAAS;EAAiB,OAAO;CAAgB,GACnD,EAAE,sBAAsB,MAAM,CAChC;AACF,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,mBAAmB,KAAK,OAC5B;CAAgB;CAAyB;AAAU,GACnD,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,cAAc,KAAK,OACvB;CACE,eAAe,KAAK,QAAQ,CAAC;CAC7B,MAAM,KAAK,QAAQ,eAAe;CAClC,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,QAAQ,KAAK,MAAM,CAAC,KAAK,QAAQ,UAAU,GAAG,KAAK,QAAQ,QAAQ,CAAC,CAAC;CAC1D;CACI;CACR;CACG;CACE;CACZ,UAAU,KAAK,OACb;EACE,4BAA4B;EAC5B,gCAAgC;EAChC,sCAAsC;CACxC,GACA,EAAE,sBAAsB,MAAM,CAChC;CACc;CACA;CACH;CACO;AACpB,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,YAAY,KAAK,OACrB;CACE,WAAW,KAAK,QAAQ,SAAS;CACjC,UAAU,KAAK,MAAM;EACnB,KAAK,QAAQ,qBAAqB;EAClC,KAAK,QAAQ,iBAAiB;EAC9B,KAAK,QAAQ,oBAAoB;CACnC,CAAC;CACD,cAAc,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC;CACvD,cAAc,KAAK,OAAO,EAAE,SAAS,kBAAkB,CAAC;AAC1D,GACA,EAAE,sBAAsB,MAAM,CAChC;AAkBA,MAAa,wBAjBW,KAAK,OAC3B;CACE,eAAe,KAAK,QAAQ,CAAC;CAC7B,MAAM,KAAK,MAAM,CACf,KAAK,QAAQ,sBAAsB,GACnC,KAAK,QAAQ,8BAA8B,CAC7C,CAAC;CACD,UAAU,KAAK,QAAQ;CACvB,mBAAmB,KAAK,QAAQ;CAChC,SAAS;CACT,kBAAkB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC9C,eAAe,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC;CACxD,yBAAyB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC1C;AACb,GACA,EAAE,sBAAsB,MAAM,CAEK;AAGrC,MAAa,cAA4B;CACvC,SAAS;CACT,aACE;CACF,QAAQ,EAAE,QAAQ,sBAAsB;AAC1C;;;ACpQA,MAAa,wBAAwB;AAuBrC,MAAa,qBArBmB,OAAO;CACrC,SAAS,KAAK,QAAQ,qBAAqB;;CAE3C,MAAM;CACN,SAAS;;CAET,WAAW;;CAEX,YAAY,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS,OAAO;CAAiB,CAAC;;CAEzE,gBAAgB;;;CAGhB,QAAQ,KAAK,MAAM,CACjB,KAAK,QAAQ,0BAA0B,GACvC,KAAK,QAAQ,uBAAuB,CACtC,CAAC;CACD,QAAQ;CACR,WAAW;CACX,UAAU,KAAK,QAAQ;AACzB,CACkE;AAGlE,MAAa,iBAA+B;CAC1C,SAAS;CACT,WAAW;CACX,QAAQ,EAAE,MAAM,mBAAmB;AACrC;;;ACpCA,MAAa,sBAAsB;AAEnC,MAAMC,WAAS,EAAE,sBAAsB,MAAM;AAC7C,MAAM,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACzC,MAAM,SAAS,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC;AACxD,MAAM,OAAO,KAAK,QAAQ;CAAE,SAAS;CAAG,SAAS,OAAO;AAAiB,CAAC;AAqD1E,MAAa,mBAnDiB,KAAK,OACjC;CACE,QAAQ,KAAK,QAAQ,mBAAmB;CACxC,SAAS,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS,OAAO;CAAiB,CAAC;CACtE,UAAU;CACV,WAAW;CACX,gBAAgB,KAAK,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;CAChD,UAAU,KAAK,QAAQ,IAAI;CAC3B,WAAW;CACX,SAAS,KAAK,MACZ,KAAK,OACH;EACE,MAAM,KAAK,MAAM;GACf,KAAK,QAAQ,WAAW;GACxB,KAAK,QAAQ,gBAAgB;GAC7B,KAAK,QAAQ,KAAK;GAClB,KAAK,QAAQ,OAAO;GACpB,KAAK,QAAQ,KAAK;EACpB,CAAC;EACD,IAAI;EACJ,aAAa;EACb,QAAQ;CACV,GACAA,QACF,CACF;CACA,cAAc,KAAK,MACjB,KAAK,OACH;EACE,WAAW;EACX,WAAW;EACX,MAAM,KAAK,MAAM;GACf,KAAK,QAAQ,OAAO;GACpB,KAAK,QAAQ,SAAS;GACtB,KAAK,QAAQ,WAAW;EAC1B,CAAC;EACD,QAAQ,KAAK,MAAM;GACjB,KAAK,QAAQ,QAAQ;GACrB,KAAK,QAAQ,QAAQ;GACrB,KAAK,QAAQ,YAAY;EAC3B,CAAC;EACD,aAAa;EACb,iBAAiB;EACjB,aAAa,KAAK,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;CAC/C,GACAA,QACF,CACF;AACF,GACAA,QAE4D;AAW9D,MAAa,0BARwB,KAAK,OACxC;CACE,SAAS,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS,OAAO;CAAiB,CAAC;CACtE,QAAQ;CACR,KAAK,KAAK,OAAO,EAAE,SAAS,+CAA+C,CAAC;AAC9E,GACAA,QAGA;AAGF,MAAa,gBAA8B;CACzC,SAAS;CACT,QAAQ;EAAE,UAAU;EAAkB,SAAS;CAAwB;AACzE;;;ACvEA,MAAa,oBAAoB;AAQjC,MAAa,wBANsB,KAAK,MAAM;CAC5C,KAAK,QAAQ,0BAA0B;CACvC,KAAK,QAAQ,uBAAuB;CACpC,KAAK,QAAQ,uBAAuB;CACpC,KAAK,QAAQ,mBAAmB;AAClC,CACwE;AA8BxE,MAAa,wBA3BsB,OAAO;CACxC,SAAS,KAAK,QAAQ,iBAAiB;CACvC,WAAW;CACX,QAAQ;CACR,SAAS;CACT,WAAW;CACX,QAAQ;CACR,OAAO;CACP,WAAW,KAAK,MACd,OAAO;EACL,UAAU;EACV,YAAY;CACd,CAAC,GACD;EAAE,UAAU;EAAG,aAAa;CAAK,CACnC;CACA,YAAY;CACZ,qBAAqB;CACrB,WAAW;CACX,WAAW;CACX,SAAS,KAAK,QAAQ,CAAC;CACvB,MAAM,OAAO;EACX,UAAU,KAAK,QAAQ,KAAK;EAC5B,aAAa,KAAK,QAAQ;GAAE,SAAS;GAAG,SAAS,OAAO;EAAiB,CAAC;EAC1E,mBAAmB;CACrB,CAAC;CACD,UAAU,KAAK,QAAQ;AACzB,CACwE;AAOxE,MAAa,8BAJ4B,OAAO;CAC9C,MAAM;CACN,WAAW,KAAK,OAAO,EAAE,SAAS,kBAAkB,CAAC;AACvD,CAEE;AAGF,MAAa,cAA4B;CACvC,SAAS;CACT,QAAQ;EAAE,QAAQ;EAAuB,QAAQ;CAA4B;AAC/E;;;ACpDA,MAAa,6BAA6B;AAE1C,MAAM,QAAQ,KAAK,MAAM,gBAAgB;CAAE,UAAU;CAAG,aAAa;AAAK,CAAC;AAC3E,MAAM,eAAe,KAAK,QAAQ;CAAE,SAAS;CAAG,SAAS,OAAO;AAAiB,CAAC;AA0BlF,MAAa,0BAxBwB,OAAO;CAC1C,SAAS,KAAK,QAAQ,0BAA0B;CAChD,WAAW;CACX,OAAO;CACP,cAAc;CACd,UAAU,KAAK,MAAM,CAAC,KAAK,QAAQ,qBAAqB,GAAG,KAAK,QAAQ,iBAAiB,CAAC,CAAC;CAC3F,aAAa,OAAO;EAClB,MAAM,KAAK,QAAQ,YAAY;EAC/B,sBAAsB;CACxB,CAAC;CACD,OAAO,OAAO;EACZ,gBAAgB;EAChB,SAAS;EACT,iBAAiB;EACjB,SAAS;CACX,CAAC;CACD,UAAU,OAAO;EAAE,WAAW;EAAW,UAAU;CAAU,CAAC;CAC9D,UAAU,OAAO;EACf,4BAA4B;EAC5B,gCAAgC;EAChC,sCAAsC;CACxC,CAAC;CACD,SAAS,KAAK,QAAQ;AACxB,CAEE;AAGF,MAAa,sBAAoC;CAC/C,SAAS;CACT,WAAW;CACX,QAAQ,EAAE,WAAW,wBAAwB;AAC/C;;;AC5CA,MAAa,4BAA4B;AAGzC,MAAa,4BAA4B;;;;;;;ACyFzC,MAAa,WAAmD;EAC7D,kBAAkB,UAAU;EAC5B,YAAY,UAAU;EACtB,YAAY,UAAU;EACtB,qBAAqB,UAAU;EAC/B,eAAe,UAAU;EACzB,cAAc,UAAU;EACxB,YAAY,UAAU;EACtB,oBAAoB,UAAU;AACjC"}
+{"version":3,"file":"index.mjs","names":["digest","closed"],"sources":["../src/primitives.ts","../src/kernel/dispatch-consume.v1.ts","../src/run/operation.v1.ts","../src/infra/resource-descriptor.v1.ts","../src/infra/signed-law.v1.ts","../src/infra/adoption-fact.v1.ts","../src/registry/revocations.v1.ts","../src/kernel/bootstrap.v1.ts","../src/kernel/ordinary-authority.v1.ts","../src/run/contract-versions.ts","../src/run/event.v1.ts","../src/index.ts"],"sourcesContent":["// The shared primitives every profile builds from. No profile defines its\n// own: a digest is Hex64 everywhere, a timestamp is UtcSecond everywhere,\n// an open object exists nowhere.\nimport { type TObject, type TProperties, type TSchema, Type } from \"@sinclair/typebox\";\nimport { ORN_PATTERN, SHA256_PATTERN } from \"@dynamicalsystems/orn-schemas\";\n\n/** Closed object: an extra field is a different protocol. */\nexport const closed = <T extends TProperties>(properties: T): TObject<T> =>\n  Type.Object(properties, { additionalProperties: false });\n\n/** Lowercase sha256 hex. Every digest on the wire. */\nexport const Hex64 = Type.String({ pattern: \"^[0-9a-f]{64}$\" });\n\n/** Exact UTC second, Z suffix, no fractional part. */\nexport const UtcSecond = Type.String({\n  pattern: \"^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z$\",\n});\n\nexport const NonEmptyString = Type.String({ minLength: 1 });\n\nexport const SafeInt = Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER });\n\n/** An ORN, validated by the grammar dsg-orn owns. Built from the exported\n * pattern, not the exported schema object: the upstream schemas carry\n * JSON Schema $id metadata, and embedding the same $id in several route\n * schemas makes validators refuse the duplicate. The pattern is the wire\n * truth; the metadata is not. */\nexport const Orn = Type.String({ pattern: ORN_PATTERN });\n\n/** The pair of an ORN and the sha256 pinning a version (dsg-orn Reference). */\nexport const Reference = closed({\n  orn: Orn,\n  sha256: Type.String({ pattern: SHA256_PATTERN }),\n});\n\n/** One wire profile: the literal, and every top-level shape that crosses\n * the seam it names. Shape names are stable identifiers (\"request\",\n * \"lease\", \"refusal\"); vectors address a shape as \"<literal>#<shape>\". */\nexport type ProfileEntry = {\n  readonly literal: `dsg.${string}.${string}/${number}`;\n  readonly shapes: Readonly<Record<string, TSchema>>;\n  /** Set ONLY when the wire cannot carry the literal as a field of any\n   * shape (a frozen /1); names exactly where the literal lives instead. */\n  readonly literalNote?: string;\n  /** Names the shape non-TS consumers validate a whole document against;\n   * the emitted JSON Schema gains a root $ref to it. Only meaningful for\n   * profiles with a single document root. */\n  readonly rootShape?: string;\n};\n","// dsg.kernel.dispatch-consume/1\n// Owner: dsg-kernel (the consume route produces the lease and the refusal;\n// the plane produces the request).\n//\n// K05/I3: the dispatch-authorization consume contract between the kernel\n// and the plane. Immediately before its first non-cleanup cloud mutation -\n// identity, bucket and IAM preparation included, not only job submission -\n// the plane consumes a short-lived, single-operation dispatch authorization\n// bound to operation, generation, envelope digest, law digest and\n// reservation. The committed consume event is the authorization ordering\n// point; it is not atomic with any provider API. A replay returns the\n// original lease and never renews it; a renewal is a new recorded\n// authorization decision for the same operation and reservation.\n//\n// Lifted verbatim from dsg-kernel packages/core/src/dispatch.ts at commit\n// c2d39d95 (wire shapes only; the record-held event payloads stay in the\n// kernel). This file is frozen: changes ship as dispatch-consume.v2.ts.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport {\n  closed,\n  Hex64,\n  NonEmptyString,\n  Orn,\n  Reference,\n  UtcSecond,\n  type ProfileEntry,\n} from \"../primitives.js\";\n\nexport const DISPATCH_CONSUME_PROFILE = \"dsg.kernel.dispatch-consume/1\" as const;\n\n/** The bounded clock skew a lease check must tolerate, in seconds. */\nexport const DISPATCH_MAX_SKEW_SECONDS = 300;\n\nconst DispatchConsumeRequestSchemaValue = closed({\n  profile: Type.Literal(DISPATCH_CONSUME_PROFILE),\n  /** The kernel operation identity from the accepted OperationRequest. */\n  operationId: NonEmptyString,\n  /** The workspace generation the plane admitted the operation at. */\n  generation: Type.Integer({ minimum: 0 }),\n  /** The Case the operation belongs to - the stream the consume event\n   *  lands on and the stream the reservation was recorded on. */\n  caseOrn: Orn,\n  /** SHA256(JCS(complete OperationRequest)) - the M010 envelope digest. */\n  envelopeSha256: Hex64,\n  /** The exact retained signed-law bytes the Case pins. */\n  lawSha256: Hex64,\n  /** The K04 reservation the authorization is bound to: sha256 is the\n   *  reservation event's record id. */\n  reservation: Reference,\n  requestedAt: UtcSecond,\n  /** False: first consumption or idempotent replay of it. True: an explicit\n   *  renewal - a new recorded authorization decision for the same operation\n   *  and reservation after lease expiry with the work known unsubmitted. A\n   *  replay never renews; only this flag does, and it re-runs every\n   *  revocation check at the current record state. */\n  renewal: Type.Boolean(),\n});\nexport const DispatchConsumeRequestSchema: typeof DispatchConsumeRequestSchemaValue =\n  DispatchConsumeRequestSchemaValue;\nexport type DispatchConsumeRequest = Static<typeof DispatchConsumeRequestSchema>;\n\nconst DispatchLeaseSchemaValue = closed({\n  profile: Type.Literal(DISPATCH_CONSUME_PROFILE),\n  /** The consume event's record id: the committed ordering point. */\n  leaseId: Hex64,\n  operationId: NonEmptyString,\n  generation: Type.Integer({ minimum: 0 }),\n  caseOrn: Orn,\n  envelopeSha256: Hex64,\n  lawSha256: Hex64,\n  reservation: Reference,\n  consumedAt: UtcSecond,\n  /** Fixed maximum duration from consumedAt; the plane checks validity\n   *  before each new non-cleanup call, Batch submission included. */\n  expiresAt: UtcSecond,\n  /** The bounded clock skew a lease check must tolerate, in seconds. */\n  maxSkewSeconds: Type.Integer({ minimum: 0, maximum: DISPATCH_MAX_SKEW_SECONDS }),\n  renewal: Type.Literal(\"new-authorization-required\"),\n  /** False when this response replays an earlier committed consumption:\n   *  the lease bytes, expiry included, are the original's. */\n  fresh: Type.Boolean(),\n});\nexport const DispatchLeaseSchema: typeof DispatchLeaseSchemaValue = DispatchLeaseSchemaValue;\nexport type DispatchLease = Static<typeof DispatchLeaseSchema>;\n\nconst DispatchRefusalCodeSchemaValue = Type.Union([\n  Type.Literal(\"unknown_operation\"),\n  Type.Literal(\"no_reservation\"),\n  Type.Literal(\"binding_mismatch\"),\n  Type.Literal(\"revoked\"),\n  Type.Literal(\"authority_refused\"),\n  Type.Literal(\"renewal_requires_existing_consumption\"),\n  Type.Literal(\"unavailable\"),\n]);\nexport const DispatchRefusalCodeSchema: typeof DispatchRefusalCodeSchemaValue =\n  DispatchRefusalCodeSchemaValue;\nexport type DispatchRefusalCode = Static<typeof DispatchRefusalCodeSchema>;\n\nconst DispatchRefusalSchemaValue = closed({\n  profile: Type.Literal(DISPATCH_CONSUME_PROFILE),\n  code: DispatchRefusalCodeSchema,\n  issues: Type.Array(NonEmptyString, { minItems: 1 }),\n});\nexport const DispatchRefusalSchema: typeof DispatchRefusalSchemaValue = DispatchRefusalSchemaValue;\nexport type DispatchRefusal = Static<typeof DispatchRefusalSchema>;\n\nexport const dispatchConsumeV1: ProfileEntry = {\n  literal: DISPATCH_CONSUME_PROFILE,\n  shapes: {\n    request: DispatchConsumeRequestSchema,\n    lease: DispatchLeaseSchema,\n    refusal: DispatchRefusalSchema,\n  },\n};\n","// dsg.run.operation/1\n// Owner: dsg-run (the protocol listener accepts the request and answers\n// the receipt; the kernel validates, records and reads back).\n//\n// Closed, versioned compute-operation vocabulary shared by the kernel and\n// the dsg.run plane. The document is deliberately references-only: payload\n// bytes remain retained artifacts, while this request carries the immutable\n// identity, generation fence, law, reservation and plan digest.\n//\n// The envelope digest bound at dispatch (M010) is sha256 over the RFC 8785\n// canonical form of the complete OperationRequest; the digest vectors in\n// the conformance package pin that meaning.\n//\n// Lifted verbatim from dsg-kernel packages/core/src/operation.ts at commit\n// 0f8d64d7 (equal, field for field, to dsg-run service/src/protocol/\n// schemas.ts 134-246 - the R01 cross-validation held). Known /2 candidate,\n// kept loose here because a released /1 is frozen: acceptedAt is\n// minLength 1, not an exact UTC second, and the plane emits fractional\n// seconds today.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport {\n  closed,\n  Hex64,\n  NonEmptyString,\n  Reference,\n  SafeInt,\n  type ProfileEntry,\n} from \"../primitives.js\";\n\nexport const OPERATION_PROFILE = \"dsg.run.operation/1\" as const;\n\nconst ExecutionResourcesSchemaValue = closed({\n  maxGpuSeconds: SafeInt,\n  maxRunSeconds: SafeInt,\n  maxParallelism: SafeInt,\n});\nexport const ExecutionResourcesSchema: typeof ExecutionResourcesSchemaValue =\n  ExecutionResourcesSchemaValue;\nexport type ExecutionResources = Static<typeof ExecutionResourcesSchema>;\n\nconst ExecutionLawSchemaValue = closed({\n  bundle: Reference,\n  registryRelease: Reference,\n});\nexport const ExecutionLawSchema: typeof ExecutionLawSchemaValue = ExecutionLawSchemaValue;\nexport type ExecutionLaw = Static<typeof ExecutionLawSchema>;\n\nconst ExecutionDocumentSchemaValue = closed({\n  schemaVersion: Type.Literal(1),\n  classContract: Reference,\n  law: ExecutionLawSchema,\n  workload: Reference,\n  inputs: Type.Array(Reference),\n  resources: ExecutionResourcesSchema,\n  costBound: Reference,\n  placement: Reference,\n  results: Reference,\n  secrets: Type.Array(Reference),\n});\nexport const ExecutionDocumentSchema: typeof ExecutionDocumentSchemaValue =\n  ExecutionDocumentSchemaValue;\nexport type ExecutionDocument = Static<typeof ExecutionDocumentSchema>;\n\nconst OperationBeforeSchemaValue = closed({\n  operationId: Type.Union([NonEmptyString, Type.Null()]),\n  planDigest: Type.Union([Hex64, Type.Null()]),\n});\nexport const OperationBeforeSchema: typeof OperationBeforeSchemaValue = OperationBeforeSchemaValue;\nexport type OperationBefore = Static<typeof OperationBeforeSchema>;\n\nconst OperationRequestSchemaValue = closed({\n  profile: Type.Literal(OPERATION_PROFILE),\n  operationId: NonEmptyString,\n  case: Reference,\n  workspace: NonEmptyString,\n  expectedGeneration: SafeInt,\n  before: OperationBeforeSchema,\n  planDigest: Hex64,\n  document: ExecutionDocumentSchema,\n  authority: Reference,\n  reservation: Reference,\n});\nexport const OperationRequestSchema: typeof OperationRequestSchemaValue =\n  OperationRequestSchemaValue;\nexport type OperationRequest = Static<typeof OperationRequestSchema>;\n\nconst AcceptedSchemaValue = closed({\n  profile: Type.Literal(OPERATION_PROFILE),\n  operationId: NonEmptyString,\n  actionId: NonEmptyString,\n  generation: SafeInt,\n  planDigest: Hex64,\n  acceptedAt: NonEmptyString,\n});\nexport const AcceptedSchema: typeof AcceptedSchemaValue = AcceptedSchemaValue;\nexport type Accepted = Static<typeof AcceptedSchema>;\n\nconst OperationExecutionSchemaValue = Type.Union([\n  Type.Literal(\"queued\"),\n  Type.Literal(\"running\"),\n  Type.Literal(\"succeeded\"),\n  Type.Literal(\"failed\"),\n  Type.Literal(\"canceled\"),\n  Type.Literal(\"unknown\"),\n]);\nexport const OperationExecutionSchema: typeof OperationExecutionSchemaValue =\n  OperationExecutionSchemaValue;\nexport type OperationExecution = Static<typeof OperationExecutionSchema>;\n\nconst OperationCleanupSchemaValue = Type.Union([\n  Type.Literal(\"pending\"),\n  Type.Literal(\"present\"),\n  Type.Literal(\"absent\"),\n  Type.Literal(\"unknown\"),\n]);\nexport const OperationCleanupSchema: typeof OperationCleanupSchemaValue =\n  OperationCleanupSchemaValue;\nexport type OperationCleanup = Static<typeof OperationCleanupSchema>;\n\nconst OperationEvidenceSchemaValue = Type.Union([Type.Literal(\"pending\"), Type.Literal(\"ready\")]);\nexport const OperationEvidenceSchema: typeof OperationEvidenceSchemaValue =\n  OperationEvidenceSchemaValue;\nexport type OperationEvidence = Static<typeof OperationEvidenceSchema>;\n\nconst OperationCostSchemaValue = Type.Union([\n  Type.Literal(\"reserved\"),\n  Type.Literal(\"provisional\"),\n  Type.Literal(\"reconciled\"),\n]);\nexport const OperationCostSchema: typeof OperationCostSchemaValue = OperationCostSchemaValue;\nexport type OperationCost = Static<typeof OperationCostSchema>;\n\nconst ReadbackSchemaValue = closed({\n  operationId: NonEmptyString,\n  generation: SafeInt,\n  planDigest: Hex64,\n  execution: OperationExecutionSchema,\n  cleanup: OperationCleanupSchema,\n  evidence: OperationEvidenceSchema,\n  evidenceRef: Type.Union([Reference, Type.Null()]),\n  cost: OperationCostSchema,\n});\nexport const ReadbackSchema: typeof ReadbackSchemaValue = ReadbackSchemaValue;\nexport type Readback = Static<typeof ReadbackSchema>;\n\n// I-001 names the status as the same closed readback shape. Keeping this\n// alias prevents callers from inventing a second status wire contract.\nexport const OperationStatusSchema = ReadbackSchema;\nexport type OperationStatus = Readback;\n\nexport const operationV1: ProfileEntry = {\n  literal: OPERATION_PROFILE,\n  shapes: {\n    request: OperationRequestSchema,\n    accepted: AcceptedSchema,\n    readback: ReadbackSchema,\n  },\n};\n","// dsg.infra.resource-descriptor/1\n// Owner: dsg-infra (policy/resource-descriptor.schema.json is the source;\n// law_contract.py validates this exact shape and evaluate_descriptor\n// returns its canonical digest). A concrete provider-neutral resource: the\n// thing rendered from a workload and gated against the signed law's\n// capability limits before any provider API sees it. Distinct from\n// signed-law's capabilityProfile, which states allowed LIMITS; this\n// document states one concrete resource checked against them.\n//\n// The wire carries kind \"dsg.infra.resource-descriptor\" plus\n// schemaVersion 1; the /1 literal itself is the version marker signed-law\n// fields pin (scope.resourceDescriptorVersion, capabilities\n// .descriptorVersion), so the constant lives here and signed-law imports\n// it. Lifted verbatim from dsg-infra policy/resource-descriptor.schema.json\n// at fccf709.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport { closed, NonEmptyString, type ProfileEntry } from \"../primitives.js\";\n\nexport const RESOURCE_DESCRIPTOR_PROFILE = \"dsg.infra.resource-descriptor/1\" as const;\n/** The document kind: the profile literal without its version suffix; the\n * version rides in schemaVersion. Frozen /1 wire choice. */\nexport const RESOURCE_DESCRIPTOR_KIND = \"dsg.infra.resource-descriptor\" as const;\n\nconst prefixedDigest = Type.String({ pattern: \"^sha256:[0-9a-f]{64}$\" });\n\nconst ResourceDescriptorSchemaValue = closed({\n  schemaVersion: Type.Literal(1),\n  kind: Type.Literal(RESOURCE_DESCRIPTOR_KIND),\n  workloadClass: NonEmptyString,\n  lifecycle: Type.Union([Type.Literal(\"ephemeral\"), Type.Literal(\"durable\")]),\n  machineType: Type.String({ pattern: \"^[a-z][a-z0-9]*-[a-z0-9]+-[0-9]+$\" }),\n  accelerator: Type.Union([Type.String({ minLength: 1 }), Type.Null()]),\n  acceleratorCount: Type.Integer({ minimum: 0 }),\n  vcpuCount: Type.Integer({ minimum: 1 }),\n  memoryGiB: Type.Integer({ minimum: 1 }),\n  maxRunSeconds: Type.Integer({ minimum: 1 }),\n  maxParallelism: Type.Integer({ minimum: 1 }),\n  region: NonEmptyString,\n  imageDigest: prefixedDigest,\n  moduleDigest: prefixedDigest,\n  externalIp: Type.Literal(false),\n  network: Type.Literal(\"private\"),\n  reservation: closed({\n    gpuSeconds: Type.Integer({ minimum: 0 }),\n    usdMicroUnits: Type.Integer({ minimum: 0 }),\n  }),\n});\nexport const ResourceDescriptorSchema: typeof ResourceDescriptorSchemaValue =\n  ResourceDescriptorSchemaValue;\nexport type ResourceDescriptor = Static<typeof ResourceDescriptorSchema>;\n\nexport const resourceDescriptorV1: ProfileEntry = {\n  literal: RESOURCE_DESCRIPTOR_PROFILE,\n  literalNote:\n    \"carried as kind (unversioned) plus schemaVersion on the document; the /1 literal is the version marker signed-law pins\",\n  rootShape: \"descriptor\",\n  shapes: { descriptor: ResourceDescriptorSchema },\n};\n","// dsg.infra.signed-law/1\n// Owner: dsg-infra (the S02 law producer; both prior copies were generated\n// from dsg-infra policy/law-bundle.schema.json, source SHA-256\n// bc3692395cf994567115c76d8fce66a7e9ebe7b2c50c70e1c83b8b10693a838c).\n//\n// The literal is the signing DOMAIN: it appears as the `domain` member of\n// the canonical signature input (JCS of {domain, payload, payloadSha256,\n// testOnly}), not as a field of the bundle itself; the bundle carries\n// `kind` plus `schemaVersion` instead. Lifted verbatim from dsg-kernel\n// packages/signing/src/law-schema.ts at ffafe305, byte-identical to the\n// module registry copy at 1f8c994.\nimport { Type, type Static } from \"@sinclair/typebox\";\nimport type { ProfileEntry } from \"../primitives.js\";\nimport { RESOURCE_DESCRIPTOR_PROFILE } from \"./resource-descriptor.v1.js\";\n\nexport const SIGNED_LAW_PROFILE = \"dsg.infra.signed-law/1\" as const;\n/** The signature-input domain member is exactly the profile literal. */\nexport const SIGNED_LAW_DOMAIN = SIGNED_LAW_PROFILE;\n\n/** The scope vocabulary version today's laws cite in\n * standingOrder.scopeReference. The FIELD stays an open nonempty string on\n * purpose (a law may cite a future scope); this constant is the value in\n * force, exported so no consumer hand-types it. */\nexport const SCOPE_REFERENCE = \"dsg.infra.scope/1\" as const;\n\n/** The price-profile version today's laws cite in priceProfile.reference.\n * Same rule: the field stays open; this is the value in force. */\nexport const PRICE_PROFILE_REFERENCE = \"dsg.infra.price-profile/1\" as const;\n\nconst nullableString = Type.Union([Type.String({ minLength: 1 }), Type.Null()]);\nconst authority = Type.Object(\n  {\n    issuerType: Type.Literal(\"human\"),\n    issuerReference: nullableString,\n    designationReference: nullableString,\n    signatureReference: nullableString,\n    humanSignatureRequired: Type.Literal(true),\n    releaseAutomationMayIssue: Type.Literal(false),\n  },\n  { additionalProperties: false },\n);\nconst utcSecond = Type.String({\n  pattern: \"^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z$\",\n});\nconst standingOrder = Type.Object(\n  {\n    reference: nullableString,\n    designationReference: nullableString,\n    scopeReference: Type.String({ minLength: 1 }),\n    issuedAt: Type.Union([utcSecond, Type.Null()]),\n    expiresAt: Type.Union([utcSecond, Type.Null()]),\n  },\n  { additionalProperties: false },\n);\nconst scope = Type.Object(\n  {\n    actions: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n    workloadClasses: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n    providers: Type.Array(Type.Literal(\"provider-neutral\"), { minItems: 1, uniqueItems: true }),\n    regions: Type.Array(Type.String({ minLength: 1 }), { uniqueItems: true }),\n    resourceDescriptorVersion: Type.Literal(RESOURCE_DESCRIPTOR_PROFILE),\n  },\n  { additionalProperties: false },\n);\nconst validity = Type.Object(\n  {\n    clock: Type.Literal(\"UTC\"),\n    notBefore: Type.Union([utcSecond, Type.Null()]),\n    notAfter: Type.Union([utcSecond, Type.Null()]),\n  },\n  { additionalProperties: false },\n);\nconst revocation = Type.Object(\n  {\n    snapshotReference: nullableString,\n    failClosed: Type.Literal(true),\n    checks: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n  },\n  { additionalProperties: false },\n);\nconst ceiling = Type.Object(\n  {\n    unit: Type.String({ minLength: 1 }),\n    period: Type.String({ minLength: 1 }),\n    scope: Type.Union([Type.Literal(\"person\"), Type.Literal(\"organization\")]),\n    value: Type.Union([Type.Integer({ minimum: 0 }), Type.Null()]),\n  },\n  { additionalProperties: false },\n);\nconst capabilityProfile = Type.Object(\n  {\n    lifecycle: Type.Union([Type.Literal(\"ephemeral\"), Type.Literal(\"durable\")]),\n    machinePrefixes: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n    accelerators: Type.Array(Type.String({ minLength: 1 }), { uniqueItems: true }),\n    maxRunSeconds: Type.Union([Type.Integer({ minimum: 0 }), Type.Null()]),\n    maxParallelism: Type.Union([Type.Integer({ minimum: 1 }), Type.Null()]),\n    maxGpuInstances: Type.Union([Type.Integer({ minimum: 0 }), Type.Null()]),\n    maxVcpus: Type.Union([Type.Integer({ minimum: 1 }), Type.Null()]),\n    network: Type.Literal(\"private\"),\n    externalIpAllowed: Type.Literal(false),\n  },\n  { additionalProperties: false },\n);\nconst capabilities = Type.Object(\n  {\n    providerNeutral: Type.Literal(true),\n    descriptorVersion: Type.Literal(RESOURCE_DESCRIPTOR_PROFILE),\n    profiles: Type.Record(Type.String(), capabilityProfile, { minProperties: 1 }),\n  },\n  { additionalProperties: false },\n);\nconst priceProfile = Type.Object(\n  {\n    reference: Type.String({ minLength: 1 }),\n    status: Type.Union([Type.Literal(\"unassigned\"), Type.Literal(\"retained\")]),\n    currency: Type.Literal(\"USD\"),\n    unit: Type.Literal(\"micro_usd\"),\n    basis: Type.Literal(\"retained-conservative-on-demand\"),\n    rates: Type.Object(\n      {\n        vcpuSecond: Type.Optional(Type.Integer({ minimum: 0 })),\n        memoryGiBSecond: Type.Optional(Type.Integer({ minimum: 0 })),\n        gpuSecond: Type.Optional(Type.Integer({ minimum: 0 })),\n        startup: Type.Optional(Type.Integer({ minimum: 0 })),\n      },\n      { additionalProperties: false },\n    ),\n    safetyFactorBps: Type.Union([Type.Integer({ minimum: 10000 }), Type.Null()]),\n    validFrom: Type.Union([utcSecond, Type.Null()]),\n    validUntil: Type.Union([utcSecond, Type.Null()]),\n  },\n  { additionalProperties: false },\n);\nconst bootstrap = Type.Object(\n  {\n    mode: Type.Literal(\"finite-human-root\"),\n    rootReferences: Type.Array(Type.String({ minLength: 1 }), { uniqueItems: true }),\n    allowedActions: Type.Array(\n      Type.Union([\n        Type.Literal(\"enroll_human_root\"),\n        Type.Literal(\"initialize_kernel_record\"),\n        Type.Literal(\"restore_kernel_record\"),\n        Type.Literal(\"cutover_single_writer\"),\n      ]),\n      { minItems: 1, uniqueItems: true },\n    ),\n    maxUses: Type.Integer({ minimum: 1, maximum: 1 }),\n    expiresAt: Type.Union([utcSecond, Type.Null()]),\n    projectCreationAllowed: Type.Literal(false),\n    requiresHumanSignature: Type.Literal(true),\n    automationCanSatisfy: Type.Literal(false),\n  },\n  { additionalProperties: false },\n);\nconst digest = Type.String({ pattern: \"^sha256:[0-9a-f]{64}$\" });\nconst policyBundle = Type.Object(\n  {\n    digest: digest,\n    manifest: Type.Record(\n      Type.String({ pattern: \"^policy/[A-Za-z0-9._-]+\\\\.rego$\" }),\n      Type.String({ pattern: \"^[0-9a-f]{64}$\" }),\n      { additionalProperties: false, minProperties: 1 },\n    ),\n  },\n  { additionalProperties: false },\n);\nconst lawInputProfile = Type.Object(\n  {\n    requiresRunCeiling: Type.Boolean(),\n    requiresExpirationLabel: Type.Boolean(),\n    maxRunSeconds: Type.Integer({ minimum: 1 }),\n    allowExternalIp: Type.Literal(false),\n    machinePrefixes: Type.Array(Type.String({ minLength: 1 }), { minItems: 1, uniqueItems: true }),\n    accelerators: Type.Array(Type.String({ minLength: 1 }), { uniqueItems: true }),\n    maxGpuInstances: Type.Integer({ minimum: 0 }),\n    maxTotalVcpus: Type.Integer({ minimum: 1 }),\n    maxParallelism: Type.Integer({ minimum: 1 }),\n    network: Type.Literal(\"private\"),\n  },\n  { additionalProperties: false },\n);\nconst lawInputs = Type.Object(\n  {\n    cloudflare: Type.Object(\n      {\n        approvedZoneId: Type.String({ minLength: 1 }),\n        approvedAccountId: Type.String({ minLength: 1 }),\n      },\n      { additionalProperties: false },\n    ),\n    planLimits: Type.Object(\n      {\n        maxGpuInstances: Type.Integer({ minimum: 0 }),\n        maxTotalVcpus: Type.Integer({ minimum: 1 }),\n        approvedLocations: Type.Array(Type.String({ minLength: 1 }), {\n          minItems: 1,\n          uniqueItems: true,\n        }),\n      },\n      { additionalProperties: false },\n    ),\n    profiles: Type.Object(\n      { compute: lawInputProfile, plane: lawInputProfile },\n      { additionalProperties: false },\n    ),\n  },\n  { additionalProperties: false },\n);\nconst evaluationInputs = Type.Object(\n  { policyBundle: policyBundle, lawInputs: lawInputs },\n  { additionalProperties: false },\n);\nconst lawDocument = Type.Object(\n  {\n    schemaVersion: Type.Literal(1),\n    kind: Type.Literal(\"dsg.infra.law\"),\n    lawId: Type.String({ minLength: 1 }),\n    status: Type.Union([Type.Literal(\"unissued\"), Type.Literal(\"issued\")]),\n    authority: authority,\n    standingOrder: standingOrder,\n    scope: scope,\n    validity: validity,\n    revocation: revocation,\n    ceilings: Type.Object(\n      {\n        gpuSecondsPerPersonUtcWeek: ceiling,\n        usdMicroUnitsPerPersonUtcMonth: ceiling,\n        usdMicroUnitsPerOrganizationUtcMonth: ceiling,\n      },\n      { additionalProperties: false },\n    ),\n    capabilities: capabilities,\n    priceProfile: priceProfile,\n    bootstrap: bootstrap,\n    evaluationInputs: evaluationInputs,\n  },\n  { additionalProperties: false },\n);\nconst signature = Type.Object(\n  {\n    algorithm: Type.Literal(\"Ed25519\"),\n    keyClass: Type.Union([\n      Type.Literal(\"synthetic-test-only\"),\n      Type.Literal(\"human-authority\"),\n      Type.Literal(\"release-automation\"),\n    ]),\n    publicKeyHex: Type.String({ pattern: \"^[0-9a-f]{64}$\" }),\n    signatureHex: Type.String({ pattern: \"^[0-9a-f]{128}$\" }),\n  },\n  { additionalProperties: false },\n);\nconst signedLawBundle = Type.Object(\n  {\n    schemaVersion: Type.Literal(1),\n    kind: Type.Union([\n      Type.Literal(\"dsg.infra.signed-law\"),\n      Type.Literal(\"dsg.infra.signed-law-fixture\"),\n    ]),\n    testOnly: Type.Boolean(),\n    deployedAuthority: Type.Boolean(),\n    payload: lawDocument,\n    canonicalPayload: Type.String({ minLength: 1 }),\n    payloadSha256: Type.String({ pattern: \"^[0-9a-f]{64}$\" }),\n    canonicalSignatureInput: Type.String({ minLength: 1 }),\n    signature: signature,\n  },\n  { additionalProperties: false },\n);\nexport const SignedLawBundleSchema = signedLawBundle;\nexport type SignedLawBundle = Static<typeof SignedLawBundleSchema>;\n\nexport const signedLawV1: ProfileEntry = {\n  literal: SIGNED_LAW_PROFILE,\n  literalNote:\n    \"carried as the domain member of the canonical signature input, not as a bundle field\",\n  shapes: { bundle: SignedLawBundleSchema },\n};\n","// dsg.infra.adoption-fact/1\n// Owner: dsg-infra (governance/adoption.py is the producer: it verifies an\n// exported kernel bootstrap record snapshot offline - canonical digest,\n// event hash chain, stream heads, artifact bytes - and emits the accepted\n// root-authorizing operation as this fact). The tofu baseline root\n// consumes it and re-validates independently: its deployment-specific\n// conditions (which root string, testOnly false for the real baseline)\n// are that root's own law, deliberately NOT part of this shape - a\n// synthetic testOnly fact is a valid FACT, just never a valid deployed\n// authorization.\n//\n// Lifted from dsg-infra governance/adoption.py at e9d9501 and\n// infrastructure/environments/dsg-run/adoption.tf (S01, commit fccf709).\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport { closed, Hex64, NonEmptyString, Orn, type ProfileEntry } from \"../primitives.js\";\n\nexport const ADOPTION_FACT_PROFILE = \"dsg.infra.adoption-fact/1\" as const;\n\nconst AdoptionFactSchemaValue = closed({\n  profile: Type.Literal(ADOPTION_FACT_PROFILE),\n  /** The root the record names as active baseline owner. */\n  root: NonEmptyString,\n  lineage: NonEmptyString,\n  /** The accepted root-authorizing operation. */\n  operation: NonEmptyString,\n  /** Count of accepted root operations; ownership needs at least one. */\n  generation: Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER }),\n  /** Canonical digest of the verified record snapshot. */\n  snapshotSha256: Hex64,\n  /** initialize establishes the first owner; cutover transfers it. restore\n   *  and enrollment move custody and human roots, never root ownership. */\n  action: Type.Union([\n    Type.Literal(\"initialize_kernel_record\"),\n    Type.Literal(\"cutover_single_writer\"),\n  ]),\n  signer: Orn,\n  humanRoot: NonEmptyString,\n  testOnly: Type.Boolean(),\n});\nexport const AdoptionFactSchema: typeof AdoptionFactSchemaValue = AdoptionFactSchemaValue;\nexport type AdoptionFact = Static<typeof AdoptionFactSchema>;\n\nexport const adoptionFactV1: ProfileEntry = {\n  literal: ADOPTION_FACT_PROFILE,\n  rootShape: \"fact\",\n  shapes: { fact: AdoptionFactSchema },\n};\n","// dsg.registry.revocations/1\n// Owner: dsg-infra-module-registry (the S03 trust producer). Signed,\n// monotonically versioned revocation snapshots with retained trust\n// history; timestamps are epoch seconds by frozen choice of /1 (recorded\n// in FROZEN_EXEMPTIONS; exact-second strings would be a /2).\n// Lifted verbatim from dsg-infra-module-registry src/revocation.ts at\n// 1f8c994.\nimport { Type, type Static } from \"@sinclair/typebox\";\nimport type { ProfileEntry } from \"../primitives.js\";\n\nexport const REVOCATIONS_PROFILE = \"dsg.registry.revocations/1\" as const;\n\nconst closed = { additionalProperties: false };\nconst text = Type.String({ minLength: 1 });\nconst digest = Type.String({ pattern: \"^[0-9a-f]{64}$\" });\nconst time = Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER });\n\nconst RevocationSchemaValue = Type.Object(\n  {\n    domain: Type.Literal(REVOCATIONS_PROFILE),\n    version: Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER }),\n    issuedAt: time,\n    expiresAt: time,\n    previousSha256: Type.Union([digest, Type.Null()]),\n    testOnly: Type.Literal(true),\n    signerKey: digest,\n    revoked: Type.Array(\n      Type.Object(\n        {\n          kind: Type.Union([\n            Type.Literal(\"principal\"),\n            Type.Literal(\"standing-order\"),\n            Type.Literal(\"law\"),\n            Type.Literal(\"class\"),\n            Type.Literal(\"key\"),\n          ]),\n          id: text,\n          effectiveAt: time,\n          reason: text,\n        },\n        closed,\n      ),\n    ),\n    trustHistory: Type.Array(\n      Type.Object(\n        {\n          principal: text,\n          publicKey: digest,\n          role: Type.Union([\n            Type.Literal(\"human\"),\n            Type.Literal(\"release\"),\n            Type.Literal(\"collector\"),\n          ]),\n          action: Type.Union([\n            Type.Literal(\"enroll\"),\n            Type.Literal(\"rotate\"),\n            Type.Literal(\"compromise\"),\n          ]),\n          effectiveAt: time,\n          authoritySha256: digest,\n          replacesKey: Type.Union([digest, Type.Null()]),\n        },\n        closed,\n      ),\n    ),\n  },\n  closed,\n);\nexport const RevocationSchema: typeof RevocationSchemaValue = RevocationSchemaValue;\nexport type RevocationSnapshot = Static<typeof RevocationSchema>;\n\nconst RevocationPointerSchemaValue = Type.Object(\n  {\n    version: Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER }),\n    sha256: digest,\n    url: Type.String({ pattern: \"^/revocations/v/[1-9][0-9]*/snapshot\\\\.json$\" }),\n  },\n  closed,\n);\nexport const RevocationPointerSchema: typeof RevocationPointerSchemaValue =\n  RevocationPointerSchemaValue;\nexport type RevocationPointer = Static<typeof RevocationPointerSchema>;\n\nexport const revocationsV1: ProfileEntry = {\n  literal: REVOCATIONS_PROFILE,\n  shapes: { snapshot: RevocationSchema, pointer: RevocationPointerSchema },\n};\n","// dsg.kernel.bootstrap/1\n// Owner: dsg-kernel (K14). The finite bootstrap intent: a signed,\n// single-use, expiring authorization for exactly one of four record\n// actions, binding plan and resource-spec digests. enroll_human_root\n// (M030) is the additive action that anchors ordinary-authority\n// enrollment; initialization is never reinterpreted as enrollment. The\n// record-held bootstrap event payloads stay in the kernel.\n//\n// Lifted verbatim from dsg-kernel packages/core/src/contracts.ts at\n// 00b33ac1. createdAt/expiresAt are frozen /1 nonempty strings, recorded\n// in FROZEN_EXEMPTIONS; exact-second patterns would be a /2 against\n// already-recorded signed intents.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport { closed, Hex64, NonEmptyString, Orn, type ProfileEntry } from \"../primitives.js\";\n\nexport const BOOTSTRAP_PROFILE = \"dsg.kernel.bootstrap/1\" as const;\n\nconst BootstrapActionSchemaValue = Type.Union([\n  Type.Literal(\"initialize_kernel_record\"),\n  Type.Literal(\"restore_kernel_record\"),\n  Type.Literal(\"cutover_single_writer\"),\n  Type.Literal(\"enroll_human_root\"),\n]);\nexport const BootstrapActionSchema: typeof BootstrapActionSchemaValue = BootstrapActionSchemaValue;\nexport type BootstrapAction = Static<typeof BootstrapActionSchema>;\n\nconst BootstrapIntentSchemaValue = closed({\n  version: Type.Literal(BOOTSTRAP_PROFILE),\n  operation: NonEmptyString,\n  action: BootstrapActionSchema,\n  lineage: NonEmptyString,\n  humanRoot: NonEmptyString,\n  signer: Orn,\n  scope: NonEmptyString,\n  resources: Type.Array(\n    closed({\n      identity: NonEmptyString,\n      specSha256: Hex64,\n    }),\n    { minItems: 1, uniqueItems: true },\n  ),\n  planSha256: Hex64,\n  preconditionsSha256: Hex64,\n  createdAt: NonEmptyString,\n  expiresAt: NonEmptyString,\n  maxUses: Type.Literal(1),\n  cost: closed({\n    currency: Type.Literal(\"USD\"),\n    maxMicroUsd: Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER }),\n    assumptionsSha256: Hex64,\n  }),\n  testOnly: Type.Boolean(),\n});\nexport const BootstrapIntentSchema: typeof BootstrapIntentSchemaValue = BootstrapIntentSchemaValue;\nexport type BootstrapIntent = Static<typeof BootstrapIntentSchema>;\n\nconst SignedBootstrapIntentSchemaValue = closed({\n  body: BootstrapIntentSchema,\n  signature: Type.String({ pattern: \"^[0-9a-f]{128}$\" }),\n});\nexport const SignedBootstrapIntentSchema: typeof SignedBootstrapIntentSchemaValue =\n  SignedBootstrapIntentSchemaValue;\nexport type SignedBootstrapIntent = Static<typeof SignedBootstrapIntentSchema>;\n\nexport const bootstrapV1: ProfileEntry = {\n  literal: BOOTSTRAP_PROFILE,\n  shapes: { intent: BootstrapIntentSchema, signed: SignedBootstrapIntentSchema },\n};\n","// dsg.kernel.ordinary-authority/1\n// Owner: dsg-kernel (K02, M029/M030). The canonical ordinary-rights\n// artifact: who may issue law, exactly what they may permit, for how long,\n// and under which three ceilings. Closed and versioned; every set is an\n// explicit allow-list, never an omitted-means-unlimited default. A\n// verified finite enroll_human_root intent binds this document's digest as\n// both plan and resource spec. The revocation view a standing-order check\n// runs against stays in the kernel: independently supplied input, not a\n// wire document.\n//\n// Lifted verbatim from dsg-kernel packages/signing/src/enrollment.ts at\n// 00b33ac1.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport { closed, Hex64, NonEmptyString, Orn, UtcSecond, type ProfileEntry } from \"../primitives.js\";\n\nexport const ORDINARY_AUTHORITY_PROFILE = \"dsg.kernel.ordinary-authority/1\" as const;\n\nconst names = Type.Array(NonEmptyString, { minItems: 1, uniqueItems: true });\nconst ceilingValue = Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER });\n\nconst OrdinaryAuthoritySchemaValue = closed({\n  version: Type.Literal(ORDINARY_AUTHORITY_PROFILE),\n  reference: NonEmptyString,\n  actor: Orn,\n  publicKeyHex: Hex64,\n  keyClass: Type.Union([Type.Literal(\"synthetic-test-only\"), Type.Literal(\"human-authority\")]),\n  designation: closed({\n    role: Type.Literal(\"law-issuer\"),\n    designationReference: NonEmptyString,\n  }),\n  scope: closed({\n    scopeReference: NonEmptyString,\n    actions: names,\n    workloadClasses: names,\n    regions: names,\n  }),\n  validity: closed({ notBefore: UtcSecond, notAfter: UtcSecond }),\n  ceilings: closed({\n    gpuSecondsPerPersonUtcWeek: ceilingValue,\n    usdMicroUnitsPerPersonUtcMonth: ceilingValue,\n    usdMicroUnitsPerOrganizationUtcMonth: ceilingValue,\n  }),\n  revoked: Type.Boolean(),\n});\nexport const OrdinaryAuthoritySchema: typeof OrdinaryAuthoritySchemaValue =\n  OrdinaryAuthoritySchemaValue;\nexport type OrdinaryAuthority = Static<typeof OrdinaryAuthoritySchema>;\n\nexport const ordinaryAuthorityV1: ProfileEntry = {\n  literal: ORDINARY_AUTHORITY_PROFILE,\n  rootShape: \"authority\",\n  shapes: { authority: OrdinaryAuthoritySchema },\n};\n","// In-process contract versions of the dsg-run plane. Under ruling I7 these\n// are NOT profiles: an executor or provider adapter is a TypeScript plugin\n// interface inside one process, with no serialized shape or digest of its\n// own - its documents (operation requests, descriptors) already have\n// profiles. The literals live here so no consumer repo defines a\n// dsg.*.*/N string and the CI grep stays absolute. When R06 gives\n// executors a real serialized job document, THAT becomes a profile module\n// beside this file.\nexport const EXECUTOR_PROTOCOL_VERSION = \"dsg.run.executor/1\" as const;\nexport type ExecutorProtocolVersion = typeof EXECUTOR_PROTOCOL_VERSION;\n\nexport const PROVIDER_PROTOCOL_VERSION = \"dsg.run.provider/1\" as const;\nexport type ProviderProtocolVersion = typeof PROVIDER_PROTOCOL_VERSION;\n","// dsg.run.event/1\n// Owner: dsg-run (the plane ingests, stores, streams, and seals) with the\n// emitting library as the other side of the seam.\n//\n// One event a running workload emitted about itself. The workload writes\n// these as single JSON lines on standard output, prefixed `DSGEV `, and\n// knows nothing about how they travel: the executor that ran the job is\n// the only thing that knows where its output went.\n//\n// Two things are closed and two are open by design. The ENVELOPE is\n// closed: an unknown envelope field is a different protocol. The PAYLOAD\n// is open here and closed by the catalog the emitter declared and the\n// request pinned by digest - the plane validates the payload against that\n// catalog, so this profile does not need to know a modeler's vocabulary\n// to refuse an invalid instance of it.\n//\n// Ordering is the sequence number, never arrival and never the clock: a\n// transport may duplicate or reorder, and the stored stream is the same\n// either way. A gap is recorded as a fact, not smoothed over.\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport {\n  closed,\n  Hex64,\n  NonEmptyString,\n  SafeInt,\n  UtcSecond,\n  type ProfileEntry,\n} from \"../primitives.js\";\n\nexport const EVENT_PROFILE = \"dsg.run.event/1\" as const;\n\n/** The wire prefix that lets a collector pick these lines out of ordinary\n *  job logs. One space, then the JSON object, then a newline. */\nexport const EVENT_LINE_PREFIX = \"DSGEV \" as const;\n\n/** The lifecycle spine every catalog carries without declaring it: the\n *  kinds the console draws for any workload, whatever it models. A\n *  workload emitting only started and finished is fully described. */\nexport const LIFECYCLE_KINDS = [\n  \"started\",\n  \"phase.entered\",\n  \"phase.exited\",\n  \"progress\",\n  \"checkpoint\",\n  \"artifact\",\n  \"warning\",\n  \"failure\",\n  \"finished\",\n] as const;\n\nconst EventSchemaValue = closed({\n  profile: Type.Literal(EVENT_PROFILE),\n  /** The operation this event belongs to; injected into the job's\n   *  environment by the plane, never chosen by the workload. */\n  operation: NonEmptyString,\n  /** Monotonic within one operation, from 1. Ordering lives here. */\n  sequence: Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER }),\n  at: UtcSecond,\n  /** A lifecycle kind or one the pinned catalog declares. */\n  kind: NonEmptyString,\n  /** Digest of the catalog the payload validates against. */\n  catalogSha256: Hex64,\n  /** Validated against the catalog by digest, not by this schema: a\n   *  modeler's vocabulary is theirs, and the plane refuses a payload the\n   *  catalog does not admit. Artifacts are references, never contents. */\n  payload: Type.Record(Type.String(), Type.Unknown()),\n});\nexport const EventSchema: typeof EventSchemaValue = EventSchemaValue;\nexport type Event = Static<typeof EventSchema>;\n\n/** What the plane seals into the outcome: the ordered stream's own digest,\n *  the catalog it validated against, and the count - enough for an\n *  offline reader holding the exported stream to recompute the verdict\n *  without the plane. `truncatedAtSequence` is the event ceiling's mark:\n *  a runaway logger is bounded, and the bound is visible rather than a\n *  silently short stream. */\nconst EventStreamSealSchemaValue = closed({\n  profile: Type.Literal(EVENT_PROFILE),\n  operation: NonEmptyString,\n  catalogSha256: Hex64,\n  /** sha256 over the newline-joined canonical event lines, in sequence. */\n  streamSha256: Hex64,\n  eventCount: SafeInt,\n  /** Sequence numbers missing from an otherwise ordered stream. */\n  gaps: Type.Array(Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER })),\n  truncatedAtSequence: Type.Union([Type.Integer({ minimum: 1 }), Type.Null()]),\n});\nexport const EventStreamSealSchema: typeof EventStreamSealSchemaValue = EventStreamSealSchemaValue;\nexport type EventStreamSeal = Static<typeof EventStreamSealSchema>;\n\nexport const eventV1: ProfileEntry = {\n  literal: EVENT_PROFILE,\n  rootShape: \"event\",\n  shapes: { event: EventSchema, streamSeal: EventStreamSealSchema },\n};\n","export { closed, Hex64, NonEmptyString, Orn, Reference, SafeInt, UtcSecond } from \"./primitives.js\";\nexport type { ProfileEntry } from \"./primitives.js\";\nexport {\n  DISPATCH_CONSUME_PROFILE,\n  DISPATCH_MAX_SKEW_SECONDS,\n  DispatchConsumeRequestSchema,\n  DispatchLeaseSchema,\n  DispatchRefusalCodeSchema,\n  DispatchRefusalSchema,\n} from \"./kernel/dispatch-consume.v1.js\";\nexport type {\n  DispatchConsumeRequest,\n  DispatchLease,\n  DispatchRefusal,\n  DispatchRefusalCode,\n} from \"./kernel/dispatch-consume.v1.js\";\nexport {\n  AcceptedSchema,\n  ExecutionDocumentSchema,\n  ExecutionLawSchema,\n  ExecutionResourcesSchema,\n  OPERATION_PROFILE,\n  OperationBeforeSchema,\n  OperationCleanupSchema,\n  OperationCostSchema,\n  OperationEvidenceSchema,\n  OperationExecutionSchema,\n  OperationRequestSchema,\n  OperationStatusSchema,\n  ReadbackSchema,\n} from \"./run/operation.v1.js\";\nexport type {\n  Accepted,\n  ExecutionDocument,\n  ExecutionLaw,\n  ExecutionResources,\n  OperationBefore,\n  OperationCleanup,\n  OperationCost,\n  OperationEvidence,\n  OperationExecution,\n  OperationRequest,\n  OperationStatus,\n  Readback,\n} from \"./run/operation.v1.js\";\nexport {\n  PRICE_PROFILE_REFERENCE,\n  SCOPE_REFERENCE,\n  SIGNED_LAW_DOMAIN,\n  SIGNED_LAW_PROFILE,\n  SignedLawBundleSchema,\n} from \"./infra/signed-law.v1.js\";\nexport {\n  RESOURCE_DESCRIPTOR_KIND,\n  RESOURCE_DESCRIPTOR_PROFILE,\n  ResourceDescriptorSchema,\n} from \"./infra/resource-descriptor.v1.js\";\nexport type { ResourceDescriptor } from \"./infra/resource-descriptor.v1.js\";\nexport { ADOPTION_FACT_PROFILE, AdoptionFactSchema } from \"./infra/adoption-fact.v1.js\";\nexport type { AdoptionFact } from \"./infra/adoption-fact.v1.js\";\nexport type { SignedLawBundle } from \"./infra/signed-law.v1.js\";\nexport {\n  REVOCATIONS_PROFILE,\n  RevocationPointerSchema,\n  RevocationSchema,\n} from \"./registry/revocations.v1.js\";\nexport type { RevocationPointer, RevocationSnapshot } from \"./registry/revocations.v1.js\";\nexport {\n  BOOTSTRAP_PROFILE,\n  BootstrapActionSchema,\n  BootstrapIntentSchema,\n  SignedBootstrapIntentSchema,\n} from \"./kernel/bootstrap.v1.js\";\nexport type {\n  BootstrapAction,\n  BootstrapIntent,\n  SignedBootstrapIntent,\n} from \"./kernel/bootstrap.v1.js\";\nexport {\n  ORDINARY_AUTHORITY_PROFILE,\n  OrdinaryAuthoritySchema,\n} from \"./kernel/ordinary-authority.v1.js\";\nexport type { OrdinaryAuthority } from \"./kernel/ordinary-authority.v1.js\";\nexport { EXECUTOR_PROTOCOL_VERSION, PROVIDER_PROTOCOL_VERSION } from \"./run/contract-versions.js\";\nexport type { ExecutorProtocolVersion, ProviderProtocolVersion } from \"./run/contract-versions.js\";\nexport {\n  EVENT_PROFILE,\n  EVENT_LINE_PREFIX,\n  LIFECYCLE_KINDS,\n  EventSchema,\n  EventStreamSealSchema,\n} from \"./run/event.v1.js\";\nexport type { Event, EventStreamSeal } from \"./run/event.v1.js\";\n\nimport type { ProfileEntry } from \"./primitives.js\";\nimport { dispatchConsumeV1 } from \"./kernel/dispatch-consume.v1.js\";\nimport { operationV1 } from \"./run/operation.v1.js\";\nimport { eventV1 } from \"./run/event.v1.js\";\nimport { signedLawV1 } from \"./infra/signed-law.v1.js\";\nimport { resourceDescriptorV1 } from \"./infra/resource-descriptor.v1.js\";\nimport { adoptionFactV1 } from \"./infra/adoption-fact.v1.js\";\nimport { revocationsV1 } from \"./registry/revocations.v1.js\";\nimport { bootstrapV1 } from \"./kernel/bootstrap.v1.js\";\nimport { ordinaryAuthorityV1 } from \"./kernel/ordinary-authority.v1.js\";\n\n/** Every profile this version of the package defines, keyed by literal.\n * Profile modules are added here as they are extracted; the rules test\n * and the schema emitter walk this registry, so a module that is not\n * registered does not exist. */\nexport const PROFILES: Readonly<Record<string, ProfileEntry>> = {\n  [dispatchConsumeV1.literal]: dispatchConsumeV1,\n  [operationV1.literal]: operationV1,\n  [eventV1.literal]: eventV1,\n  [signedLawV1.literal]: signedLawV1,\n  [resourceDescriptorV1.literal]: resourceDescriptorV1,\n  [adoptionFactV1.literal]: adoptionFactV1,\n  [revocationsV1.literal]: revocationsV1,\n  [bootstrapV1.literal]: bootstrapV1,\n  [ordinaryAuthorityV1.literal]: ordinaryAuthorityV1,\n};\n"],"mappings":";;;;AAOA,MAAa,UAAiC,eAC5C,KAAK,OAAO,YAAY,EAAE,sBAAsB,MAAM,CAAC;;AAGzD,MAAa,QAAQ,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC;;AAG9D,MAAa,YAAY,KAAK,OAAO,EACnC,SAAS,2DACX,CAAC;AAED,MAAa,iBAAiB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AAE1D,MAAa,UAAU,KAAK,QAAQ;CAAE,SAAS;CAAG,SAAS,OAAO;AAAiB,CAAC;;;;;;AAOpF,MAAa,MAAM,KAAK,OAAO,EAAE,SAAS,YAAY,CAAC;;AAGvD,MAAa,YAAY,OAAO;CAC9B,KAAK;CACL,QAAQ,KAAK,OAAO,EAAE,SAAS,eAAe,CAAC;AACjD,CAAC;;;ACLD,MAAa,2BAA2B;;AAGxC,MAAa,4BAA4B;AA0BzC,MAAa,+BAxB6B,OAAO;CAC/C,SAAS,KAAK,QAAQ,wBAAwB;;CAE9C,aAAa;;CAEb,YAAY,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;;;CAGvC,SAAS;;CAET,gBAAgB;;CAEhB,WAAW;;;CAGX,aAAa;CACb,aAAa;;;;;;CAMb,SAAS,KAAK,QAAQ;AACxB,CAEE;AAwBF,MAAa,sBArBoB,OAAO;CACtC,SAAS,KAAK,QAAQ,wBAAwB;;CAE9C,SAAS;CACT,aAAa;CACb,YAAY,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CACvC,SAAS;CACT,gBAAgB;CAChB,WAAW;CACX,aAAa;CACb,YAAY;;;CAGZ,WAAW;;CAEX,gBAAgB,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAA;CAAmC,CAAC;CAC/E,SAAS,KAAK,QAAQ,4BAA4B;;;CAGlD,OAAO,KAAK,QAAQ;AACtB,CACoE;AAYpE,MAAa,4BAT0B,KAAK,MAAM;CAChD,KAAK,QAAQ,mBAAmB;CAChC,KAAK,QAAQ,gBAAgB;CAC7B,KAAK,QAAQ,kBAAkB;CAC/B,KAAK,QAAQ,SAAS;CACtB,KAAK,QAAQ,mBAAmB;CAChC,KAAK,QAAQ,uCAAuC;CACpD,KAAK,QAAQ,aAAa;AAC5B,CAEE;AAQF,MAAa,wBALsB,OAAO;CACxC,SAAS,KAAK,QAAQ,wBAAwB;CAC9C,MAAM;CACN,QAAQ,KAAK,MAAM,gBAAgB,EAAE,UAAU,EAAE,CAAC;AACpD,CACwE;AAGxE,MAAa,oBAAkC;CAC7C,SAAS;CACT,QAAQ;EACN,SAAS;EACT,OAAO;EACP,SAAS;CACX;AACF;;;ACpFA,MAAa,oBAAoB;AAOjC,MAAa,2BALyB,OAAO;CAC3C,eAAe;CACf,eAAe;CACf,gBAAgB;AAClB,CAEE;AAOF,MAAa,qBAJmB,OAAO;CACrC,QAAQ;CACR,iBAAiB;AACnB,CACkE;AAelE,MAAa,0BAZwB,OAAO;CAC1C,eAAe,KAAK,QAAQ,CAAC;CAC7B,eAAe;CACf,KAAK;CACL,UAAU;CACV,QAAQ,KAAK,MAAM,SAAS;CAC5B,WAAW;CACX,WAAW;CACX,WAAW;CACX,SAAS;CACT,SAAS,KAAK,MAAM,SAAS;AAC/B,CAEE;AAOF,MAAa,wBAJsB,OAAO;CACxC,aAAa,KAAK,MAAM,CAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC;CACrD,YAAY,KAAK,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AAC7C,CACwE;AAexE,MAAa,yBAZuB,OAAO;CACzC,SAAS,KAAK,QAAQ,iBAAiB;CACvC,aAAa;CACb,MAAM;CACN,WAAW;CACX,oBAAoB;CACpB,QAAQ;CACR,YAAY;CACZ,UAAU;CACV,WAAW;CACX,aAAa;AACf,CAEE;AAWF,MAAa,iBARe,OAAO;CACjC,SAAS,KAAK,QAAQ,iBAAiB;CACvC,aAAa;CACb,UAAU;CACV,YAAY;CACZ,YAAY;CACZ,YAAY;AACd,CAC0D;AAW1D,MAAa,2BARyB,KAAK,MAAM;CAC/C,KAAK,QAAQ,QAAQ;CACrB,KAAK,QAAQ,SAAS;CACtB,KAAK,QAAQ,WAAW;CACxB,KAAK,QAAQ,QAAQ;CACrB,KAAK,QAAQ,UAAU;CACvB,KAAK,QAAQ,SAAS;AACxB,CAEE;AASF,MAAa,yBANuB,KAAK,MAAM;CAC7C,KAAK,QAAQ,SAAS;CACtB,KAAK,QAAQ,SAAS;CACtB,KAAK,QAAQ,QAAQ;CACrB,KAAK,QAAQ,SAAS;AACxB,CAEE;AAIF,MAAa,0BADwB,KAAK,MAAM,CAAC,KAAK,QAAQ,SAAS,GAAG,KAAK,QAAQ,OAAO,CAAC,CAE7F;AAQF,MAAa,sBALoB,KAAK,MAAM;CAC1C,KAAK,QAAQ,UAAU;CACvB,KAAK,QAAQ,aAAa;CAC1B,KAAK,QAAQ,YAAY;AAC3B,CACoE;AAapE,MAAa,iBAVe,OAAO;CACjC,aAAa;CACb,YAAY;CACZ,YAAY;CACZ,WAAW;CACX,SAAS;CACT,UAAU;CACV,aAAa,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAChD,MAAM;AACR,CAC0D;AAK1D,MAAa,wBAAwB;AAGrC,MAAa,cAA4B;CACvC,SAAS;CACT,QAAQ;EACN,SAAS;EACT,UAAU;EACV,UAAU;CACZ;AACF;;;AC3IA,MAAa,8BAA8B;;;AAG3C,MAAa,2BAA2B;AAExC,MAAM,iBAAiB,KAAK,OAAO,EAAE,SAAS,wBAAwB,CAAC;AAwBvE,MAAa,2BAtByB,OAAO;CAC3C,eAAe,KAAK,QAAQ,CAAC;CAC7B,MAAM,KAAK,QAAQ,wBAAwB;CAC3C,eAAe;CACf,WAAW,KAAK,MAAM,CAAC,KAAK,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,CAAC,CAAC;CAC1E,aAAa,KAAK,OAAO,EAAE,SAAS,oCAAoC,CAAC;CACzE,aAAa,KAAK,MAAM,CAAC,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CACpE,kBAAkB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC7C,WAAW,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CACtC,WAAW,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CACtC,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC1C,gBAAgB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC3C,QAAQ;CACR,aAAa;CACb,cAAc;CACd,YAAY,KAAK,QAAQ,KAAK;CAC9B,SAAS,KAAK,QAAQ,SAAS;CAC/B,aAAa,OAAO;EAClB,YAAY,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;EACvC,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC5C,CAAC;AACH,CAEE;AAGF,MAAa,uBAAqC;CAChD,SAAS;CACT,aACE;CACF,WAAW;CACX,QAAQ,EAAE,YAAY,yBAAyB;AACjD;;;AC1CA,MAAa,qBAAqB;;AAElC,MAAa,oBAAoB;;;;;AAMjC,MAAa,kBAAkB;;;AAI/B,MAAa,0BAA0B;AAEvC,MAAM,iBAAiB,KAAK,MAAM,CAAC,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAC9E,MAAM,YAAY,KAAK,OACrB;CACE,YAAY,KAAK,QAAQ,OAAO;CAChC,iBAAiB;CACjB,sBAAsB;CACtB,oBAAoB;CACpB,wBAAwB,KAAK,QAAQ,IAAI;CACzC,2BAA2B,KAAK,QAAQ,KAAK;AAC/C,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,YAAY,KAAK,OAAO,EAC5B,SAAS,2DACX,CAAC;AACD,MAAM,gBAAgB,KAAK,OACzB;CACE,WAAW;CACX,sBAAsB;CACtB,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,UAAU,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAC7C,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;AAChD,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,QAAQ,KAAK,OACjB;CACE,SAAS,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CACrF,iBAAiB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CAC7F,WAAW,KAAK,MAAM,KAAK,QAAQ,kBAAkB,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CAC1F,SAAS,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC;CACxE,2BAA2B,KAAK,QAAQ,2BAA2B;AACrE,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,WAAW,KAAK,OACpB;CACE,OAAO,KAAK,QAAQ,KAAK;CACzB,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAC9C,UAAU,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;AAC/C,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,aAAa,KAAK,OACtB;CACE,mBAAmB;CACnB,YAAY,KAAK,QAAQ,IAAI;CAC7B,QAAQ,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;AACtF,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,UAAU,KAAK,OACnB;CACE,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAClC,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,OAAO,KAAK,MAAM,CAAC,KAAK,QAAQ,QAAQ,GAAG,KAAK,QAAQ,cAAc,CAAC,CAAC;CACxE,OAAO,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAC/D,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,oBAAoB,KAAK,OAC7B;CACE,WAAW,KAAK,MAAM,CAAC,KAAK,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,CAAC,CAAC;CAC1E,iBAAiB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CAC7F,cAAc,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC;CAC7E,eAAe,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CACrE,gBAAgB,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CACtE,iBAAiB,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CACvE,UAAU,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CAChE,SAAS,KAAK,QAAQ,SAAS;CAC/B,mBAAmB,KAAK,QAAQ,KAAK;AACvC,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,eAAe,KAAK,OACxB;CACE,iBAAiB,KAAK,QAAQ,IAAI;CAClC,mBAAmB,KAAK,QAAQ,2BAA2B;CAC3D,UAAU,KAAK,OAAO,KAAK,OAAO,GAAG,mBAAmB,EAAE,eAAe,EAAE,CAAC;AAC9E,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,eAAe,KAAK,OACxB;CACE,WAAW,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACvC,QAAQ,KAAK,MAAM,CAAC,KAAK,QAAQ,YAAY,GAAG,KAAK,QAAQ,UAAU,CAAC,CAAC;CACzE,UAAU,KAAK,QAAQ,KAAK;CAC5B,MAAM,KAAK,QAAQ,WAAW;CAC9B,OAAO,KAAK,QAAQ,iCAAiC;CACrD,OAAO,KAAK,OACV;EACE,YAAY,KAAK,SAAS,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;EACtD,iBAAiB,KAAK,SAAS,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;EAC3D,WAAW,KAAK,SAAS,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;EACrD,SAAS,KAAK,SAAS,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;CACrD,GACA,EAAE,sBAAsB,MAAM,CAChC;CACA,iBAAiB,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,IAAM,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;CAC3E,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAC9C,YAAY,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,YAAY,KAAK,OACrB;CACE,MAAM,KAAK,QAAQ,mBAAmB;CACtC,gBAAgB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC;CAC/E,gBAAgB,KAAK,MACnB,KAAK,MAAM;EACT,KAAK,QAAQ,mBAAmB;EAChC,KAAK,QAAQ,0BAA0B;EACvC,KAAK,QAAQ,uBAAuB;EACpC,KAAK,QAAQ,uBAAuB;CACtC,CAAC,GACD;EAAE,UAAU;EAAG,aAAa;CAAK,CACnC;CACA,SAAS,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS;CAAE,CAAC;CAChD,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;CAC9C,wBAAwB,KAAK,QAAQ,KAAK;CAC1C,wBAAwB,KAAK,QAAQ,IAAI;CACzC,sBAAsB,KAAK,QAAQ,KAAK;AAC1C,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAMA,WAAS,KAAK,OAAO,EAAE,SAAS,wBAAwB,CAAC;AAC/D,MAAM,eAAe,KAAK,OACxB;CACE,QAAQA;CACR,UAAU,KAAK,OACb,KAAK,OAAO,EAAE,SAAS,kCAAkC,CAAC,GAC1D,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC,GACzC;EAAE,sBAAsB;EAAO,eAAe;CAAE,CAClD;AACF,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,kBAAkB,KAAK,OAC3B;CACE,oBAAoB,KAAK,QAAQ;CACjC,yBAAyB,KAAK,QAAQ;CACtC,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC1C,iBAAiB,KAAK,QAAQ,KAAK;CACnC,iBAAiB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;EAAE,UAAU;EAAG,aAAa;CAAK,CAAC;CAC7F,cAAc,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC;CAC7E,iBAAiB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC5C,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC1C,gBAAgB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CAC3C,SAAS,KAAK,QAAQ,SAAS;AACjC,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,YAAY,KAAK,OACrB;CACE,YAAY,KAAK,OACf;EACE,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;EAC5C,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;CACA,YAAY,KAAK,OACf;EACE,iBAAiB,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;EAC5C,eAAe,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;EAC1C,mBAAmB,KAAK,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG;GAC3D,UAAU;GACV,aAAa;EACf,CAAC;CACH,GACA,EAAE,sBAAsB,MAAM,CAChC;CACA,UAAU,KAAK,OACb;EAAE,SAAS;EAAiB,OAAO;CAAgB,GACnD,EAAE,sBAAsB,MAAM,CAChC;AACF,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,mBAAmB,KAAK,OAC5B;CAAgB;CAAyB;AAAU,GACnD,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,cAAc,KAAK,OACvB;CACE,eAAe,KAAK,QAAQ,CAAC;CAC7B,MAAM,KAAK,QAAQ,eAAe;CAClC,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,QAAQ,KAAK,MAAM,CAAC,KAAK,QAAQ,UAAU,GAAG,KAAK,QAAQ,QAAQ,CAAC,CAAC;CAC1D;CACI;CACR;CACG;CACE;CACZ,UAAU,KAAK,OACb;EACE,4BAA4B;EAC5B,gCAAgC;EAChC,sCAAsC;CACxC,GACA,EAAE,sBAAsB,MAAM,CAChC;CACc;CACA;CACH;CACO;AACpB,GACA,EAAE,sBAAsB,MAAM,CAChC;AACA,MAAM,YAAY,KAAK,OACrB;CACE,WAAW,KAAK,QAAQ,SAAS;CACjC,UAAU,KAAK,MAAM;EACnB,KAAK,QAAQ,qBAAqB;EAClC,KAAK,QAAQ,iBAAiB;EAC9B,KAAK,QAAQ,oBAAoB;CACnC,CAAC;CACD,cAAc,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC;CACvD,cAAc,KAAK,OAAO,EAAE,SAAS,kBAAkB,CAAC;AAC1D,GACA,EAAE,sBAAsB,MAAM,CAChC;AAkBA,MAAa,wBAjBW,KAAK,OAC3B;CACE,eAAe,KAAK,QAAQ,CAAC;CAC7B,MAAM,KAAK,MAAM,CACf,KAAK,QAAQ,sBAAsB,GACnC,KAAK,QAAQ,8BAA8B,CAC7C,CAAC;CACD,UAAU,KAAK,QAAQ;CACvB,mBAAmB,KAAK,QAAQ;CAChC,SAAS;CACT,kBAAkB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC9C,eAAe,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC;CACxD,yBAAyB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC1C;AACb,GACA,EAAE,sBAAsB,MAAM,CAEK;AAGrC,MAAa,cAA4B;CACvC,SAAS;CACT,aACE;CACF,QAAQ,EAAE,QAAQ,sBAAsB;AAC1C;;;ACpQA,MAAa,wBAAwB;AAuBrC,MAAa,qBArBmB,OAAO;CACrC,SAAS,KAAK,QAAQ,qBAAqB;;CAE3C,MAAM;CACN,SAAS;;CAET,WAAW;;CAEX,YAAY,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS,OAAO;CAAiB,CAAC;;CAEzE,gBAAgB;;;CAGhB,QAAQ,KAAK,MAAM,CACjB,KAAK,QAAQ,0BAA0B,GACvC,KAAK,QAAQ,uBAAuB,CACtC,CAAC;CACD,QAAQ;CACR,WAAW;CACX,UAAU,KAAK,QAAQ;AACzB,CACkE;AAGlE,MAAa,iBAA+B;CAC1C,SAAS;CACT,WAAW;CACX,QAAQ,EAAE,MAAM,mBAAmB;AACrC;;;ACpCA,MAAa,sBAAsB;AAEnC,MAAMC,WAAS,EAAE,sBAAsB,MAAM;AAC7C,MAAM,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACzC,MAAM,SAAS,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC;AACxD,MAAM,OAAO,KAAK,QAAQ;CAAE,SAAS;CAAG,SAAS,OAAO;AAAiB,CAAC;AAqD1E,MAAa,mBAnDiB,KAAK,OACjC;CACE,QAAQ,KAAK,QAAQ,mBAAmB;CACxC,SAAS,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS,OAAO;CAAiB,CAAC;CACtE,UAAU;CACV,WAAW;CACX,gBAAgB,KAAK,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;CAChD,UAAU,KAAK,QAAQ,IAAI;CAC3B,WAAW;CACX,SAAS,KAAK,MACZ,KAAK,OACH;EACE,MAAM,KAAK,MAAM;GACf,KAAK,QAAQ,WAAW;GACxB,KAAK,QAAQ,gBAAgB;GAC7B,KAAK,QAAQ,KAAK;GAClB,KAAK,QAAQ,OAAO;GACpB,KAAK,QAAQ,KAAK;EACpB,CAAC;EACD,IAAI;EACJ,aAAa;EACb,QAAQ;CACV,GACAA,QACF,CACF;CACA,cAAc,KAAK,MACjB,KAAK,OACH;EACE,WAAW;EACX,WAAW;EACX,MAAM,KAAK,MAAM;GACf,KAAK,QAAQ,OAAO;GACpB,KAAK,QAAQ,SAAS;GACtB,KAAK,QAAQ,WAAW;EAC1B,CAAC;EACD,QAAQ,KAAK,MAAM;GACjB,KAAK,QAAQ,QAAQ;GACrB,KAAK,QAAQ,QAAQ;GACrB,KAAK,QAAQ,YAAY;EAC3B,CAAC;EACD,aAAa;EACb,iBAAiB;EACjB,aAAa,KAAK,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;CAC/C,GACAA,QACF,CACF;AACF,GACAA,QAE4D;AAW9D,MAAa,0BARwB,KAAK,OACxC;CACE,SAAS,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS,OAAO;CAAiB,CAAC;CACtE,QAAQ;CACR,KAAK,KAAK,OAAO,EAAE,SAAS,+CAA+C,CAAC;AAC9E,GACAA,QAGA;AAGF,MAAa,gBAA8B;CACzC,SAAS;CACT,QAAQ;EAAE,UAAU;EAAkB,SAAS;CAAwB;AACzE;;;ACvEA,MAAa,oBAAoB;AAQjC,MAAa,wBANsB,KAAK,MAAM;CAC5C,KAAK,QAAQ,0BAA0B;CACvC,KAAK,QAAQ,uBAAuB;CACpC,KAAK,QAAQ,uBAAuB;CACpC,KAAK,QAAQ,mBAAmB;AAClC,CACwE;AA8BxE,MAAa,wBA3BsB,OAAO;CACxC,SAAS,KAAK,QAAQ,iBAAiB;CACvC,WAAW;CACX,QAAQ;CACR,SAAS;CACT,WAAW;CACX,QAAQ;CACR,OAAO;CACP,WAAW,KAAK,MACd,OAAO;EACL,UAAU;EACV,YAAY;CACd,CAAC,GACD;EAAE,UAAU;EAAG,aAAa;CAAK,CACnC;CACA,YAAY;CACZ,qBAAqB;CACrB,WAAW;CACX,WAAW;CACX,SAAS,KAAK,QAAQ,CAAC;CACvB,MAAM,OAAO;EACX,UAAU,KAAK,QAAQ,KAAK;EAC5B,aAAa,KAAK,QAAQ;GAAE,SAAS;GAAG,SAAS,OAAO;EAAiB,CAAC;EAC1E,mBAAmB;CACrB,CAAC;CACD,UAAU,KAAK,QAAQ;AACzB,CACwE;AAOxE,MAAa,8BAJ4B,OAAO;CAC9C,MAAM;CACN,WAAW,KAAK,OAAO,EAAE,SAAS,kBAAkB,CAAC;AACvD,CAEE;AAGF,MAAa,cAA4B;CACvC,SAAS;CACT,QAAQ;EAAE,QAAQ;EAAuB,QAAQ;CAA4B;AAC/E;;;ACpDA,MAAa,6BAA6B;AAE1C,MAAM,QAAQ,KAAK,MAAM,gBAAgB;CAAE,UAAU;CAAG,aAAa;AAAK,CAAC;AAC3E,MAAM,eAAe,KAAK,QAAQ;CAAE,SAAS;CAAG,SAAS,OAAO;AAAiB,CAAC;AA0BlF,MAAa,0BAxBwB,OAAO;CAC1C,SAAS,KAAK,QAAQ,0BAA0B;CAChD,WAAW;CACX,OAAO;CACP,cAAc;CACd,UAAU,KAAK,MAAM,CAAC,KAAK,QAAQ,qBAAqB,GAAG,KAAK,QAAQ,iBAAiB,CAAC,CAAC;CAC3F,aAAa,OAAO;EAClB,MAAM,KAAK,QAAQ,YAAY;EAC/B,sBAAsB;CACxB,CAAC;CACD,OAAO,OAAO;EACZ,gBAAgB;EAChB,SAAS;EACT,iBAAiB;EACjB,SAAS;CACX,CAAC;CACD,UAAU,OAAO;EAAE,WAAW;EAAW,UAAU;CAAU,CAAC;CAC9D,UAAU,OAAO;EACf,4BAA4B;EAC5B,gCAAgC;EAChC,sCAAsC;CACxC,CAAC;CACD,SAAS,KAAK,QAAQ;AACxB,CAEE;AAGF,MAAa,sBAAoC;CAC/C,SAAS;CACT,WAAW;CACX,QAAQ,EAAE,WAAW,wBAAwB;AAC/C;;;AC5CA,MAAa,4BAA4B;AAGzC,MAAa,4BAA4B;;;ACkBzC,MAAa,gBAAgB;;;AAI7B,MAAa,oBAAoB;;;;AAKjC,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAmBA,MAAa,cAjBY,OAAO;CAC9B,SAAS,KAAK,QAAQ,aAAa;;;CAGnC,WAAW;;CAEX,UAAU,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS,OAAO;CAAiB,CAAC;CACvE,IAAI;;CAEJ,MAAM;;CAEN,eAAe;;;;CAIf,SAAS,KAAK,OAAO,KAAK,OAAO,GAAG,KAAK,QAAQ,CAAC;AACpD,CACoD;AAoBpD,MAAa,wBAXsB,OAAO;CACxC,SAAS,KAAK,QAAQ,aAAa;CACnC,WAAW;CACX,eAAe;;CAEf,cAAc;CACd,YAAY;;CAEZ,MAAM,KAAK,MAAM,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS,OAAO;CAAiB,CAAC,CAAC;CAC/E,qBAAqB,KAAK,MAAM,CAAC,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAC7E,CACwE;AAGxE,MAAa,UAAwB;CACnC,SAAS;CACT,WAAW;CACX,QAAQ;EAAE,OAAO;EAAa,YAAY;CAAsB;AAClE;;;;;;;ACeA,MAAa,WAAmD;EAC7D,kBAAkB,UAAU;EAC5B,YAAY,UAAU;EACtB,QAAQ,UAAU;EAClB,YAAY,UAAU;EACtB,qBAAqB,UAAU;EAC/B,eAAe,UAAU;EACzB,cAAc,UAAU;EACxB,YAAY,UAAU;EACtB,oBAAoB,UAAU;AACjC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamicalsystems/idl",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "The DSG governed compute plane wire profiles: TypeBox schemas, profile literals, and Static types for every dsg.*.*/N shape. One meaning per profile, frozen per version.",
   "homepage": "https://github.com/DynamicalSystemsGroup/dsg-idl#readme",
   "bugs": "https://github.com/DynamicalSystemsGroup/dsg-idl/issues",
@@ -38,25 +38,26 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "build": "tsdown",
+    "prepack": "tsdown",
+    "check-types": "tsc --noEmit",
+    "lint": "oxlint --config ../../.oxlintrc.json --type-aware .",
+    "format:check": "oxfmt --check .",
+    "test": "vitest run"
+  },
   "dependencies": {
     "@dynamicalsystems/orn-schemas": "0.1.0",
-    "@sinclair/typebox": "0.34.52"
+    "@sinclair/typebox": "catalog:"
   },
   "devDependencies": {
-    "oxfmt": "0.64.0",
-    "oxlint": "1.79.0",
-    "tsdown": "0.22.14",
-    "typescript": "7.0.2",
-    "vitest": "4.1.11"
+    "oxfmt": "catalog:",
+    "oxlint": "catalog:",
+    "tsdown": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
   },
   "engines": {
     "node": ">=24"
-  },
-  "scripts": {
-    "build": "tsdown",
-    "check-types": "tsc --noEmit",
-    "lint": "oxlint --config ../../.oxlintrc.json --type-aware .",
-    "format:check": "oxfmt --check .",
-    "test": "vitest run"
   }
-}
+}

package/src/index.ts

@@ -83,10 +83,19 @@ export {
 export type { OrdinaryAuthority } from "./kernel/ordinary-authority.v1.js";
 export { EXECUTOR_PROTOCOL_VERSION, PROVIDER_PROTOCOL_VERSION } from "./run/contract-versions.js";
 export type { ExecutorProtocolVersion, ProviderProtocolVersion } from "./run/contract-versions.js";
+export {
+  EVENT_PROFILE,
+  EVENT_LINE_PREFIX,
+  LIFECYCLE_KINDS,
+  EventSchema,
+  EventStreamSealSchema,
+} from "./run/event.v1.js";
+export type { Event, EventStreamSeal } from "./run/event.v1.js";
 
 import type { ProfileEntry } from "./primitives.js";
 import { dispatchConsumeV1 } from "./kernel/dispatch-consume.v1.js";
 import { operationV1 } from "./run/operation.v1.js";
+import { eventV1 } from "./run/event.v1.js";
 import { signedLawV1 } from "./infra/signed-law.v1.js";
 import { resourceDescriptorV1 } from "./infra/resource-descriptor.v1.js";
 import { adoptionFactV1 } from "./infra/adoption-fact.v1.js";
@@ -101,6 +110,7 @@ import { ordinaryAuthorityV1 } from "./kernel/ordinary-authority.v1.js";
 export const PROFILES: Readonly<Record<string, ProfileEntry>> = {
   [dispatchConsumeV1.literal]: dispatchConsumeV1,
   [operationV1.literal]: operationV1,
+  [eventV1.literal]: eventV1,
   [signedLawV1.literal]: signedLawV1,
   [resourceDescriptorV1.literal]: resourceDescriptorV1,
   [adoptionFactV1.literal]: adoptionFactV1,

package/src/run/event.v1.ts

@@ -0,0 +1,95 @@
+// dsg.run.event/1
+// Owner: dsg-run (the plane ingests, stores, streams, and seals) with the
+// emitting library as the other side of the seam.
+//
+// One event a running workload emitted about itself. The workload writes
+// these as single JSON lines on standard output, prefixed `DSGEV `, and
+// knows nothing about how they travel: the executor that ran the job is
+// the only thing that knows where its output went.
+//
+// Two things are closed and two are open by design. The ENVELOPE is
+// closed: an unknown envelope field is a different protocol. The PAYLOAD
+// is open here and closed by the catalog the emitter declared and the
+// request pinned by digest - the plane validates the payload against that
+// catalog, so this profile does not need to know a modeler's vocabulary
+// to refuse an invalid instance of it.
+//
+// Ordering is the sequence number, never arrival and never the clock: a
+// transport may duplicate or reorder, and the stored stream is the same
+// either way. A gap is recorded as a fact, not smoothed over.
+import { type Static, Type } from "@sinclair/typebox";
+import {
+  closed,
+  Hex64,
+  NonEmptyString,
+  SafeInt,
+  UtcSecond,
+  type ProfileEntry,
+} from "../primitives.js";
+
+export const EVENT_PROFILE = "dsg.run.event/1" as const;
+
+/** The wire prefix that lets a collector pick these lines out of ordinary
+ *  job logs. One space, then the JSON object, then a newline. */
+export const EVENT_LINE_PREFIX = "DSGEV " as const;
+
+/** The lifecycle spine every catalog carries without declaring it: the
+ *  kinds the console draws for any workload, whatever it models. A
+ *  workload emitting only started and finished is fully described. */
+export const LIFECYCLE_KINDS = [
+  "started",
+  "phase.entered",
+  "phase.exited",
+  "progress",
+  "checkpoint",
+  "artifact",
+  "warning",
+  "failure",
+  "finished",
+] as const;
+
+const EventSchemaValue = closed({
+  profile: Type.Literal(EVENT_PROFILE),
+  /** The operation this event belongs to; injected into the job's
+   *  environment by the plane, never chosen by the workload. */
+  operation: NonEmptyString,
+  /** Monotonic within one operation, from 1. Ordering lives here. */
+  sequence: Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER }),
+  at: UtcSecond,
+  /** A lifecycle kind or one the pinned catalog declares. */
+  kind: NonEmptyString,
+  /** Digest of the catalog the payload validates against. */
+  catalogSha256: Hex64,
+  /** Validated against the catalog by digest, not by this schema: a
+   *  modeler's vocabulary is theirs, and the plane refuses a payload the
+   *  catalog does not admit. Artifacts are references, never contents. */
+  payload: Type.Record(Type.String(), Type.Unknown()),
+});
+export const EventSchema: typeof EventSchemaValue = EventSchemaValue;
+export type Event = Static<typeof EventSchema>;
+
+/** What the plane seals into the outcome: the ordered stream's own digest,
+ *  the catalog it validated against, and the count - enough for an
+ *  offline reader holding the exported stream to recompute the verdict
+ *  without the plane. `truncatedAtSequence` is the event ceiling's mark:
+ *  a runaway logger is bounded, and the bound is visible rather than a
+ *  silently short stream. */
+const EventStreamSealSchemaValue = closed({
+  profile: Type.Literal(EVENT_PROFILE),
+  operation: NonEmptyString,
+  catalogSha256: Hex64,
+  /** sha256 over the newline-joined canonical event lines, in sequence. */
+  streamSha256: Hex64,
+  eventCount: SafeInt,
+  /** Sequence numbers missing from an otherwise ordered stream. */
+  gaps: Type.Array(Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER })),
+  truncatedAtSequence: Type.Union([Type.Integer({ minimum: 1 }), Type.Null()]),
+});
+export const EventStreamSealSchema: typeof EventStreamSealSchemaValue = EventStreamSealSchemaValue;
+export type EventStreamSeal = Static<typeof EventStreamSealSchema>;
+
+export const eventV1: ProfileEntry = {
+  literal: EVENT_PROFILE,
+  rootShape: "event",
+  shapes: { event: EventSchema, streamSeal: EventStreamSealSchema },
+};