@entrorove/skill 0.1.68 → 0.1.70

package/release-state.json

@@ -1,8 +1,18 @@
 {
   "schemaVersion": "entrorove.release-state/1.0",
-  "version": "0.1.68",
-  "digest": "2cdbc457cabd3bb84af9f084811ab6d034a7fc7358e692644855847fade00b54",
+  "version": "0.1.70",
+  "digest": "888f8c2a60595e87e39b9423f811a0e231ec5309094f3de0d88cb3f729371ba8",
   "files": {
+    "scope-context-client.mjs": "dbfec7db0e118f3025a0e45475f3328a171e4cd1dd86e6c8d326d779ce61b459",
+    "scope-context-observer.mjs": "9d041db8de6e45113ee04b189c9d52097ec902a104721829dd382cf6daf5d1ce",
+    "scope-context-observation.mjs": "d92f2fca3c923caa6f0c5c9cc60b4f12bdae212071da64da6692e3e99b251969",
+    "scope-context-remote.mjs": "b52cdee03e845edc15eae6bb3ccfaea9c4482c03f2fae7001439e4abcb2acd33",
+    "scope-context-state.mjs": "7bc434620bfc505ee290f1977e64ef22e50f72665d75e7dfd6805deab4e81826",
+    "scope-context-wire.mjs": "a15d0b966615b8293e53e4229edc8fb444fb144cc336dbd6354ac995f33e8cc8",
+    "scope-context-journal.mjs": "753821f546e36185b2e891e8f38758a2d15a591f700f0650d478892c8d958a45",
+    "scope-context-release.mjs": "3b6f5d3bf7abe25e1a1edd0521053f4c1b1e3487b7f37d5f7c6080d32bc0c044",
+    "cloud-locale.mjs": "0627ac75b98b439563b61ab217aacb55a099c1d0c8ed3b118776d2007c52dd70",
+    "cloud-locale.d.mts": "aff4bced9bbac140f73fd0de24681287349389be5750d89d96abe0f8a2167664",
     "cloud-task-images.mjs": "a260a94b6b1b47df97a8cc8657dfdce1fd37ec752f1cc2bad2542eaa28622bdb",
     "model-images.mjs": "ab85ac0c44d857c1f460de3e9c06eb1d37b57688b4a6061405c0a44ae4d40bd7",
     "model-images.d.mts": "f1506cfb8ad287869f92f4d9074c7c759c6c28b182aeb325dd5f22a38926f24c",
@@ -19,7 +29,7 @@
     "local-mutation-finder-observation.mjs": "438dd33e62e03e02b55897a28b3ba59d12734b6e5142525b299f77c21537280b",
     "local-finder-store.mjs": "227191c52174386ace6391e072b78a6e4cc658a6d9dd37036ffd7e97bbf4336a",
     "local-finder-plist.mjs": "c83ddab2375a54d612d395a5518db8ae05212437d82bf3f8b76930a8859c8481",
-    "connected-cli.mjs": "79c3359303957a9ebb8987e3dfb181f189d380fa02ef4462683b786aedfc7802",
+    "connected-cli.mjs": "29ab700f6a308adad5f3984bf9dd2734755a29fbd0e963e630222565846b5942",
     "local-approved-process.mjs": "442856df788e63f38757439ba0657d1c689aaf797631a955fae3dd639e844e6d",
     "local-approved-supervisor.mjs": "87142a4c13d27c8265cc1fd7fc9088988da9bbb02134164e1a7c5417da926ac7",
     "local-mutation-consumption.mjs": "1b033655f817ec576410b7f91f1640b8651f3cff0668154fb8e6e14e7b31d8f4",
@@ -30,16 +40,16 @@
     "workflow-observation-runner.mjs": "3eb8280ec7abffcb30398e3f4e5f7d0ec3df4385fa720f188ed83757b87cd977",
     "workflow-observation-state.mjs": "a525046df9b3de75b10d2bf35c2b6d7719f12a647e4aee1f1e85dbdbfb167321",
     "workflow-observation-wire.mjs": "df0d5e4f8fde0be8bf06c6c4590cd158b4da05ebe6ef3169d2366db706f3327f",
-    "local-preserved-mutation-protection.mjs": "5186a2f682e66c6828d1504ee074554cbae0fda58a5f446fbadfb868e1682dae",
+    "local-preserved-mutation-protection.mjs": "289bf58933818ff13b217d0d75afd0b81cc59bc09b4ea88f50a2ab900e9cf1c2",
     "local-preserved-mutation-signer.mjs": "2b0771cbdd18ba00267aa441b7892cd04feab9f8543ae5e2703430b1e580747f",
     "local-preserved-mutation-state.mjs": "337a172b2d0a03b0d5a89b8483afdd9a043a4999fe38f87679633c98c450126b",
     "local-preserved-mutation-wire.mjs": "6768ce5713d70f7c0bd05f2286bc4b32cd9b8bb1d3c8b9cc7a451cb9b176824d",
-    "local-delegated-modify-analysis.mjs": "f87148ddb023b79e241ca97db582991da8d0e1a51b26b1d9bc2799a76efd7297",
-    "mutation-client.mjs": "da09b2aa301da8cbc7b830a3dfe1fbf2617798ae26e4ccddea802443a8253527",
+    "local-delegated-modify-analysis.mjs": "f8769bd9890a041be48db5cb6724873d59300c102a5ddaf0a937e5e4f3f1983a",
+    "mutation-client.mjs": "8f1066db3246f7639dd0b557e7b2c6175181e52f9087146e218d0912f791808e",
     "cloud-mutation-authority.mjs": "c7226e882a4f3be4d2f55728f515d5a815c0aa1f21aa5e4689314e6e6a8c66a2",
     "ide-code-mode.mjs": "f8ba4de33632ab4c6df52dab52f392414b4632c7e94b218b8065677970c075c7",
-    "ide-command.mjs": "dbdb4cbf8e870c93a746ca176cbbdeffc0458de1293583d3eb9af4c256541370",
-    "ide-hook.mjs": "f2a00be9293ce13ba8b8547142744a7edc43d4e2e82727e9f7923ba79a244d75",
+    "ide-command.mjs": "b3c008816f53e3cd3aa97bc792baf0b7fc068e839b150bd2cfc6cb06d17a6825",
+    "ide-hook.mjs": "688e39193575e20f833a4f9e8f0975351d03869452acd46c8860e86ce05bccdc",
     "ide-install.mjs": "1c80e191ddc2ac8789f0c71edc7bc8c3c8cea6bfab537cdf6baffa4a6ce3419c",
     "ide-session.mjs": "5277a6ea3445bfa9b2e28847372d963da77787d472d0414c0e253d4fe29f74ec",
     "break-glass.mjs": "6ec9f97c5d68bb33121b2374c06b9d4c8eb3419b52d00849fec7124bc63e4582",
@@ -53,11 +63,11 @@
     "local-scope-import-expressions.mjs": "20f1e065582c68d2334e0dfaa130a559ff19886a57f9038dc569f65993bb06c8",
     "local-discipline-contracts.mjs": "25d2bdbcb2698a1927ce5ef43e33052ed90bfe7dbc7c6a708f2bfd4a258609fd",
     "local-discipline-contracts.d.mts": "defc684c78dc88afa1c54340ab4a01ae36db7aa11257cbe1f5cd323f608c78c4",
-    "local-discipline-gate.mjs": "0b85dbdc4c15c5183d821ef4b50c48c59c652801eeb8072e7241e442a516f252",
+    "local-discipline-gate.mjs": "f80c560a4eb7c153e1637d072f0a6b4e13d4caba745317a01ff7f9b5e9143f69",
     "local-discipline-native.mjs": "8b99b5ce951cab3c1426428ad807650c61c0ffb2c346d747b73b99057b382049",
     "local-discipline-operations.mjs": "9fcb7b8889b7718d42e1d37936485d8198d5017d405e0cdbbabdbbd12fcc9d48",
     "local-discipline-repository.mjs": "748f691ad65366a68f2a7f8106a95b223a3027d3ff86481a111b27385e9aef57",
-    "local-discipline-snapshot.mjs": "8fd35b2cfbece8f64579f144f589a66dec9b6022d50fe931c4c1f886cb83134d",
+    "local-discipline-snapshot.mjs": "ff1fc42a89d1eeb4977062c8698f700fc4f6ad727e1ea2ed0f255d00d63f497b",
     "local-runner-discipline.mjs": "99935b1be0d660d6cd45f5facd911bf1e1203ec74953acef5f12a7ebafacffb2",
     "local-integrity.d.mts": "21357f306234bd841c0d3d90bf2d09f7663f63746f897b9f38190428ae8198b3",
     "local-equivalence-runner.mjs": "df2f406c693c4da7bb30542ec7b4d46a9336f56e9fdd263196c0f3a73d2f6e91",
@@ -66,7 +76,7 @@
     "runtime/validator-runtime-v7.0.44.d.mts": "7797edbfe2f7de24da370204dce4dfd22822a1bd80df93514fff900b98afe36f",
     "snapshot-retention.mjs": "ca46aeb36b1a5a24fe7e967031a71b9a3d33f40cb715d344402cbe0dc9c425cb",
     "snapshot-cleanup-journal.mjs": "76a9684cc95b4eb076e1298d78a9dff37948b00d9607b8f546c599072d3ed331",
-    "IDE-EXECUTION.md": "e7e9c19f19f095f5483784bb8de1e610eb008e8e62504b4229e38a9728b89573",
+    "IDE-EXECUTION.md": "26d4f32de1694c7f29ceefc5a5e5f4bba717efc5f91c37a91c399faa1574a191",
     "REUSE-DISCIPLINE.md": "a2452911c2b50c4762b4a1374f1958059eb03efd59f63e1b50e1650c52b0dc98",
     "install-identity.mjs": "41b8c8d8b3e265d2057a07bf7dc98066c34d6b05c65bf7159ca9609c01ee4646",
     "package-archive.mjs": "e06db8d709db8710bead254ee950b78928088be01c58dcea383beaa5eb574e59",
@@ -84,7 +94,7 @@
     "design-declaration.mjs": "f6c7f56e4697a05a0a832fcdb5a3b07ffe60aa602ba0681cfd09948bdcafc8ad",
     "design-frameworks.mjs": "5d09a8e56068302f951a6236f36cb50e655fb6d6ffbeb2e4eb4b19f025c8a411",
     "design-gate.mjs": "567eb666937704123ef72f26ad1145d9d32f7dfde59553381286de083e4146cb",
-    "design-lint.mjs": "9e27d0a6041fbb7f7f2b88b0c46d69dd790582426b534ad436b151d81512a66e",
+    "design-lint.mjs": "76adb33d0faf0cfcdef7583a2f4835eccc7e49811480e2fd2b09779a81c0cbab",
     "design-local-contracts.mjs": "f331bd1d21f30994596bd9c46008e551f3ed2b6d5eea19d4546c7da0663b768a",
     "design-operations.mjs": "e21e9fcf9fd16115c72558c7cd7a57f7213a30934bde0f1b649aec647d1205f7",
     "design-policy.d.mts": "48fed97fca0f97fef786f182f666d7e6e33efb814cda1991239e1c38984cf80e",
@@ -136,19 +146,19 @@
     "local-autocoord17-waits.mjs": "2b0a713987822548a94e1ed3a9a891532db45383797dfc5d5bc8d1e35593cf25",
     "local-validator-isolation17.mjs": "48e94604e28b8fddd567dfb35ff60b73fd094a5803bd49f076388b7f310f92aa",
     "local-calctool-composition17.mjs": "ac89fcb41ab0d0d9b47c1b5696945281b0894eb064820775e36a011c76314e6a",
-    "cli.mjs": "14c0c49f06bf209e5034a69b3e81a8458154e92870ce6aeddd1069d568c00837",
+    "cli.mjs": "c1fc6c58c10f00189de93ddaa8cbe4f889c62cc16c8c45d55c7b4a1498eead8e",
     "ide-selection.mjs": "e11e2b363c06444f1dcb4cdab1eaa0eb748a379b84354e0e71fd9c2dc79a4815",
     "ide-exit.mjs": "39d60a15b1517d402c208d22a17033976e43733be8a10dc6da386837c59b37b2",
     "install-cleanup.mjs": "8a8e1a7dfe37427f86cd4d6e317890d0829894a9949d4216674a716b36edbc54",
     "review-client.mjs": "3491eef68ed533174b31db3c53febb6519b8f088f71a9964644714a9a4c03c77",
     "version.mjs": "85284d4cd5e3314b449e6ae124243f96397bcc274817b5983a79cfdd903d46fd",
-    "SKILL.md": "b39010bc22b517ad24f706d843823c2dfa93eb08fc5de055d30b7cc5fb079cea",
-    "CAPABILITY-MAP.md": "e64d1411526413d64b89142b3105e8e5bf25b3bc5b1a6ffa217b9ec93f1b58ae",
+    "SKILL.md": "db0ff568f83086226044726c37a0f8de517042aece8fb1676f1830c9e32f8d79",
+    "CAPABILITY-MAP.md": "517809bb20750e5de89b2dab5705c902a27fa68cf4f3f392a5d8cf2f19818888",
     "AGREEMENT.md": "f93a68e92c457200dd024610e65f74e478b8f60860f951da818b70561f1b9bf8",
     "DELIVERY-BOUNDARIES.md": "cb23ce71b2197085c8441ba7c5b6c05fb21f2a954bf66b4d60cfef8b15895b8b",
-    "package.json": "04be10568ee6bf09d6910ed1e434df2f5247ce2aefe9a5b84f5bbe10def6e96c",
+    "package.json": "71c16c55000a8d0d7cca2b935ceba15799b3e8d15be2081a7e077ce803d7b319",
     "manifest.json": "ab06e307795bc9da5add926752b6c4dbdaf18625090261a035aa356a679c504f",
-    "release.mjs": "4466d54bee56b80561e46d79cf4f46ee07c27c45e7a8b2727583d1d0946ea8d8",
+    "release.mjs": "2250561b382b61aa1f760705c872d7248266a69a96cc30e8957f42e9e48649e5",
     "local-cli.mjs": "058ac9a4653bc12e0d031b72034ebfe6a72b91b9b23353b9fee04881c7d2e098",
     "local-state-lock.mjs": "1dbf64264642a0851faf043e07ee9f66d2ad0508e9f799b0626246e42fae893e",
     "local-execution.mjs": "721ed7d29bbe4ce6d088909cd84ffc440978c3c9eb0946c49a4281ee685fe3aa",
@@ -186,8 +196,13 @@
     "local-stage-boundary.mjs": "84c3bb5beab29306274c5ca8a78f19a83ed664ae1b93a8372bb493158b304fe3",
     "local-scope-candidate.mjs": "8f0bd9606e70d4a0ebacdd3cd600ec3afed85e2bb3e1760aa1144cf55d4e028a",
     "local-scope-context.mjs": "79753abfc6c76089d17f003a1be537dfaea10d6731c542f7fc53f2a9996ed164",
-    "local-scope-files.mjs": "db8b3baf8118c6cfd5525cbc008e054f9f33390b9ffce5ba72ee986b832f33e3",
-    "local-scope-repository.mjs": "55f130f7c54a378cb12ab9b81c07b14bf17f96a8d994314b0c8f35803bbdca1c",
+    "local-scope-files.mjs": "4793c2a1b458346bd9099e74bbfa0623024c423e754f65ae9e01ca388b49fd36",
+    "local-scope-repository.mjs": "1e0c1aef43929237226145d3ba776facaa7e3fc89eb8f88af0a2e5ab38bcdde9",
+    "local-scope-read-set.mjs": "a5137d2e7ecffe669143fb51f0f3fba7526a881b512269858ea1e3504d9a50b2",
+    "local-scope-uni-expressions.mjs": "200f3f5284125c2674d9e797a7550e7bb7700932db237e1df2d21c3a209ac924",
+    "local-scope-uni-directives.mjs": "9951af9f98de5299bad636a09cd7f4e129c96d20939650375f7f677f7919e0c6",
+    "local-scope-uni-conditional.mjs": "8a4d03939e1daf8d257b10b44b3808b84404433113c39eff32c8643d7f9f7b18",
+    "local-scope-uni-build.mjs": "9cc45336ad6807a73c6e65d2b23f0c6606e22a423f8105710e532b50f76896c5",
     "local-scope-create-require.mjs": "6b6a209bfcad8fe1398e99c5c8cc3af189c120b9c38e244a73dd1a99c3d91295",
     "local-scope-require-resolution.mjs": "b24596462c8776cbefa6f0a74749d665aa928d1643c68d44798eb93e2dd5ad42",
     "local-scope-git.mjs": "53bbbb6c4795db711b5bc164591a6ad79a561427da046d6bbe997dae6eb82829",
@@ -213,29 +228,29 @@
     "local-budget-git-system-attributes.mjs": "367a4e5a88490c4d4c3717bc893a271970fe70d7705f0c1c72d6f76a442d5d21",
     "runtime/git-native-linux-v1.mjs": "cf5cb91426a105e62c0f07a8a230dec592dba46f85a3f708b4c4e8cfcd1126c6",
     "runtime/git-native-darwin-v1.mjs": "f88aab72dc86f94eb1115784872957cb8ed0f74205ae70e1ecd1939e7790e310",
-    "local-scope-signature.mjs": "c4c1551c66bb276bf44c66d8e96f3cacc6edac48f6599ad964cd67f5e18110ac",
+    "local-scope-signature.mjs": "5aba6422031873946874307175b5a6f1fa609faa8160e1a1bb8db44c02c58d18",
     "local-scope-config-imports.mjs": "a399407227bbdd14468633bb6d25586df7c6a30a1ef0d1a80ab7c7b499d3fadf",
     "local-scope-config-extends.mjs": "3ab4150b846b247e9e0851221123f220c5574699af651830e751f026ab33659e",
     "local-scope-snapshot.mjs": "c0f851470b98863a1d187825ed61ee6072d1c057b178fdc85ae29af02a3b250f",
     "local-scope-state.mjs": "8b600a91fc0068d7a8c0bb752ddba7ed30ada93daafb118d6cba2368fd94cb27",
-    "local-scope-workspaces.mjs": "a44c34537e5ed2dcaf193a985e5bc05957989fbb160a650f9e37ba7d66eb2de8",
+    "local-scope-workspaces.mjs": "7484905ab0434e1a98f95038c65003ae48e395e9cfae07a4322f481537a08392",
     "local-task-routing.mjs": "6e2e506b2fb0e2e8d8c5147d7df32849b57a4e94a23634f01a355d45735858e4",
-    "remote-client.mjs": "d1fdc4a65fb6d7f79af0bf5a6551319386f1127a0632927fd11600a178d41769",
-    "cloud-task-client.mjs": "603a7de8e1d56a77588f08f7d1ae93685b553b40815e268d7bd17018eb767c37",
-    "scope-runner-client.mjs": "2afcbb8bc8a26d03f26787cb2ffd9994c4377757d16d54aa0c83752a29e833ea",
+    "remote-client.mjs": "d30fd61fab3171a9e41546706a57ae372786d20ea9e9c01cad39d9863c156b40",
+    "cloud-task-client.mjs": "f9085c5e6af6f179282670d2e872b85bfabac2657d3d232b1246dc23f5a6ccdd",
+    "scope-runner-client.mjs": "b85999bca05efd804325f97b6e5704623ac3fcf751c6f9760717a23f40661ad1",
     "scope-amendment-client.mjs": "64a38deddc2dbfae543fead2cff8c9c78771b576391cc903aa58db925a138ad7",
-    "scope-amendment-state.mjs": "ad82af0ff06e4969f733328a68d18e1ff3553b8ed93400c19963744083918ab9",
+    "scope-amendment-state.mjs": "922c4fd5a71101651d40fdb11f94f09c904cc244ff2574ae6b6ee004448aad06",
     "scope-amendment-wire.mjs": "3c4823e23bbdf330616bb675f07f9fcad7423266bd50b92e1134d226060e9b83",
     "scope-amendment-remote.mjs": "15a0b3126248f3101a52e3d7742f9a816dd3d8e58f21bac33e99e810e86cc4fd",
-    "scope-amendment-observer.mjs": "473f08d66ebd35d87db7e651c0521d1d4bdb6fa337afaedb241bcf9c6289d9d3",
+    "scope-amendment-observer.mjs": "de796f2aca2f3bc7f33ae3323b07d98096c0f16b1ffde70e3055610d70d18020",
     "scope-amendment-mutation.mjs": "fa24191df290efad29d41eca3d1a081981fefde02b7dc4a11c75c6118a69106e",
     "scope-amendment-reference.mjs": "0537e53a1bea4b695f4804c5051261778c88f05b1ae4aff86c709dcfe83aa148",
     "native-client.mjs": "6f5575909bae9daba643287f876ffa0f9ff1c53a367b32a40145d740456d6605",
     "native-notification.mjs": "8859a26c6f13d222711f763acf49ed8546b3306cf71f990643ac31a5ccaf1ba1",
     "local-peer-status.mjs": "a971bcc69d60bb32b875ca5bb4297d948631d5d2821b812c279613ea059a8b4f",
-    "cloud-watch-client.mjs": "5b93935c19a104d72afed07d4a56746c9617707e075884b93d22050c95cee0c1",
+    "cloud-watch-client.mjs": "2042392cd62f1596a35ef3f6cb376f8ed67790351576b007e32f134ce018aec1",
     "cloud-event-stream.mjs": "e0eec9fc3e0613094523929634f25030df5ca5c5b5fe2c1e1a4586ab10574808",
-    "ide-presentation.mjs": "3bac21bfc824fcdad63aafb0d7c3326cd6456923f4224106dd5c38682060f315",
+    "ide-presentation.mjs": "d826afe0dfcc38906ba76dcbbe021807731587c38026148624546c334057e7f3",
     "automatic-feedback-client.mjs": "532312d29e66fa211ea3fe879d9add1dd48841ee5ce82800b4b06252a160a255",
     "task-entry-client.mjs": "940fb068afe28a2a34fe96e285e149afdd9ba79649c0c65cde37ec4ed71ae39d",
     "task-identity.mjs": "e0e6cf1f48bfa5ee3c5cb86a3c21adfce6d66b4220f4a164ca099263c7a09fb4",
@@ -260,11 +275,11 @@
     "workflow-local-request.mjs": "4e24c543ce386292a87dc9cd41f90d23375f12079cacffc515c8cd01fd571780",
     "task-message-entry.mjs": "31d10056cb905237cd5649e8eb067009ff1612ec5dc1061e0373209fbc0b646a",
     "task-message-cli.mjs": "3ca65e96c28129b3bd5cac962d106e0859a1f17df1f6a66ee543c6efc22f918d",
-    "local-contracts.mjs": "f65c6f87ec021fa96c4e93d65d9fc2e5aca964915657e517697352d549af21a8",
+    "local-contracts.mjs": "0548faf3ecc4f3124c823ccd926f811580f4ba50a15bd334ff6d550e6eca013d",
     "local-contract-types.mjs": "85e71fa4dd67e351a4b67573c740bcdb1661cede53f097189f11837771e75e91",
     "local-archguard-ast.mjs": "7ff7df9dab0d98ed62983add751c80edea598bc94ef4f38ede0ebd4d41226c87",
     "local-archguard-checkpoint.mjs": "37896902520cc995720c96288e4a5ed3585952b55c9c35be281f91fa754c71ec",
-    "local-archguard-components.mjs": "a8fb3d0fd787f9160905013fd333cc0b9e8cf624cce797461f36f4ab31d170ad",
+    "local-archguard-components.mjs": "07d0554355eebba7989b373d019682d194a0d37a031abbcc6b4b24b19f0a75e8",
     "local-archguard-contract.mjs": "cfc397a1ce171ab84f8bf1db152e6d8d280b7ca041da56a7a4cd62b02c2e2e89",
     "local-archguard-contracts.mjs": "29e9b86f14dc086aa0b791c874d6efc50d849f806b3f2b8725481114f01ba8ba",
     "local-archguard-evaluate.mjs": "c34f0956e7a4f1afaa1554c03e238a350dc8a981dc595cf4ed065fb14f733f93",
@@ -288,7 +303,7 @@
     "local-calctool-runtime.mjs": "9070b6900d1782bf77357fea1cc522bf796898d56929f96d7cb935b3036ac82f",
     "local-calctool-storage.mjs": "4c3f352847aeb368dea1247759a1055beeab25534adf25b6e7323196d76fd684",
     "local-mutation-files.mjs": "087b00e8424a135e783eb432271012a71e55eeb4a5e30119490d1bc0b2160320",
-    "local-mutation-snapshot.mjs": "f9077539680fb8d3ff33a962657756a8fe6afa8409b6191334509534216ebfe8",
+    "local-mutation-snapshot.mjs": "69c0ff0b67b2e6913b1d9f8247bf48c31d62f4f5ae1668c573a0ade06c01d105",
     "local-mutation-audit.mjs": "5a30ee3446f632e032ffcfe46bcd97d6dfc0f099a76ea5185c3f9a9118c4f6cb",
     "local-mutation-wire.mjs": "6d00400e531c693c3e8bfd0c2a24fcc486127f84aafc56ee450dcec7f534eb05",
     "local-mutation-binding.mjs": "4440d792453a07a375b635fa5a91db607e58162824baced5c79a9a513f4ec918",

package/release.mjs

@@ -1,6 +1,7 @@
 import { FINAL_GATE16_PACKAGE_FILES, withFinalGate16ReleaseLabels } from './local-final-gate16-release.mjs'
 import { REUSE_DISCIPLINE_SOURCE_FILES, reuseDisciplineReleaseLabels } from './reuse-discipline-release.mjs'
 import { DESIGN_GATE_SOURCE_FILES, designGateReleaseLabels } from './design-release.mjs'
+import { SCOPE_CONTEXT_SOURCE_FILES, scopeContextReleaseNote } from './scope-context-release.mjs'
 import { createHash } from 'node:crypto'
 import { readFile, writeFile, rename, rm } from 'node:fs/promises'
 import path from 'node:path'
@@ -48,7 +49,7 @@ const memberContinuationSourceFiles = Object.freeze([
   'workflow-observation-wire.mjs',
 ])
 const sourceFiles = [
-  'cloud-task-images.mjs', 'model-images.mjs', 'model-images.d.mts', 'cli-input.mjs',
+  ...SCOPE_CONTEXT_SOURCE_FILES, 'cloud-locale.mjs', 'cloud-locale.d.mts', 'cloud-task-images.mjs', 'model-images.mjs', 'model-images.d.mts', 'cli-input.mjs',
   'scope-amendment-retirement.mjs', 'scope-amendment-consumption.mjs', 'mutation-connection-state.mjs', 'mutation-challenge-refresh.mjs',
   'local-scope-font.mjs', 'local-scope-zip.mjs', 'member-producer-repair-authority.mjs',
   'local-mutation-completion-evidence.mjs', 'local-mutation-environment-observation.mjs', 'local-mutation-finder-observation.mjs', 'local-finder-store.mjs', 'local-finder-plist.mjs',
@@ -90,7 +91,7 @@ const sourceFiles = [
   'local-scope-candidate.mjs',
   'local-scope-context.mjs',
   'local-scope-files.mjs',
-  'local-scope-repository.mjs',
+  'local-scope-repository.mjs', 'local-scope-read-set.mjs', 'local-scope-uni-expressions.mjs', 'local-scope-uni-directives.mjs', 'local-scope-uni-conditional.mjs', 'local-scope-uni-build.mjs',
   'local-scope-create-require.mjs',
   'local-scope-require-resolution.mjs',
   'local-scope-git.mjs',
@@ -309,6 +310,7 @@ function releaseNote(changed) {
   if (suppliedZh && suppliedEn) return {
     zh: suppliedZh.replaceAll(/\s+/g, ' '), en: suppliedEn.replaceAll(/\s+/g, ' '),
   }
+  if (changed.some(file => SCOPE_CONTEXT_SOURCE_FILES.includes(file))) return scopeContextReleaseNote
   if (changed.some(file => file.startsWith('scope-amendment-'))) return {
     zh: '新增同一任务的精确范围补正：原账号审核文件哈希与写入/只读角色，原S签名真实事实并重评原合同；计划、写入和结算绑定不可变范围修订，改后刷新保留原M消费证据与失败历史。',
     en: 'Add same-task exact scope amendment with original owner review of file hashes and write/read-only roles, original S observations and native contract reassessment; bind plans, writes and settlement to immutable scope revisions and retain actual M consumption and failure history during post-write refresh.',
@@ -450,7 +452,6 @@ async function writeAll(changes) {
     throw error
   }
 }
-
 const metadata = JSON.parse(await read('package.json'))
 const manifest = JSON.parse(await read('manifest.json'))
 const state = JSON.parse(await read(stateFile))

package/releases.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.1.70",
+    "date": "2026-10-20",
+    "zh": "云端沙箱固定中英文输出语言，界面、通知和 Blueprint 文档正文按对应语种显示，原始证据单列来源并保留旧流程精确版本。修复 uni-app 默认条件编译分支解析与长扫描后的原任务签名挑战衔接，核对真实读集并保留原审批、完整路径、快照及失败历史。",
+    "en": "Freeze cloud sandbox output language across presentation, notifications and Blueprint document prose; preserve original source evidence and exact historical runtimes. Fix default uni-app conditional branch inspection and renew the original signing challenge after long scans, rechecking actual reads while retaining approvals, complete paths, snapshots and failure history."
+  },
+  {
+    "version": "0.1.69",
+    "date": "2026-10-20",
+    "zh": "新增首次范围门禁前的构建上下文纠正：原账号审核真实配置和构建证据，原 S 签名完整路径快照，通过服务挑战追加上下文权威记录；保留原 flow、绑定、旧上下文和失败历史，不授予写入或完成权限。",
+    "en": "Add build-context recovery before the first scope gate: original owner review of actual configuration and build evidence, original S proof of all target paths, and challenge-bound append-only context authority. Preserve the original flow, binding, contexts and failures without granting writes or completion."
+  },
   {
     "version": "0.1.68",
     "date": "2026-10-20",

package/remote-client.mjs

@@ -40,6 +40,7 @@ export function buildInvocation(operation, input) {
     'handoff-prepare', 'handoff-release', 'handoff-claim', 'handoff-status', 'handoff-resume', 'handoff-execution-authority', 'mutation-snapshot-challenge', 'mutation-pass-issue', 'mutation-pass-settle',
     'member-observation-admit', 'member-observation-report', 'member-observation-status',
     'scope-runner-prepare', 'scope-runner-register', 'scope-runner-challenge', 'scope-runner-attest',
+    'scope-runner-context-review', 'scope-runner-context-status', 'scope-runner-context-challenge', 'scope-runner-context-apply',
     'start', 'continue'].includes(operation)) throw new Error('Invalid entrorove operation');
   if (!input || typeof input !== 'object' || Array.isArray(input)) throw new Error('Input must be a JSON object');
   const id = requestId(operation, input);

package/scope-amendment-observer.mjs

@@ -27,7 +27,9 @@ export async function observeScopeAmendment(location, state) {
   if (!state.snapshotId) { state.snapshotId = `scope-amend-${randomUUID()}`; await saveScopeAmendmentState(location, state); }
   const input = { repositoryRoot: location.root, home: location.home, flowId: challenge.flowId, stepId: challenge.stepId,
     snapshotId: state.snapshotId, paths: challenge.files.map(file => file.path).sort(),
-    contractDigest: challenge.proposalDigest, importContexts: location.binding.importContexts,
+    contractDigest: challenge.proposalDigest, importContexts: location.contextAuthority?.record.importContexts ?? location.binding.importContexts,
+    ...(location.contextAuthority ? { contextRevisionDigest: location.contextAuthority.revisionDigest,
+      contextEvidence: location.contextAuthority.record.evidence } : {}),
     scopeCreatePaths: challenge.files.filter(file => file.access === 'create').map(file => file.path) };
   if (!state.snapshot) {
     if (!state.snapshotStarted) {

package/scope-amendment-state.mjs

@@ -7,6 +7,7 @@ import { retainedScope } from './local-scope-state.mjs';
 import { mutationHome14, mutationFile14, privateMutationDirectory14,
   readMutationJson14, atomicMutationJson14 } from './local-mutation-files.mjs';
 import { trustedOrigin } from './remote-transport.mjs';
+import { boundScopeContexts } from './scope-context-state.mjs';
 
 const fail = message => scopeFail('ENTROROVE_SCOPE_AMENDMENT_STATE', message);
 const maximumStateBytes = 1_000_000;
@@ -78,8 +79,9 @@ export async function scopeAmendmentLocation(repositoryRoot, input, dependencies
     originalFactsDigest: original.originalFactsDigest, originalSnapshotDigest: original.originalSnapshot.digest };
   const directory = path.join(base, 'amendments', sha256(canonical(input)));
   await privateMutationDirectory14(directory, { privateFrom: stateRoot });
+  const contextAuthority = await boundScopeContexts(base, binding, dependencies);
   return { root, home, stateRoot, directory, file: path.join(directory, 'journal.json'), identity,
-    binding, key, signerConfigPath, original };
+    binding, key, signerConfigPath, original, contextAuthority };
 }
 export async function readScopeAmendmentState(location) {
   let value;

package/scope-context-client.mjs

@@ -0,0 +1,118 @@
+import path from 'node:path';
+import { sign } from 'node:crypto';
+import { canonical } from './local-integrity.mjs';
+import { withStateLock } from './local-state-lock.mjs';
+import { bootstrapCloudMutationAuthority } from './cloud-mutation-authority.mjs';
+import { contextInput, contextFail, retainedContexts, originalContextDigest, contextChallenge } from './scope-context-wire.mjs';
+import { scopeContextLocation, effectiveScopeContexts, retainContextAuthority,
+  saveContextJournal } from './scope-context-state.mjs';
+import { contextRemote } from './scope-context-remote.mjs';
+import { inspectContextEvidence, observeScopeContext, prepareScopeContext } from './scope-context-observer.mjs';
+import { contextJournal, renewContextChallenge } from './scope-context-journal.mjs';
+
+const schemaVersion = 'entrorove.scope-context-connection/1.0';
+function proposalFor(status, input, location) {
+  const proposal = status.proposal;
+  if (!proposal || proposal.proposalId !== input.proposalId || proposal.proposalDigest !== input.proposalDigest
+    || ['flowId', 'runnerId', 'repositoryId', 'keyId'].some(field => proposal[field] !== location.binding[field])
+    || proposal.localBindingDigest !== location.localBindingDigest
+    || canonical(proposal.targetPaths) !== canonical(location.binding.targetPaths)
+    || !['pending', 'approved', 'declined'].includes(proposal.approval?.status)) contextFail('Current account has no matching original context proposal');
+  retainedContexts(location.binding.importContexts, proposal.importContexts); return proposal;
+}
+function waiting(value, flowId) {
+  const status = value.proposal?.approval?.status;
+  return { ...value, schemaVersion, status: status === 'declined' ? 'blocked' : 'needs-input', flowId,
+    grantsExecutionAuthority: false, claimsCompletion: false,
+    nextStep: value.nextStep ?? { operation: 'interaction-answer', requiresOriginalOwnerApproval: true,
+      interactionId: value.proposal?.approval?.interactionId, interactionDigest: value.proposal?.approval?.interactionDigest } };
+}
+async function liveStatus(location, state, dependencies) {
+  if (!state.checked) await contextRemote('checked', 'scope-runner-context-status', {
+    flowId: location.binding.flowId, attemptId: state.attemptId }, state, location, dependencies);
+  const effective = await effectiveScopeContexts(location);
+  if (!Number.isSafeInteger(state.checked.expectedRevision) || state.checked.expectedRevision !== (effective?.record.revision ?? 0)) contextFail('Live context revision differs from its retained original history');
+  if ((state.checked.effective?.revisionDigest ?? null) !== (effective?.revisionDigest ?? null)) contextFail('Live context head differs from retained signed history; recover its original apply request');
+  return state.checked;
+}
+async function review(location, state, dependencies) {
+  if (state.reviewed) return waiting(state.reviewed, location.binding.flowId);
+  const status = await liveStatus(location, state, dependencies), head = await effectiveScopeContexts(location), input = state.input;
+  retainedContexts(head?.record.importContexts ?? location.binding.importContexts, input.importContexts);
+  if (!state.proposal) {
+    const evidence = await inspectContextEvidence(location, input.importContexts, input.evidencePaths);
+    state.proposal = { schemaVersion: 'entrorove.scope-context-proposal/1.0', flowId: location.binding.flowId,
+      runnerId: location.binding.runnerId, repositoryId: location.binding.repositoryId, keyId: location.binding.keyId,
+      localBindingDigest: location.localBindingDigest, expectedRevision: status.expectedRevision,
+      previousDigest: head?.revisionDigest ?? originalContextDigest(location), originalImportContexts: location.binding.importContexts,
+      importContexts: input.importContexts, evidence, reason: input.reason, attemptId: state.attemptId };
+    state.signature = sign(null, Buffer.from(canonical(state.proposal)), location.key).toString('base64url');
+    await saveContextJournal(location, state);
+  }
+  const output = await contextRemote('reviewed', 'scope-runner-context-review', { flowId: location.binding.flowId,
+    proposal: state.proposal, signature: state.signature }, state, location, dependencies);
+  state.completed = true; await saveContextJournal(location, state); return waiting(output, location.binding.flowId);
+}
+async function applied(location, state) {
+  const effective = state.applied.contextAuthority;
+  const challenge = contextChallenge((state.signingChallenge ?? state.challenged).challenge, location, state.proposal, { allowExpired: true });
+  if (state.applied.grantsExecutionAuthority !== false || !effective?.record
+    || canonical(effective.record.attestation) !== canonical(state.attestation)
+    || ['proposalId', 'proposalDigest', 'ownerId', 'taskDigest', 'chainDigest'].some(field => effective.record[field] !== challenge[field])
+    || canonical(effective.record.importContexts) !== canonical(challenge.importContexts)
+    || canonical(effective.record.evidence) !== canonical(challenge.evidence)) contextFail('Applied context authority differs from this exact actual candidate');
+  const retained = await retainContextAuthority(location, effective);
+  state.completed = true; await saveContextJournal(location, state);
+  return { schemaVersion, status: 'succeeded', flowId: location.binding.flowId, contextRevisionDigest: retained.revisionDigest,
+    revision: retained.record.revision, grantsExecutionAuthority: false, claimsCompletion: false, nextOperation: 'scope-connect',
+    nextInput: { flowId: location.binding.flowId, paths: [...location.binding.targetPaths], importContexts: retained.record.importContexts } };
+}
+async function apply(location, state, dependencies) {
+  if (state.applied) return applied(location, state);
+  const status = await liveStatus(location, state, dependencies), proposal = proposalFor(status, state.input, location);
+  if (proposal.approval.status !== 'approved') {
+    state.completed = true; await saveContextJournal(location, state); return waiting(status, location.binding.flowId);
+  }
+  state.proposal = proposal; await saveContextJournal(location, state);
+  if (!state.challenged) await contextRemote('challenged', 'scope-runner-context-challenge', { flowId: location.binding.flowId,
+    proposalId: proposal.proposalId, proposalDigest: proposal.proposalDigest, attemptId: state.attemptId }, state, location, dependencies);
+  if (!state.attestation) {
+    const prepared = await prepareScopeContext(location, state, proposal);
+    state.attestation = await observeScopeContext(location, state, proposal, prepared,
+      () => renewContextChallenge(location, state, proposal, dependencies));
+    await saveContextJournal(location, state);
+  }
+  await contextRemote('applied', 'scope-runner-context-apply', { flowId: location.binding.flowId,
+    proposalId: proposal.proposalId, proposalDigest: proposal.proposalDigest, attestation: state.attestation }, state, location, dependencies);
+  return applied(location, state);
+}
+async function run(location, input, dependencies) {
+  const state = await contextJournal(location, input);
+  if (state.pending) await contextRemote(state.pending.stage, state.pending.operation, state.pending.input, state, location, dependencies);
+  try {
+    if (input.action === 'review') return await review(location, state, dependencies);
+    if (input.action === 'apply') return await apply(location, state, dependencies);
+    const status = await liveStatus(location, state, dependencies);
+    state.completed = true; await saveContextJournal(location, state);
+    return { schemaVersion, ...status, status: 'succeeded', flowId: input.flowId, grantsExecutionAuthority: false, claimsCompletion: false };
+  } catch (error) {
+    if (!state.pending) { state.rejection ??= { code: error.code, message: error.message }; await saveContextJournal(location, state); }
+    throw error;
+  }
+}
+export async function runScopeContext(repositoryRoot, input, dependencies) {
+  try {
+    contextInput(input); await dependencies.install();
+    if (!await dependencies.agreementAccepted(dependencies.home)) return dependencies.agreementRequired(dependencies.home);
+    await bootstrapCloudMutationAuthority(dependencies);
+    const location = await scopeContextLocation(repositoryRoot, input.flowId, dependencies);
+    return await withStateLock(path.join(location.base, 'connection'), () => run(location, input, dependencies));
+  } catch (error) {
+    return { schemaVersion, status: 'blocked', flowId: input?.flowId,
+      code: error?.code?.startsWith('ENTROROVE_') ? error.code : 'ENTROROVE_SCOPE_CONTEXT_PREREQUISITE',
+      message: error?.code?.startsWith('ENTROROVE_') ? error.message : 'Context recovery stopped; preserve original signer, binding, journal and evidence.',
+      ...(error?.requestId ? { requestId: error.requestId } : {}), ...(error?.output ? { output: error.output } : {}),
+      ...(error?.outcomeUnknown ? { outcomeUnknown: true, nextAction: { operation: 'scope-context', method: 'GET',
+        requestId: error.requestId, reuseOriginalInput: true, repeatPost: false } } : {}) };
+  }
+}

package/scope-context-journal.mjs

@@ -0,0 +1,44 @@
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { canonical, sha256 } from './local-integrity.mjs';
+import { atomicMutationJson14, readMutationJson14 } from './local-mutation-files.mjs';
+import { contextFail } from './scope-context-wire.mjs';
+import { readContextJournal, saveContextJournal } from './scope-context-state.mjs';
+import { contextRemote } from './scope-context-remote.mjs';
+
+export async function archiveContextAttempt(location, state) {
+  if (!state.attemptId) return;
+  const file = path.join(location.directory, `${state.attemptId}-${sha256(canonical(state))}.json`);
+  try { if (canonical(await readMutationJson14(file)) !== canonical(state)) contextFail('Context attempt history changed'); }
+  catch (error) { if (error.code !== 'ENOENT') throw error; await atomicMutationJson14(file, state, { privateFrom: location.stateRoot }); }
+}
+function reusableSnapshot(state, input) {
+  return input.action === 'apply' && state.snapshot && state.challenged && !state.pending && !state.completed && !state.applied
+    && state.rejection && !state.rejection.requestId && !state.rejection.output;
+}
+export async function contextJournal(location, input) {
+  let state = await readContextJournal(location, input);
+  if (!state.previous && reusableSnapshot(state, input)) {
+    await archiveContextAttempt(location, state);
+    for (const field of ['rejection', 'checked', 'attestation', 'signingChallenge', 'signingAttemptId']) delete state[field];
+    await saveContextJournal(location, state);
+  } else if (state.previous || !state.pending && !state.applied && (state.rejection
+    || input.action === 'status' && state.completed || input.action === 'apply' && state.completed)) {
+    await archiveContextAttempt(location, state.previous ?? state); state = {};
+  }
+  if (!state.attemptId) {
+    state = { schemaVersion: 'entrorove.scope-context-journal/1.0', localBindingDigest: location.localBindingDigest,
+      input, attemptId: randomUUID() }; await saveContextJournal(location, state);
+  }
+  return state;
+}
+export async function renewContextChallenge(location, state, proposal, dependencies) {
+  if (state.pending) contextFail('Recover the original pending request before any challenge renewal');
+  await archiveContextAttempt(location, state);
+  delete state.signingChallenge;
+  state.signingAttemptId = randomUUID(); await saveContextJournal(location, state);
+  const output = await contextRemote('signingChallenge', 'scope-runner-context-challenge', { flowId: location.binding.flowId,
+    proposalId: proposal.proposalId, proposalDigest: proposal.proposalDigest, attemptId: state.signingAttemptId },
+  state, location, dependencies);
+  return output.challenge;
+}

package/scope-context-observation.mjs

@@ -0,0 +1,42 @@
+import path from 'node:path';
+import { canonical, sha256 } from './local-integrity.mjs';
+import { mutationHome14, readMutationJson14 } from './local-mutation-files.mjs';
+import { contextPrivate, effectiveScopeContexts } from './scope-context-state.mjs';
+import { contextExact, contextFail, contextList } from './scope-context-wire.mjs';
+import { hydrateCloudMutationAuthority } from './cloud-mutation-authority.mjs';
+import { trustedOrigin } from './remote-transport.mjs';
+
+export async function scopeContextObservation(input, root, apiOrigin = 'https://entrorove.com') {
+  if (!input.flowId) return null;
+  const home = await mutationHome14(input.home), origin = trustedOrigin(apiOrigin);
+  const stateRoot = path.join(home, '.entrorove'), base = path.join(stateRoot, 'scope-runners', sha256(`${origin}:${input.flowId}:${root}`));
+  try { await contextPrivate(path.join(base, 'context-authority'), 'directory'); }
+  catch (error) { if (error.code === 'ENOENT') return null; throw error; }
+  await contextPrivate(path.join(base, 'identity/binding.json'), 'file', 1_000_000);
+  const binding = await readMutationJson14(path.join(base, 'identity/binding.json'));
+  contextExact(binding, ['schemaVersion', 'flowId', 'repositoryRoot', 'apiOrigin', 'targetPaths', 'importContexts', 'runnerId', 'repositoryId', 'publicKey', 'keyId']);
+  if (binding.schemaVersion !== 'entrorove.local-scope-binding/1.0' || binding.flowId !== input.flowId
+    || binding.repositoryRoot !== root || binding.apiOrigin !== origin) contextFail('Snapshot contexts require their original local flow, root and repository binding');
+  contextList(binding.importContexts);
+  if (!await hydrateCloudMutationAuthority(home, origin)) contextFail('Snapshot context authority requires its existing private local public-key pin');
+  const head = await effectiveScopeContexts({ base, binding, localBindingDigest: sha256(canonical(binding)) });
+  if (!head) contextFail('Snapshot context history has no accepted signed head');
+  return { apiOrigin: origin, ...head };
+}
+function boundInput(input, context) {
+  if (!context) return input;
+  const fields = { importContexts: context.record.importContexts, contextRevisionDigest: context.revisionDigest,
+    contextEvidence: context.record.evidence };
+  if (Object.keys(fields).some(field => Object.hasOwn(input, field) && canonical(input[field]) !== canonical(fields[field]))) {
+    contextFail('Mutation observation cannot replace its original approved snapshot contexts');
+  }
+  return { ...input, ...fields };
+}
+export async function scopeContextSnapshotInput(input, root, context, { initial = false } = {}) {
+  if (context) contextExact(context, ['apiOrigin', 'record', 'revisionDigest']);
+  const current = await scopeContextObservation(input, root, context?.apiOrigin);
+  if (!context && current && !initial || context && (!current || canonical(context) !== canonical(current))) {
+    contextFail('Mutation snapshot context authority differs from its original signed same-flow history');
+  }
+  return { input: boundInput(input, context ?? (initial ? current : null)), context: context ?? (initial ? current : null) };
+}

package/scope-context-observer.mjs

@@ -0,0 +1,86 @@
+import { randomUUID, sign } from 'node:crypto';
+import { canonical } from './local-integrity.mjs';
+import { scopeRead, scopeTarget } from './local-scope-files.mjs';
+import { snapshotPlan, snapshotVerify } from './local-execution.mjs';
+import { collectScopeFacts } from './local-scope-repository.mjs';
+import { readScopeSnapshot, verifyFreshScopeSnapshot } from './local-scope-snapshot.mjs';
+import { attestScopeFacts } from './local-scope-signature.mjs';
+import { contextChallenge, contextFail } from './scope-context-wire.mjs';
+import { saveContextJournal } from './scope-context-state.mjs';
+
+export async function inspectContextEvidence(location, contexts, evidencePaths) {
+  const paths = new Set(evidencePaths);
+  for (const context of contexts) {
+    const directory = await scopeTarget(location.root, context.sourcePrefix);
+    if (!directory.stat.isDirectory()) contextFail('Context source prefix must be an actual repository directory');
+    paths.add(context.configPath);
+  }
+  if (paths.size > 200) contextFail('Context evidence exceeds its 200-file inspection bound');
+  const evidence = [];
+  for (const relative of [...paths].sort()) {
+    const target = await scopeTarget(location.root, relative);
+    if (!target.stat.isFile() || target.stat.size > 1_048_576) contextFail('Build evidence must be an actual ordinary bounded repository file');
+    const read = await scopeRead(location.root, relative, { repositoryRoot: location.root });
+    evidence.push({ path: relative, sha256: read.sha256 });
+  }
+  return evidence;
+}
+function observationInput(location, state, proposal, challenge) {
+  return { repositoryRoot: location.root, home: location.home, flowId: challenge.flowId, stepId: challenge.stepId,
+    snapshotId: state.snapshotId, paths: [...location.binding.targetPaths], importContexts: challenge.importContexts,
+    contextRevisionDigest: proposal.proposalDigest, contextEvidence: challenge.evidence,
+    signerConfigPath: location.signerConfigPath, ownerId: challenge.ownerId,
+    task: challenge.task, taskDigest: challenge.taskDigest, chainDigest: challenge.chainDigest,
+    repositoryId: challenge.repositoryId, challenge: challenge.challenge };
+}
+export async function prepareScopeContext(location, state, proposal) {
+  // An expired server challenge can still identify read-only preparation; it cannot sign or apply.
+  const challenge = contextChallenge(state.challenged.challenge, location, proposal, { allowExpired: true });
+  const evidence = await inspectContextEvidence(location, challenge.importContexts, challenge.evidence.map(file => file.path));
+  if (canonical(evidence) !== canonical(challenge.evidence)) contextFail('Actual build configuration or loader evidence changed since review');
+  if (!state.snapshotId) { state.snapshotId = `context-${randomUUID()}`; await saveContextJournal(location, state); }
+  const input = observationInput(location, state, proposal, challenge);
+  if (!state.snapshot) {
+    if (state.snapshotStarted) contextFail('Interrupted context snapshot must be inspected before another observation; preserve its files');
+    state.snapshotStarted = true; await saveContextJournal(location, state);
+    try { state.snapshot = await snapshotPlan(input); }
+    catch (error) { delete state.snapshotStarted; await saveContextJournal(location, state); throw error; }
+    await saveContextJournal(location, state);
+  }
+  const verified = await snapshotVerify(input);
+  if (verified.verified !== true || verified.receipt.snapshotDigest !== state.snapshot.snapshotDigest) contextFail('Actual context candidate snapshot did not verify');
+  const snapshot = await readScopeSnapshot(input, location.root);
+  const facts = await collectScopeFacts(location.root, input.paths, undefined, snapshot.known, input);
+  facts.snapshotEvidence = await verifyFreshScopeSnapshot(input, location.root, facts);
+  return { input, facts, evidence };
+}
+function sameObservation(candidate, input, challenge) {
+  const withoutNonce = value => Object.fromEntries(Object.entries(value).filter(([field]) => field !== 'challenge'));
+  if (canonical(withoutNonce(candidate.input)) !== canonical(withoutNonce(input))
+    || canonical(candidate.evidence) !== canonical(challenge.evidence)) contextFail('Fresh challenge replaced original preparation identity');
+}
+export async function observeScopeContext(location, state, proposal, prepared, renewChallenge) {
+  const candidate = prepared ?? await prepareScopeContext(location, state, proposal);
+  let challenge = contextChallenge((state.signingChallenge ?? state.challenged).challenge, location, proposal,
+    { allowExpired: typeof renewChallenge === 'function' });
+  const input = observationInput(location, state, proposal, challenge);
+  sameObservation(candidate, input, challenge);
+  const beforeSign = renewChallenge && (async () => {
+    challenge = contextChallenge(await renewChallenge(), location, proposal);
+    sameObservation(candidate, observationInput(location, state, proposal, challenge), challenge);
+    return { challenge: challenge.challenge, maximumExpiresAt: Date.parse(challenge.expiresAt) };
+  });
+  const facts = candidate.facts;
+  const observed = await attestScopeFacts(input, { repositoryRoot: location.root, facts,
+    snapshotDigest: facts.snapshotEvidence.snapshotDigest }, beforeSign ? { beforeSign }
+      : { maximumExpiresAt: Date.parse(challenge.expiresAt) });
+  if (!observed.attestation || observed.attestation.challenge !== challenge.challenge
+    || canonical(observed.attestation.importContexts) !== canonical(challenge.importContexts)
+    || observed.attestation.contextRevisionDigest !== proposal.proposalDigest
+    || Date.parse(observed.attestation.expiresAt) > Date.parse(challenge.expiresAt)) contextFail('Context candidate requires its actual purpose-bound original S proof');
+  const after = await inspectContextEvidence(location, challenge.importContexts, challenge.evidence.map(file => file.path));
+  if (canonical(after) !== canonical(candidate.evidence)) contextFail('Build evidence changed while observing its actual imports');
+  const core = { schemaVersion: 'entrorove.scope-context-attestation/1.0', challengeId: challenge.challengeId,
+    proposalDigest: proposal.proposalDigest, scopeAttestation: observed.attestation };
+  return { ...core, signature: sign(null, Buffer.from(canonical(core)), location.key).toString('base64url') };
+}

package/scope-context-release.mjs

@@ -0,0 +1,8 @@
+export const SCOPE_CONTEXT_SOURCE_FILES = [
+  'scope-context-client.mjs', 'scope-context-observer.mjs', 'scope-context-observation.mjs', 'scope-context-remote.mjs',
+  'scope-context-state.mjs', 'scope-context-wire.mjs', 'scope-context-journal.mjs', 'scope-context-release.mjs',
+]
+export const scopeContextReleaseNote = {
+  zh: '新增首次范围门禁前的构建上下文纠正：原账号审核真实配置和构建证据，原 S 签名完整路径快照，通过服务挑战追加上下文权威记录；保留原 flow、绑定、旧上下文和失败历史，不授予写入或完成权限。',
+  en: 'Add build-context recovery before the first scope gate: original owner review of actual configuration and build evidence, original S proof of all target paths, and challenge-bound append-only context authority. Preserve the original flow, binding, contexts and failures without granting writes or completion.',
+}