@farmslot/protocol 0.40.0 → 0.42.0

package/dist/sources/pins.d.ts

@@ -0,0 +1,25 @@
+import type { SourceDeclaration, SourceLock, SourcePin } from './contracts.js';
+export interface SourceSelection {
+    sourceId: string;
+    selection: 'branch' | 'main';
+    ref?: string;
+}
+export interface SourcePinTarget {
+    scope: SourcePin['scope'];
+    targetId: string;
+}
+export interface SourceEffectiveSelection {
+    sourceId: string;
+    declaredRef: string;
+    effectiveRef: string;
+    scope: SourcePin['scope'];
+    pin?: SourcePin;
+    shadowedPins: SourcePin[];
+}
+/** Branch syntax is portable; the gateway must also verify it exists upstream. */
+export declare function isSourceBranchRef(ref: string): boolean;
+export declare function validateSourceSelection(value: unknown, declarations?: readonly Pick<SourceDeclaration, 'id'>[]): string[];
+export declare function validateSourceSelections(value: unknown, declarations?: readonly Pick<SourceDeclaration, 'id'>[]): string[];
+/** One precedence calculation serves authority locks and all client projections. */
+export declare function selectEffectiveSource(source: SourceDeclaration, pins: readonly SourcePin[], context?: Pick<SourceLock['context'], 'runId' | 'nodeId'>): SourceEffectiveSelection;
+//# sourceMappingURL=pins.d.ts.map

package/dist/sources/pins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pins.d.ts","sourceRoot":"","sources":["../../src/sources/pins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE/E,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1B,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,YAAY,EAAE,SAAS,EAAE,CAAC;CAC3B;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAYtD;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,SAAS,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,GACtD,MAAM,EAAE,CAwBV;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,SAAS,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,GACtD,MAAM,EAAE,CAMV;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,SAAS,SAAS,EAAE,EAC1B,OAAO,GAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAM,GAC5D,wBAAwB,CAqB1B"}

package/dist/sources/pins.js

@@ -0,0 +1,65 @@
+/** Branch syntax is portable; the gateway must also verify it exists upstream. */
+export function isSourceBranchRef(ref) {
+    const branch = ref.replace(/^refs\/heads\//, '');
+    return (/^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/.test(branch) &&
+        !/^[0-9a-f]{40}$|^[0-9a-f]{64}$/.test(branch) &&
+        !branch.includes('..') &&
+        !branch.includes('//') &&
+        !branch.endsWith('/') &&
+        !branch.endsWith('.') &&
+        !branch.split('/').some((part) => part.startsWith('.') || part.endsWith('.lock')) &&
+        !ref.startsWith('refs/tags/'));
+}
+export function validateSourceSelection(value, declarations) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return ['Select a declared source and a pushed branch or main.'];
+    const selected = value;
+    const errors = [];
+    if (typeof selected.sourceId !== 'string' ||
+        !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(selected.sourceId))
+        errors.push('Select a valid source ID.');
+    if (declarations && !declarations.some((source) => source.id === selected.sourceId))
+        errors.push('The source is not declared in this farm.');
+    if (selected.selection !== 'branch' && selected.selection !== 'main')
+        errors.push('Selection must be a pushed branch or main.');
+    if (selected.selection === 'branch' &&
+        (typeof selected.ref !== 'string' || !isSourceBranchRef(selected.ref)))
+        errors.push('Select a pushed branch, without local paths, tags or commit-only refs.');
+    if (selected.selection === 'main' && selected.ref !== undefined && selected.ref !== 'main')
+        errors.push('Returning to main cannot select another ref.');
+    if (Object.keys(selected).some((key) => !['sourceId', 'selection', 'ref'].includes(key)))
+        errors.push('Source selections contain unsupported fields.');
+    return errors;
+}
+export function validateSourceSelections(value, declarations) {
+    if (!Array.isArray(value))
+        return ['Source selections must be an array.'];
+    const errors = value.flatMap((selection) => validateSourceSelection(selection, declarations));
+    const ids = value.map((selection) => selection?.sourceId);
+    if (new Set(ids).size !== ids.length)
+        errors.push('Select each declared source once.');
+    return errors;
+}
+/** One precedence calculation serves authority locks and all client projections. */
+export function selectEffectiveSource(source, pins, context = {}) {
+    const rank = (pin) => pin.scope === 'run' && pin.targetId === context.runId
+        ? 3
+        : pin.scope === 'node' && pin.targetId === context.nodeId
+            ? 2
+            : pin.scope === 'farm'
+                ? 1
+                : 0;
+    const applicable = pins
+        .filter((pin) => pin.sourceId === source.id && rank(pin) > 0)
+        .sort((a, b) => rank(b) - rank(a));
+    const pin = applicable[0];
+    return {
+        sourceId: source.id,
+        declaredRef: source.ref ?? 'main',
+        effectiveRef: pin?.ref ?? source.ref ?? 'main',
+        scope: pin?.scope ?? 'farm',
+        ...(pin ? { pin: structuredClone(pin) } : {}),
+        shadowedPins: structuredClone(applicable.slice(1)),
+    };
+}
+//# sourceMappingURL=pins.js.map

package/dist/sources/pins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pins.js","sourceRoot":"","sources":["../../src/sources/pins.ts"],"names":[],"mappings":"AAsBA,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,CACL,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5C,CAAC,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7C,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjF,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc,EACd,YAAuD;IAEvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,OAAO,CAAC,uDAAuD,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IACE,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QACrC,CAAC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAEvD,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC;QACjF,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1D,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM;QAClE,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC5D,IACE,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEtE,MAAM,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACxF,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM;QACxF,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,YAAuD;IAEvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,uBAAuB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CACnC,MAAyB,EACzB,IAA0B,EAC1B,UAA2D,EAAE;IAE7D,MAAM,IAAI,GAAG,CAAC,GAAc,EAAU,EAAE,CACtC,GAAG,CAAC,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK;QACnD,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM;YACvD,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM;gBACpB,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,UAAU,GAAG,IAAI;SACpB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SAC5D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,MAAM;QACjC,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM;QAC9C,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,MAAM;QAC3B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,YAAY,EAAE,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/sources/status-view.d.ts

@@ -0,0 +1,52 @@
+import type { SourcesStatusParams, SourcesStatusResult } from '../rpc/sources.js';
+import type { SourceDeclaration, SourceLock, SourceLockEntry, SourceResolution } from './contracts.js';
+import { type SourceEffectiveSelection, type SourcePinTarget, type SourceSelection } from './pins.js';
+export type SourceViewAction = 'sync' | 'pin' | 'unpin';
+export declare const SOURCE_VIEW_ACTION_LABELS: Record<SourceViewAction, string>;
+/** Callers select presentation and actions; the gateway remains the mutation authority. */
+export interface SourceStatusViewContext {
+    /** Opaque authenticated transport identity supplied by existing host connection authority. */
+    connectionKey?: string;
+    params?: SourcesStatusParams;
+    target?: SourcePinTarget;
+    actions: readonly SourceViewAction[];
+    selections?: readonly SourceSelection[];
+}
+export interface SourceStatusRowView {
+    summary: string;
+    details: string[];
+    declaration: SourceDeclaration;
+    effective?: SourceEffectiveSelection;
+    resolution?: SourceResolution;
+    recordedLocks: Array<{
+        digest: string;
+        context: SourceLock['context'];
+        entry: SourceLockEntry;
+    }>;
+    materializations: Array<{
+        nodeId: string;
+        lockDigest: string;
+        commit: string;
+        verifiedAt?: string;
+        drift: string[];
+    }>;
+    selection?: SourceSelection;
+    selectionErrors: string[];
+    canPin: boolean;
+}
+export interface SourceStatusViewModel {
+    configured: boolean;
+    declarationRevision?: number;
+    pinRevision?: number;
+    target?: SourcePinTarget;
+    actions: SourceViewAction[];
+    editable: boolean;
+    draft: boolean;
+    runSource: SourcesStatusResult['runSource'];
+    rows: SourceStatusRowView[];
+    selectionErrors: string[];
+    errors: SourcesStatusResult['errors'];
+}
+/** Project reported facts only. Retained generations are never inferred to be drift. */
+export declare function deriveSourceStatusView(status: SourcesStatusResult, context: SourceStatusViewContext): SourceStatusViewModel;
+//# sourceMappingURL=status-view.d.ts.map

package/dist/sources/status-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-view.d.ts","sourceRoot":"","sources":["../../src/sources/status-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGlF,OAAO,KAAK,EACV,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,eAAe,EACpB,KAAK,eAAe,EAGrB,MAAM,WAAW,CAAC;AAEnB,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AACxD,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAItE,CAAC;AAEF,2FAA2F;AAC3F,MAAM,WAAW,uBAAuB;IACtC,8FAA8F;IAC9F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACrC,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,aAAa,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,KAAK,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IACjG,gBAAgB,EAAE,KAAK,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,EAAE,mBAAmB,EAAE,CAAC;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;CACvC;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,uBAAuB,GAC/B,qBAAqB,CAyIvB"}

package/dist/sources/status-view.js

@@ -0,0 +1,133 @@
+import { sourceStatusParamsForTarget } from './client.js';
+import { validateSourceSelection, validateSourceSelections, } from './pins.js';
+export const SOURCE_VIEW_ACTION_LABELS = {
+    sync: 'Sync',
+    pin: 'Pin branch',
+    unpin: 'Return to main',
+};
+/** Project reported facts only. Retained generations are never inferred to be drift. */
+export function deriveSourceStatusView(status, context) {
+    const params = context.params ?? sourceStatusParamsForTarget(undefined, context.target);
+    const canSelect = context.target?.scope !== 'run' ||
+        (status.runSource?.runId === context.target.targetId &&
+            status.runSource.canSelectSources === true);
+    const declared = new Map(status.declarations.map((source) => [source.id, source]));
+    if (params.runId)
+        for (const lock of status.locks) {
+            if (lock.context.runId !== params.runId)
+                continue;
+            for (const entry of lock.entries)
+                if (!declared.has(entry.sourceId))
+                    declared.set(entry.sourceId, {
+                        id: entry.sourceId,
+                        kind: entry.kind,
+                        repo: entry.repo,
+                        ref: entry.declaredRef,
+                    });
+        }
+    const declarations = [...declared.values()].filter((source) => !params.sourceId || source.id === params.sourceId);
+    const hasRevisions = Number.isInteger(status.declarationRevision) && Number.isInteger(status.pinRevision);
+    const draft = context.selections !== undefined && context.target === undefined;
+    return structuredClone({
+        configured: status.configured,
+        declarationRevision: status.declarationRevision,
+        pinRevision: status.pinRevision,
+        target: context.target,
+        actions: context.actions.filter((action) => status.configured &&
+            canSelect &&
+            !(action === 'sync' && context.target?.scope === 'run') &&
+            (action === 'sync'
+                ? Number.isInteger(status.declarationRevision)
+                : hasRevisions && Boolean(context.target))),
+        editable: status.configured &&
+            hasRevisions &&
+            canSelect &&
+            (context.selections !== undefined || context.actions.includes('pin')),
+        draft,
+        runSource: status.runSource,
+        selectionErrors: validateSourceSelections(context.selections ?? [], status.declarations),
+        rows: declarations.map((declaration) => {
+            const effective = status.effectiveSelections?.find((selected) => selected.sourceId === declaration.id);
+            const selection = context.selections?.find((selected) => selected.sourceId === declaration.id);
+            const selectionErrors = selection
+                ? validateSourceSelection(selection, status.declarations)
+                : [];
+            const draftRef = draft && selection ? (selection.selection === 'main' ? 'main' : selection.ref) : undefined;
+            const draftResolution = draftRef
+                ? status.resolutions.find((resolution) => resolution.sourceId === declaration.id &&
+                    resolution.ref === draftRef &&
+                    resolution.declarationRevision === status.declarationRevision)
+                : undefined;
+            const mainResolution = status.resolutions.find((resolution) => resolution.sourceId === declaration.id &&
+                resolution.ref === 'main' &&
+                resolution.declarationRevision === status.declarationRevision);
+            const row = {
+                declaration,
+                effective,
+                resolution: effective
+                    ? status.resolutions.find((resolution) => resolution.sourceId === declaration.id &&
+                        resolution.ref === effective.effectiveRef &&
+                        resolution.declarationRevision === status.declarationRevision)
+                    : undefined,
+                recordedLocks: status.locks
+                    .filter((lock) => !params.runId || lock.context.runId === params.runId)
+                    .filter((lock) => !params.nodeId || lock.context.nodeId === params.nodeId)
+                    .flatMap((lock) => lock.entries
+                    .filter((entry) => entry.sourceId === declaration.id)
+                    .map((entry) => ({ digest: lock.digest, context: lock.context, entry }))),
+                materializations: status.nodes
+                    .filter((node) => !params.nodeId || node.nodeId === params.nodeId)
+                    .flatMap((node) => node.materializations.flatMap((materialization) => materialization.sources
+                    .filter((source) => source.sourceId === declaration.id)
+                    .map((source) => ({
+                    nodeId: node.nodeId,
+                    lockDigest: materialization.lockDigest,
+                    commit: source.commit,
+                    verifiedAt: materialization.verifiedAt,
+                    drift: materialization.drift,
+                })))),
+                selection,
+                selectionErrors,
+                canPin: selection?.selection === 'branch' && selectionErrors.length === 0,
+            };
+            const visiblePin = status.runSource?.state === 'locked' ? row.recordedLocks[0]?.entry.pin : row.effective?.pin;
+            const pinSummary = visiblePin
+                ? `; ${visiblePin.selection === 'branch' ? 'pinned' : 'main override'} ${visiblePin.scope}, base main ${visiblePin.baseMainCommit}`
+                : '';
+            const summary = draftRef !== undefined
+                ? `${declaration.id} run selection ${draftRef} ${draftResolution?.commit ?? 'unresolved'} ${draftResolution?.status ?? 'unknown'}, reported main base ${mainResolution?.commit ?? 'unresolved'}`
+                : status.runSource?.state === 'locked' && row.recordedLocks[0]
+                    ? `${declaration.id} run input ${row.recordedLocks[0].entry.effectiveRef} ${row.recordedLocks[0].entry.commit}${pinSummary}`
+                    : `${declaration.id} reported ${row.effective?.effectiveRef ?? declaration.ref ?? 'main'} ${row.resolution?.commit ?? 'unresolved'} ${row.resolution?.status ?? 'unknown'}${pinSummary}`;
+            return {
+                ...row,
+                summary,
+                details: [
+                    ...(draftRef !== undefined
+                        ? [
+                            `Draft main base ${mainResolution?.commit ?? 'unresolved'}; creation resolves and captures the selected branch and main again.`,
+                        ]
+                        : []),
+                    ...sourceRowFacts(row),
+                ],
+            };
+        }),
+        errors: status.errors,
+    });
+}
+/** All renderers describe the same reported locks, pin audit and receipt facts. */
+function sourceRowFacts(row) {
+    const lines = [];
+    if (row.resolution?.resolvedAt)
+        lines.push(`Ref resolved at ${row.resolution.resolvedAt}`);
+    if (row.effective?.pin)
+        lines.push(`Reported pin ${row.effective.pin.scope} ${row.effective.pin.targetId} ${row.effective.pin.selection}, base main ${row.effective.pin.baseMainCommit}, by ${row.effective.pin.actor} at ${row.effective.pin.createdAt}`);
+    for (const pin of row.effective?.shadowedPins ?? [])
+        lines.push(`Shadowed ${pin.scope} ${pin.targetId} ${pin.ref}, base main ${pin.baseMainCommit}`);
+    for (const recorded of row.recordedLocks)
+        lines.push(`Recorded lock ${recorded.context.runId ?? recorded.context.nodeId ?? 'farm'} ${recorded.entry.effectiveRef} ${recorded.entry.commit}, scope ${recorded.entry.scope}${recorded.entry.pin ? `, base main ${recorded.entry.pin.baseMainCommit}, by ${recorded.entry.pin.actor} at ${recorded.entry.pin.createdAt}` : ''}, ${recorded.digest}`);
+    for (const materialization of row.materializations)
+        lines.push(`Node receipt ${materialization.nodeId} ${materialization.commit} ${materialization.lockDigest}: ${materialization.drift.length ? materialization.drift.join('; ') : materialization.verifiedAt ? `verified ${materialization.verifiedAt}` : 'unverified'}`);
+    return lines;
+}
+//# sourceMappingURL=status-view.js.map

package/dist/sources/status-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-view.js","sourceRoot":"","sources":["../../src/sources/status-view.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAO1D,OAAO,EAIL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,WAAW,CAAC;AAGnB,MAAM,CAAC,MAAM,yBAAyB,GAAqC;IACzE,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,YAAY;IACjB,KAAK,EAAE,gBAAgB;CACxB,CAAC;AA6CF,wFAAwF;AACxF,MAAM,UAAU,sBAAsB,CACpC,MAA2B,EAC3B,OAAgC;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,2BAA2B,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxF,MAAM,SAAS,GACb,OAAO,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK;QAC/B,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,QAAQ;YAClD,MAAM,CAAC,SAAS,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,KAAK;QACd,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;gBAAE,SAAS;YAClD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO;gBAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE;wBAC3B,EAAE,EAAE,KAAK,CAAC,QAAQ;wBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,GAAG,EAAE,KAAK,CAAC,WAAW;qBACvB,CAAC,CAAC;QACT,CAAC;IACH,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAChD,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,CAC9D,CAAC;IACF,MAAM,YAAY,GAChB,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;IAC/E,OAAO,eAAe,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAC7B,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,UAAU;YACjB,SAAS;YACT,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC;YACvD,CAAC,MAAM,KAAK,MAAM;gBAChB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBAC9C,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAC/C;QACD,QAAQ,EACN,MAAM,CAAC,UAAU;YACjB,YAAY;YACZ,SAAS;YACT,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvE,KAAK;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,eAAe,EAAE,wBAAwB,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC;QACxF,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;YACrC,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAChD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE,CACnD,CAAC;YACF,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,CACxC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE,CACnD,CAAC;YACF,MAAM,eAAe,GAAG,SAAS;gBAC/B,CAAC,CAAC,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,QAAQ,GACZ,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7F,MAAM,eAAe,GAAG,QAAQ;gBAC9B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CACrB,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE;oBACtC,UAAU,CAAC,GAAG,KAAK,QAAQ;oBAC3B,UAAU,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,CAChE;gBACH,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAC5C,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE;gBACtC,UAAU,CAAC,GAAG,KAAK,MAAM;gBACzB,UAAU,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,CAChE,CAAC;YACF,MAAM,GAAG,GAAyB;gBAChC,WAAW;gBACX,SAAS;gBACT,UAAU,EAAE,SAAS;oBACnB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CACrB,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE;wBACtC,UAAU,CAAC,GAAG,KAAK,SAAS,CAAC,YAAY;wBACzC,UAAU,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,CAChE;oBACH,CAAC,CAAC,SAAS;gBACb,aAAa,EAAE,MAAM,CAAC,KAAK;qBACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC;qBACtE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;qBACzE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,IAAI,CAAC,OAAO;qBACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE,CAAC;qBACpD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAC3E;gBACH,gBAAgB,EAAE,MAAM,CAAC,KAAK;qBAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;qBACjE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,EAAE,CAChD,eAAe,CAAC,OAAO;qBACpB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE,CAAC;qBACtD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,eAAe,CAAC,UAAU;oBACtC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,eAAe,CAAC,UAAU;oBACtC,KAAK,EAAE,eAAe,CAAC,KAAK;iBAC7B,CAAC,CAAC,CACN,CACF;gBACH,SAAS;gBACT,eAAe;gBACf,MAAM,EAAE,SAAS,EAAE,SAAS,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;aAC1E,CAAC;YACF,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC;YAC9F,MAAM,UAAU,GAAG,UAAU;gBAC3B,CAAC,CAAC,KAAK,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,IAAI,UAAU,CAAC,KAAK,eAAe,UAAU,CAAC,cAAc,EAAE;gBACnI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,OAAO,GACX,QAAQ,KAAK,SAAS;gBACpB,CAAC,CAAC,GAAG,WAAW,CAAC,EAAE,kBAAkB,QAAQ,IAAI,eAAe,EAAE,MAAM,IAAI,YAAY,IAAI,eAAe,EAAE,MAAM,IAAI,SAAS,wBAAwB,cAAc,EAAE,MAAM,IAAI,YAAY,EAAE;gBAChM,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;oBAC5D,CAAC,CAAC,GAAG,WAAW,CAAC,EAAE,cAAc,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,EAAE;oBAC5H,CAAC,CAAC,GAAG,WAAW,CAAC,EAAE,aAAa,GAAG,CAAC,SAAS,EAAE,YAAY,IAAI,WAAW,CAAC,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,IAAI,YAAY,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,IAAI,SAAS,GAAG,UAAU,EAAE,CAAC;YAC/L,OAAO;gBACL,GAAG,GAAG;gBACN,OAAO;gBACP,OAAO,EAAE;oBACP,GAAG,CAAC,QAAQ,KAAK,SAAS;wBACxB,CAAC,CAAC;4BACE,mBAAmB,cAAc,EAAE,MAAM,IAAI,YAAY,sEAAsE;yBAChI;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,cAAc,CAAC,GAAG,CAAC;iBACvB;aACF,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAID,mFAAmF;AACnF,SAAS,cAAc,CAAC,GAAyB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,CAAC,UAAU,EAAE,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3F,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG;QACpB,KAAK,CAAC,IAAI,CACR,gBAAgB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,eAAe,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,QAAQ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,CACvN,CAAC;IACJ,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,YAAY,IAAI,EAAE;QACjD,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,eAAe,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;IAClG,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,aAAa;QACtC,KAAK,CAAC,IAAI,CACR,iBAAiB,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,WAAW,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,QAAQ,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,EAAE,CAC5U,CAAC;IACJ,KAAK,MAAM,eAAe,IAAI,GAAG,CAAC,gBAAgB;QAChD,KAAK,CAAC,IAAI,CACR,gBAAgB,eAAe,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,IAAI,eAAe,CAAC,UAAU,KAAK,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAC5P,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/sources/validation.d.ts

@@ -0,0 +1,9 @@
+import type { SourceConfiguration, SourceEntryRef } from './contracts.js';
+export declare function assertSourceEntry(value: unknown): asserts value is SourceEntryRef;
+export declare function isContainedSourceEntry(value: string): boolean;
+/** Credential-free Git repository identity; authentication remains Git's responsibility. */
+export declare function canonicalSourceRepo(value: string): string;
+export declare function assertSourceConfiguration(value: unknown): asserts value is SourceConfiguration;
+/** Canonical ordering is shared by locks, integrity receipts and mutation comparisons. */
+export declare function canonicalSourceJson(value: unknown): string;
+//# sourceMappingURL=validation.d.ts.map

package/dist/sources/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/sources/validation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE1E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAUjF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAO7D;AAED,4FAA4F;AAC5F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAezD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAuC9F;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAS1D"}

package/dist/sources/validation.js

@@ -0,0 +1,79 @@
+import { isRecord } from '../recipe/common.js';
+export function assertSourceEntry(value) {
+    if (!isRecord(value) ||
+        typeof value.sourceId !== 'string' ||
+        !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(String(value.sourceId)) ||
+        typeof value.entry !== 'string' ||
+        !isContainedSourceEntry(value.entry) ||
+        Object.keys(value).some((key) => !['sourceId', 'entry'].includes(key)))
+        throw new Error('Source binding requires a sourceId and contained relative entry');
+}
+export function isContainedSourceEntry(value) {
+    return (value === '.' ||
+        (/^[a-zA-Z0-9_.@/-]+$/.test(value) &&
+            !value.startsWith('/') &&
+            !value.split('/').some((part) => !part || part === '.' || part === '..')));
+}
+/** Credential-free Git repository identity; authentication remains Git's responsibility. */
+export function canonicalSourceRepo(value) {
+    const scp = /^git@([^/:]+):([^\s]+)$/.exec(value);
+    const url = new URL(scp ? `ssh://git@${scp[1]}/${scp[2]}` : value);
+    if (!['https:', 'ssh:'].includes(url.protocol) ||
+        url.password ||
+        url.search ||
+        url.hash ||
+        (url.username && !(url.protocol === 'ssh:' && url.username === 'git')) ||
+        !url.hostname ||
+        !/^\/[a-zA-Z0-9_.-]+(?:\/[a-zA-Z0-9_.-]+)+\/?$/.test(url.pathname))
+        throw new Error('Source repository must be a credential-free HTTPS or Git SSH identity');
+    url.pathname = url.pathname.replace(/\/$/, '').replace(/\.git$/, '');
+    return url.toString().replace(/\/$/, '');
+}
+export function assertSourceConfiguration(value) {
+    if (!isRecord(value) ||
+        value.schemaVersion !== 1 ||
+        !Number.isSafeInteger(value.revision) ||
+        Number(value.revision) < 1 ||
+        !Number.isSafeInteger(value.pollIntervalMs) ||
+        Number(value.pollIntervalMs) < 1_000 ||
+        Number(value.pollIntervalMs) > 300_000 ||
+        !Array.isArray(value.sources) ||
+        !isRecord(value.packs) ||
+        Object.keys(value).some((key) => !['schemaVersion', 'revision', 'pollIntervalMs', 'sources', 'packs'].includes(key)))
+        throw new Error('Invalid source configuration or unsupported schema');
+    const ids = new Set();
+    for (const source of value.sources) {
+        if (!isRecord(source) ||
+            typeof source.id !== 'string' ||
+            !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(source.id) ||
+            ids.has(source.id) ||
+            !['pack', 'recipe-library', 'helper'].includes(String(source.kind)) ||
+            typeof source.repo !== 'string' ||
+            (source.ref !== undefined &&
+                (typeof source.ref !== 'string' || !source.ref || source.ref.startsWith('-'))) ||
+            Object.keys(source).some((key) => !['id', 'kind', 'repo', 'ref'].includes(key)))
+            throw new Error('Invalid or duplicate source declaration');
+        canonicalSourceRepo(source.repo);
+        ids.add(source.id);
+    }
+    for (const [project, binding] of Object.entries(value.packs)) {
+        if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(project))
+            throw new Error('Invalid pack name');
+        assertSourceEntry(binding);
+        if (!value.sources.some((source) => source.id === binding.sourceId && source.kind === 'pack'))
+            throw new Error(`Pack ${project} references an undeclared pack source`);
+    }
+}
+/** Canonical ordering is shared by locks, integrity receipts and mutation comparisons. */
+export function canonicalSourceJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalSourceJson).join(',')}]`;
+    if (isRecord(value))
+        return `{${Object.keys(value)
+            .filter((key) => value[key] !== undefined)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonicalSourceJson(value[key])}`)
+            .join(',')}}`;
+    return JSON.stringify(value);
+}
+//# sourceMappingURL=validation.js.map

package/dist/sources/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/sources/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAI/C,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEtE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,CACL,KAAK,KAAK,GAAG;QACb,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;YAChC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YACtB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,GAAG,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,IACE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1C,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI;QACR,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;QACtE,CAAC,GAAG,CAAC,QAAQ;QACb,CAAC,8CAA8C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAElE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,KAAK;QACpC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,OAAO;QACtC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC5F;QAED,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IACE,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAC7B,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClB,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS;gBACvB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAE/E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxF,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,QAAQ,OAAO,uCAAuC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACjF,IAAI,QAAQ,CAAC,KAAK,CAAC;QACjB,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC1B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;aACzC,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aACzE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PROTOCOL_VERSION = "0.40.0";
+export declare const PROTOCOL_VERSION = "0.42.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -3,5 +3,5 @@
 // fleet can be upgraded deliberately; optional method/event fields remain
 // backward-compatible unless a caller requires a new node capability.
 // Format: semver-ish, increment when methods/events/frame format changes.
-export const PROTOCOL_VERSION = '0.40.0';
+export const PROTOCOL_VERSION = '0.42.0';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@farmslot/protocol",
-  "version": "0.40.0",
+  "version": "0.42.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",