@gitroll/tacitt-cli 0.6.13 → 0.6.15

package/skills/tacitt/scripts/privacy-validator.mjs

@@ -5112,6 +5112,14 @@ function object(shape, params) {
 	};
 	return new ZodObject(def);
 }
+function strictObject(shape, params) {
+	return new ZodObject({
+		type: "object",
+		shape,
+		catchall: never(),
+		...normalizeParams(params)
+	});
+}
 function looseObject(shape, params) {
 	return new ZodObject({
 		type: "object",
@@ -5400,7 +5408,7 @@ const range = object({
 	start: number().int().nonnegative(),
 	end: number().int().nonnegative()
 }).strict();
-const digest$3 = string().regex(/^[a-f0-9]{64}$/u);
+const digest$4 = string().regex(/^[a-f0-9]{64}$/u);
 /** Original static title mask provenance for keyword-only preview/packaging. */
 const classificationTitleMaskSchema = object({
 	inputRange: range,
@@ -5417,14 +5425,66 @@ const classificationTitleMaskSchema = object({
 	originalPointer: string().nullable(),
 	outputPointer: string().nullable(),
 	sourceRange: range.nullable(),
-	inputSha256: digest$3,
-	outputSha256: digest$3,
+	inputSha256: digest$4,
+	outputSha256: digest$4,
 	context: object({
 		start: number().int().nonnegative(),
 		text: string()
 	}).strict()
 }).strict();
 //#endregion
+//#region packages/application/src/journey/account-works.ts
+const digest$3 = string().regex(/^[0-9a-f]{64}$/u);
+const stored = object({
+	/** Wire field from issue #131; a formation reply without it is read as no stored metadata. */
+	metadataSha256: digest$3.nullish().transform((value) => value ?? null),
+	key: digest$3,
+	sessionKey: string().regex(/^sess-pilot\/[^/]+\/[^/]+\/[^/]+$/u).nullable(),
+	sha256: digest$3,
+	byteLength: number().int().positive(),
+	lastAt: datetime()
+});
+const access = _enum([
+	"public",
+	"private",
+	"removed"
+]);
+const accountWorksInventorySchema = object({
+	works: array(object({
+		logicalWorkId: uuid(),
+		title: string().min(1).max(300),
+		access,
+		unitAccess: access,
+		sessions: array(stored)
+	})),
+	unassigned: array(stored.extend({ removedFromWork: uuid().nullish().transform((value) => value ?? null) }))
+});
+const accountWorksSchema = discriminatedUnion("status", [
+	strictObject({
+		status: literal("read"),
+		subject: string().min(1).max(128),
+		at: datetime(),
+		inventory: accountWorksInventorySchema,
+		/** Families with a key unassigned after its Work's removal: no Work, not sent (D4). */
+		leftOut: array(strictObject({
+			rootSessionId: string().min(1).max(128),
+			removedWorkId: uuid()
+		})).default([]),
+		/** Families with a held key that are not cleanly placed: no Work, not sent (D9). */
+		heldBack: array(string().min(1).max(128)).default([]),
+		/** Every family was left out or held back: no Work and no snapshot (#129 review). */
+		nothingToSend: literal(true).optional()
+	}),
+	strictObject({
+		status: literal("signed-out"),
+		at: datetime()
+	}),
+	strictObject({
+		status: literal("unavailable"),
+		at: datetime()
+	})
+]);
+//#endregion
 //#region packages/application/src/journey/profile.ts
 /**
 * Passport's own rules (talent-platform `profile-settings.ts`): 1 to 39 letters and digits with
@@ -10167,7 +10227,8 @@ const reviewInterruptionSchema = object({
 }).strict();
 const journeyWorkSchema = object({
 	id: journeyIdSchema,
-	title: label,
+	/** 240 characters; an `account` title holds the server's 300 (ADR 0276 D2). */
+	title: string().trim().min(1).max(300),
 	/** Statically processed repository or folder name; the original stays in the private plan. */
 	projectName: label,
 	projectType: journeyWorkTypeSchema.nullable(),
@@ -10183,7 +10244,11 @@ const journeyWorkSchema = object({
 		description: string(),
 		reason: string()
 	}).strict().optional(),
-	titleOrigin: _enum(["model", "explicit"]),
+	titleOrigin: _enum([
+		"model",
+		"explicit",
+		"account"
+	]),
 	explicitTitleId: journeyIdSchema.nullable(),
 	accessOrigin: _enum([
 		"default",
@@ -10221,6 +10286,8 @@ const journeyWorkSchema = object({
 	inputRevision: count$1.min(1),
 	/** Placement created this Work (create-work or a sorting "new" decision): its name is generic. */
 	createdByPlacement: literal(true).optional(),
+	/** Rebuilt at formation from the account Work with this id (ADR 0276 D1); never classified. */
+	accountWork: literal(true).optional(),
 	/** Host-owned eligibility after removal-only regrouping; never authorizes output by itself. */
 	reviewReuseFrom: object({
 		inputRevision: count$1.min(1),
@@ -10276,7 +10343,7 @@ const journeyWorkSchema = object({
 		sentBundleId: journeyIdSchema.optional(),
 		sentAccess: _enum(["public", "private"]).optional()
 	}).strict().nullable()
-}).strict();
+}).strict().refine((work) => work.titleOrigin === "account" || work.title.length <= 240, { path: ["title"] });
 const journeyConsentSchema = object({
 	provider: label,
 	allowedAt: datetime(),
@@ -10298,7 +10365,7 @@ const journeyExceptionSchema = object({
 	value: string().min(1).max(1024)
 }).strict();
 object({
-	formatVersion: literal(10),
+	formatVersion: literal([10, 11]),
 	outputVersion: number().int().positive().optional(),
 	classificationRevision: count$1.nullable(),
 	privacy: journeyPrivacySchema,
@@ -10368,6 +10435,8 @@ object({
 	* confirmation and Retry set `read`; late classification records only a failure. Absent in a
 	* journey of an earlier version, which reads as not `read`.
 	*/
+	/** Formation read only; never establishes access proof. */
+	accountWorks: accountWorksSchema.optional(),
 	accountRead: object({
 		status: _enum([
 			"read",

package/skills/tacitt/scripts/review.mjs

@@ -55,7 +55,7 @@ const COMMAND_BUDGET_MS = 75_000
 const LOCK_WAIT_MS = 60_000
 const LOCK_POLL_MS = 200
 // Native child slots shared by every phase; `--agents auto` fills all of them with privacy packs.
-const SLOTS = 24
+const SLOTS = 48
 // While `--agents auto` waits, journey input (newly published sessions) is rechecked this often.
 const AUTO_RECHECK_MS = 3_000
 const PREPARATION_WAIT_MS = 60_000
@@ -1547,7 +1547,7 @@ async function outstandingPacks(ctx) {
   return outstanding
 }
 /**
- * `ingest --agents auto`: ingest and refill every free slot of the twenty-four. While nothing is new,
+ * `ingest --agents auto`: ingest and refill every free slot of the forty-eight. While nothing is new,
  * wait up to `--wait-ms` (within half the command budget) for a published answer, rechecking
  * journey input periodically, so the parent loops: dispatch the returned prompts, call again.
  */