@intentius/chant 0.90.0 → 0.93.0

package/dist/lint/rules/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3G,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AA4B7D;;GAEG;AACH,wBAAgB,aAAa,IAAI,QAAQ,EAAE,CA4B1C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3G,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AA6B7D;;GAEG;AACH,wBAAgB,aAAa,IAAI,QAAQ,EAAE,CA6B1C"}

package/dist/lint/rules/op/index.d.ts

@@ -5,13 +5,24 @@
  * `coreReceiptChecks`) so they run over the FULL build result regardless of
  * which lexicons are configured — an Op is recognized by entity type
  * (`../../../op/resource.ts`'s `OpResource`), not by which lexicon declared
- * it.
+ * it. SYS010 (#2828) joined them when the `decide` activity moved into core:
+ * it reads the decide steps, and the `decide.backends` the caller passes.
  */
 import type { PostSynthCheck } from "../../post-synth.js";
+import type { DecideBackend } from "../../../op/decide-config.js";
 export { ops012 } from "./ops012-activity-contract.js";
 export { ops013 } from "./ops013-step-output-ref.js";
 export { ops014 } from "./ops014-converge-rule-refusals.js";
 export { ops015 } from "./ops015-gate-approval.js";
-/** Core's own post-synth checks over the Op model — OPS012, OPS013, OPS014, OPS015. */
-export declare function coreOpChecks(): PostSynthCheck[];
+export { sys010, sys010Check } from "./sys010-key-over-plain-http.js";
+export interface CoreOpCheckOptions {
+    /** `decide.backends` from the project's chant.config, for SYS010 (#2828). */
+    decideBackends?: Record<string, Pick<DecideBackend, "url" | "key">>;
+}
+/**
+ * Core's own post-synth checks over the Op model: OPS012, OPS013, OPS014,
+ * OPS015, and SYS010 over the `decide` steps and the configured decide
+ * backends.
+ */
+export declare function coreOpChecks(opts?: CoreOpCheckOptions): PostSynthCheck[];
 //# sourceMappingURL=index.d.ts.map

package/dist/lint/rules/op/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lint/rules/op/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAMvD,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAEhD,uFAAuF;AACvF,wBAAgB,YAAY,IAAI,cAAc,EAAE,CAE/C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lint/rules/op/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAMvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;CACrE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,GAAE,kBAAuB,GAAG,cAAc,EAAE,CAE5E"}

package/dist/lint/rules/op/ops014-converge-rule-refusals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ops014-converge-rule-refusals.d.ts","sourceRoot":"","sources":["../../../../src/lint/rules/op/ops014-converge-rule-refusals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kBAAkB,CAAC;AAuB9F,eAAO,MAAM,MAAM,EAAE,cAuGpB,CAAC"}
+{"version":3,"file":"ops014-converge-rule-refusals.d.ts","sourceRoot":"","sources":["../../../../src/lint/rules/op/ops014-converge-rule-refusals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kBAAkB,CAAC;AA0B9F,eAAO,MAAM,MAAM,EAAE,cAwGpB,CAAC"}

package/dist/lint/rules/op/sys010-key-over-plain-http.d.ts

@@ -0,0 +1,29 @@
+/**
+ * SYS010: a `decide` backend sends its key over plain HTTP (#2740, core's
+ * since #2828).
+ *
+ * A backend in `decide.backends` in chant.config, or in a `decide` step's own
+ * `backends`, may have a key and an `http://` URL. The bearer key then crosses
+ * the network in clear text. A loopback address (127.0.0.1, ::1, localhost)
+ * is exempt, since that is where a local server such as `von serve` or the
+ * stub runs, and where a broker that is itself the endpoint listens.
+ *
+ * The steps are read off the Op entities, which covers a step written with
+ * the `decide` builder and one written with `activity("decide", ...)`. The
+ * configured backends are not entities: `chant build` and `chant lint` read
+ * them from the project's config and hand them to {@link sys010Check}. The id
+ * keeps the SYS prefix it had in the systemone lexicon.
+ */
+import type { PostSynthCheck } from "../../post-synth.js";
+import type { DecideBackend } from "../../../op/decide-config.js";
+/** The host of an http:// URL that is not loopback, or undefined. */
+export declare function plainRemoteHost(url: unknown): string | undefined;
+/**
+ * SYS010 over the Op entities and, when given, the backends configured in
+ * `decide.backends`. A configured backend's diagnostic names it as the entity
+ * `decide.backends.<name>`.
+ */
+export declare function sys010Check(configured?: Record<string, Pick<DecideBackend, "url" | "key">>): PostSynthCheck;
+/** SYS010 over the Op entities alone, with no configured backends. */
+export declare const sys010: PostSynthCheck;
+//# sourceMappingURL=sys010-key-over-plain-http.d.ts.map

package/dist/lint/rules/op/sys010-key-over-plain-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sys010-key-over-plain-http.d.ts","sourceRoot":"","sources":["../../../../src/lint/rules/op/sys010-key-over-plain-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kBAAkB,CAAC;AAE9F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAgB/D,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAUhE;AAID;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,cAAc,CAyC3G;AAED,sEAAsE;AACtE,eAAO,MAAM,MAAM,EAAE,cAA8B,CAAC"}

package/dist/lint/rules/sys001-no-literal-key.d.ts

@@ -0,0 +1,3 @@
+import type { LintRule } from "../rule.js";
+export declare const noLiteralKeyRule: LintRule;
+//# sourceMappingURL=sys001-no-literal-key.d.ts.map

package/dist/lint/rules/sys001-no-literal-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sys001-no-literal-key.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/sys001-no-literal-key.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,SAAS,CAAC;AAgCrE,eAAO,MAAM,gBAAgB,EAAE,QAiC9B,CAAC"}

package/dist/op/__fixtures__/decide-stub-backend.d.ts

@@ -0,0 +1,53 @@
+/**
+ * A stub `POST /v1/systemone` server for tests of the `decide` activity
+ * (`@intentius/chant/op/__fixtures__/decide-stub-backend`): a real HTTP server on
+ * 127.0.0.1 that checks a request the way a Jev-compatible server would and
+ * answers with what the test scripts. No model runs.
+ *
+ * ```ts
+ * const stub = await startStubBackend({ key: "k", answers: { slice_tier: { type: "choice", choice: "large", probabilities: {...}, confidence: 0.9 } } });
+ * // decide.backends, or a decide step's backends: { systemone: { url: stub.url, key: { env: "STUB_KEY" } } }
+ * await stub.close();
+ * ```
+ *
+ * It answers 401 when a key is set and the request's bearer differs, 422 when
+ * the body is not a request in the wire format, and `status` when the test
+ * forces one (429 or 529, say). Every request it read is kept in `requests`.
+ *
+ * It lives under `__fixtures__` because it listens on a port, and no module
+ * chant runs does (#2657, `test/no-listener.test.ts`): only tests start it.
+ */
+import type { WireAnswer } from "../../workspace/points.js";
+import { type BackendRequest } from "../decide-backend.js";
+export interface StubQuestion {
+    name: string;
+    type: string;
+    instructions: string;
+    criteria: Record<string, string> | string[];
+}
+export interface StubBackendOptions {
+    /** The bearer key the stub requires. Without it, any request is taken. */
+    key?: string;
+    /** The model id the response reports. Defaults to the id the request sent. */
+    model?: string;
+    /** The answer to a question, by question name, or computed from the question. Defaults to {@link defaultAnswer}. */
+    answers?: Record<string, WireAnswer> | ((question: StubQuestion, request: BackendRequest) => WireAnswer);
+    /** Answer every request with this status and no answers. */
+    status?: number;
+}
+export interface StubBackend {
+    /** The base URL, without `/v1/systemone`. */
+    url: string;
+    /** Each request body the stub read, in order. */
+    requests: BackendRequest[];
+    /** The Authorization header of each request, or null. */
+    authorizations: (string | null)[];
+    close(): Promise<void>;
+}
+/** A confident answer of the question's own type: true, the first option, or the last level. */
+export declare function defaultAnswer(question: StubQuestion): WireAnswer;
+/** Why a body is not a request in the wire format, or null when it is one. */
+export declare function requestProblem(body: unknown): string | null;
+/** Start the stub on a free port on 127.0.0.1. */
+export declare function startStubBackend(opts?: StubBackendOptions): Promise<StubBackend>;
+//# sourceMappingURL=decide-stub-backend.d.ts.map

package/dist/op/__fixtures__/decide-stub-backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decide-stub-backend.d.ts","sourceRoot":"","sources":["../../../src/op/__fixtures__/decide-stub-backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oHAAoH;IACpH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,KAAK,UAAU,CAAC,CAAC;IACzG,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,yDAAyD;IACzD,cAAc,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,QAAQ,EAAE,YAAY,GAAG,UAAU,CAchE;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAoB3D;AAaD,kDAAkD;AAClD,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,CAqC1F"}

package/dist/op/activities/activity-contracts.d.ts

@@ -48,10 +48,17 @@ export declare const shellCmdContract: import("../index.js").ActivityContract<{
     env?: Record<string, string> | undefined;
     cwd?: string | undefined;
     okExit?: number[] | undefined;
+    gatedExit?: number | undefined;
+    gate?: {
+        op: string;
+        gate: string;
+    } | undefined;
+    json?: boolean | undefined;
 }, {
     stdout: string;
     stderr: string;
     exitCode: number;
+    json?: unknown;
 }>;
 export declare const httpCheckContract: import("../index.js").ActivityContract<{
     url: string;
@@ -117,7 +124,7 @@ export declare const behaviourFindingContract: import("../index.js").ActivityCon
 export declare const proposeWorkspaceUpgradeContract: import("../index.js").ActivityContract<{
     scope?: string | undefined;
     to?: string | undefined;
-    mode?: "report" | "pull-request" | "branch" | undefined;
+    mode?: "report" | "branch" | "pull-request" | undefined;
     branch?: string | undefined;
     base?: string | undefined;
     remote?: string | undefined;
@@ -125,7 +132,7 @@ export declare const proposeWorkspaceUpgradeContract: import("../index.js").Acti
     cwd?: string | undefined;
 }, {
     scope: string;
-    mode: "report" | "pull-request" | "branch";
+    mode: "report" | "branch" | "pull-request";
     changed: boolean;
     proposed: boolean;
     checksOk: boolean;
@@ -140,4 +147,198 @@ export declare const proposeWorkspaceUpgradeContract: import("../index.js").Acti
     pushed?: boolean | undefined;
     prUrl?: string | undefined;
 }>;
+/**
+ * The forward coverage check over an Op's own diff (#2773). `args` mirrors
+ * `ChangeCoverageArgs`. `returns` names what a step reads: whether the check
+ * passed, the range and work item checked, and each finding with the
+ * `triage` a work item seeded from it takes as its `source`.
+ */
+export declare const changeCoverageContract: import("../index.js").ActivityContract<{
+    cwd?: string | undefined;
+    range?: string | undefined;
+    work?: string | undefined;
+    severity?: "off" | "warn" | "fail" | undefined;
+}, {
+    ok: boolean;
+    range: {
+        spec: string;
+        base: string;
+        head: string;
+    };
+    work: string | null;
+    severity: "off" | "warn" | "fail";
+    findings: {
+        code: "change-uncovered" | "change-out-of-scope";
+        path: string;
+        message: string;
+        severity: "warn" | "fail";
+        records: string[];
+        triage: {
+            finding: "change-uncovered" | "change-out-of-scope";
+            region: string;
+        };
+    }[];
+    summary: {
+        paths: number;
+        covered: number;
+        uncovered: number;
+        outOfScope: number;
+        ignored: number;
+        records: number;
+    };
+}>;
+/**
+ * Evidence for an acceptance criterion, under the run's work lease (#2772).
+ * `lease` is the run's lease, a reference the builder fills in, so it is not
+ * checked here. `returns` names what a step reads: the item, the record's
+ * path, the entry appended and the criteria counted with it.
+ */
+export declare const workEvidenceContract: import("../index.js").ActivityContract<{
+    lease: unknown;
+    criterion: string;
+    result: "fail" | "pass";
+    title: string;
+    url?: string | undefined;
+    path?: string | undefined;
+    kind?: string | undefined;
+    cwd?: string | undefined;
+}, {
+    item: string;
+    path: string;
+    evidence: Record<string, unknown>;
+    acceptance: {
+        met: number;
+        total: number;
+        criteria: {
+            id: string;
+            verification: string;
+            met: boolean;
+        }[];
+    };
+}>;
+/**
+ * The source-release activities (#2782, ./source-release.ts). A release Op
+ * reads `archive.out.digest` into its plan, `plan.out.digest` into its gate
+ * and its ship step, and `plan.out.file` into its record step.
+ */
+export declare const sourceArchiveContract: import("../index.js").ActivityContract<{
+    path: string;
+    ref?: string | undefined;
+    out?: string | undefined;
+    cwd?: string | undefined;
+}, {
+    digest: string;
+    archive: string;
+    commit: string;
+    dir: string;
+    files: number;
+    bytes: number;
+}>;
+export declare const releasePlanContract: import("../index.js").ActivityContract<{
+    component: string;
+    env: string;
+    gitSha: string;
+    content: Record<string, unknown>;
+    dir?: string | undefined;
+    cwd?: string | undefined;
+}, {
+    digest: string;
+    file: string;
+    gitSha: string;
+}>;
+export declare const releaseRecordContract: import("../index.js").ActivityContract<{
+    plan: string;
+    digest?: string | undefined;
+    approval?: {
+        op: string;
+        gate: string;
+    } | undefined;
+    actor?: string | undefined;
+    runId?: string | undefined;
+    cwd?: string | undefined;
+}, {
+    recorded: boolean;
+    digest: string;
+    env: string;
+    component: string;
+    approver: string | null;
+}>;
+export declare const decideContract: import("../index.js").ActivityContract<{
+    point: string;
+    inputs?: Record<string, unknown> | undefined;
+    read?: Record<string, string> | undefined;
+    subject?: string | undefined;
+    kind?: string | undefined;
+    cwd?: string | undefined;
+    backends?: Record<string, {
+        url: string;
+        key?: {
+            env: string;
+        } | {
+            capability: string;
+            member?: string | undefined;
+            env?: string | undefined;
+        } | undefined;
+        timeoutMs?: number | undefined;
+    }> | undefined;
+    dryRun?: boolean | undefined;
+}, {
+    id: string;
+    path: string;
+    state: "escalated" | "proposed" | "answered";
+    open: boolean;
+    answer: string | boolean | null;
+    decider: string;
+    model: string | null;
+    backend: string | null;
+    confidence: number | null;
+    threshold: number | null;
+    answeredBy: string[];
+    escalations: {
+        [x: string]: unknown;
+        kind: "model" | "table";
+        reason: string;
+    }[];
+    missing: string[];
+}>;
+/**
+ * The rollback activities for a source release (#2800, ./source-rollback.ts).
+ * A rollback Op reads `plan.out.digest` into its gate, `plan.out.to` and the
+ * archive fields into the step that restores the Machine, and
+ * `plan.out.file` into its record step.
+ */
+export declare const releaseRollbackPlanContract: import("../index.js").ActivityContract<{
+    component: string;
+    env: string;
+    to?: string | undefined;
+    path?: string | undefined;
+    dir?: string | undefined;
+    cwd?: string | undefined;
+}, {
+    digest: string;
+    file: string;
+    to: string;
+    from: string;
+    gitSha: string;
+    archive: string;
+    archiveDigest: string;
+    dir: string;
+}>;
+export declare const releaseRollbackRecordContract: import("../index.js").ActivityContract<{
+    plan: string;
+    digest?: string | undefined;
+    approval?: {
+        op: string;
+        gate: string;
+    } | undefined;
+    actor?: string | undefined;
+    runId?: string | undefined;
+    cwd?: string | undefined;
+}, {
+    recorded: boolean;
+    digest: string;
+    env: string;
+    component: string;
+    approver: string | null;
+}>;
 //# sourceMappingURL=activity-contracts.d.ts.map

package/dist/op/activities/activity-contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"activity-contracts.d.ts","sourceRoot":"","sources":["../../../src/op/activities/activity-contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,eAAO,MAAM,yBAAyB;;SAGrC,CAAC;AAEF,eAAO,MAAM,qBAAqB;;;;;;;EAIjC,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;EAS5B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;;;;;EAgB7B,CAAC;AAEF,eAAO,MAAM,qBAAqB;;SAGjC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;EAUpC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;EAuBpC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;EA6B3C,CAAC"}
+{"version":3,"file":"activity-contracts.d.ts","sourceRoot":"","sources":["../../../src/op/activities/activity-contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,eAAO,MAAM,yBAAyB;;SAGrC,CAAC;AAEF,eAAO,MAAM,qBAAqB;;;;;;;EAIjC,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;EAe5B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;;;;;EAgB7B,CAAC;AAEF,eAAO,MAAM,qBAAqB;;SAGjC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;EAUpC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;EAuBpC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;EA6B3C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgClC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;EAkBhC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAIjC,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;;;;;EAW/B,CAAC;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;EAWjC,CAAC;AAUF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4B1B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;EAoBvC,CAAC;AAEF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;EAWzC,CAAC"}

package/dist/op/activities/apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/op/activities/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAIH,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/D,+CAA+C;AAC/C,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,GAAG,KAAK,CAAC;AAE7F;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,YAAY,GAAG,OAAO,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;;gFAM4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ;;+EAE2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC;;gCAE4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf;;yBAEqB;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB;oEACgE;IAChE,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,EACD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,EACD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,EACD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,EACD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACjD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAA;CAAE,CAAC,CAAC;AAEjG;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC3B,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAgN1E;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAYzD;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE,UAAU,EACpB,YAAY,CAAC,EAAE,YAAY,EAC3B,QAAQ,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAuB,EACxF,UAAU,CAAC,EAAE,UAAU,EACvB,UAAU,CAAC,EAAE,UAAU,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,iBAAiB,CAAC,CA0F5B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAE9D;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,MAAM,EAAE,WAAW,CAAC;IACpB,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,+BAA+B;AAC/B,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;sFACkF;IAClF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,mBAAmB,EACzB,MAAM,CAAC,EAAE,WAAW,EACpB,QAAQ,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,qBAAqB,CAAC,CA0BhC"}
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/op/activities/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAIH,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/D,+CAA+C;AAC/C,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,GAAG,KAAK,CAAC;AAE7F;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,YAAY,GAAG,OAAO,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;;gFAM4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ;;+EAE2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC;;gCAE4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf;;yBAEqB;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB;oEACgE;IAChE,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,EACD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,EACD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,EACD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,EACD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACjD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAA;CAAE,CAAC,CAAC;AAEjG;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC3B,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAgN1E;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAYzD;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE,UAAU,EACpB,YAAY,CAAC,EAAE,YAAY,EAC3B,QAAQ,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAuB,EACxF,UAAU,CAAC,EAAE,UAAU,EACvB,UAAU,CAAC,EAAE,UAAU,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,iBAAiB,CAAC,CA0F5B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAE9D;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,MAAM,EAAE,WAAW,CAAC;IACpB,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,+BAA+B;AAC/B,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;sFACkF;IAClF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,mBAAmB,EACzB,MAAM,CAAC,EAAE,WAAW,EACpB,QAAQ,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,qBAAqB,CAAC,CA0BhC"}

package/dist/op/activities/change-coverage.d.ts

@@ -0,0 +1,44 @@
+/**
+ * changeCoverage — the forward coverage check (#2773) as an Op activity, for
+ * an Op that changes the checkout (#2748) to run on its own diff.
+ *
+ * Such an Op's leased steps work in a worktree of their own on
+ * `chant/work/[<member>/]<item>`. Given that worktree as `cwd`
+ * (`workLeaseOutput("worktree")`) and no `range`, the activity checks the
+ * commits the branch holds beyond the main worktree's HEAD, with the branch's
+ * item as the work item in hand, exactly as `chant workspace check --changes
+ * <base>..HEAD --work <item>` would. A `range` or `work` given replaces what
+ * the branch says.
+ *
+ * The step fails when the check's severity is `fail` and it has a finding,
+ * or when the check can't run; otherwise it returns the document's findings
+ * and summary for later steps. The workspace code loads on first call, so
+ * importing core's activities loads nothing under `workspace/` (#2525 rule 5).
+ */
+import type { ChangeFinding, ChangesDocument } from "../../workspace/changes.js";
+export interface ChangeCoverageArgs {
+    /** The checkout to check: the Op's worktree. Default: the working directory. */
+    cwd?: string;
+    /** `<base>..<head>`, `<base>...<head>` or `<base>`. Default: the work branch's own commits. */
+    range?: string;
+    /** The work item in hand. Default: the work branch's item. */
+    work?: string;
+    /** In place of the declaration's `changes.severity`. */
+    severity?: "off" | "warn" | "fail";
+}
+export interface ChangeCoverageResult {
+    ok: boolean;
+    range: {
+        spec: string;
+        base: string;
+        head: string;
+    };
+    work: string | null;
+    severity: "off" | "warn" | "fail";
+    findings: Pick<ChangeFinding, "code" | "path" | "message" | "severity" | "records" | "triage">[];
+    summary: Exclude<ChangesDocument, {
+        error: unknown;
+    }>["summary"];
+}
+export declare function changeCoverage(args?: ChangeCoverageArgs): Promise<ChangeCoverageResult>;
+//# sourceMappingURL=change-coverage.d.ts.map

package/dist/op/activities/change-coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-coverage.d.ts","sourceRoot":"","sources":["../../../src/op/activities/change-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9E,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC,EAAE,CAAC;IACjG,OAAO,EAAE,OAAO,CAAC,eAAe,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAAC;CAClE;AAED,wBAAsB,cAAc,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAmBjG"}

package/dist/op/activities/converge.d.ts

@@ -1,6 +1,6 @@
 import { type ConvergeRule } from "../converge-rule.js";
 import { type OpVerbClass } from "../op-verb-class.js";
-import { type ConvergeSymptom } from "../../lifecycle/symptoms.js";
+import { type ConvergeSymptom, type ObservedResource, type ResourceSymptom } from "../../lifecycle/symptoms.js";
 import { sanitizeLedgerText, type ConvergeRuleOutcome, type ConvergeTickRecord } from "../../lifecycle/converge-ledger.js";
 /** A `ConvergeRule<ConvergeSymptom>`, restated with `S = ConvergeSymptom` fixed — the JSON shape `ConvergeOp` bakes into the Op's `convergeTick` step args. */
 export type SerializedConvergeRule = ConvergeRule<ConvergeSymptom>;
@@ -32,6 +32,14 @@ export interface ConvergeTickArgs {
      * (this activity re-derives its own symptom independently).
      */
     preflightDrift?: boolean;
+    /**
+     * The observer step's result, for a ConvergeOp declared with `observe`
+     * (#2778): a {@link ResourceObservation}, or a `shell()` result whose
+     * stdout is one. Present, the tick observes nothing itself: it evaluates
+     * `rules` once per reported resource, against a `ResourceSymptom`, and
+     * dispatches a fired `run()` for that resource.
+     */
+    observed?: unknown;
 }
 export interface ConvergeTickResult {
     /** The ledger record's tick id (#2027) — what a caller correlates this tick's outcomes, gate facts and remediations against. */
@@ -132,5 +140,20 @@ export interface ConvergeTickPlan {
     outcomes: ConvergeRuleOutcome[];
 }
 export declare function planConvergeTick(symptom: ConvergeSymptom, rules: SerializedConvergeRule[], priorRecords: ConvergeTickRecord[], dial: ConvergeTickArgs["dial"], budget: number): ConvergeTickPlan;
+/**
+ * How many consecutive most-recent ticks of `op` fired `ruleId` for
+ * `resource`. A rule of a ConvergeOp with an observer step fires once per
+ * resource, so its flap damping is counted per resource: a rule that
+ * restarts `app` on one tick and `hud` on the next is not flapping.
+ */
+export declare function consecutiveResourceFires(records: ConvergeTickRecord[], op: string, ruleId: string, resource: string): number;
+/**
+ * The pure planning core of a resource tick (#2778): every rule against every
+ * observed resource, in authored order within each resource. The rules of
+ * {@link planConvergeTick} hold per resource: `unknown` never remediates, a
+ * `report()` never dispatches, the dial decides whether a `run()` may, and
+ * `budget` bounds the dispatches across the whole tick.
+ */
+export declare function planResourceTick(env: string, resources: ObservedResource[], rules: ConvergeRule<ResourceSymptom>[], priorRecords: ConvergeTickRecord[], op: string, dial: ConvergeTickArgs["dial"], budget: number): ConvergeTickPlan;
 export declare function convergeTick(args: ConvergeTickArgs, signal?: AbortSignal): Promise<ConvergeTickResult>;
 //# sourceMappingURL=converge.d.ts.map

package/dist/op/activities/converge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"converge.d.ts","sourceRoot":"","sources":["../../../src/op/activities/converge.ts"],"names":[],"mappings":"AAkCA,OAAO,EAEL,KAAK,YAAY,EAGlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEzE,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAKL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,iCAAiC,CAAC;AAQzC,+JAA+J;AAC/J,MAAM,MAAM,sBAAsB,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;;;;;OAWG;IACH,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC;IACxC,mHAAmH;IACnH,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,gIAAgI;IAChI,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,kGAAkG;IAClG,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;;;;;;OAYG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,2BAAqB,CAAC;AA0BlD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAerF;AA0CD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,CAKtH;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAC9B,SAAS,EAAE,WAAW,GAAG,SAAS,GACjC,mBAAmB,CAWrB;AAaD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,sBAAsB,EAAE,EAC/B,YAAY,EAAE,kBAAkB,EAAE,EAClC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAC9B,MAAM,EAAE,MAAM,GACb,gBAAgB,CAmDlB;AAoBD,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuG5G"}
+{"version":3,"file":"converge.d.ts","sourceRoot":"","sources":["../../../src/op/activities/converge.ts"],"names":[],"mappings":"AAkCA,OAAO,EAEL,KAAK,YAAY,EAGlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEzE,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAKL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,iCAAiC,CAAC;AAQzC,+JAA+J;AAC/J,MAAM,MAAM,sBAAsB,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;;;;;OAWG;IACH,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC;IACxC,mHAAmH;IACnH,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,gIAAgI;IAChI,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,kGAAkG;IAClG,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;;;;;;OAYG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,2BAAqB,CAAC;AA0BlD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAerF;AA2CD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,CAKtH;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAC9B,SAAS,EAAE,WAAW,GAAG,SAAS,GACjC,mBAAmB,CAWrB;AAaD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,sBAAsB,EAAE,EAC/B,YAAY,EAAE,kBAAkB,EAAE,EAClC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAC9B,MAAM,EAAE,MAAM,GACb,gBAAgB,CAmDlB;AAsBD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQ5H;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,gBAAgB,EAAE,EAC7B,KAAK,EAAE,YAAY,CAAC,eAAe,CAAC,EAAE,EACtC,YAAY,EAAE,kBAAkB,EAAE,EAClC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAC9B,MAAM,EAAE,MAAM,GACb,gBAAgB,CAiDlB;AAuHD,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiE5G"}

package/dist/op/activities/decide.d.ts

@@ -0,0 +1,107 @@
+/**
+ * The `decide` Op activity (ws-058, #2740): ask a decision point for one set
+ * of inputs, calling the backend its model decider names, and record the
+ * answer. Core's own since #2828, next to the decision points it asks; the
+ * typed step builder is `decide` in `../builders.ts`.
+ *
+ * The point is asked through core's `askPointInRun` (#2749), which writes the
+ * answer with `askPoint` (`points ask`, #2739), the same path `chant workspace
+ * points ask --response` takes. So the chain, the threshold, a model's answer
+ * being `proposed` and never `answered`, the reuse of an answer the same point,
+ * declaration and inputs already have, the escalation to people, and what an
+ * open question does to the run all come from core:
+ *
+ * - an answered question (a table row, or a person) is the step's result, and
+ *   the Op goes on;
+ * - an escalated or proposed question is open, so the step throws core's
+ *   `PointWait` and the run ends `waiting`. A person answers with `points
+ *   answer` or through hud, and the next run reads the answer from the record.
+ *
+ * This activity adds three things: reading the inputs through the read
+ * contract (`../decide-read-inputs.ts`), the call to a `POST /v1/systemone`
+ * backend (`../decide-backend.ts`), and refusing a misconfigured backend before
+ * anything is asked or written. The backends are the step's own `backends`, or
+ * `decide.backends` in chant.config (`../decide-config.ts`).
+ *
+ * With the backend unreachable, the point's `unreachable` decides: `escalate`
+ * (the default) records the question open for people with the reason, and
+ * `fail` writes nothing and fails the step.
+ *
+ * In a steward's turn the model call goes through the broker (#2749): core
+ * makes it only through a capability the steward declares, and a backend whose
+ * key is an environment variable is not called, since that key would be a
+ * credential the steward holds.
+ *
+ * chant's reads never call a model (ws-052): this runs only as an Op step.
+ *
+ * The workspace code, the client and the read-contract reads load on first
+ * call, so importing core's activities loads nothing under `workspace/`
+ * (#2525 rule 5).
+ */
+import type { Escalation } from "../../workspace/points.js";
+import { type DecideBackend } from "../decide-config.js";
+import type { BackendAskOptions, BackendResponse } from "../decide-backend.js";
+export interface DecideArgs {
+    /** The point's name, as its points file declares it. */
+    point: string;
+    /** Input values by the point's input names, such as `{ "work-item.fits_small": false }`. They win over values read with `read`. */
+    inputs?: Record<string, unknown>;
+    /** What to read through the read contract, by output: `{ "work-item": "W-002" }` reads work item W-002 for every `work-item.*` input. */
+    read?: Record<string, string>;
+    /** What the question is about, such as a work item's id. Written to the answer's `constrains`. */
+    subject?: string;
+    /** The answer kind file, or a declared kind's name. Without it, the declared answer kind whose points file declares the point. */
+    kind?: string;
+    /** Where the workspace is found. Defaults to the working directory. */
+    cwd?: string;
+    /** Backends by name, in place of `decide.backends` in chant.config. */
+    backends?: Record<string, DecideBackend>;
+    /** Ask, but write nothing, and return the question whatever its state: an open one does not stop the run. */
+    dryRun?: boolean;
+}
+export interface DecideResult {
+    /** The answer record's id: the point's name and the first 12 hex digits of the inputs hash. */
+    id: string;
+    /** The record file, from the repository root. */
+    path: string;
+    /** `answered`, unless this was a dry run, which returns a question in any state. */
+    state: "escalated" | "proposed" | "answered";
+    open: boolean;
+    /** The answer, or null while the question is escalated. */
+    answer: string | boolean | null;
+    /** The decider that gave the recorded state: table, model (a proposal, or one a person confirmed) or quorum. */
+    decider: string;
+    /** For a model's answer: the pinned model id, the backend, its confidence and the threshold it met. */
+    model: string | null;
+    backend: string | null;
+    confidence: number | null;
+    threshold: number | null;
+    /** The people who answered, when people did. */
+    answeredBy: string[];
+    /** Each decider that was asked and did not answer, and why. */
+    escalations: Escalation[];
+    /** Declared inputs the read value did not have. */
+    missing: string[];
+}
+/** Seams a test swaps. */
+export interface DecideDeps {
+    /** The HTTP call, in place of the global one. */
+    transport?: BackendAskOptions["transport"];
+    env?: NodeJS.ProcessEnv;
+    /** The date written as asked_on, YYYY-MM-DD. */
+    on?: string;
+    onResponse?: (backend: string, response: BackendResponse) => void;
+}
+/** The step failed: what core refused, or a configuration this activity refuses. */
+export declare class DecideError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/** Run the activity with its seams. {@link decide} is this with the real ones. */
+export declare function runDecide(args: DecideArgs, deps?: DecideDeps, signal?: AbortSignal): Promise<DecideResult>;
+/**
+ * Ask a decision point and record the answer. The Op activity: an answered
+ * question is the step's result, and an open one stops the run `waiting`.
+ */
+export declare function decide(args: DecideArgs, signal?: AbortSignal): Promise<DecideResult>;
+//# sourceMappingURL=decide.d.ts.map

package/dist/op/activities/decide.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decide.d.ts","sourceRoot":"","sources":["../../../src/op/activities/decide.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,mIAAmI;IACnI,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,yIAAyI;IACzI,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,kGAAkG;IAClG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kIAAkI;IAClI,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACzC,6GAA6G;IAC7G,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,+FAA+F;IAC/F,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;IAC7C,IAAI,EAAE,OAAO,CAAC;IACd,2DAA2D;IAC3D,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAChC,gHAAgH;IAChH,OAAO,EAAE,MAAM,CAAC;IAChB,uGAAuG;IACvG,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gDAAgD;IAChD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,+DAA+D;IAC/D,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,0BAA0B;AAC1B,MAAM,WAAW,UAAU;IACzB,iDAAiD;IACjD,SAAS,CAAC,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gDAAgD;IAChD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,KAAK,IAAI,CAAC;CACnE;AAED,oFAAoF;AACpF,qBAAa,WAAY,SAAQ,KAAK;IAElC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKlB;AAsDD,kFAAkF;AAClF,wBAAsB,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAE,UAAe,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CA0FpH;AAED;;;GAGG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAE1F"}