@jevitate/cli 0.23.0 → 0.24.0

package/dist/bin.js

@@ -10,16 +10,36 @@ import { mkdir, stat } from "node:fs/promises";
 
 // ../domain/dist/content-hash.js
 import { createHash } from "node:crypto";
-function canonical(value) {
+function compareUtf16CodeUnits(a, b2) {
+  const length = Math.min(a.length, b2.length);
+  for (let index = 0; index < length; index += 1) {
+    const difference = a.charCodeAt(index) - b2.charCodeAt(index);
+    if (difference !== 0)
+      return difference < 0 ? -1 : 1;
+  }
+  return a.length === b2.length ? 0 : a.length < b2.length ? -1 : 1;
+}
+function canonicalJson(value) {
   if (value === null || typeof value !== "object")
     return JSON.stringify(value);
   if (Array.isArray(value))
-    return `[${value.map(canonical).join(",")}]`;
+    return `[${value.map(canonicalJson).join(",")}]`;
+  const entries = Object.entries(value).sort(([a], [b2]) => compareUtf16CodeUnits(a, b2));
+  return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`).join(",")}}`;
+}
+function legacyCanonicalJson(value) {
+  if (value === null || typeof value !== "object")
+    return JSON.stringify(value);
+  if (Array.isArray(value))
+    return `[${value.map(legacyCanonicalJson).join(",")}]`;
   const entries = Object.entries(value).sort(([a], [b2]) => a.localeCompare(b2));
-  return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonical(v)}`).join(",")}}`;
+  return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${legacyCanonicalJson(v)}`).join(",")}}`;
 }
 function contentHash(value) {
-  return createHash("sha256").update(canonical(value)).digest("hex");
+  return createHash("sha256").update(canonicalJson(value)).digest("hex");
+}
+function legacyContentHash(value) {
+  return createHash("sha256").update(legacyCanonicalJson(value)).digest("hex");
 }
 function sha256(text2) {
   return createHash("sha256").update(text2, "utf8").digest("hex");
@@ -33945,18 +33965,18 @@ function stepIdsOf(rec) {
         ids.add(s3.stepId);
   return ids;
 }
-function canonicalJson(v) {
+function canonicalJson2(v) {
   if (Array.isArray(v))
-    return `[${v.map(canonicalJson).join(",")}]`;
+    return `[${v.map(canonicalJson2).join(",")}]`;
   if (v !== null && typeof v === "object") {
     const o = v;
-    return `{${Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => `${JSON.stringify(k)}:${canonicalJson(o[k])}`).join(",")}}`;
+    return `{${Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => `${JSON.stringify(k)}:${canonicalJson2(o[k])}`).join(",")}}`;
   }
   return JSON.stringify(v) ?? "null";
 }
 function seededRandom(rec) {
   let h = 2166136261;
-  const text2 = canonicalJson(rec);
+  const text2 = canonicalJson2(rec);
   for (let i = 0; i < text2.length; i++) {
     h ^= text2.charCodeAt(i);
     h = Math.imul(h, 16777619) >>> 0;
@@ -42172,6 +42192,7 @@ async function judgeGoalCompletion(judge, input2) {
       ...input2.signInFacts === void 0 ? [] : [`SIGN-IN (observed by code, trusted): ${input2.signInFacts}`],
       ...input2.saveFacts === void 0 ? [] : [`SAVE (observed by code, trusted): ${input2.saveFacts}`],
       ...input2.writeFacts === void 0 ? [] : [`WRITES (observed by code, trusted): ${input2.writeFacts}`],
+      ...input2.readBackFacts === void 0 ? [] : [`READ-BACK (observed by code, trusted): ${input2.readBackFacts}`],
       ...input2.pageStatus === void 0 || input2.pageStatus === "" ? [] : [`PAGE STATUS (untrusted): ${input2.pageStatus}`],
       `VISIBLE PAGE TEXT (untrusted): ${input2.pageText.replace(/\s+/g, " ").slice(0, GOAL_TEXT_CHARS)}`,
       ...input2.fieldValues === void 0 || input2.fieldValues.length === 0 ? [] : [
@@ -45607,6 +45628,7 @@ var OBSERVED_PAGE_CHARS = 2e4;
 var MIN_QUOTE_CHARS = 3;
 var MAX_OBSERVED_FIELDS = 40;
 var OBSERVED_FIELD_CHARS = 500;
+var MAX_READ_BACK_VALUES = 50;
 var MAX_OBSERVED_CONTROLS = 120;
 var HEADING_CHARS = 200;
 function controlFields(controls) {
@@ -45696,6 +45718,21 @@ var ObservedPages = class {
         this.#sourceRoute.set(v, pending.route);
     }
   }
+  /**
+   * #671: values the run typed into a field on one document load. A field holding one shows the run's
+   * own entry, never what the app kept: retyping a sent message into its composer after a reload is
+   * not a read-back.
+   */
+  #typedOn = null;
+  /** #671: the run typed `value` into a field (a message composer too) on document load `document`. */
+  noteTypedOn(value, document2) {
+    const v = fold(redactContext(value, this.secrets).slice(0, OBSERVED_FIELD_CHARS));
+    if (document2 === void 0 || v === "")
+      return;
+    if (this.#typedOn?.document !== document2)
+      this.#typedOn = { document: document2, values: /* @__PURE__ */ new Set() };
+    this.#typedOn.values.add(v);
+  }
   /** #647: the run's sent values (folded) that no page loaded from the server since has shown. */
   unreadWrites() {
     return this.#unread;
@@ -45720,10 +45757,19 @@ var ObservedPages = class {
       this.#sourceRoute.delete(v);
     }
     this.#readBackCount += back.length;
+    for (const v of back)
+      if (this.#readBackValues.length < MAX_READ_BACK_VALUES)
+        this.#readBackValues.push(v);
     return back;
   }
   /** #645: how many sent values a page loaded from the server has shown again. */
   #readBackCount = 0;
+  /** #667: the sent values (folded) read back so far, bounded. */
+  #readBackValues = [];
+  /** #667: the sent values (folded) a page loaded from the server has shown again. */
+  readBackValues() {
+    return this.#readBackValues;
+  }
   /**
    * #645: the app was seen to keep what the run's writes sent — at least one value was read back and
    * none is still unread. Code evidence the page judgment lacks (see `groundDone`).
@@ -45766,7 +45812,9 @@ var ObservedPages = class {
         this.#topNav = nav;
     }
     this.#settleSent(page.text);
-    this.readBack(headings2.document, [page.text, ...kept.map((f2) => f2.value)].join("\n"), url2);
+    const typed = this.#typedOn !== null && this.#typedOn.document === headings2.document ? [...this.#typedOn.values] : [];
+    const appFields = kept.map((f2) => f2.value).filter((value) => !typed.some((t) => fold(value).includes(t)));
+    this.readBack(headings2.document, [page.text, ...appFields].join("\n"), url2);
     if (page.text.trim() === "" && kept.length === 0)
       return;
     const same = (p) => JSON.stringify(p.fields ?? []) === JSON.stringify(page.fields ?? []) && p.heading === page.heading && p.title === page.title && p.status === page.status && JSON.stringify(p.controls ?? []) === JSON.stringify(page.controls ?? []) && JSON.stringify(p.contentLinks ?? []) === JSON.stringify(page.contentLinks ?? []) && p.inventoryIncomplete === page.inventoryIncomplete;
@@ -46431,7 +46479,7 @@ var ABSENCE_GOAL = /\bwhether\b|\b(?:is|are) there\b|\bthere (?:is|are) (?:no|no
 function goalAdmitsAbsence(goal) {
   return ABSENCE_GOAL.test(goal);
 }
-var WRITE_GOAL = /(?:^\s*|[.!?;:]\s+|\b(?:then|and|please)\s+)(?:record|save|create|add|invite|submit|send|post|publish|register|book|schedule)\b/i;
+var WRITE_GOAL = /(?:^\s*|[.!?;:]\s+|\b(?:then|and|please)\s+)(?:record|save|create|add|invite|submit|send|post|publish|register|book|schedule|import|upload|update|change|edit|rename|delete|remove)\b/i;
 function goalAsksToWrite(goal) {
   return WRITE_GOAL.test(goal);
 }
@@ -48275,6 +48323,7 @@ function newStep(ctx, input2) {
         if (proposedDone)
           writes = jobWritesOf(ctx);
         const writeFacts = writes !== void 0 && saved === null && writesAllSucceeded(writes) ? writes.facts : void 0;
+        const readBackFacts = ctx.observed.readBackConfirmed() ? readBackFactsOf(ctx.observed.readBackValues(), pageText) : void 0;
         const judged = await judgeGoalCompletion(cfg.judge, {
           goal: cfg.goal,
           url: snap.url,
@@ -48285,6 +48334,7 @@ function newStep(ctx, input2) {
           ...signIn === null ? {} : { signInFacts: signIn.facts },
           ...saved === null ? {} : { saveFacts: saved.facts },
           ...writeFacts === void 0 ? {} : { writeFacts },
+          ...readBackFacts === void 0 ? {} : { readBackFacts },
           fieldValues: fieldValuesOf(snap.controls, ctx.isBound)
         }).catch(() => ({ goalMet: null, goalIsSignIn: null, goalIsSave: null, goalIsWrites: null }));
         goalMet = judged.goalMet;
@@ -48315,6 +48365,11 @@ function newStep(ctx, input2) {
   };
   return { ...input2, record: record2, signIn, pendingNote, acceptedBy, groundGoal };
 }
+function readBackFactsOf(values2, pageText) {
+  const text2 = pageText.toLowerCase();
+  const shown2 = values2.filter((v) => text2.includes(v)).length;
+  return `every value this run's writes sent (${values2.length}) was shown again on a page loaded from the server after the write \u2014 the app kept them; this page shows ${shown2} of them`;
+}
 
 // ../explore/dist/goal-loop/min-effort.js
 function deferEnding(ctx, step, ending) {
@@ -48444,6 +48499,7 @@ async function handleReport(ctx, step) {
 }
 
 // ../explore/dist/goal-loop/handle-done.js
+var NO_WRITE_YET = "no write of this run has succeeded yet \u2014 the goal asks for a change the app must receive: go back and press the control that submits it (Import, Save, Send\u2026)";
 async function unreadWriteHold(ctx, step, outcome) {
   if (outcome.status === "completed" && outcome.verifiedBy === "success-condition")
     return null;
@@ -48535,12 +48591,13 @@ async function handleDone(ctx, step) {
       }
     }
     ctx.doneRejections += 1;
-    ctx.history.push(`done rejected: ${verdict.reason} \u2014 keep working toward the goal`);
-    record2(false, `done rejected (${ctx.doneRejections}/${MAX_DONE_REJECTIONS}): ${verdict.reason}`, {
+    const why = ctx.writeGoal && !ctx.wroteOk ? `${verdict.reason}; ${NO_WRITE_YET}` : verdict.reason;
+    ctx.history.push(`done rejected: ${why} \u2014 keep working toward the goal`);
+    record2(false, `done rejected (${ctx.doneRejections}/${MAX_DONE_REJECTIONS}): ${why}`, {
       ...judgments === void 0 ? {} : { judgments }
     });
     if (ctx.doneRejections >= MAX_DONE_REJECTIONS) {
-      ctx.incomplete = `the model proposed done ${ctx.doneRejections} times, but ${verdict.reason}`;
+      ctx.incomplete = `the model proposed done ${ctx.doneRejections} times, but ${why}`;
       ctx.endedOnRejectedDone = true;
       ctx.stop = "done";
       return "stop";
@@ -48922,6 +48979,7 @@ async function handleCodeTypedField(ctx, step) {
       ctx.valueLog.typed(control.name || control.summary, value);
       ctx.save.noteTyped(control.name || control.summary, value);
       ctx.observed.noteOwnInput(value);
+      ctx.observed.noteTypedOn(value, await documentOf(ctx.page));
       ctx.noteMutation(`type ${control.name}`, control.descriptor, snap.signature, at3, { field: keyOf(control), value });
       ctx.tracker.countAction();
       ctx.cleared(control);
@@ -49484,6 +49542,7 @@ async function handleFill(ctx, step) {
       ctx.typeProbe = { key: keyOf(control), label: quote(control.name || control.summary, 60), at: typedAt, background: typedBackground, state: typedState };
       ctx.recorder.fill(control.descriptor, text2, at3);
       ctx.valueLog.typed(control.name || control.summary, text2);
+      ctx.observed.noteTypedOn(text2, await documentOf(ctx.page));
       if (!ctx.isBound(control) && !isCredentialField(control) && !sendable(control)) {
         ctx.save.noteTyped(control.name || control.summary, text2);
         ctx.observed.noteOwnInput(text2);
@@ -53033,14 +53092,14 @@ function ownAssertion(s3) {
     return { field: "resume", assertion: s3.resume };
   return "expect" in s3 ? { field: "expect", assertion: s3.expect } : null;
 }
-function canonical2(d) {
+function canonical(d) {
   const sort = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? Object.fromEntries(Object.entries(v).sort(([a], [b2]) => a.localeCompare(b2)).map(([k, x]) => [k, sort(x)])) : v;
   return JSON.stringify(sort(d));
 }
 function isOwnTargetVisible(step) {
   if (!("expect" in step) || !("target" in step))
     return false;
-  return step.expect.kind === "visible" && canonical2(step.expect.target) === canonical2(step.target);
+  return step.expect.kind === "visible" && canonical(step.expect.target) === canonical(step.target);
 }
 function isNoClaimExpect(step) {
   if (!("expect" in step))
@@ -54930,10 +54989,10 @@ function bindParams(inputs, record2, request) {
   return params;
 }
 function recordFingerprint(outputs, record2) {
-  const canonical7 = {};
+  const canonical6 = {};
   for (const name of Object.keys(outputs.fields).sort())
-    canonical7[name] = record2[name] ?? null;
-  return `sha256:${createHash5("sha256").update(JSON.stringify(canonical7)).digest("hex")}`;
+    canonical6[name] = record2[name] ?? null;
+  return `sha256:${createHash5("sha256").update(JSON.stringify(canonical6)).digest("hex")}`;
 }
 function extractedNames(journey) {
   const names = /* @__PURE__ */ new Set();
@@ -63059,9 +63118,9 @@ function hostStarvedFailure(failure3, health) {
 }
 
 // src/build-info.generated.ts
-var GENERATED_COMMIT = "ad72163";
-var GENERATED_TREE = "379caf5";
-var GENERATED_BUILT_AT = "2026-10-23T21:02:56.700Z";
+var GENERATED_COMMIT = "e0f6f96";
+var GENERATED_TREE = "d0b472e";
+var GENERATED_BUILT_AT = "2026-10-24T16:37:57.792Z";
 
 // src/version.ts
 import { readFileSync as readFileSync5 } from "node:fs";
@@ -63083,13 +63142,13 @@ function readCliVersion() {
 
 // src/engine.ts
 function bundledCommit() {
-  return true ? "ad72163" : void 0;
+  return true ? "e0f6f96" : void 0;
 }
 function bundledBuiltAt() {
-  return true ? "2026-10-23T21:02:56.700Z" : void 0;
+  return true ? "2026-10-24T16:37:57.792Z" : void 0;
 }
 function bundledTree() {
-  return true ? "379caf5" : void 0;
+  return true ? "d0b472e" : void 0;
 }
 function currentBuildTree() {
   return bundledTree() ?? GENERATED_TREE;
@@ -63732,12 +63791,12 @@ function substituteDeep(v, sub) {
   return v;
 }
 function fixtureSpecHash(spec, hooks) {
-  return sha256(canonical3({ spec: spec ?? null, hooks: hooks ?? null })).slice(0, 16);
+  return sha256(canonical2({ spec: spec ?? null, hooks: hooks ?? null })).slice(0, 16);
 }
-function canonical3(v) {
-  if (Array.isArray(v)) return `[${v.map(canonical3).join(",")}]`;
+function canonical2(v) {
+  if (Array.isArray(v)) return `[${v.map(canonical2).join(",")}]`;
   if (isRecord(v)) {
-    return `{${Object.keys(v).sort().filter((k) => v[k] !== void 0).map((k) => `${JSON.stringify(k)}:${canonical3(v[k])}`).join(",")}}`;
+    return `{${Object.keys(v).sort().filter((k) => v[k] !== void 0).map((k) => `${JSON.stringify(k)}:${canonical2(v[k])}`).join(",")}}`;
   }
   return JSON.stringify(v);
 }
@@ -63859,7 +63918,7 @@ var MissionFixtures = class {
     return redactUrl(redactText(text2, [...this.#opts.secrets ?? [], ...bound2, ...this.secrets()]));
   }
   identity() {
-    return `fx-${sha256(canonical3({ spec: this.#specHash, outputs: this.publicOutputs(), secret: [...this.#secretNames].sort() })).slice(0, 16)}`;
+    return `fx-${sha256(canonical2({ spec: this.#specHash, outputs: this.publicOutputs(), secret: [...this.#secretNames].sort() })).slice(0, 16)}`;
   }
   record() {
     return {
@@ -78957,14 +79016,14 @@ var GitSourceManager = class {
 
 // ../sources/dist/hash.js
 import { createHash as createHash9 } from "node:crypto";
-function canonicalJson2(value) {
+function canonicalJson3(value) {
   if (value === null)
     return "null";
   if (Array.isArray(value))
-    return `[${value.map(canonicalJson2).join(",")}]`;
+    return `[${value.map(canonicalJson3).join(",")}]`;
   if (typeof value === "object") {
     const entries = Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b2]) => a < b2 ? -1 : a > b2 ? 1 : 0);
-    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson2(v)}`).join(",")}}`;
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson3(v)}`).join(",")}}`;
   }
   if (typeof value === "number") {
     if (!Number.isFinite(value))
@@ -78975,7 +79034,7 @@ function canonicalJson2(value) {
 }
 function canonicalJourneyHash(file2) {
   const validated = SharedJourneyFileSchema.parse(file2);
-  const hex3 = createHash9("sha256").update(canonicalJson2(validated), "utf8").digest("hex");
+  const hex3 = createHash9("sha256").update(canonicalJson3(validated), "utf8").digest("hex");
   return `sha256:${hex3}`;
 }
 
@@ -80681,6 +80740,15 @@ function journeyReviewHash(journey) {
   for (const k of BOOKKEEPING) delete metadata[k];
   return contentHash({ metadata, recording: journey.recording });
 }
+function journeyLegacyReviewHash(journey) {
+  const metadata = { ...journey.metadata };
+  for (const k of BOOKKEEPING) delete metadata[k];
+  return legacyContentHash({ metadata, recording: journey.recording });
+}
+function journeyApprovalMatches(journey) {
+  const approved = journey.metadata.approval?.contentHash;
+  return approved !== void 0 && (approved === journeyReviewHash(journey) || approved === journeyLegacyReviewHash(journey));
+}
 function targetOf3(step) {
   if (step.kind === "forEach") return step.items;
   return "target" in step ? step.target : void 0;
@@ -80887,7 +80955,7 @@ function buildChange(journey, hash3, snapshot2, stepIdOnly) {
   const idOnly = stepIdOnly ? { stepIdOnly: true } : {};
   if (snapshot2 === null || snapshot2 === void 0) {
     if (approval !== void 0) {
-      return { kind: "snapshot-missing", approvedHash: approval.contentHash, approvedAt: approval.at, changed: approval.contentHash !== hash3, ...idOnly };
+      return { kind: "snapshot-missing", approvedHash: approval.contentHash, approvedAt: approval.at, changed: !journeyApprovalMatches(journey), ...idOnly };
     }
     return journey.metadata.promoted ? { kind: "no-record" } : { kind: "first-approval" };
   }
@@ -81241,9 +81309,9 @@ var UnknownCatalogItemError = class extends Error {
     return this.kind === "persona" ? "E_UNKNOWN_PERSONA" : "E_UNKNOWN_JOB";
   }
 };
-function statusOf3(approval, hash3) {
+function statusOf3(approval, hash3, legacyHash) {
   if (approval === void 0) return "draft";
-  return approval.contentHash === hash3 ? "approved" : "stale";
+  return approval.contentHash === hash3 || approval.contentHash === legacyHash ? "approved" : "stale";
 }
 async function readJsonFile(path2) {
   const raw = await readFile8(path2, "utf8");
@@ -81308,7 +81376,7 @@ function catalogPersona(p, path2) {
     hasLogin: p.fields.login !== void 0,
     ...approval === void 0 ? {} : { approval },
     contentHash: hash3,
-    status: statusOf3(approval, hash3)
+    status: statusOf3(approval, hash3, personaLegacyContentHash(p.id, p.fields))
   };
 }
 function personaContentHash(id, fields) {
@@ -81316,6 +81384,11 @@ function personaContentHash(id, fields) {
   for (const [k, v] of Object.entries(fields)) if (k !== "approval" && !SESSION_KEYS.has(k)) described[k] = v;
   return contentHash(described);
 }
+function personaLegacyContentHash(id, fields) {
+  const described = { id };
+  for (const [k, v] of Object.entries(fields)) if (k !== "approval" && !SESSION_KEYS.has(k)) described[k] = v;
+  return legacyContentHash(described);
+}
 function jobList(raw, path2) {
   if (Array.isArray(raw)) return raw;
   if (isRecord(raw) && Array.isArray(raw.jobs)) return raw.jobs;
@@ -81338,13 +81411,17 @@ function catalogJobOf(job) {
     personas: [.../* @__PURE__ */ new Set([...job.personas ?? [], ...job.persona === void 0 ? [] : [job.persona]])],
     ...job.approval === void 0 ? {} : { approval: job.approval },
     contentHash: hash3,
-    status: statusOf3(job.approval, hash3)
+    status: statusOf3(job.approval, hash3, jobLegacyContentHash(job))
   };
 }
 function jobContentHash(job) {
   const { approval: _a3, ...rest } = job;
   return contentHash(rest);
 }
+function jobLegacyContentHash(job) {
+  const { approval: _a3, ...rest } = job;
+  return legacyContentHash(rest);
+}
 function catalogJourney(journey) {
   const m = journey.metadata;
   const hash3 = journeyReviewHash(journey);
@@ -81357,7 +81434,7 @@ function catalogJourney(journey) {
     ...m.persona === void 0 ? {} : { personaText: m.persona },
     ...m.approval === void 0 ? {} : { approval: m.approval },
     contentHash: hash3,
-    changedSinceApproval: m.promoted && m.approval !== void 0 && m.approval.contentHash !== hash3
+    changedSinceApproval: m.promoted && m.approval !== void 0 && !journeyApprovalMatches(journey)
   };
 }
 var CatalogLoader = class {
@@ -82860,12 +82937,12 @@ function healFloor(recorded, riskOf) {
   }
   return { floor: "healable", reason: "" };
 }
-function canonical4(v) {
+function canonical3(v) {
   if (Array.isArray(v))
-    return `[${v.map(canonical4).join(",")}]`;
+    return `[${v.map(canonical3).join(",")}]`;
   if (v !== null && typeof v === "object") {
     const o = v;
-    return `{${Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => `${JSON.stringify(k)}:${canonical4(o[k])}`).join(",")}}`;
+    return `{${Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => `${JSON.stringify(k)}:${canonical3(o[k])}`).join(",")}}`;
   }
   return JSON.stringify(v) ?? "undefined";
 }
@@ -82887,7 +82964,7 @@ function assertProofUntouched(before, after) {
   for (const k of /* @__PURE__ */ new Set([...Object.keys(b2), ...Object.keys(a)])) {
     if (free.has(k))
       continue;
-    if (canonical4(b2[k]) !== canonical4(a[k]))
+    if (canonical3(b2[k]) !== canonical3(a[k]))
       return { code: "proof-field-changed", detail: `the candidate changes the step's \`${k}\`` };
   }
   return null;
@@ -82898,15 +82975,15 @@ function assertRecordedProofUntouched(before, after) {
   for (const k of /* @__PURE__ */ new Set([...Object.keys(b2), ...Object.keys(a)])) {
     if (k === "step")
       continue;
-    if (canonical4(b2[k]) !== canonical4(a[k]))
+    if (canonical3(b2[k]) !== canonical3(a[k]))
       return { code: "proof-field-changed", detail: `the candidate changes the recorded step's \`${k}\`` };
   }
-  return canonical4(before.step) === canonical4(after.step) ? null : assertProofUntouched(before.step, after.step);
+  return canonical3(before.step) === canonical3(after.step) ? null : assertProofUntouched(before.step, after.step);
 }
 function assertRecordingProofUntouched(base, proposed) {
   const { pages: bp, ...bRest } = base;
   const { pages: pp, ...pRest } = proposed;
-  if (canonical4(bRest) !== canonical4(pRest))
+  if (canonical3(bRest) !== canonical3(pRest))
     return { code: "proof-field-changed", detail: "the revision changes the recording's own fields" };
   if (bp.length !== pp.length)
     return { code: "shape-changed", detail: `the revision has ${pp.length} pages; the Journey has ${bp.length}` };
@@ -82914,7 +82991,7 @@ function assertRecordingProofUntouched(base, proposed) {
   for (let i = 0; i < bp.length; i++) {
     const { steps: bs, ...bPage } = bp[i];
     const { steps: ps, ...pPage } = pp[i];
-    if (canonical4(bPage) !== canonical4(pPage))
+    if (canonical3(bPage) !== canonical3(pPage))
       return { code: "proof-field-changed", detail: `the revision changes page ${i + 1}` };
     if (bs.length !== ps.length)
       return { code: "shape-changed", detail: `the revision has ${ps.length} steps on page ${i + 1}; the Journey has ${bs.length}` };
@@ -84500,11 +84577,11 @@ async function removeFile(path2) {
   await assertNoSymlink(path2);
   await rm4(path2, { force: true });
 }
-function canonical5(v) {
-  if (Array.isArray(v)) return `[${v.map(canonical5).join(",")}]`;
+function canonical4(v) {
+  if (Array.isArray(v)) return `[${v.map(canonical4).join(",")}]`;
   if (v !== null && typeof v === "object") {
     const o = v;
-    return `{${Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => `${JSON.stringify(k)}:${canonical5(o[k])}`).join(",")}}`;
+    return `{${Object.keys(o).filter((k) => o[k] !== void 0).sort().map((k) => `${JSON.stringify(k)}:${canonical4(o[k])}`).join(",")}}`;
   }
   return JSON.stringify(v) ?? "undefined";
 }
@@ -84529,7 +84606,7 @@ function proposalFloorViolation(stored, proposed) {
   for (let i = 0; i < after.length; i++) {
     const b2 = before[i];
     const a = after[i];
-    if (b2 !== void 0 && canonical5(b2.step) === canonical5(a.step)) continue;
+    if (b2 !== void 0 && canonical4(b2.step) === canonical4(a.step)) continue;
     for (const [which, rec] of [["before", b2?.recorded], ["after", a.recorded]]) {
       if (rec === void 0) return `step ${i + 1} is not in the stored Journey`;
       const floor = healFloor(rec, riskOf);
@@ -100811,14 +100888,14 @@ var CREDENTIAL_KEY2 = /pass|secret|token|otp|totp|pin|cvc|cvv|card|auth|session|
 var MAX_DIGEST_BODY = 64e3;
 var CredentialBody = class extends Error {
 };
-function canonical6(v) {
-  if (Array.isArray(v)) return v.map(canonical6);
+function canonical5(v) {
+  if (Array.isArray(v)) return v.map(canonical5);
   if (v !== null && typeof v === "object") {
     const out = {};
     for (const k of Object.keys(v).sort()) {
       if (CREDENTIAL_KEY2.test(k)) throw new CredentialBody();
       if (VOLATILE_KEY.test(k)) continue;
-      out[k] = canonical6(v[k]);
+      out[k] = canonical5(v[k]);
     }
     return out;
   }
@@ -100835,7 +100912,7 @@ function payloadDigest(method, endpoint2, body, secrets) {
     value = Object.fromEntries(new URLSearchParams(body));
   }
   try {
-    const canon = JSON.stringify(canonical6(value));
+    const canon = JSON.stringify(canonical5(value));
     return createHash12("sha256").update(`${method.toUpperCase()} ${endpoint2}
 ${canon}`).digest("hex").slice(0, 32);
   } catch {
@@ -104264,10 +104341,17 @@ import { existsSync as existsSync25 } from "node:fs";
 import { copyFile as copyFile4, lstat as lstat4, mkdir as mkdir25, open as open3, readdir as readdir9, readFile as readFile24, rename as rename4, rm as rm10, writeFile as writeFile29 } from "node:fs/promises";
 import { basename as basename15, dirname as dirname24, join as join56, resolve as resolve18, sep as sep7 } from "node:path";
 
+// src/catalog-contract-identity.ts
+var CATALOG_CONTRACT_IDENTITY = {
+  "kind": "jevitate.catalog-contract",
+  "version": "2.0.0",
+  "manifestSha256": "c1292a8727d7dc0dbe1d63dc768d34b6cc94ae60fab3a67aeb0a53837e1735ad"
+};
+
 // src/catalog-bundle.ts
 var BUNDLE_KIND = "journeeze.catalog-bundle";
 var BUNDLE_VERSION = 1;
-var BUNDLE_MINOR = 1;
+var BUNDLE_MINOR = 2;
 var CatalogBundleInputError = class extends CatalogInputError {
   constructor(issues) {
     super(`the catalog cannot be exported as a Journeeze bundle (${issues.length} problem(s)): ${issues.join("; ")}`);
@@ -104632,7 +104716,7 @@ function bundleChecks(input2, journeys, warn) {
         if (outcome.outcome !== "clean") why = `the run was ${outcome.outcome}, and a baseline comes only from a clean run`;
         else if (journeyId === void 0 || journeyHash === void 0) why = "the item names no Journey review hash";
         else if (cj === void 0) why = `Journey ${journeyId} is not in the bundle`;
-        else if (cj.approval?.contentHash !== journeyHash || cj.contentHash !== journeyHash) why = `it was measured on a Journey revision (${journeyHash.slice(0, 12)}\u2026) that is not ${journeyId}'s approved one`;
+        else if (cj.approval?.contentHash !== journeyHash || cj.changedSinceApproval) why = `it was measured on a Journey revision (${journeyHash.slice(0, 12)}\u2026) that is not ${journeyId}'s approved one`;
         else {
           const b2 = bundleBaseline(item.baseline, cj.journey);
           if ("drop" in b2) why = b2.drop;
@@ -104686,13 +104770,13 @@ function bundleDemos(input2, journeys, warn) {
       warn.push(`${where}: its Journey is not in the bundle (not promoted, or left out) \u2014 the demo is left out`);
       continue;
     }
-    const approved = ex.cj.approval !== void 0 && ex.cj.approval.contentHash === ex.cj.contentHash;
+    const approved = ex.cj.approval !== void 0 && !ex.cj.changedSinceApproval;
     if (!approved) {
       warn.push(`${where}: its Journey changed since it was approved \u2014 the demo is left out (approve the Journey and its demo again)`);
       continue;
     }
-    if (d.renderedFrom !== ex.cj.contentHash) {
-      warn.push(`${where}: rendered from another version of its Journey (${d.renderedFrom.slice(0, 12)}, approved ${ex.cj.contentHash.slice(0, 12)}) \u2014 the demo is left out (run \`jevitate demo approve\` again)`);
+    if (d.renderedFrom !== ex.cj.approval.contentHash) {
+      warn.push(`${where}: rendered from another version of its Journey (${d.renderedFrom.slice(0, 12)}, approved ${ex.cj.approval.contentHash.slice(0, 12)}) \u2014 the demo is left out (run \`jevitate demo approve\` again)`);
       continue;
     }
     if (d.steps.length === 0 || d.steps.length > MEDIA_LIMITS.demoSteps) {
@@ -104844,6 +104928,7 @@ function buildCatalogBundle(input2) {
       version: BUNDLE_VERSION,
       minor: BUNDLE_MINOR,
       producer: { tool: "jevitate", version: input2.producer.version, ...commit === void 0 ? {} : { commit } },
+      catalogContract: CATALOG_CONTRACT_IDENTITY,
       product: { name: input2.productName },
       catalog: { personas, jobs, journeys: journeys.map((j) => j.entry) },
       ...shown2.demos.length === 0 ? {} : { demos: shown2.demos },
@@ -109807,8 +109892,8 @@ var jevReadinessAnalyzer = {
 // src/journey-stale-api.ts
 function isStepIdOnlyStale(journey, snapshot2) {
   const approval = journey.metadata.approval;
-  if (approval === void 0 || approval.contentHash === journeyReviewHash(journey)) return false;
-  if (snapshot2 !== null && journeyReviewHash(snapshot2) === approval.contentHash) return isStepIdOnlyChange(snapshot2, journey);
+  if (approval === void 0 || journeyApprovalMatches(journey)) return false;
+  if (snapshot2 !== null && [journeyReviewHash(snapshot2), journeyLegacyReviewHash(snapshot2)].includes(approval.contentHash)) return isStepIdOnlyChange(snapshot2, journey);
   return isStepIdOnlyChange(approval.contentHash, journey);
 }
 async function listStaleJourneys(req) {
@@ -109822,7 +109907,7 @@ async function listStaleJourneys(req) {
     const approval = journey.metadata.approval;
     if (approval === void 0) continue;
     const contentHash2 = journeyReviewHash(journey);
-    const hashStale = approval.contentHash !== contentHash2;
+    const hashStale = !journeyApprovalMatches(journey);
     const links = journeyLinks(catalog, catalogJourney(journey));
     const catalogStale = !hashStale && links.linked && [links.job?.status, links.persona?.status].includes("stale");
     if (!hashStale && !catalogStale) continue;
@@ -120261,17 +120346,17 @@ function isDefectStatus(v) {
   return typeof v === "string" && DEFECT_OUTCOME_STATUSES.includes(v);
 }
 function parseResultOutcome(missionOutcome, goalOutcome, defectStatus) {
-  const canonical7 = parseMissionOutcome(missionOutcome);
-  if (canonical7 !== null) {
+  const canonical6 = parseMissionOutcome(missionOutcome);
+  if (canonical6 !== null) {
     if (goalOutcome === void 0)
-      return { outcome: canonical7 };
+      return { outcome: canonical6 };
     if (!isGoalOutcome(goalOutcome))
       return null;
     if (defectStatus === void 0)
-      return foldGoalOutcome(goalOutcome) === canonical7 ? { outcome: canonical7, goalOutcome } : null;
+      return foldGoalOutcome(goalOutcome) === canonical6 ? { outcome: canonical6, goalOutcome } : null;
     if (!isDefectStatus(defectStatus))
       return null;
-    return goalMissionOutcome(goalOutcome, defectStatus) === canonical7 ? { outcome: canonical7, goalOutcome } : null;
+    return goalMissionOutcome(goalOutcome, defectStatus) === canonical6 ? { outcome: canonical6, goalOutcome } : null;
   }
   if (goalOutcome === void 0 && typeof missionOutcome === "string" && Object.hasOwn(LEGACY_GOAL_OUTCOMES, missionOutcome)) {
     return { outcome: LEGACY_GOAL_OUTCOMES[missionOutcome], goalOutcome: missionOutcome };

package/dist/build-info.generated.js

@@ -5,7 +5,7 @@
 // this plain `tsc --build` dist (no bundler substitution), so it needs real committed values
 // here instead. See ./engine.ts, which prefers the esbuild-injected value when present and
 // falls back to these.
-export const GENERATED_COMMIT = "ad72163";
-export const GENERATED_TREE = "379caf5";
-export const GENERATED_BUILT_AT = "2026-10-23T21:02:48.517Z";
+export const GENERATED_COMMIT = "e0f6f96";
+export const GENERATED_TREE = "d0b472e";
+export const GENERATED_BUILT_AT = "2026-10-24T16:37:51.277Z";
 //# sourceMappingURL=build-info.generated.js.map

package/dist/catalog-bundle.d.ts

@@ -1,5 +1,6 @@
 import { JOURNEY_RUN_OUTCOMES, type MissionOutcome } from "@jevitate/domain";
 import { CatalogInputError, type Catalog } from "./catalog.js";
+import { CATALOG_CONTRACT_IDENTITY } from "./catalog-contract-identity.js";
 /**
  * #464 (d464a) — the PURE builder of a Journeeze catalog bundle, version 1.0 (journeeze-saas
  * `docs/contract/catalog-bundle-v1.md` at 61f8c92, schema `catalog-bundle.v1.json`). No I/O, no
@@ -40,8 +41,8 @@ import { CatalogInputError, type Catalog } from "./catalog.js";
  */
 export declare const BUNDLE_KIND: "journeeze.catalog-bundle";
 export declare const BUNDLE_VERSION: 1;
-/** The schema minor this producer is built against (minor 1, journeeze-saas #173: optional `finding.locator` and `check.appVersion`). */
-export declare const BUNDLE_MINOR: 1;
+/** Minor 2 binds every new bundle to the exact immutable Jevitate catalog contract. */
+export declare const BUNDLE_MINOR: 2;
 export interface BundleApproval {
     readonly contentHash: string;
     readonly at: string;
@@ -198,6 +199,7 @@ export interface CatalogBundleV1 {
         readonly version: string;
         readonly commit?: string;
     };
+    readonly catalogContract: typeof CATALOG_CONTRACT_IDENTITY;
     readonly product: {
         readonly name: string;
     };