@jmanuelcorral/openteam 0.1.42 → 0.2.1

package/dist/graph/schema.d.ts

@@ -23,11 +23,11 @@ export declare const OperationIDSchema: z.ZodString;
 export declare const AttemptIDSchema: z.ZodString;
 /** Taxonomía acotada de clases de error de un efecto. */
 export declare const ErrorClassSchema: z.ZodEnum<{
-    unknown: "unknown";
-    transient: "transient";
+    cancelled: "cancelled";
     permanent: "permanent";
     timeout: "timeout";
-    cancelled: "cancelled";
+    transient: "transient";
+    unknown: "unknown";
 }>;
 export type ErrorClass = z.infer<typeof ErrorClassSchema>;
 /**
@@ -68,22 +68,25 @@ export declare const GraphSpecV1Schema: z.ZodObject<{
 }, z.core.$strict>;
 export type GraphSpecV1 = z.infer<typeof GraphSpecV1Schema>;
 export declare const RunStartedEventSchema: z.ZodObject<{
-    type: z.ZodLiteral<"run.started">;
-    specDigest: z.ZodString;
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
+    type: z.ZodLiteral<"run.started">;
+    specDigest: z.ZodString;
 }, z.core.$strict>;
 export declare const NodeDispatchedEventSchema: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    seq: z.ZodNumber;
+    runID: z.ZodString;
     type: z.ZodLiteral<"node.dispatched">;
     nodeID: z.ZodString;
     operationID: z.ZodString;
     attemptID: z.ZodString;
+}, z.core.$strict>;
+export declare const NodeSucceededEventSchema: z.ZodObject<{
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
-}, z.core.$strict>;
-export declare const NodeSucceededEventSchema: z.ZodObject<{
     type: z.ZodLiteral<"node.succeeded">;
     nodeID: z.ZodString;
     operationID: z.ZodString;
@@ -94,67 +97,67 @@ export declare const NodeSucceededEventSchema: z.ZodObject<{
         bytes: z.ZodNumber;
         mediaType: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const NodeFailedEventSchema: z.ZodObject<{
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
-}, z.core.$strict>;
-export declare const NodeFailedEventSchema: z.ZodObject<{
     type: z.ZodLiteral<"node.failed">;
     nodeID: z.ZodString;
     operationID: z.ZodString;
     attemptID: z.ZodString;
     errorClass: z.ZodEnum<{
-        unknown: "unknown";
-        transient: "transient";
+        cancelled: "cancelled";
         permanent: "permanent";
         timeout: "timeout";
-        cancelled: "cancelled";
+        transient: "transient";
+        unknown: "unknown";
     }>;
-    v: z.ZodLiteral<1>;
-    seq: z.ZodNumber;
-    runID: z.ZodString;
 }, z.core.$strict>;
 export declare const NodeCancelledEventSchema: z.ZodObject<{
-    type: z.ZodLiteral<"node.cancelled">;
-    nodeID: z.ZodString;
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
+    type: z.ZodLiteral<"node.cancelled">;
+    nodeID: z.ZodString;
 }, z.core.$strict>;
 export declare const RunCompletedEventSchema: z.ZodObject<{
-    type: z.ZodLiteral<"run.completed">;
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
+    type: z.ZodLiteral<"run.completed">;
 }, z.core.$strict>;
 export declare const RunFailedEventSchema: z.ZodObject<{
-    type: z.ZodLiteral<"run.failed">;
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
+    type: z.ZodLiteral<"run.failed">;
 }, z.core.$strict>;
 export declare const RunCancelledEventSchema: z.ZodObject<{
-    type: z.ZodLiteral<"run.cancelled">;
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
+    type: z.ZodLiteral<"run.cancelled">;
 }, z.core.$strict>;
 /** Unión discriminada exhaustiva de los eventos de Graph V1. */
 export declare const GraphEventV1Schema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    seq: z.ZodNumber;
+    runID: z.ZodString;
     type: z.ZodLiteral<"run.started">;
     specDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
-}, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"node.dispatched">;
     nodeID: z.ZodString;
     operationID: z.ZodString;
     attemptID: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
-}, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"node.succeeded">;
     nodeID: z.ZodString;
     operationID: z.ZodString;
@@ -165,45 +168,42 @@ export declare const GraphEventV1Schema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         bytes: z.ZodNumber;
         mediaType: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
-}, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"node.failed">;
     nodeID: z.ZodString;
     operationID: z.ZodString;
     attemptID: z.ZodString;
     errorClass: z.ZodEnum<{
-        unknown: "unknown";
-        transient: "transient";
+        cancelled: "cancelled";
         permanent: "permanent";
         timeout: "timeout";
-        cancelled: "cancelled";
+        transient: "transient";
+        unknown: "unknown";
     }>;
+}, z.core.$strict>, z.ZodObject<{
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
-}, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"node.cancelled">;
     nodeID: z.ZodString;
-    v: z.ZodLiteral<1>;
-    seq: z.ZodNumber;
-    runID: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{
-    type: z.ZodLiteral<"run.completed">;
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
+    type: z.ZodLiteral<"run.completed">;
 }, z.core.$strict>, z.ZodObject<{
-    type: z.ZodLiteral<"run.failed">;
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
+    type: z.ZodLiteral<"run.failed">;
 }, z.core.$strict>, z.ZodObject<{
-    type: z.ZodLiteral<"run.cancelled">;
     v: z.ZodLiteral<1>;
     seq: z.ZodNumber;
     runID: z.ZodString;
+    type: z.ZodLiteral<"run.cancelled">;
 }, z.core.$strict>], "type">;
 export type GraphEventV1 = z.infer<typeof GraphEventV1Schema>;
 export type GraphEventType = GraphEventV1["type"];

package/dist/graph/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/graph/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB;;;;;;;GAOG;AAEH,eAAO,MAAM,kBAAkB,EAAG,CAAU,CAAC;AAC7C,eAAO,MAAM,mBAAmB,EAAG,CAAU,CAAC;AAE9C,4EAA4E;AAC5E,eAAO,MAAM,YAAY,aAIkC,CAAC;AAC5D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD,+CAA+C;AAC/C,eAAO,MAAM,cAAc;;;EAAsC,CAAC;AAClE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,aAEsB,CAAC;AACrD,eAAO,MAAM,eAAe,aAEsB,CAAC;AAEnD,yDAAyD;AACzD,eAAO,MAAM,gBAAgB;;;;;;EAM3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAQjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,uEAAuE;AACvE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;kBAMnB,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAQ5D,eAAO,MAAM,qBAAqB;;;;;;kBAMvB,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;kBAQ3B,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;kBAS1B,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;kBASvB,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;kBAM1B,CAAC;AAEZ,eAAO,MAAM,uBAAuB;;;;;kBAEzB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;kBAEtB,CAAC;AAEZ,eAAO,MAAM,uBAAuB;;;;;kBAEzB,CAAC;AAEZ,gEAAgE;AAChE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAS7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAElD,mDAAmD;AACnD,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,eAAe,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBAEd,IAAI,EAAE,cAAc,GAAG,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ;CAMtE;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAM1D;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAM5D"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/graph/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB;;;;;;;GAOG;AAEH,eAAO,MAAM,kBAAkB,EAAG,CAAU,CAAC;AAC7C,eAAO,MAAM,mBAAmB,EAAG,CAAU,CAAC;AAE9C,4EAA4E;AAC5E,eAAO,MAAM,YAAY,aAIkC,CAAC;AAC5D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD,+CAA+C;AAC/C,eAAO,MAAM,cAAc;;;EAAsC,CAAC;AAClE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,aAEsB,CAAC;AACrD,eAAO,MAAM,eAAe,aAEsB,CAAC;AAEnD,yDAAyD;AACzD,eAAO,MAAM,gBAAgB;;;;;;EAM3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAQjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,uEAAuE;AACvE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;kBAMnB,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAQ5D,eAAO,MAAM,qBAAqB;;;;;;kBAMvB,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;kBAQ3B,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;kBAS1B,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;kBASvB,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;kBAM1B,CAAC;AAEZ,eAAO,MAAM,uBAAuB;;;;;kBAEzB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;kBAEtB,CAAC;AAEZ,eAAO,MAAM,uBAAuB;;;;;kBAEzB,CAAC;AAEZ,gEAAgE;AAChE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAS7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAElD,mDAAmD;AACnD,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,eAAe,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAE1B,YAAY,IAAI,EAAE,cAAc,GAAG,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAKpE;CACF;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAM1D;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAM5D"}

package/dist/graph/soakLedger.d.ts

@@ -0,0 +1,167 @@
+import { z } from "zod";
+/** Supported observation platforms. darwin is recorded honestly but does not
+ *  satisfy the os-diversity gate (which requires linux + win32). */
+export declare const SoakPlatformSchema: z.ZodEnum<{
+    darwin: "darwin";
+    linux: "linux";
+    win32: "win32";
+}>;
+export type SoakPlatform = z.infer<typeof SoakPlatformSchema>;
+/**
+ * Pair shape for privacy scanning: carries both the denominator (surfaces
+ * scanned) and the finding count. Nullable at the observation level to
+ * represent "scanner did not run".
+ */
+declare const PrivacyPairSchema: z.ZodObject<{
+    surfacesScanned: z.ZodNumber;
+    rawFindings: z.ZodNumber;
+}, z.core.$strict>;
+/**
+ * Pair shape for duplicate-effect detection: carries both the denominator
+ * (effects examined) and the duplicate count. Nullable at the observation
+ * level to represent "detector did not run".
+ */
+declare const DuplicateEffectPairSchema: z.ZodObject<{
+    effectsExamined: z.ZodNumber;
+    duplicatesFound: z.ZodNumber;
+}, z.core.$strict>;
+/**
+ * Triplet shape for model cross-verification: denominator (nodes checked),
+ * unverified count (no tracker data), and mismatch count (verified but
+ * disagreed with routing telemetry). Nullable at the observation level to
+ * represent "verification did not run".
+ *
+ * A mismatch is a contradiction between the agent's self-report and the
+ * only independently measured field in the trace. The `zero-model-mismatch`
+ * gate treats any mismatch as a hard fail — see certificate.ts for the
+ * argument.
+ */
+declare const ModelVerificationPairSchema: z.ZodObject<{
+    nodesChecked: z.ZodNumber;
+    unverified: z.ZodNumber;
+    mismatched: z.ZodNumber;
+}, z.core.$strict>;
+/** Privacy pair type (per-observation). */
+export type SoakPrivacyPair = z.infer<typeof PrivacyPairSchema>;
+/** Duplicate-effect pair type (per-observation). */
+export type SoakDuplicateEffectPair = z.infer<typeof DuplicateEffectPairSchema>;
+/** Model verification triplet type (per-observation). */
+export type SoakModelVerificationPair = z.infer<typeof ModelVerificationPairSchema>;
+export declare const SoakObservationSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    seq: z.ZodNumber;
+    timestamp: z.ZodString;
+    platform: z.ZodEnum<{
+        darwin: "darwin";
+        linux: "linux";
+        win32: "win32";
+    }>;
+    opencodeVersion: z.ZodString;
+    provenance: z.ZodEnum<{
+        "ci-synthetic": "ci-synthetic";
+        "genuine-usage": "genuine-usage";
+    }>;
+    traceDigest: z.ZodString;
+    criticalDivergences: z.ZodNullable<z.ZodNumber>;
+    privacy: z.ZodNullable<z.ZodObject<{
+        surfacesScanned: z.ZodNumber;
+        rawFindings: z.ZodNumber;
+    }, z.core.$strict>>;
+    duplicateEffects: z.ZodNullable<z.ZodObject<{
+        effectsExamined: z.ZodNumber;
+        duplicatesFound: z.ZodNumber;
+    }, z.core.$strict>>;
+    modelVerification: z.ZodNullable<z.ZodObject<{
+        nodesChecked: z.ZodNumber;
+        unverified: z.ZodNumber;
+        mismatched: z.ZodNumber;
+    }, z.core.$strict>>;
+    chainDigest: z.ZodString;
+}, z.core.$strict>;
+export type SoakObservation = z.infer<typeof SoakObservationSchema>;
+/** Resultado de validar una cadena individual de un grabador. */
+export type ChainValidationResult = {
+    readonly valid: boolean;
+    readonly observations: readonly SoakObservation[];
+};
+/**
+ * Valida la integridad de una cadena de un grabador. Comprueba:
+ * - `seq` consecutivo comenzando en 0
+ * - Timestamps estrictamente monótonos
+ * - `chainDigest` = SHA-256(prevDigest + canonical(obs sin chainDigest))
+ */
+export declare function validateChain(observations: readonly SoakObservation[]): ChainValidationResult;
+/** Evidencia agregada derivada de todas las cadenas válidas. */
+export type SoakEvidence = {
+    readonly totalObservations: number;
+    readonly genuineUsageObservations: number;
+    readonly ciSyntheticObservations: number;
+    readonly recorderCount: number;
+    /**
+     * Count of chain-valid observations that were excluded from every total in
+     * this evidence because their `opencodeVersion` is not in the supported set.
+     * Recorded (not dropped) so the exclusion is auditable — a large value means
+     * evidence was gathered on versions this certificate does not cover.
+     */
+    readonly ineligibleObservations: number;
+    readonly firstTimestamp: string | null;
+    readonly lastTimestamp: string | null;
+    readonly distinctDays: number;
+    /** Aggregate critical divergences. null if any observation was not measured. */
+    readonly criticalDivergences: number | null;
+    /** Aggregate privacy scan. null if any observation did not run the scanner. */
+    readonly privacy: {
+        surfacesScanned: number;
+        rawFindings: number;
+    } | null;
+    /** Aggregate duplicate effects. null if any observation did not run the detector. */
+    readonly duplicateEffects: {
+        effectsExamined: number;
+        duplicatesFound: number;
+    } | null;
+    /** Aggregate model verification. null if any observation did not run verification. */
+    readonly modelVerification: {
+        nodesChecked: number;
+        unverified: number;
+        mismatched: number;
+    } | null;
+    readonly platformsGenuine: SoakPlatform[];
+    readonly platformsSynthetic: SoakPlatform[];
+    readonly opencodeVersionsObserved: string[];
+    readonly invalidChains: number;
+};
+/**
+ * Agrupa observaciones planas en cadenas por su posición en el array de
+ * cadenas recibido. Cada sub-array es una cadena independiente.
+ */
+export declare function aggregateObservations(chains: readonly (readonly SoakObservation[])[]): {
+    validObs: SoakObservation[];
+    invalidChains: number;
+};
+/**
+ * Deriva la evidencia completa a partir de las cadenas validadas.
+ *
+ * **Eligibility filter (GE-055a, soak-pin semantics).** An observation only
+ * contributes to the soak totals — counts, distinct days, platform coverage,
+ * the aggregate safety counters, and `opencodeVersionsObserved` — when its
+ * `opencodeVersion` is in `supportedOpencodeVersions`. Off-version observations
+ * are excluded from *all* derivation (not just the count gates) so this
+ * certificate carries one crisp invariant: everything it summarizes happened on
+ * a supported version. Excluded observations are **not** discarded from the raw
+ * ledger — they remain chain-valid on disk and are only filtered here, at
+ * derivation time, so evidence gathered before a policy change re-derives
+ * without re-running the clock. Their count surfaces as `ineligibleObservations`.
+ *
+ * Pure and deterministic: a function of `chains` and `supportedOpencodeVersions`
+ * only. No I/O, clock, or randomness.
+ */
+export declare function deriveSoakEvidence(chains: readonly (readonly SoakObservation[])[], supportedOpencodeVersions: readonly string[]): SoakEvidence;
+/**
+ * Digest canónico del contenido del ledger completo. Se calcula sobre las
+ * cadenas válidas en orden de cadena (sorted por primer seq-0 chainDigest),
+ * concatenando el JSONL canónico de cada cadena. Esto vincula el certificado
+ * a la evidencia que el llamante posee.
+ */
+export declare function canonicalLedger(chains: readonly (readonly SoakObservation[])[]): string;
+export {};
+//# sourceMappingURL=soakLedger.d.ts.map

package/dist/graph/soakLedger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"soakLedger.d.ts","sourceRoot":"","sources":["../../src/graph/soakLedger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBxB;oEACoE;AACpE,eAAO,MAAM,kBAAkB;;;;EAAuC,CAAC;AACvE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;GAIG;AACH,QAAA,MAAM,iBAAiB;;;kBAKZ,CAAC;AAEZ;;;;GAIG;AACH,QAAA,MAAM,yBAAyB;;;kBAKpB,CAAC;AAEZ;;;;;;;;;;GAUG;AACH,QAAA,MAAM,2BAA2B;;;;kBAMtB,CAAC;AAEZ,2CAA2C;AAC3C,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEhE,oDAAoD;AACpD,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEhF,yDAAyD;AACzD,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,2BAA2B,CACnC,CAAC;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAuBvB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE,iEAAiE;AACjE,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,SAAS,eAAe,EAAE,CAAC;CACnD,CAAC;AAsBF;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,YAAY,EAAE,SAAS,eAAe,EAAE,GACvC,qBAAqB,CAkCvB;AAMD,gEAAgE;AAChE,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,qFAAqF;IACrF,QAAQ,CAAC,gBAAgB,EAAE;QACzB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,IAAI,CAAC;IACT,sFAAsF;IACtF,QAAQ,CAAC,iBAAiB,EAAE;QAC1B,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IACT,QAAQ,CAAC,gBAAgB,EAAE,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,YAAY,EAAE,CAAC;IAC5C,QAAQ,CAAC,wBAAwB,EAAE,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,SAAS,CAAC,SAAS,eAAe,EAAE,CAAC,EAAE,GAC9C;IAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAcxD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,CAAC,SAAS,eAAe,EAAE,CAAC,EAAE,EAC/C,yBAAyB,EAAE,SAAS,MAAM,EAAE,GAC3C,YAAY,CA6Hd;AAMD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,CAAC,SAAS,eAAe,EAAE,CAAC,EAAE,GAC9C,MAAM,CA0BR"}

package/dist/graph/types.d.ts

@@ -4,6 +4,8 @@ import type { ErrorClass, GraphEventType, GraphEventV1, GraphNode, GraphSpecV1,
  * capacidades. No se parsean de entrada externa (los construye el reducer), por
  * eso viven fuera de los esquemas Zod. Puro: sin I/O ni estado global.
  */
+/** Salud de la cola del journal en disco según la clasificación de recovery. */
+export type GraphJournalHealth = "clean" | "recovered" | "corrupt";
 /** Estado persistente de un nodo. `pending` es el estado inicial. */
 export type NodeStatus = "pending" | "running" | "succeeded" | "failed" | "cancelled";
 /** Estado del run completo. */

package/dist/graph/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/graph/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,YAAY,EACZ,SAAS,EACT,WAAW,EACX,MAAM,EACN,QAAQ,EACT,MAAM,UAAU,CAAC;AAElB;;;;GAIG;AAEH,qEAAqE;AACrE,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,+BAA+B;AAC/B,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEzE,wDAAwD;AACxD,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,UAAU,CAGzD,CAAC;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,SAAS,CAIvD,CAAC;AAEH,4DAA4D;AAC5D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,gDAAgD;AAChD,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,CAAC;IAClB,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACzC,CAAC;AAEF,gDAAgD;AAChD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC;AAE/E,yEAAyE;AACzE,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,YAAY,EACV,UAAU,EACV,cAAc,EACd,YAAY,EACZ,SAAS,EACT,WAAW,EACX,MAAM,EACN,QAAQ,GACT,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/graph/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,YAAY,EACZ,SAAS,EACT,WAAW,EACX,MAAM,EACN,QAAQ,EACT,MAAM,UAAU,CAAC;AAElB;;;;GAIG;AAEH,gFAAgF;AAChF,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnE,qEAAqE;AACrE,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,+BAA+B;AAC/B,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEzE,wDAAwD;AACxD,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,UAAU,CAGzD,CAAC;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,SAAS,CAIvD,CAAC;AAEH,4DAA4D;AAC5D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,gDAAgD;AAChD,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,CAAC;IAClB,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACzC,CAAC;AAEF,gDAAgD;AAChD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC;AAE/E,yEAAyE;AACzE,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,YAAY,EACV,UAAU,EACV,cAAc,EACd,YAAY,EACZ,SAAS,EACT,WAAW,EACX,MAAM,EACN,QAAQ,GACT,CAAC"}

package/dist/graph/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/graph/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvD;;;;GAIG;AAEH,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB,oBAAoB,GACpB,OAAO,GACP,wBAAwB,GACxB,yBAAyB,GACzB,aAAa,GACb,uBAAuB,GACvB,cAAc,CAAC;AAEnB,8CAA8C;AAC9C,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM;CAMtD;AAqHD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAMzD"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/graph/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvD;;;;GAIG;AAEH,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB,oBAAoB,GACpB,OAAO,GACP,wBAAwB,GACxB,yBAAyB,GACzB,aAAa,GACb,uBAAuB,GACvB,cAAc,CAAC;AAEnB,8CAA8C;AAC9C,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAKpD;CACF;AAqHD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAMzD"}

package/dist/index.d.ts

@@ -1,11 +1,63 @@
 import type { Plugin, PluginModule } from "@opencode-ai/plugin";
 import type { CliDeps } from "./commands/dispatch";
+import { type GraphGateInput } from "./config/graphFeatureGate";
 import type { OpenTeamConfig } from "./config/schema";
 import { RuntimeRegistry } from "./local/registry";
+import { type RecorderPorts } from "./storage/graph/soakRecorder";
 import type { StorageProvider } from "./storage/provider";
 import { type EventSink } from "./telemetry/eventLog";
 export declare function logAvailabilityRefreshError(error: unknown): void;
 export declare function logTelemetryError(error: unknown): void;
+/**
+ * Reads the opencode server version from the `/global/health` endpoint.
+ *
+ * This is the server's own self-reported version, not a session-stamped value.
+ * Unlike `Session.version` (stamped once at session creation), the health
+ * endpoint always reflects the currently running binary — so after an upgrade
+ * the gate sees the new version immediately.
+ *
+ * Returns `"unknown"` if the call fails or the response is unexpected. This is
+ * fail-closed for the **shadow and release** certificates: their recomputing
+ * parsers receive this live version and compare it to the value stamped in the
+ * certificate, so `"unknown"` (or any mismatch) yields `opencode-mismatch` and
+ * closes the cutover gate. The **soak** certificate is intentionally not
+ * compared to this live value (see the `parseSoakCertificate` call site); its
+ * version guarantee comes from the eligibility filter applied to the recorded
+ * evidence at build time, not from a live cross-check here.
+ */
+/**
+ * Branded type for a version string obtained from a live opencode server.
+ *
+ * The brand prevents a compile-time constant (e.g.
+ * `DEFAULT_SOAK_POLICY.supportedOpencodeVersions`) from being silently
+ * substituted where a live-read version is expected — `buildGateInput`
+ * requires the brand, so a plain `string` fails `tsc --noEmit`. Only
+ * `readOpencodeVersion` produces this type in production code. Tests may
+ * cast explicitly via `as LiveOpencodeVersion`, which is deliberate
+ * opt-in; production wiring in this file must not — the forge-kill
+ * assertion in `graph-feature-gate.test.ts` rejects any such cast in the
+ * `opencodeVersion` assignment.
+ *
+ * See ADR section 8 (seam protection) and the GE-057 wiring tests.
+ */
+export type LiveOpencodeVersion = string & {
+    readonly __brand: "LiveOpencodeVersion";
+};
+export declare function readOpencodeVersion(serverUrl: URL): Promise<LiveOpencodeVersion>;
+/**
+ * Builds the gate input by reading certificates and determining migration
+ * status. All I/O is isolated here; the gate itself is pure.
+ *
+ * `opencodeVersion` is the version of the opencode server actually running,
+ * obtained at startup via `readOpencodeVersion`. The recomputing parsers
+ * compare it against each certificate's stamped version — a mismatch
+ * produces `opencode-mismatch` and closes the gate. When the version is
+ * `"unknown"` (could not be determined), no certificate can match, so the
+ * gate fails closed.
+ */
+export declare function buildGateInput(config: OpenTeamConfig, storage: StorageProvider, opencodeVersion: LiveOpencodeVersion): Promise<GraphGateInput>;
+/** Adapts a StorageProvider to RecorderPorts for the soak recorder. */
+export declare function recorderPortsFromStorage(storage: StorageProvider): RecorderPorts;
 export declare function createEventSink(rawOptions: unknown, storage?: StorageProvider): EventSink;
 export declare function isMissingFile(error: unknown): boolean;
 export declare function createCliDeps(config: OpenTeamConfig, registry: RuntimeRegistry, telemetryPath: string, sessionsDir?: string, storage?: StorageProvider): CliDeps;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAe,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAKnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAcnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAIL,KAAK,SAAS,EAEf,MAAM,sBAAsB,CAAC;AAqB9B,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAGhE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAGtD;AAoED,wBAAgB,eAAe,CAC7B,UAAU,EAAE,OAAO,EACnB,OAAO,GAAE,eAAwD,GAChE,SAAS,CAYX;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAOrD;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,eAAe,EACzB,aAAa,EAAE,MAAM,EACrB,WAAW,GAAE,MAA6B,EAC1C,OAAO,GAAE,eAAwD,GAChE,OAAO,CA4CT;AAED,eAAO,MAAM,MAAM,EAAE,MA+EpB,CAAC;AAEF,QAAA,MAAM,MAAM,EAAE,YAGb,CAAC;AAEF,eAAe,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAe,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EAGL,KAAK,cAAc,EAGpB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAYtD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAenD,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAIL,KAAK,SAAS,EAEf,MAAM,sBAAsB,CAAC;AAqB9B,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAGhE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAGtD;AA0CD;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG;IACzC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACzC,CAAC;AAEF,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,GAAG,GACb,OAAO,CAAC,mBAAmB,CAAC,CAqB9B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,eAAe,EACxB,eAAe,EAAE,mBAAmB,GACnC,OAAO,CAAC,cAAc,CAAC,CAyEzB;AAED,uEAAuE;AACvE,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,eAAe,GACvB,aAAa,CAmBf;AAoED,wBAAgB,eAAe,CAC7B,UAAU,EAAE,OAAO,EACnB,OAAO,GAAE,eAAwD,GAChE,SAAS,CAYX;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAOrD;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,eAAe,EACzB,aAAa,EAAE,MAAM,EACrB,WAAW,GAAE,MAA6B,EAC1C,OAAO,GAAE,eAAwD,GAChE,OAAO,CA4CT;AAED,eAAO,MAAM,MAAM,EAAE,MA8KpB,CAAC;AAEF,QAAA,MAAM,MAAM,EAAE,YAGb,CAAC;eAEa,MAAM"}