@maadb/core 0.15.2 → 0.17.0

package/dist/engine/create-contract.d.ts

@@ -0,0 +1,10 @@
+import { type Registry, type SchemaStore } from '../types.js';
+import type { CreateContract } from './guarded-create-types.js';
+import type { EngineContext } from './context.js';
+/** No registry activation, directory creation, index rebuild, or stale fallback. */
+export declare function freshCreateContract(ctx: EngineContext, type: string, signal?: AbortSignal): Promise<{
+    contract: CreateContract;
+    registry: Registry;
+    schemaStore: SchemaStore;
+}>;
+//# sourceMappingURL=create-contract.d.ts.map

package/dist/engine/create-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-contract.d.ts","sourceRoot":"","sources":["../../src/engine/create-contract.ts"],"names":[],"mappings":"AAMA,OAAO,EAAwE,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAKpI,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AA4BlD,oFAAoF;AACpF,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IACzG,QAAQ,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,WAAW,CAAC;CACxE,CAAC,CA+ED"}

package/dist/engine/create-contract.js

@@ -0,0 +1,128 @@
+import path from 'node:path';
+import { lstatSync } from 'node:fs';
+import yaml from 'js-yaml';
+import { createRequire } from 'node:module';
+import { z } from 'zod';
+import { loadSchemasFromSnapshot } from '../schema/loader.js';
+import { buildSubtypeMap, DEFAULT_SUBTYPE_MAP, PRIMITIVES, docType, schemaRef } from '../types.js';
+import { canonicalJson, rawSha256, readWorkingReceipt, readWorkingReceiptSnapshot } from './document-receipt.js';
+import { isSafeProjectRelativePath, isSafeSchemaRef, isWritePathContainedIn } from './pathguard.js';
+import { ReceiptError } from '../git/exact-blob.js';
+const engineVersion = createRequire(import.meta.url)('../../package.json').version;
+const typeDefinition = z.object({
+    path: z.string().min(1), id_prefix: z.string().regex(/^[a-z0-9]{2,5}$/),
+    schema: z.string().refine(isSafeSchemaRef), template: z.string().min(1).optional(),
+}).passthrough();
+const registryDefinition = z.object({
+    types: z.record(z.string().regex(/^[a-z][a-z0-9_]*$/), typeDefinition),
+    extraction: z.object({ subtypes: z.record(z.string(), z.enum(PRIMITIVES)).optional() }).passthrough().optional(),
+}).passthrough();
+function parseSource(raw) {
+    const text = raw.replace(/^\uFEFF/, '');
+    const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(text);
+    const value = yaml.load(match ? match[1] : text, { schema: yaml.CORE_SCHEMA });
+    canonicalJson(value);
+    return value;
+}
+/** Ordered map entries retain schema field ordering, which affects serialization. */
+function effectiveContract(registry, schemas) {
+    return JSON.parse(canonicalJson({
+        types: [...registry.types], extraction: registry.extraction, subtypeMap: registry.subtypeMap,
+        schemas: [...schemas.schemas].map(([ref, schema]) => [ref, { ...schema, fields: [...schema.fields] }]),
+    }));
+}
+/** No registry activation, directory creation, index rebuild, or stale fallback. */
+export async function freshCreateContract(ctx, type, signal) {
+    const sources = Object.create(null);
+    const capturedBytes = new Map();
+    const cachedFiles = new Map();
+    let total = 0;
+    const read = async (relative) => {
+        if (Object.hasOwn(sources, relative))
+            return sources[relative];
+        if (Object.keys(sources).length >= 129)
+            throw new ReceiptError('SCHEMA_INVALID', 'Too many contract dependencies');
+        const captured = await readWorkingReceiptSnapshot(ctx.projectRoot, relative, signal);
+        const { bytes } = captured;
+        total += bytes.length;
+        if (total > 256 * 1024)
+            throw new ReceiptError('RESPONSE_TOO_LARGE', 'Schema dependency snapshot exceeds 256 KiB');
+        const text = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+        sources[relative] = text;
+        capturedBytes.set(relative, bytes);
+        cachedFiles.set(path.join(ctx.projectRoot, relative), { mtimeMs: captured.mtimeMs, size: captured.size });
+        return text;
+    };
+    const parsed = registryDefinition.parse(parseSource(await read('_registry/object_types.yaml')));
+    const entries = Object.entries(parsed.types);
+    if (entries.length === 0 || entries.length > 64)
+        throw new ReceiptError('SCHEMA_INVALID', 'Contract requires 1 to 64 registered types');
+    const registry = { types: new Map(), extraction: { subtypes: parsed.extraction?.subtypes ?? {} },
+        subtypeMap: buildSubtypeMap(DEFAULT_SUBTYPE_MAP, parsed.extraction?.subtypes) };
+    const prefixes = new Set();
+    for (const [name, def] of entries) {
+        if (prefixes.has(def.id_prefix))
+            throw new ReceiptError('REGISTRY_INVALID', 'Duplicate registry prefix');
+        prefixes.add(def.id_prefix);
+        for (const relative of [def.path, ...(def.template ? [def.template] : [])]) {
+            if (!isSafeProjectRelativePath(relative) || !isWritePathContainedIn(path.join(ctx.projectRoot, relative), ctx.projectRoot)) {
+                throw new ReceiptError('PATH_OUTSIDE_PROJECT', 'Contract dependency escapes project');
+            }
+        }
+        let directory = ctx.projectRoot;
+        for (const component of def.path.split('/').filter(Boolean)) {
+            directory = path.join(directory, component);
+            try {
+                const entry = lstatSync(directory);
+                if (entry.isSymbolicLink() || !entry.isDirectory())
+                    throw new ReceiptError('PATH_OUTSIDE_PROJECT', 'Create directory must be a real directory');
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+        registry.types.set(docType(name), { name: docType(name), path: def.path, idPrefix: def.id_prefix,
+            schemaRef: schemaRef(def.schema), template: def.template ?? null });
+        const schema = parseSource(await read(`_schema/${def.schema}.yaml`));
+        // Refuse malformed top-level shapes that the legacy loader tolerates.
+        z.object({ type: z.literal(name), version: z.number().int().positive().optional(),
+            required: z.array(z.string()).optional(), fields: z.record(z.string(), z.object({ type: z.string() }).passthrough()),
+            template: z.object({ headings: z.array(z.object({ level: z.number().int().min(1).max(6),
+                    text: z.string(), id: z.string().nullable().optional() }).passthrough()) }).passthrough().optional(),
+        }).passthrough().parse(schema);
+        if (def.template)
+            await read(def.template);
+    }
+    if (!registry.types.has(docType(type)))
+        throw new ReceiptError('UNKNOWN_TYPE', 'Unknown contract document type');
+    // Validate exactly the bounded captured sources, with no disk-reader fallback.
+    // Both effective identity and document preparation use this validated store.
+    // Decode like the legacy disk reader (including BOMs); capture already checked
+    // UTF-8 validity. Keep the existing source projection and parser behavior.
+    const schemaSources = new Map([...registry.types.values()].map(def => [def.schemaRef, capturedBytes.get(`_schema/${def.schemaRef}.yaml`).toString('utf8')]));
+    const loaded = await loadSchemasFromSnapshot(registry, schemaSources, { signal, cachedFiles });
+    if (signal?.aborted)
+        throw new ReceiptError('REQUEST_TIMEOUT', 'Schema snapshot validation cancelled');
+    if (!loaded.ok)
+        throw new ReceiptError('SCHEMA_INVALID', 'Fresh schema validation failed');
+    for (const [relative, expected] of Object.entries(sources)) {
+        const actual = await readWorkingReceipt(ctx.projectRoot, relative, signal);
+        if (!actual.equals(Buffer.from(expected)))
+            throw new ReceiptError('SCHEMA_CONTRACT_CHANGED', 'Schema changed during observation');
+    }
+    const schemaContract = {
+        projection: 'create-schema-v1', engineVersion,
+        contentProjection: 'document-content-v1',
+        sources, effective: effectiveContract(registry, loaded.value),
+    };
+    const canonical = canonicalJson(schemaContract);
+    if (Buffer.byteLength(canonical) > 512 * 1024)
+        throw new ReceiptError('RESPONSE_TOO_LARGE', 'Complete schema contract exceeds bound');
+    return { registry, schemaStore: loaded.value, contract: {
+            contract: 'create-contract-v1', docType: type, schemaDigest: rawSha256(Buffer.from(canonical)),
+            schemaProjection: 'create-schema-v1', contentProjection: 'document-content-v1', schemaContract,
+            effectiveHistoryMode: ctx.history?.config.effectiveMode ?? 'feed',
+        } };
+}
+//# sourceMappingURL=create-contract.js.map

package/dist/engine/create-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-contract.js","sourceRoot":"","sources":["../../src/engine/create-contract.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,IAAI,MAAM,SAAS,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAmC,MAAM,aAAa,CAAC;AACpI,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACjH,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAKpD,MAAM,aAAa,GAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAyB,CAAC,OAAO,CAAC;AAC5G,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnF,CAAC,CAAC,WAAW,EAAE,CAAC;AACjB,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,cAAc,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACjH,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,KAAK,GAAY,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACzF,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,SAAS,iBAAiB,CAAC,QAAkB,EAAE,OAAoB;IACjE,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9B,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC5F,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;KACvG,CAAC,CAAc,CAAC;AACnB,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAkB,EAAE,IAAY,EAAE,MAAoB;IAG9F,MAAM,OAAO,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;IACtF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,MAAM,WAAW,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,KAAK,EAAE,QAAgB,EAAmB,EAAE;QACvD,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC,QAAQ,CAAE,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;QACnH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrF,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAC3B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACtB,IAAI,KAAK,GAAG,GAAG,GAAG,IAAI;YAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,4CAA4C,CAAC,CAAC;QACnH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACzB,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1G,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,4CAA4C,CAAC,CAAC;IACxI,MAAM,QAAQ,GAAa,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE;QACxG,UAAU,EAAE,eAAe,CAAC,mBAAmB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,CAAC;QACzG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5B,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3H,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,qCAAqC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,IAAI,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC;QAChC,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;gBACnC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;oBAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,2CAA2C,CAAC,CAAC;YAClJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS;YAC9F,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC;QACrE,sEAAsE;QACtE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YAC/E,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACpH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACrF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;SACvG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;IACjH,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,2EAA2E;IAC3E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACnE,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,SAAS,OAAO,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAU,CAAC,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/F,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IACvG,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;IAC3F,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,mCAAmC,CAAC,CAAC;IACpI,CAAC;IACD,MAAM,cAAc,GAAc;QAChC,UAAU,EAAE,kBAAkB,EAAE,aAAa;QAC7C,iBAAiB,EAAE,qBAAqB;QACxC,OAAO,EAAE,SAAS,EAAE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC;KAC9D,CAAC;IACF,MAAM,SAAS,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,GAAG,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,wCAAwC,CAAC,CAAC;IACtI,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE;YACtD,QAAQ,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9F,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,cAAc;YAC9F,oBAAoB,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM;SAClE,EAAE,CAAC;AACN,CAAC"}

package/dist/engine/document-receipt-types.d.ts

@@ -0,0 +1,46 @@
+import type { HistoryMode } from '../history/types.js';
+export type JsonValue = null | boolean | number | string | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export interface DocumentReceiptRequest {
+    contract: 'document-persistence-v1';
+    docType: string;
+    docId: string;
+    expectedContentDigest?: string | undefined;
+}
+export interface DocumentReceipt {
+    contract: 'document-persistence-v1';
+    engineVersion: string;
+    project: string;
+    docId: string;
+    docType: string;
+    observedAt: string;
+    effectiveHistoryMode: HistoryMode;
+    projection: 'document-content-v1';
+    expectedContentDigest: string | null;
+    status: 'committed_content_available' | 'unverified';
+    reason: null | 'index_missing' | 'index_identity_mismatch' | 'working_tree_missing' | 'working_tree_unreadable' | 'working_tree_changed' | 'working_tree_diverged' | 'history_unavailable' | 'uncommitted' | 'committed_payload_mismatch';
+    index: {
+        state: 'present' | 'missing' | 'identity_mismatch';
+    };
+    workingTree: {
+        state: 'matches_committed' | 'diverged' | 'missing' | 'unreadable' | 'changed' | 'not_checked';
+        rawSha256: string | null;
+        contentDigest: string | null;
+    };
+    committed: null | {
+        evidenceKind: 'git_commit_visible';
+        objectFormat: 'sha1' | 'sha256';
+        commitOid: string;
+        treeOid: string;
+        blobOid: string;
+        rawSha256: string;
+        byteLength: number;
+        rawMarkdown: string;
+        frontmatter: Record<string, JsonValue>;
+        body: string;
+        contentDigest: string;
+    };
+    expectedDigestMatch: boolean | null;
+}
+//# sourceMappingURL=document-receipt-types.d.ts.map

package/dist/engine/document-receipt-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-receipt-types.d.ts","sourceRoot":"","sources":["../../src/engine/document-receipt-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AACtG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,yBAAyB,CAAC;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,WAAW,CAAC;IAClC,UAAU,EAAE,qBAAqB,CAAC;IAClC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE,6BAA6B,GAAG,YAAY,CAAC;IACrD,MAAM,EAAE,IAAI,GAAG,eAAe,GAAG,yBAAyB,GAAG,sBAAsB,GAC/E,yBAAyB,GAAG,sBAAsB,GAAG,uBAAuB,GAC5E,qBAAqB,GAAG,aAAa,GAAG,4BAA4B,CAAC;IACzE,KAAK,EAAE;QAAE,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAA;KAAE,CAAC;IAC9D,WAAW,EAAE;QACX,KAAK,EAAE,mBAAmB,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,aAAa,CAAC;QAC/F,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,CAAC;IACF,SAAS,EAAE,IAAI,GAAG;QAChB,YAAY,EAAE,oBAAoB,CAAC;QACnC,YAAY,EAAE,MAAM,GAAG,QAAQ,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAAC;CACrC"}

package/dist/engine/document-receipt-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=document-receipt-types.js.map

package/dist/engine/document-receipt-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-receipt-types.js","sourceRoot":"","sources":["../../src/engine/document-receipt-types.ts"],"names":[],"mappings":""}

package/dist/engine/document-receipt.d.ts

@@ -0,0 +1,22 @@
+import { type Result } from '../errors.js';
+import type { EngineContext } from './context.js';
+import type { DocumentReceipt, DocumentReceiptRequest, JsonValue } from './document-receipt-types.js';
+export declare const rawSha256: (bytes: Buffer) => string;
+/** Explicit serialization preserves UTF-16 key ordering even for integer-like keys. */
+export declare function canonicalJson(value: unknown): string;
+export declare function contentDigest(id: string, type: string, frontmatter: Record<string, JsonValue>, body: string): string;
+export declare function parseReceiptContent(bytes: Buffer, id: string, type: string, schema: string): {
+    rawMarkdown: string;
+    frontmatter: Record<string, JsonValue>;
+    body: string;
+    contentDigest: string;
+};
+export declare function readWorkingReceipt(root: string, relative: string, signal?: AbortSignal): Promise<Buffer>;
+/** One bounded handle read; compare both handle and pathname identity around it. */
+export declare function readWorkingReceiptSnapshot(root: string, relative: string, signal?: AbortSignal): Promise<{
+    bytes: Buffer;
+    mtimeMs: number;
+    size: number;
+}>;
+export declare function documentReceipt(ctx: EngineContext, request: DocumentReceiptRequest, project: string, signal?: AbortSignal): Promise<Result<DocumentReceipt>>;
+//# sourceMappingURL=document-receipt.d.ts.map

package/dist/engine/document-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-receipt.d.ts","sourceRoot":"","sources":["../../src/engine/document-receipt.ts"],"names":[],"mappings":"AAMA,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAI1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAItG,eAAO,MAAM,SAAS,GAAI,OAAO,MAAM,KAAG,MAA0D,CAAC;AAErG,uFAAuF;AACvF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAuCpD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGpH;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;;;EAqB1F;AAgBD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAE9G;AAED,oFAAoF;AACpF,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAC9G,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAC9C,CAAC,CAoCD;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,EACxG,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CA2ExD"}

package/dist/engine/document-receipt.js

@@ -0,0 +1,262 @@
+import { createHash } from 'node:crypto';
+import { createRequire } from 'node:module';
+import { constants } from 'node:fs';
+import { lstat, open, realpath } from 'node:fs/promises';
+import path from 'node:path';
+import yaml from 'js-yaml';
+import { ok, singleErr } from '../errors.js';
+import { readExactBlob, ReceiptError, RECEIPT_MAX_BYTES, checkReceiptAbort } from '../git/exact-blob.js';
+import { checkDocIdSafe } from './docid-safe.js';
+import { isContainedIn } from './pathguard.js';
+import { docId, docType } from '../types.js';
+const version = createRequire(import.meta.url)('../../package.json').version;
+export const rawSha256 = (bytes) => createHash('sha256').update(bytes).digest('hex');
+/** Explicit serialization preserves UTF-16 key ordering even for integer-like keys. */
+export function canonicalJson(value) {
+    const seen = new Set();
+    let nodes = 0;
+    let bytes = 0;
+    const encode = (v, depth) => {
+        if (++nodes > 65536 || depth > 64)
+            throw new ReceiptError('RECEIPT_CONTENT_INVALID', 'Content structure exceeds bounds');
+        if (v === null || typeof v === 'boolean' || typeof v === 'string' || (typeof v === 'number' && Number.isFinite(v))) {
+            const text = JSON.stringify(v);
+            bytes += Buffer.byteLength(text);
+            if (bytes > 1024 * 1024)
+                throw new ReceiptError('RESPONSE_TOO_LARGE', 'Canonical content exceeds bound');
+            return text;
+        }
+        if (typeof v !== 'object' || !v || seen.has(v))
+            throw new ReceiptError('RECEIPT_CONTENT_INVALID', 'Unsupported JSON content');
+        const proto = Object.getPrototypeOf(v);
+        if (Array.isArray(v) ? proto !== Array.prototype : proto !== Object.prototype && proto !== null) {
+            throw new ReceiptError('RECEIPT_CONTENT_INVALID', 'Unsupported content prototype');
+        }
+        if (Reflect.ownKeys(v).some(key => typeof key !== 'string'))
+            throw new ReceiptError('RECEIPT_CONTENT_INVALID', 'Unsupported content key');
+        const descriptors = Object.getOwnPropertyDescriptors(v);
+        for (const [key, descriptor] of Object.entries(descriptors)) {
+            if (Array.isArray(v) && key === 'length')
+                continue;
+            if (!('value' in descriptor) || !descriptor.enumerable)
+                throw new ReceiptError('RECEIPT_CONTENT_INVALID', 'Unsupported content property');
+        }
+        seen.add(v);
+        let result;
+        if (Array.isArray(v)) {
+            if (Object.keys(v).length !== v.length)
+                throw new ReceiptError('RECEIPT_CONTENT_INVALID', 'Sparse or decorated array');
+            result = '[' + Array.from(v, item => encode(item, depth + 1)).join(',') + ']';
+        }
+        else {
+            result = '{' + Object.keys(v).sort().map(key => {
+                const descriptor = Object.getOwnPropertyDescriptor(v, key);
+                if (!('value' in descriptor))
+                    throw new ReceiptError('RECEIPT_CONTENT_INVALID', 'Unsupported content accessor');
+                return encode(key, depth + 1) + ':' + encode(descriptor.value, depth + 1);
+            }).join(',') + '}';
+        }
+        seen.delete(v);
+        return result;
+    };
+    return encode(value, 0);
+}
+export function contentDigest(id, type, frontmatter, body) {
+    const canonical = `{"docId":${canonicalJson(id)},"docType":${canonicalJson(type)},"frontmatter":${canonicalJson(frontmatter)},"body":${canonicalJson(body)}}`;
+    return createHash('sha256').update(canonical, 'utf8').digest('hex');
+}
+export function parseReceiptContent(bytes, id, type, schema) {
+    if (bytes.length > RECEIPT_MAX_BYTES)
+        throw new ReceiptError('RESPONSE_TOO_LARGE', 'Receipt content exceeds bound');
+    try {
+        // ignoreBOM preserves it in rawMarkdown; parsing alone removes one BOM.
+        const rawMarkdown = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
+        const text = rawMarkdown.replace(/^\uFEFF/, '');
+        const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(text);
+        if (!match)
+            throw new Error('Missing frontmatter delimiters');
+        const parsed = yaml.load(match[1], { schema: yaml.CORE_SCHEMA, json: false });
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            throw new Error('Frontmatter must be a mapping');
+        canonicalJson(parsed);
+        const frontmatter = parsed;
+        for (const [key, expected] of [['doc_id', id], ['doc_type', type], ['schema', schema]]) {
+            if (!Object.hasOwn(frontmatter, key) || frontmatter[key] !== expected)
+                throw new Error('Document identity conflict');
+        }
+        const body = text.slice(match[0].length).replace(/\r\n/g, '\n').trim();
+        return { rawMarkdown, frontmatter, body, contentDigest: contentDigest(id, type, frontmatter, body) };
+    }
+    catch (error) {
+        if (error instanceof ReceiptError)
+            throw error;
+        throw new ReceiptError('RECEIPT_CONTENT_INVALID', 'Receipt requires valid UTF-8, strict YAML, JSON values, and matching identity');
+    }
+}
+async function checkedPath(root, relative) {
+    const target = path.resolve(root, relative);
+    if (!isContainedIn(target, root))
+        throw new ReceiptError('PATH_OUTSIDE_PROJECT', 'Receipt path escapes project');
+    const actualRoot = await realpath(root);
+    let current = root;
+    for (const component of relative.split('/')) {
+        current = path.join(current, component);
+        const stat = await lstat(current);
+        if (stat.isSymbolicLink())
+            throw new ReceiptError('PATH_OUTSIDE_PROJECT', 'Receipt path contains a symbolic link');
+    }
+    if (!isContainedIn(await realpath(target), actualRoot))
+        throw new ReceiptError('PATH_OUTSIDE_PROJECT', 'Receipt path escapes project');
+    return target;
+}
+export async function readWorkingReceipt(root, relative, signal) {
+    return (await readWorkingReceiptSnapshot(root, relative, signal)).bytes;
+}
+/** One bounded handle read; compare both handle and pathname identity around it. */
+export async function readWorkingReceiptSnapshot(root, relative, signal) {
+    checkReceiptAbort(signal);
+    const target = await checkedPath(root, relative);
+    const before = await lstat(target, { bigint: true });
+    if (!before.isFile())
+        throw new ReceiptError('RECEIPT_CONTENT_INVALID', 'Receipt target must be regular');
+    const handle = await open(target, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+    const same = (a, b) => a.dev === b.dev && a.ino === b.ino
+        && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs && b.isFile();
+    try {
+        const opened = await handle.stat({ bigint: true });
+        if (!same(before, opened))
+            throw new ReceiptError('RECEIPT_OBSERVATION_CHANGED', 'Working file changed before read');
+        if (opened.size > BigInt(RECEIPT_MAX_BYTES))
+            throw new ReceiptError('RESPONSE_TOO_LARGE', 'Working file exceeds bound');
+        // Cache hints come from this same handle. Bigint nanosecond identity checks
+        // below remain authoritative; retain native numeric stat precision for the
+        // existing legacy mtime/size cache comparisons.
+        const cached = await handle.stat();
+        const buffer = Buffer.alloc(Number(opened.size) + 1);
+        let length = 0;
+        while (length < buffer.length) {
+            checkReceiptAbort(signal);
+            const read = await handle.read(buffer, length, buffer.length - length, length);
+            if (read.bytesRead === 0)
+                break;
+            length += read.bytesRead;
+        }
+        const after = await handle.stat({ bigint: true });
+        let named;
+        try {
+            await checkedPath(root, relative);
+            named = await lstat(target, { bigint: true });
+        }
+        catch {
+            throw new ReceiptError('RECEIPT_OBSERVATION_CHANGED', 'Working pathname changed during read');
+        }
+        if (!same(opened, after) || !same(after, named) || BigInt(length) !== opened.size) {
+            throw new ReceiptError('RECEIPT_OBSERVATION_CHANGED', 'Working file changed during read');
+        }
+        checkReceiptAbort(signal);
+        return { bytes: buffer.subarray(0, length), mtimeMs: cached.mtimeMs, size: cached.size };
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function documentReceipt(ctx, request, project, signal) {
+    try {
+        checkReceiptAbort(signal);
+        if (request.contract !== 'document-persistence-v1' || typeof request.docType !== 'string'
+            || Buffer.byteLength(request.docType) > 256 || !/^[a-zA-Z0-9_][a-zA-Z0-9_-]*$/.test(request.docType)
+            || (request.expectedContentDigest !== undefined && !/^[0-9a-f]{64}$/.test(request.expectedContentDigest))) {
+            return singleErr('INVALID_FIELDS', 'Invalid document receipt request');
+        }
+        const unsafe = checkDocIdSafe(request.docId);
+        if (unsafe)
+            return singleErr('INVALID_DOC_ID', unsafe.message);
+        const registered = ctx.registry.types.get(docType(request.docType));
+        if (!registered)
+            return singleErr('UNKNOWN_TYPE', 'Unknown receipt document type');
+        const target = path.resolve(ctx.projectRoot, registered.path, `${request.docId}.md`);
+        if (!isContainedIn(target, ctx.projectRoot))
+            return singleErr('PATH_OUTSIDE_PROJECT', 'Receipt path escapes project');
+        const relative = path.relative(ctx.projectRoot, target).split(path.sep).join('/');
+        const identity = () => {
+            const row = ctx.backend.getDocument(docId(request.docId));
+            if (!row)
+                return 'missing';
+            return row.docId === request.docId && row.docType === request.docType && row.schemaRef === registered.schemaRef
+                && row.filePath.replace(/\\/g, '/') === relative ? 'present' : 'identity_mismatch';
+        };
+        const initial = identity();
+        const registeredIdentity = `${registered.path}\0${registered.schemaRef}`;
+        const receipt = {
+            contract: 'document-persistence-v1', engineVersion: version, project, docId: request.docId, docType: request.docType,
+            observedAt: new Date().toISOString(), effectiveHistoryMode: ctx.history?.config.effectiveMode ?? 'feed',
+            projection: 'document-content-v1', expectedContentDigest: request.expectedContentDigest ?? null,
+            status: 'unverified', reason: null, index: { state: initial },
+            workingTree: { state: 'not_checked', rawSha256: null, contentDigest: null }, committed: null, expectedDigestMatch: null,
+        };
+        const finish = () => {
+            checkReceiptAbort(signal);
+            if (identity() !== initial || ctx.registry.types.get(docType(request.docType)) !== registered
+                || `${registered.path}\0${registered.schemaRef}` !== registeredIdentity || ctx.schemaStore.isStale()) {
+                throw new ReceiptError('RECEIPT_OBSERVATION_CHANGED', 'Receipt index or configuration changed');
+            }
+            receipt.observedAt = new Date().toISOString();
+            return ok(receipt);
+        };
+        if (initial !== 'present') {
+            receipt.reason = initial === 'missing' ? 'index_missing' : 'index_identity_mismatch';
+            return finish();
+        }
+        if (!ctx.gitLayer || !ctx.history || receipt.effectiveHistoryMode === 'feed') {
+            receipt.reason = 'history_unavailable';
+            return finish();
+        }
+        const evidence = await readExactBlob(ctx.projectRoot, relative, signal);
+        if (!evidence) {
+            receipt.reason = 'uncommitted';
+            return finish();
+        }
+        const committed = parseReceiptContent(evidence.bytes, request.docId, request.docType, registered.schemaRef);
+        let working;
+        try {
+            working = await readWorkingReceipt(ctx.projectRoot, relative, signal);
+        }
+        catch (error) {
+            if (error instanceof ReceiptError && error.code === 'RECEIPT_OBSERVATION_CHANGED') {
+                receipt.reason = 'working_tree_changed';
+                receipt.workingTree.state = 'changed';
+            }
+            else if (error.code === 'ENOENT') {
+                receipt.reason = 'working_tree_missing';
+                receipt.workingTree.state = 'missing';
+            }
+            else if (['EACCES', 'EPERM'].includes(error.code ?? '')) {
+                receipt.reason = 'working_tree_unreadable';
+                receipt.workingTree.state = 'unreadable';
+            }
+            else
+                throw error;
+            return finish();
+        }
+        const parsedWorking = parseReceiptContent(working, request.docId, request.docType, registered.schemaRef);
+        receipt.workingTree.rawSha256 = rawSha256(working);
+        receipt.workingTree.contentDigest = parsedWorking.contentDigest;
+        if (parsedWorking.contentDigest !== committed.contentDigest) {
+            receipt.reason = 'working_tree_diverged';
+            receipt.workingTree.state = 'diverged';
+            return finish();
+        }
+        receipt.workingTree.state = 'matches_committed';
+        receipt.committed = { evidenceKind: 'git_commit_visible', objectFormat: evidence.objectFormat,
+            commitOid: evidence.commitOid, treeOid: evidence.treeOid, blobOid: evidence.blobOid,
+            byteLength: evidence.bytes.length, rawSha256: rawSha256(evidence.bytes), ...committed };
+        receipt.status = 'committed_content_available';
+        receipt.expectedDigestMatch = request.expectedContentDigest === undefined ? null : request.expectedContentDigest === committed.contentDigest;
+        return finish();
+    }
+    catch (error) {
+        return error instanceof ReceiptError ? singleErr(error.code, error.message)
+            : singleErr('RECEIPT_STORAGE_ERROR', 'Receipt storage could not be read');
+    }
+}
+//# sourceMappingURL=document-receipt.js.map

package/dist/engine/document-receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-receipt.js","sourceRoot":"","sources":["../../src/engine/document-receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,SAAS,CAAC;AAC3B,OAAO,EAAE,EAAE,EAAE,SAAS,EAAe,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,OAAO,GAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAyB,CAAC,OAAO,CAAC;AACtG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAErG,uFAAuF;AACvF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,KAAa,EAAU,EAAE;QACnD,IAAI,EAAE,KAAK,GAAG,KAAK,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,kCAAkC,CAAC,CAAC;QACzH,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC/B,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,iCAAiC,CAAC,CAAC;YACzG,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,CAAC;QAC9H,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChG,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,+BAA+B,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;QAC1I,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,QAAQ;gBAAE,SAAS;YACnD,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;gBAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,8BAA8B,CAAC,CAAC;QAC5I,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,MAAc,CAAC;QACnB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,2BAA2B,CAAC,CAAC;YACvH,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;gBAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC,EAAE,GAAG,CAAE,CAAC;gBAC5D,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;oBAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,8BAA8B,CAAC,CAAC;gBAChH,OAAO,MAAM,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU,EAAE,IAAY,EAAE,WAAsC,EAAE,IAAY;IAC1G,MAAM,SAAS,GAAG,YAAY,aAAa,CAAC,EAAE,CAAC,cAAc,aAAa,CAAC,IAAI,CAAC,kBAAkB,aAAa,CAAC,WAAW,CAAC,WAAW,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;IAC9J,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,EAAU,EAAE,IAAY,EAAE,MAAc;IACzF,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB;QAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,+BAA+B,CAAC,CAAC;IACpH,IAAI,CAAC;QACH,wEAAwE;QACxE,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrH,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,WAAW,GAAG,MAAmC,CAAC;QACxD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACvF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAI,CAAC,IAAI,WAAW,CAAC,GAAI,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACzH,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;IACvG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,+EAA+E,CAAC,CAAC;IACrI,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,QAAgB;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,8BAA8B,CAAC,CAAC;IACjH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,uCAAuC,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,8BAA8B,CAAC,CAAC;IACvI,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAoB;IAC3F,OAAO,CAAC,MAAM,0BAA0B,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1E,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAoB;IAGnG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,gCAAgC,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,CAAC,CAAgB,EAAE,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;WAClF,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,kCAAkC,CAAC,CAAC;QACrH,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;QACxH,4EAA4E;QAC5E,2EAA2E;QAC3E,gDAAgD;QAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/E,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC;gBAAE,MAAM;YAChC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClC,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,sCAAsC,CAAC,CAAC;QAAC,CAAC;QAC1G,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YAClF,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,kCAAkC,CAAC,CAAC;QAC5F,CAAC;QACD,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3F,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAkB,EAAE,OAA+B,EAAE,OAAe,EACxG,MAAoB;IACpB,IAAI,CAAC;QACH,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,yBAAyB,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;eACpF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;eACjG,CAAC,OAAO,CAAC,qBAAqB,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;YAC5G,OAAO,SAAS,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,MAAM;YAAE,OAAO,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC;QACrF,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,SAAS,CAAC,sBAAsB,EAAE,8BAA8B,CAAC,CAAC;QACtH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAkB,CAAC;YACpC,OAAO,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;mBACzG,GAAG,CAAC,QAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,mBAA4B,CAAC;QACrH,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;QAC3B,MAAM,kBAAkB,GAAG,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;QACzE,MAAM,OAAO,GAAoB;YAC/B,QAAQ,EAAE,yBAAyB,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;YACpH,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,oBAAoB,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM;YACvG,UAAU,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,IAAI;YAC/F,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YAC7D,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI;SACxH,CAAC;QACF,MAAM,MAAM,GAAG,GAA4B,EAAE;YAC3C,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,QAAQ,EAAE,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,UAAU;mBACxF,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,SAAS,EAAE,KAAK,kBAAkB,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvG,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wCAAwC,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;QAAC,CAAC;QACrI,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,oBAAoB,KAAK,MAAM,EAAE,CAAC;YAC7E,OAAO,CAAC,MAAM,GAAG,qBAAqB,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;QAAC,CAAC;QACnE,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,SAAmB,CAAC,CAAC;QACtH,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC9E,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,6BAA6B,EAAE,CAAC;gBAClF,OAAO,CAAC,MAAM,GAAG,sBAAsB,CAAC;gBAAC,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,SAAS,CAAC;YACjF,CAAC;iBAAM,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9D,OAAO,CAAC,MAAM,GAAG,sBAAsB,CAAC;gBAAC,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,SAAS,CAAC;YACjF,CAAC;iBAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBACrF,OAAO,CAAC,MAAM,GAAG,yBAAyB,CAAC;gBAAC,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,YAAY,CAAC;YACvF,CAAC;;gBAAM,MAAM,KAAK,CAAC;YACnB,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,SAAmB,CAAC,CAAC;QACnH,OAAO,CAAC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,CAAC,WAAW,CAAC,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QAChE,IAAI,aAAa,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;YAC5D,OAAO,CAAC,MAAM,GAAG,uBAAuB,CAAC;YAAC,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,UAAU,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;QACpG,CAAC;QACD,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,mBAAmB,CAAC;QAChD,OAAO,CAAC,SAAS,GAAG,EAAE,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY;YAC3F,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;YACnF,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC;QAC1F,OAAO,CAAC,MAAM,GAAG,6BAA6B,CAAC;QAC/C,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,KAAK,SAAS,CAAC,aAAa,CAAC;QAC7I,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YACzE,CAAC,CAAC,SAAS,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/engine/guarded-create-types.d.ts

@@ -0,0 +1,40 @@
+import type { JsonValue } from './document-receipt-types.js';
+import type { HistoryMode } from '../history/types.js';
+import type { MaadError } from '../errors.js';
+import type { CreateResult } from './types.js';
+export interface CreateContractRequest {
+    contract: 'create-contract-v1';
+    docType: string;
+}
+export interface CreateContract {
+    contract: 'create-contract-v1';
+    docType: string;
+    schemaDigest: string;
+    schemaProjection: 'create-schema-v1';
+    contentProjection: 'document-content-v1';
+    effectiveHistoryMode: HistoryMode;
+    /** Complete, JSON-compatible input to the schema digest. */
+    schemaContract: JsonValue;
+}
+export interface GuardedCreateRequest {
+    contract: 'guarded-create-v1';
+    docType: string;
+    docId: string;
+    fields: Record<string, JsonValue>;
+    body: string;
+    expectedSchemaDigest: string;
+    expectedContentDigest: string;
+    allowedHistoryModes: HistoryMode[];
+}
+/** Trusted in-process routing hooks; never part of the wire request. */
+export interface GuardedCreateOptions {
+    signal?: AbortSignal;
+    validateAccess?: () => MaadError | null;
+}
+export interface GuardedCreateResult extends CreateResult {
+    contract: 'guarded-create-v1';
+    schemaDigest: string;
+    contentDigest: string;
+    effectiveHistoryMode: HistoryMode;
+}
+//# sourceMappingURL=guarded-create-types.d.ts.map

package/dist/engine/guarded-create-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded-create-types.d.ts","sourceRoot":"","sources":["../../src/engine/guarded-create-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,kBAAkB,CAAC;IACrC,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,oBAAoB,EAAE,WAAW,CAAC;IAClC,4DAA4D;IAC5D,cAAc,EAAE,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,WAAW,EAAE,CAAC;CACpC;AAED,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,mBAAoB,SAAQ,YAAY;IACvD,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,WAAW,CAAC;CACnC"}

package/dist/engine/guarded-create-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=guarded-create-types.js.map

package/dist/engine/guarded-create-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded-create-types.js","sourceRoot":"","sources":["../../src/engine/guarded-create-types.ts"],"names":[],"mappings":""}

package/dist/engine/guarded-create.d.ts

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+import { type Result } from '../errors.js';
+import { type Registry, type SchemaStore } from '../types.js';
+import type { EngineContext } from './context.js';
+import type { GuardedCreateRequest, GuardedCreateOptions, GuardedCreateResult } from './guarded-create-types.js';
+export declare const createContractRequestSchema: z.ZodObject<{
+    contract: z.ZodLiteral<"create-contract-v1">;
+    docType: z.ZodString;
+}, z.core.$strict>;
+export declare const guardedCreateRequestSchema: z.ZodObject<{
+    contract: z.ZodLiteral<"guarded-create-v1">;
+    docType: z.ZodString;
+    docId: z.ZodString;
+    fields: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    body: z.ZodString;
+    expectedSchemaDigest: z.ZodString;
+    expectedContentDigest: z.ZodString;
+    allowedHistoryModes: z.ZodArray<z.ZodEnum<{
+        audit: "audit";
+        feed: "feed";
+        read: "read";
+        batch: "batch";
+        snapshot: "snapshot";
+    }>>;
+}, z.core.$strict>;
+export declare function admissionError(error: unknown): Result<never>;
+export declare function guardedCreate(ctx: EngineContext, request: GuardedCreateRequest, options: GuardedCreateOptions, isReady: () => boolean, onAdmitted: (registry: Registry, schemaStore: SchemaStore) => void): Promise<Result<GuardedCreateResult>>;
+//# sourceMappingURL=guarded-create.d.ts.map

package/dist/engine/guarded-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded-create.d.ts","sourceRoot":"","sources":["../../src/engine/guarded-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsB,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAE/D,OAAO,EAAW,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAMvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEjH,eAAO,MAAM,2BAA2B;;;kBAE7B,CAAC;AACZ,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;kBAQ5B,CAAC;AAEZ,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAG5D;AAED,wBAAsB,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,EACnF,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,OAAO,EACrD,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAyD1G"}