@nakafa/aksara-contracts 0.27.0

package/dist/release/snapshot/evidence.d.ts

@@ -0,0 +1,58 @@
+import { Effect } from "effect";
+import type { SnapshotRowSource } from "#contracts/release/snapshot/evidence-requirement";
+/** Authenticates one replacement manifest through fresh structured-row replays. */
+export declare const verifySnapshotRows: <E, R>(snapshot: {
+    readonly family: "program";
+    readonly manifest: {
+        readonly curriculumRowCount: number;
+        readonly programRowCount: number;
+        readonly rowCount: number;
+        readonly sitemapCount: number;
+        readonly slugCount: number;
+        readonly activeAppLocales: readonly [("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">, ...(("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">)[]];
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly format: "localized-program-snapshot";
+        readonly snapshotId: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+} | {
+    readonly family: "quran";
+    readonly manifest: {
+        readonly activeAppLocales: readonly [("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">, ...(("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">)[]];
+        readonly attributionCount: number;
+        readonly chunkCount: number;
+        readonly projectionCount: number;
+        readonly projectionDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly provenanceDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly provenanceStatus: "approved" | "blocked";
+        readonly runtimeCount: number;
+        readonly runtimeDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly searchCount: number;
+        readonly searchDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly sourceBytes: number;
+        readonly sourceDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly sourceFileCount: number;
+        readonly surahCount: number;
+        readonly tafsirLocales: readonly "id"[];
+        readonly verseCount: number;
+        readonly format: "localized-quran-snapshot";
+        readonly snapshotId: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+} | {
+    readonly family: "tryout";
+    readonly manifest: {
+        readonly activeAppLocales: readonly [("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">, ...(("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">)[]];
+        readonly catalogDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly counts: {
+            readonly country: number;
+            readonly exam: number;
+            readonly section: number;
+            readonly set: number;
+            readonly track: number;
+        };
+        readonly placementCount: number;
+        readonly placementDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly routeCount: number;
+        readonly format: "localized-tryout-snapshot";
+        readonly snapshotId: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+}, rows: SnapshotRowSource<E, R>) => Effect.Effect<number, E | import("../../program/snapshot/digest.js").ProgramDigestError | import("../../program/snapshot/row-hash.js").ProgramRowHashError | import("../../program/snapshot/hash.js").ProgramSnapshotHashError | import("../../quran/snapshot/row/hash.js").QuranRowHashError | import("../../quran/snapshot/digest.js").QuranRowIntegrityError | import("../../quran/snapshot/digest.js").QuranRowOrderError | import("../../quran/snapshot/hash.js").QuranSnapshotHashError | import("#contracts/release/snapshot/evidence-requirement").SnapshotEvidenceError | import("../../tryout/locale-closure.js").TryoutClosureError | import("../../tryout/row-hash.js").TryoutDigestError, R>;

package/dist/release/snapshot/evidence.js

@@ -0,0 +1,14 @@
+import { Effect } from "effect";
+import { verifyProgramSnapshotRows } from "#contracts/release/snapshot/program-evidence";
+import { verifyQuranSnapshotRows } from "#contracts/release/snapshot/quran-evidence";
+import { verifyTryoutSnapshotRows } from "#contracts/release/snapshot/tryout-evidence";
+/** Authenticates one replacement manifest through fresh structured-row replays. */
+export const verifySnapshotRows = Effect.fn("AksaraContracts.verifySnapshotRows")(function* (snapshot, rows) {
+    if (snapshot.family === "program") {
+        return yield* verifyProgramSnapshotRows(snapshot, rows);
+    }
+    if (snapshot.family === "quran") {
+        return yield* verifyQuranSnapshotRows(snapshot, rows);
+    }
+    return yield* verifyTryoutSnapshotRows(snapshot, rows);
+});

package/dist/release/snapshot/program-evidence.d.ts

@@ -0,0 +1,17 @@
+import { Effect } from "effect";
+import { type SnapshotRowSource } from "#contracts/release/snapshot/evidence-requirement";
+/** Verifies all program row and snapshot identity evidence. */
+export declare const verifyProgramSnapshotRows: <E, R>(snapshot: {
+    readonly family: "program";
+    readonly manifest: {
+        readonly curriculumRowCount: number;
+        readonly programRowCount: number;
+        readonly rowCount: number;
+        readonly sitemapCount: number;
+        readonly slugCount: number;
+        readonly activeAppLocales: readonly [("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">, ...(("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">)[]];
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly format: "localized-program-snapshot";
+        readonly snapshotId: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+}, rows: SnapshotRowSource<E, R>) => Effect.Effect<number, E | import("#contracts/program/snapshot/digest").ProgramDigestError | import("../../program/snapshot/row-hash.js").ProgramRowHashError | import("#contracts/program/snapshot/hash").ProgramSnapshotHashError | import("#contracts/release/snapshot/evidence-requirement").SnapshotEvidenceError, R>;

package/dist/release/snapshot/program-evidence.js

@@ -0,0 +1,39 @@
+import { Effect, Result, Stream } from "effect";
+import { digestProgramRows } from "#contracts/program/snapshot/digest";
+import { verifyProgramSnapshotHash } from "#contracts/program/snapshot/hash";
+import { requireSnapshotEvidence, } from "#contracts/release/snapshot/evidence-requirement";
+/** Selects current program rows while preserving source failures. */
+function programRows(rows) {
+    return rows.pipe(Stream.filterMap((row) => row.family === "program" ? Result.succeed(row.record) : Result.failVoid));
+}
+/** Verifies all program row and snapshot identity evidence. */
+export const verifyProgramSnapshotRows = Effect.fn("AksaraContracts.verifyProgramSnapshotRows")(function* (snapshot, rows) {
+    const summary = yield* digestProgramRows({
+        activeAppLocales: snapshot.manifest.activeAppLocales,
+        expected: snapshot.manifest,
+        rows: programRows(rows),
+    });
+    for (const field of [
+        "curriculumRowCount",
+        "programRowCount",
+        "rowCount",
+        "rowDigest",
+        "sitemapCount",
+        "slugCount",
+    ]) {
+        yield* requireSnapshotEvidence({
+            actual: summary[field],
+            expected: snapshot.manifest[field],
+            family: "program",
+            field,
+        });
+    }
+    const actualId = yield* verifyProgramSnapshotHash(snapshot.manifest);
+    yield* requireSnapshotEvidence({
+        actual: actualId,
+        expected: snapshot.manifest.snapshotId,
+        family: "program",
+        field: "snapshotId",
+    });
+    return summary.rowCount;
+});

package/dist/release/snapshot/quran-evidence.d.ts

@@ -0,0 +1,27 @@
+import { Effect } from "effect";
+import { type SnapshotRowSource } from "#contracts/release/snapshot/evidence-requirement";
+/** Verifies all Quran row, digest, binding, and snapshot evidence. */
+export declare const verifyQuranSnapshotRows: <E, R>(snapshot: {
+    readonly family: "quran";
+    readonly manifest: {
+        readonly activeAppLocales: readonly [("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">, ...(("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraAppLocale">)[]];
+        readonly attributionCount: number;
+        readonly chunkCount: number;
+        readonly projectionCount: number;
+        readonly projectionDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly provenanceDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly provenanceStatus: "approved" | "blocked";
+        readonly runtimeCount: number;
+        readonly runtimeDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly searchCount: number;
+        readonly searchDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly sourceBytes: number;
+        readonly sourceDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+        readonly sourceFileCount: number;
+        readonly surahCount: number;
+        readonly tafsirLocales: readonly "id"[];
+        readonly verseCount: number;
+        readonly format: "localized-quran-snapshot";
+        readonly snapshotId: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+}, rows: SnapshotRowSource<E, R>) => Effect.Effect<number, E | import("../../quran/snapshot/row/hash.js").QuranRowHashError | import("#contracts/quran/snapshot/digest").QuranRowIntegrityError | import("#contracts/quran/snapshot/digest").QuranRowOrderError | import("#contracts/quran/snapshot/hash").QuranSnapshotHashError | import("#contracts/release/snapshot/evidence-requirement").SnapshotEvidenceError, R>;

package/dist/release/snapshot/quran-evidence.js

@@ -0,0 +1,43 @@
+import { Effect, Result, Stream } from "effect";
+import { digestQuranRows } from "#contracts/quran/snapshot/digest";
+import { verifyQuranSnapshotHash } from "#contracts/quran/snapshot/hash";
+import { requireSnapshotEvidence, } from "#contracts/release/snapshot/evidence-requirement";
+/** Selects and binds current Quran rows to the manifest identity. */
+function quranRows(rows, snapshotId) {
+    return rows.pipe(Stream.filterMap((row) => row.family === "quran" ? Result.succeed(row.record) : Result.failVoid), Stream.mapEffect((record) => requireSnapshotEvidence({
+        actual: record.snapshotId,
+        expected: snapshotId,
+        family: "quran",
+        field: "snapshotId",
+    }).pipe(Effect.as(record))));
+}
+/** Verifies all Quran row, digest, binding, and snapshot evidence. */
+export const verifyQuranSnapshotRows = Effect.fn("AksaraContracts.verifyQuranSnapshotRows")(function* (snapshot, rows) {
+    const summary = yield* digestQuranRows({
+        activeAppLocales: snapshot.manifest.activeAppLocales,
+        rows: quranRows(rows, snapshot.manifest.snapshotId),
+    });
+    for (const field of [
+        "projectionCount",
+        "projectionDigest",
+        "runtimeCount",
+        "runtimeDigest",
+        "searchCount",
+        "searchDigest",
+    ]) {
+        yield* requireSnapshotEvidence({
+            actual: summary[field],
+            expected: snapshot.manifest[field],
+            family: "quran",
+            field,
+        });
+    }
+    const actualId = yield* verifyQuranSnapshotHash(snapshot.manifest);
+    yield* requireSnapshotEvidence({
+        actual: actualId,
+        expected: snapshot.manifest.snapshotId,
+        family: "quran",
+        field: "snapshotId",
+    });
+    return summary.projectionCount;
+});

package/dist/release/snapshot/scope.d.ts

@@ -0,0 +1,60 @@
+import { Effect, Schema } from "effect";
+/** Fixed structured families selected by the one global release pointer. */
+export declare const ContentSnapshotKindSchema: Schema.Literals<readonly ["program", "quran", "tryout"]>;
+export type ContentSnapshotKind = typeof ContentSnapshotKindSchema.Type;
+/** Authenticates exact content selection retained by predecessor releases. */
+export declare const PredecessorContentPublicationIdentitySchema: Schema.Struct<{
+    readonly artifactLocale: Schema.brand<Schema.Literals<readonly ["en", "id", "de"]>, "@NakafaAI/AksaraArtifactLocale">;
+    readonly contentKey: Schema.brand<Schema.String, "@NakafaAI/AksaraContentKey">;
+    readonly family: Schema.Literals<readonly ["article", "material", "page", "question"]>;
+}>;
+export type PredecessorContentPublicationIdentity = typeof PredecessorContentPublicationIdentitySchema.Type;
+/** Content and structured families authenticated from any signed release. */
+export declare const PublicationScopeSchema: Schema.Struct<{
+    content: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly artifactLocale: Schema.brand<Schema.Literals<readonly ["en", "id", "de"]>, "@NakafaAI/AksaraArtifactLocale">;
+        readonly contentKey: Schema.brand<Schema.String, "@NakafaAI/AksaraContentKey">;
+        readonly family: Schema.Literals<readonly ["article", "material", "page", "question"]>;
+    }>>>;
+    families: Schema.$Array<Schema.Literals<readonly ["article", "material", "page", "question"]>>;
+    snapshots: Schema.$Array<Schema.Literals<readonly ["program", "quran", "tryout"]>>;
+}>;
+export type PublicationScope = typeof PublicationScopeSchema.Type;
+/** Whole-family scope accepted when preparing a new Git release. */
+export declare const GitPublicationScopeSchema: Schema.Struct<{
+    readonly families: Schema.$Array<Schema.Literals<readonly ["article", "material", "page", "question"]>>;
+    readonly snapshots: Schema.$Array<Schema.Literals<readonly ["program", "quran", "tryout"]>>;
+}>;
+export type GitPublicationScope = typeof GitPublicationScopeSchema.Type;
+declare const GitPublicationScopeError_base: Schema.Class<GitPublicationScopeError, Schema.TaggedStruct<"GitPublicationScopeError", {}>, import("effect/Cause").YieldableError>;
+/** New Git release preparation received predecessor-only exact selection. */
+export declare class GitPublicationScopeError extends GitPublicationScopeError_base {
+}
+/** Rejects predecessor-only fields before any new release work begins. */
+export declare const verifyGitPublicationScope: (scope: {
+    readonly content?: readonly {
+        readonly artifactLocale: ("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraArtifactLocale">;
+        readonly contentKey: string & import("effect/Brand").Brand<"@NakafaAI/AksaraContentKey">;
+        readonly family: "article" | "material" | "page" | "question";
+    }[] | undefined;
+    readonly families: readonly ("article" | "material" | "page" | "question")[];
+    readonly snapshots: readonly ("program" | "quran" | "tryout")[];
+}) => Effect.Effect<{
+    readonly families: readonly ("article" | "material" | "page" | "question")[];
+    readonly snapshots: readonly ("program" | "quran" | "tryout")[];
+}, GitPublicationScopeError, never>;
+/** Checks whether one body transition is authorized by the signed scope. */
+export declare function publicationScopeSelectsContent(scope: PublicationScope, identity: PredecessorContentPublicationIdentity): boolean;
+/** Checks whether one structured family may be replaced by this release. */
+export declare function publicationScopeSelectsSnapshot(scope: PublicationScope, family: ContentSnapshotKind): boolean;
+/** Serializes one publication scope with stable signed field order. */
+export declare function canonicalizePublicationScope(scope: PublicationScope): {
+    content?: {
+        artifactLocale: ("de" | "en" | "id") & import("effect/Brand").Brand<"@NakafaAI/AksaraArtifactLocale">;
+        contentKey: string & import("effect/Brand").Brand<"@NakafaAI/AksaraContentKey">;
+        family: "article" | "material" | "page" | "question";
+    }[];
+    families: ("article" | "material" | "page" | "question")[];
+    snapshots: ("program" | "quran" | "tryout")[];
+};
+export {};

package/dist/release/snapshot/scope.js

@@ -0,0 +1,102 @@
+import { Effect, Schema } from "effect";
+import { ContentFamilySchema, compareContentHeads, } from "#contracts/content";
+import { ContentKeySchema } from "#contracts/ids";
+import { ArtifactLocaleSchema } from "#contracts/locale";
+import { compareCodeUnits } from "#contracts/text/order";
+/** Fixed structured families selected by the one global release pointer. */
+export const ContentSnapshotKindSchema = Schema.Literals([
+    "program",
+    "quran",
+    "tryout",
+]);
+/** Authenticates exact content selection retained by predecessor releases. */
+export const PredecessorContentPublicationIdentitySchema = Schema.Struct({
+    artifactLocale: ArtifactLocaleSchema,
+    contentKey: ContentKeySchema,
+    family: ContentFamilySchema,
+});
+/** Orders predecessor scope identities exactly as their signed release did. */
+function comparePredecessorPublicationIdentities(left, right) {
+    const familyOrder = compareCodeUnits(left.family, right.family);
+    return familyOrder || compareContentHeads(left, right);
+}
+/** Accepts only canonical predecessor identities outside selected families. */
+function hasCanonicalPredecessorContent(content, families) {
+    const ordered = content.every((identity, index) => {
+        const previous = content[index - 1];
+        return (previous === undefined ||
+            comparePredecessorPublicationIdentities(previous, identity) < 0);
+    });
+    return ordered && content.every(({ family }) => !families.includes(family));
+}
+/** Checks strict canonical ordering for selected content and snapshot families. */
+function hasCanonicalPublicationScope(input) {
+    const content = input.content ?? [];
+    const contentIsCanonical = hasCanonicalPredecessorContent(content, input.families);
+    const snapshotsAreCanonical = input.snapshots.every((family, index) => {
+        const previous = input.snapshots[index - 1];
+        return (previous === undefined ||
+            ContentSnapshotKindSchema.literals.indexOf(previous) <
+                ContentSnapshotKindSchema.literals.indexOf(family));
+    });
+    const familiesAreCanonical = input.families.every((family, index) => {
+        const previous = input.families[index - 1];
+        return (previous === undefined ||
+            ContentFamilySchema.literals.indexOf(previous) <
+                ContentFamilySchema.literals.indexOf(family));
+    });
+    return (contentIsCanonical &&
+        familiesAreCanonical &&
+        snapshotsAreCanonical &&
+        content.length + input.families.length + input.snapshots.length > 0);
+}
+const PublicationScopeFields = {
+    content: Schema.optional(Schema.Array(PredecessorContentPublicationIdentitySchema)),
+    families: Schema.Array(ContentFamilySchema),
+    snapshots: Schema.Array(ContentSnapshotKindSchema),
+};
+/** Content and structured families authenticated from any signed release. */
+export const PublicationScopeSchema = Schema.Struct(PublicationScopeFields).pipe(Schema.check(Schema.makeFilter(hasCanonicalPublicationScope, {
+    message: "Expected a non-empty publication scope in canonical unique order.",
+})));
+/** Whole-family scope accepted when preparing a new Git release. */
+export const GitPublicationScopeSchema = Schema.Struct({
+    families: PublicationScopeFields.families,
+    snapshots: PublicationScopeFields.snapshots,
+}).pipe(Schema.check(Schema.makeFilter(hasCanonicalPublicationScope, {
+    message: "Expected a non-empty Git publication scope in canonical unique order.",
+})));
+/** New Git release preparation received predecessor-only exact selection. */
+export class GitPublicationScopeError extends Schema.TaggedError()("GitPublicationScopeError", {}) {
+}
+/** Rejects predecessor-only fields before any new release work begins. */
+export const verifyGitPublicationScope = Effect.fn("AksaraContracts.verifyGitPublicationScope")((scope) => Schema.decodeEffect(GitPublicationScopeSchema)(scope, {
+    onExcessProperty: "error",
+}).pipe(Effect.mapError(() => new GitPublicationScopeError())));
+/** Checks whether one body transition is authorized by the signed scope. */
+export function publicationScopeSelectsContent(scope, identity) {
+    return (scope.families.includes(identity.family) ||
+        scope.content?.some((selected) => selected.artifactLocale === identity.artifactLocale &&
+            selected.contentKey === identity.contentKey &&
+            selected.family === identity.family) === true);
+}
+/** Checks whether one structured family may be replaced by this release. */
+export function publicationScopeSelectsSnapshot(scope, family) {
+    return scope.snapshots.includes(family);
+}
+/** Serializes one publication scope with stable signed field order. */
+export function canonicalizePublicationScope(scope) {
+    return {
+        ...(scope.content === undefined
+            ? {}
+            : {
+                content: scope.content.map(({ artifactLocale, contentKey, family }) => ({
+                    artifactLocale,
+                    contentKey,
+                    family,
+                })),
+            }),
+        families: [...scope.families],
+        snapshots: [...scope.snapshots],
+    };
+}

package/dist/release/snapshot/spec.d.ts

@@ -0,0 +1,193 @@
+/** Signed structured snapshot transition contracts. */
+import { Schema } from "effect";
+import { type Sha256Hash } from "#contracts/ids";
+import { type PublicationScope } from "#contracts/release/snapshot/scope";
+/** Canonical digest for a release that stages no structured snapshot rows. */
+export declare const EMPTY_SNAPSHOT_ROW_DIGEST: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+/** One family's immutable snapshot transition authenticated by a release. */
+export declare const ContentSnapshotStateSchema: Schema.Struct<{
+    readonly baseSnapshotId: Schema.NullOr<Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">>;
+    readonly mode: Schema.Literals<readonly ["inherit", "replace", "restore"]>;
+    readonly resultSnapshotId: Schema.NullOr<Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">>;
+    readonly rowCount: Schema.Int;
+    readonly rowDigest: Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">;
+}>;
+export type ContentSnapshotState = typeof ContentSnapshotStateSchema.Type;
+/** Fixed snapshot states prevent a release from omitting one owned family. */
+export declare const ContentSnapshotSetSchema: Schema.Struct<{
+    readonly program: Schema.Struct<{
+        readonly baseSnapshotId: Schema.NullOr<Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">>;
+        readonly mode: Schema.Literals<readonly ["inherit", "replace", "restore"]>;
+        readonly resultSnapshotId: Schema.NullOr<Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">>;
+        readonly rowCount: Schema.Int;
+        readonly rowDigest: Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">;
+    }>;
+    readonly quran: Schema.Struct<{
+        readonly baseSnapshotId: Schema.NullOr<Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">>;
+        readonly mode: Schema.Literals<readonly ["inherit", "replace", "restore"]>;
+        readonly resultSnapshotId: Schema.NullOr<Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">>;
+        readonly rowCount: Schema.Int;
+        readonly rowDigest: Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">;
+    }>;
+    readonly tryout: Schema.Struct<{
+        readonly baseSnapshotId: Schema.NullOr<Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">>;
+        readonly mode: Schema.Literals<readonly ["inherit", "replace", "restore"]>;
+        readonly resultSnapshotId: Schema.NullOr<Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">>;
+        readonly rowCount: Schema.Int;
+        readonly rowDigest: Schema.brand<Schema.String, "@NakafaAI/AksaraSha256Hash">;
+    }>;
+}>;
+export type ContentSnapshotSet = typeof ContentSnapshotSetSchema.Type;
+/** Requires every unselected structured family to remain inherited. */
+export declare function hasScopedSnapshotTransitions(scope: PublicationScope, snapshots: ContentSnapshotSet): boolean;
+/** Checks inheritance, replacement, and forward restore row semantics. */
+export declare function hasCoherentSnapshotState(state: {
+    readonly baseSnapshotId: Sha256Hash | null;
+    readonly mode: "inherit" | "replace" | "restore";
+    readonly resultSnapshotId: Sha256Hash | null;
+    readonly rowCount: number;
+    readonly rowDigest: Sha256Hash;
+}): boolean;
+/** Builds a zero-row transition that preserves one immutable snapshot. */
+export declare function inheritContentSnapshot(snapshotId: ContentSnapshotState["resultSnapshotId"]): {
+    readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+    readonly mode: "inherit" | "replace" | "restore";
+    readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+    readonly rowCount: number;
+    readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+};
+/** Builds fixed inherited states from the prior release's result identities. */
+export declare function inheritContentSnapshots(previous: ContentSnapshotSet | null): {
+    readonly program: {
+        readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly mode: "inherit" | "replace" | "restore";
+        readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly rowCount: number;
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+    readonly quran: {
+        readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly mode: "inherit" | "replace" | "restore";
+        readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly rowCount: number;
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+    readonly tryout: {
+        readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly mode: "inherit" | "replace" | "restore";
+        readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly rowCount: number;
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+};
+/** Reconstructs inherited prior state from one signed transition's base IDs. */
+export declare function baseContentSnapshots(snapshots: ContentSnapshotSet): {
+    readonly program: {
+        readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly mode: "inherit" | "replace" | "restore";
+        readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly rowCount: number;
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+    readonly quran: {
+        readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly mode: "inherit" | "replace" | "restore";
+        readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly rowCount: number;
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+    readonly tryout: {
+        readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly mode: "inherit" | "replace" | "restore";
+        readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly rowCount: number;
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+};
+/** Builds a full replacement transition for one prepared snapshot. */
+export declare function replaceContentSnapshot(input: {
+    readonly baseSnapshotId: ContentSnapshotState["baseSnapshotId"];
+    readonly resultSnapshotId: Exclude<ContentSnapshotState["resultSnapshotId"], null>;
+    readonly rowCount: number;
+    readonly rowDigest: Sha256Hash;
+}): {
+    readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+    readonly mode: "inherit" | "replace" | "restore";
+    readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+    readonly rowCount: number;
+    readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+};
+/** Builds a row-free forward restore to an existing or absent snapshot. */
+export declare function restoreContentSnapshot(baseSnapshotId: ContentSnapshotState["baseSnapshotId"], resultSnapshotId: ContentSnapshotState["resultSnapshotId"]): {
+    readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+    readonly mode: "inherit" | "replace" | "restore";
+    readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+    readonly rowCount: number;
+    readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+};
+/** Builds the retained inverse without copying immutable snapshot rows. */
+export declare function invertContentSnapshots(snapshots: ContentSnapshotSet): {
+    readonly program: {
+        readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly mode: "inherit" | "replace" | "restore";
+        readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly rowCount: number;
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+    readonly quran: {
+        readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly mode: "inherit" | "replace" | "restore";
+        readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly rowCount: number;
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+    readonly tryout: {
+        readonly baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly mode: "inherit" | "replace" | "restore";
+        readonly resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        readonly rowCount: number;
+        readonly rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+};
+/** Checks that an initial release does not claim an unstated snapshot base. */
+export declare function hasEmptySnapshotBases(snapshots: ContentSnapshotSet): boolean;
+/** Checks that a rollback only inherits or restores immutable snapshots. */
+export declare function hasRollbackSnapshotModes(snapshots: ContentSnapshotSet): boolean;
+/** Checks that reviewed Git sources only inherit or replace snapshots. */
+export declare function hasGitSnapshotModes(snapshots: ContentSnapshotSet): boolean;
+/** Returns the number of rows that must be staged for this release. */
+export declare function snapshotRowCount(snapshots: ContentSnapshotSet): number;
+/** Serializes one snapshot transition with stable signed field order. */
+export declare function canonicalizeContentSnapshotState(state: ContentSnapshotState): {
+    baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+    mode: "inherit" | "replace" | "restore";
+    resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+    rowCount: number;
+    rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+};
+/** Serializes all fixed snapshot families with stable signed field order. */
+export declare function canonicalizeContentSnapshotSet(snapshots: ContentSnapshotSet): {
+    program: {
+        baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        mode: "inherit" | "replace" | "restore";
+        resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        rowCount: number;
+        rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+    quran: {
+        baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        mode: "inherit" | "replace" | "restore";
+        resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        rowCount: number;
+        rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+    tryout: {
+        baseSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        mode: "inherit" | "replace" | "restore";
+        resultSnapshotId: (string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">) | null;
+        rowCount: number;
+        rowDigest: string & import("effect/Brand").Brand<"@NakafaAI/AksaraSha256Hash">;
+    };
+};
+/** Compares two fixed snapshot sets through their stable signed form. */
+export declare function hasSameContentSnapshots(left: ContentSnapshotSet, right: ContentSnapshotSet): boolean;