@namzu/sdk 38.1.0 → 39.0.0

package/dist/manager/resident/outbox.d.ts

@@ -0,0 +1,180 @@
+import { z } from 'zod';
+import type { ResidentAgendaState } from './agenda.js';
+export declare const residentMessageInputSchema: z.ZodObject<{
+    id: z.ZodString;
+    pursuitId: z.ZodString;
+    destination: z.ZodString;
+    body: z.ZodEffects<z.ZodString, string, string>;
+    notBefore: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    body: string;
+    pursuitId: string;
+    destination: string;
+    notBefore: number;
+}, {
+    id: string;
+    body: string;
+    pursuitId: string;
+    destination: string;
+    notBefore: number;
+}>;
+/** @experimental Host-approved content and an opaque destination route, never credentials. */
+export type ResidentMessageInput = Readonly<z.infer<typeof residentMessageInputSchema>>;
+export declare const residentOutboxMessageSchema: z.ZodEffects<z.ZodObject<{
+    id: z.ZodString;
+    pursuitId: z.ZodString;
+    destination: z.ZodString;
+    body: z.ZodEffects<z.ZodString, string, string>;
+    notBefore: z.ZodNumber;
+} & {
+    tenantId: z.ZodString;
+    agentKey: z.ZodString;
+    sourceClaimId: z.ZodNullable<z.ZodString>;
+    revision: z.ZodNumber;
+    attempts: z.ZodNumber;
+    phase: z.ZodEnum<["pending", "sending", "acknowledged", "cancelled"]>;
+    claimId: z.ZodNullable<z.ZodString>;
+    nextAttemptAt: z.ZodNullable<z.ZodNumber>;
+    receiptId: z.ZodNullable<z.ZodString>;
+    acknowledgedAt: z.ZodNullable<z.ZodNumber>;
+    lastReason: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    phase: "pending" | "cancelled" | "sending" | "acknowledged";
+    revision: number;
+    attempts: number;
+    tenantId: string;
+    body: string;
+    agentKey: string;
+    pursuitId: string;
+    claimId: string | null;
+    destination: string;
+    notBefore: number;
+    sourceClaimId: string | null;
+    nextAttemptAt: number | null;
+    receiptId: string | null;
+    acknowledgedAt: number | null;
+    lastReason: string | null;
+}, {
+    id: string;
+    phase: "pending" | "cancelled" | "sending" | "acknowledged";
+    revision: number;
+    attempts: number;
+    tenantId: string;
+    body: string;
+    agentKey: string;
+    pursuitId: string;
+    claimId: string | null;
+    destination: string;
+    notBefore: number;
+    sourceClaimId: string | null;
+    nextAttemptAt: number | null;
+    receiptId: string | null;
+    acknowledgedAt: number | null;
+    lastReason: string | null;
+}>, {
+    id: string;
+    phase: "pending" | "cancelled" | "sending" | "acknowledged";
+    revision: number;
+    attempts: number;
+    tenantId: string;
+    body: string;
+    agentKey: string;
+    pursuitId: string;
+    claimId: string | null;
+    destination: string;
+    notBefore: number;
+    sourceClaimId: string | null;
+    nextAttemptAt: number | null;
+    receiptId: string | null;
+    acknowledgedAt: number | null;
+    lastReason: string | null;
+}, {
+    id: string;
+    phase: "pending" | "cancelled" | "sending" | "acknowledged";
+    revision: number;
+    attempts: number;
+    tenantId: string;
+    body: string;
+    agentKey: string;
+    pursuitId: string;
+    claimId: string | null;
+    destination: string;
+    notBefore: number;
+    sourceClaimId: string | null;
+    nextAttemptAt: number | null;
+    receiptId: string | null;
+    acknowledgedAt: number | null;
+    lastReason: string | null;
+}>;
+/** @experimental Acknowledgment proves transport acceptance, not human reading. */
+export type ResidentOutboxMessage = Readonly<z.infer<typeof residentOutboxMessageSchema>>;
+export declare const residentDeliveryOutcomeSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"acknowledged">;
+    receiptId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    kind: "acknowledged";
+    receiptId: string;
+}, {
+    kind: "acknowledged";
+    receiptId: string;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"not-accepted">;
+    retryAt: z.ZodNullable<z.ZodNumber>;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    kind: "not-accepted";
+    reason: string;
+    retryAt: number | null;
+}, {
+    kind: "not-accepted";
+    reason: string;
+    retryAt: number | null;
+}>]>;
+/** @experimental Retry only with evidence of non-acceptance; null retryAt ends delivery. */
+export type ResidentDeliveryOutcome = Readonly<z.infer<typeof residentDeliveryOutcomeSchema>>;
+/** @experimental Atomic admission and exact-claim settlement, without automatic claim expiry. */
+export interface ResidentOutboxStore {
+    read(): Promise<ResidentAgendaState | null>;
+    claimMessage(expected: ResidentAgendaState, id: string, now: number): Promise<ResidentOutboxMessage>;
+    settleMessage(expected: ResidentOutboxMessage, outcome: ResidentDeliveryOutcome, now: number): Promise<ResidentOutboxMessage>;
+}
+/** @experimental A synchronous host policy, evaluated before claiming and again before sending. */
+export type ResidentDeliveryGate = (message: ResidentOutboxMessage, now: number) => {
+    readonly allow: true;
+} | {
+    readonly allow: false;
+    readonly nextCheckAt: number | null;
+    readonly reason: string;
+};
+/** @experimental Bind an authorized route; forward message.id as the stable idempotency key. */
+export type ResidentMessageTransport = (message: ResidentOutboxMessage, signal: AbortSignal) => Promise<ResidentDeliveryOutcome>;
+/** @experimental One dispatch admission, with no model invocation, polling or implicit retries. */
+export interface ResidentDeliveryOptions {
+    readonly signal: AbortSignal;
+    readonly gate: ResidentDeliveryGate;
+    readonly now?: () => number;
+}
+/** @experimental An idle result never asserts a message reached its destination. */
+export type ResidentDeliveryResult = {
+    readonly status: 'settled';
+    readonly message: ResidentOutboxMessage;
+} | {
+    readonly status: 'idle';
+    readonly reason: 'paused' | 'unresolved' | 'empty' | 'not-due' | 'window' | 'contended';
+    readonly nextCheckAt: number | null;
+};
+/** Internal pure enqueue used in the same revision transaction as pursuit settlement. */
+export declare function appendResidentMessage(state: ResidentAgendaState, input: ResidentMessageInput, sourceClaimId?: string | null): readonly ResidentOutboxMessage[];
+/** Internal exact-message transition; agenda storage owns exclusive admission. */
+export declare function claimResidentOutboxMessage(message: ResidentOutboxMessage, now: number): ResidentOutboxMessage;
+/** Internal settlement; unknown failures deliberately have no transition. */
+export declare function settleResidentOutboxMessage(message: ResidentOutboxMessage, outcome: ResidentDeliveryOutcome, now: number): ResidentOutboxMessage;
+/**
+ * @experimental Persist one send claim before calling a host-owned transport.
+ * Throws, malformed outcomes and cancellation keep the claim unresolved. Stop
+ * old executors and inspect effects before explicit settleMessage reconciliation.
+ */
+export declare function deliverResidentMessage(store: ResidentOutboxStore, transport: ResidentMessageTransport, options: ResidentDeliveryOptions): Promise<ResidentDeliveryResult>;
+//# sourceMappingURL=outbox.d.ts.map

package/dist/manager/resident/outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../../src/manager/resident/outbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAMtD,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;EAUrC,CAAA;AAEF,8FAA8F;AAC9F,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC,CAAA;AAEvF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBrC,CAAA;AAEH,mFAAmF;AACnF,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC,CAAA;AAEzF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;IAOxC,CAAA;AAEF,4FAA4F;AAC5F,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC,CAAA;AAE7F,iGAAiG;AACjG,MAAM,WAAW,mBAAmB;IACnC,IAAI,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;IAC3C,YAAY,CACX,QAAQ,EAAE,mBAAmB,EAC7B,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjC,aAAa,CACZ,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,qBAAqB,CAAC,CAAA;CACjC;AAED,mGAAmG;AACnG,MAAM,MAAM,oBAAoB,GAAG,CAClC,OAAO,EAAE,qBAAqB,EAC9B,GAAG,EAAE,MAAM,KAET;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACxB;IACA,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACtB,CAAA;AAEJ,gGAAgG;AAChG,MAAM,MAAM,wBAAwB,GAAG,CACtC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,WAAW,KACf,OAAO,CAAC,uBAAuB,CAAC,CAAA;AAErC,mGAAmG;AACnG,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC3B;AAED,oFAAoF;AACpF,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GACvE;IACA,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAA;IACvF,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC,CAAA;AAEJ,yFAAyF;AACzF,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,mBAAmB,EAC1B,KAAK,EAAE,oBAAoB,EAC3B,aAAa,GAAE,MAAM,GAAG,IAAW,GACjC,SAAS,qBAAqB,EAAE,CAqClC;AAED,kFAAkF;AAClF,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,qBAAqB,EAC9B,GAAG,EAAE,MAAM,GACT,qBAAqB,CAcvB;AAED,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACT,qBAAqB,CAoBvB;AAmBD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC3C,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,wBAAwB,EACnC,OAAO,EAAE,uBAAuB,GAC9B,OAAO,CAAC,sBAAsB,CAAC,CA4EjC"}

package/dist/manager/resident/outbox.js

@@ -0,0 +1,214 @@
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { ResidentConflictError } from './store.js';
+const time = z.number().int().nonnegative().safe().max(8_640_000_000_000_000);
+const label = z.string().trim().min(1).max(256);
+export const residentMessageInputSchema = z.object({
+    id: z.string().uuid(),
+    pursuitId: z.string().uuid(),
+    destination: label,
+    body: z
+        .string()
+        .min(1)
+        .max(8_000)
+        .refine((value) => value.trim().length > 0),
+    notBefore: time,
+});
+export const residentOutboxMessageSchema = residentMessageInputSchema
+    .extend({
+    tenantId: z.string().uuid(),
+    agentKey: z.string().min(1).max(200),
+    sourceClaimId: z.string().uuid().nullable(),
+    revision: z.number().int().positive().safe(),
+    attempts: z.number().int().nonnegative().safe(),
+    phase: z.enum(['pending', 'sending', 'acknowledged', 'cancelled']),
+    claimId: z.string().uuid().nullable(),
+    nextAttemptAt: time.nullable(),
+    receiptId: label.nullable(),
+    acknowledgedAt: time.nullable(),
+    lastReason: z.string().trim().min(1).max(1_000).nullable(),
+})
+    .superRefine((message, context) => {
+    if ((message.phase === 'sending') !== (message.claimId !== null) ||
+        (message.phase === 'pending') !== (message.nextAttemptAt !== null) ||
+        (message.phase === 'acknowledged') !== (message.receiptId !== null) ||
+        (message.phase === 'acknowledged') !== (message.acknowledgedAt !== null) ||
+        (message.nextAttemptAt !== null && message.nextAttemptAt < message.notBefore) ||
+        (message.phase !== 'pending' && message.attempts === 0))
+        context.addIssue({ code: z.ZodIssueCode.custom, message: 'Invalid outbox lifecycle.' });
+});
+export const residentDeliveryOutcomeSchema = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('acknowledged'), receiptId: label }),
+    z.object({
+        kind: z.literal('not-accepted'),
+        retryAt: time.nullable(),
+        reason: z.string().trim().min(1).max(1_000),
+    }),
+]);
+/** Internal pure enqueue used in the same revision transaction as pursuit settlement. */
+export function appendResidentMessage(state, input, sourceClaimId = null) {
+    const checked = residentMessageInputSchema.parse(input);
+    if (!state.pursuits.some((p) => p.id === checked.pursuitId))
+        throw new Error('Outbox message references an unknown pursuit.');
+    const messages = state.outbox ?? [];
+    const existing = messages.find((message) => message.id === checked.id);
+    if (existing) {
+        if (existing.pursuitId !== checked.pursuitId ||
+            existing.destination !== checked.destination ||
+            existing.body !== checked.body ||
+            existing.notBefore !== checked.notBefore ||
+            existing.sourceClaimId !== sourceClaimId)
+            throw new Error('Outbox message ID already names a different immutable intent.');
+        return messages;
+    }
+    if (messages.length >= 128)
+        throw new Error('Resident outbox capacity reached (128 intents).');
+    return [
+        ...messages,
+        Object.freeze(residentOutboxMessageSchema.parse({
+            ...checked,
+            tenantId: state.tenantId,
+            agentKey: state.agentKey,
+            sourceClaimId,
+            revision: 1,
+            attempts: 0,
+            phase: 'pending',
+            claimId: null,
+            nextAttemptAt: checked.notBefore,
+            receiptId: null,
+            acknowledgedAt: null,
+            lastReason: null,
+        })),
+    ];
+}
+/** Internal exact-message transition; agenda storage owns exclusive admission. */
+export function claimResidentOutboxMessage(message, now) {
+    time.parse(now);
+    if (message.phase !== 'pending' || message.nextAttemptAt === null || message.nextAttemptAt > now)
+        throw new ResidentConflictError();
+    return Object.freeze(residentOutboxMessageSchema.parse({
+        ...message,
+        revision: message.revision + 1,
+        attempts: message.attempts + 1,
+        phase: 'sending',
+        claimId: randomUUID(),
+        nextAttemptAt: null,
+    }));
+}
+/** Internal settlement; unknown failures deliberately have no transition. */
+export function settleResidentOutboxMessage(message, outcome, now) {
+    time.parse(now);
+    const checked = residentDeliveryOutcomeSchema.parse(outcome);
+    if (message.phase !== 'sending' || message.claimId === null)
+        throw new ResidentConflictError();
+    if (checked.kind === 'not-accepted' && checked.retryAt !== null && checked.retryAt <= now)
+        throw new TypeError('A delivery retry must be scheduled in the future.');
+    return Object.freeze(residentOutboxMessageSchema.parse({
+        ...message,
+        revision: message.revision + 1,
+        claimId: null,
+        ...(checked.kind === 'acknowledged'
+            ? { phase: 'acknowledged', receiptId: checked.receiptId, acknowledgedAt: now }
+            : {
+                phase: checked.retryAt === null ? 'cancelled' : 'pending',
+                nextAttemptAt: checked.retryAt,
+                lastReason: checked.reason,
+            }),
+    }));
+}
+function admission(gate, message, now) {
+    const result = gate(message, now);
+    if (result.allow === true)
+        return result;
+    if (result.allow !== false ||
+        typeof result.reason !== 'string' ||
+        !result.reason.trim() ||
+        result.reason.trim().length > 1_000)
+        throw new TypeError('Invalid resident delivery gate result.');
+    if (result.nextCheckAt !== null) {
+        time.parse(result.nextCheckAt);
+        if (result.nextCheckAt <= now)
+            throw new TypeError('Delivery gate must defer into the future.');
+    }
+    return result;
+}
+/**
+ * @experimental Persist one send claim before calling a host-owned transport.
+ * Throws, malformed outcomes and cancellation keep the claim unresolved. Stop
+ * old executors and inspect effects before explicit settleMessage reconciliation.
+ */
+export async function deliverResidentMessage(store, transport, options) {
+    const { signal, gate } = options;
+    const clock = options.now ?? Date.now;
+    const now = () => time.parse(clock());
+    signal.throwIfAborted();
+    const state = await store.read();
+    signal.throwIfAborted();
+    if (!state)
+        throw new Error('Create the resident agenda before delivering messages.');
+    const idle = (reason, nextCheckAt = null) => ({ status: 'idle', reason, nextCheckAt });
+    if (state.paused)
+        return idle('paused');
+    const messages = state.outbox ?? [];
+    if (messages.some((message) => message.phase === 'sending'))
+        return idle('unresolved');
+    const pending = messages.filter((message) => message.phase === 'pending');
+    if (!pending.length)
+        return idle('empty');
+    let nextCheckAt = null;
+    let gated = false;
+    const at = now();
+    for (const message of pending.sort((a, b) => (a.nextAttemptAt ?? 0) - (b.nextAttemptAt ?? 0) || a.id.localeCompare(b.id))) {
+        if (message.nextAttemptAt !== null && message.nextAttemptAt > at) {
+            nextCheckAt = Math.min(nextCheckAt ?? Number.POSITIVE_INFINITY, message.nextAttemptAt);
+            continue;
+        }
+        const permission = admission(gate, message, at);
+        signal.throwIfAborted();
+        if (!permission.allow) {
+            gated = true;
+            if (permission.nextCheckAt !== null)
+                nextCheckAt = Math.min(nextCheckAt ?? Number.POSITIVE_INFINITY, permission.nextCheckAt);
+            continue;
+        }
+        let claimed;
+        try {
+            claimed = await store.claimMessage(state, message.id, now());
+        }
+        catch (error) {
+            if (error instanceof ResidentConflictError)
+                return idle('contended');
+            throw error;
+        }
+        signal.throwIfAborted();
+        const fresh = await store.read();
+        signal.throwIfAborted();
+        const current = fresh?.outbox?.find((item) => item.id === claimed.id);
+        if (!current || current.revision !== claimed.revision || current.claimId !== claimed.claimId)
+            return idle('contended');
+        // A pause or closing window during admission must not start the transport.
+        const checkedAt = now();
+        const permissionNow = fresh?.paused
+            ? {
+                allow: false,
+                nextCheckAt: checkedAt + 1,
+                reason: 'Resident agenda paused before send.',
+            }
+            : admission(gate, claimed, checkedAt);
+        if (!permissionNow.allow) {
+            // Transport has not been entered: scheduling another check has no remote effect.
+            await store.settleMessage(claimed, {
+                kind: 'not-accepted',
+                retryAt: permissionNow.nextCheckAt ?? checkedAt + 1,
+                reason: permissionNow.reason,
+            }, checkedAt);
+            return idle(fresh?.paused ? 'paused' : 'window', permissionNow.nextCheckAt);
+        }
+        signal.throwIfAborted();
+        const outcome = await transport(claimed, signal);
+        signal.throwIfAborted();
+        return { status: 'settled', message: await store.settleMessage(claimed, outcome, now()) };
+    }
+    return idle(gated ? 'window' : 'not-due', nextCheckAt);
+}
+//# sourceMappingURL=outbox.js.map

package/dist/manager/resident/outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../../src/manager/resident/outbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAElD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;AAC7E,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAE/C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC5B,WAAW,EAAE,KAAK;IAClB,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,KAAK,CAAC;SACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5C,SAAS,EAAE,IAAI;CACf,CAAC,CAAA;AAKF,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B;KACnE,MAAM,CAAC;IACP,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;IAC3B,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IACjC,IACC,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;QAC5D,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC;QAClE,CAAC,OAAO,CAAC,KAAK,KAAK,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC;QACnE,CAAC,OAAO,CAAC,KAAK,KAAK,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;QACxE,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC;QAC7E,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC;QAEvD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAA;AACzF,CAAC,CAAC,CAAA;AAKH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC/B,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;KAC3C,CAAC;CACF,CAAC,CAAA;AAsDF,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CACpC,KAA0B,EAC1B,KAA2B,EAC3B,gBAA+B,IAAI;IAEnC,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACvD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAA;IACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAA;IACtE,IAAI,QAAQ,EAAE,CAAC;QACd,IACC,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YACxC,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;YAC5C,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAC9B,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YACxC,QAAQ,CAAC,aAAa,KAAK,aAAa;YAExC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;QACjF,OAAO,QAAQ,CAAA;IAChB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IAC9F,OAAO;QACN,GAAG,QAAQ;QACX,MAAM,CAAC,MAAM,CACZ,2BAA2B,CAAC,KAAK,CAAC;YACjC,GAAG,OAAO;YACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa;YACb,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,OAAO,CAAC,SAAS;YAChC,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;SAChB,CAAC,CACF;KACD,CAAA;AACF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,0BAA0B,CACzC,OAA8B,EAC9B,GAAW;IAEX,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACf,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,CAAC,aAAa,GAAG,GAAG;QAC/F,MAAM,IAAI,qBAAqB,EAAE,CAAA;IAClC,OAAO,MAAM,CAAC,MAAM,CACnB,2BAA2B,CAAC,KAAK,CAAC;QACjC,GAAG,OAAO;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC;QAC9B,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,UAAU,EAAE;QACrB,aAAa,EAAE,IAAI;KACnB,CAAC,CACF,CAAA;AACF,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,2BAA2B,CAC1C,OAA8B,EAC9B,OAAgC,EAChC,GAAW;IAEX,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACf,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC5D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,qBAAqB,EAAE,CAAA;IAC9F,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,IAAI,GAAG;QACxF,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAA;IACzE,OAAO,MAAM,CAAC,MAAM,CACnB,2BAA2B,CAAC,KAAK,CAAC;QACjC,GAAG,OAAO;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC;QAC9B,OAAO,EAAE,IAAI;QACb,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc;YAClC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,EAAE;YAC9E,CAAC,CAAC;gBACA,KAAK,EAAE,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACzD,aAAa,EAAE,OAAO,CAAC,OAAO;gBAC9B,UAAU,EAAE,OAAO,CAAC,MAAM;aAC1B,CAAC;KACJ,CAAC,CACF,CAAA;AACF,CAAC;AAED,SAAS,SAAS,CAAC,IAA0B,EAAE,OAA8B,EAAE,GAAW;IACzF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACjC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACxC,IACC,MAAM,CAAC,KAAK,KAAK,KAAK;QACtB,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACrB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,KAAK;QAEnC,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;IAC9D,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC9B,IAAI,MAAM,CAAC,WAAW,IAAI,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,KAA0B,EAC1B,SAAmC,EACnC,OAAgC;IAEhC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACrC,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;IACrC,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAChC,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IACrF,MAAM,IAAI,GAAG,CACZ,MAAqE,EACrE,cAA6B,IAAI,EACR,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;IACtE,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAA;IACnC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAA;IACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;IACzE,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,WAAW,GAAkB,IAAI,CAAA;IACrC,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,MAAM,EAAE,GAAG,GAAG,EAAE,CAAA;IAChB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CACrF,EAAE,CAAC;QACH,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC;YAClE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;YACtF,SAAQ;QACT,CAAC;QACD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QAC/C,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,GAAG,IAAI,CAAA;YACZ,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI;gBAClC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,iBAAiB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;YACxF,SAAQ;QACT,CAAC;QACD,IAAI,OAA8B,CAAA;QAClC,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,qBAAqB;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAA;YACpE,MAAM,KAAK,CAAA;QACZ,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAChC,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,OAAO,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAA;QACrE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAC3F,OAAO,IAAI,CAAC,WAAW,CAAC,CAAA;QACzB,2EAA2E;QAC3E,MAAM,SAAS,GAAG,GAAG,EAAE,CAAA;QACvB,MAAM,aAAa,GAAG,KAAK,EAAE,MAAM;YAClC,CAAC,CAAC;gBACA,KAAK,EAAE,KAAc;gBACrB,WAAW,EAAE,SAAS,GAAG,CAAC;gBAC1B,MAAM,EAAE,qCAAqC;aAC7C;YACF,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QACtC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YAC1B,iFAAiF;YACjF,MAAM,KAAK,CAAC,aAAa,CACxB,OAAO,EACP;gBACC,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,aAAa,CAAC,WAAW,IAAI,SAAS,GAAG,CAAC;gBACnD,MAAM,EAAE,aAAa,CAAC,MAAM;aAC5B,EACD,SAAS,CACT,CAAA;YACD,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAChD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAA;IAC1F,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;AACvD,CAAC"}

package/dist/manager/resident/proposal.d.ts

@@ -0,0 +1,91 @@
+import { z } from 'zod';
+import type { ResidentAgendaState } from './agenda.js';
+export declare const residentProposalSchema: z.ZodObject<{
+    id: z.ZodString;
+    parentId: z.ZodString;
+    parentRevision: z.ZodNumber;
+    domain: z.ZodEffects<z.ZodString, string, string>;
+    objective: z.ZodString;
+    reason: z.ZodString;
+    evidenceKey: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    parentId: string;
+    id: string;
+    reason: string;
+    domain: string;
+    objective: string;
+    evidenceKey: string;
+    parentRevision: number;
+}, {
+    parentId: string;
+    id: string;
+    reason: string;
+    domain: string;
+    objective: string;
+    evidenceKey: string;
+    parentRevision: number;
+}>;
+export declare const residentProposalLimitsSchema: z.ZodObject<{
+    domains: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    maxChildrenPerParent: z.ZodNumber;
+    maxDepth: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    maxDepth: number;
+    domains: string[];
+    maxChildrenPerParent: number;
+}, {
+    maxDepth: number;
+    domains: string[];
+    maxChildrenPerParent: number;
+}>;
+/** @experimental An inert subgoal proposal; creating it grants no execution authority. */
+export interface ResidentProposal {
+    readonly id: string;
+    readonly parentId: string;
+    readonly parentRevision: number;
+    readonly domain: string;
+    readonly objective: string;
+    readonly reason: string;
+    readonly evidenceKey: string;
+}
+/** @experimental Host-approved routing domains and finite subgoal admission bounds. */
+export interface ResidentProposalLimits {
+    readonly domains: readonly string[];
+    readonly maxChildrenPerParent: number;
+    readonly maxDepth: number;
+}
+/** Persisted provenance shared with the agenda's schema validation. */
+export declare const residentProposalOriginSchema: z.ZodObject<{
+    proposalId: z.ZodString;
+    parentId: z.ZodString;
+    parentRevision: z.ZodNumber;
+    domain: z.ZodEffects<z.ZodString, string, string>;
+    reason: z.ZodString;
+    evidenceKey: z.ZodString;
+    depth: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    parentId: string;
+    reason: string;
+    depth: number;
+    domain: string;
+    evidenceKey: string;
+    parentRevision: number;
+    proposalId: string;
+}, {
+    parentId: string;
+    reason: string;
+    depth: number;
+    domain: string;
+    evidenceKey: string;
+    parentRevision: number;
+    proposalId: string;
+}>;
+/** @experimental Host-admitted ancestry and evidence for a resident subgoal. */
+export type ResidentProposalOrigin = Readonly<z.infer<typeof residentProposalOriginSchema>>;
+/**
+ * @experimental Pure validation against one agenda snapshot. The host must
+ * atomically bind this snapshot to admission. Domains are routing metadata;
+ * this does not prove an objective fits its domain or authorize any tools.
+ */
+export declare function validateResidentProposal(agenda: ResidentAgendaState, input: ResidentProposal, limits: ResidentProposalLimits): ResidentProposalOrigin;
+//# sourceMappingURL=proposal.d.ts.map

package/dist/manager/resident/proposal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal.d.ts","sourceRoot":"","sources":["../../../src/manager/resident/proposal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAYtD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;EAQjC,CAAA;AAEF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;EAIvC,CAAA;AAEF,0FAA0F;AAC1F,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC5B;AAED,uFAAuF;AACvF,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CACzB;AAED,uEAAuE;AACvE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;EAQvC,CAAA;AAEF,gFAAgF;AAChF,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC,CAAA;AAE3F;;;;GAIG;AACH,wBAAgB,wBAAwB,CACvC,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,sBAAsB,GAC5B,sBAAsB,CAkCxB"}

package/dist/manager/resident/proposal.js

@@ -0,0 +1,75 @@
+import { z } from 'zod';
+const identifier = z.string().uuid();
+const revision = z.number().int().positive().safe();
+const domain = z
+    .string()
+    .min(1)
+    .max(120)
+    .refine((value) => value.trim().length > 0, 'A proposal domain must contain text.');
+const reason = z.string().trim().min(1).max(1_000);
+const evidenceKey = z.string().trim().min(1).max(256);
+export const residentProposalSchema = z.object({
+    id: identifier,
+    parentId: identifier,
+    parentRevision: revision,
+    domain,
+    objective: z.string().trim().min(1).max(8_000),
+    reason,
+    evidenceKey,
+});
+export const residentProposalLimitsSchema = z.object({
+    domains: z.array(domain).min(1),
+    maxChildrenPerParent: z.number().int().min(1).max(8),
+    maxDepth: z.number().int().min(1).max(4),
+});
+/** Persisted provenance shared with the agenda's schema validation. */
+export const residentProposalOriginSchema = z.object({
+    proposalId: identifier,
+    parentId: identifier,
+    parentRevision: revision,
+    domain,
+    reason,
+    evidenceKey,
+    depth: z.number().int().min(1).max(4),
+});
+/**
+ * @experimental Pure validation against one agenda snapshot. The host must
+ * atomically bind this snapshot to admission. Domains are routing metadata;
+ * this does not prove an objective fits its domain or authorize any tools.
+ */
+export function validateResidentProposal(agenda, input, limits) {
+    const proposal = residentProposalSchema.parse(input);
+    const policy = residentProposalLimitsSchema.parse(limits);
+    if (agenda.paused)
+        throw new Error('A paused agenda cannot admit resident proposals.');
+    if (agenda.pursuits.length >= 32)
+        throw new Error('Resident agenda pursuit bound reached.');
+    if (agenda.pursuits.some((pursuit) => pursuit.origin?.proposalId === proposal.id))
+        throw new Error('Resident proposal has already been admitted.');
+    const parent = agenda.pursuits.find((pursuit) => pursuit.id === proposal.parentId);
+    if (!parent)
+        throw new Error('Unknown resident proposal parent.');
+    if (parent.state.revision !== proposal.parentRevision)
+        throw new Error('Resident proposal parent revision is stale.');
+    if (parent.state.phase !== 'waiting' && parent.state.phase !== 'complete')
+        throw new Error('Resident proposal parent must be waiting or complete.');
+    if (!policy.domains.includes(proposal.domain))
+        throw new Error('Resident proposal domain is not host-approved.');
+    if (agenda.pursuits.filter((pursuit) => pursuit.origin?.parentId === parent.id).length +
+        (parent.retiredChildren ?? 0) >=
+        policy.maxChildrenPerParent)
+        throw new Error('Resident proposal parent child bound reached.');
+    const depth = (parent.origin?.depth ?? 0) + 1;
+    if (depth > policy.maxDepth)
+        throw new Error('Resident proposal depth bound reached.');
+    return Object.freeze(residentProposalOriginSchema.parse({
+        proposalId: proposal.id,
+        parentId: proposal.parentId,
+        parentRevision: proposal.parentRevision,
+        domain: proposal.domain,
+        reason: proposal.reason,
+        evidenceKey: proposal.evidenceKey,
+        depth,
+    }));
+}
+//# sourceMappingURL=proposal.js.map

package/dist/manager/resident/proposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal.js","sourceRoot":"","sources":["../../../src/manager/resident/proposal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAA;AACpC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;AACnD,MAAM,MAAM,GAAG,CAAC;KACd,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,sCAAsC,CAAC,CAAA;AACpF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AAClD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAErD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,UAAU;IACd,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,QAAQ;IACxB,MAAM;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC9C,MAAM;IACN,WAAW;CACX,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACxC,CAAC,CAAA;AAoBF,uEAAuE;AACvE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,UAAU;IACtB,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,QAAQ;IACxB,MAAM;IACN,MAAM;IACN,WAAW;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACrC,CAAC,CAAA;AAKF;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACvC,MAA2B,EAC3B,KAAuB,EACvB,MAA8B;IAE9B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACzD,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACtF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3F,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,QAAQ,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAClF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACjE,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,cAAc;QACpD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAC/D,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU;QACxE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IACzE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IAClE,IACC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM;QACjF,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,oBAAoB;QAE3B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IAC7C,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IACtF,OAAO,MAAM,CAAC,MAAM,CACnB,4BAA4B,CAAC,KAAK,CAAC;QAClC,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,KAAK;KACL,CAAC,CACF,CAAA;AACF,CAAC"}