@neuraloom/contracts 0.1.22 → 0.1.23

package/dist/schemas/cortex/bridge-events.schema.js

@@ -3,7 +3,8 @@
  * Cortex × NeuraLoom bridge event payloads + ingestion receipts (v1.0.0).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BRIDGE_EVENT_PAYLOAD_SCHEMAS = exports.githubReadResultSchema = exports.githubReadRequestSchema = exports.CodexRunnerCredentialRequestSchema = exports.CodexExecutorRuntimeResultPayloadSchema = exports.CodexExecutorRuntimeRequestPayloadSchema = exports.CodexExecutorWorkflowResultPayloadSchema = exports.CodexExecutorWorkflowRequestPayloadSchema = exports.CodexExecutorAuthorizationResultPayloadSchema = exports.CodexExecutorAuthorizationRequestPayloadSchema = exports.CodexExecutorRuntimeJobSchema = exports.CodexSignedSandboxWorkerPayloadSchema = exports.CodexSignedWorkerPayloadSchema = exports.CodexExecutorApprovedScopeSchema = exports.CodexExecutorRuntimeIdentitySchema = exports.CortexBridgeIngestionReceiptApiResponseSchema = exports.NeuraloomIngestionReceiptPayloadSchema = exports.CortexIngestionReceiptPayloadSchema = exports.ProductReleasePackageMvpBridgePayloadSchema = exports.DocDriftDetectedPayloadSchema = exports.DocDraftReadyPayloadSchema = exports.GuardianViolationEventPayloadSchema = exports.EngineeringCheckpointRecordedPayloadSchema = exports.EngineeringCheckpointVerificationSummarySchema = exports.EngineeringCheckpointRevisionSummarySchema = exports.ProofRunRecordedPayloadSchema = exports.PullRequestReadyPayloadSchema = exports.ImplementationPlanReadyPayloadSchema = exports.RepoFindingTaskPayloadSchema = exports.RepoIntelligenceResultPayloadSchema = exports.FindingReconciliationEvidenceSchema = exports.REPO_INTEL_ACTIVE_FINDING_IDS_MAX = exports.NeuraloomGraphGapsSchema = exports.NEURALOOM_GRAPH_GAPS_MAX_NODES = exports.NeuraloomGraphGapNodeSchema = exports.NeuraloomGraphGapStatusSchema = exports.NeuraloomGraphGapSeveritySchema = exports.NEURALOOM_GRAPH_GAPS_VERSION = exports.TaskGithubIssueRequestPayloadSchema = exports.EngineeringIssueResolutionPayloadSchema = exports.CortexTaskGithubIssuePointerSchema = exports.PortfolioRepoLinkPayloadSchema = exports.CreativeWorkflowResultPayloadSchema = exports.BrandContextLineageSchema = exports.CreativeWorkflowRequestPayloadSchema = exports.RepoIntelligenceRequestPayloadSchema = exports.BridgeIngestionReceiptStatusSchema = exports.BridgeProofKindSchema = exports.BridgeFindingSeveritySchema = void 0;
+exports.githubReadResultSchema = exports.githubReadRequestSchema = exports.CodexRunnerCredentialRequestSchema = exports.CodexExecutorRuntimeResultPayloadSchema = exports.CodexExecutorRuntimeRequestPayloadSchema = exports.CodexExecutorWorkflowResultPayloadSchema = exports.CodexExecutorWorkflowRequestPayloadSchema = exports.CodexExecutorAuthorizationResultPayloadSchema = exports.CodexExecutorAuthorizationRequestPayloadSchema = exports.CodexExecutorRuntimeJobSchema = exports.CodexSignedSandboxWorkerPayloadSchema = exports.CodexSignedWorkerPayloadSchema = exports.CodexExecutorApprovedScopeSchema = exports.CodexExecutorRuntimeIdentitySchema = exports.CortexBridgeIngestionReceiptApiResponseSchema = exports.NeuraloomIngestionReceiptPayloadSchema = exports.CortexIngestionReceiptPayloadSchema = exports.ProductReleasePackageMvpBridgePayloadSchema = exports.DocDriftDetectedPayloadSchema = exports.DocDraftReadyPayloadSchema = exports.GuardianViolationEventPayloadSchema = exports.EngineeringCheckpointRecordedPayloadSchema = exports.EngineeringCheckpointVerificationSummarySchema = exports.EngineeringCheckpointRevisionSummarySchema = exports.ProofRunRecordedPayloadSchema = exports.PullRequestReadyPayloadSchema = exports.ImplementationPlanReadyPayloadSchema = exports.RepoFindingTaskPayloadSchema = exports.RepoIntelligenceResultPayloadSchema = exports.FindingReconciliationEvidenceSchema = exports.REPO_INTEL_ACTIVE_FINDING_IDS_MAX = exports.NeuraloomGraphGapsSchema = exports.NEURALOOM_GRAPH_GAPS_MAX_NODES = exports.NeuraloomGraphGapNodeSchema = exports.NeuraloomGraphGapStatusSchema = exports.NeuraloomGraphGapSeveritySchema = exports.NEURALOOM_GRAPH_GAPS_VERSION = exports.TaskGithubIssueRequestPayloadSchema = exports.EngineeringIssueResolutionPayloadSchema = exports.EngineeringIssueRecoveryReceiptSchema = exports.EngineeringIssueRecoveryProofSchema = exports.CortexTaskGithubIssuePointerSchema = exports.PortfolioRepoLinkPayloadSchema = exports.CreativeWorkflowResultPayloadSchema = exports.BrandContextLineageSchema = exports.CreativeWorkflowRequestPayloadSchema = exports.RepoIntelligenceRequestPayloadSchema = exports.BridgeIngestionReceiptStatusSchema = exports.BridgeProofKindSchema = exports.BridgeFindingSeveritySchema = void 0;
+exports.BRIDGE_EVENT_PAYLOAD_SCHEMAS = void 0;
 exports.githubIssueUrlMatches = githubIssueUrlMatches;
 const zod_1 = require("zod");
 const film_bridge_events_schema_1 = require("./film-bridge-events.schema");
@@ -141,6 +142,32 @@ exports.CortexTaskGithubIssuePointerSchema = zod_1.z.object({
         context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['epic', 'url'], message: 'Epic URL must match its repository and issue number' });
     }
 });
+/** Exact original wire bytes bind caller evidence to the immutable authenticated delivery. */
+exports.EngineeringIssueRecoveryProofSchema = zod_1.z.object({
+    schemaVersion: zod_1.z.literal('1.0.0'),
+    originalEventId: zod_1.z.string().uuid(),
+    originalIdempotencyKey: zod_1.z.string().min(1),
+    originalPayloadHash: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
+    scanRunId: zod_1.z.string().uuid(),
+    snapshotArtifactId: zod_1.z.string().uuid(),
+    commitSha: zod_1.z.string().regex(/^[a-f0-9]{40}$/),
+    originalEnvelopeBody: zod_1.z.string().min(1).max(32_768).refine(value => new TextEncoder().encode(value).byteLength <= 32_768, 'Original envelope exceeds UTF8 byte bound'),
+}).strict();
+exports.EngineeringIssueRecoveryReceiptSchema = exports.EngineeringIssueRecoveryProofSchema.extend({
+    githubIssue: exports.CortexTaskGithubIssuePointerSchema,
+    neuraloomTaskId: zod_1.z.string().uuid(),
+    cortexTaskId: zod_1.z.string().uuid(),
+    findingId: zod_1.z.string().min(1),
+    canonicalFindingId: zod_1.z.string().min(1),
+    repoFullName: zod_1.z.string().min(1),
+    neuraloomProjectId: zod_1.z.string().uuid(),
+    brandSlug: zod_1.z.string().min(1),
+    productSlug: zod_1.z.string().min(1).optional(),
+}).strict().superRefine((receipt, context) => {
+    if (!githubIssueUrlMatches(receipt.githubIssue.url, receipt.repoFullName, receipt.githubIssue.number)) {
+        context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['githubIssue'], message: 'Recovery issue must match repository' });
+    }
+});
 exports.EngineeringIssueResolutionPayloadSchema = zod_1.z.object({
     cortexTaskId: zod_1.z.string().uuid(),
     findingId: zod_1.z.string().min(1),
@@ -150,6 +177,7 @@ exports.EngineeringIssueResolutionPayloadSchema = zod_1.z.object({
     priority: zod_1.z.enum(['low', 'medium', 'high', 'urgent']),
     epic: zod_1.z.object({ repoFullName: zod_1.z.string().min(1), number: zod_1.z.number().int().positive(), url: zod_1.z.string().url() }).strict(),
     githubIssue: exports.CortexTaskGithubIssuePointerSchema.optional(),
+    recovery: exports.EngineeringIssueRecoveryProofSchema.optional(),
 }).strict().superRefine((resolution, context) => {
     if (!githubIssueUrlMatches(resolution.epic.url, resolution.epic.repoFullName, resolution.epic.number)) {
         context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['epic', 'url'], message: 'Epic URL must match its repository and issue number' });
@@ -492,8 +520,15 @@ exports.CortexIngestionReceiptPayloadSchema = zod_1.z
     normalizedCandidateId: zod_1.z.string().optional(),
     githubIssue: exports.CortexTaskGithubIssuePointerSchema.optional(),
     neuraloomTaskId: zod_1.z.string().uuid().optional(),
+    engineeringRecovery: exports.EngineeringIssueRecoveryReceiptSchema.optional(),
 })
-    .strict();
+    .strict().superRefine((receipt, context) => {
+    const recovery = receipt.engineeringRecovery;
+    if (recovery && (JSON.stringify(receipt.githubIssue) !== JSON.stringify(recovery.githubIssue) ||
+        receipt.neuraloomTaskId !== recovery.neuraloomTaskId || receipt.normalizedCandidateId !== recovery.scanRunId)) {
+        context.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['engineeringRecovery'], message: 'Recovery must agree with outer receipt pointers and scan' });
+    }
+});
 exports.NeuraloomIngestionReceiptPayloadSchema = exports.CortexIngestionReceiptPayloadSchema;
 exports.CortexBridgeIngestionReceiptApiResponseSchema = zod_1.z
     .object({

package/dist/schemas/orchestration-execution.d.ts

@@ -139,20 +139,25 @@ export declare const DurableOrchestrationContinueSchema: z.ZodEffects<z.ZodObjec
     runId: z.ZodString;
     stepIndex: z.ZodOptional<z.ZodNumber>;
     stageIndex: z.ZodOptional<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
+    commandId: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
     runId: string;
     stepIndex?: number | undefined;
     stageIndex?: number | undefined;
+    commandId?: string | undefined;
 }, {
     runId: string;
     stepIndex?: number | undefined;
     stageIndex?: number | undefined;
+    commandId?: string | undefined;
 }>, {
     runId: string;
     stepIndex?: number | undefined;
     stageIndex?: number | undefined;
+    commandId?: string | undefined;
 }, {
     runId: string;
     stepIndex?: number | undefined;
     stageIndex?: number | undefined;
+    commandId?: string | undefined;
 }>;

package/dist/schemas/orchestration-execution.js

@@ -83,6 +83,7 @@ exports.DurableOrchestrationContinueSchema = zod_1.z
     runId: zod_1.z.string().uuid(),
     stepIndex: zod_1.z.number().int().min(0).max(stepMax).optional(),
     stageIndex: zod_1.z.number().int().min(0).optional(),
+    commandId: zod_1.z.string().regex(/^[a-f0-9]{64}$/).optional(),
 })
-    .refine((value) => (value.stepIndex !== undefined && value.stageIndex === undefined) ||
-    (value.stepIndex === undefined && value.stageIndex !== undefined), { message: "Provide exactly one of stepIndex or stageIndex" });
+    .strict()
+    .refine((value) => [value.stepIndex, value.stageIndex, value.commandId].filter(value => value !== undefined).length === 1, { message: "Provide exactly one of stepIndex, stageIndex or commandId" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neuraloom/contracts",
-  "version": "0.1.22",
+  "version": "0.1.23",
   "description": "NeuraLoom contracts package - SSOT for types, schemas, routes, and telemetry",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -48,8 +48,9 @@
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "verify:artifact": "node -e \"const fs=require('node:fs'),p=require('./package.json'); Promise.all(Object.entries(p.exports).map(async([key,target])=>{const name=p.name+(key==='.'?'':key.slice(1)),c=require(name),m=await import(name);for(const k of Object.keys(c).filter(k=>k!=='__esModule'))if(!Object.hasOwn(m,k)||m[k]!==c[k])throw Error('Artifact export mismatch: '+name+'.'+k);fs.accessSync(target.types)})).then(()=>{const root=require(p.name),bridge=require(p.name+'/integration');for(const k of ['CodexExecutorRuntimeIdentitySchema','RepoIntelligenceRequestPayloadSchema','githubIssueUrlMatches'])if(!root[k]||root[k]!==bridge[k])throw Error('Artifact instance mismatch: '+k);console.log('All public artifact exports verified')}).catch(e=>{console.error(e);process.exitCode=1})\"",
-    "prepublishOnly": "pnpm run clean && pnpm run build && pnpm run verify:artifact",
+    "prepublishOnly": "pnpm run clean && pnpm run build && pnpm run verify:artifact && pnpm run artifact:check --pack",
     "publish:check": "pnpm pack --dry-run",
+    "artifact:check": "node ../../scripts/check-contracts-artifact.mjs",
     "publish:npm": "pnpm publish --access public"
   },
   "dependencies": {