@oscharko-dev/keiko-server 0.2.7 → 0.2.9

package/dist/task-workspace/types.d.ts

@@ -0,0 +1,170 @@
+import type { EvidenceStore } from "@oscharko-dev/keiko-evidence";
+import type { GitWorktreeAdapter } from "@oscharko-dev/keiko-tools/internal/git-mutation";
+import type { TaskWorkspaceDriftMarker, TaskWorkspaceLifecycleState, WorkspaceBinding, WorkspaceCleanupRefusalReason, WorkspaceHealthReport, WorkspaceInstance, WorkspaceInfo, WorkspaceReconciliationReport, WorkspaceReconciliationStatus, WorkspaceRecoveryStrategy } from "@oscharko-dev/keiko-contracts";
+import type { ActiveWorkspacePointer, ActiveWorkspacePointerStore } from "./active-store.js";
+import type { WorkspaceInstanceStore } from "./store.js";
+import type { WorkspaceMutexRegistry } from "./mutex.js";
+export interface WorkspaceProvisionRequest {
+    readonly repositoryRequestPath: string;
+    readonly taskId: string;
+    readonly baseBranch: string;
+    readonly requestedBy: string;
+}
+export interface WorkspaceProvisionResult {
+    readonly instance: WorkspaceInstance;
+    readonly binding: WorkspaceBinding;
+    readonly created: boolean;
+}
+export interface WorkspaceActivateRequest {
+    readonly workspaceId: string;
+    readonly taskId: string;
+    readonly requestedBy: string;
+    readonly acquireLock: boolean;
+    readonly expectedLifecycleState?: TaskWorkspaceLifecycleState | undefined;
+}
+export interface WorkspaceActivateResult {
+    readonly instance: WorkspaceInstance;
+    readonly binding: WorkspaceBinding;
+}
+export interface WorkspaceProvisioningService {
+    readonly provision: (request: WorkspaceProvisionRequest) => Promise<WorkspaceProvisionResult>;
+    readonly activate: (request: WorkspaceActivateRequest) => Promise<WorkspaceActivateResult>;
+    readonly getInstance: (workspaceId: string) => WorkspaceInstance | undefined;
+}
+export interface WorkspaceProvisioningServiceDeps {
+    readonly store: WorkspaceInstanceStore;
+    readonly evidenceStore: EvidenceStore;
+    readonly managedRoot: string;
+    readonly createAdapter: (workspace: WorkspaceInfo) => GitWorktreeAdapter;
+    readonly redactString: (input: string) => string;
+    readonly now: () => number;
+    readonly newId: () => string;
+    readonly lockTtlMs?: number | undefined;
+    readonly mutex: WorkspaceMutexRegistry;
+}
+export interface ActiveWorkspaceView {
+    readonly instance: WorkspaceInstance;
+    readonly binding: WorkspaceBinding;
+    readonly pointer: ActiveWorkspacePointer;
+}
+export interface SetActiveWorkspaceRequest {
+    readonly workspaceId: string;
+    readonly requestedBy: string;
+    readonly acquireLock: boolean;
+}
+export interface WorkspaceLifecycleActionRequest {
+    readonly workspaceId: string;
+    readonly requestedBy: string;
+}
+export interface WorkspaceLifecycleActionResult {
+    readonly instance: WorkspaceInstance;
+    readonly binding: WorkspaceBinding;
+}
+export interface WorkspaceLifecycleService {
+    readonly list: (repositoryRoot: string) => readonly WorkspaceInstance[];
+    readonly getActive: () => ActiveWorkspaceView | undefined;
+    readonly setActive: (request: SetActiveWorkspaceRequest) => Promise<ActiveWorkspaceView>;
+    readonly clearActive: () => void;
+    readonly pause: (request: WorkspaceLifecycleActionRequest) => Promise<WorkspaceLifecycleActionResult>;
+    readonly resume: (request: WorkspaceLifecycleActionRequest) => Promise<WorkspaceLifecycleActionResult>;
+    readonly prepareHandoff: (request: WorkspaceLifecycleActionRequest) => Promise<WorkspaceLifecycleActionResult>;
+}
+export interface WorkspaceLifecycleServiceDeps {
+    readonly store: WorkspaceInstanceStore;
+    readonly activePointerStore: ActiveWorkspacePointerStore;
+    readonly managedRoot: string;
+    readonly provisioning: WorkspaceProvisioningService;
+    readonly evidenceStore: EvidenceStore;
+    readonly redactString: (input: string) => string;
+    readonly now: () => number;
+    readonly newId: () => string;
+    readonly lockTtlMs?: number | undefined;
+    readonly mutex: WorkspaceMutexRegistry;
+}
+export interface WorkspaceReconciliationService {
+    readonly report: (repositoryRoot?: string) => WorkspaceReconciliationReport;
+    readonly reconcile: (repositoryRoot?: string) => Promise<WorkspaceReconciliationReport>;
+}
+export interface WorkspaceReconciliationServiceDeps {
+    readonly store: WorkspaceInstanceStore;
+    readonly activePointerStore: ActiveWorkspacePointerStore;
+    readonly evidenceStore: EvidenceStore;
+    readonly managedRoot: string;
+    readonly createAdapter: (workspace: WorkspaceInfo) => GitWorktreeAdapter;
+    readonly redactString: (input: string) => string;
+    readonly now: () => number;
+    readonly newId: () => string;
+    readonly lockTtlMs?: number | undefined;
+}
+export type WorkspaceRepairOutcome = "repaired" | "operator-required";
+export interface WorkspaceRepairRequest {
+    readonly workspaceId: string;
+    readonly requestedBy: string;
+    readonly strategy: WorkspaceRecoveryStrategy;
+    readonly operatorApproved: boolean;
+}
+export interface WorkspaceRepairResult {
+    readonly instance: WorkspaceInstance;
+    readonly binding: WorkspaceBinding;
+    readonly strategy: WorkspaceRecoveryStrategy;
+    readonly applied: boolean;
+    readonly outcome: WorkspaceRepairOutcome;
+    readonly status: WorkspaceReconciliationStatus;
+    readonly driftMarkers: readonly TaskWorkspaceDriftMarker[];
+    readonly operatorActionRequired: boolean;
+}
+export interface WorkspaceRepairService {
+    readonly repair: (request: WorkspaceRepairRequest) => Promise<WorkspaceRepairResult>;
+}
+export interface WorkspaceRepairServiceDeps {
+    readonly store: WorkspaceInstanceStore;
+    readonly activePointerStore: ActiveWorkspacePointerStore;
+    readonly evidenceStore: EvidenceStore;
+    readonly provisioning: WorkspaceProvisioningService;
+    readonly managedRoot: string;
+    readonly createAdapter: (workspace: WorkspaceInfo) => GitWorktreeAdapter;
+    readonly redactString: (input: string) => string;
+    readonly now: () => number;
+    readonly newId: () => string;
+    readonly lockTtlMs?: number | undefined;
+    readonly mutex: WorkspaceMutexRegistry;
+}
+export type WorkspaceHealthServiceDeps = WorkspaceReconciliationServiceDeps;
+export interface WorkspaceCleanupServiceDeps extends WorkspaceReconciliationServiceDeps {
+    readonly mutex: WorkspaceMutexRegistry;
+}
+export interface WorkspaceHealthService {
+    readonly report: (repositoryRoot?: string) => Promise<WorkspaceHealthReport>;
+}
+export type WorkspaceCleanupMode = "request" | "complete";
+export interface WorkspaceCleanupRequest {
+    readonly workspaceId: string;
+    readonly requestedBy: string;
+    readonly operatorApproved: boolean;
+    readonly mode: WorkspaceCleanupMode;
+}
+export type WorkspaceCleanupOutcome = "requested" | "completed" | "refused";
+export interface WorkspaceCleanupResult {
+    readonly outcome: WorkspaceCleanupOutcome;
+    readonly workspaceId: string;
+    readonly instance?: WorkspaceInstance;
+    readonly refusalReason?: WorkspaceCleanupRefusalReason;
+}
+export interface WorkspaceOrphanCleanupRequest {
+    readonly repositoryRoot?: string | undefined;
+    readonly requestedBy: string;
+    readonly operatorApproved: boolean;
+}
+export interface WorkspaceOrphanRefusal {
+    readonly orphanId: string;
+    readonly refusalReason: WorkspaceCleanupRefusalReason;
+}
+export interface WorkspaceOrphanCleanupResult {
+    readonly removed: number;
+    readonly refused: readonly WorkspaceOrphanRefusal[];
+}
+export interface WorkspaceCleanupService {
+    readonly cleanup: (request: WorkspaceCleanupRequest) => Promise<WorkspaceCleanupResult>;
+    readonly cleanupOrphans: (request: WorkspaceOrphanCleanupRequest) => Promise<WorkspaceOrphanCleanupResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/task-workspace/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/task-workspace/types.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,KAAK,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,gBAAgB,EAChB,6BAA6B,EAC7B,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,6BAA6B,EAC7B,6BAA6B,EAC7B,yBAAyB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,MAAM,WAAW,yBAAyB;IAGxC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAGnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CAC3E;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,yBAAyB,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9F,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC3F,QAAQ,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,iBAAiB,GAAG,SAAS,CAAC;CAC9E;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAGtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,kBAAkB,CAAC;IACzE,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAEjD,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC;IAE7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAKxC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC;AAUD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;CAC1C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC;AAED,MAAM,WAAW,yBAAyB;IAExC,QAAQ,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,SAAS,iBAAiB,EAAE,CAAC;IAExE,QAAQ,CAAC,SAAS,EAAE,MAAM,mBAAmB,GAAG,SAAS,CAAC;IAE1D,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,yBAAyB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEzF,QAAQ,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;IAEjC,QAAQ,CAAC,KAAK,EAAE,CACd,OAAO,EAAE,+BAA+B,KACrC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAE7C,QAAQ,CAAC,MAAM,EAAE,CACf,OAAO,EAAE,+BAA+B,KACrC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAE7C,QAAQ,CAAC,cAAc,EAAE,CACvB,OAAO,EAAE,+BAA+B,KACrC,OAAO,CAAC,8BAA8B,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;IAGzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,YAAY,EAAE,4BAA4B,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACjD,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC;IAE7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAGxC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC;AAWD,MAAM,WAAW,8BAA8B;IAE7C,QAAQ,CAAC,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,KAAK,6BAA6B,CAAC;IAG5E,QAAQ,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,6BAA6B,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAGtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,kBAAkB,CAAC;IACzE,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACjD,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,mBAAmB,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAG7C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAE7C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC3D,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACtF;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAEtC,QAAQ,CAAC,YAAY,EAAE,4BAA4B,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,kBAAkB,CAAC;IACzE,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACjD,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAGxC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC;AAeD,MAAM,MAAM,0BAA0B,GAAG,kCAAkC,CAAC;AAK5E,MAAM,WAAW,2BAA4B,SAAQ,kCAAkC;IACrF,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC;AAED,MAAM,WAAW,sBAAsB;IAGrC,QAAQ,CAAC,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC9E;AAED,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,CAAC;AAE1D,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAGnC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;CACrC;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC;AAE5E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAEtC,QAAQ,CAAC,aAAa,CAAC,EAAE,6BAA6B,CAAC;CACxD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,6BAA6B,CAAC;CACvD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAExF,QAAQ,CAAC,cAAc,EAAE,CACvB,OAAO,EAAE,6BAA6B,KACnC,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC5C"}

package/dist/task-workspace/types.js

@@ -0,0 +1,5 @@
+// Service-layer contracts for managed task-workspace provisioning + activation (Issue #445).
+// The wire entities (WorkspaceInstance / WorkspaceBinding / WorkspaceActivation) stay owned by the
+// #444 contract in @oscharko-dev/keiko-contracts; these are the request/result envelopes and the
+// injectable dependency bundle the server-side service and BFF routes share.
+export {};

package/dist/voice-action-governance.d.ts

@@ -0,0 +1,23 @@
+import { type CommittedVoiceTranscriptProjection, type SpokenActionAuditRecord, type SpokenActionConfirmationInput, type VoiceProfile, type VoiceTranscriptSource } from "@oscharko-dev/keiko-contracts";
+import { type WorkflowHandoffRequest } from "@oscharko-dev/keiko-contracts/workflow-handoff";
+export declare function createSpokenActionDigest(input: SpokenActionConfirmationInput): string;
+export interface SpokenActionGovernanceParams {
+    readonly projection: CommittedVoiceTranscriptProjection;
+    readonly profile: VoiceProfile;
+    readonly turnIndex: number;
+    readonly source: VoiceTranscriptSource;
+    readonly request: WorkflowHandoffRequest;
+    readonly providedConfirmationDigest: string | undefined;
+}
+export type SpokenActionDenyReason = "no-voice-capability" | "no-committed-transcript" | "confirmation-required" | "confirmation-stale" | "invalid-handoff-request" | "approval-token-mismatch";
+export type SpokenActionGovernanceDecision = {
+    readonly allowed: true;
+    readonly request: WorkflowHandoffRequest;
+    readonly audit: SpokenActionAuditRecord;
+} | {
+    readonly allowed: false;
+    readonly reason: SpokenActionDenyReason;
+    readonly audit: SpokenActionAuditRecord;
+};
+export declare function evaluateSpokenActionGovernance(params: SpokenActionGovernanceParams): SpokenActionGovernanceDecision;
+//# sourceMappingURL=voice-action-governance.d.ts.map

package/dist/voice-action-governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"voice-action-governance.d.ts","sourceRoot":"","sources":["../src/voice-action-governance.ts"],"names":[],"mappings":"AAcA,OAAO,EAKL,KAAK,kCAAkC,EACvC,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAKlC,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,sBAAsB,EAE5B,MAAM,gDAAgD,CAAC;AAMxD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAIrF;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,kCAAkC,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAGzC,QAAQ,CAAC,0BAA0B,EAAE,MAAM,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,MAAM,sBAAsB,GAC9B,qBAAqB,GACrB,yBAAyB,GACzB,uBAAuB,GACvB,oBAAoB,GACpB,yBAAyB,GACzB,yBAAyB,CAAC;AAE9B,MAAM,MAAM,8BAA8B,GACtC;IACE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC,CAAC;AAqHN,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,4BAA4B,GACnC,8BAA8B,CAwChC"}

package/dist/voice-action-governance.js

@@ -0,0 +1,126 @@
+// Server-side spoken-action governance (Epic #491, Issue #503, ADR-0066). Voice is an UNTRUSTED input
+// source: a committed spoken transcript may PROPOSE a governed workflow handoff, but it can never EXECUTE
+// one or weaken any existing gate. This module is the fail-closed enforcement layer that sits IN FRONT OF
+// the existing governance (`validateWorkflowHandoffRequest` + the `userApprovalToken` equality check +
+// `checkPatchAgainstScope` downstream). It ADDS preconditions; it removes none.
+//
+// The contract leaf (`voice-action-intent`) defines the pure normalization + classification. This module
+// supplies the only IO the design needs — a one-way sha256 content digest (mirroring
+// `createApprovalToken` in governed-workflow.ts) — and the deterministic decision procedure. The server
+// NEVER trusts a client-supplied digest: it recomputes the expected digest from the committed projection
+// it received and compares the two. Every path (allow and deny) emits a content-free
+// `SpokenActionAuditRecord` carrying enums / counts / a digest only — never raw transcript text or audio.
+import { createHash } from "node:crypto";
+import { buildSpokenActionAuditRecord, canonicalizeSpokenActionConfirmation, normalizeSpokenActionProposal, voiceCanProposeAction, } from "@oscharko-dev/keiko-contracts";
+import { validateWorkflowHandoffRequest, } from "@oscharko-dev/keiko-contracts/workflow-handoff";
+import { approvalTokenInputFor, createApprovalToken } from "./governed-workflow.js";
+// One-way content digest of the canonical confirmation seed. Identical shape to governed-workflow's
+// `createApprovalToken` (sha256 hex), so the audit's `bindingDigest` validates against the leaf's
+// `/^[0-9a-f]{64}$/` pattern. The seed carries committedText transiently; the digest is content-free.
+export function createSpokenActionDigest(input) {
+    return createHash("sha256")
+        .update(canonicalizeSpokenActionConfirmation(input), "utf8")
+        .digest("hex");
+}
+function auditFor(proposal, disposition) {
+    return buildSpokenActionAuditRecord({
+        effectClass: proposal.effectClass,
+        state: disposition.state,
+        confirmationRequired: proposal.requiresConfirmation,
+        confirmed: disposition.confirmed,
+        outcome: disposition.outcome,
+        source: proposal.source,
+        turnIndex: proposal.turnIndex,
+        committedSegmentCount: proposal.committedSegmentCount,
+        committedChars: proposal.committedChars,
+        bindingDigest: disposition.bindingDigest,
+    });
+}
+// Audit for the two pre-proposal denials (no capability / no committed text). There is no proposal yet,
+// so the record reports the fail-closed `unknown` effect and a denied outcome with no digest.
+function preProposalAudit(params, effectClass) {
+    return buildSpokenActionAuditRecord({
+        effectClass,
+        state: "cancelled",
+        confirmationRequired: true,
+        confirmed: false,
+        outcome: "denied",
+        source: params.source,
+        turnIndex: params.turnIndex,
+        committedSegmentCount: params.projection.segmentCount,
+        committedChars: params.projection.text.length,
+        bindingDigest: "",
+    });
+}
+function deny(reason, audit) {
+    return { allowed: false, reason, audit };
+}
+// Confirmation check (AC3 / AC4). Read-only actions skip confirmation. For confirmation-requiring
+// actions: a missing client digest is `confirmation-required`; a present-but-mismatched digest is
+// `confirmation-stale` (the committed text / turn / effect changed since the user confirmed).
+function checkConfirmation(proposal, providedDigest, expectedDigest) {
+    if (!proposal.requiresConfirmation) {
+        return undefined;
+    }
+    if (providedDigest === undefined) {
+        return "confirmation-required";
+    }
+    if (providedDigest !== expectedDigest) {
+        return "confirmation-stale";
+    }
+    return undefined;
+}
+// Deny for a missing/stale confirmation: a stale digest means the committed text / turn / effect changed
+// since the user confirmed (`superseded`); a missing digest means confirmation was never given.
+function denyConfirmation(proposal, reason, expectedDigest) {
+    const state = reason === "confirmation-stale" ? "superseded" : "awaiting-confirmation";
+    return deny(reason, auditFor(proposal, {
+        state,
+        outcome: "denied",
+        confirmed: false,
+        bindingDigest: expectedDigest,
+    }));
+}
+// Deny after a valid, fresh proposal failed an existing governance gate (invalid handoff / forged token).
+// The confirmation step (if any) already passed, so the audit reports `confirmed` per the proposal.
+function denyGovernance(proposal, reason, expectedDigest) {
+    return deny(reason, auditFor(proposal, {
+        state: "cancelled",
+        outcome: "denied",
+        confirmed: proposal.requiresConfirmation,
+        bindingDigest: expectedDigest,
+    }));
+}
+// Deterministic, fail-closed decision procedure. Denies on the first failing precondition; every branch
+// emits a content-free audit record. Order is normative (see ADR-0066 D4): capability → committed text →
+// confirmation freshness → handoff validity → approval-token equality → allow.
+export function evaluateSpokenActionGovernance(params) {
+    if (!voiceCanProposeAction(params.profile)) {
+        return deny("no-voice-capability", preProposalAudit(params, "unknown"));
+    }
+    const proposal = normalizeSpokenActionProposal(params.projection, params.profile, params.turnIndex, params.source);
+    if (proposal === undefined) {
+        return deny("no-committed-transcript", preProposalAudit(params, "unknown"));
+    }
+    const expectedDigest = createSpokenActionDigest(proposal.confirmationInput);
+    const confirmationDeny = checkConfirmation(proposal, params.providedConfirmationDigest, expectedDigest);
+    if (confirmationDeny !== undefined) {
+        return denyConfirmation(proposal, confirmationDeny, expectedDigest);
+    }
+    if (!validateWorkflowHandoffRequest(params.request).ok) {
+        return denyGovernance(proposal, "invalid-handoff-request", expectedDigest);
+    }
+    if (params.request.userApprovalToken !== createApprovalToken(approvalTokenInputFor(params.request))) {
+        return denyGovernance(proposal, "approval-token-mismatch", expectedDigest);
+    }
+    return {
+        allowed: true,
+        request: params.request,
+        audit: auditFor(proposal, {
+            state: "routed",
+            outcome: "routed",
+            confirmed: proposal.requiresConfirmation,
+            bindingDigest: expectedDigest,
+        }),
+    };
+}

package/dist/voice-handlers.d.ts

@@ -0,0 +1,6 @@
+import type { HandlerOutcome, RouteContext, RouteResult } from "./routes.js";
+import type { UiHandlerDeps } from "./deps.js";
+export declare function handleVoiceTranscribe(ctx: RouteContext, deps: UiHandlerDeps): Promise<RouteResult>;
+export declare function handleVoiceSpeak(ctx: RouteContext, deps: UiHandlerDeps): Promise<RouteResult>;
+export declare function handleVoiceSpeakStream(ctx: RouteContext, deps: UiHandlerDeps): Promise<HandlerOutcome>;
+//# sourceMappingURL=voice-handlers.d.ts.map

package/dist/voice-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"voice-handlers.d.ts","sourceRoot":"","sources":["../src/voice-handlers.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AA+U/C,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAkBtB;AAyPD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAUtB;AA8DD,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,cAAc,CAAC,CAkBzB"}