@osovv/vv-opencode 1.3.8 → 1.4.1

package/dist/plugins/workflow/checkpoint-io.d.ts

@@ -0,0 +1,33 @@
+import { type DelegatedPlanDefinition } from "../../lib/spec-lint.js";
+export interface LoadedDelegatedPlan {
+    /** Canonical absolute plan.xml path. */
+    planPath: string;
+    /** Canonical absolute linked spec.xml path. */
+    specPath: string;
+    /** Canonical absolute trusted workspace root. */
+    workspaceRoot: string;
+    /** SHA-256 of the loaded plan content. */
+    planSha256: string;
+    /** SHA-256 of the loaded spec content. */
+    specSha256: string;
+    /** Typed delegated obligations extracted from the approved plan. */
+    definition: DelegatedPlanDefinition;
+}
+export type LoadApprovedDelegatedPlanErrorCode = "ROOT_MISMATCH" | "PLAN_NOT_FOUND" | "PATH_ESCAPE" | "NOT_REGULAR_FILE" | "ARCHIVED_PLAN" | "PARSE_ERROR" | "NOT_A_PLAN" | "STATUS_NOT_APPROVED" | "SPEC_MISSING" | "SPEC_PATH_ESCAPE" | "SPEC_NOT_APPROVED" | "LINT_FAILED" | "NOT_DELEGATED";
+export type LoadApprovedDelegatedPlanResult = {
+    ok: true;
+    plan: LoadedDelegatedPlan;
+} | {
+    ok: false;
+    code: LoadApprovedDelegatedPlanErrorCode;
+    message: string;
+};
+export interface LoadApprovedDelegatedPlanInput {
+    /** Trusted absolute workspace root. */
+    workspaceRoot: string;
+    /** Absolute or workspace-relative path to plan.xml. */
+    planPath: string;
+}
+/** Deterministic SHA-256 hex digest over provided text. */
+export declare function contentSha256(text: string): string;
+export declare function loadApprovedDelegatedPlan(input: LoadApprovedDelegatedPlanInput): Promise<LoadApprovedDelegatedPlanResult>;

package/dist/plugins/workflow/checkpoint-io.js

@@ -0,0 +1,224 @@
+// FILE: src/plugins/workflow/checkpoint-io.ts
+// VERSION: 1.0.0
+// START_MODULE_CONTRACT
+//   PURPOSE: Filesystem adapter that loads and fully validates an approved active vvoc delegated plan and its linked approved spec for runtime registration.
+//   SCOPE: Trusted-root containment, regular-file and archive rejection, strict parse, lifecycle status checks, full cross-file lint through the shared engine, typed delegated extraction, and content-hash capture. Domain transitions and fingerprint capture live elsewhere.
+//   DEPENDS: [node:crypto, node:fs/promises, node:path, src/lib/spec-lint.ts]
+//   LINKS: [M-WORKFLOW-CHECKPOINTS, M-SPEC-LINT, M-WORKFLOW-DELEGATED, V-M-WORKFLOW-CHECKPOINTS]
+//   ROLE: RUNTIME
+//   MAP_MODE: EXPORTS
+// END_MODULE_CONTRACT
+//
+// START_MODULE_MAP
+//   LoadedDelegatedPlan - Canonical approved plan/spec inputs with content hashes and typed obligations.
+//   LoadApprovedDelegatedPlanErrorCode - Rejection codes for approved-plan loading.
+//   LoadApprovedDelegatedPlanResult - Loaded plan or a coded rejection.
+//   LoadApprovedDelegatedPlanInput - Workspace root and plan path (absolute or root-relative).
+//   loadApprovedDelegatedPlan - Load, validate, lint, and extract one approved delegated plan package.
+//   contentSha256 - Deterministic SHA-256 over provided text.
+// END_MODULE_MAP
+//
+// START_CHANGE_SUMMARY
+//   LAST_CHANGE: [C-DELEGATED-WORKFLOW-ASTRA-PRESETS - Initial adapter: containment, archive and lifecycle rejection, full lint, typed extraction, and hashes.]
+// END_CHANGE_SUMMARY
+import { createHash } from "node:crypto";
+import { readFile, realpath, stat } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { extractDelegatedPlanDefinition, isSpecArchivePath, lintSpecArtifacts, parseSpecXml, } from "../../lib/spec-lint.js";
+// END_BLOCK_IO_TYPES
+// START_BLOCK_HASH_HELPER
+/** Deterministic SHA-256 hex digest over provided text. */
+export function contentSha256(text) {
+    return createHash("sha256").update(text, "utf8").digest("hex");
+}
+// END_BLOCK_HASH_HELPER
+// START_CONTRACT: loadApprovedDelegatedPlan
+//   PURPOSE: Load an active project-local approved vvoc delegated plan plus its linked approved spec, fully linted and typed.
+//   INPUTS: { input: LoadApprovedDelegatedPlanInput - trusted workspace root and plan path }
+//   OUTPUTS: { Promise<LoadApprovedDelegatedPlanResult> - canonical inputs, hashes, and definition, or a coded rejection }
+//   SIDE_EFFECTS: Reads plan and spec files; performs no writes, agent dispatch, or command execution.
+//   LINKS: [M-WORKFLOW-CHECKPOINTS, M-SPEC-LINT, registerDelegatedPlan]
+// END_CONTRACT: loadApprovedDelegatedPlan
+export async function loadApprovedDelegatedPlan(input) {
+    if (typeof input.workspaceRoot !== "string" || !isAbsolute(input.workspaceRoot)) {
+        return {
+            ok: false,
+            code: "ROOT_MISMATCH",
+            message: `workspace root must be an absolute path, received: ${JSON.stringify(input.workspaceRoot)}`,
+        };
+    }
+    if (typeof input.planPath !== "string" || input.planPath.trim() === "") {
+        return {
+            ok: false,
+            code: "PLAN_NOT_FOUND",
+            message: "planPath must be a non-empty string",
+        };
+    }
+    let realRoot;
+    try {
+        realRoot = await realpath(input.workspaceRoot);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            code: "ROOT_MISMATCH",
+            message: `workspace root ${input.workspaceRoot} cannot be resolved: ${error.message}`,
+        };
+    }
+    const candidatePlanPath = isAbsolute(input.planPath)
+        ? input.planPath
+        : join(realRoot, input.planPath);
+    const planContainment = relative(realRoot, candidatePlanPath);
+    if (planContainment === "" || planContainment.startsWith("..") || isAbsolute(planContainment)) {
+        return {
+            ok: false,
+            code: "PATH_ESCAPE",
+            message: `plan path ${input.planPath} resolves outside the workspace root`,
+        };
+    }
+    if (isSpecArchivePath(candidatePlanPath.replace(/\\/g, "/"))) {
+        return {
+            ok: false,
+            code: "ARCHIVED_PLAN",
+            message: `plan path ${input.planPath} sits inside an archive directory; archived plans are immutable history`,
+        };
+    }
+    let planStat;
+    try {
+        planStat = await stat(candidatePlanPath);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            code: "PLAN_NOT_FOUND",
+            message: `plan file ${candidatePlanPath} cannot be read: ${error.message}`,
+        };
+    }
+    if (!planStat.isFile()) {
+        return {
+            ok: false,
+            code: "NOT_REGULAR_FILE",
+            message: `plan path ${candidatePlanPath} is not a regular file`,
+        };
+    }
+    const planContent = await readFile(candidatePlanPath, "utf8");
+    const parsedPlan = parseSpecXml(planContent, candidatePlanPath);
+    if (parsedPlan.findings.some((finding) => finding.severity === "error")) {
+        return {
+            ok: false,
+            code: "PARSE_ERROR",
+            message: parsedPlan.findings
+                .filter((finding) => finding.severity === "error")
+                .map((finding) => finding.message)
+                .join("; "),
+        };
+    }
+    if (!parsedPlan.root || parsedPlan.root.name !== "plan") {
+        return {
+            ok: false,
+            code: "NOT_A_PLAN",
+            message: `root element is not <plan>: ${parsedPlan.root?.name ?? "(none)"}`,
+        };
+    }
+    const statusOf = (root) => {
+        const statusNode = root.children.find((child) => child.name === "status");
+        return statusNode ? statusNode.text.trim() : "";
+    };
+    const planStatus = statusOf(parsedPlan.root);
+    if (planStatus !== "approved") {
+        return {
+            ok: false,
+            code: "STATUS_NOT_APPROVED",
+            message: `plan status is "${planStatus}", not approved`,
+        };
+    }
+    const specRefNode = parsedPlan.root.children.find((child) => child.name === "spec");
+    const specRef = specRefNode ? specRefNode.text.trim() : "";
+    if (!specRef) {
+        return {
+            ok: false,
+            code: "SPEC_MISSING",
+            message: "plan declares an empty <spec> reference",
+        };
+    }
+    const candidateSpecPath = isAbsolute(specRef)
+        ? specRef
+        : resolve(dirname(candidatePlanPath), specRef);
+    const specContainment = relative(realRoot, candidateSpecPath);
+    if (specContainment === "" || specContainment.startsWith("..") || isAbsolute(specContainment)) {
+        return {
+            ok: false,
+            code: "SPEC_PATH_ESCAPE",
+            message: `linked spec ${specRef} resolves outside the workspace root`,
+        };
+    }
+    let specStat;
+    try {
+        specStat = await stat(candidateSpecPath);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            code: "SPEC_MISSING",
+            message: `linked spec file ${candidateSpecPath} cannot be read: ${error.message}`,
+        };
+    }
+    if (!specStat.isFile()) {
+        return {
+            ok: false,
+            code: "SPEC_MISSING",
+            message: `linked spec path ${candidateSpecPath} is not a regular file`,
+        };
+    }
+    const specContent = await readFile(candidateSpecPath, "utf8");
+    const parsedSpec = parseSpecXml(specContent, candidateSpecPath);
+    if (!parsedSpec.root || parsedSpec.root.name !== "spec") {
+        return {
+            ok: false,
+            code: "SPEC_MISSING",
+            message: `linked spec root element is not <spec>: ${parsedSpec.root?.name ?? "(none)"}`,
+        };
+    }
+    const specStatus = statusOf(parsedSpec.root);
+    if (specStatus !== "approved") {
+        return {
+            ok: false,
+            code: "SPEC_NOT_APPROVED",
+            message: `linked spec status is "${specStatus}", not approved`,
+        };
+    }
+    const verdicts = lintSpecArtifacts([
+        { file: candidateSpecPath, content: specContent },
+        { file: candidatePlanPath, content: planContent },
+    ]);
+    const lintErrors = verdicts.flatMap((verdict) => verdict.findings
+        .filter((finding) => finding.severity === "error")
+        .map((finding) => finding.message));
+    if (lintErrors.length > 0) {
+        return {
+            ok: false,
+            code: "LINT_FAILED",
+            message: lintErrors.join("; "),
+        };
+    }
+    const extraction = extractDelegatedPlanDefinition(planContent, candidatePlanPath);
+    if (!extraction.ok) {
+        return {
+            ok: false,
+            code: "NOT_DELEGATED",
+            message: extraction.errors.join("; "),
+        };
+    }
+    return {
+        ok: true,
+        plan: {
+            planPath: candidatePlanPath,
+            specPath: candidateSpecPath,
+            workspaceRoot: realRoot,
+            planSha256: contentSha256(planContent),
+            specSha256: contentSha256(specContent),
+            definition: extraction.definition,
+        },
+    };
+}
+//# sourceMappingURL=checkpoint-io.js.map

package/dist/plugins/workflow/checkpoint-io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-io.js","sourceRoot":"","sources":["../../../src/plugins/workflow/checkpoint-io.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,iBAAiB;AACjB,wBAAwB;AACxB,6JAA6J;AAC7J,iRAAiR;AACjR,8EAA8E;AAC9E,iGAAiG;AACjG,kBAAkB;AAClB,sBAAsB;AACtB,sBAAsB;AACtB,EAAE;AACF,mBAAmB;AACnB,yGAAyG;AACzG,oFAAoF;AACpF,wEAAwE;AACxE,+FAA+F;AAC/F,uGAAuG;AACvG,8DAA8D;AAC9D,iBAAiB;AACjB,EAAE;AACF,uBAAuB;AACvB,gKAAgK;AAChK,qBAAqB;AAErB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EACL,8BAA8B,EAC9B,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,GAEb,MAAM,wBAAwB,CAAC;AA2ChC,qBAAqB;AAErB,0BAA0B;AAC1B,2DAA2D;AAC3D,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AACD,wBAAwB;AAExB,4CAA4C;AAC5C,8HAA8H;AAC9H,6FAA6F;AAC7F,2HAA2H;AAC3H,uGAAuG;AACvG,wEAAwE;AACxE,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqC;IAErC,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAChF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,sDAAsD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;SACrG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,qCAAqC;SAC/C,CAAC;IACJ,CAAC;IAED,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,kBAAkB,KAAK,CAAC,aAAa,wBAAyB,KAAe,CAAC,OAAO,EAAE;SACjG,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClD,CAAC,CAAC,KAAK,CAAC,QAAQ;QAChB,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC9D,IAAI,eAAe,KAAK,EAAE,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,aAAa,KAAK,CAAC,QAAQ,sCAAsC;SAC3E,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,aAAa,KAAK,CAAC,QAAQ,yEAAyE;SAC9G,CAAC;IACJ,CAAC;IAED,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,aAAa,iBAAiB,oBAAqB,KAAe,CAAC,OAAO,EAAE;SACtF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,aAAa,iBAAiB,wBAAwB;SAChE,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,YAAY,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAChE,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,UAAU,CAAC,QAAQ;iBACzB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;iBACjD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;iBACjC,IAAI,CAAC,IAAI,CAAC;SACd,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,+BAA+B,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE;SAC5E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAyC,EAAU,EAAE;QACrE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC1E,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,mBAAmB,UAAU,iBAAiB;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,yCAAyC;SACnD,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC;QAC3C,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC9D,IAAI,eAAe,KAAK,EAAE,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,eAAe,OAAO,sCAAsC;SACtE,CAAC;IACJ,CAAC;IAED,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,oBAAoB,iBAAiB,oBAAqB,KAAe,CAAC,OAAO,EAAE;SAC7F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,oBAAoB,iBAAiB,wBAAwB;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,YAAY,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,2CAA2C,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE;SACxF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,0BAA0B,UAAU,iBAAiB;SAC/D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE;QACjD,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE;KAClD,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9C,OAAO,CAAC,QAAQ;SACb,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;SACjD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CACrC,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,8BAA8B,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAClF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,QAAQ,EAAE,iBAAiB;YAC3B,QAAQ,EAAE,iBAAiB;YAC3B,aAAa,EAAE,QAAQ;YACvB,UAAU,EAAE,aAAa,CAAC,WAAW,CAAC;YACtC,UAAU,EAAE,aAAa,CAAC,WAAW,CAAC;YACtC,UAAU,EAAE,UAAU,CAAC,UAAU;SAClC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/workflow/checkpoints.d.ts

@@ -0,0 +1,182 @@
+import type { DelegatedPlanDefinition, DelegatedReviewer } from "../../lib/spec-lint.js";
+import { type LoadedDelegatedPlan } from "./checkpoint-io.js";
+import { type WorkItemStore, type WorkItemStoreData } from "./state.js";
+export declare const MAX_CHECKPOINT_REVIEW_ATTEMPTS = 2;
+export interface DelegatedReviewerOutcome {
+    status: "PASS" | "FAIL" | "NEEDS_CONTEXT";
+    recordedAt: string;
+}
+export interface DelegatedCheckpointReview {
+    reviewWorkItemId: string;
+    generation: number;
+    startedAt: string;
+    startFingerprint: string;
+    coveredAttemptIds: string[];
+    reviewerCallIds: Partial<Record<DelegatedReviewer, string>>;
+    results: Partial<Record<DelegatedReviewer, DelegatedReviewerOutcome>>;
+}
+export interface DelegatedCheckpointHistoryEntry {
+    generation: number;
+    outcome: "passed" | "failed" | "stale";
+    fingerprint: string;
+    completedAt: string;
+}
+export interface DelegatedRunCheckpoint {
+    checkpointId: string;
+    kind: "milestone" | "final";
+    afterWave: string;
+    covers: string[];
+    scope: string[];
+    reviewers: DelegatedReviewer[];
+    status: "pending" | "in_review" | "passed" | "failed";
+    attempts: number;
+    lastOutcome?: "passed" | "failed" | "stale" | "stopped" | "incomplete";
+    currentReview?: DelegatedCheckpointReview;
+    history: DelegatedCheckpointHistoryEntry[];
+}
+export interface DelegatedRunTask {
+    taskId: string;
+    workItemId: string;
+}
+export interface DelegatedPlanRun {
+    runId: string;
+    sessionId: string;
+    planPath: string;
+    specPath: string;
+    workspaceRoot: string;
+    planSha256: string;
+    specSha256: string;
+    definition: DelegatedPlanDefinition;
+    registeredAt: string;
+    status: "active" | "sealed";
+    sealedAt?: string;
+    finalCheckpointId?: string;
+    tasks: Map<string, DelegatedRunTask>;
+    checkpoints: Map<string, DelegatedRunCheckpoint>;
+}
+export type RegisterDelegatedPlanResult = {
+    ok: true;
+    runId: string;
+    reused: boolean;
+    run: DelegatedPlanRun;
+} | {
+    ok: false;
+    errorCode: "INVALID_INPUT" | "PLAN_DRIFT" | "TASK_BINDING_FAILED" | "SESSION_MISMATCH";
+    message: string;
+};
+export interface RegisterDelegatedPlanInput {
+    sessionId: string;
+    plan: LoadedDelegatedPlan;
+}
+export declare function registerDelegatedPlan(store: WorkItemStore, input: RegisterDelegatedPlanInput): RegisterDelegatedPlanResult;
+export declare function registerDelegatedPlanInStore(data: WorkItemStoreData, input: RegisterDelegatedPlanInput): RegisterDelegatedPlanResult;
+export type StartDelegatedCheckpointResult = {
+    ok: true;
+    checkpoint: DelegatedRunCheckpoint;
+    reviewWorkItemId: string;
+    header: string;
+    reviewersToLaunch: DelegatedReviewer[];
+    generation: number;
+} | {
+    ok: false;
+    errorCode: "RUN_NOT_FOUND" | "SESSION_MISMATCH" | "CHECKPOINT_NOT_FOUND" | "RUN_SEALED" | "ALREADY_PASSED" | "ALREADY_IN_REVIEW" | "ATTEMPTS_EXHAUSTED" | "PREREQUISITES_NOT_ACCEPTED" | "OVERLAPPING_SCOPE" | "SNAPSHOT_FAILED";
+    message: string;
+};
+export interface StartDelegatedCheckpointInput {
+    sessionId: string;
+    runId: string;
+    checkpointId: string;
+}
+export declare function startDelegatedCheckpoint(store: WorkItemStore, input: StartDelegatedCheckpointInput): Promise<StartDelegatedCheckpointResult>;
+export declare function startDelegatedCheckpointInStore(data: WorkItemStoreData, input: StartDelegatedCheckpointInput): Promise<StartDelegatedCheckpointResult>;
+export type RecordReviewerLaunchResult = {
+    ok: true;
+} | {
+    ok: false;
+    errorCode: "RUN_NOT_FOUND" | "CHECKPOINT_NOT_FOUND" | "NOT_IN_REVIEW" | "REVIEWER_NOT_DECLARED" | "ALREADY_LAUNCHED" | "ALREADY_RECORDED";
+    message: string;
+};
+export type RecordReviewerResultResult = {
+    ok: true;
+    roundComplete: boolean;
+} | {
+    ok: false;
+    errorCode: "RUN_NOT_FOUND" | "CHECKPOINT_NOT_FOUND" | "NOT_IN_REVIEW" | "REVIEWER_NOT_DECLARED" | "CALLBACK_MISMATCH" | "ALREADY_RECORDED";
+    message: string;
+};
+export declare function recordCheckpointReviewerLaunch(store: WorkItemStore, input: {
+    runId: string;
+    checkpointId: string;
+    reviewer: DelegatedReviewer;
+    callId: string;
+}): RecordReviewerLaunchResult;
+export declare function recordCheckpointReviewerLaunchInStore(data: WorkItemStoreData, input: {
+    runId: string;
+    checkpointId: string;
+    reviewer: DelegatedReviewer;
+    callId: string;
+}): RecordReviewerLaunchResult;
+export declare function recordCheckpointReviewerResult(store: WorkItemStore, input: {
+    runId: string;
+    checkpointId: string;
+    reviewer: DelegatedReviewer;
+    callId?: string;
+    status: "PASS" | "FAIL" | "NEEDS_CONTEXT";
+}): RecordReviewerResultResult;
+export declare function recordCheckpointReviewerResultInStore(data: WorkItemStoreData, input: {
+    runId: string;
+    checkpointId: string;
+    reviewer: DelegatedReviewer;
+    callId?: string;
+    status: "PASS" | "FAIL" | "NEEDS_CONTEXT";
+}): RecordReviewerResultResult;
+export type VerifyDelegatedCheckpointResult = {
+    ok: true;
+    checkpoint: DelegatedRunCheckpoint;
+    outcome: "passed" | "failed" | "stale" | "stopped" | "incomplete" | "already-passed";
+    snapshotCurrent: boolean;
+    sealedRun?: boolean;
+} | {
+    ok: false;
+    errorCode: "RUN_NOT_FOUND" | "CHECKPOINT_NOT_FOUND" | "FINAL_COMPLETE_ON_NON_FINAL" | "COMPLETE_REQUIREMENTS_UNMET" | "PLAN_DRIFT" | "SNAPSHOT_FAILED";
+    message: string;
+};
+export interface VerifyDelegatedCheckpointInput {
+    sessionId: string;
+    runId: string;
+    checkpointId: string;
+    /** Only permitted for the final checkpoint; seals the run when every completion condition passes. */
+    complete?: boolean;
+}
+export declare function verifyDelegatedCheckpoint(store: WorkItemStore, input: VerifyDelegatedCheckpointInput): Promise<VerifyDelegatedCheckpointResult>;
+export declare function verifyDelegatedCheckpointInStore(data: WorkItemStoreData, input: VerifyDelegatedCheckpointInput): Promise<VerifyDelegatedCheckpointResult>;
+export type AuthorizeReworkResult = {
+    ok: true;
+    reworkId: string;
+    grantedAttempts: number;
+} | {
+    ok: false;
+    errorCode: "RUN_NOT_FOUND" | "SESSION_MISMATCH" | "CHECKPOINT_NOT_FOUND" | "RUN_SEALED" | "CHECKPOINT_NOT_FAILED" | "HARD_STOP_CHECKPOINT" | "TASK_NOT_COVERED" | "WORK_ITEM_NOT_BOUND" | "REWORK_REJECTED";
+    message: string;
+};
+export interface AuthorizeReworkInput {
+    sessionId: string;
+    runId: string;
+    checkpointId: string;
+    workItemId: string;
+    reason: string;
+}
+export declare function authorizeReworkFromFailedCheckpoint(store: WorkItemStore, input: AuthorizeReworkInput): AuthorizeReworkResult;
+export declare function authorizeReworkFromFailedCheckpointInStore(data: WorkItemStoreData, input: AuthorizeReworkInput): AuthorizeReworkResult;
+/** Unsatisfied checkpoint barriers blocking task launches for the given wave, in declaration order. */
+export declare function checkpointBarrierUnsatisfied(data: WorkItemStoreData, runId: string, wave: string): {
+    ok: true;
+    blockers: string[];
+} | {
+    ok: false;
+    message: string;
+};
+/** In-flight checkpoint review whose scope intersects the declared write scope. */
+export declare function findOverlappingInFlightReview(data: WorkItemStoreData, runId: string, writeScope: readonly string[]): string | undefined;
+/** Read-only run serialization for tooling output and persistence consumers. */
+export declare function getDelegatedRunView(data: WorkItemStoreData, runId: string): Record<string, unknown> | undefined;