@osovv/vv-opencode 1.4.3-rc.0 → 1.4.3

package/dist/plugins/system-context-injection/index.js

@@ -47,6 +47,14 @@ const UNIVERSAL_PRIMARY_SYSTEM_CONTEXTS = [
         "Report honest residual uncertainty: an unverified material condition is named as unverified, never presented as a passed check.",
         "</assumption_discipline>",
     ].join("\n"),
+    [
+        "<execution_source_and_authority>",
+        "Execution ownership, requirement source, and authority are distinct: a native spec/plan package, a provided plan, and the current conversation are all valid sources, and none of them by itself implies a different ownership model.",
+        "Required reviews are exactly those declared by the selected source, explicitly requested by the user, or explicitly registered by the controller; do not invent a universal final-review pair.",
+        "When the user explicitly authorizes autonomous completion, record it as a bounded advance authority with a finite shared reserve. Use it only after ordinary allowances are exhausted, disclose material decisions without turning each into a blocking question, and still respect reserved stops, host permissions, and destructive, publication, or credential operations.",
+        "Report completion honestly as controller-accepted when no independent review was assigned, and as independently reviewed only when every registered obligation actually passed for the current result.",
+        "</execution_source_and_authority>",
+    ].join("\n"),
     [
         "<correctness_obligations>",
         "For behavior changes, run a compact correctness cycle before reporting done: state the target effect, derive the material properties that must be preserved from the request and established contracts, identify the directly affected consumers, challenge at least one material assumption with a diagnostic counterexample, choose verification proportionate to the risk, report the observed result, and name the remaining uncertainty.",

package/dist/plugins/system-context-injection/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/system-context-injection/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,iBAAiB;AACjB,wBAAwB;AACxB,sNAAsN;AACtN,uQAAuQ;AACvQ,yIAAyI;AACzI,+FAA+F;AAC/F,kBAAkB;AAClB,sBAAsB;AACtB,sBAAsB;AACtB,EAAE;AACF,mBAAmB;AACnB,0HAA0H;AAC1H,iBAAiB;AACjB,EAAE;AACF,uBAAuB;AACvB,0QAA0Q;AAC1Q,qBAAqB;AAGrB,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,0BAA0B,GAE3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,kBAAkB,GAAG,CAAC,SAAS,CAAU,CAAC;AAChD,MAAM,wBAAwB,GAAG,CAAC,UAAU,CAAU,CAAC;AACvD,MAAM,uBAAuB,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;AAC5E,MAAM,8BAA8B,GAAG,EAAW,CAAC;AACnD,MAAM,gBAAgB,GAAG,SAAkB,CAAC;AAC5C,MAAM,mBAAmB,GAAG,eAAwB,CAAC;AAErD,MAAM,iCAAiC,GAAG;IACxC;QACE,uBAAuB;QACvB,qEAAqE;QACrE,iFAAiF;QACjF,6HAA6H;QAC7H,kFAAkF;QAClF,wBAAwB;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,yBAAyB;QACzB,0CAA0C;QAC1C,kHAAkH;QAClH,yGAAyG;QACzG,iEAAiE;QACjE,2KAA2K;QAC3K,iIAAiI;QACjI,0BAA0B;KAC3B,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,2BAA2B;QAC3B,+aAA+a;QAC/a,2SAA2S;QAC3S,4QAA4Q;QAC5Q,sUAAsU;QACtU,oFAAoF;QACpF,4BAA4B;KAC7B,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,iBAAiB;QACjB,sMAAsM;QACtM,gIAAgI;QAChI,sDAAsD;QACtD,4EAA4E;QAC5E,kBAAkB;KACnB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,oBAAoB;QACpB,4FAA4F;QAC5F,yGAAyG;QACzG,0EAA0E;QAC1E,qBAAqB;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,uBAAuB;QACvB,oEAAoE;QACpE,oJAAoJ;QACpJ,qHAAqH;QACrH,qGAAqG;QACrG,wBAAwB;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,qBAAqB;QACrB,6DAA6D;QAC7D,+QAA+Q;QAC/Q,8GAA8G;QAC9G,sBAAsB;KACvB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,oBAAoB;QACpB,uMAAuM;QACvM,qGAAqG;QACrG,+DAA+D;QAC/D,qBAAqB;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,qBAAqB;QACrB,yNAAyN;QACzN,0GAA0G;QAC1G,kMAAkM;QAClM,gLAAgL;QAChL,sBAAsB;KACvB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,uBAAuB;QACvB,gKAAgK;QAChK,wBAAwB;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC;CACJ,CAAC;AAEX,MAAM,uBAAuB,GAAG;IAC9B;QACE,gBAAgB;QAChB,mDAAmD;QACnD,uIAAuI;QACvI,qEAAqE;QACrE,4HAA4H;QAC5H,qJAAqJ;QACrJ,wFAAwF;QACxF,iJAAiJ;QACjJ,iGAAiG;QACjG,iBAAiB;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC;CACJ,CAAC;AAMX,4BAA4B;AAC5B,SAAS,sBAAsB;IAC7B,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,EAAE,GAAG,wBAAwB,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc,EAAE,cAA2B;IAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,IAAK,UAA2C,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YACtE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,SAA6B,EAAE,cAA2B;IACtF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,uBAAuB,CAAC,QAAQ,CAAC,SAAqD,CAAC,EAAE,CAAC;QAC5F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,8BAA8B,CAAC,QAAQ,CACrC,SAA4D,CAC7D,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,SAAS,yBAAyB,CAChC,SAA6B,EAC7B,MAAmC;IAEnC,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACnC,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,iCAAiC,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,iCAAiC,CAAC;AAC3C,CAAC;AACD,0BAA0B;AAE1B,wCAAwC;AACxC,SAAS,kBAAkB,CAAC,cAAkC,EAAE,OAAe;IAC7E,OAAO,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,oBAAoB,CAC3B,cAAkC,EAClC,QAA2B;IAE3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AACD,sCAAsC;AAEtC,2BAA2B;AAC3B,MAAM,CAAC,MAAM,4BAA4B,GAAW,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IAC1E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7E,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,sBAAsB,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;IAErD,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvB,uBAAuB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAChD,MAAM,YAAY,GAAG,MAAiC,CAAC;YACvD,MAAM,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;YACtE,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAa,CAAC;YACrD,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC;YAE7F,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBAC7B,oFAAoF;gBACpF,MAAM,iBAAiB,GAAG,0BAA0B,EAAE,CAAC;gBACvD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBAC7C,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,WAAW,EAAE,iBAAiB,CAAC,CAAC;oBACnD,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,mDAAmD;YACnD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1E,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAa,CAAC;YACtD,IACE,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;gBAC9B,UAAU,CAAC,gBAAgB,CAAC;gBAC5B,CAAC,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACxC,CAAC;gBACD,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,YAAY,EAAE,gBAAgB,CAAC,CAAC;gBACnD,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACvC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;gBAChE,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,oBAAoB,CAC1C,MAAM,CAAC,OAAO,CAAC,MAAM,EACrB,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CACxD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AACF,yBAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/system-context-injection/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,iBAAiB;AACjB,wBAAwB;AACxB,sNAAsN;AACtN,uQAAuQ;AACvQ,yIAAyI;AACzI,+FAA+F;AAC/F,kBAAkB;AAClB,sBAAsB;AACtB,sBAAsB;AACtB,EAAE;AACF,mBAAmB;AACnB,0HAA0H;AAC1H,iBAAiB;AACjB,EAAE;AACF,uBAAuB;AACvB,0QAA0Q;AAC1Q,qBAAqB;AAGrB,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,0BAA0B,GAE3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,kBAAkB,GAAG,CAAC,SAAS,CAAU,CAAC;AAChD,MAAM,wBAAwB,GAAG,CAAC,UAAU,CAAU,CAAC;AACvD,MAAM,uBAAuB,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;AAC5E,MAAM,8BAA8B,GAAG,EAAW,CAAC;AACnD,MAAM,gBAAgB,GAAG,SAAkB,CAAC;AAC5C,MAAM,mBAAmB,GAAG,eAAwB,CAAC;AAErD,MAAM,iCAAiC,GAAG;IACxC;QACE,uBAAuB;QACvB,qEAAqE;QACrE,iFAAiF;QACjF,6HAA6H;QAC7H,kFAAkF;QAClF,wBAAwB;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,yBAAyB;QACzB,0CAA0C;QAC1C,kHAAkH;QAClH,yGAAyG;QACzG,iEAAiE;QACjE,2KAA2K;QAC3K,iIAAiI;QACjI,0BAA0B;KAC3B,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,kCAAkC;QAClC,uOAAuO;QACvO,gMAAgM;QAChM,+WAA+W;QAC/W,wMAAwM;QACxM,mCAAmC;KACpC,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,2BAA2B;QAC3B,+aAA+a;QAC/a,2SAA2S;QAC3S,4QAA4Q;QAC5Q,sUAAsU;QACtU,oFAAoF;QACpF,4BAA4B;KAC7B,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,iBAAiB;QACjB,sMAAsM;QACtM,gIAAgI;QAChI,sDAAsD;QACtD,4EAA4E;QAC5E,kBAAkB;KACnB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,oBAAoB;QACpB,4FAA4F;QAC5F,yGAAyG;QACzG,0EAA0E;QAC1E,qBAAqB;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,uBAAuB;QACvB,oEAAoE;QACpE,oJAAoJ;QACpJ,qHAAqH;QACrH,qGAAqG;QACrG,wBAAwB;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,qBAAqB;QACrB,6DAA6D;QAC7D,+QAA+Q;QAC/Q,8GAA8G;QAC9G,sBAAsB;KACvB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,oBAAoB;QACpB,uMAAuM;QACvM,qGAAqG;QACrG,+DAA+D;QAC/D,qBAAqB;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,qBAAqB;QACrB,yNAAyN;QACzN,0GAA0G;QAC1G,kMAAkM;QAClM,gLAAgL;QAChL,sBAAsB;KACvB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ;QACE,uBAAuB;QACvB,gKAAgK;QAChK,wBAAwB;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC;CACJ,CAAC;AAEX,MAAM,uBAAuB,GAAG;IAC9B;QACE,gBAAgB;QAChB,mDAAmD;QACnD,uIAAuI;QACvI,qEAAqE;QACrE,4HAA4H;QAC5H,qJAAqJ;QACrJ,wFAAwF;QACxF,iJAAiJ;QACjJ,iGAAiG;QACjG,iBAAiB;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC;CACJ,CAAC;AAMX,4BAA4B;AAC5B,SAAS,sBAAsB;IAC7B,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,EAAE,GAAG,wBAAwB,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc,EAAE,cAA2B;IAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,IAAK,UAA2C,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YACtE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,SAA6B,EAAE,cAA2B;IACtF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,uBAAuB,CAAC,QAAQ,CAAC,SAAqD,CAAC,EAAE,CAAC;QAC5F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,8BAA8B,CAAC,QAAQ,CACrC,SAA4D,CAC7D,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,SAAS,yBAAyB,CAChC,SAA6B,EAC7B,MAAmC;IAEnC,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACnC,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,iCAAiC,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,iCAAiC,CAAC;AAC3C,CAAC;AACD,0BAA0B;AAE1B,wCAAwC;AACxC,SAAS,kBAAkB,CAAC,cAAkC,EAAE,OAAe;IAC7E,OAAO,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,oBAAoB,CAC3B,cAAkC,EAClC,QAA2B;IAE3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AACD,sCAAsC;AAEtC,2BAA2B;AAC3B,MAAM,CAAC,MAAM,4BAA4B,GAAW,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IAC1E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7E,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,sBAAsB,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;IAErD,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvB,uBAAuB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAChD,MAAM,YAAY,GAAG,MAAiC,CAAC;YACvD,MAAM,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;YACtE,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAa,CAAC;YACrD,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC;YAE7F,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBAC7B,oFAAoF;gBACpF,MAAM,iBAAiB,GAAG,0BAA0B,EAAE,CAAC;gBACvD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBAC7C,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,WAAW,EAAE,iBAAiB,CAAC,CAAC;oBACnD,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,mDAAmD;YACnD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1E,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAa,CAAC;YACtD,IACE,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;gBAC9B,UAAU,CAAC,gBAAgB,CAAC;gBAC5B,CAAC,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACxC,CAAC;gBACD,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,YAAY,EAAE,gBAAgB,CAAC,CAAC;gBACnD,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACvC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;gBAChE,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,oBAAoB,CAC1C,MAAM,CAAC,OAAO,CAAC,MAAM,EACrB,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CACxD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AACF,yBAAyB"}

package/dist/plugins/workflow/authority.d.ts

@@ -0,0 +1,99 @@
+import { type WorkflowAuthorityExtension, type WorkflowAuthorityProvenance, type WorkflowAuthorityRecord, type WorkflowAuthorityRevocation, type WorkflowAuthorityScope, type WorkflowAuthorityStage, type WorkflowMessageClaim, type WorkflowReserveDebit, type WorkflowStageApproval } from "../../lib/workflow-contract.js";
+/** Initial and per-extension advance recovery units shared by one authorized execution. */
+export declare const ADVANCE_RECOVERY_RESERVE = 3;
+export type AuthorityValidationErrorCode = "MISSING_IDENTITY" | "FOREIGN_SESSION" | "ASSISTANT_MESSAGE" | "SYNTHETIC_ONLY" | "IGNORED_MESSAGE" | "EMPTY_MESSAGE" | "MESSAGE_REPLAY" | "DUPLICATE_GRANT" | "AUTHORITY_NOT_FOUND" | "AUTHORITY_REVOKED" | "STALE_EXTENSION" | "RESERVE_EXHAUSTED" | "DUPLICATE_DEBIT" | "STAGE_NOT_DELEGATED" | "STAGE_RESERVED" | "INVALID_INPUT";
+export type AuthorityOperationResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    code: AuthorityValidationErrorCode;
+    message: string;
+};
+/** Observable identity, timing, and eligibility metadata of one candidate root-user message. */
+export interface AuthorityMessageSnapshot {
+    messageId: string;
+    sessionId: string;
+    /** Message author role as reported by the pinned SDK response. */
+    role: "user" | "assistant";
+    createdMs: number;
+    ignored: boolean;
+    /** True when the message contains only synthetic/placeholder user text. */
+    syntheticOnly: boolean;
+    textParts: string[];
+}
+/** Pure eligibility check for one candidate root-user instruction. */
+export declare function validateAuthorityMessage(message: AuthorityMessageSnapshot, sessionId: string): AuthorityOperationResult<true>;
+/**
+ * Initial grant recording the finite shared reserve. Creating the same
+ * authority again is idempotent only for an identical claim; a different
+ * authority for the same execution, or a replayed message under another
+ * execution, is rejected without manufacturing a new reserve.
+ */
+export declare function grantAdvanceAuthority(input: {
+    authorityId: string;
+    runId: string;
+    sessionId: string;
+    message: AuthorityMessageSnapshot;
+    scope: WorkflowAuthorityScope;
+    existingAuthorities: readonly WorkflowAuthorityRecord[];
+    messageClaims: Map<string, WorkflowMessageClaim>;
+    nowMs?: number;
+}): AuthorityOperationResult<{
+    record: WorkflowAuthorityRecord;
+    claim: WorkflowMessageClaim;
+}>;
+/** Total granted units across the initial reserve and extensions. */
+export declare function advanceUnitsGranted(authority: WorkflowAuthorityRecord): number;
+/** Debits consumed against one authority. */
+export declare function advanceUnitsConsumed(authority: WorkflowAuthorityRecord, debits: readonly WorkflowReserveDebit[]): number;
+/** Remaining usable units after debits; a full revocation disables all future use. */
+export declare function advanceUnitsAvailable(authority: WorkflowAuthorityRecord, debits: readonly WorkflowReserveDebit[]): number;
+/** Surviving delegatable stages after applying every narrowing revocation. */
+export declare function effectiveAuthorityStages(authority: WorkflowAuthorityRecord): WorkflowAuthorityStage[];
+/** Explicit finite extension bound to a new eligible instruction after the extended authority event. */
+export declare function extendAdvanceAuthority(input: {
+    authority: WorkflowAuthorityRecord;
+    extensionId: string;
+    sessionId: string;
+    message: AuthorityMessageSnapshot;
+    messageClaims: Map<string, WorkflowMessageClaim>;
+    nowMs?: number;
+}): AuthorityOperationResult<WorkflowAuthorityExtension>;
+/** Propose one immutable one-unit reserve consumption for an exact target. */
+export declare function proposeReserveDebit(input: {
+    authority: WorkflowAuthorityRecord;
+    debits: readonly WorkflowReserveDebit[];
+    recoveryId: string;
+    targetKind: "task" | "checkpoint";
+    targetId: string;
+    stage?: WorkflowAuthorityStage;
+    nowMs?: number;
+}): AuthorityOperationResult<WorkflowReserveDebit>;
+/** Fail-safe narrowing that cannot restore consumed units or broaden the scope. */
+export declare function narrowAdvanceAuthority(input: {
+    authority: WorkflowAuthorityRecord;
+    revocationId: string;
+    reason: string;
+    narrowedStages?: WorkflowAuthorityStage[];
+    nowMs?: number;
+}): AuthorityOperationResult<WorkflowAuthorityRevocation>;
+/** Revoke future and unlaunched credits without erasing history. */
+export declare function revokeAdvanceAuthority(input: {
+    authority: WorkflowAuthorityRecord;
+    revocationId: string;
+    reason: string;
+    nowMs?: number;
+}): AuthorityOperationResult<WorkflowAuthorityRevocation>;
+/** Whether a stage remains reserved for explicit user action. */
+export declare function isStageReserved(scope: WorkflowAuthorityScope, stage: WorkflowAuthorityStage): boolean;
+/** Record a truthful controller_delegated stage approval when authority covers the stage. */
+export declare function proposeStageApproval(input: {
+    authority: WorkflowAuthorityRecord;
+    approvalId: string;
+    stage: WorkflowAuthorityStage;
+    artifactPath: string;
+    artifactSha256: string;
+    provenance: WorkflowAuthorityProvenance;
+    nowMs?: number;
+}): AuthorityOperationResult<WorkflowStageApproval>;

package/dist/plugins/workflow/authority.js

@@ -0,0 +1,435 @@
+// FILE: src/plugins/workflow/authority.ts
+// VERSION: 1.0.0
+// START_MODULE_CONTRACT
+//   PURPOSE: Bounded advance-execution authority and truthful stage-approval provenance: root-user message eligibility, one finite shared recovery reserve, explicit extension, fail-safe narrowing/revocation, replay/duplicate protection, one-unit reserve consumption, and controller-delegated versus user-observed stage records.
+//   SCOPE: Pure validation outcomes and proposed ledger transitions over authority records, session-wide message claims, and reserve debits. No native XML parsing, SDK transport, task dispatch, filesystem writes, or persistence. Runtime integration belongs to the plugin transaction layer.
+//   DEPENDS: [src/lib/workflow-contract.ts]
+//   LINKS: [M-WORKFLOW-AUTHORITY, M-WORKFLOW-CONTRACT, M-WORKFLOW-EXECUTION, V-M-WORKFLOW-AUTHORITY]
+//   ROLE: RUNTIME
+//   MAP_MODE: EXPORTS
+// END_MODULE_CONTRACT
+//
+// START_MODULE_MAP
+//   ADVANCE_RECOVERY_RESERVE - Initial and per-extension advance recovery units shared by one authorized execution.
+//   AuthorityMessageSnapshot - Observable identity, timing, and eligibility metadata of one candidate root-user message.
+//   AuthorityValidationErrorCode - Coded reasons an authority operation is rejected.
+//   AuthorityOperationResult - Success value or a coded rejection.
+//   validateAuthorityMessage - Pure eligibility check for one candidate root-user instruction.
+//   grantAdvanceAuthority - Initial grant recording the finite reserve and its message claim.
+//   extendAdvanceAuthority - Explicit finite extension from a new eligible instruction.
+//   advanceUnitsGranted - Total granted units across the initial reserve and extensions.
+//   advanceUnitsConsumed - Debits consumed against one authority.
+//   advanceUnitsAvailable - Remaining usable units after debits and full revocation.
+//   effectiveAuthorityStages - Surviving delegatable stages after narrowing revocations.
+//   proposeReserveDebit - Propose one immutable one-unit reserve consumption for an exact target.
+//   narrowAdvanceAuthority - Fail-safe scope reduction that cannot restore consumed units.
+//   revokeAdvanceAuthority - Revoke future and unlaunched credits without erasing history.
+//   proposeStageApproval - Record a truthful controller_delegated stage approval when authority covers the stage.
+//   isStageReserved - Whether a stage remains reserved for explicit user action.
+// END_MODULE_MAP
+//
+// START_CHANGE_SUMMARY
+//   LAST_CHANGE: [C-WORKFLOW-PLAN-INDEPENDENCE - Initial bounded advance-authority domain with a shared three-unit reserve, replay protection, and truthful stage provenance.]
+// END_CHANGE_SUMMARY
+import { isBoundedWorkflowId, WORKFLOW_TEXT_MAX_CHARS, } from "../../lib/workflow-contract.js";
+// START_BLOCK_AUTHORITY_CONSTANTS
+/** Initial and per-extension advance recovery units shared by one authorized execution. */
+export const ADVANCE_RECOVERY_RESERVE = 3;
+const AUTHORITY_STAGES = new Set([
+    "specification",
+    "planning",
+    "implementation",
+    "verification",
+]);
+/** Pure eligibility check for one candidate root-user instruction. */
+export function validateAuthorityMessage(message, sessionId) {
+    if (message === null || typeof message !== "object" || !isBoundedWorkflowId(message.messageId)) {
+        return {
+            ok: false,
+            code: "MISSING_IDENTITY",
+            message: "authorization message identity is missing",
+        };
+    }
+    if (message.sessionId !== sessionId) {
+        return {
+            ok: false,
+            code: "FOREIGN_SESSION",
+            message: "authorization message belongs to another session",
+        };
+    }
+    if (message.role !== "user") {
+        return {
+            ok: false,
+            code: "ASSISTANT_MESSAGE",
+            message: "only a root-user instruction can grant authority",
+        };
+    }
+    if (message.ignored) {
+        return {
+            ok: false,
+            code: "IGNORED_MESSAGE",
+            message: "ignored messages cannot grant authority",
+        };
+    }
+    if (message.syntheticOnly) {
+        return {
+            ok: false,
+            code: "SYNTHETIC_ONLY",
+            message: "synthetic-only messages cannot grant authority",
+        };
+    }
+    if (!Number.isFinite(message.createdMs) || message.createdMs <= 0) {
+        return {
+            ok: false,
+            code: "MISSING_IDENTITY",
+            message: "authorization message has no finite creation time",
+        };
+    }
+    const hasText = Array.isArray(message.textParts)
+        ? message.textParts.some((part) => typeof part === "string" && part.trim() !== "")
+        : false;
+    if (!hasText) {
+        return {
+            ok: false,
+            code: "EMPTY_MESSAGE",
+            message: "authorization message has no usable user text",
+        };
+    }
+    return { ok: true, value: true };
+}
+function validScope(scope, problems) {
+    if (!Array.isArray(scope.stages) || scope.stages.some((stage) => !AUTHORITY_STAGES.has(stage))) {
+        problems.push("scope.stages must be a subset of specification/planning/implementation/verification");
+    }
+    if (typeof scope.decisionScope !== "string" ||
+        scope.decisionScope.trim().length > WORKFLOW_TEXT_MAX_CHARS) {
+        problems.push("scope.decisionScope must be a bounded text description");
+    }
+    if (!Array.isArray(scope.fileBoundary)) {
+        problems.push("scope.fileBoundary must be an array");
+    }
+    if (!Array.isArray(scope.reservedStops) ||
+        scope.reservedStops.some((stage) => !AUTHORITY_STAGES.has(stage))) {
+        problems.push("scope.reservedStops must be a subset of the delegatable stages");
+    }
+}
+function claimMessage(message, runId, authorityId, claims, nowMs) {
+    const existing = claims.get(message.messageId);
+    if (existing) {
+        // Idempotent reuse for the same execution authority, replay rejection else.
+        if (existing.runId === runId && existing.authorityId === authorityId) {
+            return { ok: true, value: existing };
+        }
+        return {
+            ok: false,
+            code: "MESSAGE_REPLAY",
+            message: `message ${message.messageId} already funded authority for another operation`,
+        };
+    }
+    const claim = {
+        messageId: message.messageId,
+        runId,
+        authorityId,
+        claimedAt: new Date(nowMs).toISOString(),
+    };
+    claims.set(message.messageId, claim);
+    return { ok: true, value: claim };
+}
+/**
+ * Initial grant recording the finite shared reserve. Creating the same
+ * authority again is idempotent only for an identical claim; a different
+ * authority for the same execution, or a replayed message under another
+ * execution, is rejected without manufacturing a new reserve.
+ */
+export function grantAdvanceAuthority(input) {
+    if (!isBoundedWorkflowId(input.authorityId) || !isBoundedWorkflowId(input.runId)) {
+        return {
+            ok: false,
+            code: "INVALID_INPUT",
+            message: "authorityId and runId must be bounded identities",
+        };
+    }
+    const eligibility = validateAuthorityMessage(input.message, input.sessionId);
+    if (!eligibility.ok)
+        return eligibility;
+    const problems = [];
+    validScope(input.scope, problems);
+    if (problems.length > 0) {
+        return { ok: false, code: "INVALID_INPUT", message: problems.join("; ") };
+    }
+    const existingForId = input.existingAuthorities.filter((authority) => authority.authorityId === input.authorityId);
+    if (existingForId.length > 0) {
+        const existing = existingForId[0];
+        if (existing.grantedByMessageId === input.message.messageId &&
+            existing.rootSessionId === input.sessionId &&
+            existing.runId === input.runId) {
+            const claim = input.messageClaims.get(input.message.messageId);
+            if (claim)
+                return { ok: true, value: { record: existing, claim } };
+        }
+        return {
+            ok: false,
+            code: "DUPLICATE_GRANT",
+            message: `authority ${input.authorityId} is already registered`,
+        };
+    }
+    // A second initial grant for the same execution — even under a new
+    // authorityId or a different message — must not mint another reserve.
+    if (input.existingAuthorities.some((authority) => authority.runId === input.runId)) {
+        return {
+            ok: false,
+            code: "DUPLICATE_GRANT",
+            message: `execution ${input.runId} already has a recorded advance authority`,
+        };
+    }
+    const nowMs = input.nowMs ?? input.message.createdMs;
+    const claimResult = claimMessage(input.message, input.runId, input.authorityId, input.messageClaims, nowMs);
+    if (!claimResult.ok)
+        return claimResult;
+    const record = {
+        authorityId: input.authorityId,
+        runId: input.runId,
+        rootSessionId: input.sessionId,
+        grantedByMessageId: input.message.messageId,
+        messageCreatedMs: input.message.createdMs,
+        scope: normalizeScope(input.scope),
+        initialUnits: ADVANCE_RECOVERY_RESERVE,
+        extensions: [],
+        revocations: [],
+        createdAt: new Date(nowMs).toISOString(),
+    };
+    return { ok: true, value: { record, claim: claimResult.value } };
+}
+function normalizeScope(scope) {
+    return {
+        stages: [...scope.stages],
+        decisionScope: scope.decisionScope.trim(),
+        fileBoundary: [...scope.fileBoundary],
+        reservedStops: [...scope.reservedStops],
+    };
+}
+/** Total granted units across the initial reserve and extensions. */
+export function advanceUnitsGranted(authority) {
+    return (authority.initialUnits +
+        authority.extensions.reduce((sum, extension) => sum + extension.units, 0));
+}
+/** Debits consumed against one authority. */
+export function advanceUnitsConsumed(authority, debits) {
+    return debits
+        .filter((debit) => debit.authorityId === authority.authorityId)
+        .reduce((sum, debit) => sum + debit.units, 0);
+}
+/** Remaining usable units after debits; a full revocation disables all future use. */
+export function advanceUnitsAvailable(authority, debits) {
+    if (authority.revocations.some((revocation) => revocation.kind === "revoke"))
+        return 0;
+    return Math.max(0, advanceUnitsGranted(authority) - advanceUnitsConsumed(authority, debits));
+}
+/** Surviving delegatable stages after applying every narrowing revocation. */
+export function effectiveAuthorityStages(authority) {
+    let stages = [...authority.scope.stages];
+    for (const revocation of authority.revocations) {
+        if (revocation.kind === "narrow" && revocation.narrowedStages) {
+            const surviving = revocation.narrowedStages;
+            stages = stages.filter((stage) => surviving.includes(stage));
+        }
+    }
+    return stages;
+}
+/** Explicit finite extension bound to a new eligible instruction after the extended authority event. */
+export function extendAdvanceAuthority(input) {
+    const { authority } = input;
+    if (!isBoundedWorkflowId(input.extensionId)) {
+        return { ok: false, code: "INVALID_INPUT", message: "extensionId must be a bounded identity" };
+    }
+    const eligibility = validateAuthorityMessage(input.message, input.sessionId);
+    if (!eligibility.ok)
+        return eligibility;
+    const latestEventMs = Math.max(authority.messageCreatedMs, ...authority.extensions.map((extension) => extension.messageCreatedMs));
+    if (input.message.createdMs <= latestEventMs) {
+        return {
+            ok: false,
+            code: "STALE_EXTENSION",
+            message: "extension requires a new eligible instruction newer than the authority event it extends",
+        };
+    }
+    if (authority.revocations.some((revocation) => revocation.kind === "revoke")) {
+        return {
+            ok: false,
+            code: "AUTHORITY_REVOKED",
+            message: `authority ${authority.authorityId} is revoked`,
+        };
+    }
+    const nowMs = input.nowMs ?? input.message.createdMs;
+    const claim = claimMessage(input.message, authority.runId, authority.authorityId, input.messageClaims, nowMs);
+    if (!claim.ok)
+        return claim;
+    return {
+        ok: true,
+        value: {
+            extensionId: input.extensionId,
+            messageId: input.message.messageId,
+            messageCreatedMs: input.message.createdMs,
+            units: ADVANCE_RECOVERY_RESERVE,
+            createdAt: new Date(nowMs).toISOString(),
+        },
+    };
+}
+/** Propose one immutable one-unit reserve consumption for an exact target. */
+export function proposeReserveDebit(input) {
+    if (!isBoundedWorkflowId(input.recoveryId) || !isBoundedWorkflowId(input.targetId)) {
+        return {
+            ok: false,
+            code: "INVALID_INPUT",
+            message: "recoveryId and targetId must be bounded identities",
+        };
+    }
+    if (input.debits.some((debit) => debit.recoveryId === input.recoveryId)) {
+        return {
+            ok: false,
+            code: "DUPLICATE_DEBIT",
+            message: `recovery ${input.recoveryId} already consumed a reserve unit`,
+        };
+    }
+    if (input.authority.revocations.some((revocation) => revocation.kind === "revoke")) {
+        return {
+            ok: false,
+            code: "AUTHORITY_REVOKED",
+            message: `authority ${input.authority.authorityId} is revoked`,
+        };
+    }
+    if (input.stage !== undefined &&
+        !effectiveAuthorityStages(input.authority).includes(input.stage)) {
+        return {
+            ok: false,
+            code: "STAGE_NOT_DELEGATED",
+            message: `${input.stage} is outside the surviving authority scope`,
+        };
+    }
+    if (advanceUnitsAvailable(input.authority, input.debits) < 1) {
+        return {
+            ok: false,
+            code: "RESERVE_EXHAUSTED",
+            message: `authority ${input.authority.authorityId} has no remaining reserve units`,
+        };
+    }
+    return {
+        ok: true,
+        value: {
+            recoveryId: input.recoveryId,
+            authorityId: input.authority.authorityId,
+            targetKind: input.targetKind,
+            targetId: input.targetId,
+            units: 1,
+            debitedAt: new Date(input.nowMs ?? Date.now()).toISOString(),
+        },
+    };
+}
+/** Fail-safe narrowing that cannot restore consumed units or broaden the scope. */
+export function narrowAdvanceAuthority(input) {
+    if (!isBoundedWorkflowId(input.revocationId)) {
+        return { ok: false, code: "INVALID_INPUT", message: "revocationId must be a bounded identity" };
+    }
+    if (input.authority.revocations.length > 0) {
+        return {
+            ok: false,
+            code: "AUTHORITY_REVOKED",
+            message: "authority is already revoked or narrowed",
+        };
+    }
+    const surviving = input.narrowedStages ?? input.authority.scope.stages;
+    const subset = surviving.every((stage) => input.authority.scope.stages.includes(stage));
+    if (!subset) {
+        return {
+            ok: false,
+            code: "INVALID_INPUT",
+            message: "narrowing may only remove stages already covered by the authority",
+        };
+    }
+    return {
+        ok: true,
+        value: {
+            revocationId: input.revocationId,
+            kind: "narrow",
+            reason: input.reason.trim() || "narrowed",
+            narrowedStages: [...surviving],
+            revokedAt: new Date(input.nowMs ?? Date.now()).toISOString(),
+        },
+    };
+}
+/** Revoke future and unlaunched credits without erasing history. */
+export function revokeAdvanceAuthority(input) {
+    if (!isBoundedWorkflowId(input.revocationId)) {
+        return { ok: false, code: "INVALID_INPUT", message: "revocationId must be a bounded identity" };
+    }
+    if (input.authority.revocations.some((revocation) => revocation.kind === "revoke")) {
+        return {
+            ok: false,
+            code: "AUTHORITY_REVOKED",
+            message: "authority is already revoked",
+        };
+    }
+    return {
+        ok: true,
+        value: {
+            revocationId: input.revocationId,
+            kind: "revoke",
+            reason: input.reason.trim() || "revoked",
+            revokedAt: new Date(input.nowMs ?? Date.now()).toISOString(),
+        },
+    };
+}
+/** Whether a stage remains reserved for explicit user action. */
+export function isStageReserved(scope, stage) {
+    return scope.reservedStops.includes(stage);
+}
+/** Record a truthful controller_delegated stage approval when authority covers the stage. */
+export function proposeStageApproval(input) {
+    if (!isBoundedWorkflowId(input.approvalId)) {
+        return { ok: false, code: "INVALID_INPUT", message: "approvalId must be a bounded identity" };
+    }
+    if (input.authority.revocations.some((revocation) => revocation.kind === "revoke")) {
+        return {
+            ok: false,
+            code: "AUTHORITY_REVOKED",
+            message: `authority ${input.authority.authorityId} is revoked`,
+        };
+    }
+    if (!effectiveAuthorityStages(input.authority).includes(input.stage)) {
+        return {
+            ok: false,
+            code: "STAGE_NOT_DELEGATED",
+            message: `authority does not cover the ${input.stage} stage`,
+        };
+    }
+    if (isStageReserved(input.authority.scope, input.stage)) {
+        return {
+            ok: false,
+            code: "STAGE_RESERVED",
+            message: `${input.stage} remains reserved for explicit user action`,
+        };
+    }
+    if (typeof input.artifactPath !== "string" ||
+        input.artifactPath.trim() === "" ||
+        typeof input.artifactSha256 !== "string" ||
+        input.artifactSha256.trim() === "") {
+        return {
+            ok: false,
+            code: "INVALID_INPUT",
+            message: "stage approval requires the approved artifact path and hash",
+        };
+    }
+    return {
+        ok: true,
+        value: {
+            approvalId: input.approvalId,
+            authorityId: input.authority.authorityId,
+            stage: input.stage,
+            artifactPath: input.artifactPath,
+            artifactSha256: input.artifactSha256,
+            provenance: input.provenance,
+            recordedAt: new Date(input.nowMs ?? Date.now()).toISOString(),
+        },
+    };
+}
+//# sourceMappingURL=authority.js.map

package/dist/plugins/workflow/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../../../src/plugins/workflow/authority.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,iBAAiB;AACjB,wBAAwB;AACxB,wUAAwU;AACxU,kSAAkS;AAClS,4CAA4C;AAC5C,qGAAqG;AACrG,kBAAkB;AAClB,sBAAsB;AACtB,sBAAsB;AACtB,EAAE;AACF,mBAAmB;AACnB,oHAAoH;AACpH,yHAAyH;AACzH,qFAAqF;AACrF,mEAAmE;AACnE,+FAA+F;AAC/F,8FAA8F;AAC9F,wFAAwF;AACxF,yFAAyF;AACzF,kEAAkE;AAClE,qFAAqF;AACrF,yFAAyF;AACzF,kGAAkG;AAClG,2FAA2F;AAC3F,2FAA2F;AAC3F,kHAAkH;AAClH,iFAAiF;AACjF,iBAAiB;AACjB,EAAE;AACF,uBAAuB;AACvB,+KAA+K;AAC/K,qBAAqB;AAErB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GAUxB,MAAM,gCAAgC,CAAC;AAExC,kCAAkC;AAClC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,eAAe;IACf,UAAU;IACV,gBAAgB;IAChB,cAAc;CACf,CAAC,CAAC;AAsCH,sEAAsE;AACtE,MAAM,UAAU,wBAAwB,CACtC,OAAiC,EACjC,SAAiB;IAEjB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,2CAA2C;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,kDAAkD;SAC5D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,kDAAkD;SAC5D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,yCAAyC;SACnD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,gDAAgD;SAC1D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,mDAAmD;SAC7D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAClF,CAAC,CAAC,KAAK,CAAC;IACV,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,+CAA+C;SACzD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,KAA6B,EAAE,QAAkB;IACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/F,QAAQ,CAAC,IAAI,CACX,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,IACE,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,uBAAuB,EAC3D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACvD,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;QACnC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EACjE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,OAAiC,EACjC,KAAa,EACb,WAAmB,EACnB,MAAyC,EACzC,KAAa;IAEb,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACb,4EAA4E;QAC5E,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACvC,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,WAAW,OAAO,CAAC,SAAS,iDAAiD;SACvF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAyB;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK;QACL,WAAW;QACX,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;KACzC,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KASrC;IACC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,kDAAkD;SAC5D,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7E,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5E,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,mBAAmB,CAAC,MAAM,CACpD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAC3D,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IACE,QAAQ,CAAC,kBAAkB,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS;YACvD,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,SAAS;YAC1C,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAC9B,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/D,IAAI,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QACrE,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,aAAa,KAAK,CAAC,WAAW,wBAAwB;SAChE,CAAC;IACJ,CAAC;IACD,mEAAmE;IACnE,sEAAsE;IACtE,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,aAAa,KAAK,CAAC,KAAK,2CAA2C;SAC7E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;IACrD,MAAM,WAAW,GAAG,YAAY,CAC9B,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,aAAa,EACnB,KAAK,CACN,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IAExC,MAAM,MAAM,GAA4B;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,KAAK,CAAC,SAAS;QAC9B,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAC3C,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QACzC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;QAClC,YAAY,EAAE,wBAAwB;QACtC,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;KACzC,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IACnD,OAAO;QACL,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACzB,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE;QACzC,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QACrC,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,SAAkC;IACpE,OAAO,CACL,SAAS,CAAC,YAAY;QACtB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,oBAAoB,CAClC,SAAkC,EAClC,MAAuC;IAEvC,OAAO,MAAM;SACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,CAAC;SAC9D,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CACnC,SAAkC,EAClC,MAAuC;IAEvC,IAAI,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,CAAC,SAAS,CAAC,GAAG,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CACtC,SAAkC;IAElC,IAAI,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;YAC9D,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,CAAC;YAC5C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,sBAAsB,CAAC,KAOtC;IACC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7E,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC5B,SAAS,CAAC,gBAAgB,EAC1B,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,CACvE,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,aAAa,EAAE,CAAC;QAC7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EACL,yFAAyF;SAC5F,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC7E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,aAAa,SAAS,CAAC,WAAW,aAAa;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CACxB,KAAK,CAAC,OAAO,EACb,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,WAAW,EACrB,KAAK,CAAC,aAAa,EACnB,KAAK,CACN,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YACzC,KAAK,EAAE,wBAAwB;YAC/B,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;SACzC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,KAQnC;IACC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,oDAAoD;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,YAAY,KAAK,CAAC,UAAU,kCAAkC;SACxE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,aAAa,KAAK,CAAC,SAAS,CAAC,WAAW,aAAa;SAC/D,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAChE,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,2CAA2C;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,aAAa,KAAK,CAAC,SAAS,CAAC,WAAW,iCAAiC;SACnF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC7D;KACF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,KAMtC;IACC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAClG,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,0CAA0C;SACpD,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,mEAAmE;SAC7E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,UAAU;YACzC,cAAc,EAAE,CAAC,GAAG,SAAS,CAAC;YAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC7D;KACF,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,sBAAsB,CAAC,KAKtC;IACC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAClG,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,8BAA8B;SACxC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS;YACxC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC7D;KACF,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,KAA6B,EAC7B,KAA6B;IAE7B,OAAO,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,oBAAoB,CAAC,KAQpC;IACC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,aAAa,KAAK,CAAC,SAAS,CAAC,WAAW,aAAa;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,gCAAgC,KAAK,CAAC,KAAK,QAAQ;SAC7D,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,4CAA4C;SACpE,CAAC;IACJ,CAAC;IACD,IACE,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE;QAChC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;QACxC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAClC,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,6DAA6D;SACvE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;YACxC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC9D;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/workflow/checkpoint-io.d.ts

@@ -1,4 +1,4 @@
-import { type DelegatedPlanDefinition } from "../../lib/spec-lint.js";
+import type { DelegatedPlanDefinition, WorkflowExecutionSource } from "../../lib/workflow-contract.js";
 export interface LoadedDelegatedPlan {
     /** Canonical absolute plan.xml path. */
     planPath: string;
@@ -30,4 +30,13 @@ export interface LoadApprovedDelegatedPlanInput {
 }
 /** Deterministic SHA-256 hex digest over provided text. */
 export declare function contentSha256(text: string): string;
+/**
+ * Convert a fully validated native package into the common immutable source
+ * identity. This is deliberately a pure mapping: native validation, lifecycle
+ * checks, and hash binding have already happened during loading, and no generic
+ * caller may invoke this to bypass them.
+ */
+export declare function nativeExecutionSource(plan: LoadedDelegatedPlan): Extract<WorkflowExecutionSource, {
+    kind: "native-package";
+}>;
 export declare function loadApprovedDelegatedPlan(input: LoadApprovedDelegatedPlanInput): Promise<LoadApprovedDelegatedPlanResult>;