@polderlabs/bizar-omp 0.4.10 → 0.6.0

package/dist/services/candidate-local.d.ts

@@ -0,0 +1,14 @@
+export interface CandidateAppLease {
+    leaseId: string;
+    candidateId: string;
+    workspaceId: string;
+    host: "127.0.0.1" | "localhost";
+    port: number;
+    owner: string;
+    expiresAt: number;
+    state: "leased" | "released";
+}
+export declare function createCandidateAppLease(input: Omit<CandidateAppLease, "state">): CandidateAppLease;
+export declare function assertCandidateEndpoint(lease: CandidateAppLease, url: string): void;
+export declare function releaseCandidateAppLease(lease: CandidateAppLease): CandidateAppLease;
+//# sourceMappingURL=candidate-local.d.ts.map

package/dist/services/candidate-local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate-local.d.ts","sourceRoot":"","sources":["../../src/services/candidate-local.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,iBAAiB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;CAAE;AAChN,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,GAAG,iBAAiB,CAGlG;AACD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAInF;AACD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,CAA4C"}

package/dist/services/candidate-local.js

@@ -0,0 +1,15 @@
+import { ContractError } from "../core/errors.js";
+export function createCandidateAppLease(input) {
+    if (!input.candidateId || !input.workspaceId || !Number.isInteger(input.port) || input.port < 1 || input.port > 65535 || input.expiresAt <= Date.now())
+        throw new ContractError("Candidate app lease is invalid");
+    return { ...input, state: "leased" };
+}
+export function assertCandidateEndpoint(lease, url) {
+    if (lease.state !== "leased" || lease.expiresAt <= Date.now())
+        throw new ContractError("Candidate app lease is expired or released");
+    const target = new URL(url);
+    if (!["127.0.0.1", "localhost"].includes(target.hostname) || Number(target.port || 80) !== lease.port)
+        throw new ContractError("Application check targeted a different endpoint", { expectedPort: lease.port, actualHost: target.hostname, actualPort: target.port });
+}
+export function releaseCandidateAppLease(lease) { return { ...lease, state: "released" }; }
+//# sourceMappingURL=candidate-local.js.map

package/dist/services/candidate-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate-local.js","sourceRoot":"","sources":["../../src/services/candidate-local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,UAAU,uBAAuB,CAAC,KAAuC;IAC7E,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAC;IAClN,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,KAAwB,EAAE,GAAW;IAC3E,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACrI,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAE,CAAC,WAAW,EAAE,WAAW,CAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,iDAAiD,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AACtR,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,KAAwB,IAAuB,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC"}

package/dist/services/candidates.d.ts

@@ -0,0 +1,21 @@
+export type CandidateOperationKind = "add" | "delete" | "modify" | "mode" | "type";
+export interface CandidateOperation {
+    path: string;
+    kind: CandidateOperationKind;
+    oldMode?: string;
+    newMode?: string;
+    status: string;
+}
+export interface CandidateRecord {
+    id: string;
+    baseCommit: string;
+    baseTree: string;
+    candidateTree: string;
+    patchDigest: string;
+    operations: CandidateOperation[];
+}
+/** Materialize a patch into a private index and return its exact result tree. */
+export declare function materializeCandidate(cwd: string, patch: string): CandidateRecord;
+/** Observe the working tree through a private index without touching the real index. */
+export declare function observeWorkingTreeTree(cwd: string): string;
+//# sourceMappingURL=candidates.d.ts.map

package/dist/services/candidates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidates.d.ts","sourceRoot":"","sources":["../../src/services/candidates.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,kBAAkB,EAAE,CAAC;CAClC;AA4DD,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,CAmBhF;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAO1D"}

package/dist/services/candidates.js

@@ -0,0 +1,100 @@
+import { execFileSync } from "node:child_process";
+import { createHash, randomUUID } from "node:crypto";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { ContractError } from "../core/errors.js";
+const git = (cwd, args, input, env) => {
+    try {
+        return execFileSync("git", args, { cwd, input, env, stdio: [input === undefined ? "ignore" : "pipe", "pipe", "pipe"] });
+    }
+    catch (error) {
+        const details = error;
+        const stderr = details.stderr?.toString().trim();
+        throw new ContractError(stderr || `git ${args[0] ?? "command"} failed`, { status: details.status });
+    }
+};
+function gitText(cwd, args, input, env) {
+    return git(cwd, args, input, env).toString("utf8").trim();
+}
+function rejectUnsafePath(path) {
+    if (!path || path.includes("\0") || path.startsWith("/") || /^[A-Za-z]:[\\/]/.test(path) || path.startsWith("\\\\")) {
+        throw new ContractError("Candidate contains an unsafe path", { path });
+    }
+    const segments = path.split(/[\\/]/);
+    if (segments.some(segment => segment === "." || segment === ".."))
+        throw new ContractError("Candidate contains a traversal path", { path });
+}
+function operationKind(status, oldMode, newMode) {
+    if (status === "A")
+        return "add";
+    if (status === "D")
+        return "delete";
+    if (oldMode !== newMode && status === "M")
+        return "mode";
+    if (oldMode.slice(0, 2) !== newMode.slice(0, 2))
+        return "type";
+    return "modify";
+}
+function parseOperations(raw) {
+    const fields = raw.toString("utf8").split("\0").filter(Boolean);
+    const operations = [];
+    if (fields.length % 2 !== 0)
+        throw new ContractError("Git returned an incomplete candidate operation stream");
+    for (let index = 0; index < fields.length; index += 2) {
+        const metadata = fields[index]?.split(/\s+/) ?? [];
+        const path = fields[index + 1] ?? "";
+        const oldMode = metadata[0] ?? "";
+        const newMode = metadata[1] ?? "";
+        const status = metadata.at(-1) ?? "";
+        rejectUnsafePath(path);
+        if (!/^[A-Z][0-9]*$/.test(status))
+            throw new ContractError("Git returned an unsupported candidate operation", { status, path });
+        operations.push({ path, kind: operationKind(status, oldMode, newMode), oldMode, newMode, status });
+    }
+    if (operations.length === 0)
+        throw new ContractError("Candidate patch does not change any files");
+    return operations;
+}
+function withTemporaryIndex(cwd, action) {
+    const directory = mkdtempSync(join(tmpdir(), "bizar-candidate-index-"));
+    const index = join(directory, `index-${randomUUID()}`);
+    try {
+        return action({ ...process.env, GIT_INDEX_FILE: index });
+    }
+    finally {
+        rmSync(directory, { recursive: true, force: true });
+    }
+}
+/** Materialize a patch into a private index and return its exact result tree. */
+export function materializeCandidate(cwd, patch) {
+    if (!patch || patch.includes("\0"))
+        throw new ContractError("Candidate patch must be nonempty and NUL-free");
+    const baseCommit = gitText(cwd, ["rev-parse", "--verify", "HEAD"]);
+    const baseTree = gitText(cwd, ["rev-parse", "--verify", "HEAD^{tree}"]);
+    const operations = withTemporaryIndex(cwd, env => {
+        git(cwd, ["read-tree", baseTree], undefined, env);
+        git(cwd, ["apply", "--cached", "--whitespace=error", "--recount", "-"], patch, env);
+        const candidateTree = gitText(cwd, ["write-tree"], undefined, env);
+        const raw = git(cwd, ["diff-tree", "--no-commit-id", "-r", "--raw", "-z", "--no-renames", baseTree, candidateTree], undefined, env);
+        return { candidateTree, operations: parseOperations(raw) };
+    });
+    return {
+        id: `candidate_${randomUUID()}`,
+        baseCommit,
+        baseTree,
+        candidateTree: operations.candidateTree,
+        patchDigest: createHash("sha256").update(patch).digest("hex"),
+        operations: operations.operations,
+    };
+}
+/** Observe the working tree through a private index without touching the real index. */
+export function observeWorkingTreeTree(cwd) {
+    const headTree = gitText(cwd, ["rev-parse", "--verify", "HEAD^{tree}"]);
+    return withTemporaryIndex(cwd, env => {
+        git(cwd, ["read-tree", headTree], undefined, env);
+        git(cwd, ["add", "--all", "--", "."], undefined, env);
+        return gitText(cwd, ["write-tree"], undefined, env);
+    });
+}
+//# sourceMappingURL=candidates.js.map

package/dist/services/candidates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidates.js","sourceRoot":"","sources":["../../src/services/candidates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAqBlD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,KAAc,EAAE,GAAuB,EAAU,EAAE;IAC3F,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAsD,CAAC;QACvE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,aAAa,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtG,CAAC;AACH,CAAC,CAAC;AAEF,SAAS,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,KAAc,EAAE,GAAuB;IACnF,OAAO,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,aAAa,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9I,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,OAAe,EAAE,OAAe;IACrE,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IACpC,IAAI,OAAO,KAAK,OAAO,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IACzD,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,uDAAuD,CAAC,CAAC;IAC9G,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,iDAAiD,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChI,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,2CAA2C,CAAC,CAAC;IAClG,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CAAI,GAAW,EAAE,MAAqC;IAC/E,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,UAAU,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,KAAa;IAC7D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,+CAA+C,CAAC,CAAC;IAC7G,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE;QAC/C,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACpF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACpI,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,aAAa,UAAU,EAAE,EAAE;QAC/B,UAAU;QACV,QAAQ;QACR,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7D,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;IACxE,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE;QACnC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/services/evidence-bundle.d.ts

@@ -0,0 +1,18 @@
+import type { AcceptanceDecision } from "../core/acceptance.js";
+import type { StateSnapshot } from "../core/types.js";
+export interface EvidenceBundle {
+    schemaVersion: 1;
+    createdAt: string;
+    runId?: string;
+    decision: AcceptanceDecision;
+    state: Pick<StateSnapshot, "revision" | "lastSequence" | "evidence" | "integrations" | "observations" | "decisions">;
+    limitations: string[];
+    manifest: Array<{
+        name: string;
+        sha256: string;
+        bytes: number;
+    }>;
+}
+export declare function createEvidenceBundle(state: StateSnapshot, decision: AcceptanceDecision): EvidenceBundle;
+export declare function writeEvidenceBundle(directory: string, bundle: EvidenceBundle): string;
+//# sourceMappingURL=evidence-bundle.d.ts.map

package/dist/services/evidence-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-bundle.d.ts","sourceRoot":"","sources":["../../src/services/evidence-bundle.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,MAAM,WAAW,cAAc;IAAG,aAAa,EAAE,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc,GAAG,cAAc,GAAG,WAAW,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAAE;AACrU,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAOvG;AACD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,CAMrF"}

package/dist/services/evidence-bundle.js

@@ -0,0 +1,21 @@
+import { mkdirSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { createHash } from "node:crypto";
+export function createEvidenceBundle(state, decision) {
+    const selected = new Set(decision.selectedEvidenceIds);
+    const evidence = state.evidence.filter(record => selected.has(record.id)).map(record => ({ ...record, stdout: record.stdout, stderr: record.stderr }));
+    const bundle = { schemaVersion: 1, createdAt: new Date().toISOString(), runId: state.run?.runId, decision, state: { revision: state.revision, lastSequence: state.lastSequence, evidence, integrations: state.integrations, observations: state.observations, decisions: state.decisions }, limitations: ["Hashes establish internal consistency, not independent attestation against a same-user writer", "Raw prompts, credentials, and native transcripts are intentionally omitted"], manifest: [] };
+    const content = JSON.stringify(bundle.state);
+    bundle.manifest.push({ name: "state.json", sha256: createHash("sha256").update(content).digest("hex"), bytes: Buffer.byteLength(content) });
+    return bundle;
+}
+export function writeEvidenceBundle(directory, bundle) {
+    const root = resolve(directory);
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    const statePath = join(root, "state.json");
+    const manifestPath = join(root, "manifest.json");
+    writeFileSync(statePath, `${JSON.stringify(bundle.state, null, 2)}\n`, { mode: 0o600 });
+    writeFileSync(manifestPath, `${JSON.stringify(bundle, null, 2)}\n`, { mode: 0o600 });
+    return manifestPath;
+}
+//# sourceMappingURL=evidence-bundle.js.map

package/dist/services/evidence-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-bundle.js","sourceRoot":"","sources":["../../src/services/evidence-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,UAAU,oBAAoB,CAAC,KAAoB,EAAE,QAA4B;IACrF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvJ,MAAM,MAAM,GAAmB,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,+FAA+F,EAAE,4EAA4E,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACzf,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5I,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,MAAsB;IAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAAC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC7F,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,aAAa,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/services/inspector.d.ts

@@ -0,0 +1,12 @@
+import { type AcceptanceDecision, type AcceptanceRequirements } from "../core/acceptance.js";
+import type { StateSnapshot } from "../core/types.js";
+export interface EvidenceInspection {
+    decision: AcceptanceDecision;
+    chain: Array<{
+        criterionId?: string;
+        checkId: string;
+        evidenceIds: string[];
+    }>;
+}
+export declare function inspectEvidence(state: StateSnapshot, requirements: AcceptanceRequirements): EvidenceInspection;
+//# sourceMappingURL=inspector.d.ts.map

package/dist/services/inspector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspector.d.ts","sourceRoot":"","sources":["../../src/services/inspector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,kBAAkB,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACjH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,MAAM,WAAW,kBAAkB;IAAG,QAAQ,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;KAAE,CAAC,CAAA;CAAE;AACrJ,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,GAAG,kBAAkB,CAG9G"}

package/dist/services/inspector.js

@@ -0,0 +1,6 @@
+import { evaluateAcceptance } from "../core/acceptance.js";
+export function inspectEvidence(state, requirements) {
+    const decision = evaluateAcceptance(state, requirements);
+    return { decision, chain: requirements.requiredChecks.map(check => { const id = typeof check === "string" ? check : check.id; return { checkId: id, evidenceIds: state.evidence.filter(record => record.checkId === id).map(record => record.id) }; }) };
+}
+//# sourceMappingURL=inspector.js.map

package/dist/services/inspector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspector.js","sourceRoot":"","sources":["../../src/services/inspector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAwD,MAAM,uBAAuB,CAAC;AAGjH,MAAM,UAAU,eAAe,CAAC,KAAoB,EAAE,YAAoC;IACxF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACzD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3P,CAAC"}

package/dist/services/lessons.d.ts

@@ -0,0 +1,14 @@
+export interface RegressionLesson {
+    id: string;
+    observedFailure: string;
+    requirement: string;
+    candidateId?: string;
+    environment: string;
+    proposedFixture: string;
+    sourceEvidenceIds: string[];
+    status: "proposed" | "approved" | "rejected" | "superseded";
+    revision: number;
+}
+export declare function lessonHash(lesson: RegressionLesson): string;
+export declare function approveLesson(lesson: RegressionLesson, authorized: boolean, expectedHash: string): RegressionLesson;
+//# sourceMappingURL=lessons.d.ts.map

package/dist/services/lessons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lessons.d.ts","sourceRoot":"","sources":["../../src/services/lessons.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;CAAE;AAC/Q,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAA8E;AAC1I,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,gBAAgB,CAInH"}

package/dist/services/lessons.js

@@ -0,0 +1,11 @@
+import { createHash } from "node:crypto";
+import { ContractError } from "../core/errors.js";
+export function lessonHash(lesson) { return createHash("sha256").update(JSON.stringify(lesson)).digest("hex"); }
+export function approveLesson(lesson, authorized, expectedHash) {
+    if (!authorized)
+        throw new ContractError("Regression lesson promotion requires independent review");
+    if (lessonHash(lesson) !== expectedHash || lesson.status !== "proposed")
+        throw new ContractError("Regression lesson changed or is not proposed");
+    return { ...lesson, status: "approved", revision: lesson.revision + 1 };
+}
+//# sourceMappingURL=lessons.js.map

package/dist/services/lessons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lessons.js","sourceRoot":"","sources":["../../src/services/lessons.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,UAAU,UAAU,CAAC,MAAwB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1I,MAAM,UAAU,aAAa,CAAC,MAAwB,EAAE,UAAmB,EAAE,YAAoB;IAC/F,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,aAAa,CAAC,yDAAyD,CAAC,CAAC;IACpG,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,aAAa,CAAC,8CAA8C,CAAC,CAAC;IACjJ,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;AAC1E,CAAC"}

package/dist/services/projection.d.ts

@@ -0,0 +1,22 @@
+import type { StateSnapshot } from "../core/types.js";
+import { inspectEvidence } from "./inspector.js";
+import type { AcceptanceRequirements } from "../core/acceptance.js";
+export interface WorkflowProjection {
+    schemaVersion: 1;
+    generatedAt: string;
+    runId?: string;
+    phase?: string;
+    objective?: string;
+    work: Array<{
+        id: string;
+        title: string;
+        lifecycle: string;
+        dependencies: string[];
+    }>;
+    acceptance: ReturnType<typeof inspectEvidence>["decision"];
+    unresolvedEffects: string[];
+    nextAction: string;
+    truncated: boolean;
+}
+export declare function projectWorkflow(state: StateSnapshot, requirements: AcceptanceRequirements, maxChars?: number): WorkflowProjection;
+//# sourceMappingURL=projection.d.ts.map

package/dist/services/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../src/services/projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,MAAM,WAAW,kBAAkB;IAAG,aAAa,EAAE,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,UAAU,CAAC,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;CAAE;AAC1V,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,EAAE,QAAQ,SAAS,GAAG,kBAAkB,CAMjI"}

package/dist/services/projection.js

@@ -0,0 +1,10 @@
+import { inspectEvidence } from "./inspector.js";
+export function projectWorkflow(state, requirements, maxChars = 16_000) {
+    const acceptance = inspectEvidence(state, requirements).decision;
+    const projection = { schemaVersion: 1, generatedAt: new Date().toISOString(), runId: state.run?.runId, phase: state.run?.phase, objective: state.run?.objective.objective, work: state.run?.workItems.map(item => ({ id: item.id, title: item.title.slice(0, 160), lifecycle: item.lifecycle, dependencies: item.dependencies })) ?? [], acceptance, unresolvedEffects: [...state.integrations.filter(item => item.outcome === "unknown-outcome").map(item => item.id), ...state.observations.filter(item => item.status === "unknown-outcome").map(item => item.dispatchId)], nextAction: acceptance.eligible ? "inspect accepted result" : acceptance.blockers[0]?.message ?? "admit a required check", truncated: false };
+    const serialized = JSON.stringify(projection);
+    if (serialized.length <= maxChars)
+        return projection;
+    return { ...projection, work: projection.work.slice(0, 8), acceptance: { ...projection.acceptance, selectedEvidenceIds: projection.acceptance.selectedEvidenceIds.slice(0, 8), supersededEvidence: projection.acceptance.supersededEvidence.slice(-8), blockers: projection.acceptance.blockers.slice(0, 8) }, truncated: true };
+}
+//# sourceMappingURL=projection.js.map

package/dist/services/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/services/projection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGjD,MAAM,UAAU,eAAe,CAAC,KAAoB,EAAE,YAAoC,EAAE,QAAQ,GAAG,MAAM;IAC3G,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC;IACjE,MAAM,UAAU,GAAuB,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,iBAAiB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjtB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,UAAU,CAAC;IACrD,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,CAAC,UAAU,EAAE,mBAAmB,EAAE,UAAU,CAAC,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnU,CAAC"}

package/dist/services/readiness.d.ts

@@ -0,0 +1,5 @@
+import type { WorkItem } from "../core/types.js";
+export declare function validateDependencies(items: WorkItem[]): void;
+export declare function dependencyReady(item: WorkItem, items: WorkItem[]): boolean;
+export declare function readyWorkItems(items: WorkItem[], capacity?: number): WorkItem[];
+//# sourceMappingURL=readiness.d.ts.map

package/dist/services/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../src/services/readiness.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAM5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAE1E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,QAAQ,SAA2B,GAAG,QAAQ,EAAE,CAMjG"}

package/dist/services/readiness.js

@@ -0,0 +1,35 @@
+import { ContractError } from "../core/errors.js";
+export function validateDependencies(items) {
+    const ids = new Set(items.map(item => item.id));
+    for (const item of items) {
+        if (item.dependencies.includes(item.id))
+            throw new ContractError("Work item cannot depend on itself", { workItemId: item.id });
+        for (const dependency of item.dependencies)
+            if (!ids.has(dependency))
+                throw new ContractError("Work item dependency is unknown", { workItemId: item.id, dependency });
+    }
+    const visiting = new Set();
+    const visited = new Set();
+    const visit = (id) => { if (visiting.has(id))
+        throw new ContractError("Work item dependency cycle detected", { workItemId: id }); if (visited.has(id))
+        return; visiting.add(id); const item = items.find(candidate => candidate.id === id); for (const dependency of item?.dependencies ?? [])
+        visit(dependency); visiting.delete(id); visited.add(id); };
+    for (const item of items)
+        visit(item.id);
+}
+export function dependencyReady(item, items) {
+    return item.dependencies.every(id => { const dependency = items.find(candidate => candidate.id === id); return dependency !== undefined && dependency.lifecycle === "accepted"; });
+}
+export function readyWorkItems(items, capacity = Number.POSITIVE_INFINITY) {
+    validateDependencies(items);
+    const ready = items.filter(item => item.lifecycle === "pending" && dependencyReady(item, items));
+    const selected = [];
+    for (const item of ready)
+        if (selected.every(other => item.scope.every(path => other.scope.every(otherPath => path !== otherPath && !path.startsWith(`${otherPath}/`) && !otherPath.startsWith(`${path}/`))))) {
+            selected.push(item);
+            if (selected.length >= capacity)
+                break;
+        }
+    return selected;
+}
+//# sourceMappingURL=readiness.js.map

package/dist/services/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../src/services/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD,MAAM,UAAU,oBAAoB,CAAC,KAAiB;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,mCAAmC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAAC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,iCAAiC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAAC,CAAC;IACpU,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAAC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IACtE,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,qCAAqC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,YAAY,IAAI,EAAE;QAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClW,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAc,EAAE,KAAiB;IAC/D,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACrL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAiB,EAAE,QAAQ,GAAG,MAAM,CAAC,iBAAiB;IACnF,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ;gBAAE,MAAM;QAAC,CAAC;IAC/Q,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/services/recipes.d.ts

@@ -0,0 +1,16 @@
+import type { CheckSpec, CriterionSpec, ObjectiveContract } from "../core/types.js";
+export interface RecipePreview {
+    schemaVersion: 1;
+    recipeId: string;
+    objective: string;
+    suggestedScope: string[];
+    criteria: CriterionSpec[];
+    checks: CheckSpec[];
+    assumptions: string[];
+    warnings: string[];
+    trusted: false;
+    recipeHash: string;
+}
+export declare function analyzeRecipe(cwd: string, objective: ObjectiveContract): RecipePreview;
+export declare function admitRecipe(preview: RecipePreview, authorized: boolean, expectedHash?: string): ObjectiveContract;
+//# sourceMappingURL=recipes.d.ts.map

package/dist/services/recipes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipes.d.ts","sourceRoot":"","sources":["../../src/services/recipes.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEpF,MAAM,WAAW,aAAa;IAAG,aAAa,EAAE,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAAC,MAAM,EAAE,SAAS,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;CAAE;AAMlP,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,GAAG,aAAa,CAatF;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,SAAqB,GAAG,iBAAiB,CAK7H"}

package/dist/services/recipes.js

@@ -0,0 +1,42 @@
+import { readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { createHash } from "node:crypto";
+import { ContractError } from "../core/errors.js";
+import { canonicalSpecHash, freezeCheckSpec } from "../core/acceptance.js";
+function digestFile(path) {
+    try {
+        return createHash("sha256").update(readFileSync(path)).digest("hex");
+    }
+    catch {
+        return undefined;
+    }
+}
+export function analyzeRecipe(cwd, objective) {
+    const root = resolve(cwd);
+    const packagePath = join(root, "package.json");
+    let packageJson = {};
+    try {
+        packageJson = JSON.parse(readFileSync(packagePath, "utf8"));
+    }
+    catch { /* non-JavaScript repositories remain advisory */ }
+    const scripts = packageJson.scripts ?? {};
+    const checks = [];
+    const known = ["test", "lint", "typecheck", "build"];
+    for (const name of known)
+        if (typeof scripts[name] === "string")
+            checks.push(freezeCheckSpec({ id: `recipe:${name}`, revision: 1, runner: "argv", executable: "npm", argumentTemplate: ["run", name], cwdRule: "candidate-workspace", inputDigests: Object.fromEntries(["package.json", "package-lock.json", "npm-shrinkwrap.json"].map(file => [file, digestFile(join(root, file))]).filter(([, digest]) => digest !== undefined)), environmentPolicy: "Bizar safe environment allowlist", limits: { timeoutMs: 10 * 60 * 1000, outputBytes: 100_000 }, expected: "zero-exit", outputPolicy: "sanitized-tail" }));
+    const criteria = objective.acceptanceCriteria.map((description, index) => ({ id: `criterion:${index + 1}`, revision: 1, description, kind: "deterministic", requiredEvidenceClasses: checks.length ? checks.map(check => check.id) : ["operator-judgment"], applicable: true }));
+    const assumptions = ["Suggested commands are not executed during analysis", "Candidate-workspace materialization and native task settlement still require qualification"];
+    const warnings = checks.length ? [] : ["No conventional package scripts were discovered; add an explicitly authorized CheckSpec or operator judgment"];
+    const unsigned = { schemaVersion: 1, recipeId: `recipe_${canonicalSpecHash({ root, objective: objective.objective }).slice(0, 16)}`, objective: objective.objective, suggestedScope: [], criteria, checks, assumptions, warnings, trusted: false };
+    return { ...unsigned, recipeHash: canonicalSpecHash(unsigned) };
+}
+export function admitRecipe(preview, authorized, expectedHash = preview.recipeHash) {
+    if (!authorized)
+        throw new ContractError("Recipe admission requires explicit authorization");
+    const { recipeHash, ...unsigned } = preview;
+    if (recipeHash !== canonicalSpecHash(unsigned) || recipeHash !== expectedHash)
+        throw new ContractError("Recipe changed since preview; refusing admission");
+    return { objective: preview.objective, nonGoals: [], constraints: [], acceptanceCriteria: preview.criteria.map(criterion => criterion.description), verificationPlan: preview.checks.map(check => check.id), stopConditions: ["A required check fails, becomes stale, or is unsupported"], userRestrictions: [], revision: 1, criteria: preview.criteria, checkSpecs: preview.checks, policyRevision: preview.recipeHash, authorizationRef: `recipe-admission:${preview.recipeId}` };
+}
+//# sourceMappingURL=recipes.js.map

package/dist/services/recipes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipes.js","sourceRoot":"","sources":["../../src/services/recipes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAc,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK3E,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QAAC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,SAA4B;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC1E,IAAI,WAAW,GAA0C,EAAE,CAAC;IAC5D,IAAI,CAAC;QAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAuB,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;IACtJ,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAU,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,UAAU,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,CAA4B,CAAC,EAAE,iBAAiB,EAAE,kCAAkC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC9mB,MAAM,QAAQ,GAAoB,SAAS,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,KAAK,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAClS,MAAM,WAAW,GAAG,CAAC,qDAAqD,EAAE,4FAA4F,CAAC,CAAC;IAC1K,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,8GAA8G,CAAC,CAAC;IACvJ,MAAM,QAAQ,GAAG,EAAE,aAAa,EAAE,CAAU,EAAE,QAAQ,EAAE,UAAU,iBAAiB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAc,EAAE,CAAC;IACrQ,OAAO,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAsB,EAAE,UAAmB,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU;IACxG,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,aAAa,CAAC,kDAAkD,CAAC,CAAC;IAC7F,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC5C,IAAI,UAAU,KAAK,iBAAiB,CAAC,QAAQ,CAAC,IAAI,UAAU,KAAK,YAAY;QAAE,MAAM,IAAI,aAAa,CAAC,kDAAkD,CAAC,CAAC;IAC3J,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,0DAA0D,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,UAAU,EAAE,gBAAgB,EAAE,oBAAoB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;AACvd,CAAC"}

package/dist/services/recovery.d.ts

@@ -0,0 +1,20 @@
+import type { RepositoryIdentity } from "../storage/repository-identity.js";
+export declare function recoveryInspection(identity: RepositoryIdentity, statePath: string): {
+    statePath: string;
+    health: {
+        valid: boolean;
+        lines: number;
+        invalidLines: number;
+    };
+    issue: import("../storage/migrations.js").JournalReadIssue | undefined;
+    validatedEntries: number;
+    resourceRegistry: string;
+    resources: {
+        resourceId: string;
+        path: string;
+        state: import("../storage/resources.js").ResourceState;
+        consumers: string[];
+        retentionPins: string[];
+    }[];
+};
+//# sourceMappingURL=recovery.d.ts.map

package/dist/services/recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../src/services/recovery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;;EAGjF"}

package/dist/services/recovery.js

@@ -0,0 +1,9 @@
+import { inspectState, readJournal } from "../storage/migrations.js";
+import { resourceRegistryPath, loadResourceRegistry } from "../storage/resources.js";
+export function recoveryInspection(identity, statePath) {
+    const health = inspectState(statePath);
+    const journal = readJournal(statePath);
+    const resources = loadResourceRegistry(identity);
+    return { statePath, health, issue: journal.issue, validatedEntries: journal.entries.length, resourceRegistry: resourceRegistryPath(identity), resources: resources.resources.map(resource => ({ resourceId: resource.resourceId, path: resource.path, state: resource.state, consumers: resource.consumers, retentionPins: resource.retentionPins })) };
+}
+//# sourceMappingURL=recovery.js.map

package/dist/services/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/services/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAErE,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACrF,MAAM,UAAU,kBAAkB,CAAC,QAA4B,EAAE,SAAiB;IAChF,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAAC,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACjI,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC;AAC1V,CAAC"}

package/dist/services/review.d.ts

@@ -0,0 +1,16 @@
+import type { ReviewSpec } from "../core/types.js";
+export interface ReviewFinding {
+    id: string;
+    severity: "low" | "medium" | "high";
+    summary: string;
+    criterionId?: string;
+    evidenceIds: string[];
+}
+export interface ReviewDecision {
+    outcome: "passed" | "blocked" | "advisory";
+    findings: ReviewFinding[];
+    repairAllowed: boolean;
+    reason: string;
+}
+export declare function evaluateReview(spec: ReviewSpec, findings: ReviewFinding[], deterministicFailure: boolean, repairAttempts: number, maxRepairAttempts: number): ReviewDecision;
+//# sourceMappingURL=review.d.ts.map

package/dist/services/review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../src/services/review.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,MAAM,WAAW,aAAa;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;CAAE;AACjJ,MAAM,WAAW,cAAc;IAAG,OAAO,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CAAE;AAClJ,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,cAAc,CAK5K"}

package/dist/services/review.js

@@ -0,0 +1,9 @@
+export function evaluateReview(spec, findings, deterministicFailure, repairAttempts, maxRepairAttempts) {
+    if (deterministicFailure)
+        return { outcome: "blocked", findings, repairAllowed: repairAttempts < maxRepairAttempts, reason: "Deterministic acceptance failures cannot be overridden by review" };
+    const blocking = findings.some(finding => spec.severityPolicy === "block-any" || (spec.severityPolicy === "block-high" && finding.severity === "high"));
+    if (blocking)
+        return { outcome: "blocked", findings, repairAllowed: repairAttempts < maxRepairAttempts, reason: "Review contains unresolved findings under the admitted severity policy" };
+    return { outcome: spec.severityPolicy === "advisory" ? "advisory" : "passed", findings, repairAllowed: false, reason: "Review criteria satisfied" };
+}
+//# sourceMappingURL=review.js.map

package/dist/services/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/services/review.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,QAAyB,EAAE,oBAA6B,EAAE,cAAsB,EAAE,iBAAyB;IAC1J,IAAI,oBAAoB;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,GAAG,iBAAiB,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;IACjM,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,YAAY,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC;IACxJ,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,GAAG,iBAAiB,EAAE,MAAM,EAAE,wEAAwE,EAAE,CAAC;IAC3L,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;AACtJ,CAAC"}

package/dist/storage/journal-recovery.d.ts

@@ -0,0 +1,11 @@
+export interface JournalRecoveryReceipt {
+    path: string;
+    backupPath: string;
+    backupDigest: string;
+    salvagedLines: number;
+    issue: "torn-tail";
+    authorized: true;
+}
+/** Salvage only a provably incomplete final record after an explicit operator authorization. */
+export declare function recoverTornJournalTail(path: string, authorized: boolean): JournalRecoveryReceipt;
+//# sourceMappingURL=journal-recovery.d.ts.map

package/dist/storage/journal-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal-recovery.d.ts","sourceRoot":"","sources":["../../src/storage/journal-recovery.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,gGAAgG;AAChG,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,sBAAsB,CAiBhG"}

package/dist/storage/journal-recovery.js

@@ -0,0 +1,33 @@
+import { closeSync, copyFileSync, existsSync, fsyncSync, openSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
+import { ContractError } from "../core/errors.js";
+import { readJournal } from "./migrations.js";
+/** Salvage only a provably incomplete final record after an explicit operator authorization. */
+export function recoverTornJournalTail(path, authorized) {
+    if (!authorized)
+        throw new ContractError("Journal recovery requires explicit authorization");
+    if (!existsSync(path))
+        throw new ContractError("Journal does not exist", { path });
+    const result = readJournal(path);
+    if (!result.issue || result.issue.kind !== "torn-tail")
+        throw new ContractError("Only a torn journal tail may be salvaged", { issue: result.issue?.kind ?? "none" });
+    const original = readFileSync(path);
+    const backupPath = `${path}.recovery-${randomUUID()}.bak`;
+    copyFileSync(path, backupPath);
+    const backupDigest = createHash("sha256").update(original).digest("hex");
+    const completeLines = original.toString("utf8").split("\n").slice(0, result.issue.line - 1).filter(Boolean);
+    const temporaryPath = `${path}.recovery-${randomUUID()}.tmp`;
+    writeFileSync(temporaryPath, completeLines.length ? `${completeLines.join("\n")}\n` : "", { mode: 0o600 });
+    const fd = openSync(temporaryPath, "r");
+    try {
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    renameSync(temporaryPath, path);
+    if (readJournal(path).issue)
+        throw new ContractError("Recovered journal did not validate after replacement", { path });
+    return { path, backupPath, backupDigest, salvagedLines: completeLines.length, issue: "torn-tail", authorized: true };
+}
+//# sourceMappingURL=journal-recovery.js.map