@prismatic-io/lux 0.0.1

package/lib/orchestrator/authored-dependencies.js

@@ -0,0 +1,146 @@
+import { lstat, readFile, realpath } from "node:fs/promises";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { parseSync, visitorKeys } from "oxc-parser";
+import { contentHash, valueHash } from "../core/index.js";
+const isIdentityStableBareSpecifier = (specifier) => specifier.startsWith("node:") ||
+    specifier === "@prismatic-io/lux" ||
+    specifier.startsWith("@prismatic-io/lux/");
+const EXCLUDED_IDENTITY_DIRECTORIES = new Set([".git", ".lux-runs", "dist", "lib", "node_modules"]);
+const authoredModuleSpecifiers = (path, source) => {
+    const parsed = parseSync(path, source, {
+        sourceType: "module",
+        astType: "ts",
+        preserveParens: true,
+        showSemanticErrors: true,
+    });
+    const parseError = parsed.errors.find((error) => error.severity === "Error");
+    if (parseError) {
+        throw new Error(`authored evaluation code failed to parse: ${path}: ${parseError.message}`);
+    }
+    const specifiers = [];
+    const visit = (node) => {
+        if (!node || typeof node !== "object" || Array.isArray(node))
+            return;
+        const record = node;
+        const type = typeof record.type === "string" ? record.type : "";
+        if (type === "ImportDeclaration" ||
+            type === "ExportNamedDeclaration" ||
+            type === "ExportAllDeclaration") {
+            const sourceNode = record.source;
+            if (sourceNode && typeof sourceNode.value === "string")
+                specifiers.push(sourceNode.value);
+        }
+        if (type === "ImportExpression") {
+            const sourceNode = record.source;
+            if (sourceNode?.type !== "Literal" || typeof sourceNode.value !== "string") {
+                throw new Error(`authored evaluation code cannot use a non-literal dynamic import: ${path}`);
+            }
+            specifiers.push(sourceNode.value);
+        }
+        for (const key of visitorKeys[type] ?? []) {
+            const child = record[key];
+            if (Array.isArray(child)) {
+                for (const item of child)
+                    visit(item);
+            }
+            else {
+                visit(child);
+            }
+        }
+    };
+    visit(parsed.program);
+    return specifiers;
+};
+const isOutsideRoot = (fromRoot) => fromRoot === ".." || fromRoot.startsWith(`..${sep}`) || isAbsolute(fromRoot);
+const assertIdentityPathContained = (absoluteRoot, absolutePath, kind, detail) => {
+    const fromRoot = relative(absoluteRoot, absolutePath);
+    if (isOutsideRoot(fromRoot)) {
+        throw new Error(`authored evaluation ${kind} escapes config root: ${detail}`);
+    }
+    if (fromRoot.split(sep).some((component) => EXCLUDED_IDENTITY_DIRECTORIES.has(component))) {
+        throw new Error(`authored evaluation ${kind} enters an identity-excluded directory: ${detail}`);
+    }
+    return fromRoot;
+};
+const resolveAuthoredImport = async (absoluteRoot, canonicalRoot, importer, specifier) => {
+    let unresolved;
+    try {
+        const importerUrl = pathToFileURL(join(absoluteRoot, importer));
+        unresolved = resolve(fileURLToPath(new URL(specifier, importerUrl)));
+    }
+    catch {
+        throw new Error(`authored evaluation code has an invalid file import: ${importer}`);
+    }
+    assertIdentityPathContained(absoluteRoot, unresolved, "import", `${importer} -> ${specifier}`);
+    let info;
+    try {
+        info = await lstat(unresolved);
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            throw new Error(`authored evaluation import cannot be resolved: ${importer} -> ${specifier}`);
+        }
+        throw error;
+    }
+    const fromRoot = assertIdentityPathContained(absoluteRoot, unresolved, "import", `${importer} -> ${specifier}`);
+    if (info.isSymbolicLink() || !info.isFile()) {
+        throw new Error(`authored evaluation import must resolve to a regular, non-symlink file: ${importer} -> ${specifier}`);
+    }
+    if ((await realpath(unresolved)) !== resolve(canonicalRoot, fromRoot)) {
+        throw new Error(`authored evaluation import path must not contain symlinks: ${importer} -> ${specifier}`);
+    }
+    return fromRoot;
+};
+/**
+ * Authored callbacks are trusted code. This walk accounts for bytes visible
+ * through static ESM without implying that an identifier blacklist is a
+ * JavaScript security sandbox.
+ */
+const authoredDependencyGraph = async (root, entryPaths) => {
+    const absoluteRoot = resolve(root);
+    const canonicalRoot = await realpath(absoluteRoot);
+    const pending = [...new Set(entryPaths)];
+    const visited = new Set();
+    while (pending.length > 0) {
+        const entry = pending.pop();
+        if (!entry)
+            continue;
+        const absolutePath = resolve(absoluteRoot, entry);
+        const path = assertIdentityPathContained(absoluteRoot, absolutePath, "entrypoint", `'${entry}'`);
+        if (visited.has(path))
+            continue;
+        const info = await lstat(absolutePath);
+        if (info.isSymbolicLink() || !info.isFile()) {
+            throw new Error(`authored evaluation entrypoint must be a regular, non-symlink file: ${path}`);
+        }
+        if ((await realpath(absolutePath)) !== resolve(canonicalRoot, path)) {
+            throw new Error(`authored evaluation entrypoint path must not contain symlinks: ${path}`);
+        }
+        visited.add(path);
+        if (!/\.[cm]?[jt]sx?$/i.test(path))
+            continue;
+        const rawSource = await readFile(absolutePath, "utf8");
+        for (const specifier of authoredModuleSpecifiers(path, rawSource)) {
+            if (!specifier.startsWith(".") && !isAbsolute(specifier) && !specifier.startsWith("file:")) {
+                if (!isIdentityStableBareSpecifier(specifier)) {
+                    throw new Error(`authored evaluation code cannot import mutable bare package '${specifier}': ${path}`);
+                }
+                continue;
+            }
+            pending.push(await resolveAuthoredImport(absoluteRoot, canonicalRoot, path, specifier));
+        }
+    }
+    return [...visited].sort();
+};
+export const assertAuthoredImportsContained = async (root, entryPaths) => {
+    await authoredDependencyGraph(root, entryPaths);
+};
+export const authoredDependencyGraphHash = async (root, entryPaths) => {
+    const absoluteRoot = resolve(root);
+    return valueHash(await Promise.all((await authoredDependencyGraph(absoluteRoot, entryPaths)).map(async (path) => ({
+        path,
+        hash: contentHash(await readFile(join(absoluteRoot, path))),
+    }))));
+};
+//# sourceMappingURL=authored-dependencies.js.map

package/lib/orchestrator/authored-dependencies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authored-dependencies.js","sourceRoot":"","sources":["../../src/orchestrator/authored-dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,6BAA6B,GAAG,CAAC,SAAiB,EAAW,EAAE,CACnE,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;IAC7B,SAAS,KAAK,mBAAmB;IACjC,SAAS,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;AAE7C,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;AAEpG,MAAM,wBAAwB,GAAG,CAAC,IAAY,EAAE,MAAc,EAAY,EAAE;IAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE;QACrC,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,IAAI;QACpB,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC7E,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO;QACrE,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,IACE,IAAI,KAAK,mBAAmB;YAC5B,IAAI,KAAK,wBAAwB;YACjC,IAAI,KAAK,sBAAsB,EAC/B,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAgD,CAAC;YAC3E,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;gBAAE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAyD,CAAC;YACpF,IAAI,UAAU,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CACb,qEAAqE,IAAI,EAAE,CAC5E,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,KAAK;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,KAAK,CAAC,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtB,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAW,EAAE,CAClD,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;AAE/E,MAAM,2BAA2B,GAAG,CAClC,YAAoB,EACpB,YAAoB,EACpB,IAA6B,EAC7B,MAAc,EACN,EAAE;IACV,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACtD,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,yBAAyB,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,2CAA2C,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,KAAK,EACjC,YAAoB,EACpB,aAAqB,EACrB,QAAgB,EAChB,SAAiB,EACA,EAAE;IACnB,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wDAAwD,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,2BAA2B,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,QAAQ,OAAO,SAAS,EAAE,CAAC,CAAC;IAE/F,IAAI,IAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,OAAO,SAAS,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,2BAA2B,CAC1C,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,GAAG,QAAQ,OAAO,SAAS,EAAE,CAC9B,CAAC;IACF,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,2EAA2E,QAAQ,OAAO,SAAS,EAAE,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,8DAA8D,QAAQ,OAAO,SAAS,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,KAAK,EACnC,IAAY,EACZ,UAA6B,EACV,EAAE;IACrB,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,2BAA2B,CACtC,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,IAAI,KAAK,GAAG,CACb,CAAC;QACF,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,uEAAuE,IAAI,EAAE,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,KAAK,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,kEAAkE,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACvD,KAAK,MAAM,SAAS,IAAI,wBAAwB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3F,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9C,MAAM,IAAI,KAAK,CACb,gEAAgE,SAAS,MAAM,IAAI,EAAE,CACtF,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,EACjD,IAAY,EACZ,UAA6B,EACd,EAAE;IACjB,MAAM,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,EAC9C,IAAY,EACZ,UAA6B,EACZ,EAAE;IACnB,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,SAAS,CACd,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,MAAM,uBAAuB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI;QACJ,IAAI,EAAE,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;KAC5D,CAAC,CAAC,CACJ,CACF,CAAC;AACJ,CAAC,CAAC"}

package/lib/orchestrator/campaign-lifecycle.d.ts

@@ -0,0 +1,105 @@
+export type CampaignLifecycleEffects<Work, Result> = {
+    prepare: () => Promise<void>;
+    execute: () => Promise<Work>;
+    complete: (work: Work) => Promise<Result>;
+    resultStatus: (result: Result) => "passed" | "failed";
+    failureStatus: (error: unknown) => "failed" | "aborted";
+    recordFailure: (status: "failed" | "aborted", error: unknown) => Promise<void>;
+    close: (primaryError: unknown | null) => Promise<void>;
+};
+type ErasedEffects = CampaignLifecycleEffects<unknown, unknown>;
+type CampaignLifecycleContext = {
+    effects: ErasedEffects;
+    work: unknown;
+    result: unknown;
+    error: unknown;
+    terminalStatus: "passed" | "failed" | "aborted" | undefined;
+};
+type CampaignLifecycleOutcome = {
+    status: "passed" | "failedResult";
+    result: unknown;
+} | {
+    status: "failed";
+    error: unknown;
+} | {
+    status: "aborted";
+    error: unknown;
+};
+declare const campaignLifecycleMachine: import("xstate").StateMachine<CampaignLifecycleContext, import("xstate").AnyEventObject, {
+    [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<unknown, ErasedEffects, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<unknown, {
+        effects: ErasedEffects;
+        work: unknown;
+    }, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<void, {
+        effects: ErasedEffects;
+        status: "failed" | "aborted";
+        error: unknown;
+    }, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<void, {
+        effects: ErasedEffects;
+        error: unknown;
+    }, import("xstate").EventObject>> | undefined;
+}, {
+    src: "closeFailure";
+    logic: import("xstate").PromiseActorLogic<void, {
+        effects: ErasedEffects;
+        error: unknown;
+    }, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "closeSuccess";
+    logic: import("xstate").PromiseActorLogic<unknown, ErasedEffects, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "complete";
+    logic: import("xstate").PromiseActorLogic<unknown, {
+        effects: ErasedEffects;
+        work: unknown;
+    }, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "execute";
+    logic: import("xstate").PromiseActorLogic<unknown, ErasedEffects, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "prepare";
+    logic: import("xstate").PromiseActorLogic<unknown, ErasedEffects, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "recordFailure";
+    logic: import("xstate").PromiseActorLogic<void, {
+        effects: ErasedEffects;
+        status: "failed" | "aborted";
+        error: unknown;
+    }, import("xstate").EventObject>;
+    id: string | undefined;
+}, {
+    type: "captureError";
+    params: import("xstate").NonReducibleUnknown;
+} | {
+    type: "captureReleaseError";
+    params: import("xstate").NonReducibleUnknown;
+} | {
+    type: "captureResult";
+    params: import("xstate").NonReducibleUnknown;
+} | {
+    type: "captureWork";
+    params: import("xstate").NonReducibleUnknown;
+}, never, never, "aborted" | "closingFailure" | "closingResult" | "executing" | "failed" | "failedResult" | "passed" | "preparing" | "recordingFailure" | "recordingSuccess", string, {
+    effects: ErasedEffects;
+}, CampaignLifecycleOutcome, import("xstate").EventObject, import("xstate").MetaObject, {
+    id: "lux-campaign";
+    states: {
+        readonly preparing: {};
+        readonly executing: {};
+        readonly recordingSuccess: {};
+        readonly recordingFailure: {};
+        readonly closingResult: {};
+        readonly closingFailure: {};
+        readonly passed: {};
+        readonly failedResult: {};
+        readonly aborted: {};
+        readonly failed: {};
+    };
+}>;
+export declare const executeCampaignLifecycle: <Work, Result>(effects: CampaignLifecycleEffects<Work, Result>) => Promise<Result>;
+export { campaignLifecycleMachine };
+//# sourceMappingURL=campaign-lifecycle.d.ts.map

package/lib/orchestrator/campaign-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-lifecycle.d.ts","sourceRoot":"","sources":["../../src/orchestrator/campaign-lifecycle.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,wBAAwB,CAAC,IAAI,EAAE,MAAM,IAAI;IACnD,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,QAAQ,GAAG,QAAQ,CAAC;IACtD,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,QAAQ,GAAG,SAAS,CAAC;IACxD,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,KAAK,EAAE,CAAC,YAAY,EAAE,OAAO,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD,CAAC;AAEF,KAAK,aAAa,GAAG,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAChE,KAAK,wBAAwB,GAAG;IAC9B,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;CAC7D,CAAC;AACF,KAAK,wBAAwB,GACzB;IAAE,MAAM,EAAE,QAAQ,GAAG,cAAc,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACtD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAK1C,QAAA,MAAM,wBAAwB;;iBASgB,aAAa;cAAQ,OAAO;;iBAKzD,aAAa;gBAAU,QAAQ,GAAG,SAAS;eAAS,OAAO;;iBAG7B,aAAa;eAAS,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAdhD,aAAa;;;;;;;;;;;;;;;EA+HvC,CAAC;AAEH,eAAO,MAAM,wBAAwB,GAAU,IAAI,EAAE,MAAM,WAChD,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,KAC9C,OAAO,CAAC,MAAM,CAehB,CAAC;AAGF,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/lib/orchestrator/campaign-lifecycle.js

@@ -0,0 +1,141 @@
+import { assign, createActor, fromPromise, setup, toPromise } from "xstate";
+const invokeEffect = (effect) => fromPromise(({ input }) => effect(input));
+const campaignLifecycleMachine = setup({
+    types: {
+        context: {},
+        input: {},
+        output: {},
+    },
+    actors: {
+        prepare: invokeEffect((effects) => effects.prepare()),
+        execute: invokeEffect((effects) => effects.execute()),
+        complete: fromPromise(({ input }) => input.effects.complete(input.work)),
+        recordFailure: fromPromise(({ input }) => input.effects.recordFailure(input.status, input.error)),
+        closeSuccess: invokeEffect((effects) => effects.close(null)),
+        closeFailure: fromPromise(({ input }) => input.effects.close(input.error)),
+    },
+    actions: {
+        captureWork: assign({
+            work: ({ event }) => ("output" in event ? event.output : undefined),
+        }),
+        captureResult: assign({
+            result: ({ event }) => ("output" in event ? event.output : undefined),
+            terminalStatus: ({ context, event }) => "output" in event ? context.effects.resultStatus(event.output) : "failed",
+        }),
+        captureError: assign({
+            error: ({ event }) => "error" in event ? event.error : new Error("campaign lifecycle failed"),
+            terminalStatus: ({ context, event }) => context.effects.failureStatus("error" in event ? event.error : new Error("campaign lifecycle failed")),
+        }),
+        captureReleaseError: assign({
+            error: ({ event }) => ("error" in event ? event.error : new Error("campaign release failed")),
+            terminalStatus: "failed",
+        }),
+    },
+}).createMachine({
+    id: "lux-campaign",
+    context: ({ input }) => ({
+        effects: input.effects,
+        work: undefined,
+        result: undefined,
+        error: undefined,
+        terminalStatus: undefined,
+    }),
+    initial: "preparing",
+    states: {
+        preparing: {
+            invoke: {
+                src: "prepare",
+                input: ({ context }) => context.effects,
+                onDone: { target: "executing" },
+                onError: { target: "recordingFailure", actions: "captureError" },
+            },
+        },
+        executing: {
+            invoke: {
+                src: "execute",
+                input: ({ context }) => context.effects,
+                onDone: { target: "recordingSuccess", actions: "captureWork" },
+                onError: { target: "recordingFailure", actions: "captureError" },
+            },
+        },
+        recordingSuccess: {
+            invoke: {
+                src: "complete",
+                input: ({ context }) => ({ effects: context.effects, work: context.work }),
+                onDone: { target: "closingResult", actions: "captureResult" },
+                onError: { target: "recordingFailure", actions: "captureError" },
+            },
+        },
+        recordingFailure: {
+            invoke: {
+                src: "recordFailure",
+                input: ({ context }) => ({
+                    effects: context.effects,
+                    status: context.terminalStatus === "aborted" ? "aborted" : "failed",
+                    error: context.error,
+                }),
+                onDone: { target: "closingFailure" },
+                // Preserve the campaign's primary error when terminal persistence fails.
+                onError: { target: "closingFailure" },
+            },
+        },
+        closingResult: {
+            invoke: {
+                src: "closeSuccess",
+                input: ({ context }) => context.effects,
+                onDone: [
+                    { guard: ({ context }) => context.terminalStatus === "passed", target: "passed" },
+                    { target: "failedResult" },
+                ],
+                onError: { target: "recordingFailure", actions: "captureReleaseError" },
+            },
+        },
+        closingFailure: {
+            invoke: {
+                src: "closeFailure",
+                input: ({ context }) => ({ effects: context.effects, error: context.error }),
+                onDone: [
+                    { guard: ({ context }) => context.terminalStatus === "aborted", target: "aborted" },
+                    { target: "failed" },
+                ],
+                onError: { target: "failed" },
+            },
+        },
+        passed: { type: "final" },
+        failedResult: { type: "final" },
+        aborted: { type: "final" },
+        failed: { type: "final" },
+    },
+    output: ({ context }) => {
+        if (context.error !== undefined) {
+            return {
+                status: context.terminalStatus === "aborted" ? "aborted" : "failed",
+                error: context.error,
+            };
+        }
+        return {
+            status: context.terminalStatus === "passed" ? "passed" : "failedResult",
+            result: context.result,
+        };
+    },
+});
+export const executeCampaignLifecycle = async (effects) => {
+    const erased = {
+        prepare: () => effects.prepare(),
+        execute: () => effects.execute(),
+        complete: (work) => effects.complete(work),
+        resultStatus: (result) => effects.resultStatus(result),
+        failureStatus: (error) => effects.failureStatus(error),
+        recordFailure: (status, error) => effects.recordFailure(status, error),
+        close: (primaryError) => effects.close(primaryError),
+    };
+    const actor = createActor(campaignLifecycleMachine, { input: { effects: erased } });
+    actor.start();
+    const outcome = await toPromise(actor);
+    if (outcome.status === "failed" || outcome.status === "aborted")
+        throw outcome.error;
+    return outcome.result;
+};
+// Internal export for transition-level tests.
+export { campaignLifecycleMachine };
+//# sourceMappingURL=campaign-lifecycle.js.map

package/lib/orchestrator/campaign-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-lifecycle.js","sourceRoot":"","sources":["../../src/orchestrator/campaign-lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAyB5E,MAAM,YAAY,GAAG,CAAC,MAAoD,EAAE,EAAE,CAC5E,WAAW,CAAyB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAEpE,MAAM,wBAAwB,GAAG,KAAK,CAAC;IACrC,KAAK,EAAE;QACL,OAAO,EAAE,EAA8B;QACvC,KAAK,EAAE,EAAgC;QACvC,MAAM,EAAE,EAA8B;KACvC;IACD,MAAM,EAAE;QACN,OAAO,EAAE,YAAY,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrD,OAAO,EAAE,YAAY,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrD,QAAQ,EAAE,WAAW,CAAqD,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CACtF,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CACnC;QACD,aAAa,EAAE,WAAW,CAGxB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACxE,YAAY,EAAE,YAAY,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5D,YAAY,EAAE,WAAW,CAAmD,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CACxF,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CACjC;KACF;IACD,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,CAAC;YAClB,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SACpE,CAAC;QACF,aAAa,EAAE,MAAM,CAAC;YACpB,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CACrC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ;SAC5E,CAAC;QACF,YAAY,EAAE,MAAM,CAAC;YACnB,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CACnB,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC;YACzE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CACrC,OAAO,CAAC,OAAO,CAAC,aAAa,CAC3B,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CACxE;SACJ,CAAC;QACF,mBAAmB,EAAE,MAAM,CAAC;YAC1B,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7F,cAAc,EAAE,QAAQ;SACzB,CAAC;KACH;CACF,CAAC,CAAC,aAAa,CAAC;IACf,EAAE,EAAE,cAAc;IAClB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,SAAS;QAChB,cAAc,EAAE,SAAS;KAC1B,CAAC;IACF,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE;QACN,SAAS,EAAE;YACT,MAAM,EAAE;gBACN,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO;gBACvC,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;gBAC/B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,cAAc,EAAE;aACjE;SACF;QACD,SAAS,EAAE;YACT,MAAM,EAAE;gBACN,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO;gBACvC,MAAM,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,aAAa,EAAE;gBAC9D,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,cAAc,EAAE;aACjE;SACF;QACD,gBAAgB,EAAE;YAChB,MAAM,EAAE;gBACN,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC1E,MAAM,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE;gBAC7D,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,cAAc,EAAE;aACjE;SACF;QACD,gBAAgB,EAAE;YAChB,MAAM,EAAE;gBACN,GAAG,EAAE,eAAe;gBACpB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;oBACvB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;oBACnE,KAAK,EAAE,OAAO,CAAC,KAAK;iBACrB,CAAC;gBACF,MAAM,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;gBACpC,yEAAyE;gBACzE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;aACtC;SACF;QACD,aAAa,EAAE;YACb,MAAM,EAAE;gBACN,GAAG,EAAE,cAAc;gBACnB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO;gBACvC,MAAM,EAAE;oBACN,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,KAAK,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;oBACjF,EAAE,MAAM,EAAE,cAAc,EAAE;iBAC3B;gBACD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE;aACxE;SACF;QACD,cAAc,EAAE;YACd,MAAM,EAAE;gBACN,GAAG,EAAE,cAAc;gBACnB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC5E,MAAM,EAAE;oBACN,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;oBACnF,EAAE,MAAM,EAAE,QAAQ,EAAE;iBACrB;gBACD,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;aAC9B;SACF;QACD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/B,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KAC1B;IACD,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QACtB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO;gBACL,MAAM,EAAE,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBACnE,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc;YACvE,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,OAA+C,EAC9B,EAAE;IACnB,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;QAChC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;QAChC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAY,CAAC;QAClD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,MAAgB,CAAC;QAChE,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;QACtD,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC;QACtE,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;KACrD,CAAC;IACF,MAAM,KAAK,GAAG,WAAW,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACpF,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACrF,OAAO,OAAO,CAAC,MAAgB,CAAC;AAClC,CAAC,CAAC;AAEF,8CAA8C;AAC9C,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/lib/orchestrator/candidate-integrity.d.ts

@@ -0,0 +1,4 @@
+import { type Candidate } from "../core/index.js";
+export declare const candidateEnvelopeHash: (candidate: Candidate) => string;
+export declare const assertCandidateEnvelopeIntegrity: (candidate: unknown) => Candidate;
+//# sourceMappingURL=candidate-integrity.d.ts.map

package/lib/orchestrator/candidate-integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate-integrity.d.ts","sourceRoot":"","sources":["../../src/orchestrator/candidate-integrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAA8B,MAAM,kBAAkB,CAAC;AAE9E,eAAO,MAAM,qBAAqB,cAAe,SAAS,KAAG,MAA8B,CAAC;AAE5F,eAAO,MAAM,gCAAgC,cAAe,OAAO,KAAG,SAarE,CAAC"}

package/lib/orchestrator/candidate-integrity.js

@@ -0,0 +1,14 @@
+import { CandidateSchema, valueHash } from "../core/index.js";
+export const candidateEnvelopeHash = (candidate) => valueHash(candidate);
+export const assertCandidateEnvelopeIntegrity = (candidate) => {
+    const verified = CandidateSchema.parse(candidate);
+    if (valueHash(verified.components) !== verified.candidateHash) {
+        throw new Error("candidate contents do not match candidateHash");
+    }
+    const sourceBytes = Object.values(verified.components).reduce((total, content) => total + Buffer.byteLength(content), 0);
+    if (sourceBytes !== verified.sourceBytes) {
+        throw new Error("candidate contents do not match sourceBytes");
+    }
+    return verified;
+};
+//# sourceMappingURL=candidate-integrity.js.map

package/lib/orchestrator/candidate-integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate-integrity.js","sourceRoot":"","sources":["../../src/orchestrator/candidate-integrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,eAAe,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAU,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,SAAkB,EAAa,EAAE;IAChF,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,CAC3D,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EACtD,CAAC,CACF,CAAC;IACF,IAAI,WAAW,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC"}

package/lib/orchestrator/candidates.d.ts

@@ -0,0 +1,13 @@
+import { type Candidate, type CandidateProposal, type FileSetSubject } from "../core/index.js";
+export declare const hashSubjectTree: (subjectRoot: string, subject: Pick<FileSetSubject, "exclude">) => Promise<string>;
+export declare const captureSeedCandidate: (subjectRoot: string, subject: FileSetSubject, now?: Date) => Promise<Candidate>;
+export declare const createCandidate: (parent: Candidate, proposal: CandidateProposal, subject: FileSetSubject, options: {
+    id?: string;
+    proposer: string;
+    now?: Date;
+}) => Candidate;
+export declare const materializeCandidate: (sourceRoot: string, subject: FileSetSubject, candidate: Candidate) => Promise<string>;
+export declare const validateCandidate: (materializedRoot: string, subject: FileSetSubject, signal?: AbortSignal, verifyExecutionIdentity?: () => Promise<void>) => Promise<void>;
+export declare const assertValidationArgumentsBound: (subjectRoot: string, args: readonly string[]) => void;
+export declare const applyCandidate: (subjectRoot: string, subject: FileSetSubject, candidate: Candidate) => Promise<void>;
+//# sourceMappingURL=candidates.d.ts.map

package/lib/orchestrator/candidates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidates.d.ts","sourceRoot":"","sources":["../../src/orchestrator/candidates.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,KAAK,SAAS,EACd,KAAK,iBAAiB,EAGtB,KAAK,cAAc,EAIpB,MAAM,kBAAkB,CAAC;AA+B1B,eAAO,MAAM,eAAe,gBACb,MAAM,WACV,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,KACvC,OAAO,CAAC,MAAM,CAmChB,CAAC;AAEF,eAAO,MAAM,oBAAoB,gBAClB,MAAM,WACV,cAAc,QAClB,IAAI,KACR,OAAO,CAAC,SAAS,CAmCnB,CAAC;AAEF,eAAO,MAAM,eAAe,WAClB,SAAS,YACP,iBAAiB,WAClB,cAAc,WACd;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,KACrD,SAmCF,CAAC;AAQF,eAAO,MAAM,oBAAoB,eACnB,MAAM,WACT,cAAc,aACZ,SAAS,KACnB,OAAO,CAAC,MAAM,CAuBhB,CAAC;AAEF,eAAO,MAAM,iBAAiB,qBACV,MAAM,WACf,cAAc,WACd,WAAW,4BACM,MAAM,OAAO,CAAC,IAAI,CAAC,KAC5C,OAAO,CAAC,IAAI,CAkDd,CAAC;AAcF,eAAO,MAAM,8BAA8B,gBAC5B,MAAM,QACb,SAAS,MAAM,EAAE,KACtB,IA6BF,CAAC;AAiRF,eAAO,MAAM,cAAc,gBACZ,MAAM,WACV,cAAc,aACZ,SAAS,KACnB,OAAO,CAAC,IAAI,CAkGd,CAAC"}