@rpamis/comet 0.3.9 → 0.4.0-beta.10

package/dist/domains/comet-native/native-contract-files.js

@@ -0,0 +1,66 @@
+import { DEFAULT_NATIVE_ARTIFACT_MAX_BYTES, readNativeBoundedTextFile, } from './native-bounded-file.js';
+import { buildNativeContractSnapshot, } from './native-contract.js';
+export const NATIVE_CONTRACT_FILE_LIMITS = {
+    maxSpecs: 64,
+    maxFileBytes: DEFAULT_NATIVE_ARTIFACT_MAX_BYTES,
+    maxTotalBytes: 4 * 1024 * 1024,
+};
+/**
+ * Read the bounded change artifacts that form the user-visible contract.
+ *
+ * The collector returns hashes and derived acceptance only; source contents do not escape this
+ * seam. Canonical specs are represented by the frozen base hashes already in each spec change.
+ */
+export async function collectNativeContractFiles(options) {
+    if (options.specChanges.length > NATIVE_CONTRACT_FILE_LIMITS.maxSpecs) {
+        throw new Error('Native contract exceeds its spec-count budget');
+    }
+    const brief = await readNativeBoundedTextFile({
+        root: options.changeDir,
+        ref: options.briefRef,
+        maxBytes: NATIVE_CONTRACT_FILE_LIMITS.maxFileBytes,
+    });
+    let totalBytes = brief.size;
+    const specs = [];
+    for (const change of options.specChanges) {
+        if (change.operation === 'remove') {
+            specs.push({
+                capability: change.capability,
+                operation: 'remove',
+                source: null,
+                baseHash: change.base_hash,
+                markdown: null,
+            });
+            continue;
+        }
+        if (!change.source) {
+            throw new Error(`Native contract ${change.capability} has no proposed spec source`);
+        }
+        const source = await readNativeBoundedTextFile({
+            root: options.changeDir,
+            ref: change.source,
+            maxBytes: NATIVE_CONTRACT_FILE_LIMITS.maxFileBytes,
+        });
+        totalBytes += source.size;
+        if (totalBytes > NATIVE_CONTRACT_FILE_LIMITS.maxTotalBytes) {
+            throw new Error('Native contract exceeds its total byte budget');
+        }
+        specs.push({
+            capability: change.capability,
+            operation: change.operation,
+            source: source.ref,
+            baseHash: change.base_hash,
+            markdown: source.text,
+        });
+    }
+    return {
+        contract: buildNativeContractSnapshot({
+            briefSource: brief.ref,
+            briefMarkdown: brief.text,
+            specs,
+        }),
+        sourceCount: specs.filter((spec) => spec.source !== null).length + 1,
+        totalBytes,
+    };
+}
+//# sourceMappingURL=native-contract-files.js.map

package/dist/domains/comet-native/native-contract-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-contract-files.js","sourceRoot":"","sources":["../../../domains/comet-native/native-contract-files.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,2BAA2B,GAG5B,MAAM,sBAAsB,CAAC;AAG9B,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,iCAAiC;IAC/C,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;CACtB,CAAC;AAQX;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAIhD;IACC,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,2BAA2B,CAAC,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC;QAC5C,IAAI,EAAE,OAAO,CAAC,SAAS;QACvB,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,QAAQ,EAAE,2BAA2B,CAAC,YAAY;KACnD,CAAC,CAAC;IACH,IAAI,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC;IAC5B,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC;gBACT,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,UAAU,8BAA8B,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC;YAC7C,IAAI,EAAE,OAAO,CAAC,SAAS;YACvB,GAAG,EAAE,MAAM,CAAC,MAAM;YAClB,QAAQ,EAAE,2BAA2B,CAAC,YAAY;SACnD,CAAC,CAAC;QACH,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC;QAC1B,IAAI,UAAU,GAAG,2BAA2B,CAAC,aAAa,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,GAAG;YAClB,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,2BAA2B,CAAC;YACpC,WAAW,EAAE,KAAK,CAAC,GAAG;YACtB,aAAa,EAAE,KAAK,CAAC,IAAI;YACzB,KAAK;SACN,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QACpE,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/domains/comet-native/native-contract.d.ts

@@ -0,0 +1,41 @@
+import { type NativeAcceptanceCriterion } from './native-acceptance.js';
+export declare const NATIVE_CONTRACT_LIMITS: {
+    readonly maxAcceptanceCriteria: 1024;
+};
+export interface NativeContractSpecInput {
+    capability: string;
+    operation: 'create' | 'replace' | 'remove';
+    source: string | null;
+    baseHash: string | null;
+    markdown: string | null;
+}
+export interface NativeContractSpecSnapshot {
+    capability: string;
+    operation: NativeContractSpecInput['operation'];
+    source: string | null;
+    baseHash: string | null;
+    contentHash: string | null;
+}
+export interface NativeContractSnapshot {
+    schema: 'comet.native.contract.v1';
+    brief: {
+        source: string;
+        contentHash: string;
+    };
+    specs: NativeContractSpecSnapshot[];
+    acceptance: NativeAcceptanceCriterion[];
+    acceptanceHash: string;
+    contractHash: string;
+}
+/**
+ * Build a deterministic contract projection from already bounded artifact contents.
+ *
+ * Filesystem reads deliberately stay outside this pure function so callers can apply
+ * the Native path, size, symlink, and revision boundaries appropriate to their seam.
+ */
+export declare function buildNativeContractSnapshot(input: {
+    briefSource?: string;
+    briefMarkdown: string;
+    specs: readonly NativeContractSpecInput[];
+}): NativeContractSnapshot;
+//# sourceMappingURL=native-contract.d.ts.map

package/dist/domains/comet-native/native-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-contract.d.ts","sourceRoot":"","sources":["../../../domains/comet-native/native-contract.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAOhC,eAAO,MAAM,sBAAsB;;CAEzB,CAAC;AAEX,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,0BAA0B,CAAC;IACnC,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,KAAK,EAAE,0BAA0B,EAAE,CAAC;IACpC,UAAU,EAAE,yBAAyB,EAAE,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AA4FD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAC3C,GAAG,sBAAsB,CAmEzB"}

package/dist/domains/comet-native/native-contract.js

@@ -0,0 +1,142 @@
+import path from 'node:path';
+import { deriveBriefAcceptanceCriteria, deriveSpecAcceptanceCriteria, deriveSpecMandatoryAcceptanceCriteria, NATIVE_ACCEPTANCE_LIMITS, } from './native-acceptance.js';
+import { canonicalHash } from './native-canonical-hash.js';
+const CONTRACT_HASH_TAG = 'comet.native.contract.v1';
+const ACCEPTANCE_SET_HASH_TAG = 'comet.native.acceptance-set.v1';
+const HASH_PATTERN = /^[a-f0-9]{64}$/u;
+export const NATIVE_CONTRACT_LIMITS = {
+    maxAcceptanceCriteria: NATIVE_ACCEPTANCE_LIMITS.maxCriteria,
+};
+function portableRef(value, label) {
+    const normalized = path.posix.normalize(value);
+    if (value.length === 0 ||
+        value !== value.trim() ||
+        value.includes('\\') ||
+        Array.from(value).some((character) => {
+            const code = character.codePointAt(0) ?? 0;
+            return code <= 0x1f || code === 0x7f;
+        }) ||
+        path.posix.isAbsolute(normalized) ||
+        /^(?:[A-Za-z]:|~)/u.test(value) ||
+        value.split('/').includes('..') ||
+        normalized !== value ||
+        normalized === '.' ||
+        value.endsWith('/')) {
+        throw new Error(`${label} must be a normalized project-relative ref`);
+    }
+    return value;
+}
+function contentHash(value) {
+    return canonicalHash('comet.native.contract-content.v1', value.replace(/\r\n?/gu, '\n'));
+}
+function normalizeSpec(input) {
+    if (!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u.test(input.capability)) {
+        throw new Error(`Invalid Native contract capability: ${input.capability}`);
+    }
+    if (input.operation !== 'create' &&
+        input.operation !== 'replace' &&
+        input.operation !== 'remove') {
+        throw new Error(`Invalid Native contract operation for ${input.capability}`);
+    }
+    if (input.operation === 'remove') {
+        if (input.source !== null || input.markdown !== null || !input.baseHash?.match(HASH_PATTERN)) {
+            throw new Error(`Remove contract ${input.capability} requires only a base hash`);
+        }
+        return {
+            snapshot: {
+                capability: input.capability,
+                operation: 'remove',
+                source: null,
+                baseHash: input.baseHash,
+                contentHash: null,
+            },
+            markdown: null,
+        };
+    }
+    if (input.source === null || input.markdown === null) {
+        throw new Error(`${input.operation} contract ${input.capability} requires source content`);
+    }
+    if (input.operation === 'create' && input.baseHash !== null) {
+        throw new Error(`Create contract ${input.capability} requires a null base hash`);
+    }
+    if (input.operation === 'replace' && !input.baseHash?.match(HASH_PATTERN)) {
+        throw new Error(`Replace contract ${input.capability} requires a base hash`);
+    }
+    const source = portableRef(input.source, `Contract source for ${input.capability}`);
+    return {
+        snapshot: {
+            capability: input.capability,
+            operation: input.operation,
+            source,
+            baseHash: input.baseHash,
+            contentHash: contentHash(input.markdown),
+        },
+        markdown: input.markdown,
+    };
+}
+function compareCriteria(left, right) {
+    return compareText(left.id, right.id);
+}
+function compareText(left, right) {
+    if (left < right)
+        return -1;
+    if (left > right)
+        return 1;
+    return 0;
+}
+/**
+ * Build a deterministic contract projection from already bounded artifact contents.
+ *
+ * Filesystem reads deliberately stay outside this pure function so callers can apply
+ * the Native path, size, symlink, and revision boundaries appropriate to their seam.
+ */
+export function buildNativeContractSnapshot(input) {
+    const briefSource = portableRef(input.briefSource ?? 'brief.md', 'Native brief source');
+    const specs = input.specs
+        .map(normalizeSpec)
+        .sort((left, right) => compareText(left.snapshot.capability, right.snapshot.capability));
+    const capabilities = specs.map(({ snapshot }) => snapshot.capability);
+    if (new Set(capabilities).size !== capabilities.length) {
+        throw new Error('Native contract contains duplicate capabilities');
+    }
+    const sources = [
+        briefSource,
+        ...specs.flatMap(({ snapshot }) => (snapshot.source === null ? [] : [snapshot.source])),
+    ];
+    if (new Set(sources).size !== sources.length) {
+        throw new Error('Native contract contains duplicate artifact sources');
+    }
+    const acceptance = deriveBriefAcceptanceCriteria(input.briefMarkdown, briefSource, NATIVE_CONTRACT_LIMITS.maxAcceptanceCriteria);
+    for (const { snapshot, markdown } of specs) {
+        if (markdown === null || snapshot.source === null)
+            continue;
+        acceptance.push(...deriveSpecAcceptanceCriteria(markdown, snapshot.source, NATIVE_CONTRACT_LIMITS.maxAcceptanceCriteria - acceptance.length));
+        acceptance.push(...deriveSpecMandatoryAcceptanceCriteria(markdown, snapshot.source, NATIVE_CONTRACT_LIMITS.maxAcceptanceCriteria - acceptance.length));
+    }
+    acceptance.sort(compareCriteria);
+    if (acceptance.length === 0) {
+        throw new Error('Native contract has no structured acceptance criteria');
+    }
+    if (acceptance.length > NATIVE_CONTRACT_LIMITS.maxAcceptanceCriteria) {
+        throw new Error(`Native contract exceeds its ${NATIVE_CONTRACT_LIMITS.maxAcceptanceCriteria}-criterion acceptance budget`);
+    }
+    const acceptanceIds = acceptance.map(({ id }) => id);
+    if (new Set(acceptanceIds).size !== acceptanceIds.length) {
+        throw new Error('Native contract contains duplicate acceptance criteria');
+    }
+    const brief = { source: briefSource, contentHash: contentHash(input.briefMarkdown) };
+    const specSnapshots = specs.map(({ snapshot }) => snapshot);
+    const acceptanceHash = canonicalHash(ACCEPTANCE_SET_HASH_TAG, acceptance);
+    const contractContent = {
+        schema: 'comet.native.contract.v1',
+        brief,
+        specs: specSnapshots,
+        acceptance,
+        acceptanceHash,
+    };
+    return {
+        ...contractContent,
+        contractHash: canonicalHash(CONTRACT_HASH_TAG, contractContent),
+    };
+}
+//# sourceMappingURL=native-contract.js.map

package/dist/domains/comet-native/native-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-contract.js","sourceRoot":"","sources":["../../../domains/comet-native/native-contract.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,qCAAqC,EACrC,wBAAwB,GAEzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AACrD,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;AACjE,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,qBAAqB,EAAE,wBAAwB,CAAC,WAAW;CACnD,CAAC;AA8BX,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;QACvC,CAAC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QACjC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/B,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,GAAG;QAClB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,aAAa,CAAC,kCAAkC,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B;IAInD,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IACE,KAAK,CAAC,SAAS,KAAK,QAAQ;QAC5B,KAAK,CAAC,SAAS,KAAK,SAAS;QAC7B,KAAK,CAAC,SAAS,KAAK,QAAQ,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,CAAC,UAAU,4BAA4B,CAAC,CAAC;QACnF,CAAC;QACD,OAAO;YACL,QAAQ,EAAE;gBACR,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,IAAI;aAClB;YACD,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,SAAS,aAAa,KAAK,CAAC,UAAU,0BAA0B,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,CAAC,UAAU,4BAA4B,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,UAAU,uBAAuB,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACpF,OAAO;QACL,QAAQ,EAAE;YACR,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM;YACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;SACzC;QACD,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,IAA+B,EAC/B,KAAgC;IAEhC,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAI3C;IACC,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,IAAI,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK;SACtB,GAAG,CAAC,aAAa,CAAC;SAClB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAG;QACd,WAAW;QACX,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;KACxF,CAAC;IACF,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,UAAU,GAAG,6BAA6B,CAC9C,KAAK,CAAC,aAAa,EACnB,WAAW,EACX,sBAAsB,CAAC,qBAAqB,CAC7C,CAAC;IACF,KAAK,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC;QAC3C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;YAAE,SAAS;QAC5D,UAAU,CAAC,IAAI,CACb,GAAG,4BAA4B,CAC7B,QAAQ,EACR,QAAQ,CAAC,MAAM,EACf,sBAAsB,CAAC,qBAAqB,GAAG,UAAU,CAAC,MAAM,CACjE,CACF,CAAC;QACF,UAAU,CAAC,IAAI,CACb,GAAG,qCAAqC,CACtC,QAAQ,EACR,QAAQ,CAAC,MAAM,EACf,sBAAsB,CAAC,qBAAqB,GAAG,UAAU,CAAC,MAAM,CACjE,CACF,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,sBAAsB,CAAC,qBAAqB,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,+BAA+B,sBAAsB,CAAC,qBAAqB,8BAA8B,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACrD,IAAI,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;IACrF,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,aAAa,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAG;QACtB,MAAM,EAAE,0BAAmC;QAC3C,KAAK;QACL,KAAK,EAAE,aAAa;QACpB,UAAU;QACV,cAAc;KACf,CAAC;IACF,OAAO;QACL,GAAG,eAAe;QAClB,YAAY,EAAE,aAAa,CAAC,iBAAiB,EAAE,eAAe,CAAC;KAChE,CAAC;AACJ,CAAC"}

package/dist/domains/comet-native/native-controller-trust.d.ts

@@ -0,0 +1,22 @@
+import { type NativeReviewIdentity } from './native-review-identity.js';
+export declare const NATIVE_CONTROLLER_TRUST_STORE_SCHEMA: "comet.native.controller-trust-store.v1";
+export declare const NATIVE_CONTROLLER_TRUST_STORE_TEST_ENV: "COMET_NATIVE_CONTROLLER_TRUST_STORE_TEST_PATH";
+export interface NativeControllerTrustProject {
+    projectRootHash: string;
+    controllerIdentity: NativeReviewIdentity;
+    legacyChanges: string[];
+}
+export interface NativeControllerTrustStore {
+    schema: typeof NATIVE_CONTROLLER_TRUST_STORE_SCHEMA;
+    projects: NativeControllerTrustProject[];
+}
+export declare function nativeControllerProjectRootHash(projectRoot: string): Promise<string>;
+export declare function buildNativeControllerTrustStore(projects: readonly NativeControllerTrustProject[]): NativeControllerTrustStore;
+export declare function parseNativeControllerTrustStore(value: unknown): NativeControllerTrustStore;
+export declare function nativeControllerTrustStorePath(): string;
+/**
+ * Read the controller-owned trust root outside the project. No Native command creates or mutates
+ * this store; the host/controller provisions it before a signed workflow starts.
+ */
+export declare function readNativeControllerTrustProject(projectRoot: string): Promise<NativeControllerTrustProject | null>;
+//# sourceMappingURL=native-controller-trust.d.ts.map

package/dist/domains/comet-native/native-controller-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-controller-trust.d.ts","sourceRoot":"","sources":["../../../domains/comet-native/native-controller-trust.ts"],"names":[],"mappings":"AAQA,OAAO,EAA6B,KAAK,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnG,eAAO,MAAM,oCAAoC,EAC/C,wCAAiD,CAAC;AACpD,eAAO,MAAM,sCAAsC,EACjD,+CAAwD,CAAC;AAM3D,MAAM,WAAW,4BAA4B;IAC3C,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,OAAO,oCAAoC,CAAC;IACpD,QAAQ,EAAE,4BAA4B,EAAE,CAAC;CAC1C;AA8BD,wBAAsB,+BAA+B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAK1F;AAED,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,SAAS,4BAA4B,EAAE,GAChD,0BAA0B,CAO5B;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CAwD1F;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAQvD;AAED;;;GAGG;AACH,wBAAsB,gCAAgC,CACpD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAmD9C"}

package/dist/domains/comet-native/native-controller-trust.js

@@ -0,0 +1,153 @@
+import { promises as fs } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { readFileRaceSafe } from '../../platform/fs/race-safe-read.js';
+import { assertTrustedReadonlyFile } from '../../platform/fs/trusted-readonly-file.js';
+import { canonicalHash } from './native-canonical-hash.js';
+import { parseNativeReviewIdentity } from './native-review-identity.js';
+export const NATIVE_CONTROLLER_TRUST_STORE_SCHEMA = 'comet.native.controller-trust-store.v1';
+export const NATIVE_CONTROLLER_TRUST_STORE_TEST_ENV = 'COMET_NATIVE_CONTROLLER_TRUST_STORE_TEST_PATH';
+const PROJECT_ROOT_HASH_TAG = 'comet.native.controller-project-root.v1';
+const MAX_STORE_BYTES = 256 * 1024;
+const HASH_PATTERN = /^[a-f0-9]{64}$/u;
+const CHANGE_NAME_PATTERN = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
+function record(value, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+}
+function exactKeys(value, keys, label) {
+    const actual = Object.keys(value).sort();
+    const expected = [...keys].sort();
+    if (JSON.stringify(actual) !== JSON.stringify(expected)) {
+        throw new Error(`${label} fields are invalid`);
+    }
+}
+function isInside(parent, target) {
+    const relative = path.relative(parent, target);
+    return (relative === '' ||
+        (!path.isAbsolute(relative) && relative !== '..' && !relative.startsWith(`..${path.sep}`)));
+}
+function normalizedPhysicalRoot(root) {
+    const normalized = path.normalize(root).replaceAll('\\', '/');
+    return process.platform === 'win32' ? normalized.toLowerCase() : normalized;
+}
+export async function nativeControllerProjectRootHash(projectRoot) {
+    return canonicalHash(PROJECT_ROOT_HASH_TAG, normalizedPhysicalRoot(await fs.realpath(projectRoot)));
+}
+export function buildNativeControllerTrustStore(projects) {
+    return parseNativeControllerTrustStore({
+        schema: NATIVE_CONTROLLER_TRUST_STORE_SCHEMA,
+        projects: [...projects].sort((left, right) => left.projectRootHash.localeCompare(right.projectRootHash, 'en')),
+    });
+}
+export function parseNativeControllerTrustStore(value) {
+    const root = record(value, 'Native controller trust store');
+    exactKeys(root, ['schema', 'projects'], 'Native controller trust store');
+    if (root.schema !== NATIVE_CONTROLLER_TRUST_STORE_SCHEMA ||
+        !Array.isArray(root.projects) ||
+        root.projects.length === 0 ||
+        root.projects.length > 1_024) {
+        throw new Error('Native controller trust store is invalid');
+    }
+    const projects = root.projects.map((value, index) => {
+        const project = record(value, `Native controller trust project ${index}`);
+        exactKeys(project, ['projectRootHash', 'controllerIdentity', 'legacyChanges'], `Native controller trust project ${index}`);
+        if (typeof project.projectRootHash !== 'string' ||
+            !HASH_PATTERN.test(project.projectRootHash) ||
+            !Array.isArray(project.legacyChanges)) {
+            throw new Error(`Native controller trust project ${index} is invalid`);
+        }
+        const legacyChanges = project.legacyChanges.map((change) => {
+            if (typeof change !== 'string' || !CHANGE_NAME_PATTERN.test(change)) {
+                throw new Error(`Native controller trust project ${index} legacy change is invalid`);
+            }
+            return change;
+        });
+        if (JSON.stringify(legacyChanges) !==
+            JSON.stringify([...new Set(legacyChanges)].sort((left, right) => left.localeCompare(right, 'en')))) {
+            throw new Error(`Native controller trust project ${index} legacy changes must be sorted`);
+        }
+        return {
+            projectRootHash: project.projectRootHash,
+            controllerIdentity: parseNativeReviewIdentity(project.controllerIdentity),
+            legacyChanges,
+        };
+    });
+    if (JSON.stringify(projects.map((project) => project.projectRootHash)) !==
+        JSON.stringify([...new Set(projects.map((project) => project.projectRootHash))].sort((left, right) => left.localeCompare(right, 'en')))) {
+        throw new Error('Native controller trust projects must be sorted and unique');
+    }
+    return { schema: NATIVE_CONTROLLER_TRUST_STORE_SCHEMA, projects };
+}
+export function nativeControllerTrustStorePath() {
+    const testPath = process.env.NODE_ENV === 'test'
+        ? process.env[NATIVE_CONTROLLER_TRUST_STORE_TEST_ENV]
+        : undefined;
+    return path.resolve(testPath ?? path.join(os.homedir(), '.comet', 'native-controller-trust.json'));
+}
+/**
+ * Read the controller-owned trust root outside the project. No Native command creates or mutates
+ * this store; the host/controller provisions it before a signed workflow starts.
+ */
+export async function readNativeControllerTrustProject(projectRoot) {
+    const storePath = nativeControllerTrustStorePath();
+    let physicalProjectRoot;
+    try {
+        physicalProjectRoot = await fs.realpath(projectRoot);
+    }
+    catch (error) {
+        throw new Error('Native project root is unavailable for controller trust', { cause: error });
+    }
+    let trustedIdentity;
+    try {
+        trustedIdentity = await assertTrustedReadonlyFile({ file: storePath });
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw new Error('Native controller trust store is not host-isolated read-only', {
+            cause: error,
+        });
+    }
+    let result;
+    try {
+        result = await readFileRaceSafe(storePath, MAX_STORE_BYTES, {
+            label: 'Native controller trust store',
+            verify: (_checkpoint, context) => {
+                if (isInside(physicalProjectRoot, context.realPath)) {
+                    throw new Error('Native controller trust store must resolve outside the project');
+                }
+            },
+        });
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+    try {
+        await assertTrustedReadonlyFile({
+            file: storePath,
+            previous: trustedIdentity,
+        });
+    }
+    catch (error) {
+        throw new Error('Native controller trust store isolation changed while reading', {
+            cause: error,
+        });
+    }
+    let parsed;
+    try {
+        parsed = parseNativeControllerTrustStore(JSON.parse(result.bytes.toString('utf8')));
+    }
+    catch (error) {
+        throw new Error('Native controller trust store is not valid canonical JSON', {
+            cause: error,
+        });
+    }
+    const projectRootHash = await nativeControllerProjectRootHash(projectRoot);
+    return parsed.projects.find((project) => project.projectRootHash === projectRootHash) ?? null;
+}
+//# sourceMappingURL=native-controller-trust.js.map

package/dist/domains/comet-native/native-controller-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-controller-trust.js","sourceRoot":"","sources":["../../../domains/comet-native/native-controller-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAEvF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAA6B,MAAM,6BAA6B,CAAC;AAEnG,MAAM,CAAC,MAAM,oCAAoC,GAC/C,wCAAiD,CAAC;AACpD,MAAM,CAAC,MAAM,sCAAsC,GACjD,+CAAwD,CAAC;AAC3D,MAAM,qBAAqB,GAAG,yCAAyC,CAAC;AACxE,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AACnC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AAa/D,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAuB,EAAE,KAAa;IACvF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAc;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,WAAmB;IACvE,OAAO,aAAa,CAClB,qBAAqB,EACrB,sBAAsB,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,QAAiD;IAEjD,OAAO,+BAA+B,CAAC;QACrC,MAAM,EAAE,oCAAoC;QAC5C,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC3C,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,CAChE;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAC5D,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACzE,IACE,IAAI,CAAC,MAAM,KAAK,oCAAoC;QACpD,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAgC,EAAE;QAChF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,mCAAmC,KAAK,EAAE,CAAC,CAAC;QAC1E,SAAS,CACP,OAAO,EACP,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,CAAC,EAC1D,mCAAmC,KAAK,EAAE,CAC3C,CAAC;QACF,IACE,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ;YAC3C,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;YAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,aAAa,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACzD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,2BAA2B,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IACE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;YAC7B,IAAI,CAAC,SAAS,CACZ,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CACnF,EACD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,gCAAgC,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO;YACL,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,kBAAkB,EAAE,yBAAyB,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACzE,aAAa;SACd,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IACE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,CACZ,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpF,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAChC,CACF,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,oCAAoC,EAAE,QAAQ,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;QAC7B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,IAAI,CAAC,OAAO,CACjB,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,8BAA8B,CAAC,CAC9E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,WAAmB;IAEnB,MAAM,SAAS,GAAG,8BAA8B,EAAE,CAAC;IACnD,IAAI,mBAA2B,CAAC;IAChC,IAAI,CAAC;QACH,mBAAmB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,yDAAyD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,eAAsE,CAAC;IAC3E,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,yBAAyB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,8DAA8D,EAAE;YAC9E,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,eAAe,EAAE;YAC1D,KAAK,EAAE,+BAA+B;YACtC,MAAM,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE;gBAC/B,IAAI,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACpD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,yBAAyB,CAAC;YAC9B,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,+DAA+D,EAAE;YAC/E,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2DAA2D,EAAE;YAC3E,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,+BAA+B,CAAC,WAAW,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,KAAK,eAAe,CAAC,IAAI,IAAI,CAAC;AAChG,CAAC"}

package/dist/domains/comet-native/native-creation-authorization.d.ts

@@ -0,0 +1,30 @@
+import { type NativeReviewIdentity, type NativeReviewSignature } from './native-review-identity.js';
+import type { NativeProjectPaths } from './native-types.js';
+export declare const NATIVE_CREATION_AUTHORIZATION_SCHEMA: "comet.native.creation-authorization.v1";
+export interface NativeCreationAuthorization {
+    schema: typeof NATIVE_CREATION_AUTHORIZATION_SCHEMA;
+    controllerKeyId: string;
+    projectRootHash: string;
+    policyHash: string;
+    protocol: 'signed-v2';
+    change: string;
+    issuedAt: string;
+    authorizationHash: string;
+    controllerSignature: NativeReviewSignature;
+}
+export declare function buildNativeCreationAuthorization(input: {
+    controllerIdentity: NativeReviewIdentity;
+    controllerPrivateKey: string;
+    projectRootHash: string;
+    policyHash: string;
+    change: string;
+    now?: Date;
+}): NativeCreationAuthorization;
+export declare function parseNativeCreationAuthorization(value: unknown): NativeCreationAuthorization;
+export declare function verifyNativeCreationAuthorization(options: {
+    paths: NativeProjectPaths;
+    policyHash: string;
+    authorization: unknown;
+    change: string;
+}): Promise<NativeCreationAuthorization>;
+//# sourceMappingURL=native-creation-authorization.d.ts.map

package/dist/domains/comet-native/native-creation-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-creation-authorization.d.ts","sourceRoot":"","sources":["../../../domains/comet-native/native-creation-authorization.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,eAAO,MAAM,oCAAoC,EAC/C,wCAAiD,CAAC;AAIpD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,oCAAoC,CAAC;IACpD,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,WAAW,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,qBAAqB,CAAC;CAC5C;AAqBD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,2BAA2B,CAoB9B;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,2BAA2B,CAwD5F;AAED,wBAAsB,iCAAiC,CAAC,OAAO,EAAE;IAC/D,KAAK,EAAE,kBAAkB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAqBvC"}

package/dist/domains/comet-native/native-creation-authorization.js

@@ -0,0 +1,110 @@
+import { canonicalHash } from './native-canonical-hash.js';
+import { nativeControllerProjectRootHash, readNativeControllerTrustProject, } from './native-controller-trust.js';
+import { parseNativeReviewSignature, signNativeReviewPayloadHash, verifyNativeReviewPayloadHash, } from './native-review-identity.js';
+export const NATIVE_CREATION_AUTHORIZATION_SCHEMA = 'comet.native.creation-authorization.v1';
+const HASH_PATTERN = /^[a-f0-9]{64}$/u;
+const CHANGE_NAME_PATTERN = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
+function record(value, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+}
+function exactKeys(value, expected, label) {
+    const actual = Object.keys(value).sort();
+    const canonical = [...expected].sort();
+    if (JSON.stringify(actual) !== JSON.stringify(canonical)) {
+        throw new Error(`${label} fields are invalid`);
+    }
+}
+export function buildNativeCreationAuthorization(input) {
+    const content = {
+        schema: NATIVE_CREATION_AUTHORIZATION_SCHEMA,
+        controllerKeyId: input.controllerIdentity.keyId,
+        projectRootHash: input.projectRootHash,
+        policyHash: input.policyHash,
+        protocol: 'signed-v2',
+        change: input.change,
+        issuedAt: (input.now ?? new Date()).toISOString(),
+    };
+    const authorizationHash = canonicalHash(NATIVE_CREATION_AUTHORIZATION_SCHEMA, content);
+    return parseNativeCreationAuthorization({
+        ...content,
+        authorizationHash,
+        controllerSignature: signNativeReviewPayloadHash({
+            identity: input.controllerIdentity,
+            privateKey: input.controllerPrivateKey,
+            payloadHash: authorizationHash,
+        }),
+    });
+}
+export function parseNativeCreationAuthorization(value) {
+    const root = record(value, 'Native creation authorization');
+    exactKeys(root, [
+        'schema',
+        'controllerKeyId',
+        'projectRootHash',
+        'policyHash',
+        'protocol',
+        'change',
+        'issuedAt',
+        'authorizationHash',
+        'controllerSignature',
+    ], 'Native creation authorization');
+    if (root.schema !== NATIVE_CREATION_AUTHORIZATION_SCHEMA ||
+        typeof root.controllerKeyId !== 'string' ||
+        !HASH_PATTERN.test(root.controllerKeyId) ||
+        typeof root.projectRootHash !== 'string' ||
+        !HASH_PATTERN.test(root.projectRootHash) ||
+        typeof root.policyHash !== 'string' ||
+        !HASH_PATTERN.test(root.policyHash) ||
+        root.protocol !== 'signed-v2' ||
+        typeof root.change !== 'string' ||
+        !CHANGE_NAME_PATTERN.test(root.change) ||
+        typeof root.issuedAt !== 'string' ||
+        Number.isNaN(Date.parse(root.issuedAt)) ||
+        typeof root.authorizationHash !== 'string' ||
+        !HASH_PATTERN.test(root.authorizationHash)) {
+        throw new Error('Native creation authorization is invalid');
+    }
+    const content = {
+        schema: NATIVE_CREATION_AUTHORIZATION_SCHEMA,
+        controllerKeyId: root.controllerKeyId,
+        projectRootHash: root.projectRootHash,
+        policyHash: root.policyHash,
+        protocol: 'signed-v2',
+        change: root.change,
+        issuedAt: root.issuedAt,
+    };
+    const authorizationHash = canonicalHash(NATIVE_CREATION_AUTHORIZATION_SCHEMA, content);
+    if (authorizationHash !== root.authorizationHash) {
+        throw new Error('Native creation authorization hash mismatch');
+    }
+    const controllerSignature = parseNativeReviewSignature(root.controllerSignature);
+    if (controllerSignature.keyId !== root.controllerKeyId ||
+        controllerSignature.payloadHash !== authorizationHash) {
+        throw new Error('Native creation authorization signature binding is invalid');
+    }
+    return { ...content, authorizationHash, controllerSignature };
+}
+export async function verifyNativeCreationAuthorization(options) {
+    const controllerTrust = await readNativeControllerTrustProject(options.paths.projectRoot);
+    if (!controllerTrust) {
+        throw new Error('Native project has no controller-owned trust root');
+    }
+    const authorization = parseNativeCreationAuthorization(options.authorization);
+    const projectRootHash = await nativeControllerProjectRootHash(options.paths.projectRoot);
+    if (authorization.controllerKeyId !== controllerTrust.controllerIdentity.keyId ||
+        authorization.projectRootHash !== projectRootHash ||
+        authorization.policyHash !== options.policyHash ||
+        authorization.change !== options.change) {
+        throw new Error('Native creation authorization does not match the trusted project/change');
+    }
+    verifyNativeReviewPayloadHash({
+        identity: controllerTrust.controllerIdentity,
+        payloadHash: authorization.authorizationHash,
+        proof: authorization.controllerSignature,
+    });
+    return authorization;
+}
+//# sourceMappingURL=native-creation-authorization.js.map

package/dist/domains/comet-native/native-creation-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-creation-authorization.js","sourceRoot":"","sources":["../../../domains/comet-native/native-creation-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,6BAA6B,GAG9B,MAAM,6BAA6B,CAAC;AAGrC,MAAM,CAAC,MAAM,oCAAoC,GAC/C,wCAAiD,CAAC;AACpD,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AAc/D,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAChB,KAA8B,EAC9B,QAA2B,EAC3B,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAOhD;IACC,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,oCAAoC;QAC5C,eAAe,EAAE,KAAK,CAAC,kBAAkB,CAAC,KAAK;QAC/C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,WAAoB;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KAClD,CAAC;IACF,MAAM,iBAAiB,GAAG,aAAa,CAAC,oCAAoC,EAAE,OAAO,CAAC,CAAC;IACvF,OAAO,gCAAgC,CAAC;QACtC,GAAG,OAAO;QACV,iBAAiB;QACjB,mBAAmB,EAAE,2BAA2B,CAAC;YAC/C,QAAQ,EAAE,KAAK,CAAC,kBAAkB;YAClC,UAAU,EAAE,KAAK,CAAC,oBAAoB;YACtC,WAAW,EAAE,iBAAiB;SAC/B,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAc;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IAC5D,SAAS,CACP,IAAI,EACJ;QACE,QAAQ;QACR,iBAAiB;QACjB,iBAAiB;QACjB,YAAY;QACZ,UAAU;QACV,QAAQ;QACR,UAAU;QACV,mBAAmB;QACnB,qBAAqB;KACtB,EACD,+BAA+B,CAChC,CAAC;IACF,IACE,IAAI,CAAC,MAAM,KAAK,oCAAoC;QACpD,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;QACxC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QACxC,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;QACxC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QACxC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,QAAQ,KAAK,WAAW;QAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACtC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ;QAC1C,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,oCAAoC;QAC5C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,WAAoB;QAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;IACF,MAAM,iBAAiB,GAAG,aAAa,CAAC,oCAAoC,EAAE,OAAO,CAAC,CAAC;IACvF,IAAI,iBAAiB,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACjF,IACE,mBAAmB,CAAC,KAAK,KAAK,IAAI,CAAC,eAAe;QAClD,mBAAmB,CAAC,WAAW,KAAK,iBAAiB,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,OAKvD;IACC,MAAM,eAAe,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1F,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,aAAa,GAAG,gCAAgC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9E,MAAM,eAAe,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACzF,IACE,aAAa,CAAC,eAAe,KAAK,eAAe,CAAC,kBAAkB,CAAC,KAAK;QAC1E,aAAa,CAAC,eAAe,KAAK,eAAe;QACjD,aAAa,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;QAC/C,aAAa,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,6BAA6B,CAAC;QAC5B,QAAQ,EAAE,eAAe,CAAC,kBAAkB;QAC5C,WAAW,EAAE,aAAa,CAAC,iBAAiB;QAC5C,KAAK,EAAE,aAAa,CAAC,mBAAmB;KACzC,CAAC,CAAC;IACH,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/domains/comet-native/native-diagnostics.d.ts

@@ -0,0 +1,25 @@
+import type { NativeChangeState, NativeClarificationMode, NativeFinding, NativeProjectPaths, NativeStatusPageProjection, NativeStatusProjection } from './native-types.js';
+export declare const NATIVE_STATUS_PAGE_LIMITS: Readonly<{
+    maxItems: 24;
+    maxChanges: 4096;
+    maxSerializedBytes: number;
+}>;
+export declare function nativeNextCommand(state: NativeChangeState, archiveReady: boolean, evidenceRetreat?: boolean, _clarificationMode?: NativeClarificationMode): string | null;
+export declare function inspectNativeStatus(paths: NativeProjectPaths, name: string, options?: {
+    details?: boolean;
+    acceptanceCursor?: string;
+    clarificationMode?: NativeClarificationMode;
+    maxVerifyFailures?: number;
+}): Promise<NativeStatusProjection>;
+export declare function listNativeStatusPage(paths: NativeProjectPaths, options?: {
+    cursor?: string | null;
+    clarificationMode?: NativeClarificationMode;
+    maxVerifyFailures?: number;
+}): Promise<NativeStatusPageProjection>;
+/** Compatibility projection for in-process callers; CLI consumers receive the resumable page. */
+export declare function listNativeStatus(paths: NativeProjectPaths, options?: {
+    clarificationMode?: NativeClarificationMode;
+    maxVerifyFailures?: number;
+}): Promise<NativeStatusProjection[]>;
+export declare function inspectNativeArtifactFindings(paths: NativeProjectPaths, state: NativeChangeState): Promise<NativeFinding[]>;
+//# sourceMappingURL=native-diagnostics.d.ts.map