@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/skill/transfer/slots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slots.js","sourceRoot":"","sources":["../../../../src/domain/skill/transfer/slots.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE3D,4DAA4D;AAC5D,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC;QACE,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,+DAA+D;AAC/D,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,qEAAqE;AACrE,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC;QACE,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,QAAgB,EAAE,QAAgB;QAC5C,KAAK,CAAC,kCAAkC,QAAQ,oBAAoB,QAAQ,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAQD,MAAM,OAAO,WAAW;IACL,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IAChC,UAAU,CAAS;IACnB,KAAK,CAAS;IACd,OAAO,CAAS;IACjC,+DAA+D;IAC9C,GAAG,CAAe;IAEnC;;;;;;OAMG;IACH,YACE,UAAkB,EAClB,KAAa,EACb,OAAe,EACf,MAAoB,IAAI,CAAC,GAAG;QAE5B,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,YAAoB;QACvB,IAAI,YAAY,IAAI,CAAC,IAAI,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,iBAAiB,YAAY,gBAAgB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,YAAY;YACZ,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK;YACpC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,IAAc;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,qEAAqE;YACrE,qEAAqE;YACrE,iEAAiE;YACjE,MAAM,QAAQ,CACZ,IAAI,EACJ,UAAU,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC7B,OAAO,IAAI,CAAC,CAAC;YACf,CAAC,CAAC,EACF,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,iEAAiE;QACjE,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAC9D,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,cAAc,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,GAAW;QACxB,OAAO,GAAG,GAAG,MAAM,CAAC;IACtB,CAAC;IAED;;;OAGG;IACK,SAAS,CAAC,GAAW;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,UAAU,CACjB,KAAa,EACb,OAAgC;IAEhC,OAAO,KAAK,SAAS,CAAC,EAAE,MAA6B;QACnD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC/E,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/skill/version-resolution.d.ts

@@ -0,0 +1,16 @@
+import { SkillQueryController } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/query_pb";
+import type { PipelineStep } from "../../pipeline/pipeline.js";
+import type { Store } from "../../store/interface.js";
+type GetByReferenceDesc = typeof SkillQueryController.method.getByReference.input;
+/** Go LoadSkillByReferenceStep — the reference + version ladder. */
+export declare function newLoadSkillByReferenceStep(store: Store): PipelineStep<GetByReferenceDesc>;
+export declare const LIST_VERSIONS_SKILL_ID_KEY = "listVersionsSkillId";
+export declare const LIST_VERSIONS_HEAD_HASH_KEY = "listVersionsHeadHash";
+export declare const LIST_VERSIONS_RESPONSE_KEY = "listVersionsResponse";
+type ListVersionsDesc = typeof SkillQueryController.method.listVersions.input;
+/** Go ResolveSkillBySlugStep — resolves the skill and captures the head hash. */
+export declare function newResolveSkillBySlugStep(store: Store): PipelineStep<ListVersionsDesc>;
+/** Go LoadAndMapVersionsStep — audit records → entries → one page. */
+export declare function newLoadAndMapVersionsStep(store: Store): PipelineStep<ListVersionsDesc>;
+export {};
+//# sourceMappingURL=version-resolution.d.ts.map

package/dist/domain/skill/version-resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-resolution.d.ts","sourceRoot":"","sources":["../../../src/domain/skill/version-resolution.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAa5F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAStD,KAAK,kBAAkB,GACrB,OAAO,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC;AAE1D,oEAAoE;AACpE,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,KAAK,GACX,YAAY,CAAC,kBAAkB,CAAC,CA8DlC;AAoDD,eAAO,MAAM,0BAA0B,wBAAwB,CAAC;AAChE,eAAO,MAAM,2BAA2B,yBAAyB,CAAC;AAClE,eAAO,MAAM,0BAA0B,yBAAyB,CAAC;AAEjE,KAAK,gBAAgB,GAAG,OAAO,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;AAE9E,iFAAiF;AACjF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,KAAK,GACX,YAAY,CAAC,gBAAgB,CAAC,CA2BhC;AAED,sEAAsE;AACtE,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,KAAK,GACX,YAAY,CAAC,gBAAgB,CAAC,CAsEhC"}

package/dist/domain/skill/version-resolution.js

@@ -0,0 +1,254 @@
+/**
+ * Skill version resolution — ports pkg/domain/skill/controller/
+ * load_skill_by_reference.go and list_versions.go: the getByReference
+ * version ladder and the paginated version history.
+ *
+ * The ladder (Go LoadSkillByReferenceStep): resolve the live head by
+ * slug+org; empty/"latest" returns it; a 64-hex version matches the head's
+ * hash or falls to the indexed audit-by-hash lookup; anything else is a
+ * tag, matching the head's live spec.tag first (honest under the
+ * single-holder model: push reconciles the live tag with the audit tag
+ * column, clearing spec.tag when assignment fails) and then the indexed
+ * audit-by-tag lookup.
+ *
+ * listVersions marks is_current by HEAD-HASH match, not recency: under
+ * repoint semantics (#475) re-pushing archived content re-activates its
+ * existing row, so the current version need not be the newest-archived
+ * one. Tags come from the audit COLUMN (the single-holder source of
+ * truth), never from the snapshot — snapshots archive tagless and a legacy
+ * snapshot's embedded tag may have moved since it was written.
+ *
+ * Proven by __tests__/skill.test.ts's ladder and pagination blocks and
+ * the conformance suite's getByReference/listVersions blocks.
+ */
+import { create, fromBinary } from "@bufbuild/protobuf";
+import { SkillSchema } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/api_pb";
+import { ListSkillVersionsResponseSchema, SkillVersionEntrySchema, } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/io_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { internalError, invalidArgumentError, notFoundError, } from "../../pipeline/errors.js";
+import { findResourceBySlug, requireOrgForReference } from "../../pipeline/steps/helpers.js";
+import { TARGET_RESOURCE_KEY } from "../../pipeline/steps/load-target.js";
+import { AuditNotFoundError } from "../../store/interface.js";
+/** A 64-character lowercase-hex string (a SHA-256 content hash). */
+const HASH_PATTERN = /^[a-f0-9]{64}$/;
+function isHash(version) {
+    return HASH_PATTERN.test(version);
+}
+/** Go LoadSkillByReferenceStep — the reference + version ladder. */
+export function newLoadSkillByReferenceStep(store) {
+    return {
+        name: "LoadSkillByReference",
+        async execute(ctx) {
+            const ref = ctx.input;
+            if (ref.slug === "") {
+                throw invalidArgumentError("slug is required in reference");
+            }
+            // Skill is org-scoped: its slug is unique only within an org, so an
+            // empty-org reference is under-specified.
+            requireOrgForReference(ctx.apiResourceKind, ref.org);
+            if (ref.kind !== ApiResourceKind.api_resource_kind_unknown &&
+                ref.kind !== ApiResourceKind.skill) {
+                throw invalidArgumentError(`kind mismatch: expected ${ApiResourceKind[ApiResourceKind.skill]}, got ${ApiResourceKind[ref.kind]}`);
+            }
+            let mainSkill;
+            try {
+                mainSkill = await findResourceBySlug(store, ctx.apiResourceKind, SkillSchema, ref.slug, ref.org);
+            }
+            catch (error) {
+                throw internalError(error, "failed to list skills");
+            }
+            if (mainSkill === undefined) {
+                throw notFoundError("skill", ref.slug);
+            }
+            const version = ref.version.trim();
+            if (version === "" || version === "latest") {
+                ctx.set(TARGET_RESOURCE_KEY, mainSkill);
+                return;
+            }
+            if (skillMatchesVersion(mainSkill, version)) {
+                ctx.set(TARGET_RESOURCE_KEY, mainSkill);
+                return;
+            }
+            const auditSkill = await findAuditSkillByVersion(store, ctx.apiResourceKind, mainSkill.metadata.id, version);
+            if (auditSkill === undefined) {
+                throw notFoundError("skill version", `${ref.slug}:${version}`);
+            }
+            ctx.set(TARGET_RESOURCE_KEY, auditSkill);
+        },
+    };
+}
+/**
+ * Whether the live head IS the requested version — by hash, or by its
+ * live spec.tag (honest under the single-holder tag model, see module doc).
+ */
+function skillMatchesVersion(skill, version) {
+    if (skill.status === undefined) {
+        return false;
+    }
+    if (isHash(version)) {
+        return skill.status.versionHash === version;
+    }
+    return skill.spec !== undefined && skill.spec.tag === version;
+}
+/**
+ * Indexed audit lookup by hash or tag (Go findAuditSkillByVersion) —
+ * not-found is a normal outcome (undefined), storage failures are
+ * Internal.
+ */
+async function findAuditSkillByVersion(store, kind, skillId, version) {
+    if (isHash(version)) {
+        try {
+            return await store.getAuditByHash(kind, skillId, version, SkillSchema);
+        }
+        catch (error) {
+            if (error instanceof AuditNotFoundError) {
+                return undefined;
+            }
+            throw internalError(error, "failed to query audit by hash");
+        }
+    }
+    try {
+        return await store.getAuditByTag(kind, skillId, version, SkillSchema);
+    }
+    catch (error) {
+        if (error instanceof AuditNotFoundError) {
+            return undefined;
+        }
+        throw internalError(error, "failed to query audit by tag");
+    }
+}
+// ─── listVersions ────────────────────────────────────────────────────────
+const DEFAULT_PAGE_SIZE = 50;
+const MAX_PAGE_SIZE = 100;
+export const LIST_VERSIONS_SKILL_ID_KEY = "listVersionsSkillId";
+export const LIST_VERSIONS_HEAD_HASH_KEY = "listVersionsHeadHash";
+export const LIST_VERSIONS_RESPONSE_KEY = "listVersionsResponse";
+/** Go ResolveSkillBySlugStep — resolves the skill and captures the head hash. */
+export function newResolveSkillBySlugStep(store) {
+    return {
+        name: "ResolveSkillBySlug",
+        async execute(ctx) {
+            const req = ctx.input;
+            let skill;
+            try {
+                skill = await findResourceBySlug(store, ctx.apiResourceKind, SkillSchema, req.slug, req.org);
+            }
+            catch (error) {
+                throw internalError(error, "failed to search for skill");
+            }
+            if (skill === undefined) {
+                throw notFoundError("skill", `${req.slug} (org: ${req.org})`);
+            }
+            ctx.set(LIST_VERSIONS_SKILL_ID_KEY, skill.metadata.id);
+            // The live head's hash decides is_current downstream. Under repoint
+            // semantics the current version need not be the newest-archived row,
+            // so recency cannot stand in for currency.
+            ctx.set(LIST_VERSIONS_HEAD_HASH_KEY, skill.status?.versionHash ?? "");
+        },
+    };
+}
+/** Go LoadAndMapVersionsStep — audit records → entries → one page. */
+export function newLoadAndMapVersionsStep(store) {
+    return {
+        name: "LoadAndMapVersions",
+        async execute(ctx) {
+            const req = ctx.input;
+            const skillId = ctx.get(LIST_VERSIONS_SKILL_ID_KEY);
+            let records;
+            try {
+                records = await store.listAuditRecords(ctx.apiResourceKind, skillId);
+            }
+            catch (error) {
+                throw internalError(error, "failed to load version history");
+            }
+            // is_current = the entry whose hash matches the live head, not the
+            // newest row. Legacy data may hold duplicate-hash rows (predating
+            // repoint semantics); marking only the first match keeps
+            // exactly-one-current true for them too.
+            const headHash = ctx.get(LIST_VERSIONS_HEAD_HASH_KEY);
+            let currentMarked = false;
+            const entries = [];
+            for (const record of records) {
+                let skill;
+                try {
+                    skill = fromBinary(SkillSchema, record.data);
+                }
+                catch {
+                    continue;
+                }
+                const isCurrent = !currentMarked &&
+                    headHash !== "" &&
+                    (skill.status?.versionHash ?? "") === headHash;
+                currentMarked = currentMarked || isCurrent;
+                // Tag comes from the audit column (source of truth), not the snapshot.
+                entries.push(mapSkillToVersionEntry(skill, isCurrent, record.tag));
+            }
+            let pageSize = req.pageSize;
+            if (pageSize <= 0) {
+                pageSize = DEFAULT_PAGE_SIZE;
+            }
+            if (pageSize > MAX_PAGE_SIZE) {
+                pageSize = MAX_PAGE_SIZE;
+            }
+            let startIndex = 0;
+            if (req.pageToken !== "") {
+                startIndex = decodePageToken(req.pageToken);
+            }
+            let pageEntries = [];
+            let nextPageToken = "";
+            if (startIndex < entries.length) {
+                const end = Math.min(startIndex + pageSize, entries.length);
+                pageEntries = entries.slice(startIndex, end);
+                if (end < entries.length) {
+                    nextPageToken = Buffer.from(String(end)).toString("base64");
+                }
+            }
+            ctx.set(LIST_VERSIONS_RESPONSE_KEY, create(ListSkillVersionsResponseSchema, {
+                versions: pageEntries,
+                nextPageToken,
+                totalCount: entries.length,
+            }));
+        },
+    };
+}
+/**
+ * Decodes the base64 cursor with Go's strictness: base64.StdEncoding
+ * rejects malformed input and strconv.Atoi rejects trailing garbage —
+ * Buffer.from is lenient on both, so validity is checked explicitly.
+ */
+function decodePageToken(token) {
+    const decoded = Buffer.from(token, "base64");
+    if (decoded.toString("base64") !== token) {
+        throw invalidArgumentError("invalid page_token");
+    }
+    const text = decoded.toString("utf8");
+    const index = Number.parseInt(text, 10);
+    if (!Number.isSafeInteger(index) || String(index) !== text || index < 0) {
+        throw invalidArgumentError("invalid page_token");
+    }
+    return index;
+}
+/**
+ * Maps an archived Skill snapshot to a version entry (Go
+ * mapSkillToVersionEntry). pushed_at/pushed_by prefer the spec-audit
+ * updated stamps and fall back to created (first pushes only carry
+ * created).
+ */
+function mapSkillToVersionEntry(skill, isCurrent, tag) {
+    const entry = create(SkillVersionEntrySchema, { isCurrent, tag });
+    if (skill.status !== undefined) {
+        entry.versionHash = skill.status.versionHash;
+        entry.artifactStorageKey = skill.status.artifactStorageKey;
+        entry.gitProvenance = skill.status.gitProvenance;
+        const specAudit = skill.status.audit?.specAudit;
+        if (specAudit !== undefined) {
+            entry.pushedAt = specAudit.updatedAt ?? specAudit.createdAt;
+            entry.pushedBy = specAudit.updatedBy ?? specAudit.createdBy;
+        }
+    }
+    if (skill.metadata?.version !== undefined) {
+        entry.message = skill.metadata.version.message;
+    }
+    return entry;
+}
+//# sourceMappingURL=version-resolution.js.map

package/dist/domain/skill/version-resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-resolution.js","sourceRoot":"","sources":["../../../src/domain/skill/version-resolution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AAGjF,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,GACxB,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAG9D,oEAAoE;AACpE,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAEtC,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAKD,oEAAoE;AACpE,MAAM,UAAU,2BAA2B,CACzC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK,CAAC,OAAO,CAAC,GAAuC;YACnD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YAEtB,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;gBACpB,MAAM,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;YAC9D,CAAC;YAED,oEAAoE;YACpE,0CAA0C;YAC1C,sBAAsB,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAErD,IACE,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC,yBAAyB;gBACtD,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC,KAAK,EAClC,CAAC;gBACD,MAAM,oBAAoB,CACxB,2BAA2B,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACtG,CAAC;YACJ,CAAC;YAED,IAAI,SAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,kBAAkB,CAClC,KAAK,EACL,GAAG,CAAC,eAAe,EACnB,WAAW,EACX,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,GAAG,CACR,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC3C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YAED,IAAI,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAC9C,KAAK,EACL,GAAG,CAAC,eAAe,EACnB,SAAS,CAAC,QAAS,CAAC,EAAE,EACtB,OAAO,CACR,CAAC;YACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,aAAa,CAAC,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,KAAY,EAAE,OAAe;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CACpC,KAAY,EACZ,IAAqB,EACrB,OAAe,EACf,OAAe;IAEf,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,aAAa,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,aAAa,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC;AAChE,MAAM,CAAC,MAAM,2BAA2B,GAAG,sBAAsB,CAAC;AAClE,MAAM,CAAC,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AAIjE,iFAAiF;AACjF,MAAM,UAAU,yBAAyB,CACvC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,KAAK,CAAC,OAAO,CAAC,GAAqC;YACjD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YACtB,IAAI,KAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,kBAAkB,CAC9B,KAAK,EACL,GAAG,CAAC,eAAe,EACnB,WAAW,EACX,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,GAAG,CACR,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC,QAAS,CAAC,EAAE,CAAC,CAAC;YACxD,oEAAoE;YACpE,qEAAqE;YACrE,2CAA2C;YAC3C,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CACvC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,KAAK,CAAC,OAAO,CAAC,GAAqC;YACjD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAW,CAAC;YAE9D,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;YAC/D,CAAC;YAED,mEAAmE;YACnE,kEAAkE;YAClE,yDAAyD;YACzD,yCAAyC;YACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAW,CAAC;YAChE,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,MAAM,OAAO,GAAwB,EAAE,CAAC;YACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,KAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC/C,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,MAAM,SAAS,GACb,CAAC,aAAa;oBACd,QAAQ,KAAK,EAAE;oBACf,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC,KAAK,QAAQ,CAAC;gBACjD,aAAa,GAAG,aAAa,IAAI,SAAS,CAAC;gBAC3C,uEAAuE;gBACvE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC5B,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBAClB,QAAQ,GAAG,iBAAiB,CAAC;YAC/B,CAAC;YACD,IAAI,QAAQ,GAAG,aAAa,EAAE,CAAC;gBAC7B,QAAQ,GAAG,aAAa,CAAC;YAC3B,CAAC;YAED,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,IAAI,GAAG,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;gBACzB,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,WAAW,GAAwB,EAAE,CAAC;YAC1C,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,IAAI,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC5D,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC7C,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;oBACzB,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAED,GAAG,CAAC,GAAG,CACL,0BAA0B,EAC1B,MAAM,CAAC,+BAA+B,EAAE;gBACtC,QAAQ,EAAE,WAAW;gBACrB,aAAa;gBACb,UAAU,EAAE,OAAO,CAAC,MAAM;aAC3B,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;QACzC,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAC7B,KAAY,EACZ,SAAkB,EAClB,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAElE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;QAC7C,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC3D,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;QAEjD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC;QAChD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;YAC5D,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;IACjD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/domain/workflow/controller.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Workflow controller — ports pkg/domain/workflow/controller (command +
+ * query sides): the workflow authoring/validation/versioning surface.
+ * Create runs the 14-step pipeline (Layer-2 validation gate, canonical CNCF
+ * YAML, version hash chain, default-instance choreography through the
+ * in-process workflowinstance client, v1 archived AFTER
+ * default_instance_id); Update adds the CheckVersionChanged idempotence
+ * gate; Delete cascades ALL instances (oss#592); versions resolve by hash
+ * or tag through the audit store with the tag COLUMN as the source of
+ * truth; tagVersion moves tags single-holder (oss#341).
+ *
+ * Pipeline per RPC mirrors the Go step chains character-for-character.
+ * Proven by workflow.conformance.test.ts (CONFORMANCE_TARGET=local) and
+ * __tests__/.
+ *
+ * Versus Stigmer Cloud, OSS excludes the Authorize, CreateIamPolicies, and
+ * Publish steps (no multi-tenant auth, IAM/FGA, or event publishing here).
+ */
+import type { ConnectRouter } from "@connectrpc/connect";
+import type { Logger } from "../../boot/logger.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { ResourceAuthorizationLifecycle } from "../../extensions/resource-authorization.js";
+import type { Store } from "../../store/interface.js";
+import type { InProcessValidator } from "./validation/validator.js";
+import type { WorkflowInstanceCreatorProvider } from "./steps.js";
+export interface WorkflowControllerDeps {
+    readonly store: Store;
+    readonly logger: Logger;
+    /** The composed authorization seam — the Authorize step at position 1 of every chain calls it (O2, DD-007 §3). */
+    readonly authorizer: Authorizer;
+    /** The composed tuple-lifecycle driver — undefined = the shared steps no-op (C2). */
+    readonly authorizationLifecycle: ResourceAuthorizationLifecycle | undefined;
+    /** The Layer-2 validator (converter + structural checks + registry). */
+    readonly validator: InProcessValidator;
+    /**
+     * The workflowinstance in-process edge — a lazy provider because
+     * workflow↔workflowinstance is a true dependency cycle (DD-002; the
+     * ratified DI story breaks cycles with `() => client` closures resolved
+     * at call time, never at construction).
+     */
+    readonly workflowInstanceCreator: WorkflowInstanceCreatorProvider;
+}
+/** Registers both workflow services on the router (routes stage). */
+export declare function registerWorkflowServices(router: ConnectRouter, deps: WorkflowControllerDeps): void;
+//# sourceMappingURL=controller.d.ts.map

package/dist/domain/workflow/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../src/domain/workflow/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAC;AAuCzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AA2EjG,OAAO,KAAK,EAAe,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAepE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAElE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kHAAkH;IAClH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,qFAAqF;IACrF,QAAQ,CAAC,sBAAsB,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC5E,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,uBAAuB,EAAE,+BAA+B,CAAC;CACnE;AAED,qEAAqE;AACrE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,sBAAsB,GAC3B,IAAI,CAsBN"}