@tacuchi/agent-workflow-cli 20.26.0 → 21.1.0

package/dist/domain/design/revision.js

@@ -0,0 +1,219 @@
+import { ARTIFACT_PREFIX, isArtifactId } from "./identity.js";
+import { NAMING, revisionSegment } from "./naming.js";
+/**
+ * Changing published normative content.
+ *
+ * The rule has one shape: you never edit a published revision, you mint the
+ * next one. Everything else follows — the previous file keeps its name, every
+ * reference to it keeps resolving, and `supersedes` records the succession
+ * without rewriting what came before.
+ *
+ * This module answers the two questions that operation asks: *what is the next
+ * revision and where does it go*, and afterwards *did anything published
+ * disappear*. Writing the files is publication's job (F5); this is the arithmetic
+ * and the proof.
+ */
+/** Where each artifact kind is catalogued. One rule, one place. */
+export const KIND_LIST = {
+    flow: "flows",
+    screen: "screens",
+    rule: "rules",
+    token: "tokens",
+    rendition: "renditions",
+};
+/**
+ * The next revision of `id`, or the first one when the artifact is new.
+ * `slug` only shapes the file name; identity never derives from it.
+ */
+export function planNextRevision(manifest, kind, id, slug, artifact) {
+    // The id shapes the PATH this function returns, so validating the cosmetic
+    // slug and not the identity would let `../../evil` out of here as a path.
+    if (!isArtifactId(id, kind)) {
+        return {
+            ok: false,
+            failure: {
+                code: "DESIGN_FIELD_INVALID",
+                artifact,
+                message: `'${id}' no es un id de ${kind}`,
+                action: `usá ${ARTIFACT_PREFIX[kind]}-NNN`,
+            },
+        };
+    }
+    if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(slug)) {
+        return {
+            ok: false,
+            failure: {
+                code: "DESIGN_FIELD_INVALID",
+                artifact,
+                message: `'${slug}' no es un slug: solo minúsculas, números y guiones`,
+                action: "usá algo como 'alta-miembro'",
+            },
+        };
+    }
+    const existing = manifest.catalog[KIND_LIST[kind]].filter((e) => e.id === id);
+    const highest = existing.reduce((max, e) => Math.max(max, e.revision), 0);
+    const revision = highest + 1;
+    const rule = NAMING[kind];
+    const path = `${rule.dir}/${id}-${revisionSegment(revision)}-${slug}${rule.suffix}`;
+    // No collision check here on purpose: `revision` is always max+1 and the
+    // revision is part of the path, so the new file CANNOT be one the catalog
+    // already holds. The impossibility is structural — an `if` would only be
+    // dead code pretending to be a safeguard.
+    return {
+        ok: true,
+        value: {
+            id,
+            revision,
+            path,
+            supersedes: highest === 0 ? null : `${manifest.id}/${id}@r${highest}`,
+            preserves: existing.map((e) => e.path).sort(),
+        },
+    };
+}
+/**
+ * What a publication lost, comparing the manifest before and after.
+ *
+ * A published revision may gain nothing and lose nothing: not its path, and —
+ * for a baseline — not its digest. Anything else means a reference somebody
+ * already wrote now resolves to different bytes, which is the one thing the
+ * whole revision model exists to prevent.
+ */
+export function findHistoryLoss(before, after) {
+    return [
+        ...artifactLosses(before, after),
+        ...baselineLosses(before, after),
+        ...addressedLosses(before, after),
+    ];
+}
+/**
+ * Assets and governance records are addressed by content and by id: an asset
+ * that leaves the catalog breaks whatever depended on that digest, and a review
+ * that changes its target changes what it approved.
+ */
+function artifactLosses(before, after) {
+    const losses = [];
+    const current = publishedArtifacts(after);
+    for (const [ref, entry] of publishedArtifacts(before)) {
+        const now = current.get(ref);
+        if (now === undefined) {
+            losses.push({ ref, kind: "removed", before: entry.path, after: null });
+            continue;
+        }
+        if (now.path !== entry.path) {
+            losses.push({ ref, kind: "moved", before: entry.path, after: now.path });
+        }
+        // Promoting a published revision in place is a mutation of what someone
+        // already pinned: `outline` and `handoff` mean different things to a gate,
+        // so the promotion is the NEXT revision, never an edit of this one.
+        for (const field of ["maturity", "supersedes"]) {
+            const was = entry[field] ?? null;
+            const is = now[field] ?? null;
+            if (was === is)
+                continue;
+            losses.push({
+                ref,
+                kind: "rewritten",
+                field,
+                before: String(was),
+                after: is === null ? null : String(is),
+            });
+        }
+    }
+    return losses;
+}
+function baselineLosses(before, after) {
+    const losses = [];
+    // Changing a package's identity orphans every reference ever written to it —
+    // the largest history loss there is, and the one nobody would think to look for.
+    if (before.id !== after.id) {
+        losses.push({
+            ref: before.id,
+            kind: "rewritten",
+            field: "id",
+            before: before.id,
+            after: after.id,
+        });
+    }
+    for (const baseline of before.baselines) {
+        const ref = `${before.id}@r${baseline.revision}`;
+        const now = after.baselines.find((b) => b.revision === baseline.revision);
+        if (now === undefined) {
+            losses.push({ ref, kind: "removed", before: baseline.path, after: null });
+            continue;
+        }
+        if (now.path !== baseline.path) {
+            losses.push({ ref, kind: "moved", before: baseline.path, after: now.path });
+        }
+        if (now.digest !== baseline.digest) {
+            losses.push({ ref, kind: "rewritten", before: baseline.digest, after: now.digest });
+        }
+    }
+    return losses;
+}
+function addressedLosses(before, after) {
+    return [...assetLosses(before, after), ...governanceLosses(before, after)];
+}
+/** An asset that leaves the catalog breaks whatever depended on that digest. */
+function assetLosses(before, after) {
+    const losses = [];
+    for (const asset of before.catalog.assets) {
+        const now = after.catalog.assets.find((a) => a.digest === asset.digest);
+        if (now === undefined) {
+            losses.push({ ref: asset.digest, kind: "removed", before: asset.path, after: null });
+        }
+        else if (now.path !== asset.path) {
+            losses.push({ ref: asset.digest, kind: "moved", before: asset.path, after: now.path });
+        }
+    }
+    return losses;
+}
+/** A review that changes its target changes what it approved. */
+function governanceLosses(before, after) {
+    const losses = [];
+    for (const key of ["reviews", "revocations"]) {
+        for (const record of before.governance[key]) {
+            const now = after.governance[key].find((g) => g.id === record.id);
+            if (now === undefined) {
+                losses.push({ ref: record.id, kind: "removed", before: record.path, after: null });
+                continue;
+            }
+            for (const field of ["digest", "target"]) {
+                if (now[field] === record[field])
+                    continue;
+                losses.push({
+                    ref: record.id,
+                    kind: "rewritten",
+                    field,
+                    before: record[field],
+                    after: now[field],
+                });
+            }
+        }
+    }
+    return losses;
+}
+/** Turn a loss into the diagnostic a publication should refuse with. */
+export function historyLossFailure(loss, artifact) {
+    const what = loss.field ?? "digest";
+    const message = {
+        removed: `${loss.ref} estaba publicada y ya no está en el catálogo`,
+        moved: `${loss.ref} cambió de path: '${loss.before}' → '${loss.after}'`,
+        rewritten: `${loss.ref} cambió de ${what}: '${loss.before}' → '${String(loss.after)}'`,
+    }[loss.kind];
+    return {
+        code: "DESIGN_HISTORY_MUTATED",
+        artifact,
+        message,
+        action: "una revisión publicada no se toca: creá la siguiente y dejá la anterior como está",
+    };
+}
+function publishedArtifacts(manifest) {
+    const out = new Map();
+    for (const key of Object.values(KIND_LIST)) {
+        for (const entry of manifest.catalog[key]) {
+            out.set(`${manifest.id}/${entry.id}@r${entry.revision}`, entry);
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=revision.js.map

package/dist/domain/design/revision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision.js","sourceRoot":"","sources":["../../../src/domain/design/revision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EAAE,MAAM,EAAkB,eAAe,EAAE,MAAM,aAAa,CAAC;AAGtE;;;;;;;;;;;;GAYG;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,SAAS,GAA2C;IAC/D,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,QAAQ;IACf,SAAS,EAAE,YAAY;CACxB,CAAC;AAiBF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAwB,EACxB,IAAe,EACf,EAAU,EACV,IAAY,EACZ,QAAgB;IAEhB,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ;gBACR,OAAO,EAAE,IAAI,EAAE,oBAAoB,IAAI,EAAE;gBACzC,MAAM,EAAE,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM;aAC3C;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ;gBACR,OAAO,EAAE,IAAI,IAAI,qDAAqD;gBACtE,MAAM,EAAE,8BAA8B;aACvC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAEpF,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,0CAA0C;IAE1C,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,EAAE;YACF,QAAQ;YACR,IAAI;YACJ,UAAU,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,OAAO,EAAE;YACrE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;SAC9C;KACF,CAAC;AACJ,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAsB,EAAE,KAAqB;IAC3E,OAAO;QACL,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC;QAChC,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC;QAChC,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,MAAsB,EAAE,KAAqB;IACnE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,YAAY,CAAU,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;YACjC,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;YAC9B,IAAI,GAAG,KAAK,EAAE;gBAAE,SAAS;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG;gBACH,IAAI,EAAE,WAAW;gBACjB,KAAK;gBACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;gBACnB,KAAK,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB,EAAE,KAAqB;IACnE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,6EAA6E;IAC7E,iFAAiF;IACjF,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,MAAM,CAAC,EAAE;YACjB,KAAK,EAAE,KAAK,CAAC,EAAE;SAChB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,MAAsB,EAAE,KAAqB;IACpE,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,gFAAgF;AAChF,SAAS,WAAW,CAAC,MAAsB,EAAE,KAAqB;IAChE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iEAAiE;AACjE,SAAS,gBAAgB,CAAC,MAAsB,EAAE,KAAqB;IACrE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAU,EAAE,CAAC;QACtD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;YAClE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnF,SAAS;YACX,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU,EAAE,CAAC;gBAClD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC3C,MAAM,CAAC,IAAI,CAAC;oBACV,GAAG,EAAE,MAAM,CAAC,EAAE;oBACd,IAAI,EAAE,WAAW;oBACjB,KAAK;oBACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;oBACrB,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,IAAiB,EAAE,QAAgB;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC;IACpC,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,+CAA+C;QACnE,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,qBAAqB,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,KAAK,GAAG;QACvE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,cAAc,IAAI,MAAM,IAAI,CAAC,MAAM,QAAQ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG;KACvF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ;QACR,OAAO;QACP,MAAM,EAAE,mFAAmF;KAC5F,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAwB;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAmB,EAAE,CAAC;YAC5D,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/domain/design/secrets.js

@@ -0,0 +1,86 @@
+/**
+ * Credentials never enter a package.
+ *
+ * A package records an ACCESS CLASSIFICATION — `private`, `team`, `public` —
+ * and never the thing that grants access. The distinction matters because a
+ * package is a durable, committed, shareable dossier: a token that lands in one
+ * is a token in every clone of the repo, forever, and rotating it does not
+ * remove it from history.
+ *
+ * The repo's `code-scan-service` greps source trees with regexes; this walks an
+ * already-parsed document instead, which is a different shape — the values are
+ * structured, so the key is as much a signal as the value.
+ */
+/** Keys that hold a secret by definition. Their presence is the finding. */
+const SECRET_KEYS = /^(password|passwd|pwd|secret|client_secret|token|access_token|refresh_token|id_token|api_?key|apikey|private_?key|secret_?key|access_?key|credential|credentials|auth_?token|bearer|session_?id|cookie)$/i;
+/** Shapes that are a credential wherever they appear, whatever the key. */
+const SECRET_VALUES = [
+    { test: /-----BEGIN [A-Z ]*PRIVATE KEY-----/, what: "una clave privada PEM" },
+    { test: /\bgh[pousr]_[A-Za-z0-9]{16,}\b/, what: "un token de GitHub" },
+    { test: /\bgithub_pat_[A-Za-z0-9_]{20,}\b/, what: "un token de GitHub" },
+    { test: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/, what: "un token de Slack" },
+    { test: /\bAKIA[0-9A-Z]{16}\b/, what: "una access key de AWS" },
+    { test: /\bsk-[A-Za-z0-9]{20,}\b/, what: "una API key" },
+    // Los proveedores que la spec declara obligatorios para v1 tienen su propio
+    // prefijo, y no reconocerlos dejaba a AC-SEC-02 sin cubrir justo donde importa.
+    { test: /\bfigd_[A-Za-z0-9_-]{20,}\b/, what: "un token de Figma" },
+    { test: /\bfigu_[A-Za-z0-9_-]{20,}\b/, what: "un token de Figma" },
+    { test: /\bAIza[0-9A-Za-z_-]{35}\b/, what: "una API key de Google" },
+    { test: /\bya29\.[0-9A-Za-z_-]{20,}\b/, what: "un token OAuth de Google" },
+    { test: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/, what: "una API key de Anthropic" },
+    { test: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/, what: "un JWT" },
+    { test: /\b(?:Bearer|Basic)\s+[A-Za-z0-9._~+/=-]{16,}/, what: "un header de autorización" },
+    // `https://user:password@host` — the one credential form that hides in a URL.
+    {
+        test: /\b[a-z][a-z0-9+.-]*:\/\/[^/\s:@]+:[^/\s@]+@/i,
+        what: "una URL con usuario y contraseña",
+    },
+];
+/**
+ * Walk a parsed document for credentials. Returns every finding: a document
+ * with two leaked tokens should report two, not stop at the first.
+ */
+export function findSecrets(document, at = "") {
+    if (typeof document === "string") {
+        const shape = SECRET_VALUES.find((s) => s.test.test(document));
+        return shape === undefined ? [] : [{ at, what: shape.what }];
+    }
+    if (Array.isArray(document)) {
+        return document.flatMap((v, i) => findSecrets(v, `${at}[${i}]`));
+    }
+    if (typeof document !== "object" || document === null)
+        return [];
+    const findings = [];
+    for (const [key, value] of Object.entries(document)) {
+        const path = at.length === 0 ? key : `${at}.${key}`;
+        // A key named `token` with ANY content is the finding — there is no value of
+        // that field a package may carry, and wrapping it in an object
+        // (`token: { value: … }`) does not make it a different field.
+        if (SECRET_KEYS.test(key) && !isEmpty(value)) {
+            findings.push({ at: path, what: `un campo '${key}'` });
+            continue;
+        }
+        findings.push(...findSecrets(value, path));
+    }
+    return findings;
+}
+export function secretFailures(document, artifact) {
+    return findSecrets(document).map((finding) => ({
+        code: "DESIGN_SECRET_PRESENT",
+        artifact,
+        message: `'${finding.at}' parece contener ${finding.what}`,
+        action: "un package registra la CLASIFICACIÓN de acceso, nunca la credencial: quitala y rotala, ya está en el historial de git",
+    }));
+}
+function isEmpty(value) {
+    if (value === null || value === undefined)
+        return true;
+    if (typeof value === "string")
+        return value.trim().length === 0;
+    if (Array.isArray(value))
+        return value.length === 0;
+    if (typeof value === "object")
+        return Object.keys(value).length === 0;
+    return false;
+}
+//# sourceMappingURL=secrets.js.map

package/dist/domain/design/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/domain/design/secrets.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AAEH,4EAA4E;AAC5E,MAAM,WAAW,GACf,2MAA2M,CAAC;AAE9M,2EAA2E;AAC3E,MAAM,aAAa,GAA0C;IAC3D,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC7E,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACtE,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACxE,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACvE,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC/D,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,aAAa,EAAE;IACxD,4EAA4E;IAC5E,gFAAgF;IAChF,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAClE,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAClE,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACpE,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC1E,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC3E,EAAE,IAAI,EAAE,iEAAiE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3F,EAAE,IAAI,EAAE,8CAA8C,EAAE,IAAI,EAAE,2BAA2B,EAAE;IAC3F,8EAA8E;IAC9E;QACE,IAAI,EAAE,8CAA8C;QACpD,IAAI,EAAE,kCAAkC;KACzC;CACF,CAAC;AAQF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAAiB,EAAE,EAAE,GAAG,EAAE;IACpD,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAEjE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC;QACpD,6EAA6E;QAC7E,+DAA+D;QAC/D,8DAA8D;QAC9D,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,GAAG,GAAG,EAAE,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAiB,EAAE,QAAgB;IAChE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,EAAE,uBAAuB;QAC7B,QAAQ;QACR,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,qBAAqB,OAAO,CAAC,IAAI,EAAE;QAC1D,MAAM,EACJ,uHAAuH;KAC1H,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/domain/design/sources.js

@@ -0,0 +1,180 @@
+/**
+ * What `design` accepts as a source, and what happens to each one.
+ *
+ * The envelope already carries WHICH inputs an invocation declared and where
+ * they came from — that is the capability contract's job, and it is not redone
+ * here. What this module owns is the design domain's half: which KINDS of
+ * source v1 can actually read, what a reading produced, and what it costs when
+ * one of them could not be read.
+ *
+ * The disposition vocabulary is five values because the four ways a source can
+ * fail to contribute are not the same problem for whoever has to fix it:
+ * `skipped` is a decision, `unsupported` is a format nobody promised,
+ * `unavailable` is something that should have been there and was not, and
+ * `redacted` is a deliberate withholding. Collapsing them into "not used" would
+ * make the receipt say four different things with one word.
+ *
+ * The consequence is fail-closed on purpose: a source that did not contribute
+ * blocks `handoff` unless someone states, in writing, why the design does not
+ * need it. A design that silently dropped a requirements document and still
+ * declared itself ready for implementation is precisely the failure the
+ * provenance exists to prevent.
+ */
+/**
+ * The v1 source catalog. Binary documents are read by the HOST's multimodal
+ * capability — the CLI ships no PDF, DOCX or PPTX parser — so what this list
+ * declares is what the domain KNOWS HOW TO ACCOUNT FOR, not what the CLI can
+ * decode by itself.
+ */
+export const DESIGN_SOURCE_KINDS = [
+    "markdown",
+    "image",
+    "pdf",
+    "docx",
+    "pptx",
+    /** Conversation or attachments the host exposed, passed in explicitly. */
+    "host_context",
+    /** An existing UI Design Package, by identity. */
+    "package",
+    /** A provider reference (`file_key`, `project_id`, an artifact id…). */
+    "provider_locator",
+];
+export const SOURCE_DISPOSITIONS = [
+    /** Read, and its content reached the design. */
+    "used",
+    /** Deliberately not read. A decision, and it carries its reason. */
+    "skipped",
+    /** A format v1 does not accept — including every retired UI format. */
+    "unsupported",
+    /** It should have been readable and was not: missing, corrupt, unreachable. */
+    "unavailable",
+    /** Withheld on purpose: sensitive, and the invocation did not authorize it. */
+    "redacted",
+];
+/** Extension → kind, for the locators that carry one. */
+const BY_EXTENSION = new Map([
+    ["md", "markdown"],
+    ["markdown", "markdown"],
+    ["txt", "markdown"],
+    ["png", "image"],
+    ["jpg", "image"],
+    ["jpeg", "image"],
+    ["webp", "image"],
+    ["gif", "image"],
+    ["svg", "image"],
+    ["pdf", "pdf"],
+    ["docx", "docx"],
+    ["pptx", "pptx"],
+]);
+/**
+ * Classify a locator by what it looks like. Returns null when nothing in the
+ * catalog matches — which the caller reports as `unsupported`, never as a guess.
+ */
+export function classifySource(locator) {
+    const trimmed = locator.trim();
+    if (trimmed.length === 0)
+        return null;
+    if (/^DES-(?:[0-9]{3}|[1-9][0-9]{3,})(?:@r[1-9][0-9]{0,5})?$/.test(trimmed))
+        return "package";
+    if (/^[a-z][a-z0-9+.-]*:\/\//.test(trimmed))
+        return "provider_locator";
+    const extension = trimmed.split(".").pop()?.toLowerCase() ?? "";
+    return BY_EXTENSION.get(extension) ?? null;
+}
+/**
+ * Judge a set of sources: shape first, then consequence.
+ *
+ * A malformed record is a failure of the caller, not of the design — a source
+ * that says it was skipped and does not say why cannot be reported at all, so
+ * it is refused here rather than reaching a receipt that would read as if
+ * nothing had been dropped.
+ */
+export function reportSources(sources, artifact) {
+    const failures = [];
+    for (const source of sources) {
+        if (source.disposition !== "used" && (source.reason ?? "").trim().length === 0) {
+            failures.push({
+                code: "DESIGN_SOURCE_WITHOUT_REASON",
+                artifact,
+                message: `la fuente '${source.name}' quedó '${source.disposition}' y no dice por qué`,
+                action: "declará la causa: una fuente descartada en silencio es una decisión invisible",
+            });
+        }
+        if (!source.essential && (source.reason ?? "").trim().length === 0) {
+            failures.push({
+                code: "DESIGN_SOURCE_OPTIONAL_WITHOUT_REASON",
+                artifact,
+                message: `la fuente '${source.name}' se declara no esencial sin justificarlo`,
+                action: "explicá por qué el diseño se sostiene sin ella, o dejala como esencial",
+            });
+        }
+    }
+    const omitted = sources.filter((s) => s.disposition !== "used");
+    return {
+        sources: [...sources],
+        omitted,
+        blocksHandoff: omitted.some((s) => s.essential),
+        failures,
+    };
+}
+/**
+ * The gap an omission leaves behind.
+ *
+ * Actionable on purpose: it names the source, its disposition and its reason,
+ * so the person reading the receipt knows what to go get rather than that
+ * "something" was missing.
+ */
+export function handoffGapsFrom(report) {
+    return report.omitted
+        .filter((s) => s.essential)
+        .map((s) => 
+    // The LOCATOR, not just the input name: several sources arrive under one
+    // declared input, so "the essential source 'sources' is missing" tells
+    // nobody which file to go and get.
+    `la fuente esencial '${s.locator}' (${s.kind}, input '${s.name}') quedó '${s.disposition}': ${s.reason ?? "sin causa"} — conseguila o declarala no esencial con su razón`);
+}
+export function planOriginalCopy(sources, request, artifact) {
+    const byName = new Map(sources.map((s) => [s.name, s]));
+    const copy = [];
+    for (const name of request.approved) {
+        const source = byName.get(name);
+        if (source === undefined) {
+            return {
+                ok: false,
+                failure: {
+                    code: "DESIGN_SOURCE_COPY_UNKNOWN",
+                    artifact,
+                    message: `se autorizó copiar '${name}' y no hay ninguna fuente con ese nombre`,
+                    action: `nombrá una de: ${[...byName.keys()].join(", ") || "(ninguna)"}`,
+                },
+            };
+        }
+        // Copying a source the run never managed to read would put a file in the
+        // package that nothing in the design derives from.
+        if (source.disposition !== "used") {
+            return {
+                ok: false,
+                failure: {
+                    code: "DESIGN_SOURCE_COPY_UNUSED",
+                    artifact,
+                    message: `'${name}' quedó '${source.disposition}' y no se copia al package`,
+                    action: "copiá solo fuentes que el diseño usó de verdad",
+                },
+            };
+        }
+        if (source.sensitivity === "sensitive") {
+            return {
+                ok: false,
+                failure: {
+                    code: "DESIGN_SOURCE_COPY_SENSITIVE",
+                    artifact,
+                    message: `'${name}' está clasificada sensible: no entra al package`,
+                    action: "desclasificala explícitamente o dejá solo su proveniencia",
+                },
+            };
+        }
+        copy.push(source);
+    }
+    return { ok: true, copy };
+}
+//# sourceMappingURL=sources.js.map

package/dist/domain/design/sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../../src/domain/design/sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU;IACV,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,0EAA0E;IAC1E,cAAc;IACd,kDAAkD;IAClD,SAAS;IACT,wEAAwE;IACxE,kBAAkB;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,gDAAgD;IAChD,MAAM;IACN,oEAAoE;IACpE,SAAS;IACT,uEAAuE;IACvE,aAAa;IACb,+EAA+E;IAC/E,aAAa;IACb,+EAA+E;IAC/E,UAAU;CACF,CAAC;AA4BX,yDAAyD;AACzD,MAAM,YAAY,GAA0C,IAAI,GAAG,CAAC;IAClE,CAAC,IAAI,EAAE,UAAU,CAAC;IAClB,CAAC,UAAU,EAAE,UAAU,CAAC;IACxB,CAAC,KAAK,EAAE,UAAU,CAAC;IACnB,CAAC,KAAK,EAAE,OAAO,CAAC;IAChB,CAAC,KAAK,EAAE,OAAO,CAAC;IAChB,CAAC,MAAM,EAAE,OAAO,CAAC;IACjB,CAAC,MAAM,EAAE,OAAO,CAAC;IACjB,CAAC,KAAK,EAAE,OAAO,CAAC;IAChB,CAAC,KAAK,EAAE,OAAO,CAAC;IAChB,CAAC,KAAK,EAAE,KAAK,CAAC;IACd,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,yDAAyD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9F,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AAC7C,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgC,EAAE,QAAgB;IAC9E,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,8BAA8B;gBACpC,QAAQ;gBACR,OAAO,EAAE,cAAc,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,WAAW,qBAAqB;gBACrF,MAAM,EAAE,+EAA+E;aACxF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uCAAuC;gBAC7C,QAAQ;gBACR,OAAO,EAAE,cAAc,MAAM,CAAC,IAAI,2CAA2C;gBAC7E,MAAM,EAAE,wEAAwE;aACjF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC;IAChE,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;QACrB,OAAO;QACP,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/C,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,OAAO,MAAM,CAAC,OAAO;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SAC1B,GAAG,CACF,CAAC,CAAC,EAAE,EAAE;IACJ,yEAAyE;IACzE,uEAAuE;IACvE,mCAAmC;IACnC,uBAAuB,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,MAAM,IAAI,WAAW,oDAAoD,CAC5K,CAAC;AACN,CAAC;AA+BD,MAAM,UAAU,gBAAgB,CAC9B,OAAgC,EAChC,OAA6B,EAC7B,QAAgB;IAEhB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE;oBACP,IAAI,EAAE,4BAA4B;oBAClC,QAAQ;oBACR,OAAO,EAAE,uBAAuB,IAAI,0CAA0C;oBAC9E,MAAM,EAAE,kBAAkB,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE;iBACzE;aACF,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,mDAAmD;QACnD,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE;oBACP,IAAI,EAAE,2BAA2B;oBACjC,QAAQ;oBACR,OAAO,EAAE,IAAI,IAAI,YAAY,MAAM,CAAC,WAAW,4BAA4B;oBAC3E,MAAM,EAAE,gDAAgD;iBACzD;aACF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACvC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE;oBACP,IAAI,EAAE,8BAA8B;oBACpC,QAAQ;oBACR,OAAO,EAAE,IAAI,IAAI,kDAAkD;oBACnE,MAAM,EAAE,2DAA2D;iBACpE;aACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC"}

package/dist/domain/design/validation.js

@@ -0,0 +1,19 @@
+/**
+ * The design side of the shared contract machinery.
+ *
+ * The reader, the closed-object rule and the coverage tracking are generic and
+ * live in `../contract-reader.js`; what is design-specific is the failure CODE
+ * prefix every diagnostic carries (`DESIGN_FIELD_INVALID`, `DESIGN_KEY_UNKNOWN`).
+ * Binding it once here is what lets every design validator keep importing
+ * `Reader` from this module unchanged while the capability descriptor — which
+ * must not depend on `domain/design` — builds on the same machinery under its
+ * own prefix.
+ */
+import { ContractReader } from "../contract-reader.js";
+export { eachRecord, isNonEmptyString, isRecord } from "../contract-reader.js";
+export class Reader extends ContractReader {
+    constructor(allowedKeys) {
+        super("DESIGN", allowedKeys);
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/domain/design/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/domain/design/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAIvD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAI/E,MAAM,OAAO,MAAO,SAAQ,cAAc;IACxC,YAAY,WAAwB;QAClC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC/B,CAAC;CACF"}