@tacuchi/agent-workflow-cli 21.0.0 → 21.1.0

package/dist/application/capability/installed-inventory.js

@@ -0,0 +1,168 @@
+/**
+ * What is ACTUALLY installed, as exact instances.
+ *
+ * The advisory check this replaces compared names. A name is not a thing that
+ * runs: two directories can both be called `design`, and picking one by scan
+ * order is a silent choice nobody made. So the unit here is an instance —
+ * name, scope, the locator of its `SKILL.md`, the locator of its descriptor, its
+ * version and a digest over its bytes — and the two failure modes are kept
+ * apart:
+ *
+ * - **Same name, same digest, several roots.** Equivalent replicas. Every
+ *   locator is kept, because "which copy answered" is still a real question.
+ * - **Same name, different bytes.** `misconfigured`. Not a precedence puzzle to
+ *   resolve — two different things are wearing one name, and no scan order makes
+ *   that safe.
+ *
+ * Only skills that DECLARE a descriptor enter this inventory. An ambient skill —
+ * a linter, a writing convention — is installed and invisible here, which is the
+ * whole content of the opt-in.
+ */
+import { createHash } from "node:crypto";
+import { RETIRED_SKILL_IDENTITIES } from "../../domain/skills.js";
+import { semanticDigest } from "../semantic-operation/protocol.js";
+import { skillRoots } from "../skills-resolver-service.js";
+import { loadDescriptor, readSkillHead } from "./descriptor-loader.js";
+export async function buildCapabilityInventory(fs, env) {
+    const roots = skillRoots(env);
+    const candidates = [];
+    for (const root of roots) {
+        candidates.push(...(await scanRoot(fs, root)));
+    }
+    return { roots, capabilities: group(candidates) };
+}
+async function scanRoot(fs, root) {
+    if (!(await fs.exists(root)))
+        return [];
+    let entries;
+    try {
+        entries = await fs.list(root);
+    }
+    catch {
+        return [];
+    }
+    const found = [];
+    for (const entry of entries) {
+        if (entry.type !== "dir")
+            continue;
+        const head = await readSkillHead(fs, entry.path, entry.name);
+        // No readable head, or no claim at all: an ambient skill. It never becomes a
+        // capability by being installed, so it never enters the inventory.
+        if (head === null || head.locatorValue === null)
+            continue;
+        found.push(await candidateFor(fs, root, entry.path, head));
+    }
+    return found;
+}
+async function candidateFor(fs, root, skillDir, head) {
+    const location = {
+        scope: root,
+        skillDir,
+        skillMd: head.skillMd,
+        descriptorPath: null,
+    };
+    const base = { name: head.name, version: head.version, location, descriptor: null };
+    // A directory wearing a retired name is refused before its descriptor is even
+    // read: the name IS the identity, and honoring it would resurrect the alias
+    // the contract exists to close.
+    const retired = RETIRED_SKILL_IDENTITIES.get(head.name.toLowerCase());
+    if (retired !== undefined) {
+        return {
+            ...base,
+            digest: null,
+            failure: {
+                code: "CAPABILITY_NAME_RETIRED",
+                message: `'${head.name}' está retirado — ${retired}`,
+                action: "renombrá la skill al nombre vigente de la capacidad; no hay alias",
+            },
+        };
+    }
+    const load = await loadDescriptor(fs, skillDir, head);
+    if (load.state !== "loaded") {
+        return {
+            ...base,
+            digest: null,
+            failure: load.state === "invalid" ? load.failure : null,
+        };
+    }
+    return {
+        name: head.name,
+        version: head.version,
+        digest: await instanceDigest(fs, head.skillMd, load.loaded.digest),
+        location: { ...location, descriptorPath: load.loaded.path },
+        descriptor: load.loaded.descriptor,
+        failure: null,
+    };
+}
+/**
+ * The identity of the bytes that would run: the instruction file AND the
+ * contract it points at. Sealing only the descriptor would call two skills
+ * identical while their `SKILL.md` told the host to do different things.
+ */
+async function instanceDigest(fs, skillMd, descriptorDigest) {
+    try {
+        const text = await fs.readText(skillMd);
+        return semanticDigest({
+            skill_md: createHash("sha256").update(text, "utf8").digest("hex"),
+            descriptor: descriptorDigest,
+        });
+    }
+    catch {
+        return null;
+    }
+}
+function group(candidates) {
+    const byName = new Map();
+    for (const candidate of candidates) {
+        byName.set(candidate.name, [...(byName.get(candidate.name) ?? []), candidate]);
+    }
+    const out = [];
+    for (const [name, copies] of byName) {
+        const locations = copies.map((c) => c.location);
+        const broken = copies.find((c) => c.failure !== null);
+        if (broken?.failure != null) {
+            out.push({
+                name,
+                version: broken.version,
+                digest: null,
+                locations,
+                descriptor: null,
+                state: "misconfigured",
+                failure: broken.failure,
+            });
+            continue;
+        }
+        const digests = [...new Set(copies.map((c) => c.digest))];
+        const first = copies[0];
+        if (digests.length > 1) {
+            out.push({
+                name,
+                version: first.version,
+                digest: null,
+                locations,
+                descriptor: null,
+                state: "misconfigured",
+                failure: {
+                    code: "CAPABILITY_INSTANCE_COLLISION",
+                    message: `hay ${copies.length} skills llamadas '${name}' con bytes distintos: ${locations.map((l) => l.skillDir).join(", ")}`,
+                    action: "dejá una sola instalación de ese nombre, o renombrá la que no corresponde: no hay precedencia entre roots",
+                },
+            });
+            continue;
+        }
+        out.push({
+            name,
+            version: first.version,
+            digest: first.digest,
+            locations,
+            descriptor: first.descriptor,
+            state: "ready",
+            failure: null,
+        });
+    }
+    return out.sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
+}
+export function findInstalled(inventory, name) {
+    return inventory.capabilities.find((c) => c.name === name) ?? null;
+}
+//# sourceMappingURL=installed-inventory.js.map

package/dist/application/capability/installed-inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed-inventory.js","sourceRoot":"","sources":["../../../src/application/capability/installed-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAGlE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAsCvE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,EAAkB,EAClB,GAAY;IAEZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,EAAkB,EAAE,IAAY;IACtD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,OAAoD,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,6EAA6E;QAC7E,mEAAmE;QACnE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;YAAE,SAAS;QAC1D,KAAK,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,EAAkB,EAClB,IAAY,EACZ,QAAgB,EAChB,IAAe;IAEf,MAAM,QAAQ,GAAqB;QACjC,KAAK,EAAE,IAAI;QACX,QAAQ;QACR,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,cAAc,EAAE,IAAI;KACrB,CAAC;IACF,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAW,CAAC;IAE7F,8EAA8E;IAC9E,4EAA4E;IAC5E,gCAAgC;IAChC,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE;gBACP,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,qBAAqB,OAAO,EAAE;gBACpD,MAAM,EAAE,mEAAmE;aAC5E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;SACxD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAClE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;QAClC,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC3B,EAAkB,EAClB,OAAe,EACf,gBAAwB;IAExB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,cAAc,CAAC;YACpB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACjE,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,UAAuB;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI;gBACJ,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,IAAI;gBACZ,SAAS;gBACT,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAc,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI;gBACJ,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,IAAI;gBACZ,SAAS;gBACT,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE;oBACP,IAAI,EAAE,+BAA+B;oBACrC,OAAO,EAAE,OAAO,MAAM,CAAC,MAAM,qBAAqB,IAAI,0BAA0B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAC7H,MAAM,EACJ,2GAA2G;iBAC9G;aACF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS;YACT,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,SAA8B,EAC9B,IAAY;IAEZ,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AACrE,CAAC"}

package/dist/application/capability/readiness.js

@@ -0,0 +1,204 @@
+/**
+ * What can be invoked here, in what state, and what to do about it.
+ *
+ * The check this replaces compared names and emitted advice. Readiness answers
+ * the question a person actually has — "can I use this right now, and if not,
+ * why?" — and every state carries its evidence and one next action, because a
+ * status with neither is a puzzle rather than a diagnosis.
+ *
+ * Two things are deliberately kept apart:
+ *
+ * - **Per exposure.** The direct entrypoint and the composed route fail
+ *   independently. A foreign skill squatting the wrapper's name breaks `direct`
+ *   and leaves `compose` running on the floor; collapsing them into one state
+ *   would hide half of that.
+ * - **Per operation.** `off` blocks four operations of `design` and keeps
+ *   `validate` alive. One state for the capability cannot express that.
+ *
+ * The invocation form is read from `HARNESSES` and never inferred. A host with
+ * no verified form says so instead of borrowing another host's syntax.
+ */
+import { join } from "node:path";
+import { HARNESSES } from "../../domain/harnesses.js";
+import { classifyCapabilityBinding } from "../../domain/skills.js";
+import { resolveSkills } from "../skills-resolver-service.js";
+import { capabilityHandler, registeredCapabilities } from "./dispatcher.js";
+import { buildCapabilityInventory } from "./installed-inventory.js";
+import { resolveCapability } from "./resolution.js";
+import { inspectCapabilityDirVia } from "./wrapper.js";
+export async function capabilityReadiness(input) {
+    const skills = await resolveSkills(input.fs, input.paths);
+    const inventory = await buildCapabilityInventory(input.fs, input.env);
+    const reports = [];
+    for (const name of registeredCapabilities()) {
+        const handler = capabilityHandler(name);
+        if (handler === null)
+            continue;
+        const slot = skills.skills[name];
+        const binding = slot === undefined
+            ? { state: "floor_and_improvements", reason: null, action: null }
+            : classifyCapabilityBinding(slot, name);
+        const resolution = resolveCapability({ descriptor: handler.descriptor, binding, inventory });
+        reports.push(await reportFor(input, handler.descriptor, resolution, inventory, {
+            state: resolution.state,
+            reason: resolution.reason,
+            action: resolution.action,
+        }));
+    }
+    return reports;
+}
+async function reportFor(input, descriptor, resolution, inventory, verdict) {
+    const direct = await directVerdict(input, descriptor, verdict);
+    return {
+        capability: descriptor.name,
+        contract_version: descriptor.contract_version,
+        purpose: descriptor.purpose,
+        exposure: descriptor.exposure,
+        ...verdict,
+        floor: {
+            builtin: descriptor.floor.builtin,
+            kind: descriptor.floor.kind,
+            running: resolution.floor,
+        },
+        instance: resolution.selection[0] === undefined
+            ? null
+            : {
+                name: resolution.selection[0].name,
+                scope: resolution.selection[0].scope,
+                locator: resolution.selection[0].locator,
+                version: resolution.selection[0].version,
+                digest: resolution.selection[0].digest,
+            },
+        invocation: invocationFor(input.host, descriptor.name),
+        exposures: {
+            direct: descriptor.exposure.includes("direct")
+                ? direct
+                : { state: "unavailable", reason: "la capacidad no expone la ruta directa", action: null },
+            compose: descriptor.exposure.includes("compose")
+                ? verdict
+                : {
+                    state: "unavailable",
+                    reason: "la capacidad no expone la ruta compuesta",
+                    action: null,
+                },
+        },
+        operations: descriptor.operations.map((op) => {
+            const availability = resolution.operations.find((o) => o.operation === op.name);
+            const blocked = availability !== undefined && !availability.available;
+            return {
+                operation: op.name,
+                exposure: op.exposure,
+                workspace: op.workspace,
+                effects: op.effects.map((e) => e.class),
+                // The capability being `disabled` does NOT make the operation `off`
+                // spared disabled too: saying so would erase exactly the consumption
+                // `off` is required to preserve.
+                state: blocked ? "disabled" : availableState(verdict, resolution.floor),
+                reason: blocked ? availability.reason : verdict.reason,
+                action: blocked ? (resolution.action ?? null) : verdict.action,
+            };
+        }),
+        improvements: inventory.capabilities
+            .filter((c) => c.name !== descriptor.name)
+            .map((c) => eligibility(c, descriptor)),
+    };
+}
+/**
+ * The direct route lives or dies by a real directory on disk.
+ *
+ * A capability can be perfectly resolved and still be unreachable directly
+ * because nobody installed the wrapper — or because someone else's skill holds
+ * the name. Both are states of the ENTRYPOINT, not of the capability, so they
+ * are reported here and nowhere else.
+ */
+async function directVerdict(input, descriptor, verdict) {
+    const harness = HARNESSES.find((h) => h.id === input.host);
+    if (harness === undefined || harness.invocation === null) {
+        return {
+            state: "unavailable",
+            reason: `no hay una forma de invocación verificada para el host '${input.host}'`,
+            action: "usá la ruta compuesta desde un flow, o instalá en un host soportado",
+        };
+    }
+    const root = join(input.env.homeDir(), ...(harness.skillsDirs[0]?.split("/") ?? []));
+    const ownership = await inspectCapabilityDirVia(input.fs, join(root, descriptor.name));
+    if (ownership.state === "foreign") {
+        return {
+            state: "misconfigured",
+            reason: ownership.why,
+            action: `renombrá o quitá esa skill y reinstalá con 'aw self install-skill'`,
+        };
+    }
+    if (ownership.state === "absent") {
+        return {
+            state: "unavailable",
+            reason: `no hay un wrapper '${descriptor.name}' instalado en ${root}`,
+            action: "instalalo con 'aw self install-skill'",
+        };
+    }
+    return verdict;
+}
+/** What an AVAILABLE operation's state is when the capability itself is off. */
+function availableState(verdict, floorRunning) {
+    if (verdict.state !== "disabled")
+        return verdict.state;
+    return floorRunning ? "ready" : "unavailable";
+}
+function invocationFor(host, name) {
+    const harness = HARNESSES.find((h) => h.id === host);
+    const invocation = harness?.invocation ?? null;
+    if (invocation === null) {
+        return {
+            host,
+            kind: "unavailable",
+            form: null,
+            // Saying "unavailable" is the honest answer. Printing another host's
+            // syntax would send a person to type something that does nothing.
+            note: `no hay una forma de invocación verificada para '${host}'`,
+        };
+    }
+    return {
+        host,
+        kind: invocation.kind,
+        form: invocation.template.replace("<name>", name),
+        note: invocation.note,
+    };
+}
+function eligibility(installed, descriptor) {
+    const improves = installed.descriptor?.compatibility.improves ?? null;
+    if (installed.state === "misconfigured") {
+        return {
+            name: installed.name,
+            digest: null,
+            improves: null,
+            eligible: false,
+            why: installed.failure?.message ?? "instancia no identificable",
+        };
+    }
+    if (improves === null || improves.capability !== descriptor.name) {
+        return {
+            name: installed.name,
+            digest: installed.digest,
+            improves: improves?.capability ?? null,
+            eligible: false,
+            why: `no declara mejorar '${descriptor.name}'`,
+        };
+    }
+    if (improves.contract_version !== descriptor.contract_version) {
+        return {
+            name: installed.name,
+            digest: installed.digest,
+            improves: improves.capability,
+            eligible: false,
+            why: `habla la versión de contrato ${improves.contract_version}`,
+        };
+    }
+    return {
+        name: installed.name,
+        digest: installed.digest,
+        improves: improves.capability,
+        eligible: true,
+        why: null,
+    };
+}
+//# sourceMappingURL=readiness.js.map

package/dist/application/capability/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../../src/application/capability/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAKjC,OAAO,EAAE,SAAS,EAA0B,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAInE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAA+C,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACjG,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAgEvD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACtE,MAAM,OAAO,GAAgC,EAAE,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAkC,CAAC,CAAC;QAC/D,MAAM,OAAO,GACX,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,EAAE,KAAK,EAAE,wBAAiC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YAC1E,CAAC,CAAC,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7F,OAAO,CAAC,IAAI,CACV,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE;YAChE,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,KAAqB,EACrB,UAAgC,EAChC,UAAgD,EAChD,SAA8B,EAC9B,OAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/D,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,IAAI;QAC3B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,GAAG,OAAO;QACV,KAAK,EAAE;YACL,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO;YACjC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;YAC3B,OAAO,EAAE,UAAU,CAAC,KAAK;SAC1B;QACD,QAAQ,EACN,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS;YACnC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC;gBACE,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;gBAClC,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK;gBACpC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO;gBACxC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO;gBACxC,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM;aACvC;QACP,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QACtD,SAAS,EAAE;YACT,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC5C,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,wCAAwC,EAAE,MAAM,EAAE,IAAI,EAAE;YAC5F,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC9C,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC;oBACE,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE,0CAA0C;oBAClD,MAAM,EAAE,IAAI;iBACb;SACN;QACD,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAC3C,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;YAChF,MAAM,OAAO,GAAG,YAAY,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;YACtE,OAAO;gBACL,SAAS,EAAE,EAAE,CAAC,IAAI;gBAClB,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;gBACvC,oEAAoE;gBACpE,qEAAqE;gBACrE,iCAAiC;gBACjC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAE,UAAoB,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;gBAClF,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACtD,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;aAC/D,CAAC;QACJ,CAAC,CAAC;QACF,YAAY,EAAE,SAAS,CAAC,YAAY;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,CAAC;aACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa,CAC1B,KAAqB,EACrB,UAAgC,EAChC,OAAyB;IAEzB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,2DAA2D,KAAK,CAAC,IAAI,GAAG;YAChF,MAAM,EAAE,qEAAqE;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,SAAS,CAAC,GAAG;YACrB,MAAM,EAAE,oEAAoE;SAC7E,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,sBAAsB,UAAU,CAAC,IAAI,kBAAkB,IAAI,EAAE;YACrE,MAAM,EAAE,uCAAuC;SAChD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,SAAS,cAAc,CAAC,OAAyB,EAAE,YAAqB;IACtE,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IACvD,OAAO,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC;IAC/C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,IAAI;YACV,qEAAqE;YACrE,kEAAkE;YAClE,IAAI,EAAE,mDAAmD,IAAI,GAAG;SACjE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;QACjD,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,SAAsD,EACtD,UAAgC;IAEhC,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,QAAQ,IAAI,IAAI,CAAC;IACtE,IAAI,SAAS,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,GAAG,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,IAAI,4BAA4B;SAChE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO;YACL,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,QAAQ,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI;YACtC,QAAQ,EAAE,KAAK;YACf,GAAG,EAAE,uBAAuB,UAAU,CAAC,IAAI,GAAG;SAC/C,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,QAAQ,EAAE,QAAQ,CAAC,UAAU;YAC7B,QAAQ,EAAE,KAAK;YACf,GAAG,EAAE,gCAAgC,QAAQ,CAAC,gBAAgB,EAAE;SACjE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,QAAQ,EAAE,QAAQ,CAAC,UAAU;QAC7B,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC"}

package/dist/application/capability/resolution.js

@@ -0,0 +1,264 @@
+/**
+ * What will actually run, and who gets credit for it.
+ *
+ * The resolution answers three questions that used to have no answer at all:
+ * whether the capability is available, whether an improvement contributes, and —
+ * when one does — WHICH exact instance, pinned so it cannot change mid-
+ * conversation. Everything here is built so that the honest answer is always
+ * reachable:
+ *
+ * - **No improvement is the ordinary case, not a degradation.** A machine with
+ *   nothing extra installed runs the floor and reports `ready`. Calling that
+ *   "degraded" would make the normal state look broken and hide the real one.
+ * - **A degradation names its cause and its loss, and attributes nothing.** When
+ *   a selection cannot be identified, the run does not guess who helped; it says
+ *   what it could not verify.
+ * - **A floor is what keeps a missing skill from blocking a flow.** A capability
+ *   a core gate needs declares `floor.builtin`; one that does not may be
+ *   `unavailable`, and then it blocks ITS operations and nothing else.
+ */
+import { findInstalled } from "./installed-inventory.js";
+export function resolveCapability(input) {
+    const { descriptor, binding } = input;
+    const operations = availability(descriptor, binding);
+    if (binding.state === "off") {
+        return {
+            capability: descriptor.name,
+            state: "disabled",
+            // The operations `off` leaves alive still run on the floor. Reporting
+            // `floor: false` here would say nothing implements `validate`, which is
+            // exactly the consumption `off` is required to preserve.
+            floor: descriptor.floor.builtin && operations.some((o) => o.available),
+            selection: [],
+            degradations: [],
+            operations,
+            reason: binding.reason,
+            action: `para reactivarla, quitá el binding o ponelo en '${descriptor.name}'`,
+        };
+    }
+    if (binding.state === "misconfigured") {
+        return degradeToFloor(input, operations, {
+            cause: "invalid_binding",
+            loss: binding.reason ?? "el binding no selecciona una instancia identificable",
+            action: binding.action,
+        });
+    }
+    const contributors = input.hostSelection?.contributors ?? [];
+    if (descriptor.floor.improvements === "none" || contributors.length === 0) {
+        // Nothing extra selected. Not a loss — there was nothing to lose.
+        return floorOnly(descriptor, operations);
+    }
+    const verified = verifyContributors(input, contributors);
+    if (verified.degradation !== null) {
+        return degradeToFloor(input, operations, {
+            cause: verified.degradation.cause,
+            loss: verified.degradation.loss,
+            action: verified.degradation.action,
+        });
+    }
+    return {
+        capability: descriptor.name,
+        state: "ready",
+        floor: false,
+        selection: verified.selection,
+        degradations: [],
+        operations,
+        reason: null,
+        action: null,
+    };
+}
+function availability(descriptor, binding) {
+    return descriptor.operations.map((op) => operationState(op, binding));
+}
+function operationState(op, binding) {
+    if (binding.state === "off" && op.off === "blocked") {
+        return {
+            operation: op.name,
+            available: false,
+            // `off` is not reverted by a host, a wrapper or a legacy name; the only
+            // way back is the binding itself.
+            reason: "la capacidad está en off y esta operación queda bloqueada",
+        };
+    }
+    return { operation: op.name, available: true, reason: null };
+}
+function floorOnly(descriptor, operations) {
+    if (descriptor.floor.builtin) {
+        return {
+            capability: descriptor.name,
+            state: "ready",
+            floor: true,
+            selection: [],
+            degradations: [],
+            operations,
+            reason: null,
+            action: null,
+        };
+    }
+    // Feature-only with nothing installed. It blocks ITS operations — the flows
+    // that never asked for it keep working, which is the whole isolation rule.
+    return {
+        capability: descriptor.name,
+        state: "unavailable",
+        floor: false,
+        selection: [],
+        degradations: [],
+        operations: operations.map((o) => ({
+            operation: o.operation,
+            available: false,
+            reason: `'${descriptor.name}' no tiene floor incorporado y no hay ninguna instancia conformante`,
+        })),
+        reason: `'${descriptor.name}' es una capacidad sin floor y no hay implementación instalada`,
+        action: `instalá una skill conformante con '${descriptor.name}' o dejá de invocar esa feature`,
+    };
+}
+/**
+ * Fall back — but only where falling back is safe.
+ *
+ * With a built-in floor the run continues and the receipt carries the cause and
+ * the loss. Without one there is nothing safe to fall to, so the resolution says
+ * `misconfigured` instead of quietly producing a lesser result under the same
+ * name.
+ */
+function degradeToFloor(input, operations, seed) {
+    const { descriptor } = input;
+    const degradations = [{ cause: seed.cause, loss: seed.loss }];
+    const declared = descriptor.degradations.some((d) => d.cause === seed.cause);
+    if (!descriptor.floor.builtin || !declared) {
+        return {
+            capability: descriptor.name,
+            state: "misconfigured",
+            floor: false,
+            selection: [],
+            degradations,
+            operations: operations.map((o) => ({ ...o, available: false, reason: seed.loss })),
+            reason: seed.loss,
+            action: seed.action ?? `revisá la configuración de '${descriptor.name}'`,
+        };
+    }
+    return {
+        capability: descriptor.name,
+        state: "degraded",
+        floor: true,
+        // Empty on purpose: the whole point of the degradation is that nothing
+        // verifiable contributed, so nothing gets credit.
+        selection: [],
+        degradations,
+        operations,
+        reason: seed.loss,
+        action: seed.action ?? "corré la operación con el floor o corregí la selección",
+    };
+}
+function verifyContributors(input, contributors) {
+    const selection = [];
+    const ordered = [...contributors].sort((a, b) => a.order - b.order);
+    for (const contributor of ordered) {
+        const installed = findInstalled(input.inventory, contributor.name);
+        const problem = identify(input, contributor, installed);
+        if (problem !== null)
+            return { selection: [], degradation: problem };
+        const instance = installed;
+        const location = instance.locations.find((l) => l.skillDir === contributor.locator) ?? instance.locations[0];
+        selection.push({
+            name: instance.name,
+            scope: location?.scope ?? "",
+            locator: location?.skillDir ?? "",
+            version: instance.version,
+            digest: instance.digest,
+            order: contributor.order,
+        });
+    }
+    return { selection, degradation: null };
+}
+/** Everything that can stop a declared contributor from being a real one. */
+function identify(input, contributor, installed) {
+    if (installed === null) {
+        return {
+            cause: "opaque_selection",
+            loss: `el host declaró '${contributor.name}' y no hay ninguna instancia instalada con ese nombre`,
+            action: "instalá la skill declarada, o quitala de la selección del host",
+        };
+    }
+    if (installed.state === "misconfigured" || installed.digest === null) {
+        return {
+            cause: "opaque_selection",
+            loss: installed.failure?.message ?? `'${contributor.name}' no identifica una instancia exacta`,
+            action: installed.failure?.action ?? "dejá una sola instalación de ese nombre",
+        };
+    }
+    // Equivalent replicas are the same BYTES, not the same install. A name-only
+    // selection among several roots still cannot say which copy answered, and
+    // picking the first would be exactly the silent precedence there must not be.
+    const locators = installed.locations.map((l) => l.skillDir);
+    if (locators.length > 1 && !locators.includes(contributor.locator ?? "")) {
+        return {
+            cause: "opaque_selection",
+            loss: `'${contributor.name}' está instalada en ${locators.length} raíces y la selección no dice cuál contribuyó`,
+            action: `declará el locator de la instancia (${locators.join(", ")}), o dejá una sola instalación`,
+        };
+    }
+    if (contributor.digest != null && contributor.digest !== installed.digest) {
+        return {
+            cause: "digest_changed",
+            loss: `'${contributor.name}' cambió de bytes entre la selección del host y el inventario`,
+            action: "volvé a resolver la capacidad: la instancia dejó de ser la que se fijó",
+        };
+    }
+    return compatible(input, contributor, installed);
+}
+/**
+ * Installed is not compatible. The claim has to come from the improvement's own
+ * descriptor and has to match the capability being resolved — the operation
+ * included, because improving `render` says nothing about `create`.
+ */
+function compatible(input, contributor, installed) {
+    const improves = installed.descriptor?.compatibility.improves ?? null;
+    const reject = (why) => ({
+        cause: "incompatible_improvement",
+        loss: `'${contributor.name}' ${why}`,
+        action: `corregí 'compatibility.improves' de '${contributor.name}', o sacala de la selección`,
+    });
+    if (improves === null) {
+        return reject(`no declara mejorar a '${input.descriptor.name}'`);
+    }
+    if (improves.capability !== input.descriptor.name) {
+        return reject(`declara mejorar a '${improves.capability}', no a '${input.descriptor.name}'`);
+    }
+    if (improves.contract_version !== input.descriptor.contract_version) {
+        return reject(`habla la versión de contrato ${improves.contract_version} y esta capacidad es la ${input.descriptor.contract_version}`);
+    }
+    const operation = input.operation ?? null;
+    if (operation !== null && !improves.operations.includes(operation)) {
+        return reject(`no declara mejorar la operación '${operation}'`);
+    }
+    return null;
+}
+export function pinSelection(resolution, descriptor) {
+    return {
+        capability: resolution.capability,
+        contract_version: descriptor.contract_version,
+        floor: resolution.floor,
+        instances: resolution.selection.map((s) => ({
+            name: s.name,
+            digest: s.digest,
+            order: s.order,
+        })),
+    };
+}
+export function checkPin(pin, inventory) {
+    for (const instance of pin.instances) {
+        const installed = findInstalled(inventory, instance.name);
+        if (installed?.digest === instance.digest)
+            continue;
+        return {
+            ok: false,
+            degradation: {
+                cause: "digest_changed",
+                loss: `'${instance.name}' ya no son los bytes que se fijaron al empezar la invocación`,
+            },
+            action: "volvé a empezar la invocación: la selección fijada dejó de existir tal cual",
+        };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=resolution.js.map