@tiangong-ai/cli 0.0.32 → 0.0.34

package/dist/research/workspace/downloads.js

@@ -0,0 +1,274 @@
+import { randomUUID } from "node:crypto";
+import { chmod, lstat, readFile } from "node:fs/promises";
+import { basename, join, relative, resolve, sep } from "node:path";
+import { CliError } from "../../errors.js";
+import { appendEvidenceLedgerEvent, evidenceLedgerPath, listEvidenceCandidates, } from "./evidence-ledger.js";
+import { readJournal } from "./journal.js";
+import { sanitizeResearchText, sanitizeResearchValue } from "./sanitization.js";
+import { canonicalJson, isObject, pathExists, readJsonFile, resolveContained, sha256File, sha256Text, workspacePaths, writeJsonAtomic, } from "./storage.js";
+import { loadWorkspaceConfig } from "./workspace.js";
+const IDENTIFIER = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+const SENSITIVE_QUERY_KEY = /^(?:access[_-]?token|api[_-]?key|apikey|auth|authorization|awsaccesskeyid|code|cookie|credential|key|password|secret|session(?:[_-]?id)?|sig|signature|token|x[_-]amz[_-](?:credential|security[_-]?token|signature)|x[_-]goog[_-](?:credential|signature))$/i;
+const TRACKING_QUERY_KEY = /^(?:utm_[a-z0-9_]+|fbclid|gclid|mc_cid|mc_eid|ref|source)$/i;
+export const downloadBindingRecordSchema = {
+    $id: "https://schemas.tiangong.ai/research/download-binding-input-v1.json",
+    type: "object",
+    additionalProperties: false,
+    required: ["schemaVersion", "backend", "status", "downloadUrl"],
+    properties: {
+        schemaVersion: { type: "integer", const: 1 },
+        backend: {
+            type: "string",
+            enum: ["native-browser", "chrome", "cloakbrowser", "skill-adapter", "direct-http"],
+        },
+        status: { type: "string", enum: ["completed", "failed", "cancelled"] },
+        path: { type: "string" },
+        downloadUrl: { type: "string", format: "uri" },
+        suggestedFilename: { type: "string", maxLength: 500 },
+        downloadIdentifier: { type: "string", maxLength: 1_000 },
+        failureCode: { type: "string", pattern: "^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
+    },
+};
+export async function bindEvidenceDownload(input) {
+    const value = sanitizeResearchValue(input.value);
+    if (!isObject(value))
+        throw downloadError("Download binding input must be a JSON object.");
+    const allowed = new Set([
+        "schemaVersion",
+        "backend",
+        "status",
+        "path",
+        "downloadUrl",
+        "suggestedFilename",
+        "downloadIdentifier",
+        "failureCode",
+    ]);
+    const unknown = Object.keys(value).filter((key) => !allowed.has(key));
+    const backends = [
+        "native-browser",
+        "chrome",
+        "cloakbrowser",
+        "skill-adapter",
+        "direct-http",
+    ];
+    const statuses = ["completed", "failed", "cancelled"];
+    if (unknown.length ||
+        value.schemaVersion !== 1 ||
+        !backends.includes(value.backend) ||
+        !statuses.includes(value.status) ||
+        typeof value.downloadUrl !== "string" ||
+        (value.suggestedFilename !== undefined &&
+            (typeof value.suggestedFilename !== "string" || value.suggestedFilename.length > 500)) ||
+        (value.downloadIdentifier !== undefined &&
+            (typeof value.downloadIdentifier !== "string" || value.downloadIdentifier.length > 1_000)) ||
+        (value.failureCode !== undefined &&
+            (typeof value.failureCode !== "string" || !IDENTIFIER.test(value.failureCode)))) {
+        throw downloadError("Download binding input failed validation.");
+    }
+    const backend = value.backend;
+    const status = value.status;
+    const downloadUrl = safeDownloadUrl(value.downloadUrl);
+    await requireActiveAcquisition(input.root, input.projectId, input.candidateId);
+    if (status !== "completed") {
+        if (value.path !== undefined) {
+            throw downloadError("Failed or cancelled downloads must not claim a completed file path.");
+        }
+        const failureCode = typeof value.failureCode === "string" ? value.failureCode : `download-${status}`;
+        await appendEvidenceLedgerEvent(input.root, input.projectId, "download.failed", {
+            eventId: `download-event-${randomUUID()}`,
+            candidateId: input.candidateId,
+            backend,
+            status,
+            downloadUrl,
+            failureCode,
+            recordedAt: new Date().toISOString(),
+        });
+        return {
+            status,
+            binding: null,
+            nextAction: "Stop acquisition for this attempt, report the failure, and do not register an artifact or submit a successful acquisition decision.",
+        };
+    }
+    if (typeof value.path !== "string") {
+        throw downloadError("A completed download requires one explicit absolute file path.");
+    }
+    const sourcePath = requireExactExternalPath(input.root, value.path);
+    const [info, config] = await Promise.all([
+        lstat(sourcePath).catch(() => undefined),
+        loadWorkspaceConfig(input.root),
+    ]);
+    if (!info?.isFile() || info.isSymbolicLink()) {
+        throw downloadError("Downloaded file must be one existing regular non-symlink file.");
+    }
+    if (info.size < 1 || info.size > config.budget.maxBytesPerPackage) {
+        throw downloadError(`Downloaded file size must be 1-${config.budget.maxBytesPerPackage} bytes.`);
+    }
+    const fileSha256 = await sha256File(sourcePath);
+    const core = {
+        schemaVersion: 1,
+        bindingId: `download-${sha256Text(canonicalJson({ candidateId: input.candidateId, backend, fileSha256 })).slice(0, 24)}`,
+        projectId: input.projectId,
+        candidateId: input.candidateId,
+        backend,
+        status: "completed",
+        fileSha256,
+        fileBytes: info.size,
+        filePathSha256: sha256Text(sourcePath),
+        downloadUrl,
+        suggestedFilename: typeof value.suggestedFilename === "string"
+            ? safeFilename(value.suggestedFilename)
+            : safeFilename(basename(sourcePath)),
+        downloadIdentifierSha256: typeof value.downloadIdentifier === "string"
+            ? sha256Text(sanitizeResearchText(value.downloadIdentifier))
+            : null,
+        boundAt: new Date().toISOString(),
+    };
+    const binding = {
+        ...core,
+        bindingSha256: sha256Text(canonicalJson(core)),
+    };
+    const recordPath = downloadBindingPath(input.root, input.projectId, binding.bindingId);
+    if (await pathExists(recordPath)) {
+        const existing = parseEvidenceDownloadBinding(JSON.parse(await readFile(recordPath, "utf8")));
+        if (existing.fileSha256 !== binding.fileSha256 ||
+            existing.filePathSha256 !== binding.filePathSha256 ||
+            existing.candidateId !== binding.candidateId) {
+            throw downloadError("Download binding identity collides with different file provenance.");
+        }
+        await ensureBoundEvent(input.root, input.projectId, existing);
+        return { status: "completed", binding: existing };
+    }
+    await writeJsonAtomic(recordPath, binding, 0o444);
+    await chmod(recordPath, 0o444).catch(() => undefined);
+    await ensureBoundEvent(input.root, input.projectId, binding);
+    return { status: "completed", binding };
+}
+async function ensureBoundEvent(root, projectId, binding) {
+    const events = await readJournal(evidenceLedgerPath(root, projectId));
+    if (events.some((event) => event.type === "download.bound" &&
+        event.payload.bindingId === binding.bindingId &&
+        event.payload.bindingSha256 === binding.bindingSha256)) {
+        return;
+    }
+    await appendEvidenceLedgerEvent(root, projectId, "download.bound", {
+        bindingId: binding.bindingId,
+        bindingSha256: binding.bindingSha256,
+        candidateId: binding.candidateId,
+        backend: binding.backend,
+        fileSha256: binding.fileSha256,
+        fileBytes: binding.fileBytes,
+        downloadUrl: binding.downloadUrl,
+        suggestedFilename: binding.suggestedFilename,
+        downloadIdentifierSha256: binding.downloadIdentifierSha256,
+        boundAt: binding.boundAt,
+    });
+}
+export async function loadAndVerifyDownloadBinding(input) {
+    if (!/^download-[0-9a-f]{24}$/.test(input.bindingId)) {
+        throw downloadError("Download binding ID is invalid.");
+    }
+    const sourcePath = requireExactExternalPath(input.root, input.path);
+    const binding = parseEvidenceDownloadBinding(JSON.parse(await readFile(downloadBindingPath(input.root, input.projectId, input.bindingId), "utf8")));
+    const info = await lstat(sourcePath).catch(() => undefined);
+    if (binding.projectId !== input.projectId ||
+        binding.candidateId !== input.candidateId ||
+        binding.filePathSha256 !== sha256Text(sourcePath) ||
+        !info?.isFile() ||
+        info.isSymbolicLink() ||
+        info.size !== binding.fileBytes ||
+        (await sha256File(sourcePath)) !== binding.fileSha256) {
+        throw downloadError("Downloaded file no longer matches its exact event binding.");
+    }
+    return binding;
+}
+export function parseEvidenceDownloadBinding(value) {
+    if (!isObject(value) ||
+        value.schemaVersion !== 1 ||
+        typeof value.bindingId !== "string" ||
+        !/^download-[0-9a-f]{24}$/.test(value.bindingId) ||
+        typeof value.projectId !== "string" ||
+        typeof value.candidateId !== "string" ||
+        !["native-browser", "chrome", "cloakbrowser", "skill-adapter", "direct-http"].includes(String(value.backend)) ||
+        value.status !== "completed" ||
+        typeof value.fileSha256 !== "string" ||
+        !/^[0-9a-f]{64}$/.test(value.fileSha256) ||
+        !Number.isInteger(value.fileBytes) ||
+        typeof value.filePathSha256 !== "string" ||
+        !/^[0-9a-f]{64}$/.test(value.filePathSha256) ||
+        typeof value.downloadUrl !== "string" ||
+        (value.suggestedFilename !== null && typeof value.suggestedFilename !== "string") ||
+        (value.downloadIdentifierSha256 !== null &&
+            (typeof value.downloadIdentifierSha256 !== "string" ||
+                !/^[0-9a-f]{64}$/.test(value.downloadIdentifierSha256))) ||
+        typeof value.boundAt !== "string" ||
+        typeof value.bindingSha256 !== "string" ||
+        !/^[0-9a-f]{64}$/.test(value.bindingSha256)) {
+        throw downloadError("Download binding record is malformed.");
+    }
+    const { bindingSha256, ...core } = value;
+    if (sha256Text(canonicalJson(core)) !== bindingSha256) {
+        throw downloadError("Download binding record failed its hash binding.");
+    }
+    return value;
+}
+async function requireActiveAcquisition(root, projectId, candidateId) {
+    const [project, candidates] = await Promise.all([
+        readJsonFile(join(workspacePaths(root).projects, projectId, "project.json"), `Research project ${projectId}`),
+        listEvidenceCandidates(root, projectId),
+    ]);
+    const packages = Array.isArray(project.packages) ? project.packages : [];
+    const acquire = packages.find((workPackage) => isObject(workPackage) &&
+        workPackage.stage === "acquire" &&
+        workPackage.status === "running" &&
+        workPackage.executor === "producer");
+    if (!acquire) {
+        throw downloadError("Download binding is allowed only during active native acquisition.");
+    }
+    if (!candidates.some((candidate) => candidate.id === candidateId)) {
+        throw downloadError(`Download binding refers to unknown candidate ${candidateId}.`);
+    }
+}
+function requireExactExternalPath(root, path) {
+    const selected = resolve(path);
+    if (selected !== path)
+        throw downloadError("Downloaded file path must be absolute and normalized.");
+    const controlRoot = resolve(workspacePaths(root).control);
+    if (!relative(controlRoot, selected).startsWith(`..${sep}`) && selected !== controlRoot) {
+        throw downloadError("Downloaded file must be an explicit staging file outside control state.");
+    }
+    return selected;
+}
+function safeDownloadUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw downloadError("Download URL is invalid.");
+    }
+    if (url.protocol !== "https:")
+        throw downloadError("Download URL must use HTTPS.");
+    url.username = "";
+    url.password = "";
+    url.hash = "";
+    for (const key of [...url.searchParams.keys()]) {
+        if (SENSITIVE_QUERY_KEY.test(key) || TRACKING_QUERY_KEY.test(key)) {
+            url.searchParams.delete(key);
+        }
+    }
+    url.searchParams.sort();
+    return url.toString();
+}
+function safeFilename(value) {
+    const filename = sanitizeResearchText(basename(value))
+        .replace(/[\r\n\0]/g, "")
+        .trim();
+    return filename ? filename.slice(0, 500) : null;
+}
+function downloadBindingPath(root, projectId, bindingId) {
+    return resolveContained(workspacePaths(root).projects, `${projectId}/evidence/downloads/${bindingId}.json`);
+}
+function downloadError(message) {
+    return new CliError(message, { code: "RESEARCH_DOWNLOAD_BINDING_INVALID", exitCode: 3 });
+}
+//# sourceMappingURL=downloads.js.map

package/dist/research/workspace/downloads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"downloads.js","sourceRoot":"","sources":["../../../src/research/workspace/downloads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEnE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EACL,aAAa,EACb,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,cAAc,EACd,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,UAAU,GAAG,qCAAqC,CAAC;AACzD,MAAM,mBAAmB,GACvB,+PAA+P,CAAC;AAClQ,MAAM,kBAAkB,GAAG,6DAA6D,CAAC;AAEzF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,GAAG,EAAE,qEAAqE;IAC1E,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC;IAC/D,UAAU,EAAE;QACV,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QAC5C,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,CAAC;SACnF;QACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE;QACtE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;QAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;QACrD,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;QACxD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,qCAAqC,EAAE;KAChF;CACO,CAAC;AAmBX,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAK1C;IAIC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,aAAa,CAAC,+CAA+C,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,eAAe;QACf,SAAS;QACT,QAAQ;QACR,MAAM;QACN,aAAa;QACb,mBAAmB;QACnB,oBAAoB;QACpB,aAAa;KACd,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG;QACf,gBAAgB;QAChB,QAAQ;QACR,cAAc;QACd,eAAe;QACf,aAAa;KACL,CAAC;IACX,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAU,CAAC;IAC/D,IACE,OAAO,CAAC,MAAM;QACd,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAoC,CAAC;QAC9D,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAmC,CAAC;QAC7D,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACpC,CAAC,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACxF,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;YACrC,CAAC,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;QAC5F,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YAC9B,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EACjF,CAAC;QACD,MAAM,aAAa,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAA6C,CAAC;IACpE,MAAM,MAAM,GAAG,KAAK,CAAC,MAA8C,CAAC;IACpE,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/E,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,aAAa,CAAC,qEAAqE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,WAAW,GACf,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC;QACnF,MAAM,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,iBAAiB,EAAE;YAC9E,OAAO,EAAE,kBAAkB,UAAU,EAAE,EAAE;YACzC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO;YACP,MAAM;YACN,WAAW;YACX,WAAW;YACX,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;QACH,OAAO;YACL,MAAM;YACN,OAAO,EAAE,IAAI;YACb,UAAU,EACR,qIAAqI;SACxI,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,aAAa,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACxC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7C,MAAM,aAAa,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAClE,MAAM,aAAa,CACjB,kCAAkC,MAAM,CAAC,MAAM,CAAC,kBAAkB,SAAS,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,CAAU;QACzB,SAAS,EAAE,YAAY,UAAU,CAC/B,aAAa,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CACvE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO;QACP,MAAM,EAAE,WAAoB;QAC5B,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,IAAI;QACpB,cAAc,EAAE,UAAU,CAAC,UAAU,CAAC;QACtC,WAAW;QACX,iBAAiB,EACf,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;YACzC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACvC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxC,wBAAwB,EACtB,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;YAC1C,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAC5D,CAAC,CAAC,IAAI;QACV,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAClC,CAAC;IACF,MAAM,OAAO,GAA4B;QACvC,GAAG,IAAI;QACP,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;KAC/C,CAAC;IACF,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACvF,IAAI,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9F,IACE,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;YAC1C,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;YAClD,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAC5C,CAAC;YACD,MAAM,aAAa,CAAC,oEAAoE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC9D,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,eAAe,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,SAAiB,EACjB,OAAgC;IAEhC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACtE,IACE,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAC/B,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QAC7C,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,CACxD,EACD,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,yBAAyB,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE;QACjE,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;QAC1D,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAMlD;IACC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,aAAa,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,4BAA4B,CAC1C,IAAI,CAAC,KAAK,CACR,MAAM,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAC1F,CACF,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5D,IACE,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACrC,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACzC,OAAO,CAAC,cAAc,KAAK,UAAU,CAAC,UAAU,CAAC;QACjD,CAAC,IAAI,EAAE,MAAM,EAAE;QACf,IAAI,CAAC,cAAc,EAAE;QACrB,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS;QAC/B,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU,EACrD,CAAC;QACD,MAAM,aAAa,CAAC,4DAA4D,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAChD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,QAAQ,CACpF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CACtB;QACD,KAAK,CAAC,MAAM,KAAK,WAAW;QAC5B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACxC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;QAClC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;QACxC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAC5C,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,CAAC,KAAK,CAAC,iBAAiB,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,CAAC;QACjF,CAAC,KAAK,CAAC,wBAAwB,KAAK,IAAI;YACtC,CAAC,OAAO,KAAK,CAAC,wBAAwB,KAAK,QAAQ;gBACjD,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAC3C,CAAC;QACD,MAAM,aAAa,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACzC,IAAI,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QACtD,MAAM,aAAa,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAA2C,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,IAAY,EACZ,SAAiB,EACjB,WAAmB;IAEnB,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,YAAY,CACV,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,EAC9D,oBAAoB,SAAS,EAAE,CAChC;QACD,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAC3B,CAAC,WAAW,EAAE,EAAE,CACd,QAAQ,CAAC,WAAW,CAAC;QACrB,WAAW,CAAC,KAAK,KAAK,SAAS;QAC/B,WAAW,CAAC,MAAM,KAAK,SAAS;QAChC,WAAW,CAAC,QAAQ,KAAK,UAAU,CACtC,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,aAAa,CAAC,oEAAoE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE,CAAC;QAClE,MAAM,aAAa,CAAC,gDAAgD,WAAW,GAAG,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY,EAAE,IAAY;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,QAAQ,KAAK,IAAI;QACnB,MAAM,aAAa,CAAC,uDAAuD,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QACxF,MAAM,aAAa,CAAC,yEAAyE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,aAAa,CAAC,8BAA8B,CAAC,CAAC;IACnF,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACxB,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SACnD,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,IAAI,EAAE,CAAC;IACV,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,SAAiB,EAAE,SAAiB;IAC7E,OAAO,gBAAgB,CACrB,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAC7B,GAAG,SAAS,uBAAuB,SAAS,OAAO,CACpD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,mCAAmC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAC3F,CAAC"}

package/dist/research/workspace/evidence-ledger.d.ts

@@ -0,0 +1,52 @@
+import type { BrokerEvidenceReceipt } from "./evidence.js";
+import type { JournalEvent, ProjectInput } from "./types.js";
+export type EvidenceLedgerEventType = "activity.recorded" | "candidate.discovered" | "candidate.duplicate" | "candidate.assessed" | "candidate.admitted" | "candidate.rejected" | "download.bound" | "download.failed" | "handoff.requested" | "handoff.resolved" | "artifact.registered" | "artifact.assessed" | "snapshot.frozen" | "claim.used" | "review.bound" | "addendum.created" | "project.superseded";
+export interface EvidenceCandidateOrigin {
+    kind: "broker" | "input" | "native";
+    receiptId: string | null;
+    inputId: string | null;
+    capabilityId: string | null;
+    locator: string | null;
+    jsonPointer: string | null;
+    retrievedAt: string;
+}
+export interface EvidenceCandidate {
+    id: string;
+    canonicalKeySha256: string;
+    title: string;
+    url: string | null;
+    doi: string | null;
+    publicationDate: string | null;
+    excerpt: string | null;
+    discoveredAt: string;
+    origin: EvidenceCandidateOrigin;
+    occurrences: EvidenceCandidateOrigin[];
+}
+export declare function evidenceLedgerPath(root: string, projectId: string): string;
+export declare function appendEvidenceLedgerEvent(root: string, projectId: string, type: EvidenceLedgerEventType, payload: Record<string, unknown>): Promise<JournalEvent>;
+export declare function cloneEvidenceLedger(root: string, sourceProjectId: string, targetProjectId: string): Promise<number>;
+export declare function verifyEvidenceLedger(root: string, projectId: string): Promise<{
+    events: number;
+    candidates: number;
+    head: string;
+}>;
+export declare function listEvidenceCandidates(root: string, projectId: string): Promise<EvidenceCandidate[]>;
+export declare function registerBrokerCandidates(input: {
+    root: string;
+    projectId: string;
+    receipt: BrokerEvidenceReceipt;
+    contextBytes: Uint8Array;
+    selectedJsonPointer?: string | null;
+    itemOffset?: number;
+}): Promise<EvidenceCandidate[]>;
+export declare function registerProjectInputCandidates(root: string, projectId: string, inputs: ProjectInput[]): Promise<EvidenceCandidate[]>;
+export declare function registerNativeDiscoveryCandidate(input: {
+    root: string;
+    projectId: string;
+    value: Record<string, unknown>;
+}): Promise<{
+    candidate: EvidenceCandidate;
+    duplicate: boolean;
+    admissionStatus: "supplemental-not-admitted" | "formalized-not-admitted";
+    nextAction: string;
+}>;