@tiangong-ai/cli 0.0.60 → 0.0.62

package/dist/research/workspace/investigation-requirements.js

@@ -0,0 +1,32 @@
+import { CliError } from "../../errors.js";
+import { canonicalJson, isObject, sha256Text } from "./storage.js";
+/** Lightweight derived index shared by intake, review context and portable audit.
+ * It never loads programs/results for requirements without investigation history. */
+export async function investigatedRequirementHashes(projectId, events, readObject) {
+    const hashes = new Set();
+    for (const event of events) {
+        if (event.scope !== projectId ||
+            !["investigation.approved", "investigation.promotion.approved"].includes(event.type))
+            continue;
+        const promotion = event.type === "investigation.promotion.approved";
+        const value = await readObject(promotion ? "investigation-promotions" : "investigations", String(event.payload.recordSha256), "recordSha256");
+        if (!isObject(value) ||
+            value.projectId !== projectId ||
+            value.kind !== (promotion ? "tiangong-investigation-promotion" : "tiangong-investigation") ||
+            !isObject(value.plan) ||
+            value.plan.projectId !== projectId ||
+            value.plan.planSha256 !== event.payload.planSha256 ||
+            typeof value.plan.requirementSha256 !== "string" ||
+            !/^[a-f0-9]{64}$/.test(value.plan.requirementSha256))
+            throw new CliError("Investigation requirement authority is not bound to its committed plan.", { code: "RESEARCH_INVESTIGATION_BINDING_INVALID", exitCode: 3 });
+        const { planSha256, ...core } = value.plan;
+        if (sha256Text(canonicalJson(core)) !== planSha256)
+            throw new CliError("Investigation requirement plan bytes changed.", {
+                code: "RESEARCH_INVESTIGATION_BINDING_INVALID",
+                exitCode: 3,
+            });
+        hashes.add(value.plan.requirementSha256);
+    }
+    return hashes;
+}
+//# sourceMappingURL=investigation-requirements.js.map

package/dist/research/workspace/investigation-requirements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigation-requirements.js","sourceRoot":"","sources":["../../../src/research/workspace/investigation-requirements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAInE;qFACqF;AACrF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAAiB,EACjB,MAA+D,EAC/D,UAA4B;IAE5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IACE,KAAK,CAAC,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,wBAAwB,EAAE,kCAAkC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAEpF,SAAS;QACX,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,UAAU,CAC5B,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,gBAAgB,EACzD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAClC,cAAc,CACf,CAAC;QACF,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChB,KAAK,CAAC,SAAS,KAAK,SAAS;YAC7B,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,wBAAwB,CAAC;YAC1F,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;YAClC,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,OAAO,CAAC,UAAU;YAClD,OAAO,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,QAAQ;YAChD,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAEpD,MAAM,IAAI,QAAQ,CAChB,yEAAyE,EACzE,EAAE,IAAI,EAAE,wCAAwC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChE,CAAC;QACJ,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3C,IAAI,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,UAAU;YAChD,MAAM,IAAI,QAAQ,CAAC,+CAA+C,EAAE;gBAClE,IAAI,EAAE,wCAAwC;gBAC9C,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/research/workspace/investigation-resources.d.ts

@@ -0,0 +1,12 @@
+import { type InvestigationReadStore } from "./investigation-store.js";
+import type { JournalEvent } from "./types.js";
+/** One pass over authoritative facts. A terminal event releases uncertainty,
+ * while actual completed time remains in the recovered project usage. */
+export declare function investigationWallReservations(root: string, projectId: string, events: JournalEvent[], store?: InvestigationReadStore): Promise<{
+    wallSeconds: number;
+    reservations: {
+        kind: "investigation-attempt" | "certification";
+        id: string;
+        wallSeconds: number;
+    }[];
+}>;

package/dist/research/workspace/investigation-resources.js

@@ -0,0 +1,78 @@
+import { CliError } from "../../errors.js";
+import { localInvestigationReadStore } from "./investigation-store.js";
+function invalid() {
+    return new CliError("Unresolved investigation time does not match its committed start.", {
+        code: "RESEARCH_INVESTIGATION_BINDING_INVALID",
+        exitCode: 3,
+    });
+}
+/** One pass over authoritative facts. A terminal event releases uncertainty,
+ * while actual completed time remains in the recovered project usage. */
+export async function investigationWallReservations(root, projectId, events, store = localInvestigationReadStore(root)) {
+    const attempts = new Map(), certifications = new Map();
+    const seen = new Set();
+    for (const event of events) {
+        if (event.scope !== projectId)
+            continue;
+        const attemptKey = `${String(event.payload.investigationId)}\0${String(event.payload.attemptId)}`;
+        if (event.type === "investigation.attempt.started") {
+            const key = `attempt/${attemptKey}`;
+            if (seen.has(key))
+                throw invalid();
+            seen.add(key);
+            attempts.set(attemptKey, event);
+        }
+        else if (event.type === "investigation.attempt.completed") {
+            const start = attempts.get(attemptKey);
+            if (!start || start.payload.recordSha256 !== event.payload.startSha256)
+                throw invalid();
+            attempts.delete(attemptKey);
+        }
+        else if (event.type === "project.task.run.started" &&
+            event.payload.investigationPromotionSha256) {
+            const id = String(event.payload.runId), key = `certification/${id}`;
+            if (seen.has(key))
+                throw invalid();
+            seen.add(key);
+            certifications.set(id, event);
+        }
+        else if (event.type === "project.task.run.completed") {
+            const id = String(event.payload.runId), start = certifications.get(id);
+            if (start) {
+                if (start.payload.requestSha256 !== event.payload.requestSha256)
+                    throw invalid();
+                certifications.delete(id);
+            }
+        }
+    }
+    const reservations = [];
+    for (const event of attempts.values()) {
+        const record = await store.readTask(projectId, "investigation-starts", String(event.payload.recordSha256), "recordSha256");
+        if (record.projectId !== projectId ||
+            record.investigationId !== event.payload.investigationId ||
+            record.attemptId !== event.payload.attemptId ||
+            !Number.isSafeInteger(record.timeoutSeconds) ||
+            record.timeoutSeconds < 1)
+            throw invalid();
+        reservations.push({
+            kind: "investigation-attempt",
+            id: `${record.investigationId}/${record.attemptId}`,
+            wallSeconds: record.timeoutSeconds,
+        });
+    }
+    for (const event of certifications.values()) {
+        const seconds = event.payload.certificationReservedWallSeconds;
+        if (typeof seconds !== "number" || !Number.isSafeInteger(seconds) || seconds < 1)
+            throw invalid();
+        reservations.push({
+            kind: "certification",
+            id: String(event.payload.runId),
+            wallSeconds: seconds,
+        });
+    }
+    const wallSeconds = reservations.reduce((sum, item) => sum + item.wallSeconds, 0);
+    if (!Number.isSafeInteger(wallSeconds))
+        throw invalid();
+    return { wallSeconds, reservations };
+}
+//# sourceMappingURL=investigation-resources.js.map

package/dist/research/workspace/investigation-resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigation-resources.js","sourceRoot":"","sources":["../../../src/research/workspace/investigation-resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,2BAA2B,EAA+B,MAAM,0BAA0B,CAAC;AAGpG,SAAS,OAAO;IACd,OAAO,IAAI,QAAQ,CAAC,mEAAmE,EAAE;QACvF,IAAI,EAAE,wCAAwC;QAC9C,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;AACL,CAAC;AACD;yEACyE;AACzE,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAY,EACZ,SAAiB,EACjB,MAAsB,EACtB,KAAK,GAA2B,2BAA2B,CAAC,IAAI,CAAC;IAEjE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,EAC9C,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACxC,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAClG,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,WAAW,UAAU,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,iCAAiC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW;gBAAE,MAAM,OAAO,EAAE,CAAC;YACxF,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;aAAM,IACL,KAAK,CAAC,IAAI,KAAK,0BAA0B;YACzC,KAAK,CAAC,OAAO,CAAC,4BAA4B,EAC1C,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpC,GAAG,GAAG,iBAAiB,EAAE,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACvD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpC,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,OAAO,CAAC,aAAa;oBAAE,MAAM,OAAO,EAAE,CAAC;gBACjF,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAIb,EAAE,CAAC;IACR,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAKhC,SAAS,EAAE,sBAAsB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC,CAAC;QAC1F,IACE,MAAM,CAAC,SAAS,KAAK,SAAS;YAC9B,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,OAAO,CAAC,eAAe;YACxD,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS;YAC5C,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC;YAC5C,MAAM,CAAC,cAAc,GAAG,CAAC;YAEzB,MAAM,OAAO,EAAE,CAAC;QAClB,YAAY,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,uBAAuB;YAC7B,EAAE,EAAE,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,SAAS,EAAE;YACnD,WAAW,EAAE,MAAM,CAAC,cAAc;SACnC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,gCAAgC,CAAC;QAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;YAC9E,MAAM,OAAO,EAAE,CAAC;QAClB,YAAY,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,eAAe;YACrB,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/B,WAAW,EAAE,OAAO;SACrB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACxD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AACvC,CAAC"}

package/dist/research/workspace/investigation-source-export.d.ts

@@ -0,0 +1,6 @@
+import type { InvestigationSourceReference } from "./investigation-lineage.js";
+import type { JournalEvent } from "./types.js";
+/** Export only immutable incoming investigation dependencies named by this
+ * project's committed promotion approvals. Local routing and other studies
+ * never enter the source closure. */
+export declare function stageInvestigationSources(root: string, projectId: string, events: JournalEvent[], stageFile: (source: string, logical: string) => Promise<void>): Promise<InvestigationSourceReference[]>;

package/dist/research/workspace/investigation-source-export.js

@@ -0,0 +1,68 @@
+import { loadInvestigationClosure } from "./investigation-close.js";
+import { join } from "node:path";
+import { loadInvestigation } from "./investigation.js";
+import { investigationAttemptHistory } from "./investigation-attempt.js";
+import { loadInvestigationCandidates } from "./investigation-candidate.js";
+import { loadInvestigationPromotion } from "./investigation-promotion.js";
+import { localInvestigationReadStore } from "./investigation-store.js";
+import { workspacePaths } from "./storage.js";
+/** Export only immutable incoming investigation dependencies named by this
+ * project's committed promotion approvals. Local routing and other studies
+ * never enter the source closure. */
+export async function stageInvestigationSources(root, projectId, events, stageFile) {
+    const store = localInvestigationReadStore(root);
+    const sources = new Map();
+    for (const event of events) {
+        if (event.scope !== projectId || event.type !== "investigation.promotion.approved")
+            continue;
+        const promotion = await loadInvestigationPromotion(root, projectId, String(event.payload.recordSha256), events, store);
+        if (promotion.plan.sourceProjectId === projectId)
+            continue;
+        const reference = {
+            projectId: promotion.plan.sourceProjectId,
+            investigationId: promotion.plan.investigationId,
+        };
+        sources.set(`${reference.projectId}\0${reference.investigationId}`, reference);
+    }
+    for (const source of sources.values()) {
+        const definition = await loadInvestigation(root, source.projectId, source.investigationId, events, store);
+        const attempts = await investigationAttemptHistory(root, source.projectId, definition, events, store);
+        const candidates = await loadInvestigationCandidates(root, source.projectId, definition, events, attempts, store);
+        const prefix = `investigation-sources/${source.projectId}`;
+        const stageRecord = (group, hash) => {
+            const path = `task/${group}/${hash}.json`;
+            return stageFile(join(workspacePaths(root).projects, source.projectId, path), `${prefix}/${path}`);
+        };
+        const blobs = new Map();
+        const collect = (object) => blobs.set(object.path, object);
+        await stageRecord("investigations", definition.recordSha256);
+        const closure = await loadInvestigationClosure(root, source.projectId, definition, attempts, events, store);
+        if (closure)
+            await stageRecord("investigation-closures", closure.recordSha256);
+        collect(definition.scopeAuthorization.source);
+        for (const program of definition.programs) {
+            collect(program.script);
+            collect(program.environmentLock);
+        }
+        for (const attempt of attempts) {
+            await stageRecord("investigation-starts", attempt.start.recordSha256);
+            for (const input of attempt.start.inputs)
+                collect(input);
+            if (attempt.record) {
+                await stageRecord("investigation-attempts", attempt.record.recordSha256);
+                for (const log of Object.values(attempt.record.logs))
+                    collect(log);
+                for (const output of attempt.record.outputs)
+                    collect(output);
+            }
+        }
+        for (const candidate of candidates)
+            await stageRecord("investigation-candidates", candidate.recordSha256);
+        for (const object of blobs.values()) {
+            await store.verifyBlob(source.projectId, object);
+            await stageFile(join(workspacePaths(root).projects, source.projectId, object.path), `${prefix}/${object.path}`);
+        }
+    }
+    return [...sources.values()];
+}
+//# sourceMappingURL=investigation-source-export.js.map

package/dist/research/workspace/investigation-source-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigation-source-export.js","sourceRoot":"","sources":["../../../src/research/workspace/investigation-source-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAEvE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C;;qCAEqC;AACrC,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAY,EACZ,SAAiB,EACjB,MAAsB,EACtB,SAA6D;IAE7D,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwC,CAAC;IAChE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,kCAAkC;YAAE,SAAS;QAC7F,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAChD,IAAI,EACJ,SAAS,EACT,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAClC,MAAM,EACN,KAAK,CACN,CAAC;QACF,IAAI,SAAS,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS;YAAE,SAAS;QAC3D,MAAM,SAAS,GAAG;YAChB,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,eAAe;YACzC,eAAe,EAAE,SAAS,CAAC,IAAI,CAAC,eAAe;SAChD,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CACxC,IAAI,EACJ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,eAAe,EACtB,MAAM,EACN,KAAK,CACN,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAChD,IAAI,EACJ,MAAM,CAAC,SAAS,EAChB,UAAU,EACV,MAAM,EACN,KAAK,CACN,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAClD,IAAI,EACJ,MAAM,CAAC,SAAS,EAChB,UAAU,EACV,MAAM,EACN,QAAQ,EACR,KAAK,CACN,CAAC;QACF,MAAM,MAAM,GAAG,yBAAyB,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3D,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE;YAClD,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC;YAC1C,OAAO,SAAS,CACd,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,EAC3D,GAAG,MAAM,IAAI,IAAI,EAAE,CACpB,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,MAAoB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,WAAW,CAAC,gBAAgB,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAC5C,IAAI,EACJ,MAAM,CAAC,SAAS,EAChB,UAAU,EACV,QAAQ,EACR,MAAM,EACN,KAAK,CACN,CAAC;QACF,IAAI,OAAO;YAAE,MAAM,WAAW,CAAC,wBAAwB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/E,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACxB,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,WAAW,CAAC,sBAAsB,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACtE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,WAAW,CAAC,wBAAwB,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBACzE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,CAAC;gBACnE,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,UAAU;YAChC,MAAM,WAAW,CAAC,0BAA0B,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QACxE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACjD,MAAM,SAAS,CACb,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAClE,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC"}

package/dist/research/workspace/investigation-store.d.ts

@@ -0,0 +1,9 @@
+import type { OutputRecord } from "./types.js";
+/** Operation-scoped immutable-object access, shared with indexed portable audit. */
+export interface InvestigationReadStore {
+    readTask<T>(projectId: string, group: string, hash: string, field: string): Promise<T>;
+    verifyBlob(projectId: string, object: OutputRecord): Promise<void>;
+    readBlob(projectId: string, object: OutputRecord, maxBytes: number): Promise<Buffer>;
+}
+export declare function assertInvestigationBlob(object: OutputRecord): void;
+export declare function localInvestigationReadStore(root: string): InvestigationReadStore;

package/dist/research/workspace/investigation-store.js

@@ -0,0 +1,55 @@
+import { lstat, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { CliError } from "../../errors.js";
+import { sha256File, workspacePaths } from "./storage.js";
+import { readTaskObject, taskDirectory } from "./task-contract.js";
+export function assertInvestigationBlob(object) {
+    if (!object ||
+        typeof object.sha256 !== "string" ||
+        !/^[a-f0-9]{64}$/.test(object.sha256) ||
+        object.path !== `task/run-objects/${object.sha256}` ||
+        !Number.isSafeInteger(object.bytes) ||
+        object.bytes < 0)
+        throw new CliError("Investigation blob address is invalid.", {
+            code: "RESEARCH_INVESTIGATION_BINDING_INVALID",
+            exitCode: 3,
+        });
+}
+export function localInvestigationReadStore(root) {
+    const verified = new Set();
+    const directories = new Set();
+    const store = {
+        readTask: (projectId, group, hash, field) => readTaskObject(root, projectId, group, hash, field),
+        verifyBlob: async (projectId, object) => {
+            assertInvestigationBlob(object);
+            const key = `${projectId}/${object.sha256}/${object.bytes}`;
+            if (verified.has(key))
+                return;
+            if (!directories.has(projectId)) {
+                await taskDirectory(root, projectId, "run-objects", false);
+                directories.add(projectId);
+            }
+            const path = join(workspacePaths(root).projects, projectId, object.path), info = await lstat(path).catch(() => null);
+            if (!info?.isFile() ||
+                info.isSymbolicLink() ||
+                info.size !== object.bytes ||
+                (await sha256File(path)) !== object.sha256)
+                throw new CliError("Investigation blob bytes changed.", {
+                    code: "RESEARCH_INVESTIGATION_BINDING_INVALID",
+                    exitCode: 3,
+                });
+            verified.add(key);
+        },
+        readBlob: async (projectId, object, maxBytes) => {
+            await store.verifyBlob(projectId, object);
+            if (object.bytes > maxBytes)
+                throw new CliError("Investigation object exceeds this read's explicit byte limit.", {
+                    code: "RESEARCH_INVESTIGATION_BINDING_INVALID",
+                    exitCode: 3,
+                });
+            return readFile(join(workspacePaths(root).projects, projectId, object.path));
+        },
+    };
+    return store;
+}
+//# sourceMappingURL=investigation-store.js.map

package/dist/research/workspace/investigation-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigation-store.js","sourceRoot":"","sources":["../../../src/research/workspace/investigation-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AASnE,MAAM,UAAU,uBAAuB,CAAC,MAAoB;IAC1D,IACE,CAAC,MAAM;QACP,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACrC,MAAM,CAAC,IAAI,KAAK,oBAAoB,MAAM,CAAC,MAAM,EAAE;QACnD,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,CAAC,KAAK,GAAG,CAAC;QAEhB,MAAM,IAAI,QAAQ,CAAC,wCAAwC,EAAE;YAC3D,IAAI,EAAE,wCAAwC;YAC9C,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;AACP,CAAC;AACD,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,KAAK,GAA2B;QACpC,QAAQ,EAAE,CAAI,SAAiB,EAAE,KAAa,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE,CAC7E,cAAc,CAAI,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QACxD,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;YACtC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5D,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO;YAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,MAAM,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;gBAC3D,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EACtE,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC7C,IACE,CAAC,IAAI,EAAE,MAAM,EAAE;gBACf,IAAI,CAAC,cAAc,EAAE;gBACrB,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK;gBAC1B,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM;gBAE1C,MAAM,IAAI,QAAQ,CAAC,mCAAmC,EAAE;oBACtD,IAAI,EAAE,wCAAwC;oBAC9C,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC;YACL,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC9C,MAAM,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,KAAK,GAAG,QAAQ;gBACzB,MAAM,IAAI,QAAQ,CAAC,+DAA+D,EAAE;oBAClF,IAAI,EAAE,wCAAwC;oBAC9C,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC;YACL,OAAO,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,CAAC;KACF,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}