@tiangong-ai/cli 0.0.61 → 0.0.63

package/dist/research/workspace/investigation-candidate.js

@@ -0,0 +1,156 @@
+import { localInvestigationReadStore } from "./investigation-store.js";
+import { Ajv2020 } from "ajv/dist/2020.js";
+import { CliError } from "../../errors.js";
+import { loadInvestigation } from "./investigation.js";
+import { assertInvestigationCurrent, investigationAttemptHistory, } from "./investigation-attempt.js";
+import { appendJournalEvent, readVerifiedJournal } from "./journal.js";
+import { loadProject } from "./projects.js";
+import { configuredResearchSecrets, sanitizeResearchValue } from "./sanitization.js";
+import { canonicalJson, sha256Text, workspacePaths } from "./storage.js";
+import { writeTaskObject } from "./task-contract.js";
+import { withWorkspaceLock } from "./workspace.js";
+const id = { type: "string", pattern: "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$" };
+const schema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["schemaVersion", "selectionId", "investigationId", "attemptId", "reason"],
+    properties: {
+        schemaVersion: { const: 1 },
+        selectionId: id,
+        investigationId: id,
+        attemptId: id,
+        reason: { type: "string", minLength: 8, maxLength: 4000 },
+    },
+};
+const validate = new Ajv2020({ strict: false, allErrors: true }).compile(schema);
+export function investigationCandidateInputSchema() {
+    return structuredClone(schema);
+}
+function failure(message) {
+    return new CliError(message, { code: "RESEARCH_INVESTIGATION_CANDIDATE_INVALID", exitCode: 3 });
+}
+function recipeFor(definition, attempt) {
+    const run = attempt.record;
+    const program = definition.plan.programs.find((p) => p.id === run?.programId);
+    const files = definition.programs.find((p) => p.id === run?.programId);
+    if (!run ||
+        !program ||
+        !files ||
+        ["stale", "inputs-changed"].includes(run.outcome) ||
+        run.runtime.binarySha256 !== program.runtime.binarySha256 ||
+        run.runtime.kind !== program.runtime.kind ||
+        !(run.runtime.kind === "node" ? /^v\d+\.\d+\.\d+$/u : /^Python \d+\.\d+\.\d+$/u).test(run.runtime.version))
+        throw failure("Select one committed, stable diagnostic attempt with its observed runtime identity.");
+    return {
+        programId: program.id,
+        runtime: run.runtime,
+        script: files.script,
+        environmentLock: files.environmentLock,
+        inputs: attempt.start.inputs,
+        configuration: run.configuration,
+        arguments: program.arguments.map((arg) => arg.replace(/\{option:([^}]+)\}/gu, (_match, key) => String(run.configuration[key]))),
+        outputs: program.outputs,
+        diagnosticOutputId: program.diagnosticOutputId,
+        telemetry: program.telemetry,
+        maxOutputBytes: definition.plan.limits.maxOutputBytes,
+    };
+}
+export async function loadInvestigationCandidates(root, projectId, definition, events, attempts, store = localInvestigationReadStore(root)) {
+    const selected = events.filter((e) => e.scope === projectId &&
+        e.type === "investigation.candidate.selected" &&
+        e.payload.investigationId === definition.investigationId);
+    const records = [];
+    const ids = new Set();
+    for (const event of selected) {
+        const record = await store.readTask(projectId, "investigation-candidates", String(event.payload.recordSha256), "recordSha256");
+        const input = {
+            schemaVersion: record.schemaVersion,
+            selectionId: record.selectionId,
+            investigationId: record.investigationId,
+            attemptId: record.attemptId,
+            reason: record.reason,
+        };
+        const attempt = attempts.find((a) => a.record?.recordSha256 === record.attemptSha256 && a.start.attemptId === record.attemptId);
+        const completed = events.find((e) => e.scope === projectId &&
+            e.type === "investigation.attempt.completed" &&
+            e.payload.recordSha256 === record.attemptSha256);
+        if (!validate(input) ||
+            !attempt ||
+            !completed ||
+            completed.sequence >= event.sequence ||
+            record.kind !== "tiangong-investigation-candidate" ||
+            record.projectId !== projectId ||
+            record.investigationId !== definition.investigationId ||
+            record.definitionSha256 !== definition.recordSha256 ||
+            record.parentCandidateSha256 !== (records.at(-1)?.recordSha256 ?? null) ||
+            ids.has(record.selectionId) ||
+            record.selectionId !== event.payload.selectionId ||
+            record.attemptSha256 !== event.payload.attemptSha256 ||
+            record.recipeSha256 !== event.payload.recipeSha256 ||
+            record.purpose !== "diagnostic-candidate-only" ||
+            record.requestSha256 !== sha256Text(canonicalJson(input)))
+            throw failure("Candidate selection does not match its committed investigation history.");
+        const recipe = recipeFor(definition, attempt);
+        if (canonicalJson(recipe) !== canonicalJson(record.recipe) ||
+            sha256Text(canonicalJson(recipe)) !== record.recipeSha256)
+            throw failure("Candidate recipe differs from the exact observed attempt.");
+        ids.add(record.selectionId);
+        records.push(record);
+    }
+    return records;
+}
+export async function selectInvestigationCandidate(root, projectId, value) {
+    if (!validate(value) ||
+        canonicalJson(sanitizeResearchValue(value, configuredResearchSecrets(process.env))) !==
+            canonicalJson(value))
+        throw failure("Candidate selection must match the closed non-secret schema.");
+    const input = value;
+    const requestSha256 = sha256Text(canonicalJson(input));
+    return withWorkspaceLock(root, "research.investigation.select", async () => {
+        const project = await loadProject(root, projectId);
+        const events = await readVerifiedJournal(workspacePaths(root).journal);
+        const definition = await loadInvestigation(root, projectId, input.investigationId, events);
+        const attempts = await investigationAttemptHistory(root, projectId, definition, events);
+        const candidates = await loadInvestigationCandidates(root, projectId, definition, events, attempts);
+        const known = candidates.find((c) => c.selectionId === input.selectionId);
+        if (known) {
+            if (known.requestSha256 !== requestSha256)
+                throw failure("Selection ID already belongs to another exact request.");
+            return known;
+        }
+        await assertInvestigationCurrent(root, project, definition, events);
+        if (attempts.some((a) => !a.record))
+            throw failure("Resolve the unfinished attempt before choosing a candidate.");
+        const attempt = attempts.find((a) => a.start.attemptId === input.attemptId);
+        if (!attempt?.record)
+            throw failure("Candidate selection needs an exact committed attempt.");
+        const recipe = recipeFor(definition, attempt);
+        const core = {
+            ...input,
+            kind: "tiangong-investigation-candidate",
+            projectId,
+            definitionSha256: definition.recordSha256,
+            attemptSha256: attempt.record.recordSha256,
+            parentCandidateSha256: candidates.at(-1)?.recordSha256 ?? null,
+            requestSha256,
+            recipe,
+            recipeSha256: sha256Text(canonicalJson(recipe)),
+            purpose: "diagnostic-candidate-only",
+            selectedAt: new Date().toISOString(),
+        };
+        const record = {
+            ...core,
+            recordSha256: sha256Text(canonicalJson(core)),
+        };
+        await writeTaskObject(root, projectId, "investigation-candidates", record.recordSha256, record);
+        await appendJournalEvent(workspacePaths(root).journal, "investigation.candidate.selected", projectId, {
+            investigationId: input.investigationId,
+            selectionId: input.selectionId,
+            recordSha256: record.recordSha256,
+            attemptSha256: record.attemptSha256,
+            recipeSha256: record.recipeSha256,
+        });
+        return record;
+    });
+}
+//# sourceMappingURL=investigation-candidate.js.map

package/dist/research/workspace/investigation-candidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigation-candidate.js","sourceRoot":"","sources":["../../../src/research/workspace/investigation-candidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAA+B,MAAM,0BAA0B,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAgC,MAAM,oBAAoB,CAAC;AACrF,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AASnD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;AAC7E,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,QAAQ,CAAC;IACpF,UAAU,EAAE;QACV,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;QAC3B,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,EAAE;QACnB,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;KAC1D;CACF,CAAC;AACF,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAiB,MAAM,CAAC,CAAC;AACjG,MAAM,UAAU,iCAAiC;IAC/C,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AACD,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,0CAA0C,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,SAAS,CAAC,UAAmC,EAAE,OAA+B;IACrF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,SAAS,CAAC,CAAC;IACvE,IACE,CAAC,GAAG;QACJ,CAAC,OAAO;QACR,CAAC,KAAK;QACN,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,YAAY;QACzD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI;QACzC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,IAAI,CACnF,GAAG,CAAC,OAAO,CAAC,OAAO,CACpB;QAED,MAAM,OAAO,CACX,qFAAqF,CACtF,CAAC;IACJ,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAC7F;QACD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc;KACtD,CAAC;AACJ,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,SAAiB,EACjB,UAAmC,EACnC,MAAsB,EACtB,QAAwB,EACxB,KAAK,GAA2B,2BAA2B,CAAC,IAAI,CAAC;IAEjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,KAAK,KAAK,SAAS;QACrB,CAAC,CAAC,IAAI,KAAK,kCAAkC;QAC7C,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,UAAU,CAAC,eAAe,CAC3D,CAAC;IACF,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CACjC,SAAS,EACT,0BAA0B,EAC1B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAClC,cAAc,CACf,CAAC;QACF,MAAM,KAAK,GAAG;YACZ,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,EAAE,YAAY,KAAK,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAC5F,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,KAAK,KAAK,SAAS;YACrB,CAAC,CAAC,IAAI,KAAK,iCAAiC;YAC5C,CAAC,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,aAAa,CAClD,CAAC;QACF,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChB,CAAC,OAAO;YACR,CAAC,SAAS;YACV,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ;YACpC,MAAM,CAAC,IAAI,KAAK,kCAAkC;YAClD,MAAM,CAAC,SAAS,KAAK,SAAS;YAC9B,MAAM,CAAC,eAAe,KAAK,UAAU,CAAC,eAAe;YACrD,MAAM,CAAC,gBAAgB,KAAK,UAAU,CAAC,YAAY;YACnD,MAAM,CAAC,qBAAqB,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC;YACvE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;YAC3B,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW;YAChD,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,OAAO,CAAC,aAAa;YACpD,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,OAAO,CAAC,YAAY;YAClD,MAAM,CAAC,OAAO,KAAK,2BAA2B;YAC9C,MAAM,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAEzD,MAAM,OAAO,CAAC,yEAAyE,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,IACE,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;YACtD,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY;YAEzD,MAAM,OAAO,CAAC,2DAA2D,CAAC,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAY,EACZ,SAAiB,EACjB,KAAc;IAEd,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,aAAa,CAAC,qBAAqB,CAAC,KAAK,EAAE,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACjF,aAAa,CAAC,KAAK,CAAC;QAEtB,MAAM,OAAO,CAAC,8DAA8D,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,KAAK,CAAC;IACpB,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,OAAO,iBAAiB,CAAC,IAAI,EAAE,+BAA+B,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAClD,IAAI,EACJ,SAAS,EACT,UAAU,EACV,MAAM,EACN,QAAQ,CACT,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1E,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa;gBACvC,MAAM,OAAO,CAAC,wDAAwD,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,0BAA0B,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACjC,MAAM,OAAO,CAAC,6DAA6D,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,EAAE,MAAM;YAAE,MAAM,OAAO,CAAC,uDAAuD,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG;YACX,GAAG,KAAK;YACR,IAAI,EAAE,kCAA2C;YACjD,SAAS;YACT,gBAAgB,EAAE,UAAU,CAAC,YAAY;YACzC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY;YAC1C,qBAAqB,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,IAAI;YAC9D,aAAa;YACb,MAAM;YACN,YAAY,EAAE,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO,EAAE,2BAAoC;YAC7C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,MAAM,MAAM,GAA2B;YACrC,GAAG,IAAI;YACP,YAAY,EAAE,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;SAC9C,CAAC;QACF,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAChG,MAAM,kBAAkB,CACtB,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAC5B,kCAAkC,EAClC,SAAS,EACT;YACE,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CACF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/research/workspace/investigation-certification.d.ts

@@ -0,0 +1,39 @@
+import { parseInvestigationDiagnostic } from "./investigation-attempt.js";
+import { type InvestigationPromotion } from "./investigation-promotion.js";
+import type { NativeRunInput, NativeRunRecord, captureProcess } from "./native-run.js";
+import type { JournalEvent, ProjectState } from "./types.js";
+export declare function assertInvestigationCertificationRequired(root: string, projectId: string, input: NativeRunInput, events: JournalEvent[]): Promise<void>;
+export declare function frozenPromotionView(root: string, project: ProjectState, promotion: InvestigationPromotion, events: JournalEvent[]): Promise<string>;
+export declare function prepareInvestigationCertification(root: string, project: ProjectState, input: NativeRunInput, binarySha256: string, events: JournalEvent[]): Promise<{
+    promotion: InvestigationPromotion;
+    effectiveDesignSha256: string;
+} | null>;
+type ProcessObservation = Awaited<ReturnType<typeof captureProcess>>;
+export interface InvestigationCertification {
+    promotionSha256: string;
+    candidateSha256: string;
+    recipeSha256: string;
+    effectiveDesignSha256: string;
+    status: "passed" | "failed";
+    diagnostic: ReturnType<typeof parseInvestigationDiagnostic>;
+    missingTelemetry: string[];
+    actualCostUsd: null;
+    accountedCostUpperBoundUsd: number;
+    maxOutputBytes: number;
+    observedOutputBytes: number;
+    outputLimitExceeded: boolean;
+    isolation: {
+        provider: string;
+        policySha256: string;
+    };
+    runtimeProbeIsolation: {
+        provider: string;
+        policySha256: string;
+    };
+    runtimeProbe: Omit<ProcessObservation, "stdout" | "stderr">;
+}
+export declare function certificationAssessment(root: string, projectId: string, context: NonNullable<Awaited<ReturnType<typeof prepareInvestigationCertification>>>, status: NativeRunRecord["status"], outputs: NativeRunRecord["outputs"], runtimeProbe: ProcessObservation, isolation: InvestigationCertification["isolation"], runtimeProbeIsolation: InvestigationCertification["isolation"], outputObservation: {
+    observedOutputBytes: number;
+    outputLimitExceeded: boolean;
+}): Promise<InvestigationCertification>;
+export {};

package/dist/research/workspace/investigation-certification.js

@@ -0,0 +1,152 @@
+import { investigatedRequirementHashes } from "./investigation-requirements.js";
+import { readTaskObject } from "./task-contract.js";
+import { lstat, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { CliError } from "../../errors.js";
+import { loadCurrentEvidenceSnapshot } from "./acquisition.js";
+import { investigationAttemptHistory, parseInvestigationDiagnostic, } from "./investigation-attempt.js";
+import { loadInvestigationCandidates } from "./investigation-candidate.js";
+import { loadInvestigationPromotion, } from "./investigation-promotion.js";
+import { loadInvestigation } from "./investigation.js";
+import { assertResearchPolicyBinding } from "./research-policy.js";
+import { applyScientificFulfillmentRecord, loadScientificFulfillmentView, } from "./scientific-fulfillment.js";
+import { canonicalJson, sha256File, sha256Text, workspacePaths } from "./storage.js";
+function failure(message, code = "RESEARCH_INVESTIGATION_CERTIFICATION_INVALID") {
+    return new CliError(message, { code, exitCode: 3 });
+}
+export async function assertInvestigationCertificationRequired(root, projectId, input, events) {
+    if (input.investigationPromotionSha256)
+        return;
+    const investigated = await investigatedRequirementHashes(projectId, events, (group, hash, field) => readTaskObject(root, projectId, group, hash, field));
+    if (investigated.has(input.requirementSha256))
+        throw failure("This investigated requirement needs an exact approved promotion and a fresh certification run. Diagnostic or ordinary runs cannot bypass that boundary.", "RESEARCH_INVESTIGATION_CERTIFICATION_REQUIRED");
+}
+export async function frozenPromotionView(root, project, promotion, events) {
+    const plan = promotion.plan;
+    if (!project.publicationPolicy ||
+        !project.scientificDesign ||
+        project.scientificDesign.designSha256 !== plan.designSha256 ||
+        project.publicationPolicy.resolvedPolicySha256 !== plan.policySha256 ||
+        sha256Text(project.question) !== plan.questionSha256)
+        throw failure("Certification scientific identity changed; review a new exact promotion.");
+    await assertResearchPolicyBinding(root, project.publicationPolicy);
+    const view = await loadScientificFulfillmentView(root, project, undefined, events);
+    const model = view.contract.identity.modelStructures.find((m) => m.id === plan.modelId);
+    const recipe = plan.recipe;
+    if (!model ||
+        model.implementationStatus !== "executable-frozen" ||
+        model.implementationArtifactSha256 !== recipe.script.sha256 ||
+        model.implementationEntrypoint !==
+            (recipe.runtime.kind === "node" ? "program.mjs" : "program.py") ||
+        model.environmentLockStatus !== "exact-frozen" ||
+        model.environmentLockSha256 !== recipe.environmentLock.sha256)
+        throw failure("Freeze the exact authorized implementation and environment through the existing fulfillment or successor route before certification.", "RESEARCH_INVESTIGATION_CERTIFICATION_NOT_FROZEN");
+    const before = structuredClone(view.amendedBase);
+    let extendsPlan = sha256Text(canonicalJson(before)) === plan.beforeEffectiveDesignSha256;
+    for (const record of view.records) {
+        applyScientificFulfillmentRecord(before, record);
+        extendsPlan ||= sha256Text(canonicalJson(before)) === plan.beforeEffectiveDesignSha256;
+    }
+    if (!extendsPlan)
+        throw failure("The scientific declaration no longer extends the approved promotion view.");
+    const acquisition = await loadCurrentEvidenceSnapshot(root, project.id);
+    if (acquisition.snapshotSha256 !== plan.acquisitionSnapshotSha256)
+        throw failure("The certification acquisition changed after promotion approval.");
+    return view.effectiveSha256;
+}
+export async function prepareInvestigationCertification(root, project, input, binarySha256, events) {
+    const hash = input.investigationPromotionSha256;
+    if (!hash)
+        return null;
+    const promotion = await loadInvestigationPromotion(root, project.id, hash, events);
+    if (events.some((e) => e.scope === project.id &&
+        e.type === "project.task.run.started" &&
+        e.payload.investigationPromotionSha256 === hash))
+        throw failure("This promotion already started its one authorized certification. Inspect that run; a new certification needs a new exact promotion approval.", "RESEARCH_INVESTIGATION_CERTIFICATION_EXHAUSTED");
+    const plan = promotion.plan;
+    if (plan.requirementId !== input.requirementId ||
+        plan.requirementSha256 !== input.requirementSha256)
+        throw failure("Certification must use the promoted requirement version.");
+    const definition = await loadInvestigation(root, plan.sourceProjectId, plan.investigationId, events);
+    const attempts = await investigationAttemptHistory(root, plan.sourceProjectId, definition, events);
+    const candidates = await loadInvestigationCandidates(root, plan.sourceProjectId, definition, events, attempts);
+    const candidate = candidates.find((c) => c.recordSha256 === plan.candidateSha256);
+    if (!candidate ||
+        candidate.recipeSha256 !== plan.recipeSha256 ||
+        canonicalJson(candidate.recipe) !== canonicalJson(plan.recipe))
+        throw failure("The approved recipe does not match its original observed candidate.");
+    const recipe = plan.recipe;
+    if (!Number.isSafeInteger(plan.certification.maxOutputBytes) ||
+        plan.certification.maxOutputBytes < 1 ||
+        plan.certification.maxOutputBytes !== recipe.maxOutputBytes ||
+        input.timeoutSeconds > plan.certification.maxRunSeconds ||
+        input.runtime.kind !== recipe.runtime.kind ||
+        binarySha256 !== recipe.runtime.binarySha256 ||
+        canonicalJson(input.arguments) !== canonicalJson(recipe.arguments) ||
+        canonicalJson(input.outputs) !== canonicalJson(recipe.outputs) ||
+        canonicalJson(input.inputs) !==
+            canonicalJson(recipe.inputs.map((i) => ({ id: i.id, artifactId: i.artifactId, sha256: i.sha256 }))))
+        throw failure("Certification inputs, runtime, arguments, outputs or time exceed the exact promoted recipe.");
+    const effectiveDesignSha256 = await frozenPromotionView(root, project, promotion, events);
+    for (const [path, hash] of [
+        [input.scriptPath, recipe.script.sha256],
+        [input.environmentLockPath, recipe.environmentLock.sha256],
+    ]) {
+        const info = await lstat(path);
+        if (!info.isFile() || info.isSymbolicLink() || (await sha256File(path)) !== hash)
+            throw failure("Certification implementation or environment bytes differ from the promoted recipe.");
+    }
+    const allocation = project.budget?.entries.find((e) => e.id === `investigation-certification-${promotion.recordSha256}`);
+    if (!allocation ||
+        allocation.status !== "reserved" ||
+        allocation.maxCostUsd !== plan.certification.maxCostUsd)
+        throw failure("Certification has no current exact cost reservation.");
+    return { promotion, effectiveDesignSha256 };
+}
+export async function certificationAssessment(root, projectId, context, status, outputs, runtimeProbe, isolation, runtimeProbeIsolation, outputObservation) {
+    const plan = context.promotion.plan;
+    const output = outputs.find((o) => o.id === plan.recipe.diagnosticOutputId && o.mediaType === "application/json");
+    let diagnostic = null;
+    if (output && output.bytes <= 65536) {
+        try {
+            diagnostic = parseInvestigationDiagnostic(JSON.parse(await readFile(join(workspacePaths(root).projects, projectId, output.path), "utf8")));
+        }
+        catch {
+            /* Missing diagnostics cannot certify the recipe. */
+        }
+    }
+    const missingTelemetry = diagnostic?.solverReached
+        ? [
+            ...plan.recipe.telemetry.requiredMetrics
+                .filter((id) => !Object.hasOwn(diagnostic.metrics, id))
+                .map((id) => `metrics.${id}`),
+            ...plan.recipe.telemetry.requiredStatuses
+                .filter((id) => !Object.hasOwn(diagnostic.statuses, id))
+                .map((id) => `statuses.${id}`),
+        ].sort()
+        : [];
+    const { stdout: _stdout, stderr: _stderr, ...probe } = runtimeProbe;
+    return {
+        promotionSha256: context.promotion.recordSha256,
+        candidateSha256: plan.candidateSha256,
+        recipeSha256: plan.recipeSha256,
+        effectiveDesignSha256: context.effectiveDesignSha256,
+        status: status === "succeeded" &&
+            !outputObservation.outputLimitExceeded &&
+            diagnostic?.solverReached &&
+            diagnostic.feasible &&
+            !missingTelemetry.length
+            ? "passed"
+            : "failed",
+        diagnostic,
+        missingTelemetry,
+        actualCostUsd: null,
+        accountedCostUpperBoundUsd: plan.certification.maxCostUsd,
+        maxOutputBytes: plan.certification.maxOutputBytes,
+        ...outputObservation,
+        isolation,
+        runtimeProbeIsolation,
+        runtimeProbe: probe,
+    };
+}
+//# sourceMappingURL=investigation-certification.js.map

package/dist/research/workspace/investigation-certification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigation-certification.js","sourceRoot":"","sources":["../../../src/research/workspace/investigation-certification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EACL,0BAA0B,GAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,gCAAgC,EAChC,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGrF,SAAS,OAAO,CAAC,OAAe,EAAE,IAAI,GAAG,8CAA8C;IACrF,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AACtD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,IAAY,EACZ,SAAiB,EACjB,KAAqB,EACrB,MAAsB;IAEtB,IAAI,KAAK,CAAC,4BAA4B;QAAE,OAAO;IAC/C,MAAM,YAAY,GAAG,MAAM,6BAA6B,CACtD,SAAS,EACT,MAAM,EACN,CAAI,KAAa,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE,CAChD,cAAc,CAAI,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CACzD,CAAC;IACF,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC3C,MAAM,OAAO,CACX,yJAAyJ,EACzJ,+CAA+C,CAChD,CAAC;AACN,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,OAAqB,EACrB,SAAiC,EACjC,MAAsB;IAEtB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,IACE,CAAC,OAAO,CAAC,iBAAiB;QAC1B,CAAC,OAAO,CAAC,gBAAgB;QACzB,OAAO,CAAC,gBAAgB,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;QAC3D,OAAO,CAAC,iBAAiB,CAAC,oBAAoB,KAAK,IAAI,CAAC,YAAY;QACpE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,cAAc;QAEpD,MAAM,OAAO,CAAC,0EAA0E,CAAC,CAAC;IAC5F,MAAM,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IACE,CAAC,KAAK;QACN,KAAK,CAAC,oBAAoB,KAAK,mBAAmB;QAClD,KAAK,CAAC,4BAA4B,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM;QAC3D,KAAK,CAAC,wBAAwB;YAC5B,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;QACjE,KAAK,CAAC,qBAAqB,KAAK,cAAc;QAC9C,KAAK,CAAC,qBAAqB,KAAK,MAAM,CAAC,eAAe,CAAC,MAAM;QAE7D,MAAM,OAAO,CACX,sIAAsI,EACtI,iDAAiD,CAClD,CAAC;IACJ,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,2BAA2B,CAAC;IACzF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,gCAAgC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjD,WAAW,KAAK,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,2BAA2B,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,WAAW;QACd,MAAM,OAAO,CAAC,2EAA2E,CAAC,CAAC;IAC7F,MAAM,WAAW,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxE,IAAI,WAAW,CAAC,cAAc,KAAK,IAAI,CAAC,yBAAyB;QAC/D,MAAM,OAAO,CAAC,iEAAiE,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC,eAAe,CAAC;AAC9B,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAAY,EACZ,OAAqB,EACrB,KAAqB,EACrB,YAAoB,EACpB,MAAsB;IAEtB,MAAM,IAAI,GAAG,KAAK,CAAC,4BAA4B,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnF,IACE,MAAM,CAAC,IAAI,CACT,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE;QACtB,CAAC,CAAC,IAAI,KAAK,0BAA0B;QACrC,CAAC,CAAC,OAAO,CAAC,4BAA4B,KAAK,IAAI,CAClD;QAED,MAAM,OAAO,CACX,8IAA8I,EAC9I,gDAAgD,CACjD,CAAC;IACJ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,IACE,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;QAC1C,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;QAElD,MAAM,OAAO,CAAC,0DAA0D,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,iBAAiB,CACxC,IAAI,EACJ,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,eAAe,EACpB,MAAM,CACP,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAChD,IAAI,EACJ,IAAI,CAAC,eAAe,EACpB,UAAU,EACV,MAAM,CACP,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAClD,IAAI,EACJ,IAAI,CAAC,eAAe,EACpB,UAAU,EACV,MAAM,EACN,QAAQ,CACT,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,eAAe,CAAC,CAAC;IAClF,IACE,CAAC,SAAS;QACV,SAAS,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;QAC5C,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAE9D,MAAM,OAAO,CAAC,qEAAqE,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;QACxD,IAAI,CAAC,aAAa,CAAC,cAAc,GAAG,CAAC;QACrC,IAAI,CAAC,aAAa,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QAC3D,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa;QACvD,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI;QAC1C,YAAY,KAAK,MAAM,CAAC,OAAO,CAAC,YAAY;QAC5C,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QAClE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9D,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YACzB,aAAa,CACX,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CACrF;QAEH,MAAM,OAAO,CACX,6FAA6F,CAC9F,CAAC;IACJ,MAAM,qBAAqB,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC1F,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI;QACzB,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACxC,CAAC,KAAK,CAAC,mBAAmB,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;KAC3D,EAAE,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAK,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,UAAU,CAAC,IAAK,CAAC,CAAC,KAAK,IAAI;YAC/E,MAAM,OAAO,CACX,oFAAoF,CACrF,CAAC;IACN,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,+BAA+B,SAAS,CAAC,YAAY,EAAE,CACxE,CAAC;IACF,IACE,CAAC,UAAU;QACX,UAAU,CAAC,MAAM,KAAK,UAAU;QAChC,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC,aAAa,CAAC,UAAU;QAEvD,MAAM,OAAO,CAAC,sDAAsD,CAAC,CAAC;IACxE,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC;AAC9C,CAAC;AAmBD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAY,EACZ,SAAiB,EACjB,OAAmF,EACnF,MAAiC,EACjC,OAAmC,EACnC,YAAgC,EAChC,SAAkD,EAClD,qBAA8D,EAC9D,iBAAgF;IAEhF,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC,SAAS,KAAK,kBAAkB,CACrF,CAAC;IACF,IAAI,UAAU,GAAoD,IAAI,CAAC;IACvE,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,UAAU,GAAG,4BAA4B,CACvC,IAAI,CAAC,KAAK,CACR,MAAM,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CACpF,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,UAAU,EAAE,aAAa;QAChD,CAAC,CAAC;YACE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe;iBACrC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;iBACvD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB;iBACtC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;iBACxD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;SACjC,CAAC,IAAI,EAAE;QACV,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,YAAY,CAAC;IACpE,OAAO;QACL,eAAe,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY;QAC/C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,MAAM,EACJ,MAAM,KAAK,WAAW;YACtB,CAAC,iBAAiB,CAAC,mBAAmB;YACtC,UAAU,EAAE,aAAa;YACzB,UAAU,CAAC,QAAQ;YACnB,CAAC,gBAAgB,CAAC,MAAM;YACtB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,QAAQ;QACd,UAAU;QACV,gBAAgB;QAChB,aAAa,EAAE,IAAI;QACnB,0BAA0B,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU;QACzD,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,cAAc;QACjD,GAAG,iBAAiB;QACpB,SAAS;QACT,qBAAqB;QACrB,YAAY,EAAE,KAAK;KACpB,CAAC;AACJ,CAAC"}

package/dist/research/workspace/investigation-close.d.ts

@@ -0,0 +1,47 @@
+import { investigationAttemptHistory } from "./investigation-attempt.js";
+import { type InvestigationDefinition } from "./investigation.js";
+import { type InvestigationReadStore } from "./investigation-store.js";
+import type { JournalEvent } from "./types.js";
+interface CloseInput {
+    schemaVersion: 1;
+    investigationId: string;
+    reason: string;
+}
+export declare function investigationCloseInputSchema(): {
+    type: string;
+    additionalProperties: boolean;
+    required: string[];
+    properties: {
+        schemaVersion: {
+            const: number;
+        };
+        investigationId: {
+            type: string;
+            pattern: string;
+        };
+        reason: {
+            type: string;
+            minLength: number;
+            maxLength: number;
+        };
+    };
+};
+export interface InvestigationClosure extends CloseInput {
+    kind: "tiangong-investigation-closure";
+    projectId: string;
+    definitionSha256: string;
+    candidateSha256: string | null;
+    requestSha256: string;
+    attemptSha256s: string[];
+    attemptCostUpperBoundUsd: number;
+    accountedCostUsd: number;
+    releasedCostUpperBoundUsd: number;
+    actualCostUsd: null;
+    settlementBasis: "allocated-upper-bound" | "owner-estimate" | "reported-usage";
+    closedAt: string;
+    recordSha256: string;
+}
+type History = Awaited<ReturnType<typeof investigationAttemptHistory>>;
+export declare function loadInvestigationClosure(root: string, projectId: string, definition: InvestigationDefinition, history: History, events: JournalEvent[], store?: InvestigationReadStore): Promise<InvestigationClosure | null>;
+export declare function closeInvestigation(root: string, projectId: string, value: unknown): Promise<InvestigationClosure>;
+export {};

package/dist/research/workspace/investigation-close.js

@@ -0,0 +1,153 @@
+import { Ajv2020 } from "ajv/dist/2020.js";
+import { CliError } from "../../errors.js";
+import { investigationAttemptHistory } from "./investigation-attempt.js";
+import { loadInvestigationCandidates } from "./investigation-candidate.js";
+import { loadInvestigation } from "./investigation.js";
+import { localInvestigationReadStore } from "./investigation-store.js";
+import { appendJournalEvent, readVerifiedJournal } from "./journal.js";
+import { assertProjectAuthority, projectAuthorityIndex } from "./project-authority.js";
+import { settleProjectCost } from "./project-budget.js";
+import { beginProjectMutation, prepareProjectMutation, projectMutationBinding, settleProjectMutation, } from "./project-mutations.js";
+import { loadProject } from "./projects.js";
+import { configuredResearchSecrets, sanitizeResearchValue } from "./sanitization.js";
+import { canonicalJson, sha256Text, workspacePaths } from "./storage.js";
+import { writeTaskObject } from "./task-contract.js";
+import { withWorkspaceLock } from "./workspace.js";
+const schema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["schemaVersion", "investigationId", "reason"],
+    properties: {
+        schemaVersion: { const: 1 },
+        investigationId: { type: "string", pattern: "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$" },
+        reason: { type: "string", minLength: 8, maxLength: 4000 },
+    },
+};
+const validate = new Ajv2020({ strict: false, allErrors: true }).compile(schema);
+export function investigationCloseInputSchema() {
+    return structuredClone(schema);
+}
+function invalid(message, code = "RESEARCH_INVESTIGATION_CLOSE_INVALID") {
+    return new CliError(message, { code, exitCode: 3 });
+}
+export async function loadInvestigationClosure(root, projectId, definition, history, events, store = localInvestigationReadStore(root)) {
+    const closed = events.filter((e) => e.scope === projectId &&
+        e.type === "investigation.closed" &&
+        e.payload.investigationId === definition.investigationId);
+    if (!closed.length)
+        return null;
+    if (closed.length !== 1)
+        throw invalid("Investigation has duplicate closure authority.");
+    const event = closed[0];
+    const record = await store.readTask(projectId, "investigation-closures", String(event.payload.recordSha256), "recordSha256");
+    const input = {
+        schemaVersion: record.schemaVersion,
+        investigationId: record.investigationId,
+        reason: record.reason,
+    };
+    const candidates = await loadInvestigationCandidates(root, projectId, definition, events, history, store);
+    const spent = history.reduce((sum, a) => sum + a.start.maxCostUsd, 0);
+    if (!validate(input) ||
+        record.kind !== "tiangong-investigation-closure" ||
+        record.projectId !== projectId ||
+        record.investigationId !== definition.investigationId ||
+        record.definitionSha256 !== definition.recordSha256 ||
+        record.requestSha256 !== sha256Text(canonicalJson(input)) ||
+        record.candidateSha256 !== (candidates.at(-1)?.recordSha256 ?? null) ||
+        history.some((a) => !a.record) ||
+        canonicalJson(record.attemptSha256s) !==
+            canonicalJson(history.map((a) => a.record.recordSha256)) ||
+        !Number.isFinite(record.attemptCostUpperBoundUsd) ||
+        record.attemptCostUpperBoundUsd < 0 ||
+        Math.abs(record.attemptCostUpperBoundUsd - spent) > 1e-9 ||
+        !["allocated-upper-bound", "owner-estimate", "reported-usage"].includes(record.settlementBasis) ||
+        (record.settlementBasis === "allocated-upper-bound" &&
+            Math.abs(record.accountedCostUsd - spent) > 1e-9) ||
+        !Number.isFinite(record.releasedCostUpperBoundUsd) ||
+        record.releasedCostUpperBoundUsd < 0 ||
+        !Number.isFinite(record.accountedCostUsd) ||
+        record.accountedCostUsd < 0 ||
+        record.actualCostUsd !== null ||
+        Math.abs(record.releasedCostUpperBoundUsd -
+            Math.max(0, definition.plan.limits.maxCostUsd - record.accountedCostUsd)) > 1e-9 ||
+        events.some((e) => e.scope === projectId &&
+            e.payload.investigationId === definition.investigationId &&
+            [
+                "investigation.attempt.started",
+                "investigation.attempt.completed",
+                "investigation.candidate.selected",
+            ].includes(e.type) &&
+            e.sequence >= event.sequence))
+        throw invalid("Investigation closure does not match its complete immutable history.");
+    return record;
+}
+export async function closeInvestigation(root, projectId, value) {
+    if (!validate(value) ||
+        canonicalJson(sanitizeResearchValue(value, configuredResearchSecrets(process.env))) !==
+            canonicalJson(value))
+        throw invalid("Close with a bounded non-secret reason and exact investigation ID.");
+    const input = value, requestSha256 = sha256Text(canonicalJson(input));
+    return withWorkspaceLock(root, "research.investigation.close", async () => {
+        const project = await loadProject(root, projectId), events = await readVerifiedJournal(workspacePaths(root).journal);
+        assertProjectAuthority(project, projectAuthorityIndex(events));
+        const definition = await loadInvestigation(root, projectId, input.investigationId, events);
+        const history = await investigationAttemptHistory(root, projectId, definition, events);
+        const known = await loadInvestigationClosure(root, projectId, definition, history, events);
+        if (known) {
+            if (known.requestSha256 !== requestSha256)
+                throw invalid("The closed investigation already binds a different final reason.");
+            return known;
+        }
+        if (history.some((a) => !a.record))
+            throw invalid("An unresolved attempt keeps its reservation. Inspect it before closing; no resource estimate was erased.", "RESEARCH_INVESTIGATION_INCOMPLETE");
+        const candidates = await loadInvestigationCandidates(root, projectId, definition, events, history);
+        const allocation = project.budget?.entries.find((e) => e.id === `investigation-${definition.recordSha256}`);
+        if (!allocation)
+            throw invalid("Investigation has no project allocation to settle.");
+        const spent = history.reduce((sum, a) => sum + a.start.maxCostUsd, 0);
+        const accounted = allocation.status === "reserved" ? spent : allocation.accountedCostUsd;
+        if (!Number.isFinite(accounted) ||
+            accounted < 0 ||
+            spent > definition.plan.limits.maxCostUsd + 1e-9)
+            throw invalid("Investigation resource accounting is inconsistent.");
+        const core = {
+            ...input,
+            kind: "tiangong-investigation-closure",
+            projectId,
+            definitionSha256: definition.recordSha256,
+            candidateSha256: candidates.at(-1)?.recordSha256 ?? null,
+            requestSha256,
+            attemptSha256s: history.map((a) => a.record.recordSha256),
+            attemptCostUpperBoundUsd: spent,
+            accountedCostUsd: accounted,
+            releasedCostUpperBoundUsd: Math.max(0, definition.plan.limits.maxCostUsd - accounted),
+            actualCostUsd: null,
+            settlementBasis: allocation.status === "reserved"
+                ? "allocated-upper-bound"
+                : allocation.settlementBasis,
+            closedAt: new Date().toISOString(),
+        };
+        const record = { ...core, recordSha256: sha256Text(canonicalJson(core)) };
+        await writeTaskObject(root, projectId, "investigation-closures", record.recordSha256, record);
+        let mutation = await beginProjectMutation(root, "investigation-closure", project, record.recordSha256);
+        try {
+            if (allocation.status === "reserved")
+                settleProjectCost(project, allocation.id, spent, "allocated-upper-bound");
+            project.updatedAt = new Date().toISOString();
+            mutation = await prepareProjectMutation(root, mutation, project);
+            await appendJournalEvent(workspacePaths(root).journal, "investigation.closed", projectId, {
+                projectId,
+                investigationId: input.investigationId,
+                recordSha256: record.recordSha256,
+                mutation: projectMutationBinding(mutation),
+            });
+            await settleProjectMutation(root, mutation);
+        }
+        catch (error) {
+            await settleProjectMutation(root, mutation);
+            throw error;
+        }
+        return record;
+    });
+}
+//# sourceMappingURL=investigation-close.js.map

package/dist/research/workspace/investigation-close.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigation-close.js","sourceRoot":"","sources":["../../../src/research/workspace/investigation-close.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAgC,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAA+B,MAAM,0BAA0B,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAMnD,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC;IACxD,UAAU,EAAE;QACV,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;QAC3B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oCAAoC,EAAE;QAClF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;KAC1D;CACF,CAAC;AACF,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAa,MAAM,CAAC,CAAC;AAC7F,MAAM,UAAU,6BAA6B;IAC3C,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AACD,SAAS,OAAO,CAAC,OAAe,EAAE,IAAI,GAAG,sCAAsC;IAC7E,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AACtD,CAAC;AAiBD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAY,EACZ,SAAiB,EACjB,UAAmC,EACnC,OAAgB,EAChB,MAAsB,EACtB,KAAK,GAA2B,2BAA2B,CAAC,IAAI,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAC1B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,KAAK,KAAK,SAAS;QACrB,CAAC,CAAC,IAAI,KAAK,sBAAsB;QACjC,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,UAAU,CAAC,eAAe,CAC3D,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,gDAAgD,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CACjC,SAAS,EACT,wBAAwB,EACxB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAClC,cAAc,CACf,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAClD,IAAI,EACJ,SAAS,EACT,UAAU,EACV,MAAM,EACN,OAAO,EACP,KAAK,CACN,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACtE,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,MAAM,CAAC,IAAI,KAAK,gCAAgC;QAChD,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,MAAM,CAAC,eAAe,KAAK,UAAU,CAAC,eAAe;QACrD,MAAM,CAAC,gBAAgB,KAAK,UAAU,CAAC,YAAY;QACnD,MAAM,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,CAAC,eAAe,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9B,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC;YAClC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAO,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC;QACjD,MAAM,CAAC,wBAAwB,GAAG,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,wBAAwB,GAAG,KAAK,CAAC,GAAG,IAAI;QACxD,CAAC,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CACrE,MAAM,CAAC,eAAe,CACvB;QACD,CAAC,MAAM,CAAC,eAAe,KAAK,uBAAuB;YACjD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;QACnD,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,yBAAyB,CAAC;QAClD,MAAM,CAAC,yBAAyB,GAAG,CAAC;QACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACzC,MAAM,CAAC,gBAAgB,GAAG,CAAC;QAC3B,MAAM,CAAC,aAAa,KAAK,IAAI;QAC7B,IAAI,CAAC,GAAG,CACN,MAAM,CAAC,yBAAyB;YAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAC3E,GAAG,IAAI;QACR,MAAM,CAAC,IAAI,CACT,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,KAAK,KAAK,SAAS;YACrB,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,UAAU,CAAC,eAAe;YACxD;gBACE,+BAA+B;gBAC/B,iCAAiC;gBACjC,kCAAkC;aACnC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAClB,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAC/B;QAED,MAAM,OAAO,CAAC,sEAAsE,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,SAAiB,EAAE,KAAc;IACtF,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,aAAa,CAAC,qBAAqB,CAAC,KAAK,EAAE,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACjF,aAAa,CAAC,KAAK,CAAC;QAEtB,MAAM,OAAO,CAAC,oEAAoE,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,KAAK,EACjB,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,OAAO,iBAAiB,CAAC,IAAI,EAAE,8BAA8B,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,EAChD,MAAM,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QACnE,sBAAsB,CAAC,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3F,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa;gBACvC,MAAM,OAAO,CAAC,kEAAkE,CAAC,CAAC;YACpF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAChC,MAAM,OAAO,CACX,0GAA0G,EAC1G,mCAAmC,CACpC,CAAC;QACJ,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAClD,IAAI,EACJ,SAAS,EACT,UAAU,EACV,MAAM,EACN,OAAO,CACR,CAAC;QACF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,iBAAiB,UAAU,CAAC,YAAY,EAAE,CAC3D,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,MAAM,OAAO,CAAC,oDAAoD,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAiB,CAAC;QAC1F,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,SAAS,GAAG,CAAC;YACb,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI;YAEhD,MAAM,OAAO,CAAC,oDAAoD,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG;YACX,GAAG,KAAK;YACR,IAAI,EAAE,gCAAyC;YAC/C,SAAS;YACT,gBAAgB,EAAE,UAAU,CAAC,YAAY;YACzC,eAAe,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,IAAI;YACxD,aAAa;YACb,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAO,CAAC,YAAY,CAAC;YAC1D,wBAAwB,EAAE,KAAK;YAC/B,gBAAgB,EAAE,SAAS;YAC3B,yBAAyB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;YACrF,aAAa,EAAE,IAAI;YACnB,eAAe,EACb,UAAU,CAAC,MAAM,KAAK,UAAU;gBAC9B,CAAC,CAAE,uBAAiC;gBACpC,CAAC,CAAC,UAAU,CAAC,eAAgB;YACjC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACnC,CAAC;QACF,MAAM,MAAM,GAAyB,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC9F,IAAI,QAAQ,GAAG,MAAM,oBAAoB,CACvC,IAAI,EACJ,uBAAuB,EACvB,OAAO,EACP,MAAM,CAAC,YAAY,CACpB,CAAC;QACF,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU;gBAClC,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC;YAC5E,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7C,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE;gBACxF,SAAS;gBACT,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,CAAC;aAC3C,CAAC,CAAC;YACH,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/research/workspace/investigation-lineage.d.ts

@@ -0,0 +1,8 @@
+import type { JournalEvent } from "./types.js";
+export interface InvestigationSourceReference {
+    projectId: string;
+    investigationId: string;
+}
+/** Incoming dependencies only. Equal strings in unrelated payloads do not
+ * grant that project's records authority over this export. */
+export declare function relevantInvestigationEvents<T extends Pick<JournalEvent, "scope" | "type" | "payload">>(projectId: string, events: T[], sources: InvestigationSourceReference[]): T[];

package/dist/research/workspace/investigation-lineage.js

@@ -0,0 +1,10 @@
+/** Incoming dependencies only. Equal strings in unrelated payloads do not
+ * grant that project's records authority over this export. */
+export function relevantInvestigationEvents(projectId, events, sources) {
+    const allowed = new Set(sources.map((source) => `${source.projectId}\0${source.investigationId}`));
+    return events.filter((event) => event.scope === projectId ||
+        (event.type.startsWith("investigation.") &&
+            !event.type.startsWith("investigation.promotion.") &&
+            allowed.has(`${event.scope}\0${String(event.payload.investigationId)}`)));
+}
+//# sourceMappingURL=investigation-lineage.js.map

package/dist/research/workspace/investigation-lineage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigation-lineage.js","sourceRoot":"","sources":["../../../src/research/workspace/investigation-lineage.ts"],"names":[],"mappings":"AAMA;8DAC8D;AAC9D,MAAM,UAAU,2BAA2B,CAEzC,SAAiB,EAAE,MAAW,EAAE,OAAuC;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,eAAe,EAAE,CAAC,CAC1E,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YACtC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAC7E,CAAC;AACJ,CAAC"}