@tiangong-ai/cli 0.0.61 → 0.0.63

package/dist/research/workspace/publication-lineage.d.ts

@@ -0,0 +1,34 @@
+import { CliError } from "../../errors.js";
+import type { OutputRecord } from "./types.js";
+export declare const RESULT_CORE_FILES: readonly ["analysis.json", "report.md", "claim-evidence-graph.json", "content-snapshot.json", "inference-snapshot.json", "evidence-snapshot.json"];
+export interface AnalysisLineage {
+    projectId: string;
+    analysisRunId: string;
+    analysisSha256: string;
+    claimEvidenceGraphSha256: string;
+    reportSha256: string;
+}
+export interface MaterialResultFile {
+    role: string;
+    sha256: string;
+    analysisSha256: string;
+}
+export interface PublicationResultLineage extends AnalysisLineage {
+    schemaVersion: 1;
+    files: MaterialResultFile[];
+}
+export declare function lineageError(code: string, message: string, details?: Record<string, unknown>): CliError;
+export declare function publicationResultLineageSchema(): Record<string, unknown>;
+/** Bind the already closed/reviewed core, without a new authority ledger. */
+export declare function closedAnalysisLineage(input: {
+    root: string;
+    projectId: string;
+    closure: Record<string, unknown>;
+    analysis: Record<string, unknown>;
+    records: Record<string, OutputRecord>;
+}): Promise<AnalysisLineage>;
+export declare function analysisGenerationId(base: AnalysisLineage): string;
+export declare function verifyMaterialResultLineage(value: unknown, base: AnalysisLineage, files: Array<{
+    role: string;
+    sha256: string;
+}>): PublicationResultLineage;

package/dist/research/workspace/publication-lineage.js

@@ -0,0 +1,165 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { CliError } from "../../errors.js";
+import { canonicalJson, isObject, sha256Text, workspacePaths } from "./storage.js";
+const HASH = /^[a-f0-9]{64}$/;
+export const RESULT_CORE_FILES = [
+    "analysis.json",
+    "report.md",
+    "claim-evidence-graph.json",
+    "content-snapshot.json",
+    "inference-snapshot.json",
+    "evidence-snapshot.json",
+];
+export function lineageError(code, message, details) {
+    return new CliError(message, { code, exitCode: 3, ...(details ? { details } : {}) });
+}
+export function publicationResultLineageSchema() {
+    const hash = { type: "string", pattern: HASH.source };
+    return {
+        type: "object",
+        additionalProperties: false,
+        required: [
+            "schemaVersion",
+            "projectId",
+            "analysisRunId",
+            "analysisSha256",
+            "claimEvidenceGraphSha256",
+            "reportSha256",
+            "files",
+        ],
+        properties: {
+            schemaVersion: { const: 1 },
+            projectId: { type: "string", minLength: 1 },
+            analysisRunId: { type: "string", minLength: 1 },
+            analysisSha256: hash,
+            claimEvidenceGraphSha256: hash,
+            reportSha256: hash,
+            files: {
+                type: "array",
+                minItems: 2,
+                items: {
+                    type: "object",
+                    additionalProperties: false,
+                    required: ["role", "sha256", "analysisSha256"],
+                    properties: {
+                        role: { type: "string", minLength: 1 },
+                        sha256: hash,
+                        analysisSha256: hash,
+                    },
+                },
+            },
+        },
+    };
+}
+/** Bind the already closed/reviewed core, without a new authority ledger. */
+export async function closedAnalysisLineage(input) {
+    const assertRecord = (records, name, source) => {
+        const path = `outputs/${name}`;
+        const matches = Array.isArray(records)
+            ? records.filter((record) => isObject(record) && record.path === path)
+            : [];
+        const expected = matches.length === 1 ? matches[0] : null;
+        const actual = input.records[name];
+        if (!isObject(expected) ||
+            !actual ||
+            expected.sha256 !== actual.sha256 ||
+            expected.bytes !== actual.bytes) {
+            throw lineageError("RESEARCH_PUBLICATION_ANALYSIS_BINDING_STALE", "Publication requires the exact analysis and material core from its closed review; rebuild the affected base outputs before freezing.", {
+                object: path,
+                binding: source,
+                expectedSha256: isObject(expected) ? (expected.sha256 ?? null) : null,
+                currentSha256: actual?.sha256 ?? null,
+                expectedBytes: isObject(expected) ? (expected.bytes ?? null) : null,
+                currentBytes: actual?.bytes ?? null,
+            });
+        }
+    };
+    for (const name of ["analysis.json", "report.md"])
+        assertRecord(input.closure.artifacts, name, "base-closure");
+    const binding = input.closure.reviewPacket;
+    if (!isObject(binding) ||
+        typeof binding.packetSha256 !== "string" ||
+        !HASH.test(binding.packetSha256)) {
+        throw lineageError("RESEARCH_PUBLICATION_ANALYSIS_BINDING_STALE", "The base closure has no verifiable reviewed result binding.", { object: "closure.reviewPacket" });
+    }
+    const { loadVerifiedReviewPacket } = await import("./runtime.js");
+    const verified = await loadVerifiedReviewPacket(input.root, input.projectId, binding.packetSha256);
+    if (binding.path !== verified.path ||
+        binding.sha256 !== verified.sha256 ||
+        binding.bytes !== verified.bytes) {
+        throw lineageError("RESEARCH_PUBLICATION_ANALYSIS_BINDING_STALE", "The closure's reviewed packet changed.", {
+            object: "closure.reviewPacket",
+            expectedSha256: binding.sha256 ?? null,
+            currentSha256: verified.sha256,
+        });
+    }
+    const bytes = await readFile(join(workspacePaths(input.root).projects, input.projectId, verified.path), "utf8");
+    if (sha256Text(bytes) !== verified.sha256)
+        throw lineageError("RESEARCH_PUBLICATION_ANALYSIS_BINDING_STALE", "The reviewed packet changed during inspection.", { object: verified.path });
+    const packet = JSON.parse(bytes);
+    for (const name of RESULT_CORE_FILES)
+        assertRecord(packet.artifacts, name, "review-packet");
+    const run = input.analysis.analysisRun;
+    if (!isObject(run) || typeof run.id !== "string" || !run.id)
+        throw lineageError("RESEARCH_PUBLICATION_ANALYSIS_BINDING_STALE", "The closed analysis has no run identity.", { object: "analysis.analysisRun.id" });
+    return {
+        projectId: input.projectId,
+        analysisRunId: run.id,
+        analysisSha256: input.records["analysis.json"].sha256,
+        claimEvidenceGraphSha256: input.records["claim-evidence-graph.json"].sha256,
+        reportSha256: input.records["report.md"].sha256,
+    };
+}
+export function analysisGenerationId(base) {
+    return sha256Text(canonicalJson(base));
+}
+export function verifyMaterialResultLineage(value, base, files) {
+    if (!isObject(value) || value.schemaVersion !== 1 || !Array.isArray(value.files)) {
+        throw lineageError("RESEARCH_PUBLICATION_RESULT_LINEAGE_REQUIRED", "Provide resultLineage in the submission manifest, recorded from the closed analysis when producing the material files. Inspect research publication lineage and its schema; do not relabel stale results.");
+    }
+    const allowed = new Set(["schemaVersion", "files", ...Object.keys(base)]);
+    if (Object.keys(value).some((key) => !allowed.has(key)))
+        throw lineageError("RESEARCH_PUBLICATION_RESULT_LINEAGE_MISMATCH", "The material result manifest has unknown fields.");
+    for (const [key, expected] of Object.entries(base)) {
+        if (value[key] !== expected)
+            throw lineageError("RESEARCH_PUBLICATION_ANALYSIS_BINDING_STALE", "The prepared material results belong to a different closed analysis generation.", {
+                object: key,
+                expected,
+                supplied: value[key] ?? null,
+                currentAnalysisGenerationId: analysisGenerationId(base),
+            });
+    }
+    const expected = new Map(files.map((file) => [file.role, file.sha256]));
+    const seen = new Set();
+    for (const file of value.files) {
+        if (!isObject(file) ||
+            typeof file.role !== "string" ||
+            typeof file.sha256 !== "string" ||
+            !HASH.test(file.sha256) ||
+            Object.keys(file).some((key) => !["role", "sha256", "analysisSha256"].includes(key)) ||
+            seen.has(file.role) ||
+            expected.get(file.role) !== file.sha256 ||
+            file.analysisSha256 !== base.analysisSha256) {
+            throw lineageError("RESEARCH_PUBLICATION_RESULT_LINEAGE_MISMATCH", "Every material file must match its prepared bytes and the same closed analysis.", {
+                object: isObject(file) ? (file.role ?? null) : null,
+                expectedSha256: isObject(file) && typeof file.role === "string"
+                    ? (expected.get(file.role) ?? null)
+                    : null,
+                expectedAnalysisSha256: base.analysisSha256,
+            });
+        }
+        seen.add(file.role);
+    }
+    const missing = files.filter((file) => !seen.has(file.role)).map((file) => file.role);
+    if (missing.length)
+        throw lineageError("RESEARCH_PUBLICATION_RESULT_LINEAGE_MISMATCH", "The material result manifest omits frozen files.", { missingRoles: missing });
+    return {
+        schemaVersion: 1,
+        ...base,
+        files: files
+            .map((file) => ({ ...file, analysisSha256: base.analysisSha256 }))
+            .sort((a, b) => (a.role < b.role ? -1 : a.role > b.role ? 1 : 0)),
+    };
+}
+//# sourceMappingURL=publication-lineage.js.map

package/dist/research/workspace/publication-lineage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-lineage.js","sourceRoot":"","sources":["../../../src/research/workspace/publication-lineage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGnF,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAC9B,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,eAAe;IACf,WAAW;IACX,2BAA2B;IAC3B,uBAAuB;IACvB,yBAAyB;IACzB,wBAAwB;CAChB,CAAC;AAmBX,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe,EAAE,OAAiC;IAC3F,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACtD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE;YACR,eAAe;YACf,WAAW;YACX,eAAe;YACf,gBAAgB;YAChB,0BAA0B;YAC1B,cAAc;YACd,OAAO;SACR;QACD,UAAU,EAAE;YACV,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;YAC3C,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;YAC/C,cAAc,EAAE,IAAI;YACpB,wBAAwB,EAAE,IAAI;YAC9B,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,CAAC;gBACX,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,oBAAoB,EAAE,KAAK;oBAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC;oBAC9C,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;wBACtC,MAAM,EAAE,IAAI;wBACZ,cAAc,EAAE,IAAI;qBACrB;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAM3C;IACC,MAAM,YAAY,GAAG,CAAC,OAAgB,EAAE,IAAY,EAAE,MAAc,EAAE,EAAE;QACtE,MAAM,IAAI,GAAG,WAAW,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACpC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;YACtE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IACE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnB,CAAC,MAAM;YACP,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YACjC,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAC/B,CAAC;YACD,MAAM,YAAY,CAChB,6CAA6C,EAC7C,sIAAsI,EACtI;gBACE,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,MAAM;gBACf,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACrE,aAAa,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;gBACrC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACnE,YAAY,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI;aACpC,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC;QAC/C,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;IAC3C,IACE,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClB,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;QACxC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAChC,CAAC;QACD,MAAM,YAAY,CAChB,6CAA6C,EAC7C,6DAA6D,EAC7D,EAAE,MAAM,EAAE,sBAAsB,EAAE,CACnC,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC7C,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,SAAS,EACf,OAAO,CAAC,YAAY,CACrB,CAAC;IACF,IACE,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAC9B,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAClC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,EAChC,CAAC;QACD,MAAM,YAAY,CAChB,6CAA6C,EAC7C,wCAAwC,EACxC;YACE,MAAM,EAAE,sBAAsB;YAC9B,cAAc,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YACtC,aAAa,EAAE,QAAQ,CAAC,MAAM;SAC/B,CACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,EACzE,MAAM,CACP,CAAC;IACF,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM;QACvC,MAAM,YAAY,CAChB,6CAA6C,EAC7C,gDAAgD,EAChD,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAC1B,CAAC;IACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,iBAAiB;QAAE,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE;QACzD,MAAM,YAAY,CAChB,6CAA6C,EAC7C,0CAA0C,EAC1C,EAAE,MAAM,EAAE,yBAAyB,EAAE,CACtC,CAAC;IACJ,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,GAAG,CAAC,EAAE;QACrB,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe,CAAE,CAAC,MAAM;QACtD,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,CAAE,CAAC,MAAM;QAC5E,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAE,CAAC,MAAM;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAqB;IACxD,OAAO,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,IAAqB,EACrB,KAA8C;IAE9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,YAAY,CAChB,8CAA8C,EAC9C,2MAA2M,CAC5M,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,YAAY,CAChB,8CAA8C,EAC9C,kDAAkD,CACnD,CAAC;IACJ,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;YACzB,MAAM,YAAY,CAChB,6CAA6C,EAC7C,iFAAiF,EACjF;gBACE,MAAM,EAAE,GAAG;gBACX,QAAQ;gBACR,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI;gBAC5B,2BAA2B,EAAE,oBAAoB,CAAC,IAAI,CAAC;aACxD,CACF,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;YACf,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACpF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YACnB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;YACvC,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc,EAC3C,CAAC;YACD,MAAM,YAAY,CAChB,8CAA8C,EAC9C,iFAAiF,EACjF;gBACE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACnD,cAAc,EACZ,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAC7C,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;oBACnC,CAAC,CAAC,IAAI;gBACV,sBAAsB,EAAE,IAAI,CAAC,cAAc;aAC5C,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,MAAM;QAChB,MAAM,YAAY,CAChB,8CAA8C,EAC9C,kDAAkD,EAClD,EAAE,YAAY,EAAE,OAAO,EAAE,CAC1B,CAAC;IACJ,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,GAAG,IAAI;QACP,KAAK,EAAE,KAAK;aACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;aACjE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACpE,CAAC;AACJ,CAAC"}

package/dist/research/workspace/publication-workflow.d.ts

@@ -57,6 +57,8 @@ interface PublicationGeneration {
     assessmentResult: TopJournalAssessmentResult;
     requiredReviewRoles: PublicationReviewRole[];
     taskAcceptanceSha256?: string | null;
+    analysisGenerationId?: string;
+    materialResultsManifest?: FrozenFile;
 }
 export interface PublicationReviewPacket {
     schemaVersion: 1;
@@ -88,6 +90,8 @@ export interface PublicationReviewPacket {
     taskAcceptance: TaskAcceptanceContext | null;
     instructions: string[];
     packetSha256: string;
+    analysisGenerationId: string;
+    materialResultsManifest: FrozenFile;
 }
 export interface PublicationStatus {
     schemaVersion: 1;
@@ -109,6 +113,8 @@ export interface PublicationStatus {
     readinessVerdict: PublicationReadinessVerdict;
     boundedStatement: string;
     closureSha256: string | null;
+    analysisGenerationId?: string;
+    materialResultsManifestSha256?: string;
 }
 export interface PublicationClosure {
     schemaVersion: 1;
@@ -135,6 +141,8 @@ export interface PublicationClosure {
     readinessVerdict: PublicationReadinessVerdict;
     boundedStatement: string;
     closureSha256: string;
+    analysisGenerationId: string;
+    materialResultsManifest: FrozenFile;
 }
 export declare function publicationAssessmentSchema(): Record<string, unknown>;
 export declare function publicationReviewSchema(role: PublicationReviewRole): Record<string, unknown>;
@@ -148,6 +156,7 @@ export declare function freezePublicationManuscript(input: {
         role: PublicationSubmissionRole;
         path: string;
     }>;
+    resultLineage?: unknown;
     producerAgent: AgentKind;
     producerSessionId: string;
 }): Promise<PublicationGeneration & {
@@ -172,4 +181,19 @@ export declare function submitPublicationReview(input: {
 }>;
 export declare function inspectPublicationStatus(root: string, projectId: string): Promise<PublicationStatus>;
 export declare function closePublication(root: string, projectId: string): Promise<PublicationClosure>;
+/** Read the current authority before authoring material; never label existing files automatically. */
+export declare function inspectPublicationLineage(root: string, projectId: string): Promise<{
+    analysisGenerationId: string;
+    resultLineage: {
+        projectId: string;
+        analysisRunId: string;
+        analysisSha256: string;
+        claimEvidenceGraphSha256: string;
+        reportSha256: string;
+        schemaVersion: number;
+        files: never[];
+    };
+    bindingScope: string;
+    nextAction: string;
+}>;
 export {};

package/dist/research/workspace/publication-workflow.js

@@ -10,8 +10,9 @@ import { loadProject } from "./projects.js";
 import { assertResearchPolicyBinding } from "./research-policy.js";
 import { assertScientificGateForStage } from "./scientific-review.js";
 import { compileTaskAcceptanceContext } from "./task-acceptance.js";
+import { analysisGenerationId, closedAnalysisLineage, RESULT_CORE_FILES, verifyMaterialResultLineage, lineageError, } from "./publication-lineage.js";
 import { validateTaskObject } from "./task-contract.js";
-import { canonicalJson, ensureDirectory, isObject, pathExists, readJsonFile, sha256File, sha256Text, workspacePaths, writeJsonAtomic, } from "./storage.js";
+import { canonicalJson, ensureDirectory, fileRecord, isObject, pathExists, readJsonFile, sha256File, sha256Text, workspacePaths, writeJsonAtomic, } from "./storage.js";
 import { loadWorkspaceConfig, withWorkspaceLock } from "./workspace.js";
 const REQUIRED_REVIEW_ROLES = [
     "evidence",
@@ -250,17 +251,12 @@ export async function freezePublicationManuscript(input) {
         if ((await usedReviewerSessionHashes(input.root, project.id)).has(producerSessionSha256)) {
             throw publicationError("RESEARCH_PUBLICATION_REVIEW_NOT_INDEPENDENT", "A native producer session must not reuse any prior independent reviewer session.");
         }
-        const assessmentValue = parsePublicationAssessment(JSON.parse(await readRegularTextFile(input.assessmentPath, "publication assessment")));
-        await validateSubmissionManuscript(input.manuscriptPath);
         const projectRoot = projectDirectory(input.root, project.id);
         const outputRoot = join(projectRoot, "outputs");
-        const snapshotValue = await readJsonFile(join(outputRoot, "evidence-snapshot.json"), "Frozen evidence snapshot");
-        const snapshotSha256 = verifiedSnapshotSha256(project, snapshotValue);
-        const closureValue = await readJsonFile(join(outputRoot, "closure.json"), "Base research closure");
-        assertBaseClosure(project, closureValue, snapshotSha256);
-        const submissionBindings = await validateSubmissionBindings(outputRoot, project.id, String(snapshotValue.snapshotId), snapshotSha256, project.publicationPolicy.resolvedPolicySha256);
         const manuscript = await storePublicationObject(input.root, project.id, input.manuscriptPath, "manuscript");
         const assessment = await storePublicationObject(input.root, project.id, input.assessmentPath, "publication-assessment");
+        const assessmentValue = parsePublicationAssessment(JSON.parse(await readRegularTextFile(join(projectRoot, assessment.objectLocator), "publication assessment")));
+        await validateSubmissionManuscript(join(projectRoot, manuscript.objectLocator));
         const supplements = [];
         for (const [index, path] of [...new Set(input.supplementPaths)].entries()) {
             supplements.push(await storePublicationObject(input.root, project.id, path, `supplement-${index + 1}`));
@@ -291,6 +287,38 @@ export async function freezePublicationManuscript(input) {
         const contentSnapshot = await storePublicationObject(input.root, project.id, join(outputRoot, "content-snapshot.json"), "content-snapshot", true);
         const inferenceSnapshot = await storePublicationObject(input.root, project.id, join(outputRoot, "inference-snapshot.json"), "inference-snapshot", true);
         const claimEvidenceGraph = await storePublicationObject(input.root, project.id, join(outputRoot, "claim-evidence-graph.json"), "claim-evidence-graph", true);
+        const coreObjects = {
+            "analysis.json": baseResearch.analysis,
+            "report.md": baseResearch.report,
+            "claim-evidence-graph.json": claimEvidenceGraph,
+            "content-snapshot.json": contentSnapshot,
+            "inference-snapshot.json": inferenceSnapshot,
+            "evidence-snapshot.json": evidenceSnapshot,
+        };
+        const frozenPaths = Object.fromEntries(Object.entries(coreObjects).map(([name, file]) => [
+            name,
+            join(projectRoot, file.objectLocator),
+        ]));
+        const snapshotValue = await readJsonFile(frozenPaths["evidence-snapshot.json"], "Frozen evidence snapshot");
+        const snapshotSha256 = verifiedSnapshotSha256(project, snapshotValue);
+        const closureValue = await readJsonFile(join(projectRoot, baseResearch.closure.objectLocator), "Base research closure");
+        assertBaseClosure(project, closureValue, snapshotSha256);
+        const submissionBindings = await validateSubmissionBindings(outputRoot, project.id, String(snapshotValue.snapshotId), snapshotSha256, project.publicationPolicy.resolvedPolicySha256, frozenPaths);
+        const baseLineage = await closedAnalysisLineage({
+            root: input.root,
+            projectId: project.id,
+            closure: closureValue,
+            analysis: submissionBindings.analysis,
+            records: Object.fromEntries(Object.entries(coreObjects).map(([name, file]) => [
+                name,
+                { path: `outputs/${name}`, sha256: file.sha256, bytes: file.bytes },
+            ])),
+        });
+        const materialLineage = verifyMaterialResultLineage(input.resultLineage, baseLineage, materialFiles(manuscript, assessment, supplements, submissionFiles));
+        const materialResultsPath = join(outputRoot, "material-results-manifest.json");
+        await writeJsonAtomic(materialResultsPath, materialLineage);
+        const materialResultsManifest = await storePublicationObject(input.root, project.id, materialResultsPath, "material-results-manifest", true);
+        const resultGenerationId = analysisGenerationId(baseLineage);
         const analysisValue = submissionBindings.analysis;
         const reproducibilityPath = join(outputRoot, "submission-reproducibility.json");
         await writeJsonAtomic(reproducibilityPath, {
@@ -299,6 +327,8 @@ export async function freezePublicationManuscript(input) {
             projectId: project.id,
             analysisRun: isObject(analysisValue.analysisRun) ? analysisValue.analysisRun : null,
             bindings: {
+                analysisGenerationId: resultGenerationId,
+                materialResultsManifestSha256: materialResultsManifest.sha256,
                 evidenceSnapshotSha256: evidenceSnapshot.sha256,
                 contentSnapshotSha256: contentSnapshot.sha256,
                 inferenceSnapshotSha256: inferenceSnapshot.sha256,
@@ -344,6 +374,8 @@ export async function freezePublicationManuscript(input) {
             assessment,
             supplements,
             submissionPackage,
+            analysisGenerationId: resultGenerationId,
+            materialResultsManifest,
             assessmentResult,
             requiredReviewRoles: requiredReviewRoles(project.publicationPolicy),
             taskAcceptanceSha256: (await compileTaskAcceptanceContext(input.root, project))?.contextSha256 ?? null,
@@ -431,6 +463,8 @@ export async function preparePublicationReview(input) {
             assessment: generation.assessment,
             supplements: generation.supplements,
             submissionPackage: generation.submissionPackage,
+            analysisGenerationId: generation.analysisGenerationId,
+            materialResultsManifest: generation.materialResultsManifest,
             mechanicalAssessment: generation.assessmentResult,
             taskAcceptance: await compileTaskAcceptanceContext(input.root, project),
             instructions: reviewInstructions(input.role),
@@ -571,6 +605,8 @@ export async function inspectPublicationStatus(root, projectId) {
         readinessVerdict,
         boundedStatement: boundedStatement(readinessVerdict),
         closureSha256,
+        analysisGenerationId: generation.analysisGenerationId,
+        materialResultsManifestSha256: generation.materialResultsManifest.sha256,
     };
 }
 export async function closePublication(root, projectId) {
@@ -601,6 +637,8 @@ export async function closePublication(root, projectId) {
             assessment: generation.assessment,
             supplements: generation.supplements,
             submissionPackage: generation.submissionPackage,
+            analysisGenerationId: generation.analysisGenerationId,
+            materialResultsManifest: generation.materialResultsManifest,
             reviews: reviews.map((entry) => ({
                 role: entry.role,
                 packetSha256: entry.packet.packetSha256,
@@ -679,6 +717,9 @@ async function validateSubmissionManuscript(path) {
     }
     const content = await readRegularTextFile(canonical, "submission manuscript");
     const headings = [...content.matchAll(/^#{1,6}\s+(.+?)\s*$/gmu)].map((match) => (match[1] ?? "")
+        // Strip only a conservative section number ("1", "3.1") optionally closed
+        // by "." or ")" and followed by required whitespace; "1Introduction" stays.
+        .replace(/^\d+(?:\.\d+)*[.)]?[ \t]+/u, "")
         .trim()
         .toLowerCase()
         .replaceAll(/[^a-z0-9]+/gu, " ")
@@ -700,12 +741,13 @@ async function validateSubmissionManuscript(path) {
         throw publicationError("RESEARCH_PUBLICATION_MANUSCRIPT_INCOMPLETE", "The manuscript is missing required submission sections.", 3, { missingSections });
     }
 }
-async function validateSubmissionBindings(outputRoot, projectId, evidenceSnapshotId, evidenceSnapshotSha256, policySha256) {
+async function validateSubmissionBindings(outputRoot, projectId, evidenceSnapshotId, evidenceSnapshotSha256, policySha256, frozenPaths) {
+    const inputPath = (name) => frozenPaths?.[name] ?? join(outputRoot, name);
     const [content, inference, analysis, graph] = await Promise.all([
-        readJsonFile(join(outputRoot, "content-snapshot.json"), "Frozen content snapshot"),
-        readJsonFile(join(outputRoot, "inference-snapshot.json"), "Frozen inference snapshot"),
-        readJsonFile(join(outputRoot, "analysis.json"), "Frozen analysis"),
-        readJsonFile(join(outputRoot, "claim-evidence-graph.json"), "Frozen Claim-Evidence Graph"),
+        readJsonFile(inputPath("content-snapshot.json"), "Frozen content snapshot"),
+        readJsonFile(inputPath("inference-snapshot.json"), "Frozen inference snapshot"),
+        readJsonFile(inputPath("analysis.json"), "Frozen analysis"),
+        readJsonFile(inputPath("claim-evidence-graph.json"), "Frozen Claim-Evidence Graph"),
     ]);
     const contentGate = isObject(content.gate) ? content.gate : {};
     const inferenceGate = isObject(inference.gate) ? inference.gate : {};
@@ -752,7 +794,7 @@ async function validateSubmissionBindings(outputRoot, projectId, evidenceSnapsho
         graph.kind !== "tiangong-claim-evidence-graph" ||
         graph.projectId !== projectId ||
         graph.inferenceSnapshotSha256 !== inference.snapshotSha256 ||
-        graph.analysisSha256 !== (await sha256File(join(outputRoot, "analysis.json"))) ||
+        graph.analysisSha256 !== (await sha256File(inputPath("analysis.json"))) ||
         graph.analysisRunId !== analysisRun.id ||
         nodeById.size !== graphNodes.length ||
         new Set(graphEdges.flatMap((edge) => (typeof edge.id === "string" ? [edge.id] : []))).size !==
@@ -944,7 +986,11 @@ async function loadCurrentGeneration(root, projectId) {
     if (sha256Text(canonicalJson(submissionPackageCore)) !== packageSha256) {
         throw publicationError("RESEARCH_PUBLICATION_STATE_INVALID", "The publication submission package hash binding is invalid.");
     }
+    if (!generation.materialResultsManifest || !generation.analysisGenerationId) {
+        throw lineageError("RESEARCH_PUBLICATION_RESULT_LINEAGE_REQUIRED", "This legacy publication has no material result lineage. Preserve its history and refreeze with a prepared resultLineage before another review or readiness claim.");
+    }
     await verifyFrozenFiles(root, projectId, [
+        generation.materialResultsManifest,
         generation.manuscript,
         generation.assessment,
         generation.evidenceSnapshot.object,
@@ -958,12 +1004,70 @@ async function loadCurrentGeneration(root, projectId) {
         generation.submissionPackage.claimEvidenceGraph,
         generation.submissionPackage.reproducibilityManifest,
     ]);
+    const base = await currentClosedAnalysisLineage(root, projectId);
+    const manifest = await readJsonFile(join(projectDirectory(root, projectId), generation.materialResultsManifest.objectLocator), "Frozen material results manifest");
+    verifyMaterialResultLineage(manifest, base, materialFiles(generation.manuscript, generation.assessment, generation.supplements, generation.submissionPackage.files));
+    if (generation.analysisGenerationId !== analysisGenerationId(base) ||
+        generation.baseResearch.analysis.sha256 !== base.analysisSha256 ||
+        generation.baseResearch.report.sha256 !== base.reportSha256 ||
+        generation.submissionPackage.claimEvidenceGraph.sha256 !== base.claimEvidenceGraphSha256) {
+        throw lineageError("RESEARCH_PUBLICATION_ANALYSIS_BINDING_STALE", "The publication no longer binds the current closed result generation.", {
+            object: "analysisGenerationId",
+            expected: analysisGenerationId(base),
+            supplied: generation.analysisGenerationId,
+        });
+    }
+    const reproduction = await readJsonFile(join(projectDirectory(root, projectId), generation.submissionPackage.reproducibilityManifest.objectLocator), "Frozen reproducibility manifest");
+    const expectedReproduction = {
+        analysisGenerationId: generation.analysisGenerationId,
+        materialResultsManifestSha256: generation.materialResultsManifest.sha256,
+        evidenceSnapshotSha256: generation.evidenceSnapshot.object.sha256,
+        contentSnapshotSha256: generation.submissionPackage.contentSnapshot.sha256,
+        inferenceSnapshotSha256: generation.submissionPackage.inferenceSnapshot.sha256,
+        claimEvidenceGraphSha256: generation.submissionPackage.claimEvidenceGraph.sha256,
+        analysisSha256: generation.baseResearch.analysis.sha256,
+    };
+    const frozenAnalysis = await readJsonFile(join(projectDirectory(root, projectId), generation.baseResearch.analysis.objectLocator), "Frozen analysis");
+    if (reproduction.projectId !== projectId ||
+        canonicalJson(reproduction.bindings) !== canonicalJson(expectedReproduction) ||
+        canonicalJson(reproduction.analysisRun) !== canonicalJson(frozenAnalysis.analysisRun)) {
+        throw lineageError("RESEARCH_PUBLICATION_RESULT_LINEAGE_MISMATCH", "The reproducibility record does not bind the frozen material results and analysis.", { object: "submission-reproducibility" });
+    }
     const currentTask = await compileTaskAcceptanceContext(root, await loadProject(root, projectId));
     if ((generation.taskAcceptanceSha256 ?? null) !== (currentTask?.contextSha256 ?? null)) {
         throw publicationError("RESEARCH_PUBLICATION_TASK_BINDING_INVALID", "The frozen publication generation no longer binds the current task checks.");
     }
     return generation;
 }
+function materialFiles(manuscript, assessment, supplements, submission) {
+    return [
+        { role: "manuscript", sha256: manuscript.sha256 },
+        { role: "assessment", sha256: assessment.sha256 },
+        ...supplements.map((file) => ({ role: file.logicalName, sha256: file.sha256 })),
+        ...submission.map((file) => ({ role: file.role, sha256: file.sha256 })),
+    ];
+}
+async function currentClosedAnalysisLineage(root, projectId) {
+    const project = await requireClosedTopJournalProject(root, projectId);
+    const outputRoot = join(projectDirectory(root, projectId), "outputs");
+    const snapshot = await readJsonFile(join(outputRoot, "evidence-snapshot.json"), "Closed evidence snapshot");
+    const snapshotSha256 = verifiedSnapshotSha256(project, snapshot);
+    const closure = await readJsonFile(join(outputRoot, "closure.json"), "Base closure");
+    assertBaseClosure(project, closure, snapshotSha256);
+    const { analysis } = await validateSubmissionBindings(outputRoot, projectId, String(snapshot.snapshotId), snapshotSha256, project.publicationPolicy.resolvedPolicySha256);
+    const records = Object.fromEntries(await Promise.all(RESULT_CORE_FILES.map(async (name) => [name, await fileRecord(join(outputRoot, name), `outputs/${name}`)])));
+    return closedAnalysisLineage({ root, projectId, closure, analysis, records });
+}
+/** Read the current authority before authoring material; never label existing files automatically. */
+export async function inspectPublicationLineage(root, projectId) {
+    const base = await currentClosedAnalysisLineage(root, projectId);
+    return {
+        analysisGenerationId: analysisGenerationId(base),
+        resultLineage: { schemaVersion: 1, ...base, files: [] },
+        bindingScope: "producer-declared-derivation-with-verified-bytes-and-closed-analysis",
+        nextAction: "Record each material file's role, SHA-256 and source analysisSha256 when producing it. Fill every manuscript, assessment, submission and supplement-N entry; do not relabel stale artifacts. Freeze verifies this prepared manifest. Scientific fidelity still requires independent review.",
+    };
+}
 async function verifyFrozenFiles(root, projectId, files) {
     for (const file of files) {
         const path = join(projectDirectory(root, projectId), file.objectLocator);