@warpgogol/forge 2.1.0 → 2.3.0

package/dist/os/program/schemas.d.ts

@@ -0,0 +1,225 @@
+import { z } from "zod/v4";
+export declare const programActorSchema: z.ZodString;
+export declare const programStateSchema: z.ZodEnum<{
+    preparing: "preparing";
+    executing: "executing";
+    blocked: "blocked";
+    complete: "complete";
+}>;
+export declare const packetStateSchema: z.ZodEnum<{
+    active: "active";
+    draft: "draft";
+    completed: "completed";
+    blocked: "blocked";
+    sealed: "sealed";
+}>;
+export declare const recoveryStatusSchema: z.ZodEnum<{
+    verified: "verified";
+    "not-applicable": "not-applicable";
+}>;
+export declare const programLeasePhaseSchema: z.ZodEnum<{
+    preparation: "preparation";
+    execution: "execution";
+}>;
+export declare const programPacketIndexEntrySchema: z.ZodObject<{
+    order: z.ZodNumber;
+    packetId: z.ZodString;
+    file: z.ZodString;
+    state: z.ZodEnum<{
+        active: "active";
+        draft: "draft";
+        completed: "completed";
+        blocked: "blocked";
+        sealed: "sealed";
+    }>;
+    governingDecision: z.ZodString;
+    decisionKind: z.ZodEnum<{
+        rfc: "rfc";
+        "spec-amendment": "spec-amendment";
+        "spec-node": "spec-node";
+    }>;
+    resolvedRfc: z.ZodNullable<z.ZodString>;
+    dependsOnPacket: z.ZodNullable<z.ZodString>;
+    baseCommit: z.ZodNullable<z.ZodString>;
+    sealCommit: z.ZodNullable<z.ZodString>;
+    completion: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export declare const programManifestSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"forge/program@1">;
+    program: z.ZodString;
+    title: z.ZodString;
+    branch: z.ZodString;
+    state: z.ZodEnum<{
+        preparing: "preparing";
+        executing: "executing";
+        blocked: "blocked";
+        complete: "complete";
+    }>;
+    currentPacket: z.ZodString;
+    steward: z.ZodString;
+    sequential: z.ZodLiteral<true>;
+    parallelism: z.ZodLiteral<1>;
+    packets: z.ZodArray<z.ZodObject<{
+        order: z.ZodNumber;
+        packetId: z.ZodString;
+        file: z.ZodString;
+        state: z.ZodEnum<{
+            active: "active";
+            draft: "draft";
+            completed: "completed";
+            blocked: "blocked";
+            sealed: "sealed";
+        }>;
+        governingDecision: z.ZodString;
+        decisionKind: z.ZodEnum<{
+            rfc: "rfc";
+            "spec-amendment": "spec-amendment";
+            "spec-node": "spec-node";
+        }>;
+        resolvedRfc: z.ZodNullable<z.ZodString>;
+        dependsOnPacket: z.ZodNullable<z.ZodString>;
+        baseCommit: z.ZodNullable<z.ZodString>;
+        sealCommit: z.ZodNullable<z.ZodString>;
+        completion: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strict>;
+export declare const normativeSourceSchema: z.ZodObject<{
+    path: z.ZodString;
+    sha256: z.ZodString;
+}, z.core.$strip>;
+export declare const requiredValidationSchema: z.ZodObject<{
+    command: z.ZodString;
+    expectedStatus: z.ZodLiteral<"pass">;
+    expectedDiagnostics: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export declare const programPacketSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"forge/program-packet@1">;
+    program: z.ZodString;
+    packetId: z.ZodString;
+    state: z.ZodEnum<{
+        draft: "draft";
+        sealed: "sealed";
+    }>;
+    governingDecision: z.ZodString;
+    decisionKind: z.ZodEnum<{
+        rfc: "rfc";
+        "spec-amendment": "spec-amendment";
+        "spec-node": "spec-node";
+    }>;
+    resolvedRfc: z.ZodNullable<z.ZodString>;
+    dependsOnPacket: z.ZodNullable<z.ZodString>;
+    baseCommit: z.ZodNullable<z.ZodString>;
+    branch: z.ZodString;
+    steward: z.ZodString;
+    normativeSources: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strip>>;
+    allowedFiles: z.ZodArray<z.ZodString>;
+    forbiddenFiles: z.ZodArray<z.ZodString>;
+    permittedTransitionDiagnostics: z.ZodArray<z.ZodString>;
+    requiredValidations: z.ZodArray<z.ZodObject<{
+        command: z.ZodString;
+        expectedStatus: z.ZodLiteral<"pass">;
+        expectedDiagnostics: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strict>;
+export declare const programPacketLeaseSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"forge/program-packet-lease@1">;
+    program: z.ZodString;
+    packetId: z.ZodString;
+    phase: z.ZodEnum<{
+        preparation: "preparation";
+        execution: "execution";
+    }>;
+    actor: z.ZodString;
+    baseCommit: z.ZodString;
+    sealCommit: z.ZodNullable<z.ZodString>;
+    tokenHash: z.ZodString;
+    startedAt: z.ZodString;
+    heartbeatAt: z.ZodString;
+    timeoutSeconds: z.ZodNumber;
+}, z.core.$strict>;
+export declare const preparationValidationSchema: z.ZodObject<{
+    command: z.ZodString;
+    status: z.ZodLiteral<"pass">;
+    evidenceDigest: z.ZodString;
+}, z.core.$strip>;
+export declare const programPacketPreparationSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"forge/program-packet-preparation@1">;
+    program: z.ZodString;
+    packetId: z.ZodString;
+    baseCommit: z.ZodString;
+    preparationCommits: z.ZodArray<z.ZodString>;
+    preparationHead: z.ZodString;
+    changedFiles: z.ZodArray<z.ZodString>;
+    governingDecision: z.ZodString;
+    resolvedRfc: z.ZodString;
+    materializationCommit: z.ZodString;
+    validations: z.ZodArray<z.ZodObject<{
+        command: z.ZodString;
+        status: z.ZodLiteral<"pass">;
+        evidenceDigest: z.ZodString;
+    }, z.core.$strip>>;
+    cleanTrees: z.ZodLiteral<true>;
+    preparedBy: z.ZodString;
+}, z.core.$strict>;
+export declare const completionValidationSchema: z.ZodObject<{
+    command: z.ZodString;
+    status: z.ZodLiteral<"pass">;
+    evidenceDigest: z.ZodString;
+}, z.core.$strip>;
+export declare const programPacketCompletionSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"forge/program-packet-completion@1">;
+    program: z.ZodString;
+    packetId: z.ZodString;
+    baseCommit: z.ZodString;
+    sealCommit: z.ZodString;
+    implementationCommits: z.ZodArray<z.ZodString>;
+    implementationHead: z.ZodString;
+    changedFiles: z.ZodArray<z.ZodString>;
+    validations: z.ZodArray<z.ZodObject<{
+        command: z.ZodString;
+        status: z.ZodLiteral<"pass">;
+        evidenceDigest: z.ZodString;
+    }, z.core.$strip>>;
+    remainingTransitionDiagnostics: z.ZodArray<z.ZodString>;
+    unexpectedDiagnostics: z.ZodArray<z.ZodString>;
+    recoveryStatus: z.ZodEnum<{
+        verified: "verified";
+        "not-applicable": "not-applicable";
+    }>;
+    cleanTrees: z.ZodLiteral<true>;
+    completedBy: z.ZodString;
+}, z.core.$strict>;
+export declare const recoveryRecordSchema: z.ZodObject<{
+    schema: z.ZodLiteral<"forge/program-packet-recovery@1">;
+    program: z.ZodString;
+    packetId: z.ZodString;
+    previousLeaseDigest: z.ZodString;
+    reason: z.ZodString;
+    actor: z.ZodString;
+    observedHead: z.ZodString;
+    target: z.ZodEnum<{
+        blocked: "blocked";
+        sealed: "sealed";
+    }>;
+    recoveredAt: z.ZodString;
+}, z.core.$strict>;
+export type ProgramActor = z.infer<typeof programActorSchema>;
+export type ProgramState = z.infer<typeof programStateSchema>;
+export type PacketState = z.infer<typeof packetStateSchema>;
+export type RecoveryStatus = z.infer<typeof recoveryStatusSchema>;
+export type ProgramManifest = z.infer<typeof programManifestSchema>;
+export type ProgramPacketIndexEntry = z.infer<typeof programPacketIndexEntrySchema>;
+export type ProgramPacket = z.infer<typeof programPacketSchema>;
+export type NormativeSource = z.infer<typeof normativeSourceSchema>;
+export type RequiredValidation = z.infer<typeof requiredValidationSchema>;
+export type ProgramLeasePhase = z.infer<typeof programLeasePhaseSchema>;
+export type ProgramPacketLease = z.infer<typeof programPacketLeaseSchema>;
+export type PreparationValidation = z.infer<typeof preparationValidationSchema>;
+export type ProgramPacketPreparation = z.infer<typeof programPacketPreparationSchema>;
+export type ProgramPacketCompletion = z.infer<typeof programPacketCompletionSchema>;
+export type CompletionValidation = z.infer<typeof completionValidationSchema>;
+export type RecoveryRecord = z.infer<typeof recoveryRecordSchema>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/os/program/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../os/program/schemas.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAM3B,eAAO,MAAM,kBAAkB,aAEuC,CAAC;AAEvE,eAAO,MAAM,kBAAkB;;;;;EAA4D,CAAC;AAE5F,eAAO,MAAM,iBAAiB;;;;;;EAAgE,CAAC;AAE/F,eAAO,MAAM,oBAAoB;;;EAAyC,CAAC;AAE3E,eAAO,MAAM,uBAAuB;;;EAAuC,CAAC;AAM5E,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;iBAYxC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAavB,CAAC;AAMZ,eAAO,MAAM,qBAAqB;;;iBAGhC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmBrB,CAAC;AAMZ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;kBAc1B,CAAC;AAMZ,eAAO,MAAM,2BAA2B;;;;iBAItC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;kBAgBhC,CAAC;AAMZ,eAAO,MAAM,0BAA0B;;;;iBAIrC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;kBAiB/B,CAAC;AAMZ,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;kBAYtB,CAAC;AAMZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/os/program/schemas.js

@@ -0,0 +1,174 @@
+/*
+<MODULE_CONTRACT>
+<purpose>Zod schemas for the forge/program@1 control plane — program manifest,
+packet, lease, completion, and recovery records. All schemas are strict and
+reject unknown fields (RFC-0856).</purpose>
+<non-goals>
+  <item>Do not import from @warpgogol/* — forge must remain dependency-free.</item>
+  <item>Do not add command logic here — schemas only.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0856: initial program control-plane schemas.</item>
+  <item>RFC-0857: phase-aware lease schema (preparation | execution) and preparation report schema.</item>
+</CHANGE_SUMMARY>
+*/
+import { z } from "zod/v4";
+// ---------------------------------------------------------------------------
+// Shared primitives
+// ---------------------------------------------------------------------------
+export const programActorSchema = z
+    .string()
+    .regex(/^(human|agent):.+$/, "Must be 'human:<id>' or 'agent:<id>'");
+export const programStateSchema = z.enum(["preparing", "executing", "blocked", "complete"]);
+export const packetStateSchema = z.enum(["draft", "sealed", "active", "completed", "blocked"]);
+export const recoveryStatusSchema = z.enum(["verified", "not-applicable"]);
+export const programLeasePhaseSchema = z.enum(["preparation", "execution"]);
+// ---------------------------------------------------------------------------
+// Program manifest: forge/program@1
+// ---------------------------------------------------------------------------
+export const programPacketIndexEntrySchema = z.object({
+    order: z.number().int().min(0),
+    packetId: z.string().min(1),
+    file: z.string().min(1),
+    state: packetStateSchema,
+    governingDecision: z.string().min(1),
+    decisionKind: z.enum(["rfc", "spec-amendment", "spec-node"]),
+    resolvedRfc: z.string().nullable(),
+    dependsOnPacket: z.string().nullable(),
+    baseCommit: z.string().nullable(),
+    sealCommit: z.string().nullable(),
+    completion: z.string().nullable(),
+});
+export const programManifestSchema = z
+    .object({
+    schema: z.literal("forge/program@1"),
+    program: z.string().min(1),
+    title: z.string().min(1),
+    branch: z.string().min(1),
+    state: programStateSchema,
+    currentPacket: z.string().min(1),
+    steward: programActorSchema,
+    sequential: z.literal(true),
+    parallelism: z.literal(1),
+    packets: z.array(programPacketIndexEntrySchema).min(1),
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// Program packet: forge/program-packet@1
+// ---------------------------------------------------------------------------
+export const normativeSourceSchema = z.object({
+    path: z.string().min(1),
+    sha256: z.string().regex(/^[0-9a-f]{64}$/, "Must be a SHA-256 hex digest"),
+});
+export const requiredValidationSchema = z.object({
+    command: z.string().min(1),
+    expectedStatus: z.literal("pass"),
+    expectedDiagnostics: z.array(z.string()),
+});
+export const programPacketSchema = z
+    .object({
+    schema: z.literal("forge/program-packet@1"),
+    program: z.string().min(1),
+    packetId: z.string().min(1),
+    state: z.enum(["draft", "sealed"]),
+    governingDecision: z.string().min(1),
+    decisionKind: z.enum(["rfc", "spec-amendment", "spec-node"]),
+    resolvedRfc: z.string().nullable(),
+    dependsOnPacket: z.string().nullable(),
+    baseCommit: z.string().nullable(),
+    branch: z.string().min(1),
+    steward: programActorSchema,
+    normativeSources: z.array(normativeSourceSchema),
+    allowedFiles: z.array(z.string().min(1)).min(1),
+    forbiddenFiles: z.array(z.string().min(1)),
+    permittedTransitionDiagnostics: z.array(z.string()),
+    requiredValidations: z.array(requiredValidationSchema),
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// Program packet lease: forge/program-packet-lease@1
+// ---------------------------------------------------------------------------
+export const programPacketLeaseSchema = z
+    .object({
+    schema: z.literal("forge/program-packet-lease@1"),
+    program: z.string().min(1),
+    packetId: z.string().min(1),
+    phase: programLeasePhaseSchema,
+    actor: programActorSchema,
+    baseCommit: z.string().min(1),
+    sealCommit: z.string().nullable(),
+    tokenHash: z.string().regex(/^[0-9a-f]{64}$/, "Must be a SHA-256 hex digest"),
+    startedAt: z.string().min(1),
+    heartbeatAt: z.string().min(1),
+    timeoutSeconds: z.number().int().positive(),
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// Program packet preparation: forge/program-packet-preparation@1 (RFC-0857)
+// ---------------------------------------------------------------------------
+export const preparationValidationSchema = z.object({
+    command: z.string().min(1),
+    status: z.literal("pass"),
+    evidenceDigest: z.string().min(1),
+});
+export const programPacketPreparationSchema = z
+    .object({
+    schema: z.literal("forge/program-packet-preparation@1"),
+    program: z.string().min(1),
+    packetId: z.string().min(1),
+    baseCommit: z.string().min(1),
+    preparationCommits: z.array(z.string().min(1)),
+    preparationHead: z.string().min(1),
+    changedFiles: z.array(z.string().min(1)),
+    governingDecision: z.string().min(1),
+    resolvedRfc: z.string().min(1),
+    materializationCommit: z.string().min(1),
+    validations: z.array(preparationValidationSchema),
+    cleanTrees: z.literal(true),
+    preparedBy: programActorSchema,
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// Program packet completion: forge/program-packet-completion@1
+// ---------------------------------------------------------------------------
+export const completionValidationSchema = z.object({
+    command: z.string().min(1),
+    status: z.literal("pass"),
+    evidenceDigest: z.string().min(1),
+});
+export const programPacketCompletionSchema = z
+    .object({
+    schema: z.literal("forge/program-packet-completion@1"),
+    program: z.string().min(1),
+    packetId: z.string().min(1),
+    baseCommit: z.string().min(1),
+    sealCommit: z.string().min(1),
+    implementationCommits: z.array(z.string().min(1)),
+    implementationHead: z.string().min(1),
+    changedFiles: z.array(z.string().min(1)),
+    validations: z.array(completionValidationSchema),
+    remainingTransitionDiagnostics: z.array(z.string()),
+    unexpectedDiagnostics: z.array(z.string()).length(0),
+    recoveryStatus: recoveryStatusSchema,
+    cleanTrees: z.literal(true),
+    completedBy: programActorSchema,
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// Recovery record: forge/program-packet-recovery@1
+// ---------------------------------------------------------------------------
+export const recoveryRecordSchema = z
+    .object({
+    schema: z.literal("forge/program-packet-recovery@1"),
+    program: z.string().min(1),
+    packetId: z.string().min(1),
+    previousLeaseDigest: z.string().min(1),
+    reason: z.string().min(1),
+    actor: programActorSchema,
+    observedHead: z.string().min(1),
+    target: z.enum(["blocked", "sealed"]),
+    recoveredAt: z.string().min(1),
+})
+    .strict();
+//# sourceMappingURL=schemas.js.map

package/dist/os/program/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../os/program/schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AAEF,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,KAAK,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAE5E,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,iBAAiB;IACxB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,kBAAkB;IACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,kBAAkB;IAC3B,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,8BAA8B,CAAC;CAC3E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,kBAAkB;IAC3B,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1C,8BAA8B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,uBAAuB;IAC9B,KAAK,EAAE,kBAAkB;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,8BAA8B,CAAC;IAC7E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAE9E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;IACjD,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,UAAU,EAAE,kBAAkB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC;IAChD,8BAA8B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnD,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,cAAc,EAAE,oBAAoB;IACpC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,WAAW,EAAE,kBAAkB;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,kBAAkB;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/os/program/state.d.ts

@@ -0,0 +1,38 @@
+import type { ProgramManifest, ProgramPacket, ProgramPacketIndexEntry, ProgramPacketLease, ProgramActor } from "./schemas.ts";
+export interface PacketViolation {
+    rule: string;
+    path?: string;
+    message: string;
+}
+/**
+ * Validate that a seal transition is allowed.
+ */
+export declare function validateSealTransition(manifest: ProgramManifest, entry: ProgramPacketIndexEntry, packet: ProgramPacket, options: {
+    branch: string;
+    head: string;
+    isClean: boolean;
+    hasActiveLease: boolean;
+}): PacketViolation[];
+/**
+ * Validate that a lease start transition is allowed.
+ */
+export declare function validateLeaseStartTransition(manifest: ProgramManifest, entry: ProgramPacketIndexEntry, packet: ProgramPacket, options: {
+    head: string;
+    steward: ProgramActor;
+    actor: ProgramActor;
+    hasActiveLease: boolean;
+}): PacketViolation[];
+/**
+ * Validate that a completion transition is allowed.
+ */
+export declare function validateCompleteTransition(manifest: ProgramManifest, entry: ProgramPacketIndexEntry, lease: ProgramPacketLease, options: {
+    head: string;
+    isClean: boolean;
+    steward: ProgramActor;
+    implementationHead: string;
+    changedFiles: string[];
+    allowedFiles: string[];
+    forbiddenFiles: string[];
+    ancestryValid: boolean;
+}): PacketViolation[];
+//# sourceMappingURL=state.d.ts.map

package/dist/os/program/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../os/program/state.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,eAAe,EACf,aAAa,EACb,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,EACb,MAAM,cAAc,CAAC;AAMtB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE;IACP,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;CACzB,GACA,eAAe,EAAE,CAmFnB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB,GACA,eAAe,EAAE,CAoCnB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,uBAAuB,EAC9B,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,YAAY,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;CACxB,GACA,eAAe,EAAE,CAsDnB"}

package/dist/os/program/state.js

@@ -0,0 +1,189 @@
+/*
+<MODULE_CONTRACT>
+<purpose>State machine logic for program packet transitions.
+Validates allowed transitions and produces violation records.</purpose>
+<non-goals>
+  <item>Do not mutate files — state validation only.</item>
+  <item>Do not import from @warpgogol/* — forge must remain dependency-free.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0856: initial state machine logic.</item>
+  <item>RFC-0857: spec-node resolvedRfc validation at seal boundary (PROGRAM-PACKET-12).</item>
+</CHANGE_SUMMARY>
+*/
+// ---------------------------------------------------------------------------
+// Transition validation
+// ---------------------------------------------------------------------------
+/**
+ * Validate that a seal transition is allowed.
+ */
+export function validateSealTransition(manifest, entry, packet, options) {
+    const violations = [];
+    // PROGRAM-PACKET-02: wrong branch
+    if (options.branch !== manifest.branch) {
+        violations.push({
+            rule: "PROGRAM-PACKET-02",
+            message: `wrong branch: expected ${manifest.branch}, got ${options.branch}`,
+        });
+    }
+    // PROGRAM-PACKET-10: dirty tree at sealed boundary
+    if (!options.isClean) {
+        violations.push({
+            rule: "PROGRAM-PACKET-10",
+            message: "dirty tree at seal boundary — commit or stash changes first",
+        });
+    }
+    // PROGRAM-PACKET-05: active or stale lease exists
+    if (options.hasActiveLease) {
+        violations.push({
+            rule: "PROGRAM-PACKET-05",
+            message: "active or stale lease exists — recover before sealing",
+        });
+    }
+    // Packet must be in draft state
+    if (packet.state !== "draft") {
+        violations.push({
+            rule: "PROGRAM-PACKET-04",
+            message: `packet state is ${packet.state}, expected draft`,
+        });
+    }
+    // PROGRAM-PACKET-03: predecessor must be completed (unless bootstrap)
+    if (entry.dependsOnPacket !== null) {
+        const predecessor = manifest.packets.find((p) => p.packetId === entry.dependsOnPacket);
+        if (!predecessor) {
+            violations.push({
+                rule: "PROGRAM-PACKET-03",
+                message: `predecessor packet ${entry.dependsOnPacket} not found in manifest`,
+            });
+        }
+        else if (predecessor.state !== "completed") {
+            violations.push({
+                rule: "PROGRAM-PACKET-03",
+                message: `predecessor packet ${entry.dependsOnPacket} is ${predecessor.state}, expected completed`,
+            });
+        }
+        else if (predecessor.completion && entry.baseCommit !== predecessor.completion) {
+            violations.push({
+                rule: "PROGRAM-PACKET-09",
+                message: `baseCommit ${entry.baseCommit} does not match predecessor completion ${predecessor.completion}`,
+            });
+        }
+    }
+    // baseCommit must be set for sealed packet (unless bootstrap with null predecessor)
+    if (entry.dependsOnPacket !== null && entry.baseCommit === null) {
+        violations.push({
+            rule: "PROGRAM-PACKET-09",
+            message: "baseCommit is null for a non-bootstrap packet",
+        });
+    }
+    // allowedFiles must be non-empty
+    if (packet.allowedFiles.length === 0) {
+        violations.push({
+            rule: "PROGRAM-PACKET-06",
+            message: "allowedFiles is empty — packet must define at least one allowed path",
+        });
+    }
+    // RFC-0857: spec-node packets require a resolved RFC that is accepted or implemented
+    if (entry.decisionKind === "spec-node") {
+        if (entry.resolvedRfc === null) {
+            violations.push({
+                rule: "PROGRAM-PACKET-12",
+                message: `spec-node packet ${entry.packetId} has resolvedRfc: null — materialize and accept the governing RFC before sealing`,
+            });
+        }
+    }
+    return violations;
+}
+/**
+ * Validate that a lease start transition is allowed.
+ */
+export function validateLeaseStartTransition(manifest, entry, packet, options) {
+    const violations = [];
+    // PROGRAM-PACKET-04: role collision
+    if (options.steward === options.actor) {
+        violations.push({
+            rule: "PROGRAM-PACKET-04",
+            message: `role collision: steward and actor are the same (${options.steward})`,
+        });
+    }
+    // Packet must be sealed
+    if (packet.state !== "sealed") {
+        violations.push({
+            rule: "PROGRAM-PACKET-04",
+            message: `packet state is ${packet.state}, expected sealed`,
+        });
+    }
+    // PROGRAM-PACKET-05: active or stale lease exists
+    if (options.hasActiveLease) {
+        violations.push({
+            rule: "PROGRAM-PACKET-05",
+            message: "active or stale lease already exists for this packet",
+        });
+    }
+    // PROGRAM-PACKET-02: HEAD must match sealCommit
+    if (entry.sealCommit && options.head !== entry.sealCommit) {
+        violations.push({
+            rule: "PROGRAM-PACKET-02",
+            message: `HEAD ${options.head} does not match sealCommit ${entry.sealCommit}`,
+        });
+    }
+    return violations;
+}
+/**
+ * Validate that a completion transition is allowed.
+ */
+export function validateCompleteTransition(manifest, entry, lease, options) {
+    const violations = [];
+    // PROGRAM-PACKET-04: steward must differ from actor
+    if (options.steward === lease.actor) {
+        violations.push({
+            rule: "PROGRAM-PACKET-04",
+            message: "completion steward must differ from lease actor",
+        });
+    }
+    // PROGRAM-PACKET-10: dirty tree
+    if (!options.isClean) {
+        violations.push({
+            rule: "PROGRAM-PACKET-10",
+            message: "dirty tree at completion boundary",
+        });
+    }
+    // PROGRAM-PACKET-09: ancestry
+    if (!options.ancestryValid) {
+        violations.push({
+            rule: "PROGRAM-PACKET-09",
+            message: "implementation commits do not descend from seal commit",
+        });
+    }
+    // PROGRAM-PACKET-09: implementation head must match
+    if (options.head !== options.implementationHead) {
+        violations.push({
+            rule: "PROGRAM-PACKET-09",
+            message: `HEAD ${options.head} does not match declared implementationHead ${options.implementationHead}`,
+        });
+    }
+    // PROGRAM-PACKET-06: path validation
+    for (const file of options.changedFiles) {
+        if (options.forbiddenFiles.length > 0 && isPathForbidden(file, options.forbiddenFiles)) {
+            violations.push({
+                rule: "PROGRAM-PACKET-06",
+                path: file,
+                message: `changed file ${file} is in forbidden list`,
+            });
+        }
+        if (!isPathAllowed(file, options.allowedFiles)) {
+            violations.push({
+                rule: "PROGRAM-PACKET-06",
+                path: file,
+                message: `changed file ${file} is not in allowed list`,
+            });
+        }
+    }
+    return violations;
+}
+// ---------------------------------------------------------------------------
+// Path helpers (imported from discovery for convenience)
+// ---------------------------------------------------------------------------
+import { isPathAllowed, isPathForbidden } from "./discovery.js";
+//# sourceMappingURL=state.js.map

package/dist/os/program/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../os/program/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;EAaE;AAoBF,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAyB,EACzB,KAA8B,EAC9B,MAAqB,EACrB,OAKC;IAED,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,kCAAkC;IAClC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,0BAA0B,QAAQ,CAAC,MAAM,SAAS,OAAO,CAAC,MAAM,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IAED,kDAAkD;IAClD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,mBAAmB,MAAM,CAAC,KAAK,kBAAkB;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,eAAe,CAAC,CAAC;QACvF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,sBAAsB,KAAK,CAAC,eAAe,wBAAwB;aAC7E,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,sBAAsB,KAAK,CAAC,eAAe,OAAO,WAAW,CAAC,KAAK,sBAAsB;aACnG,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU,EAAE,CAAC;YACjF,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,cAAc,KAAK,CAAC,UAAU,0CAA0C,WAAW,CAAC,UAAU,EAAE;aAC1G,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAChE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,sEAAsE;SAChF,CAAC,CAAC;IACL,CAAC;IAED,qFAAqF;IACrF,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,oBAAoB,KAAK,CAAC,QAAQ,kFAAkF;aAC9H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAyB,EACzB,KAA8B,EAC9B,MAAqB,EACrB,OAKC;IAED,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,oCAAoC;IACpC,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,mDAAmD,OAAO,CAAC,OAAO,GAAG;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB;IACxB,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,mBAAmB,MAAM,CAAC,KAAK,mBAAmB;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,kDAAkD;IAClD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IAChD,IAAI,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,QAAQ,OAAO,CAAC,IAAI,8BAA8B,KAAK,CAAC,UAAU,EAAE;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAyB,EACzB,KAA8B,EAC9B,KAAyB,EACzB,OASC;IAED,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,oDAAoD;IACpD,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,iDAAiD;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAC;IACL,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAChD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,QAAQ,OAAO,CAAC,IAAI,+CAA+C,OAAO,CAAC,kBAAkB,EAAE;SACzG,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACvF,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,gBAAgB,IAAI,uBAAuB;aACrD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/C,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,gBAAgB,IAAI,yBAAyB;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}