@zhin.js/agent 1.1.23 → 1.1.26

package/lib/workroom/journal/payload-governance.js

@@ -0,0 +1,282 @@
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue, } from '../canonical-value.js';
+import { deriveStoredEventControl } from './stored-event-projection.js';
+import { isNonEmptyString, isRecord, validatePayload } from './event-validation.js';
+import { containsGovernedValue, isContentFreeJournalValue, isDigest, isGovernedJournalPayloadReference, } from './payload-reference.js';
+export async function protectEvents(events, projectId, payloads) {
+    return Object.freeze(await Promise.all(events.map(async (event) => Object.freeze({
+        ...event,
+        version: 3,
+        control: deriveStoredEventControl(event),
+        payload: await protectValue(event.payload, '$.payload', event, projectId, payloads),
+    }))));
+}
+async function protectValue(value, fieldPath, event, projectId, payloads) {
+    if (Array.isArray(value)) {
+        return Object.freeze(await Promise.all(value.map((item, index) => protectValue(item, `${fieldPath}[${index}]`, event, projectId, payloads))));
+    }
+    if (!isRecord(value))
+        return value;
+    const entries = [];
+    for (const [key, child] of Object.entries(value)) {
+        const path = `${fieldPath}.${key}`;
+        if (!isContentFreeJournalValue(event.type, path, child) && containsGovernedValue(child)) {
+            const contentHash = digestCanonicalWorkroomValue(child);
+            const source = journalPayloadSource(event, path, contentHash);
+            const receipt = await payloads.write({
+                projectId,
+                runId: event.runId,
+                eventId: event.eventId,
+                eventType: event.type,
+                occurredAt: event.occurredAt,
+                fieldPath: path,
+                value: structuredClone(child),
+                contentHash,
+                source,
+            });
+            assertJournalPayloadReceipt(receipt, createWorkroomJournalPayloadObjectId({
+                projectId,
+                runId: event.runId,
+                eventId: event.eventId,
+                eventType: event.type,
+                occurredAt: event.occurredAt,
+                fieldPath: path,
+                contentHash,
+            }), contentHash, source);
+            entries.push([key, Object.freeze({
+                    version: 1,
+                    kind: 'governed_workroom_journal_payload',
+                    fieldPath: path,
+                    contentHash,
+                    receipt,
+                })]);
+            continue;
+        }
+        entries.push([key, await protectValue(child, path, event, projectId, payloads)]);
+    }
+    return Object.freeze(Object.fromEntries(entries));
+}
+export async function materializeStoredEvents(events, payloads) {
+    assertStoredEventReceiptBindings(events);
+    const projectId = storedProjectId(events);
+    const materialized = await Promise.all(events.map(async (event) => {
+        const payload = await materializeValue(event.payload, '$.payload', event, projectId, payloads);
+        if (!isRecord(payload))
+            throw new Error('Materialized Workroom Journal payload is invalid');
+        validatePayload(event.type, payload, event.sequence);
+        const derivedControl = deriveStoredEventControl({ ...event, version: 1, payload });
+        const comparableControl = event.type === 'task.blocked'
+            && Object.keys(event.control).length === 2
+            ? Object.freeze({ taskKey: derivedControl.taskKey, blockerId: derivedControl.blockerId })
+            : derivedControl;
+        if (canonicalWorkroomJson(event.control) !== canonicalWorkroomJson(comparableControl)) {
+            throw new Error('Stored Workroom control projection does not match the governed payload');
+        }
+        const { control: _control, ...eventHeader } = event;
+        return Object.freeze({
+            ...eventHeader,
+            version: 1,
+            payload: Object.freeze({ ...payload }),
+        });
+    }));
+    return Object.freeze(materialized);
+}
+export async function reconcileJournalPayloads(runId, events, payloads) {
+    if (!payloads.reconcile || events.length === 0)
+        return;
+    await payloads.reconcile({
+        projectId: storedProjectId(events),
+        runId,
+        receipts: collectGovernedPayloadReceipts(events),
+        publicationDigest: journalPublicationDigest(runId, events),
+    });
+}
+export function journalPublicationDigest(runId, events) {
+    return digestCanonicalWorkroomValue({
+        version: 1,
+        runId,
+        eventHeaders: events.map(event => ({
+            eventId: event.eventId,
+            sequence: event.sequence,
+            type: event.type,
+            control: event.control,
+            payload: event.payload,
+        })),
+    });
+}
+export function verifyJournalPayloadPublication(intent, events) {
+    if (intent.consumer !== 'journal_header')
+        return deepFreeze({ status: 'unknown' });
+    const runId = intent.publicationScope;
+    if (!runId || events.length === 0 || events.some(event => event.runId !== runId)) {
+        return deepFreeze({ status: 'missing' });
+    }
+    const exact = collectGovernedPayloadReceipts(events).some(receipt => receipt.descriptor.objectId === intent.objectId
+        && receipt.descriptor.payloadHash === intent.payloadHash
+        && receipt.descriptor.descriptorDigest === intent.descriptorDigest
+        && receipt.source.bindingDigest === intent.sourceBindingDigest);
+    return exact
+        ? deepFreeze({
+            status: 'exact',
+            publicationDigest: journalPublicationDigest(runId, events),
+        })
+        : deepFreeze({ status: 'missing' });
+}
+export function collectGovernedPayloadReceipts(events) {
+    const receipts = [];
+    const visit = (value) => {
+        if (isGovernedJournalPayloadReference(value)) {
+            receipts.push(value.receipt);
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value)
+                visit(item);
+            return;
+        }
+        if (isRecord(value)) {
+            for (const item of Object.values(value))
+                visit(item);
+        }
+    };
+    for (const event of events)
+        visit(event.payload);
+    return Object.freeze(receipts);
+}
+async function materializeValue(value, fieldPath, event, projectId, payloads) {
+    if (isGovernedJournalPayloadReference(value)) {
+        if (value.fieldPath !== fieldPath)
+            throw new Error('Governed Workroom Journal payload field binding drift');
+        const source = journalPayloadSource(event, fieldPath, value.contentHash);
+        assertJournalPayloadReceipt(value.receipt, createWorkroomJournalPayloadObjectId({
+            projectId,
+            runId: event.runId,
+            eventId: event.eventId,
+            eventType: event.type,
+            occurredAt: event.occurredAt,
+            fieldPath,
+            contentHash: value.contentHash,
+        }), value.contentHash, source);
+        const materialized = await payloads.read({
+            projectId,
+            runId: event.runId,
+            eventId: event.eventId,
+            eventType: event.type,
+            fieldPath,
+            contentHash: value.contentHash,
+            receipt: value.receipt,
+            purpose: 'kernel-replay',
+        });
+        if (digestCanonicalWorkroomValue(materialized) !== value.contentHash) {
+            throw new Error('Governed Workroom Journal payload content hash mismatch');
+        }
+        if (Buffer.byteLength(canonicalWorkroomJson(materialized)) !== value.receipt.descriptor.bytes) {
+            throw new Error('Governed Workroom Journal payload byte length mismatch');
+        }
+        return materialized;
+    }
+    if (Array.isArray(value)) {
+        return Object.freeze(await Promise.all(value.map((item, index) => materializeValue(item, `${fieldPath}[${index}]`, event, projectId, payloads))));
+    }
+    if (!isRecord(value))
+        return value;
+    return Object.freeze(Object.fromEntries(await Promise.all(Object.entries(value).map(async ([key, child]) => [
+        key,
+        await materializeValue(child, `${fieldPath}.${key}`, event, projectId, payloads),
+    ]))));
+}
+export function projectIdForAppend(current, appended) {
+    if (current.length > 0)
+        return storedProjectId(current);
+    const created = appended[0];
+    if (!created || created.type !== 'run.created' || !isNonEmptyString(created.payload.projectId)) {
+        throw new Error('Workroom Journal first append must begin with a Project-bound run.created event');
+    }
+    return created.payload.projectId;
+}
+export function storedProjectId(events) {
+    const created = events[0];
+    if (!created || created.type !== 'run.created' || !isNonEmptyString(created.payload.projectId)) {
+        throw new Error('Stored Workroom Journal has no Project-bound run.created header');
+    }
+    return created.payload.projectId;
+}
+export function journalPayloadSource(event, fieldPath, contentHash) {
+    const ref = `workroom-journal-event:${event.runId}:${event.eventId}:${fieldPath}`;
+    const sourceBody = Object.freeze({
+        version: 1,
+        runId: event.runId,
+        eventId: event.eventId,
+        eventType: event.type,
+        fieldPath,
+        contentHash,
+    });
+    const sourceDigest = digestCanonicalWorkroomValue(sourceBody);
+    return Object.freeze({
+        ref,
+        digest: sourceDigest,
+        bindingDigest: digestCanonicalWorkroomValue({ ref, sourceDigest, ...sourceBody }),
+    });
+}
+export function assertJournalPayloadReceipt(receipt, objectId, contentHash, source) {
+    if (!receipt || !isRecord(receipt.descriptor) || !isRecord(receipt.source)
+        || !isNonEmptyString(receipt.descriptor.vaultObjectId)
+        || receipt.descriptor.objectId !== objectId
+        || receipt.descriptor.payloadHash !== contentHash
+        || !isDigest(receipt.descriptor.descriptorDigest)
+        || !isDigest(receipt.descriptor.locationManifestDigest)
+        || !Number.isSafeInteger(receipt.descriptor.bytes) || Number(receipt.descriptor.bytes) < 0
+        || receipt.source.kind !== 'command'
+        || receipt.source.ref !== source.ref
+        || receipt.source.digest !== source.digest
+        || receipt.source.bindingDigest !== source.bindingDigest
+        || receipt.source.verification !== 'verified') {
+        throw new Error('Governed Workroom Journal payload receipt is forged or incomplete');
+    }
+}
+export function assertStoredEventReceiptBindings(events) {
+    if (events.length === 0)
+        return;
+    const projectId = storedProjectId(events);
+    const visit = (value, fieldPath, event) => {
+        if (isGovernedJournalPayloadReference(value)) {
+            if (value.fieldPath !== fieldPath) {
+                throw new Error('Governed Workroom Journal payload field binding drift');
+            }
+            const source = journalPayloadSource(event, fieldPath, value.contentHash);
+            assertJournalPayloadReceipt(value.receipt, createWorkroomJournalPayloadObjectId({
+                projectId,
+                runId: event.runId,
+                eventId: event.eventId,
+                eventType: event.type,
+                occurredAt: event.occurredAt,
+                fieldPath,
+                contentHash: value.contentHash,
+            }), value.contentHash, source);
+            return;
+        }
+        if (Array.isArray(value)) {
+            value.forEach((item, index) => visit(item, `${fieldPath}[${index}]`, event));
+            return;
+        }
+        if (isRecord(value)) {
+            for (const [key, child] of Object.entries(value)) {
+                visit(child, `${fieldPath}.${key}`, event);
+            }
+        }
+    };
+    for (const event of events)
+        visit(event.payload, '$.payload', event);
+}
+export function createWorkroomJournalPayloadObjectId(input) {
+    return `workroom-journal-payload:${digestCanonicalWorkroomValue({
+        version: 2,
+        projectId: input.projectId,
+        runId: input.runId,
+        eventId: input.eventId,
+        eventType: input.eventType,
+        occurredAt: input.occurredAt,
+        fieldPath: input.fieldPath,
+        contentHash: input.contentHash,
+    })}`;
+}
+//# sourceMappingURL=payload-governance.js.map

package/lib/workroom/journal/payload-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-governance.js","sourceRoot":"","sources":["../../../src/workroom/journal/payload-governance.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAW/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,QAAQ,EACR,iCAAiC,GAClC,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAgC,EAChC,SAAiB,EACjB,QAAoC;IAEpC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7E,GAAG,KAAK;QACR,OAAO,EAAE,CAAU;QACnB,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC;QACxC,OAAO,EAAE,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAsC;KACzH,CAAC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAc,EACd,SAAiB,EACjB,KAAoB,EACpB,SAAiB,EACjB,QAAoC;IAEpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/D,YAAY,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACxF,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC;gBACnC,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;gBAC7B,WAAW;gBACX,MAAM;aACP,CAAC,CAAC;YACH,2BAA2B,CACzB,OAAO,EACP,oCAAoC,CAAC;gBACnC,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,IAAI;gBACf,WAAW;aACZ,CAAC,EACF,WAAW,EACX,MAAM,CACP,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAA0C;oBACxE,OAAO,EAAE,CAAC;oBACV,IAAI,EAAE,mCAAmC;oBACzC,SAAS,EAAE,IAAI;oBACf,WAAW;oBACX,OAAO;iBACR,CAAC,CAAC,CAAC,CAAC;YACL,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAsC,EACtC,QAAoC;IAEpC,gCAAgC,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;QAC9D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/F,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC5F,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,wBAAwB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,KAAK,cAAc;eAClD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YAC1C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,CAAC;YACzF,CAAC,CAAC,cAAc,CAAC;QACnB,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,GAAG,KAAK,CAAC;QACpD,OAAO,MAAM,CAAC,MAAM,CAAgB;YAClC,GAAG,WAAW;YACd,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;SACvC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAa,EACb,MAAsC,EACtC,QAAoC;IAEpC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACvD,MAAM,QAAQ,CAAC,SAAS,CAAC;QACvB,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC;QAClC,KAAK;QACL,QAAQ,EAAE,8BAA8B,CAAC,MAAM,CAAC;QAChD,iBAAiB,EAAE,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,MAAsC;IAEtC,OAAO,4BAA4B,CAAC;QAClC,OAAO,EAAE,CAAC;QACV,KAAK;QACL,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,MAAwC,EACxC,MAAsC;IAEtC,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB;QAAE,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;QACjF,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAClE,OAAO,CAAC,UAAU,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;WAC5C,OAAO,CAAC,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;WACrD,OAAO,CAAC,UAAU,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;WAC/D,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAClE,OAAO,KAAK;QACV,CAAC,CAAC,UAAU,CAAC;YACT,MAAM,EAAE,OAAgB;YACxB,iBAAiB,EAAE,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC;SAC3D,CAAC;QACJ,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAAsC;IAEtC,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,KAAc,EAAQ,EAAE;QACrC,IAAI,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAAc,EACd,SAAiB,EACjB,KAA0B,EAC1B,SAAiB,EACjB,QAAoC;IAEpC,IAAI,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACzE,2BAA2B,CACzB,KAAK,CAAC,OAAO,EACb,oCAAoC,CAAC;YACnC,SAAS;YACT,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS;YACT,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,EACF,KAAK,CAAC,WAAW,EACjB,MAAM,CACP,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YACvC,SAAS;YACT,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,SAAS;YACT,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;QACH,IAAI,4BAA4B,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/D,gBAAgB,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC1G,GAAG;QACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;KACjF,CAAC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAuC,EACvC,QAAkC;IAElC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAsC;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAwD,EACxD,SAAiB,EACjB,WAAmB;IAEnB,MAAM,GAAG,GAAG,0BAA0B,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;IAClF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,CAAU;QACnB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,SAAS;QACT,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG;QACH,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,4BAA4B,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,UAAU,EAAE,CAAC;KAClF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAAuC,EACvC,QAAgB,EAChB,WAAmB,EACnB,MAA+C;IAE/C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;WACrE,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;WACnD,OAAO,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ;WACxC,OAAO,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW;WAC9C,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;WAC9C,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC;WACpD,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;WACvF,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;WACjC,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;WACjC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;WACvC,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;WACrD,OAAO,CAAC,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAsC;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,SAAiB,EAAE,KAA0B,EAAQ,EAAE;QACpF,IAAI,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACzE,2BAA2B,CACzB,KAAK,CAAC,OAAO,EACb,oCAAoC,CAAC;gBACnC,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS;gBACT,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,EACF,KAAK,CAAC,WAAW,EACjB,MAAM,CACP,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,KAAK,CAAC,KAAK,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAQnD;IACA,OAAO,4BAA4B,4BAA4B,CAAC;QAC9D,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,EAAE,CAAC;AACP,CAAC"}

package/lib/workroom/journal/payload-reference.d.ts

@@ -0,0 +1,9 @@
+import type { WorkroomEvent } from '../kernel-contracts.js';
+import type { GovernedWorkroomJournalPayloadReference } from './contracts.js';
+export declare function isGovernedJournalPayloadReference(value: unknown): value is GovernedWorkroomJournalPayloadReference;
+export declare function validateProtectedPayload(type: WorkroomEvent['type'], payload: Readonly<Record<string, unknown>>): void;
+export declare function isContentFreeJournalValue(type: WorkroomEvent['type'], fieldPath: string, value: unknown): boolean;
+export declare function containsGovernedValue(value: unknown): boolean;
+export declare function legacyJournalPayloadError(): Error;
+export declare function isDigest(value: unknown): value is string;
+//# sourceMappingURL=payload-reference.d.ts.map

package/lib/workroom/journal/payload-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-reference.d.ts","sourceRoot":"","sources":["../../../src/workroom/journal/payload-reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,gBAAgB,CAAC;AAG9E,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,uCAAuC,CAOlH;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACzC,IAAI,CAqBN;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,GACb,OAAO,CAMT;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAI7D;AAED,wBAAgB,yBAAyB,IAAI,KAAK,CAIjD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD"}

package/lib/workroom/journal/payload-reference.js

@@ -0,0 +1,60 @@
+import { LegacyEmbeddedPayloadDetectedError } from '../legacy-embedded-payload-migration.js';
+import { assertAllowedPayloadKeys, isNonEmptyString, isRecord } from './event-validation.js';
+export function isGovernedJournalPayloadReference(value) {
+    if (!isRecord(value) || value.version !== 1 || value.kind !== 'governed_workroom_journal_payload'
+        || !isNonEmptyString(value.fieldPath) || !isDigest(value.contentHash)
+        || !isRecord(value.receipt))
+        return false;
+    const keys = Object.keys(value).sort();
+    return keys.length === 5
+        && ['contentHash', 'fieldPath', 'kind', 'receipt', 'version'].every((key, index) => keys[index] === key);
+}
+export function validateProtectedPayload(type, payload) {
+    assertAllowedPayloadKeys(type, payload);
+    const visit = (value, fieldPath) => {
+        if (isGovernedJournalPayloadReference(value)) {
+            if (value.fieldPath !== fieldPath)
+                throw new Error('Governed Workroom Journal payload path is invalid');
+            return;
+        }
+        if (Array.isArray(value)) {
+            value.forEach((item, index) => visit(item, `${fieldPath}[${index}]`));
+            return;
+        }
+        if (!isRecord(value))
+            return;
+        for (const [key, child] of Object.entries(value)) {
+            if (!isContentFreeJournalValue(type, `${fieldPath}.${key}`, child) && containsGovernedValue(child)
+                && !isGovernedJournalPayloadReference(child)) {
+                throw legacyJournalPayloadError();
+            }
+            visit(child, `${fieldPath}.${key}`);
+        }
+    };
+    visit(payload, '$.payload');
+}
+export function isContentFreeJournalValue(type, fieldPath, value) {
+    if (value === undefined || value === null || value === '')
+        return true;
+    if (typeof value === 'boolean' || (typeof value === 'number' && Number.isFinite(value)))
+        return true;
+    if (typeof value !== 'string')
+        return false;
+    if (type === 'run.created' && fieldPath === '$.payload.projectId')
+        return true;
+    return isDigest(value);
+}
+export function containsGovernedValue(value) {
+    if (value === undefined || value === null || value === '')
+        return false;
+    if (Array.isArray(value))
+        return value.length > 0;
+    return typeof value !== 'object' || Object.keys(value).length > 0;
+}
+export function legacyJournalPayloadError() {
+    return new LegacyEmbeddedPayloadDetectedError('Legacy embedded Workroom Journal payload is quarantined; use offline export/purge verification before activation');
+}
+export function isDigest(value) {
+    return typeof value === 'string' && /^sha256:[a-f0-9]{64}$/u.test(value);
+}
+//# sourceMappingURL=payload-reference.js.map

package/lib/workroom/journal/payload-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-reference.js","sourceRoot":"","sources":["../../../src/workroom/journal/payload-reference.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAE7F,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE7F,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,mCAAmC;WAC5F,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;WAClE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC;WACnB,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAA2B,EAC3B,OAA0C;IAE1C,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,SAAiB,EAAQ,EAAE;QACxD,IAAI,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACxG,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE,EAAE,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC;mBAC7F,CAAC,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,MAAM,yBAAyB,EAAE,CAAC;YACpC,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,IAA2B,EAC3B,SAAiB,EACjB,KAAc;IAEd,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,IAAI,KAAK,aAAa,IAAI,SAAS,KAAK,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,kCAAkC,CAC3C,kHAAkH,CACnH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC"}

package/lib/workroom/journal/stored-event-projection.d.ts

@@ -0,0 +1,6 @@
+import type { WorkroomEvent } from '../kernel-contracts.js';
+import type { WorkroomStoredEventControl, WorkroomStoredProtectedReceiptHeader } from './contracts.js';
+export declare function deriveStoredEventControl(event: WorkroomEvent): WorkroomStoredEventControl;
+export declare function validateStoredEventControl(type: WorkroomEvent['type'], control: Readonly<Record<string, unknown>>): void;
+export declare function storedProtectedReceiptHeaders(value: Readonly<Record<string, unknown>>): readonly WorkroomStoredProtectedReceiptHeader[];
+//# sourceMappingURL=stored-event-projection.d.ts.map

package/lib/workroom/journal/stored-event-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stored-event-projection.d.ts","sourceRoot":"","sources":["../../../src/workroom/journal/stored-event-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAwC,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAOlG,OAAO,KAAK,EAGV,0BAA0B,EAC1B,oCAAoC,EACrC,MAAM,gBAAgB,CAAC;AAIxB,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,aAAa,GAAG,0BAA0B,CA8FzF;AAuDD,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACzC,IAAI,CAqCN;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACvC,SAAS,oCAAoC,EAAE,CAsBjD"}