@zhin.js/agent 1.1.30 → 1.1.32

package/lib/plugin-runtime/workroom-assignment-knowledge-composition.js

@@ -1,218 +0,0 @@
-import { createHash } from 'node:crypto';
-import { readFile } from 'node:fs/promises';
-import { join } from 'node:path';
-import { createToken } from '@zhin.js/plugin-runtime';
-import { canonicalWorkroomJson, digestCanonicalWorkroomValue as digest, } from '../workroom/canonical-value.js';
-import { DurableFileStore } from '../workroom/durable-file-store.js';
-import { canonicalProjectKnowledgeSource, } from '../workroom/project-knowledge-registry.js';
-export const workroomEphemeralAssignmentContextToken = createToken('zhin.agent.workroom-ephemeral-assignment-context', 'Generation-owned ephemeral Assignment Knowledge Context; bodies are never persisted');
-export const workroomAssignmentKnowledgeContextToken = createToken('zhin.agent.workroom-assignment-knowledge-context', 'Exact Profile/Project Knowledge projection and P12 reauthorization for Assignments');
-/** Durable historical Sponsor proof; later Catalog edits cannot rewrite past authority. */
-export function createCatalogProjectKnowledgeSourceAuthority(options) {
-    const store = new DurableFileStore(options.directory);
-    const target = (sourceId) => join(options.directory, `${createHash('sha256').update(sourceId).digest('hex')}.json`);
-    const read = async (sourceId) => {
-        try {
-            const value = JSON.parse(await readFile(target(sourceId), 'utf8'));
-            const body = {
-                version: 1, source: value.source, principalId: value.principalId,
-                catalogRevision: value.catalogRevision, projectDigest: value.projectDigest,
-            };
-            const canonical = { ...body, digest: digest(body) };
-            if (value.version !== 1 || value.digest !== canonical.digest
-                || canonicalWorkroomJson(value) !== canonicalWorkroomJson(canonical)) {
-                throw new Error('Project Knowledge Sponsor proof digest mismatch');
-            }
-            canonicalProjectKnowledgeSource(value.source);
-            return value;
-        }
-        catch (error) {
-            if (error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT')
-                return undefined;
-            throw error;
-        }
-    };
-    const authority = {
-        async issueSponsorDecision(input) {
-            const catalog = await options.catalog.read();
-            const definition = catalog.definitions[input.projectId];
-            if (!definition || definition.enabled === false || !definition.sponsors?.includes(input.principalId)) {
-                throw new Error('Project Knowledge control requires a current Catalog Sponsor');
-            }
-            const source = canonicalProjectKnowledgeSource({
-                kind: 'sponsor_decision', projectId: input.projectId,
-                sourceId: `console-knowledge:${input.operationId}`,
-                digest: digest({
-                    kind: 'sponsor_decision', projectId: input.projectId,
-                    sourceId: `console-knowledge:${input.operationId}`,
-                }),
-            });
-            const body = {
-                version: 1, source, principalId: input.principalId,
-                catalogRevision: catalog.revision, projectDigest: digest(definition),
-            };
-            const proof = Object.freeze({ ...body, digest: digest(body) });
-            await store.ensureDurableLeaf('Project Knowledge Sponsor authority');
-            const result = await store.publishCreateOnly({
-                target: target(source.sourceId), content: canonicalWorkroomJson(proof), createdValue: proof,
-                onConflict: async () => {
-                    const winner = await read(source.sourceId);
-                    if (!winner || canonicalWorkroomJson(winner) !== canonicalWorkroomJson(proof)) {
-                        throw new Error('Project Knowledge Sponsor operation identity drift');
-                    }
-                    return winner;
-                },
-            });
-            await store.syncLeafAndParent();
-            return result.value.source;
-        },
-        async verify(source) {
-            const canonical = canonicalProjectKnowledgeSource(source);
-            if (canonical.kind !== 'sponsor_decision')
-                return false;
-            const proof = await read(canonical.sourceId);
-            return Boolean(proof && canonicalWorkroomJson(proof.source) === canonicalWorkroomJson(canonical));
-        },
-    };
-    return Object.freeze(authority);
-}
-/**
- * P12 adapter. Every read creates and immediately revalidates an exact
- * Assignment-scoped Disclosure Manifest. Missing sink policy fails closed.
- */
-export function createP12WorkroomKnowledgeContentReader(options) {
-    const sinkRuleId = options.sinkRuleId ?? 'assignment-context';
-    const reader = {
-        async read(input) {
-            options.signal.throwIfAborted();
-            const operationId = `assignment-knowledge:${input.assignmentId}:${input.handle.knowledgeId}:${input.projectionDigest}`;
-            const request = Object.freeze({
-                operationId,
-                projectId: input.projectId,
-                sourceRef: input.handle.governedContent.ref,
-                sourceDigest: input.handle.governedContent.digest,
-                sinkRuleId,
-                principalId: input.principalId,
-                assignmentId: input.assignmentId,
-            });
-            const manifest = await options.governance.materialize(request, options.signal);
-            if (!manifest || manifest.output.mode !== 'full'
-                || manifest.source.objectId !== input.handle.governedContent.ref
-                || manifest.source.payloadHash !== input.handle.governedContent.digest
-                || manifest.principal.assignmentId !== input.assignmentId
-                || manifest.principal.principalId !== input.principalId)
-                return undefined;
-            const revalidated = await options.governance.revalidate({ request, manifest }, options.signal);
-            if (revalidated.status !== 'ready')
-                return undefined;
-            const contentDigest = hashBytes(revalidated.body);
-            if (contentDigest !== input.handle.governedContent.digest)
-                return undefined;
-            const bodyText = new TextDecoder('utf-8', { fatal: true }).decode(revalidated.body);
-            let body = bodyText;
-            try {
-                body = JSON.parse(bodyText);
-            }
-            catch {
-                // Governed knowledge may be plain text. It remains ephemeral either way.
-            }
-            return Object.freeze({
-                body,
-                contentDigest,
-                authorizationDigest: digest({
-                    requestDigest: manifest.requestDigest,
-                    manifestDigest: manifest.digest,
-                    projectionDigest: input.projectionDigest,
-                    profileDigest: input.profileDigest,
-                    knowledgeRevision: input.knowledgeRevision,
-                }),
-            });
-        },
-    };
-    return Object.freeze(reader);
-}
-export function createGenerationWorkroomEphemeralAssignmentContext(options) {
-    if (!Number.isSafeInteger(options.generation) || options.generation < 1) {
-        throw new Error('Ephemeral Assignment Context generation is invalid');
-    }
-    const contexts = new Map();
-    let disposed = false;
-    const dispose = () => {
-        if (disposed)
-            return;
-        disposed = true;
-        contexts.clear();
-    };
-    options.signal.addEventListener('abort', dispose, { once: true });
-    const provider = {
-        async publish(input) {
-            if (disposed)
-                throw new Error('Ephemeral Assignment Context generation is retired');
-            options.signal.throwIfAborted();
-            const ref = `assignment-context:${options.generation}:${encodeURIComponent(input.assignmentId)}:${input.expectedHash}`;
-            const previous = contexts.get(ref);
-            if (previous) {
-                if (previous.hash !== input.expectedHash || previous.assignmentId !== input.assignmentId
-                    || previous.principalId !== input.principalId
-                    || previous.projectId !== input.projection.projectId
-                    || previous.runId !== input.projection.runId
-                    || previous.taskKey !== input.projection.taskKey) {
-                    throw new Error('Ephemeral Assignment Context identity drift');
-                }
-                return Object.freeze({ ref, hash: previous.hash });
-            }
-            contexts.set(ref, Object.freeze({
-                ref,
-                hash: input.expectedHash,
-                assignmentId: input.assignmentId,
-                principalId: input.principalId,
-                projectId: input.projection.projectId,
-                runId: input.projection.runId,
-                taskKey: input.projection.taskKey,
-                body: structuredClone({ projection: input.projection, contents: input.contents }),
-            }));
-            return Object.freeze({ ref, hash: input.expectedHash });
-        },
-        read(ref, hash) {
-            if (disposed || options.signal.aborted)
-                return undefined;
-            const value = contexts.get(ref);
-            if (!value || value.hash !== hash)
-                return undefined;
-            return Object.freeze({
-                ref: value.ref,
-                hash: value.hash,
-                assignmentId: value.assignmentId,
-                principalId: value.principalId,
-                projectId: value.projectId,
-                runId: value.runId,
-                taskKey: value.taskKey,
-                body: structuredClone(value.body),
-            });
-        },
-        releaseTask(input) {
-            if (disposed)
-                throw new Error('Ephemeral Assignment Context generation is retired');
-            options.signal.throwIfAborted();
-            const releasedContextRefs = [...contexts.values()]
-                .filter(context => context.projectId === input.projectId
-                && context.runId === input.runId && context.taskKey === input.taskKey)
-                .map(context => context.ref)
-                .sort();
-            for (const ref of releasedContextRefs)
-                contexts.delete(ref);
-            const body = Object.freeze({
-                status: 'released',
-                released: releasedContextRefs.length,
-                receiptRef: `ephemeral-context-release:${options.generation}:${digest({ input, releasedContextRefs })}`,
-            });
-            return Object.freeze({ ...body, digest: digest(body) });
-        },
-        dispose,
-    };
-    return Object.freeze(provider);
-}
-function hashBytes(value) {
-    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
-}
-//# sourceMappingURL=workroom-assignment-knowledge-composition.js.map

package/lib/plugin-runtime/workroom-assignment-knowledge-composition.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workroom-assignment-knowledge-composition.js","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-assignment-knowledge-composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,IAAI,MAAM,GACvC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EACL,+BAA+B,GAGhC,MAAM,2CAA2C,CAAC;AAmCnD,MAAM,CAAC,MAAM,uCAAuC,GAClD,WAAW,CACT,kDAAkD,EAClD,qFAAqF,CACtF,CAAC;AAEJ,MAAM,CAAC,MAAM,uCAAuC,GAClD,WAAW,CACT,kDAAkD,EAClD,oFAAoF,CACrF,CAAC;AAWJ,2FAA2F;AAC3F,MAAM,UAAU,4CAA4C,CAAC,OAG3D;IACA,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAStD,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EACzD,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,KAAK,EAAE,QAAgB,EAA8B,EAAE;QAClE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAU,CAAC;YAC5E,MAAM,IAAI,GAAG;gBACX,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAChE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;aAClE,CAAC;YACX,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;mBACvD,qBAAqB,CAAC,KAAK,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,+BAA+B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACvG,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,SAAS,GAA2C;QACxD,KAAK,CAAC,oBAAoB,CAAC,KAAoF;YAC7G,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrG,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,MAAM,GAAG,+BAA+B,CAAC;gBAC7C,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;gBACpD,QAAQ,EAAE,qBAAqB,KAAK,CAAC,WAAW,EAAE;gBAClD,MAAM,EAAE,MAAM,CAAC;oBACb,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;oBACpD,QAAQ,EAAE,qBAAqB,KAAK,CAAC,WAAW,EAAE;iBACnD,CAAC;aACH,CAAkE,CAAC;YACpE,MAAM,IAAI,GAAG;gBACX,OAAO,EAAE,CAAU,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC3D,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;aACrE,CAAC;YACF,MAAM,KAAK,GAAU,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,KAAK,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC;gBAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK;gBAC3F,UAAU,EAAE,KAAK,IAAI,EAAE;oBACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC3C,IAAI,CAAC,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;oBACxE,CAAC;oBACD,OAAO,MAAM,CAAC;gBAChB,CAAC;aACF,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAA8B;YACzC,MAAM,SAAS,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;YAC1D,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB;gBAAE,OAAO,KAAK,CAAC;YACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC,KAAK,IAAI,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;QACpG,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uCAAuC,CAAC,OAItD;IACA,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC9D,MAAM,MAAM,GAA2C;QACrD,KAAK,CAAC,IAAI,CAAC,KAAoE;YAC7E,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,wBAAwB,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACvH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,WAAW;gBACX,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG;gBAC3C,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;gBACjD,UAAU;gBACV,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;mBAC3C,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG;mBAC7D,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;mBACnE,QAAQ,CAAC,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;mBACtD,QAAQ,CAAC,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;gBAAE,OAAO,SAAS,CAAC;YAC5E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/F,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAC;YACrD,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,aAAa,KAAK,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC5E,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACpF,IAAI,IAAI,GAAY,QAAQ,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,IAAI;gBACJ,aAAa;gBACb,mBAAmB,EAAE,MAAM,CAAC;oBAC1B,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACrC,cAAc,EAAE,QAAQ,CAAC,MAAM;oBAC/B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;oBACxC,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;iBAC3C,CAAC;aACH,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,kDAAkD,CAAC,OAGjE;IACA,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8C,CAAC;IACvE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAA2C;QACvD,KAAK,CAAC,OAAO,CAAC,KAA4E;YACxF,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpF,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,sBAAsB,OAAO,CAAC,UAAU,IAAI,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvH,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;uBACnF,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;uBAC1C,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS;uBACjD,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,CAAC,KAAK;uBACzC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACnD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;gBAC9B,GAAG;gBACH,IAAI,EAAE,KAAK,CAAC,YAAY;gBACxB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;gBACrC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK;gBAC7B,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO;gBACjC,IAAI,EAAE,eAAe,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aAClF,CAAC,CAAC,CAAC;YACJ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,GAAW,EAAE,IAAY;YAC5B,IAAI,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC;YACpD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QACD,WAAW,CAAC,KAA2E;YACrF,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpF,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,mBAAmB,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;iBAC/C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;mBACnD,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;iBACvE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;iBAC3B,IAAI,EAAE,CAAC;YACV,KAAK,MAAM,GAAG,IAAI,mBAAmB;gBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;gBACzB,MAAM,EAAE,UAAmB;gBAC3B,QAAQ,EAAE,mBAAmB,CAAC,MAAM;gBACpC,UAAU,EAAE,6BAA6B,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,EAAE;aACxG,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO;KACR,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC"}

package/lib/plugin-runtime/workroom-data-governance-authority-writer.d.ts

@@ -1,49 +0,0 @@
-import { type DataGovernanceAuthorityDecision, type DataGovernanceAuthorityRepository, type DataGovernanceAuthorityVerificationPort, type ProjectDataGovernanceAuthority, type ProjectDataGovernanceAuthorityInput } from '../data-governance/governance-authority-repository.js';
-import type { WorkroomCatalog } from '../workroom/catalog.js';
-export type ProjectDataGovernanceAuthorityCandidate = Omit<ProjectDataGovernanceAuthorityInput, 'governanceDecision'>;
-export interface WorkroomDataGovernancePublicationDecision extends DataGovernanceAuthorityDecision {
-    readonly catalogRevision: string;
-    readonly catalogBindingDigest: string;
-}
-export interface WorkroomDataGovernancePublicationDecisionPort {
-    authorize(input: Readonly<{
-        projectId: string;
-        catalogRevision: string;
-        catalogBindingDigest: string;
-        candidateDigest: string;
-        expectedPreviousDigest?: string;
-    }>, signal: AbortSignal): Promise<WorkroomDataGovernancePublicationDecision | null>;
-}
-export interface WorkroomDataGovernanceAuthorityControlPort {
-    publish(input: Readonly<{
-        catalogRevision: string;
-        catalogBindingDigest: string;
-        candidate: ProjectDataGovernanceAuthorityCandidate;
-    }>, signal: AbortSignal): Promise<ProjectDataGovernanceAuthority>;
-}
-/** Trusted control-plane writer. It derives no policy and accepts no caller decision proof. */
-export declare class WorkroomDataGovernanceAuthorityWriter implements WorkroomDataGovernanceAuthorityControlPort {
-    readonly options: Readonly<{
-        catalog: Pick<WorkroomCatalog, 'read'>;
-        repository: Pick<DataGovernanceAuthorityRepository, 'readProject' | 'appendProject'>;
-        decisions: WorkroomDataGovernancePublicationDecisionPort;
-    }>;
-    constructor(options: Readonly<{
-        catalog: Pick<WorkroomCatalog, 'read'>;
-        repository: Pick<DataGovernanceAuthorityRepository, 'readProject' | 'appendProject'>;
-        decisions: WorkroomDataGovernancePublicationDecisionPort;
-    }>);
-    publish(input: Parameters<WorkroomDataGovernanceAuthorityControlPort['publish']>[0], signal: AbortSignal): Promise<ProjectDataGovernanceAuthority>;
-}
-/** Exact policy gate for materializing protected Journal fields into Kernel replay memory. */
-export declare function assertWorkroomJournalDataGovernanceAuthority(candidate: ProjectDataGovernanceAuthorityCandidate): void;
-/** Exact policy gate for materializing Acceptance Profile projections. */
-export declare function assertAcceptanceProjectionDataGovernanceAuthority(candidate: ProjectDataGovernanceAuthorityCandidate): void;
-/** Trusted Root helper; returns only the narrow governed publisher. */
-export declare function createFileWorkroomDataGovernanceAuthorityControl(options: Readonly<{
-    stateRoot: string;
-    catalog: Pick<WorkroomCatalog, 'read'>;
-    governance: DataGovernanceAuthorityVerificationPort;
-    decisions: WorkroomDataGovernancePublicationDecisionPort;
-}>): WorkroomDataGovernanceAuthorityControlPort;
-//# sourceMappingURL=workroom-data-governance-authority-writer.d.ts.map

package/lib/plugin-runtime/workroom-data-governance-authority-writer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"workroom-data-governance-authority-writer.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-data-governance-authority-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,+BAA+B,EACpC,KAAK,iCAAiC,EACtC,KAAK,uCAAuC,EAC5C,KAAK,8BAA8B,EACnC,KAAK,mCAAmC,EACzC,MAAM,uDAAuD,CAAC;AAE/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAI9D,MAAM,MAAM,uCAAuC,GAAG,IAAI,CACxD,mCAAmC,EACnC,oBAAoB,CACrB,CAAC;AAEF,MAAM,WAAW,yCACjB,SAAQ,+BAA+B;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,6CAA6C;IAC5D,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,eAAe,EAAE,MAAM,CAAC;QACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,yCAAyC,GAAG,IAAI,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,0CAA0C;IACzD,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,SAAS,EAAE,uCAAuC,CAAC;KACpD,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;CACnE;AAED,+FAA+F;AAC/F,qBAAa,qCACb,YAAW,0CAA0C;IACvC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACvC,UAAU,EAAE,IAAI,CAAC,iCAAiC,EAAE,aAAa,GAAG,eAAe,CAAC,CAAC;QACrF,SAAS,EAAE,6CAA6C,CAAC;KAC1D,CAAC;gBAJmB,OAAO,EAAE,QAAQ,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACvC,UAAU,EAAE,IAAI,CAAC,iCAAiC,EAAE,aAAa,GAAG,eAAe,CAAC,CAAC;QACrF,SAAS,EAAE,6CAA6C,CAAC;KAC1D,CAAC;IAEI,OAAO,CACX,KAAK,EAAE,UAAU,CAAC,0CAA0C,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAC3E,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,8BAA8B,CAAC;CA0C3C;AAED,8FAA8F;AAC9F,wBAAgB,4CAA4C,CAC1D,SAAS,EAAE,uCAAuC,GACjD,IAAI,CAqBN;AAED,0EAA0E;AAC1E,wBAAgB,iDAAiD,CAC/D,SAAS,EAAE,uCAAuC,GACjD,IAAI,CAqBN;AAED,uEAAuE;AACvE,wBAAgB,gDAAgD,CAAC,OAAO,EAAE,QAAQ,CAAC;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACvC,UAAU,EAAE,uCAAuC,CAAC;IACpD,SAAS,EAAE,6CAA6C,CAAC;CAC1D,CAAC,GAAG,0CAA0C,CAS9C"}

package/lib/plugin-runtime/workroom-data-governance-authority-writer.js

@@ -1,140 +0,0 @@
-import { canonicalizeProjectDataGovernanceAuthorityCandidate, createProjectDataGovernanceAuthority, FileDataGovernanceAuthorityRepository, } from '../data-governance/governance-authority-repository.js';
-import { join } from 'node:path';
-import { digestCanonicalWorkroomValue as digest } from '../workroom/canonical-value.js';
-import { digestWorkroomCatalogProjectBinding } from '../workroom/catalog-definition.js';
-/** Trusted control-plane writer. It derives no policy and accepts no caller decision proof. */
-export class WorkroomDataGovernanceAuthorityWriter {
-    options;
-    constructor(options) {
-        this.options = options;
-    }
-    async publish(input, signal) {
-        signal.throwIfAborted();
-        const catalog = await this.options.catalog.read();
-        const definition = catalog.definitions[input.candidate.projectId];
-        if (!definition || definition.enabled === false
-            || catalog.revision !== input.catalogRevision
-            || digestWorkroomCatalogProjectBinding(definition) !== input.catalogBindingDigest) {
-            throw new Error('Data Governance publication Catalog binding is stale');
-        }
-        assertProjectionAuthority(input.candidate, definition);
-        assertWorkroomJournalDataGovernanceAuthority(input.candidate);
-        assertAcceptanceProjectionDataGovernanceAuthority(input.candidate);
-        const candidate = canonicalizeProjectDataGovernanceAuthorityCandidate(input.candidate);
-        const current = await this.options.repository.readProject(candidate.projectId);
-        if ((!current && candidate.revision !== 1)
-            || (current && (candidate.revision !== current.revision + 1
-                || candidate.previousDigest !== current.digest))) {
-            throw new Error('Data Governance publication revision/CAS authority is stale');
-        }
-        const candidateDigest = digest(candidate);
-        const decision = await this.options.decisions.authorize({
-            projectId: candidate.projectId,
-            catalogRevision: input.catalogRevision,
-            catalogBindingDigest: input.catalogBindingDigest,
-            candidateDigest,
-            ...(current ? { expectedPreviousDigest: current.digest } : {}),
-        }, signal);
-        if (!decision
-            || decision.projectId !== candidate.projectId
-            || decision.candidateDigest !== candidateDigest
-            || decision.expectedPreviousDigest !== current?.digest
-            || decision.catalogRevision !== input.catalogRevision
-            || decision.catalogBindingDigest !== input.catalogBindingDigest
-            || (decision.authorizedBy !== 'data_steward' && decision.authorizedBy !== 'sponsor')) {
-            throw new Error('Data Governance publication decision is unavailable or forged');
-        }
-        const authority = createProjectDataGovernanceAuthority({
-            ...candidate,
-            governanceDecision: structuredClone(decision),
-        });
-        return (await this.options.repository.appendProject(authority, current?.digest)).authority;
-    }
-}
-/** Exact policy gate for materializing protected Journal fields into Kernel replay memory. */
-export function assertWorkroomJournalDataGovernanceAuthority(candidate) {
-    const rule = candidate.derivedPayloads.journal;
-    const sink = candidate.sinks['workroom-journal:kernel-replay'];
-    const servicePrincipal = `service:workroom-kernel:${candidate.projectId}`;
-    const destination = sink && candidate.policy.destinations[sink.destinationId];
-    if (!rule
-        || !rule.allowedPurposes.includes('orchestration')
-        || !sink
-        || sink.channel !== 'context_view'
-        || sink.purpose !== 'orchestration'
-        || sink.requestedMode !== 'full'
-        || sink.fixedPrincipalId !== servicePrincipal
-        || sink.principal.role !== 'orchestrator'
-        || !sink.principal.allowedPurposes.includes('orchestration')
-        || !sink.recipients.recipients.some(recipient => recipient.principalId === servicePrincipal)
-        || !destination
-        || destination.external
-        || !destination.noTraining
-        || destination.loggingMode !== 'metadata_only') {
-        throw new Error('Project Data Governance authority lacks exact Workroom Journal derived/sink policy');
-    }
-}
-/** Exact policy gate for materializing Acceptance Profile projections. */
-export function assertAcceptanceProjectionDataGovernanceAuthority(candidate) {
-    const rule = candidate.derivedPayloads.acceptanceProjection;
-    const sink = candidate.sinks['acceptance-projection:acceptance-policy'];
-    const servicePrincipal = `service:workroom-acceptance-policy:${candidate.projectId}`;
-    const destination = sink && candidate.policy.destinations[sink.destinationId];
-    if (!rule
-        || !rule.allowedPurposes.includes('acceptance_review')
-        || !sink
-        || sink.channel !== 'context_view'
-        || sink.purpose !== 'acceptance_review'
-        || sink.requestedMode !== 'full'
-        || sink.fixedPrincipalId !== servicePrincipal
-        || sink.principal.role !== 'reviewer'
-        || !sink.principal.allowedPurposes.includes('acceptance_review')
-        || !sink.recipients.recipients.some(recipient => recipient.principalId === servicePrincipal)
-        || !destination
-        || destination.external
-        || !destination.noTraining
-        || destination.loggingMode !== 'metadata_only') {
-        throw new Error('Project Data Governance authority lacks exact Acceptance Projection derived/sink policy');
-    }
-}
-/** Trusted Root helper; returns only the narrow governed publisher. */
-export function createFileWorkroomDataGovernanceAuthorityControl(options) {
-    return new WorkroomDataGovernanceAuthorityWriter({
-        catalog: options.catalog,
-        repository: new FileDataGovernanceAuthorityRepository(join(options.stateRoot, 'workroom-data-governance-authority'), options.governance),
-        decisions: options.decisions,
-    });
-}
-function assertProjectionAuthority(candidate, definition) {
-    const rule = candidate.derivedPayloads.projection;
-    const sink = candidate.sinks['projection:workroom'];
-    const sponsorSink = candidate.sinks['projection:sponsor-room'];
-    const servicePrincipal = `service:workroom-projection:${candidate.projectId}`;
-    const sponsorServicePrincipal = `service:workroom-sponsor-projection:${candidate.projectId}`;
-    const sponsorPrincipals = new Set(definition.sponsors ?? []);
-    const sponsorRecipients = sponsorSink?.recipients.recipients.map(recipient => recipient.principalId) ?? [];
-    const sponsorProjectionInvalid = definition.sponsorConversation !== undefined && (!sponsorSink
-        || sponsorSink.channel !== 'sponsor_projection'
-        || sponsorSink.purpose !== 'portfolio_oversight'
-        || sponsorSink.fixedPrincipalId !== sponsorServicePrincipal
-        || sponsorSink.principal.role !== 'projector'
-        || !sponsorSink.principal.allowedPurposes.includes('portfolio_oversight')
-        || !candidate.policy.destinations[sponsorSink.destinationId]
-        || sponsorPrincipals.size === 0
-        || sponsorRecipients.length !== sponsorPrincipals.size
-        || sponsorRecipients.some(principalId => !sponsorPrincipals.has(principalId)));
-    if (!rule
-        || !rule.allowedPurposes.includes('workroom_awareness')
-        || !rule.allowedPurposes.includes('portfolio_oversight')
-        || !sink
-        || sink.channel !== 'workroom_projection'
-        || sink.purpose !== 'workroom_awareness'
-        || sink.fixedPrincipalId !== servicePrincipal
-        || sink.principal.role !== 'projector'
-        || !sink.principal.allowedPurposes.includes('workroom_awareness')
-        || !candidate.policy.destinations[sink.destinationId]
-        || sponsorProjectionInvalid) {
-        throw new Error('Project Data Governance authority lacks exact Projection derived/sink policy');
-    }
-}
-//# sourceMappingURL=workroom-data-governance-authority-writer.js.map

package/lib/plugin-runtime/workroom-data-governance-authority-writer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workroom-data-governance-authority-writer.js","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-data-governance-authority-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mDAAmD,EACnD,oCAAoC,EACpC,qCAAqC,GAMtC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,4BAA4B,IAAI,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AA+BxF,+FAA+F;AAC/F,MAAM,OAAO,qCAAqC;IAE3B;IAArB,YAAqB,OAInB;QAJmB,YAAO,GAAP,OAAO,CAI1B;IAAG,CAAC;IAEN,KAAK,CAAC,OAAO,CACX,KAA2E,EAC3E,MAAmB;QAEnB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK;eAC1C,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,eAAe;eAC1C,mCAAmC,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,oBAAoB,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACvD,4CAA4C,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9D,iDAAiD,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,mDAAmD,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC,CAAC;eACrC,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC;mBACtD,SAAS,CAAC,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;YACtD,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,eAAe;YACf,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,CAAC,QAAQ;eACR,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;eAC1C,QAAQ,CAAC,eAAe,KAAK,eAAe;eAC5C,QAAQ,CAAC,sBAAsB,KAAK,OAAO,EAAE,MAAM;eACnD,QAAQ,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;eAClD,QAAQ,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB;eAC5D,CAAC,QAAQ,CAAC,YAAY,KAAK,cAAc,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,SAAS,GAAG,oCAAoC,CAAC;YACrD,GAAG,SAAS;YACZ,kBAAkB,EAAE,eAAe,CAAC,QAAQ,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,UAAU,4CAA4C,CAC1D,SAAkD;IAElD,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,2BAA2B,SAAS,CAAC,SAAS,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAG,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9E,IAAI,CAAC,IAAI;WACJ,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,eAAe,CAAC;WAC/C,CAAC,IAAI;WACL,IAAI,CAAC,OAAO,KAAK,cAAc;WAC/B,IAAI,CAAC,OAAO,KAAK,eAAe;WAChC,IAAI,CAAC,aAAa,KAAK,MAAM;WAC7B,IAAI,CAAC,gBAAgB,KAAK,gBAAgB;WAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc;WACtC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,eAAe,CAAC;WACzD,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,gBAAgB,CAAC;WACzF,CAAC,WAAW;WACZ,WAAW,CAAC,QAAQ;WACpB,CAAC,WAAW,CAAC,UAAU;WACvB,WAAW,CAAC,WAAW,KAAK,eAAe,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACxG,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iDAAiD,CAC/D,SAAkD;IAElD,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,oBAAoB,CAAC;IAC5D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,sCAAsC,SAAS,CAAC,SAAS,EAAE,CAAC;IACrF,MAAM,WAAW,GAAG,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9E,IAAI,CAAC,IAAI;WACJ,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,mBAAmB,CAAC;WACnD,CAAC,IAAI;WACL,IAAI,CAAC,OAAO,KAAK,cAAc;WAC/B,IAAI,CAAC,OAAO,KAAK,mBAAmB;WACpC,IAAI,CAAC,aAAa,KAAK,MAAM;WAC7B,IAAI,CAAC,gBAAgB,KAAK,gBAAgB;WAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU;WAClC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,mBAAmB,CAAC;WAC7D,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,gBAAgB,CAAC;WACzF,CAAC,WAAW;WACZ,WAAW,CAAC,QAAQ;WACpB,CAAC,WAAW,CAAC,UAAU;WACvB,WAAW,CAAC,WAAW,KAAK,eAAe,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gDAAgD,CAAC,OAK/D;IACA,OAAO,IAAI,qCAAqC,CAAC;QAC/C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,IAAI,qCAAqC,CACnD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oCAAoC,CAAC,EAC7D,OAAO,CAAC,UAAU,CACnB;QACD,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAChC,SAAkD,EAClD,UAA0E;IAE1E,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,+BAA+B,SAAS,CAAC,SAAS,EAAE,CAAC;IAC9E,MAAM,uBAAuB,GAAG,uCAAuC,SAAS,CAAC,SAAS,EAAE,CAAC;IAC7F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC3G,MAAM,wBAAwB,GAAG,UAAU,CAAC,mBAAmB,KAAK,SAAS,IAAI,CAC/E,CAAC,WAAW;WACT,WAAW,CAAC,OAAO,KAAK,oBAAoB;WAC5C,WAAW,CAAC,OAAO,KAAK,qBAAqB;WAC7C,WAAW,CAAC,gBAAgB,KAAK,uBAAuB;WACxD,WAAW,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW;WAC1C,CAAC,WAAW,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,qBAAqB,CAAC;WACtE,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,aAAa,CAAC;WACzD,iBAAiB,CAAC,IAAI,KAAK,CAAC;WAC5B,iBAAiB,CAAC,MAAM,KAAK,iBAAiB,CAAC,IAAI;WACnD,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAC9E,CAAC;IACF,IAAI,CAAC,IAAI;WACJ,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,oBAAoB,CAAC;WACpD,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,qBAAqB,CAAC;WACrD,CAAC,IAAI;WACL,IAAI,CAAC,OAAO,KAAK,qBAAqB;WACtC,IAAI,CAAC,OAAO,KAAK,oBAAoB;WACrC,IAAI,CAAC,gBAAgB,KAAK,gBAAgB;WAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW;WACnC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,oBAAoB,CAAC;WAC9D,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC;WAClD,wBAAwB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}

package/lib/plugin-runtime/workroom-data-governance-bootstrap.d.ts

@@ -1,27 +0,0 @@
-import { type ConfidentialityClass } from '../data-governance/data-governance.js';
-import type { WorkroomDefinition } from '../workroom/catalog-definition.js';
-import type { ProjectDataGovernanceAuthorityCandidate } from './workroom-data-governance-authority-writer.js';
-export interface WorkroomModelProcessingContractInput {
-    readonly providerId: string;
-    readonly endpoint: string;
-    readonly owner?: string;
-    readonly trustDomain?: string;
-    readonly processingRegions: readonly string[];
-    readonly maxConfidentiality: Exclude<ConfidentialityClass, 'unknown'>;
-    readonly external: boolean;
-    readonly noTraining: boolean;
-    readonly loggingMode: 'disabled' | 'metadata_only' | 'full';
-    readonly maximumRetentionSeconds: number;
-    readonly allowsRedisclosure: boolean;
-    readonly supportsDeletion: boolean;
-}
-/** Conservative P12 baseline generated only from an explicit processor contract. */
-export declare function createWorkroomDataGovernanceBootstrapCandidate(input: Readonly<{
-    projectId: string;
-    tenantId: string;
-    definition: WorkroomDefinition;
-    model: WorkroomModelProcessingContractInput;
-    revision: number;
-    previousDigest?: string;
-}>): ProjectDataGovernanceAuthorityCandidate;
-//# sourceMappingURL=workroom-data-governance-bootstrap.d.ts.map

package/lib/plugin-runtime/workroom-data-governance-bootstrap.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"workroom-data-governance-bootstrap.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-data-governance-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,gDAAgD,CAAC;AAE9G,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IACtE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,UAAU,GAAG,eAAe,GAAG,MAAM,CAAC;IAC5D,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,oFAAoF;AACpF,wBAAgB,8CAA8C,CAAC,KAAK,EAAE,QAAQ,CAAC;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,KAAK,EAAE,oCAAoC,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,GAAG,uCAAuC,CAiT3C"}