@zhin.js/workroom 0.0.0 → 0.0.1

package/lib/workroom/journal/memory-journal.d.ts

@@ -0,0 +1,27 @@
+import type { WorkroomEvent, WorkroomEventDraft } from '../kernel-contracts.js';
+import type { WorkroomGovernedPayloadReceipt } from '../workroom-task-report-store.js';
+import type { GovernedPayloadPublicationVerification, GovernedPayloadWriteSagaSnapshot } from '../../data-governance/governed-payload-write-saga.js';
+import { type WorkroomJournal, type WorkroomJournalPayloadPort, type WorkroomJournalPayloadReadInput, type WorkroomJournalPayloadWriteInput, type WorkroomStoredRunHeaders } from './contracts.js';
+export declare class MemoryWorkroomJournal implements WorkroomJournal {
+    #private;
+    constructor(payloads?: WorkroomJournalPayloadPort);
+    listRunIds(): Promise<readonly string[]>;
+    scanStoredHeaders(): Promise<readonly WorkroomStoredRunHeaders[]>;
+    readStoredHeaders(runId: string): Promise<WorkroomStoredRunHeaders | null>;
+    verifyGovernedPayloadPublication(intent: GovernedPayloadWriteSagaSnapshot): Promise<GovernedPayloadPublicationVerification>;
+    read(runId: string): Promise<readonly WorkroomEvent[]>;
+    append(runId: string, expectedSequence: number, drafts: readonly WorkroomEventDraft[]): Promise<readonly WorkroomEvent[]>;
+}
+/** In-memory authority used by the non-production Memory journal. */
+export declare class MemoryWorkroomJournalPayloadPort implements WorkroomJournalPayloadPort {
+    #private;
+    write(input: WorkroomJournalPayloadWriteInput): Promise<WorkroomGovernedPayloadReceipt>;
+    read(input: WorkroomJournalPayloadReadInput): Promise<unknown>;
+}
+/**
+ * Durable append-only journal. Every committed batch is an immutable segment;
+ * publishing its first sequence with an exclusive hard-link is the filesystem
+ * CAS. Separate generation instances and separate processes therefore cannot
+ * overwrite one another after reading the same expectedSequence.
+ */
+//# sourceMappingURL=memory-journal.d.ts.map

package/lib/workroom/journal/memory-journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-journal.d.ts","sourceRoot":"","sources":["../../../src/workroom/journal/memory-journal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAMhF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,KAAK,EACV,sCAAsC,EACtC,gCAAgC,EACjC,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,EAC9B,MAAM,gBAAgB,CAAC;AAaxB,qBAAa,qBAAsB,YAAW,eAAe;;gBAI/C,QAAQ,GAAE,0BAAmE;IAInF,UAAU,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;IAIxC,iBAAiB,IAAI,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC;IAMjE,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAK1E,gCAAgC,CACpC,MAAM,EAAE,gCAAgC,GACvC,OAAO,CAAC,sCAAsC,CAAC;IAK5C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAOtD,MAAM,CACV,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,EACxB,MAAM,EAAE,SAAS,kBAAkB,EAAE,GACpC,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;CAkBrC;AAED,qEAAqE;AACrE,qBAAa,gCAAiC,YAAW,0BAA0B;;IAG3E,KAAK,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAmCvF,IAAI,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,OAAO,CAAC;CAKrE;AAED;;;;;GAKG"}

package/lib/workroom/journal/memory-journal.js

@@ -0,0 +1,103 @@
+import { canonicalWorkroomJson, compareCanonicalWorkroomText, digestCanonicalWorkroomValue, } from '../canonical-value.js';
+import { WorkroomSequenceConflictError, } from './contracts.js';
+import { materializeEvents, storedRunHeaders, } from './event-codec.js';
+import { createWorkroomJournalPayloadObjectId, materializeStoredEvents, projectIdForAppend, protectEvents, verifyJournalPayloadPublication, } from './payload-governance.js';
+export class MemoryWorkroomJournal {
+    #runs = new Map();
+    #payloads;
+    constructor(payloads = new MemoryWorkroomJournalPayloadPort()) {
+        this.#payloads = payloads;
+    }
+    async listRunIds() {
+        return Object.freeze([...this.#runs.keys()].sort());
+    }
+    async scanStoredHeaders() {
+        return Object.freeze([...this.#runs.entries()]
+            .sort(([left], [right]) => compareCanonicalWorkroomText(left, right))
+            .map(([runId, events]) => storedRunHeaders(runId, events)));
+    }
+    async readStoredHeaders(runId) {
+        const events = this.#runs.get(runId) ?? [];
+        return events.length === 0 ? null : storedRunHeaders(runId, events);
+    }
+    async verifyGovernedPayloadPublication(intent) {
+        const events = this.#runs.get(intent.publicationScope ?? '') ?? [];
+        return verifyJournalPayloadPublication(intent, events);
+    }
+    async read(runId) {
+        const events = this.#runs.get(runId) ?? [];
+        return events.length === 0
+            ? Object.freeze([])
+            : await materializeStoredEvents(events, this.#payloads);
+    }
+    async append(runId, expectedSequence, drafts) {
+        const current = this.#runs.get(runId) ?? [];
+        const actualSequence = current.at(-1)?.sequence ?? -1;
+        if (actualSequence !== expectedSequence) {
+            throw new WorkroomSequenceConflictError(runId, expectedSequence, actualSequence);
+        }
+        if (drafts.length === 0)
+            return [];
+        const appended = materializeEvents(runId, expectedSequence, drafts);
+        const projectId = projectIdForAppend(current, appended);
+        const protectedEvents = await protectEvents(appended, projectId, this.#payloads);
+        const winner = this.#runs.get(runId) ?? [];
+        const winnerSequence = winner.at(-1)?.sequence ?? -1;
+        if (winnerSequence !== expectedSequence) {
+            throw new WorkroomSequenceConflictError(runId, expectedSequence, winnerSequence);
+        }
+        this.#runs.set(runId, Object.freeze([...current, ...protectedEvents]));
+        return appended;
+    }
+}
+/** In-memory authority used by the non-production Memory journal. */
+export class MemoryWorkroomJournalPayloadPort {
+    #values = new Map();
+    async write(input) {
+        if (digestCanonicalWorkroomValue(input.value) !== input.contentHash) {
+            throw new Error('Memory Workroom Journal payload content hash drift');
+        }
+        const objectId = createWorkroomJournalPayloadObjectId(input);
+        const vaultObjectId = `memory:${digestCanonicalWorkroomValue({ objectId, contentHash: input.contentHash })}`;
+        const existing = this.#values.get(vaultObjectId);
+        if (existing !== undefined
+            && digestCanonicalWorkroomValue(existing) !== input.contentHash) {
+            throw new Error('Memory Workroom Journal payload identity conflict');
+        }
+        this.#values.set(vaultObjectId, structuredClone(input.value));
+        return Object.freeze({
+            descriptor: Object.freeze({
+                vaultObjectId,
+                objectId,
+                payloadHash: input.contentHash,
+                descriptorDigest: digestCanonicalWorkroomValue({
+                    objectId,
+                    payloadHash: input.contentHash,
+                    projectId: input.projectId,
+                }),
+                locationManifestDigest: digestCanonicalWorkroomValue({ location: vaultObjectId }),
+                bytes: Buffer.byteLength(canonicalWorkroomJson(input.value)),
+            }),
+            source: Object.freeze({
+                kind: 'command',
+                ref: input.source.ref,
+                digest: input.source.digest,
+                bindingDigest: input.source.bindingDigest,
+                verification: 'verified',
+            }),
+        });
+    }
+    async read(input) {
+        const value = this.#values.get(input.receipt.descriptor.vaultObjectId);
+        if (value === undefined)
+            throw new Error('Memory Workroom Journal payload is unavailable');
+        return structuredClone(value);
+    }
+}
+/**
+ * Durable append-only journal. Every committed batch is an immutable segment;
+ * publishing its first sequence with an exclusive hard-link is the filesystem
+ * CAS. Separate generation instances and separate processes therefore cannot
+ * overwrite one another after reading the same expectedSequence.
+ */
+//# sourceMappingURL=memory-journal.js.map

package/lib/workroom/journal/memory-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-journal.js","sourceRoot":"","sources":["../../../src/workroom/journal/memory-journal.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EACL,6BAA6B,GAO9B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oCAAoC,EACpC,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACb,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AAEjC,MAAM,OAAO,qBAAqB;IACvB,KAAK,GAAG,IAAI,GAAG,EAA0C,CAAC;IAC1D,SAAS,CAA6B;IAE/C,YAAY,WAAuC,IAAI,gCAAgC,EAAE;QACvF,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;aAC3C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aACpE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,gCAAgC,CACpC,MAAwC;QAExC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACnE,OAAO,+BAA+B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;YACxB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACnB,CAAC,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAa,EACb,gBAAwB,EACxB,MAAqC;QAErC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,cAAc,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,cAAc,KAAK,gBAAgB,EAAE,CAAC;YACxC,MAAM,IAAI,6BAA6B,CAAC,KAAK,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,cAAc,KAAK,gBAAgB,EAAE,CAAC;YACxC,MAAM,IAAI,6BAA6B,CAAC,KAAK,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,qEAAqE;AACrE,MAAM,OAAO,gCAAgC;IAClC,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE9C,KAAK,CAAC,KAAK,CAAC,KAAuC;QACjD,IAAI,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,oCAAoC,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,UAAU,4BAA4B,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC7G,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS;eACrB,4BAA4B,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;gBACxB,aAAa;gBACb,QAAQ;gBACR,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,gBAAgB,EAAE,4BAA4B,CAAC;oBAC7C,QAAQ;oBACR,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC;gBACF,sBAAsB,EAAE,4BAA4B,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;gBACjF,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aAC7D,CAAC;YACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,IAAI,EAAE,SAAkB;gBACxB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC3B,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa;gBACzC,YAAY,EAAE,UAAmB;aAClC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAsC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACvE,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC3F,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;CACF;AAED;;;;;GAKG"}

package/lib/workroom/journal/payload-governance.d.ts

@@ -0,0 +1,29 @@
+import type { WorkroomEvent } from '../kernel-contracts.js';
+import type { WorkroomGovernedPayloadReceipt } from '../workroom-task-report-store.js';
+import type { GovernedPayloadPublicationVerification, GovernedPayloadWriteSagaSnapshot } from '../../data-governance/governed-payload-write-saga.js';
+import type { StoredWorkroomEvent, WorkroomJournalPayloadPort } from './contracts.js';
+export declare function protectEvents(events: readonly WorkroomEvent[], projectId: string, payloads: WorkroomJournalPayloadPort): Promise<readonly StoredWorkroomEvent[]>;
+export declare function materializeStoredEvents(events: readonly StoredWorkroomEvent[], payloads: WorkroomJournalPayloadPort): Promise<readonly WorkroomEvent[]>;
+export declare function reconcileJournalPayloads(runId: string, events: readonly StoredWorkroomEvent[], payloads: WorkroomJournalPayloadPort): Promise<void>;
+export declare function journalPublicationDigest(runId: string, events: readonly StoredWorkroomEvent[]): string;
+export declare function verifyJournalPayloadPublication(intent: GovernedPayloadWriteSagaSnapshot, events: readonly StoredWorkroomEvent[]): GovernedPayloadPublicationVerification;
+export declare function collectGovernedPayloadReceipts(events: readonly StoredWorkroomEvent[]): readonly WorkroomGovernedPayloadReceipt[];
+export declare function projectIdForAppend(current: readonly StoredWorkroomEvent[], appended: readonly WorkroomEvent[]): string;
+export declare function storedProjectId(events: readonly StoredWorkroomEvent[]): string;
+export declare function journalPayloadSource(event: Pick<WorkroomEvent, 'runId' | 'eventId' | 'type'>, fieldPath: string, contentHash: string): Readonly<{
+    ref: string;
+    digest: string;
+    bindingDigest: string;
+}>;
+export declare function assertJournalPayloadReceipt(receipt: WorkroomGovernedPayloadReceipt, objectId: string, contentHash: string, source: ReturnType<typeof journalPayloadSource>): void;
+export declare function assertStoredEventReceiptBindings(events: readonly StoredWorkroomEvent[]): void;
+export declare function createWorkroomJournalPayloadObjectId(input: Readonly<{
+    projectId: string;
+    runId: string;
+    eventId: string;
+    eventType: WorkroomEvent['type'];
+    occurredAt: number;
+    fieldPath: string;
+    contentHash: string;
+}>): string;
+//# sourceMappingURL=payload-governance.d.ts.map

package/lib/workroom/journal/payload-governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-governance.d.ts","sourceRoot":"","sources":["../../../src/workroom/journal/payload-governance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAM5D,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,KAAK,EACV,sCAAsC,EACtC,gCAAgC,EACjC,MAAM,sDAAsD,CAAC;AAC9D,OAAO,KAAK,EAEV,mBAAmB,EACnB,0BAA0B,EAC3B,MAAM,gBAAgB,CAAC;AAUxB,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,aAAa,EAAE,EAChC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAOzC;AA2DD,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,SAAS,mBAAmB,EAAE,EACtC,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAuBnC;AAED,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,SAAS,mBAAmB,EAAE,EACtC,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,SAAS,mBAAmB,EAAE,GACrC,MAAM,CAYR;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,gCAAgC,EACxC,MAAM,EAAE,SAAS,mBAAmB,EAAE,GACrC,sCAAsC,CAiBxC;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,SAAS,mBAAmB,EAAE,GACrC,SAAS,8BAA8B,EAAE,CAiB3C;AAuDD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,mBAAmB,EAAE,EACvC,QAAQ,EAAE,SAAS,aAAa,EAAE,GACjC,MAAM,CAOR;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,GAAG,MAAM,CAM9E;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,EACxD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM;;;;GAiBpB;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,8BAA8B,EACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,GAC9C,IAAI,CAeN;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,GAAG,IAAI,CAoC7F;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,QAAQ,CAAC;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,GAAG,MAAM,CAWV"}

package/lib/workroom/journal/payload-governance.js

@@ -0,0 +1,282 @@
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue, } from '../canonical-value.js';
+import { deriveStoredEventControl } from './stored-event-projection.js';
+import { isNonEmptyString, isRecord, validatePayload } from './event-validation.js';
+import { containsGovernedValue, isContentFreeJournalValue, isDigest, isGovernedJournalPayloadReference, } from './payload-reference.js';
+export async function protectEvents(events, projectId, payloads) {
+    return Object.freeze(await Promise.all(events.map(async (event) => Object.freeze({
+        ...event,
+        version: 3,
+        control: deriveStoredEventControl(event),
+        payload: await protectValue(event.payload, '$.payload', event, projectId, payloads),
+    }))));
+}
+async function protectValue(value, fieldPath, event, projectId, payloads) {
+    if (Array.isArray(value)) {
+        return Object.freeze(await Promise.all(value.map((item, index) => protectValue(item, `${fieldPath}[${index}]`, event, projectId, payloads))));
+    }
+    if (!isRecord(value))
+        return value;
+    const entries = [];
+    for (const [key, child] of Object.entries(value)) {
+        const path = `${fieldPath}.${key}`;
+        if (!isContentFreeJournalValue(event.type, path, child) && containsGovernedValue(child)) {
+            const contentHash = digestCanonicalWorkroomValue(child);
+            const source = journalPayloadSource(event, path, contentHash);
+            const receipt = await payloads.write({
+                projectId,
+                runId: event.runId,
+                eventId: event.eventId,
+                eventType: event.type,
+                occurredAt: event.occurredAt,
+                fieldPath: path,
+                value: structuredClone(child),
+                contentHash,
+                source,
+            });
+            assertJournalPayloadReceipt(receipt, createWorkroomJournalPayloadObjectId({
+                projectId,
+                runId: event.runId,
+                eventId: event.eventId,
+                eventType: event.type,
+                occurredAt: event.occurredAt,
+                fieldPath: path,
+                contentHash,
+            }), contentHash, source);
+            entries.push([key, Object.freeze({
+                    version: 1,
+                    kind: 'governed_workroom_journal_payload',
+                    fieldPath: path,
+                    contentHash,
+                    receipt,
+                })]);
+            continue;
+        }
+        entries.push([key, await protectValue(child, path, event, projectId, payloads)]);
+    }
+    return Object.freeze(Object.fromEntries(entries));
+}
+export async function materializeStoredEvents(events, payloads) {
+    assertStoredEventReceiptBindings(events);
+    const projectId = storedProjectId(events);
+    const materialized = await Promise.all(events.map(async (event) => {
+        const payload = await materializeValue(event.payload, '$.payload', event, projectId, payloads);
+        if (!isRecord(payload))
+            throw new Error('Materialized Workroom Journal payload is invalid');
+        validatePayload(event.type, payload, event.sequence);
+        const derivedControl = deriveStoredEventControl({ ...event, version: 1, payload });
+        const comparableControl = event.type === 'task.blocked'
+            && Object.keys(event.control).length === 2
+            ? Object.freeze({ taskKey: derivedControl.taskKey, blockerId: derivedControl.blockerId })
+            : derivedControl;
+        if (canonicalWorkroomJson(event.control) !== canonicalWorkroomJson(comparableControl)) {
+            throw new Error('Stored Workroom control projection does not match the governed payload');
+        }
+        const { control: _control, ...eventHeader } = event;
+        return Object.freeze({
+            ...eventHeader,
+            version: 1,
+            payload: Object.freeze({ ...payload }),
+        });
+    }));
+    return Object.freeze(materialized);
+}
+export async function reconcileJournalPayloads(runId, events, payloads) {
+    if (!payloads.reconcile || events.length === 0)
+        return;
+    await payloads.reconcile({
+        projectId: storedProjectId(events),
+        runId,
+        receipts: collectGovernedPayloadReceipts(events),
+        publicationDigest: journalPublicationDigest(runId, events),
+    });
+}
+export function journalPublicationDigest(runId, events) {
+    return digestCanonicalWorkroomValue({
+        version: 1,
+        runId,
+        eventHeaders: events.map(event => ({
+            eventId: event.eventId,
+            sequence: event.sequence,
+            type: event.type,
+            control: event.control,
+            payload: event.payload,
+        })),
+    });
+}
+export function verifyJournalPayloadPublication(intent, events) {
+    if (intent.consumer !== 'journal_header')
+        return deepFreeze({ status: 'unknown' });
+    const runId = intent.publicationScope;
+    if (!runId || events.length === 0 || events.some(event => event.runId !== runId)) {
+        return deepFreeze({ status: 'missing' });
+    }
+    const exact = collectGovernedPayloadReceipts(events).some(receipt => receipt.descriptor.objectId === intent.objectId
+        && receipt.descriptor.payloadHash === intent.payloadHash
+        && receipt.descriptor.descriptorDigest === intent.descriptorDigest
+        && receipt.source.bindingDigest === intent.sourceBindingDigest);
+    return exact
+        ? deepFreeze({
+            status: 'exact',
+            publicationDigest: journalPublicationDigest(runId, events),
+        })
+        : deepFreeze({ status: 'missing' });
+}
+export function collectGovernedPayloadReceipts(events) {
+    const receipts = [];
+    const visit = (value) => {
+        if (isGovernedJournalPayloadReference(value)) {
+            receipts.push(value.receipt);
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value)
+                visit(item);
+            return;
+        }
+        if (isRecord(value)) {
+            for (const item of Object.values(value))
+                visit(item);
+        }
+    };
+    for (const event of events)
+        visit(event.payload);
+    return Object.freeze(receipts);
+}
+async function materializeValue(value, fieldPath, event, projectId, payloads) {
+    if (isGovernedJournalPayloadReference(value)) {
+        if (value.fieldPath !== fieldPath)
+            throw new Error('Governed Workroom Journal payload field binding drift');
+        const source = journalPayloadSource(event, fieldPath, value.contentHash);
+        assertJournalPayloadReceipt(value.receipt, createWorkroomJournalPayloadObjectId({
+            projectId,
+            runId: event.runId,
+            eventId: event.eventId,
+            eventType: event.type,
+            occurredAt: event.occurredAt,
+            fieldPath,
+            contentHash: value.contentHash,
+        }), value.contentHash, source);
+        const materialized = await payloads.read({
+            projectId,
+            runId: event.runId,
+            eventId: event.eventId,
+            eventType: event.type,
+            fieldPath,
+            contentHash: value.contentHash,
+            receipt: value.receipt,
+            purpose: 'kernel-replay',
+        });
+        if (digestCanonicalWorkroomValue(materialized) !== value.contentHash) {
+            throw new Error('Governed Workroom Journal payload content hash mismatch');
+        }
+        if (Buffer.byteLength(canonicalWorkroomJson(materialized)) !== value.receipt.descriptor.bytes) {
+            throw new Error('Governed Workroom Journal payload byte length mismatch');
+        }
+        return materialized;
+    }
+    if (Array.isArray(value)) {
+        return Object.freeze(await Promise.all(value.map((item, index) => materializeValue(item, `${fieldPath}[${index}]`, event, projectId, payloads))));
+    }
+    if (!isRecord(value))
+        return value;
+    return Object.freeze(Object.fromEntries(await Promise.all(Object.entries(value).map(async ([key, child]) => [
+        key,
+        await materializeValue(child, `${fieldPath}.${key}`, event, projectId, payloads),
+    ]))));
+}
+export function projectIdForAppend(current, appended) {
+    if (current.length > 0)
+        return storedProjectId(current);
+    const created = appended[0];
+    if (!created || created.type !== 'run.created' || !isNonEmptyString(created.payload.projectId)) {
+        throw new Error('Workroom Journal first append must begin with a Project-bound run.created event');
+    }
+    return created.payload.projectId;
+}
+export function storedProjectId(events) {
+    const created = events[0];
+    if (!created || created.type !== 'run.created' || !isNonEmptyString(created.payload.projectId)) {
+        throw new Error('Stored Workroom Journal has no Project-bound run.created header');
+    }
+    return created.payload.projectId;
+}
+export function journalPayloadSource(event, fieldPath, contentHash) {
+    const ref = `workroom-journal-event:${event.runId}:${event.eventId}:${fieldPath}`;
+    const sourceBody = Object.freeze({
+        version: 1,
+        runId: event.runId,
+        eventId: event.eventId,
+        eventType: event.type,
+        fieldPath,
+        contentHash,
+    });
+    const sourceDigest = digestCanonicalWorkroomValue(sourceBody);
+    return Object.freeze({
+        ref,
+        digest: sourceDigest,
+        bindingDigest: digestCanonicalWorkroomValue({ ref, sourceDigest, ...sourceBody }),
+    });
+}
+export function assertJournalPayloadReceipt(receipt, objectId, contentHash, source) {
+    if (!receipt || !isRecord(receipt.descriptor) || !isRecord(receipt.source)
+        || !isNonEmptyString(receipt.descriptor.vaultObjectId)
+        || receipt.descriptor.objectId !== objectId
+        || receipt.descriptor.payloadHash !== contentHash
+        || !isDigest(receipt.descriptor.descriptorDigest)
+        || !isDigest(receipt.descriptor.locationManifestDigest)
+        || !Number.isSafeInteger(receipt.descriptor.bytes) || Number(receipt.descriptor.bytes) < 0
+        || receipt.source.kind !== 'command'
+        || receipt.source.ref !== source.ref
+        || receipt.source.digest !== source.digest
+        || receipt.source.bindingDigest !== source.bindingDigest
+        || receipt.source.verification !== 'verified') {
+        throw new Error('Governed Workroom Journal payload receipt is forged or incomplete');
+    }
+}
+export function assertStoredEventReceiptBindings(events) {
+    if (events.length === 0)
+        return;
+    const projectId = storedProjectId(events);
+    const visit = (value, fieldPath, event) => {
+        if (isGovernedJournalPayloadReference(value)) {
+            if (value.fieldPath !== fieldPath) {
+                throw new Error('Governed Workroom Journal payload field binding drift');
+            }
+            const source = journalPayloadSource(event, fieldPath, value.contentHash);
+            assertJournalPayloadReceipt(value.receipt, createWorkroomJournalPayloadObjectId({
+                projectId,
+                runId: event.runId,
+                eventId: event.eventId,
+                eventType: event.type,
+                occurredAt: event.occurredAt,
+                fieldPath,
+                contentHash: value.contentHash,
+            }), value.contentHash, source);
+            return;
+        }
+        if (Array.isArray(value)) {
+            value.forEach((item, index) => visit(item, `${fieldPath}[${index}]`, event));
+            return;
+        }
+        if (isRecord(value)) {
+            for (const [key, child] of Object.entries(value)) {
+                visit(child, `${fieldPath}.${key}`, event);
+            }
+        }
+    };
+    for (const event of events)
+        visit(event.payload, '$.payload', event);
+}
+export function createWorkroomJournalPayloadObjectId(input) {
+    return `workroom-journal-payload:${digestCanonicalWorkroomValue({
+        version: 2,
+        projectId: input.projectId,
+        runId: input.runId,
+        eventId: input.eventId,
+        eventType: input.eventType,
+        occurredAt: input.occurredAt,
+        fieldPath: input.fieldPath,
+        contentHash: input.contentHash,
+    })}`;
+}
+//# sourceMappingURL=payload-governance.js.map

package/lib/workroom/journal/payload-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-governance.js","sourceRoot":"","sources":["../../../src/workroom/journal/payload-governance.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAW/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,QAAQ,EACR,iCAAiC,GAClC,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAgC,EAChC,SAAiB,EACjB,QAAoC;IAEpC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7E,GAAG,KAAK;QACR,OAAO,EAAE,CAAU;QACnB,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC;QACxC,OAAO,EAAE,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAsC;KACzH,CAAC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAc,EACd,SAAiB,EACjB,KAAoB,EACpB,SAAiB,EACjB,QAAoC;IAEpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/D,YAAY,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACxF,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC;gBACnC,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;gBAC7B,WAAW;gBACX,MAAM;aACP,CAAC,CAAC;YACH,2BAA2B,CACzB,OAAO,EACP,oCAAoC,CAAC;gBACnC,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,IAAI;gBACf,WAAW;aACZ,CAAC,EACF,WAAW,EACX,MAAM,CACP,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAA0C;oBACxE,OAAO,EAAE,CAAC;oBACV,IAAI,EAAE,mCAAmC;oBACzC,SAAS,EAAE,IAAI;oBACf,WAAW;oBACX,OAAO;iBACR,CAAC,CAAC,CAAC,CAAC;YACL,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAsC,EACtC,QAAoC;IAEpC,gCAAgC,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;QAC9D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/F,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC5F,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,wBAAwB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,KAAK,cAAc;eAClD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YAC1C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,CAAC;YACzF,CAAC,CAAC,cAAc,CAAC;QACnB,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,GAAG,KAAK,CAAC;QACpD,OAAO,MAAM,CAAC,MAAM,CAAgB;YAClC,GAAG,WAAW;YACd,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;SACvC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAa,EACb,MAAsC,EACtC,QAAoC;IAEpC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACvD,MAAM,QAAQ,CAAC,SAAS,CAAC;QACvB,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC;QAClC,KAAK;QACL,QAAQ,EAAE,8BAA8B,CAAC,MAAM,CAAC;QAChD,iBAAiB,EAAE,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,MAAsC;IAEtC,OAAO,4BAA4B,CAAC;QAClC,OAAO,EAAE,CAAC;QACV,KAAK;QACL,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,MAAwC,EACxC,MAAsC;IAEtC,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB;QAAE,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;QACjF,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAClE,OAAO,CAAC,UAAU,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;WAC5C,OAAO,CAAC,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;WACrD,OAAO,CAAC,UAAU,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;WAC/D,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAClE,OAAO,KAAK;QACV,CAAC,CAAC,UAAU,CAAC;YACT,MAAM,EAAE,OAAgB;YACxB,iBAAiB,EAAE,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC;SAC3D,CAAC;QACJ,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAAsC;IAEtC,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,KAAc,EAAQ,EAAE;QACrC,IAAI,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAAc,EACd,SAAiB,EACjB,KAA0B,EAC1B,SAAiB,EACjB,QAAoC;IAEpC,IAAI,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACzE,2BAA2B,CACzB,KAAK,CAAC,OAAO,EACb,oCAAoC,CAAC;YACnC,SAAS;YACT,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS;YACT,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,EACF,KAAK,CAAC,WAAW,EACjB,MAAM,CACP,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YACvC,SAAS;YACT,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,SAAS;YACT,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;QACH,IAAI,4BAA4B,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/D,gBAAgB,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC1G,GAAG;QACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;KACjF,CAAC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAuC,EACvC,QAAkC;IAElC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAsC;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAwD,EACxD,SAAiB,EACjB,WAAmB;IAEnB,MAAM,GAAG,GAAG,0BAA0B,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;IAClF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,CAAU;QACnB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,SAAS;QACT,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG;QACH,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,4BAA4B,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,UAAU,EAAE,CAAC;KAClF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAAuC,EACvC,QAAgB,EAChB,WAAmB,EACnB,MAA+C;IAE/C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;WACrE,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;WACnD,OAAO,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ;WACxC,OAAO,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW;WAC9C,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;WAC9C,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC;WACpD,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;WACvF,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;WACjC,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;WACjC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;WACvC,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;WACrD,OAAO,CAAC,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAsC;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,SAAiB,EAAE,KAA0B,EAAQ,EAAE;QACpF,IAAI,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACzE,2BAA2B,CACzB,KAAK,CAAC,OAAO,EACb,oCAAoC,CAAC;gBACnC,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS;gBACT,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,EACF,KAAK,CAAC,WAAW,EACjB,MAAM,CACP,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,KAAK,CAAC,KAAK,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAQnD;IACA,OAAO,4BAA4B,4BAA4B,CAAC;QAC9D,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,EAAE,CAAC;AACP,CAAC"}

package/lib/workroom/journal/payload-reference.d.ts

@@ -0,0 +1,9 @@
+import type { WorkroomEvent } from '../kernel-contracts.js';
+import type { GovernedWorkroomJournalPayloadReference } from './contracts.js';
+export declare function isGovernedJournalPayloadReference(value: unknown): value is GovernedWorkroomJournalPayloadReference;
+export declare function validateProtectedPayload(type: WorkroomEvent['type'], payload: Readonly<Record<string, unknown>>): void;
+export declare function isContentFreeJournalValue(type: WorkroomEvent['type'], fieldPath: string, value: unknown): boolean;
+export declare function containsGovernedValue(value: unknown): boolean;
+export declare function legacyJournalPayloadError(): Error;
+export declare function isDigest(value: unknown): value is string;
+//# sourceMappingURL=payload-reference.d.ts.map

package/lib/workroom/journal/payload-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-reference.d.ts","sourceRoot":"","sources":["../../../src/workroom/journal/payload-reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,gBAAgB,CAAC;AAG9E,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,uCAAuC,CAOlH;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACzC,IAAI,CAqBN;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,GACb,OAAO,CAMT;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAI7D;AAED,wBAAgB,yBAAyB,IAAI,KAAK,CAIjD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD"}

package/lib/workroom/journal/payload-reference.js

@@ -0,0 +1,60 @@
+import { LegacyEmbeddedPayloadDetectedError } from './legacy-payload-guard.js';
+import { assertAllowedPayloadKeys, isNonEmptyString, isRecord } from './event-validation.js';
+export function isGovernedJournalPayloadReference(value) {
+    if (!isRecord(value) || value.version !== 1 || value.kind !== 'governed_workroom_journal_payload'
+        || !isNonEmptyString(value.fieldPath) || !isDigest(value.contentHash)
+        || !isRecord(value.receipt))
+        return false;
+    const keys = Object.keys(value).sort();
+    return keys.length === 5
+        && ['contentHash', 'fieldPath', 'kind', 'receipt', 'version'].every((key, index) => keys[index] === key);
+}
+export function validateProtectedPayload(type, payload) {
+    assertAllowedPayloadKeys(type, payload);
+    const visit = (value, fieldPath) => {
+        if (isGovernedJournalPayloadReference(value)) {
+            if (value.fieldPath !== fieldPath)
+                throw new Error('Governed Workroom Journal payload path is invalid');
+            return;
+        }
+        if (Array.isArray(value)) {
+            value.forEach((item, index) => visit(item, `${fieldPath}[${index}]`));
+            return;
+        }
+        if (!isRecord(value))
+            return;
+        for (const [key, child] of Object.entries(value)) {
+            if (!isContentFreeJournalValue(type, `${fieldPath}.${key}`, child) && containsGovernedValue(child)
+                && !isGovernedJournalPayloadReference(child)) {
+                throw legacyJournalPayloadError();
+            }
+            visit(child, `${fieldPath}.${key}`);
+        }
+    };
+    visit(payload, '$.payload');
+}
+export function isContentFreeJournalValue(type, fieldPath, value) {
+    if (value === undefined || value === null || value === '')
+        return true;
+    if (typeof value === 'boolean' || (typeof value === 'number' && Number.isFinite(value)))
+        return true;
+    if (typeof value !== 'string')
+        return false;
+    if (type === 'run.created' && fieldPath === '$.payload.projectId')
+        return true;
+    return isDigest(value);
+}
+export function containsGovernedValue(value) {
+    if (value === undefined || value === null || value === '')
+        return false;
+    if (Array.isArray(value))
+        return value.length > 0;
+    return typeof value !== 'object' || Object.keys(value).length > 0;
+}
+export function legacyJournalPayloadError() {
+    return new LegacyEmbeddedPayloadDetectedError('Legacy embedded Workroom Journal payload is no longer supported; this store format cannot be read or activated');
+}
+export function isDigest(value) {
+    return typeof value === 'string' && /^sha256:[a-f0-9]{64}$/u.test(value);
+}
+//# sourceMappingURL=payload-reference.js.map

package/lib/workroom/journal/payload-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-reference.js","sourceRoot":"","sources":["../../../src/workroom/journal/payload-reference.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,2BAA2B,CAAC;AAE/E,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE7F,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,mCAAmC;WAC5F,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;WAClE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC;WACnB,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAA2B,EAC3B,OAA0C;IAE1C,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,SAAiB,EAAQ,EAAE;QACxD,IAAI,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACxG,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE,EAAE,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC;mBAC7F,CAAC,iCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,MAAM,yBAAyB,EAAE,CAAC;YACpC,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,IAA2B,EAC3B,SAAiB,EACjB,KAAc;IAEd,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,IAAI,KAAK,aAAa,IAAI,SAAS,KAAK,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,kCAAkC,CAC3C,gHAAgH,CACjH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC"}

package/lib/workroom/journal/stored-event-projection.d.ts

@@ -0,0 +1,6 @@
+import type { WorkroomEvent } from '../kernel-contracts.js';
+import type { WorkroomStoredEventControl, WorkroomStoredProtectedReceiptHeader } from './contracts.js';
+export declare function deriveStoredEventControl(event: WorkroomEvent): WorkroomStoredEventControl;
+export declare function validateStoredEventControl(type: WorkroomEvent['type'], control: Readonly<Record<string, unknown>>): void;
+export declare function storedProtectedReceiptHeaders(value: Readonly<Record<string, unknown>>): readonly WorkroomStoredProtectedReceiptHeader[];
+//# sourceMappingURL=stored-event-projection.d.ts.map

package/lib/workroom/journal/stored-event-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stored-event-projection.d.ts","sourceRoot":"","sources":["../../../src/workroom/journal/stored-event-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAwC,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAOlG,OAAO,KAAK,EAGV,0BAA0B,EAC1B,oCAAoC,EACrC,MAAM,gBAAgB,CAAC;AAIxB,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,aAAa,GAAG,0BAA0B,CA8FzF;AAuDD,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3B,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACzC,IAAI,CAqCN;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACvC,SAAS,oCAAoC,EAAE,CAsBjD"}