@zhin.js/workroom 0.0.0 → 0.0.1

package/lib/workroom-runtime/workroom-assignment-knowledge-composition.js

@@ -0,0 +1,218 @@
+import { createHash } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { createToken } from '@zhin.js/plugin-runtime';
+import { canonicalWorkroomJson, digestCanonicalWorkroomValue as digest, } from '../workroom/canonical-value.js';
+import { DurableFileStore } from '../workroom/durable-file-store.js';
+import { canonicalProjectKnowledgeSource, } from '../workroom/project-knowledge-registry.js';
+export const workroomEphemeralAssignmentContextToken = createToken('zhin.agent.workroom-ephemeral-assignment-context', 'Generation-owned ephemeral Assignment Knowledge Context; bodies are never persisted');
+export const workroomAssignmentKnowledgeContextToken = createToken('zhin.agent.workroom-assignment-knowledge-context', 'Exact Profile/Project Knowledge projection and P12 reauthorization for Assignments');
+/** Durable historical Sponsor proof; later Catalog edits cannot rewrite past authority. */
+export function createCatalogProjectKnowledgeSourceAuthority(options) {
+    const store = new DurableFileStore(options.directory);
+    const target = (sourceId) => join(options.directory, `${createHash('sha256').update(sourceId).digest('hex')}.json`);
+    const read = async (sourceId) => {
+        try {
+            const value = JSON.parse(await readFile(target(sourceId), 'utf8'));
+            const body = {
+                version: 1, source: value.source, principalId: value.principalId,
+                catalogRevision: value.catalogRevision, projectDigest: value.projectDigest,
+            };
+            const canonical = { ...body, digest: digest(body) };
+            if (value.version !== 1 || value.digest !== canonical.digest
+                || canonicalWorkroomJson(value) !== canonicalWorkroomJson(canonical)) {
+                throw new Error('Project Knowledge Sponsor proof digest mismatch');
+            }
+            canonicalProjectKnowledgeSource(value.source);
+            return value;
+        }
+        catch (error) {
+            if (error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        }
+    };
+    const authority = {
+        async issueSponsorDecision(input) {
+            const catalog = await options.catalog.read();
+            const definition = catalog.definitions[input.projectId];
+            if (!definition || definition.enabled === false || !definition.sponsors?.includes(input.principalId)) {
+                throw new Error('Project Knowledge control requires a current Catalog Sponsor');
+            }
+            const source = canonicalProjectKnowledgeSource({
+                kind: 'sponsor_decision', projectId: input.projectId,
+                sourceId: `console-knowledge:${input.operationId}`,
+                digest: digest({
+                    kind: 'sponsor_decision', projectId: input.projectId,
+                    sourceId: `console-knowledge:${input.operationId}`,
+                }),
+            });
+            const body = {
+                version: 1, source, principalId: input.principalId,
+                catalogRevision: catalog.revision, projectDigest: digest(definition),
+            };
+            const proof = Object.freeze({ ...body, digest: digest(body) });
+            await store.ensureDurableLeaf('Project Knowledge Sponsor authority');
+            const result = await store.publishCreateOnly({
+                target: target(source.sourceId), content: canonicalWorkroomJson(proof), createdValue: proof,
+                onConflict: async () => {
+                    const winner = await read(source.sourceId);
+                    if (!winner || canonicalWorkroomJson(winner) !== canonicalWorkroomJson(proof)) {
+                        throw new Error('Project Knowledge Sponsor operation identity drift');
+                    }
+                    return winner;
+                },
+            });
+            await store.syncLeafAndParent();
+            return result.value.source;
+        },
+        async verify(source) {
+            const canonical = canonicalProjectKnowledgeSource(source);
+            if (canonical.kind !== 'sponsor_decision')
+                return false;
+            const proof = await read(canonical.sourceId);
+            return Boolean(proof && canonicalWorkroomJson(proof.source) === canonicalWorkroomJson(canonical));
+        },
+    };
+    return Object.freeze(authority);
+}
+/**
+ * P12 adapter. Every read creates and immediately revalidates an exact
+ * Assignment-scoped Disclosure Manifest. Missing sink policy fails closed.
+ */
+export function createP12WorkroomKnowledgeContentReader(options) {
+    const sinkRuleId = options.sinkRuleId ?? 'assignment-context';
+    const reader = {
+        async read(input) {
+            options.signal.throwIfAborted();
+            const operationId = `assignment-knowledge:${input.assignmentId}:${input.handle.knowledgeId}:${input.projectionDigest}`;
+            const request = Object.freeze({
+                operationId,
+                projectId: input.projectId,
+                sourceRef: input.handle.governedContent.ref,
+                sourceDigest: input.handle.governedContent.digest,
+                sinkRuleId,
+                principalId: input.principalId,
+                assignmentId: input.assignmentId,
+            });
+            const manifest = await options.governance.materialize(request, options.signal);
+            if (!manifest || manifest.output.mode !== 'full'
+                || manifest.source.objectId !== input.handle.governedContent.ref
+                || manifest.source.payloadHash !== input.handle.governedContent.digest
+                || manifest.principal.assignmentId !== input.assignmentId
+                || manifest.principal.principalId !== input.principalId)
+                return undefined;
+            const revalidated = await options.governance.revalidate({ request, manifest }, options.signal);
+            if (revalidated.status !== 'ready')
+                return undefined;
+            const contentDigest = hashBytes(revalidated.body);
+            if (contentDigest !== input.handle.governedContent.digest)
+                return undefined;
+            const bodyText = new TextDecoder('utf-8', { fatal: true }).decode(revalidated.body);
+            let body = bodyText;
+            try {
+                body = JSON.parse(bodyText);
+            }
+            catch {
+                // Governed knowledge may be plain text. It remains ephemeral either way.
+            }
+            return Object.freeze({
+                body,
+                contentDigest,
+                authorizationDigest: digest({
+                    requestDigest: manifest.requestDigest,
+                    manifestDigest: manifest.digest,
+                    projectionDigest: input.projectionDigest,
+                    profileDigest: input.profileDigest,
+                    knowledgeRevision: input.knowledgeRevision,
+                }),
+            });
+        },
+    };
+    return Object.freeze(reader);
+}
+export function createGenerationWorkroomEphemeralAssignmentContext(options) {
+    if (!Number.isSafeInteger(options.generation) || options.generation < 1) {
+        throw new Error('Ephemeral Assignment Context generation is invalid');
+    }
+    const contexts = new Map();
+    let disposed = false;
+    const dispose = () => {
+        if (disposed)
+            return;
+        disposed = true;
+        contexts.clear();
+    };
+    options.signal.addEventListener('abort', dispose, { once: true });
+    const provider = {
+        async publish(input) {
+            if (disposed)
+                throw new Error('Ephemeral Assignment Context generation is retired');
+            options.signal.throwIfAborted();
+            const ref = `assignment-context:${options.generation}:${encodeURIComponent(input.assignmentId)}:${input.expectedHash}`;
+            const previous = contexts.get(ref);
+            if (previous) {
+                if (previous.hash !== input.expectedHash || previous.assignmentId !== input.assignmentId
+                    || previous.principalId !== input.principalId
+                    || previous.projectId !== input.projection.projectId
+                    || previous.runId !== input.projection.runId
+                    || previous.taskKey !== input.projection.taskKey) {
+                    throw new Error('Ephemeral Assignment Context identity drift');
+                }
+                return Object.freeze({ ref, hash: previous.hash });
+            }
+            contexts.set(ref, Object.freeze({
+                ref,
+                hash: input.expectedHash,
+                assignmentId: input.assignmentId,
+                principalId: input.principalId,
+                projectId: input.projection.projectId,
+                runId: input.projection.runId,
+                taskKey: input.projection.taskKey,
+                body: structuredClone({ projection: input.projection, contents: input.contents }),
+            }));
+            return Object.freeze({ ref, hash: input.expectedHash });
+        },
+        read(ref, hash) {
+            if (disposed || options.signal.aborted)
+                return undefined;
+            const value = contexts.get(ref);
+            if (!value || value.hash !== hash)
+                return undefined;
+            return Object.freeze({
+                ref: value.ref,
+                hash: value.hash,
+                assignmentId: value.assignmentId,
+                principalId: value.principalId,
+                projectId: value.projectId,
+                runId: value.runId,
+                taskKey: value.taskKey,
+                body: structuredClone(value.body),
+            });
+        },
+        releaseTask(input) {
+            if (disposed)
+                throw new Error('Ephemeral Assignment Context generation is retired');
+            options.signal.throwIfAborted();
+            const releasedContextRefs = [...contexts.values()]
+                .filter(context => context.projectId === input.projectId
+                && context.runId === input.runId && context.taskKey === input.taskKey)
+                .map(context => context.ref)
+                .sort();
+            for (const ref of releasedContextRefs)
+                contexts.delete(ref);
+            const body = Object.freeze({
+                status: 'released',
+                released: releasedContextRefs.length,
+                receiptRef: `ephemeral-context-release:${options.generation}:${digest({ input, releasedContextRefs })}`,
+            });
+            return Object.freeze({ ...body, digest: digest(body) });
+        },
+        dispose,
+    };
+    return Object.freeze(provider);
+}
+function hashBytes(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+//# sourceMappingURL=workroom-assignment-knowledge-composition.js.map

package/lib/workroom-runtime/workroom-assignment-knowledge-composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-assignment-knowledge-composition.js","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-assignment-knowledge-composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,IAAI,MAAM,GACvC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EACL,+BAA+B,GAGhC,MAAM,2CAA2C,CAAC;AAmCnD,MAAM,CAAC,MAAM,uCAAuC,GAClD,WAAW,CACT,kDAAkD,EAClD,qFAAqF,CACtF,CAAC;AAEJ,MAAM,CAAC,MAAM,uCAAuC,GAClD,WAAW,CACT,kDAAkD,EAClD,oFAAoF,CACrF,CAAC;AAWJ,2FAA2F;AAC3F,MAAM,UAAU,4CAA4C,CAAC,OAG3D;IACA,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAStD,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EACzD,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,KAAK,EAAE,QAAgB,EAA8B,EAAE;QAClE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAU,CAAC;YAC5E,MAAM,IAAI,GAAG;gBACX,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAChE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;aAClE,CAAC;YACX,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;mBACvD,qBAAqB,CAAC,KAAK,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,+BAA+B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACvG,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,SAAS,GAA2C;QACxD,KAAK,CAAC,oBAAoB,CAAC,KAAoF;YAC7G,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrG,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,MAAM,GAAG,+BAA+B,CAAC;gBAC7C,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;gBACpD,QAAQ,EAAE,qBAAqB,KAAK,CAAC,WAAW,EAAE;gBAClD,MAAM,EAAE,MAAM,CAAC;oBACb,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;oBACpD,QAAQ,EAAE,qBAAqB,KAAK,CAAC,WAAW,EAAE;iBACnD,CAAC;aACH,CAAkE,CAAC;YACpE,MAAM,IAAI,GAAG;gBACX,OAAO,EAAE,CAAU,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC3D,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;aACrE,CAAC;YACF,MAAM,KAAK,GAAU,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,KAAK,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC;gBAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK;gBAC3F,UAAU,EAAE,KAAK,IAAI,EAAE;oBACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC3C,IAAI,CAAC,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;oBACxE,CAAC;oBACD,OAAO,MAAM,CAAC;gBAChB,CAAC;aACF,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAA8B;YACzC,MAAM,SAAS,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;YAC1D,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB;gBAAE,OAAO,KAAK,CAAC;YACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC,KAAK,IAAI,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;QACpG,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uCAAuC,CAAC,OAItD;IACA,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC9D,MAAM,MAAM,GAA2C;QACrD,KAAK,CAAC,IAAI,CAAC,KAAoE;YAC7E,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,wBAAwB,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACvH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,WAAW;gBACX,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG;gBAC3C,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;gBACjD,UAAU;gBACV,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;mBAC3C,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG;mBAC7D,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;mBACnE,QAAQ,CAAC,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;mBACtD,QAAQ,CAAC,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;gBAAE,OAAO,SAAS,CAAC;YAC5E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/F,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAC;YACrD,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,aAAa,KAAK,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC5E,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACpF,IAAI,IAAI,GAAY,QAAQ,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,IAAI;gBACJ,aAAa;gBACb,mBAAmB,EAAE,MAAM,CAAC;oBAC1B,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACrC,cAAc,EAAE,QAAQ,CAAC,MAAM;oBAC/B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;oBACxC,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;iBAC3C,CAAC;aACH,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,kDAAkD,CAAC,OAGjE;IACA,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8C,CAAC;IACvE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAA2C;QACvD,KAAK,CAAC,OAAO,CAAC,KAA4E;YACxF,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpF,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,sBAAsB,OAAO,CAAC,UAAU,IAAI,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvH,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;uBACnF,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;uBAC1C,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS;uBACjD,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,CAAC,KAAK;uBACzC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACnD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;gBAC9B,GAAG;gBACH,IAAI,EAAE,KAAK,CAAC,YAAY;gBACxB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;gBACrC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK;gBAC7B,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO;gBACjC,IAAI,EAAE,eAAe,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aAClF,CAAC,CAAC,CAAC;YACJ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,GAAW,EAAE,IAAY;YAC5B,IAAI,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC;YACpD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QACD,WAAW,CAAC,KAA2E;YACrF,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpF,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,mBAAmB,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;iBAC/C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;mBACnD,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;iBACvE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;iBAC3B,IAAI,EAAE,CAAC;YACV,KAAK,MAAM,GAAG,IAAI,mBAAmB;gBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;gBACzB,MAAM,EAAE,UAAmB;gBAC3B,QAAQ,EAAE,mBAAmB,CAAC,MAAM;gBACpC,UAAU,EAAE,6BAA6B,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,EAAE;aACxG,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO;KACR,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC"}

package/lib/workroom-runtime/workroom-bot-identity.d.ts

@@ -0,0 +1,22 @@
+import type { WorkroomDefinition, WorkroomMemberRole, WorkroomSpaceKind } from '../workroom/catalog-definition.js';
+export interface WorkroomBotIdentityInput {
+    readonly adapter: string;
+    readonly endpoint: string;
+    readonly kind: WorkroomSpaceKind;
+    readonly id: string;
+    /** Required when one portfolio-level Sponsor Room serves multiple Projects. */
+    readonly projectId?: string;
+}
+export interface ResolvedWorkroomBotIdentity {
+    readonly projectId: string;
+    readonly agent: string;
+    readonly role: WorkroomMemberRole;
+    readonly space: 'workroom' | 'sponsor_room';
+}
+/**
+ * Resolves presentation/target identity only. Human Workroom ingress must still
+ * enter the Orchestrator-owned proposal path; this result grants no Turn or
+ * Kernel execution authority to the named member Agent.
+ */
+export declare function resolveWorkroomBotIdentity(workrooms: Readonly<Record<string, WorkroomDefinition>>, input: WorkroomBotIdentityInput): ResolvedWorkroomBotIdentity | null;
+//# sourceMappingURL=workroom-bot-identity.d.ts.map

package/lib/workroom-runtime/workroom-bot-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-bot-identity.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-bot-identity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,CAAC;CAC7C;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,EACvD,KAAK,EAAE,wBAAwB,GAC9B,2BAA2B,GAAG,IAAI,CAyCpC"}

package/lib/workroom-runtime/workroom-bot-identity.js

@@ -0,0 +1,53 @@
+/**
+ * Resolves presentation/target identity only. Human Workroom ingress must still
+ * enter the Orchestrator-owned proposal path; this result grants no Turn or
+ * Kernel execution authority to the named member Agent.
+ */
+export function resolveWorkroomBotIdentity(workrooms, input) {
+    const matches = Object.entries(workrooms)
+        .filter(([, workroom]) => workroom.enabled !== false)
+        .flatMap(([projectId, workroom]) => [
+        ['workroom', workroom.conversation],
+        ['sponsor_room', workroom.sponsorConversation],
+    ].flatMap(([space, conversation]) => {
+        if (!conversation || conversation.kind !== input.kind
+            || !sameSpaceId(conversation.kind, conversation.id, input.id))
+            return [];
+        const routedMember = space === 'workroom'
+            ? workroom.members.find(member => member.messageRoute?.adapter === input.adapter
+                && member.messageRoute.endpoint === input.endpoint)
+            : undefined;
+        const usesPrimaryEndpoint = conversation.adapter === input.adapter
+            && conversation.endpoint === input.endpoint;
+        if (!usesPrimaryEndpoint && !routedMember)
+            return [];
+        return [(() => {
+                const member = routedMember ?? workroom.members.find(candidate => candidate.agent === conversation.agent);
+                if (!member) {
+                    throw new Error(`Workroom ${projectId} conversation has no member identity`);
+                }
+                return { projectId, agent: member.agent, role: member.role, space };
+            })()];
+    }));
+    const selected = input.projectId && matches.every(match => match.space === 'sponsor_room')
+        ? matches.filter(match => match.projectId === input.projectId)
+        : matches;
+    if (input.projectId && matches.length > 0
+        && matches.every(match => match.space === 'sponsor_room') && selected.length === 0) {
+        throw new Error('Portfolio Sponsor Room explicit Project id is not a member of this room');
+    }
+    if (selected.length > 1 && selected.every(match => match.space === 'sponsor_room')) {
+        throw new Error('Portfolio Sponsor Room requires an explicit Project id');
+    }
+    if (selected.length > 1) {
+        throw new Error(`Conversation ${input.adapter}:${input.endpoint}:${input.kind}:${input.id} belongs to multiple enabled Workrooms`);
+    }
+    const match = selected[0];
+    return match ? Object.freeze(match) : null;
+}
+function sameSpaceId(kind, configured, incoming) {
+    return kind === 'repository'
+        ? configured.toLowerCase() === incoming.toLowerCase()
+        : configured === incoming;
+}
+//# sourceMappingURL=workroom-bot-identity.js.map

package/lib/workroom-runtime/workroom-bot-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-bot-identity.js","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-bot-identity.ts"],"names":[],"mappings":"AAsBA;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAuD,EACvD,KAA+B;IAE/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC;SACpD,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAE;QACnC,CAAC,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC;QACnC,CAAC,cAAc,EAAE,QAAQ,CAAC,mBAAmB,CAAC;KACrC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE;QAC5C,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eAChD,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3E,MAAM,YAAY,GAAG,KAAK,KAAK,UAAU;YACvC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,KAAK,KAAK,CAAC,OAAO;mBAC3E,MAAM,CAAC,YAAY,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;YACrD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;eAC7D,YAAY,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;QAC9C,IAAI,CAAC,mBAAmB,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;QACrD,OAAO,CAAC,CAAC,GAAG,EAAE;gBACZ,MAAM,MAAM,GAAG,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAClD,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,CACpD,CAAC;gBACF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,YAAY,SAAS,sCAAsC,CAAC,CAAC;gBAC/E,CAAC;gBACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACtE,CAAC,CAAC,EAAE,CAAC,CAAC;IACR,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC;QACxF,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;QAC9D,CAAC,CAAC,OAAO,CAAC;IACZ,IAAI,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;WACpC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,wCAAwC,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,IAAuB,EAAE,UAAkB,EAAE,QAAgB;IAChF,OAAO,IAAI,KAAK,YAAY;QAC1B,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;QACrD,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC;AAC9B,CAAC"}

package/lib/workroom-runtime/workroom-capability-realization.d.ts

@@ -0,0 +1,23 @@
+import { type AgentCapabilities, type DeferredCapabilityPlan, type DeferredCapabilityPlanOptions } from '@zhin.js/agent/runtime';
+import type { AssignmentExecutionEnvelope } from '../workroom/assignment-executor.js';
+import { type WorkroomRoleCapabilitySnapshot } from '../workroom/role-capability-snapshot.js';
+export interface WorkroomDeferredCapabilityAuthority {
+    readonly kind: 'workroom_assignment';
+    readonly envelope: AssignmentExecutionEnvelope;
+    readonly capabilitySnapshot: WorkroomRoleCapabilitySnapshot;
+    readonly realization: WorkroomCapabilityRealization;
+}
+/** Opaque proof that one immutable capability projection was joined to this Snapshot. */
+export declare class WorkroomCapabilityRealization {
+    #private;
+    constructor(issuer: symbol, capabilities: AgentCapabilities, envelopeDigest: string, snapshotDigest: string);
+    assertBound(capabilities: AgentCapabilities, envelope: AssignmentExecutionEnvelope, snapshot: WorkroomRoleCapabilitySnapshot): void;
+}
+/** Called only by the trusted generation/Assignment projection boundary. */
+export declare function bindWorkroomCapabilityRealization(capabilities: AgentCapabilities, envelope: AssignmentExecutionEnvelope, snapshot: WorkroomRoleCapabilitySnapshot): WorkroomCapabilityRealization;
+export type WorkroomDeferredCapabilityPlanOptions = Omit<DeferredCapabilityPlanOptions, 'authority' | 'ceiling'> & Readonly<{
+    authority: WorkroomDeferredCapabilityAuthority;
+}>;
+/** Explicit Workroom entry point: callers cannot omit the Assignment ceiling. */
+export declare function createWorkroomDeferredCapabilityPlan(options: WorkroomDeferredCapabilityPlanOptions): DeferredCapabilityPlan;
+//# sourceMappingURL=workroom-capability-realization.d.ts.map

package/lib/workroom-runtime/workroom-capability-realization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-capability-realization.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-capability-realization.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EAGtB,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,yCAAyC,CAAC;AAIjD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;IAC5D,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC;CACrD;AAED,yFAAyF;AACzF,qBAAa,6BAA6B;;gBAMtC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,iBAAiB,EAC/B,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM;IAWxB,WAAW,CACT,YAAY,EAAE,iBAAiB,EAC/B,QAAQ,EAAE,2BAA2B,EACrC,QAAQ,EAAE,8BAA8B,GACvC,IAAI;CAOR;AAED,4EAA4E;AAC5E,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,iBAAiB,EAC/B,QAAQ,EAAE,2BAA2B,EACrC,QAAQ,EAAE,8BAA8B,GACvC,6BAA6B,CA2B/B;AAED,MAAM,MAAM,qCAAqC,GAAG,IAAI,CACtD,6BAA6B,EAC7B,WAAW,GAAG,SAAS,CACxB,GAAG,QAAQ,CAAC;IAAE,SAAS,EAAE,mCAAmC,CAAA;CAAE,CAAC,CAAC;AAEjE,iFAAiF;AACjF,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,qCAAqC,GAC7C,sBAAsB,CAGxB"}

package/lib/workroom-runtime/workroom-capability-realization.js

@@ -0,0 +1,74 @@
+import { createDeferredCapabilityPlan, isReservedControlToolName, } from '@zhin.js/agent/runtime';
+import { discoverWorkroomRoleCapabilities, } from '../workroom/role-capability-snapshot.js';
+const WORKROOM_REALIZATION_ISSUER = Symbol('WorkroomCapabilityRealization.issuer');
+/** Opaque proof that one immutable capability projection was joined to this Snapshot. */
+export class WorkroomCapabilityRealization {
+    #capabilities;
+    #envelopeDigest;
+    #snapshotDigest;
+    constructor(issuer, capabilities, envelopeDigest, snapshotDigest) {
+        if (issuer !== WORKROOM_REALIZATION_ISSUER) {
+            throw new Error('Workroom capability realization requires the trusted issuer');
+        }
+        this.#capabilities = capabilities;
+        this.#envelopeDigest = envelopeDigest;
+        this.#snapshotDigest = snapshotDigest;
+        Object.freeze(this);
+    }
+    assertBound(capabilities, envelope, snapshot) {
+        if (capabilities !== this.#capabilities
+            || envelope.digest !== this.#envelopeDigest
+            || snapshot.digest !== this.#snapshotDigest) {
+            throw new Error('Workroom capabilities are outside the trusted generation realization');
+        }
+    }
+}
+/** Called only by the trusted generation/Assignment projection boundary. */
+export function bindWorkroomCapabilityRealization(capabilities, envelope, snapshot) {
+    if (!Object.isFrozen(capabilities)
+        || !Object.isFrozen(capabilities.tools)
+        || !Object.isFrozen(capabilities.skills)
+        || capabilities.tools.some(capability => !Object.isFrozen(capability))
+        || capabilities.skills.some(capability => !Object.isFrozen(capability))) {
+        throw new Error('Workroom generation capability projection must be deeply immutable');
+    }
+    const ceiling = discoverWorkroomRoleCapabilities(envelope, snapshot);
+    assertExactRuntimeProjection('Tool', ceiling.tools.filter(item => item.name !== 'spawn_task' && !isReservedControlToolName(item.name)), capabilities.tools, capability => capability.name);
+    assertExactRuntimeProjection('Skill', ceiling.skills, capabilities.skills, capability => capability.qualifiedName);
+    return new WorkroomCapabilityRealization(WORKROOM_REALIZATION_ISSUER, capabilities, envelope.digest, snapshot.digest);
+}
+/** Explicit Workroom entry point: callers cannot omit the Assignment ceiling. */
+export function createWorkroomDeferredCapabilityPlan(options) {
+    const { authority, ...rest } = options;
+    return createDeferredCapabilityPlan({ ...rest, ceiling: createWorkroomCapabilityCeiling(authority) });
+}
+function assertExactRuntimeProjection(kind, expectedCapabilities, runtimeCapabilities, runtimeName) {
+    for (const expected of expectedCapabilities) {
+        const matches = runtimeCapabilities.filter(capability => runtimeName(capability) === expected.name);
+        if (matches.length !== 1) {
+            throw new Error(`Workroom ${kind} ${expected.name} has ${matches.length} active generation realizations`);
+        }
+    }
+}
+function createWorkroomCapabilityCeiling(authority) {
+    return Object.freeze({
+        project(capabilities) {
+            if (authority.kind !== 'workroom_assignment') {
+                throw new Error('Unsupported deferred capability authority');
+            }
+            if (!(authority.realization instanceof WorkroomCapabilityRealization)) {
+                throw new Error('Workroom deferred plan requires a trusted generation realization');
+            }
+            authority.realization.assertBound(capabilities, authority.envelope, authority.capabilitySnapshot);
+            const ceiling = discoverWorkroomRoleCapabilities(authority.envelope, authority.capabilitySnapshot);
+            const toolCeiling = ceiling.tools.filter(item => item.name !== 'spawn_task' && !isReservedControlToolName(item.name));
+            const toolNames = new Set(toolCeiling.map(item => item.name));
+            const skillNames = new Set(ceiling.skills.map(item => item.name));
+            return Object.freeze({
+                tools: Object.freeze(capabilities.tools.filter(tool => toolNames.has(tool.name))),
+                skills: Object.freeze(capabilities.skills.filter(skill => skillNames.has(skill.qualifiedName))),
+            });
+        },
+    });
+}
+//# sourceMappingURL=workroom-capability-realization.js.map

package/lib/workroom-runtime/workroom-capability-realization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-capability-realization.js","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-capability-realization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAE5B,yBAAyB,GAI1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,gCAAgC,GAEjC,MAAM,yCAAyC,CAAC;AAEjD,MAAM,2BAA2B,GAAG,MAAM,CAAC,sCAAsC,CAAC,CAAC;AASnF,yFAAyF;AACzF,MAAM,OAAO,6BAA6B;IAC/B,aAAa,CAAoB;IACjC,eAAe,CAAS;IACxB,eAAe,CAAS;IAEjC,YACE,MAAc,EACd,YAA+B,EAC/B,cAAsB,EACtB,cAAsB;QAEtB,IAAI,MAAM,KAAK,2BAA2B,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,WAAW,CACT,YAA+B,EAC/B,QAAqC,EACrC,QAAwC;QAExC,IAAI,YAAY,KAAK,IAAI,CAAC,aAAa;eAClC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,eAAe;eACxC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,UAAU,iCAAiC,CAC/C,YAA+B,EAC/B,QAAqC,EACrC,QAAwC;IAExC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;WAC7B,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;WACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC;WACrC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;WACnE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,OAAO,GAAG,gCAAgC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrE,4BAA4B,CAC1B,MAAM,EACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACjG,YAAY,CAAC,KAAK,EAClB,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAC9B,CAAC;IACF,4BAA4B,CAC1B,OAAO,EACP,OAAO,CAAC,MAAM,EACd,YAAY,CAAC,MAAM,EACnB,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CACvC,CAAC;IACF,OAAO,IAAI,6BAA6B,CACtC,2BAA2B,EAC3B,YAAY,EACZ,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,MAAM,CAChB,CAAC;AACJ,CAAC;AAOD,iFAAiF;AACjF,MAAM,UAAU,oCAAoC,CAClD,OAA8C;IAE9C,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACvC,OAAO,4BAA4B,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,+BAA+B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,4BAA4B,CAInC,IAAsB,EACtB,oBAA0C,EAC1C,mBAAwC,EACxC,WAA6C;IAE7C,KAAK,MAAM,QAAQ,IAAI,oBAAoB,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CACxC,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,IAAI,CACxD,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,IAAI,QAAQ,CAAC,IAAI,QAAQ,OAAO,CAAC,MAAM,iCAAiC,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,SAA8C;IAE9C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,CAAC,YAA+B;YACrC,IAAI,SAAS,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,YAAY,6BAA6B,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACtF,CAAC;YACD,SAAS,CAAC,WAAW,CAAC,WAAW,CAC/B,YAAY,EACZ,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,kBAAkB,CAC7B,CAAC;YACF,MAAM,OAAO,GAAG,gCAAgC,CAC9C,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,kBAAkB,CAC7B,CAAC;YACF,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CACtC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5E,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;aAChG,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/lib/workroom-runtime/workroom-data-governance-authority-writer.d.ts

@@ -0,0 +1,49 @@
+import { type DataGovernanceAuthorityDecision, type DataGovernanceAuthorityRepository, type DataGovernanceAuthorityVerificationPort, type ProjectDataGovernanceAuthority, type ProjectDataGovernanceAuthorityInput } from '../data-governance/governance-authority-repository.js';
+import type { WorkroomCatalog } from '../workroom/catalog.js';
+export type ProjectDataGovernanceAuthorityCandidate = Omit<ProjectDataGovernanceAuthorityInput, 'governanceDecision'>;
+export interface WorkroomDataGovernancePublicationDecision extends DataGovernanceAuthorityDecision {
+    readonly catalogRevision: string;
+    readonly catalogBindingDigest: string;
+}
+export interface WorkroomDataGovernancePublicationDecisionPort {
+    authorize(input: Readonly<{
+        projectId: string;
+        catalogRevision: string;
+        catalogBindingDigest: string;
+        candidateDigest: string;
+        expectedPreviousDigest?: string;
+    }>, signal: AbortSignal): Promise<WorkroomDataGovernancePublicationDecision | null>;
+}
+export interface WorkroomDataGovernanceAuthorityControlPort {
+    publish(input: Readonly<{
+        catalogRevision: string;
+        catalogBindingDigest: string;
+        candidate: ProjectDataGovernanceAuthorityCandidate;
+    }>, signal: AbortSignal): Promise<ProjectDataGovernanceAuthority>;
+}
+/** Trusted control-plane writer. It derives no policy and accepts no caller decision proof. */
+export declare class WorkroomDataGovernanceAuthorityWriter implements WorkroomDataGovernanceAuthorityControlPort {
+    readonly options: Readonly<{
+        catalog: Pick<WorkroomCatalog, 'read'>;
+        repository: Pick<DataGovernanceAuthorityRepository, 'readProject' | 'appendProject'>;
+        decisions: WorkroomDataGovernancePublicationDecisionPort;
+    }>;
+    constructor(options: Readonly<{
+        catalog: Pick<WorkroomCatalog, 'read'>;
+        repository: Pick<DataGovernanceAuthorityRepository, 'readProject' | 'appendProject'>;
+        decisions: WorkroomDataGovernancePublicationDecisionPort;
+    }>);
+    publish(input: Parameters<WorkroomDataGovernanceAuthorityControlPort['publish']>[0], signal: AbortSignal): Promise<ProjectDataGovernanceAuthority>;
+}
+/** Exact policy gate for materializing protected Journal fields into Kernel replay memory. */
+export declare function assertWorkroomJournalDataGovernanceAuthority(candidate: ProjectDataGovernanceAuthorityCandidate): void;
+/** Exact policy gate for materializing Acceptance Profile projections. */
+export declare function assertAcceptanceProjectionDataGovernanceAuthority(candidate: ProjectDataGovernanceAuthorityCandidate): void;
+/** Trusted Root helper; returns only the narrow governed publisher. */
+export declare function createFileWorkroomDataGovernanceAuthorityControl(options: Readonly<{
+    stateRoot: string;
+    catalog: Pick<WorkroomCatalog, 'read'>;
+    governance: DataGovernanceAuthorityVerificationPort;
+    decisions: WorkroomDataGovernancePublicationDecisionPort;
+}>): WorkroomDataGovernanceAuthorityControlPort;
+//# sourceMappingURL=workroom-data-governance-authority-writer.d.ts.map

package/lib/workroom-runtime/workroom-data-governance-authority-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-data-governance-authority-writer.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-data-governance-authority-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,+BAA+B,EACpC,KAAK,iCAAiC,EACtC,KAAK,uCAAuC,EAC5C,KAAK,8BAA8B,EACnC,KAAK,mCAAmC,EACzC,MAAM,uDAAuD,CAAC;AAE/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAI9D,MAAM,MAAM,uCAAuC,GAAG,IAAI,CACxD,mCAAmC,EACnC,oBAAoB,CACrB,CAAC;AAEF,MAAM,WAAW,yCACjB,SAAQ,+BAA+B;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,6CAA6C;IAC5D,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,eAAe,EAAE,MAAM,CAAC;QACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,yCAAyC,GAAG,IAAI,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,0CAA0C;IACzD,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,SAAS,EAAE,uCAAuC,CAAC;KACpD,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;CACnE;AAED,+FAA+F;AAC/F,qBAAa,qCACb,YAAW,0CAA0C;IACvC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACvC,UAAU,EAAE,IAAI,CAAC,iCAAiC,EAAE,aAAa,GAAG,eAAe,CAAC,CAAC;QACrF,SAAS,EAAE,6CAA6C,CAAC;KAC1D,CAAC;gBAJmB,OAAO,EAAE,QAAQ,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACvC,UAAU,EAAE,IAAI,CAAC,iCAAiC,EAAE,aAAa,GAAG,eAAe,CAAC,CAAC;QACrF,SAAS,EAAE,6CAA6C,CAAC;KAC1D,CAAC;IAEI,OAAO,CACX,KAAK,EAAE,UAAU,CAAC,0CAA0C,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAC3E,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,8BAA8B,CAAC;CA0C3C;AAED,8FAA8F;AAC9F,wBAAgB,4CAA4C,CAC1D,SAAS,EAAE,uCAAuC,GACjD,IAAI,CAqBN;AAED,0EAA0E;AAC1E,wBAAgB,iDAAiD,CAC/D,SAAS,EAAE,uCAAuC,GACjD,IAAI,CAqBN;AAED,uEAAuE;AACvE,wBAAgB,gDAAgD,CAAC,OAAO,EAAE,QAAQ,CAAC;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACvC,UAAU,EAAE,uCAAuC,CAAC;IACpD,SAAS,EAAE,6CAA6C,CAAC;CAC1D,CAAC,GAAG,0CAA0C,CAS9C"}

package/lib/workroom-runtime/workroom-data-governance-authority-writer.js

@@ -0,0 +1,140 @@
+import { canonicalizeProjectDataGovernanceAuthorityCandidate, createProjectDataGovernanceAuthority, FileDataGovernanceAuthorityRepository, } from '../data-governance/governance-authority-repository.js';
+import { join } from 'node:path';
+import { digestCanonicalWorkroomValue as digest } from '../workroom/canonical-value.js';
+import { digestWorkroomCatalogProjectBinding } from '../workroom/catalog-definition.js';
+/** Trusted control-plane writer. It derives no policy and accepts no caller decision proof. */
+export class WorkroomDataGovernanceAuthorityWriter {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async publish(input, signal) {
+        signal.throwIfAborted();
+        const catalog = await this.options.catalog.read();
+        const definition = catalog.definitions[input.candidate.projectId];
+        if (!definition || definition.enabled === false
+            || catalog.revision !== input.catalogRevision
+            || digestWorkroomCatalogProjectBinding(definition) !== input.catalogBindingDigest) {
+            throw new Error('Data Governance publication Catalog binding is stale');
+        }
+        assertProjectionAuthority(input.candidate, definition);
+        assertWorkroomJournalDataGovernanceAuthority(input.candidate);
+        assertAcceptanceProjectionDataGovernanceAuthority(input.candidate);
+        const candidate = canonicalizeProjectDataGovernanceAuthorityCandidate(input.candidate);
+        const current = await this.options.repository.readProject(candidate.projectId);
+        if ((!current && candidate.revision !== 1)
+            || (current && (candidate.revision !== current.revision + 1
+                || candidate.previousDigest !== current.digest))) {
+            throw new Error('Data Governance publication revision/CAS authority is stale');
+        }
+        const candidateDigest = digest(candidate);
+        const decision = await this.options.decisions.authorize({
+            projectId: candidate.projectId,
+            catalogRevision: input.catalogRevision,
+            catalogBindingDigest: input.catalogBindingDigest,
+            candidateDigest,
+            ...(current ? { expectedPreviousDigest: current.digest } : {}),
+        }, signal);
+        if (!decision
+            || decision.projectId !== candidate.projectId
+            || decision.candidateDigest !== candidateDigest
+            || decision.expectedPreviousDigest !== current?.digest
+            || decision.catalogRevision !== input.catalogRevision
+            || decision.catalogBindingDigest !== input.catalogBindingDigest
+            || (decision.authorizedBy !== 'data_steward' && decision.authorizedBy !== 'sponsor')) {
+            throw new Error('Data Governance publication decision is unavailable or forged');
+        }
+        const authority = createProjectDataGovernanceAuthority({
+            ...candidate,
+            governanceDecision: structuredClone(decision),
+        });
+        return (await this.options.repository.appendProject(authority, current?.digest)).authority;
+    }
+}
+/** Exact policy gate for materializing protected Journal fields into Kernel replay memory. */
+export function assertWorkroomJournalDataGovernanceAuthority(candidate) {
+    const rule = candidate.derivedPayloads.journal;
+    const sink = candidate.sinks['workroom-journal:kernel-replay'];
+    const servicePrincipal = `service:workroom-kernel:${candidate.projectId}`;
+    const destination = sink && candidate.policy.destinations[sink.destinationId];
+    if (!rule
+        || !rule.allowedPurposes.includes('orchestration')
+        || !sink
+        || sink.channel !== 'context_view'
+        || sink.purpose !== 'orchestration'
+        || sink.requestedMode !== 'full'
+        || sink.fixedPrincipalId !== servicePrincipal
+        || sink.principal.role !== 'orchestrator'
+        || !sink.principal.allowedPurposes.includes('orchestration')
+        || !sink.recipients.recipients.some(recipient => recipient.principalId === servicePrincipal)
+        || !destination
+        || destination.external
+        || !destination.noTraining
+        || destination.loggingMode !== 'metadata_only') {
+        throw new Error('Project Data Governance authority lacks exact Workroom Journal derived/sink policy');
+    }
+}
+/** Exact policy gate for materializing Acceptance Profile projections. */
+export function assertAcceptanceProjectionDataGovernanceAuthority(candidate) {
+    const rule = candidate.derivedPayloads.acceptanceProjection;
+    const sink = candidate.sinks['acceptance-projection:acceptance-policy'];
+    const servicePrincipal = `service:workroom-acceptance-policy:${candidate.projectId}`;
+    const destination = sink && candidate.policy.destinations[sink.destinationId];
+    if (!rule
+        || !rule.allowedPurposes.includes('acceptance_review')
+        || !sink
+        || sink.channel !== 'context_view'
+        || sink.purpose !== 'acceptance_review'
+        || sink.requestedMode !== 'full'
+        || sink.fixedPrincipalId !== servicePrincipal
+        || sink.principal.role !== 'reviewer'
+        || !sink.principal.allowedPurposes.includes('acceptance_review')
+        || !sink.recipients.recipients.some(recipient => recipient.principalId === servicePrincipal)
+        || !destination
+        || destination.external
+        || !destination.noTraining
+        || destination.loggingMode !== 'metadata_only') {
+        throw new Error('Project Data Governance authority lacks exact Acceptance Projection derived/sink policy');
+    }
+}
+/** Trusted Root helper; returns only the narrow governed publisher. */
+export function createFileWorkroomDataGovernanceAuthorityControl(options) {
+    return new WorkroomDataGovernanceAuthorityWriter({
+        catalog: options.catalog,
+        repository: new FileDataGovernanceAuthorityRepository(join(options.stateRoot, 'workroom-data-governance-authority'), options.governance),
+        decisions: options.decisions,
+    });
+}
+function assertProjectionAuthority(candidate, definition) {
+    const rule = candidate.derivedPayloads.projection;
+    const sink = candidate.sinks['projection:workroom'];
+    const sponsorSink = candidate.sinks['projection:sponsor-room'];
+    const servicePrincipal = `service:workroom-projection:${candidate.projectId}`;
+    const sponsorServicePrincipal = `service:workroom-sponsor-projection:${candidate.projectId}`;
+    const sponsorPrincipals = new Set(definition.sponsors ?? []);
+    const sponsorRecipients = sponsorSink?.recipients.recipients.map(recipient => recipient.principalId) ?? [];
+    const sponsorProjectionInvalid = definition.sponsorConversation !== undefined && (!sponsorSink
+        || sponsorSink.channel !== 'sponsor_projection'
+        || sponsorSink.purpose !== 'portfolio_oversight'
+        || sponsorSink.fixedPrincipalId !== sponsorServicePrincipal
+        || sponsorSink.principal.role !== 'projector'
+        || !sponsorSink.principal.allowedPurposes.includes('portfolio_oversight')
+        || !candidate.policy.destinations[sponsorSink.destinationId]
+        || sponsorPrincipals.size === 0
+        || sponsorRecipients.length !== sponsorPrincipals.size
+        || sponsorRecipients.some(principalId => !sponsorPrincipals.has(principalId)));
+    if (!rule
+        || !rule.allowedPurposes.includes('workroom_awareness')
+        || !rule.allowedPurposes.includes('portfolio_oversight')
+        || !sink
+        || sink.channel !== 'workroom_projection'
+        || sink.purpose !== 'workroom_awareness'
+        || sink.fixedPrincipalId !== servicePrincipal
+        || sink.principal.role !== 'projector'
+        || !sink.principal.allowedPurposes.includes('workroom_awareness')
+        || !candidate.policy.destinations[sink.destinationId]
+        || sponsorProjectionInvalid) {
+        throw new Error('Project Data Governance authority lacks exact Projection derived/sink policy');
+    }
+}
+//# sourceMappingURL=workroom-data-governance-authority-writer.js.map