@zhin.js/workroom 0.0.0 → 0.0.2

package/lib/workroom-runtime/workroom-remote-callback-runtime.js

@@ -0,0 +1,80 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { AssignmentObservationIngress } from '../workroom/assignment-observation-ingress.js';
+import { FileRemoteExecutionLinkRegistryRepository, RemoteCallbackApplication, } from '../workroom/remote-callback-application.js';
+import { FileRemoteCallbackInboxRepository, } from '../workroom/remote-callback-inbox.js';
+import { FileWorkroomRemoteDispatchOutboxRepository } from '../workroom/remote-dispatch-outbox.js';
+import { RemoteAssignmentDispatchService, } from '../workroom/remote-dispatch-admission.js';
+import { RemoteAssignmentDispatchScheduler, } from '../workroom/remote-dispatch-scheduler.js';
+import { RemoteAssignmentDispatchCommandService } from '../workroom/remote-assignment-dispatch-command.js';
+import { join } from 'node:path';
+export const workroomRemoteCallbackRuntimeToken = createToken('zhin.agent.workroom-remote-callback-runtime', 'Durable Remote Callback Link/Inbox/Application bridge owned by the Root generation');
+export const remoteAssignmentDispatchServiceToken = createToken('zhin.agent.remote-assignment-dispatch-service', 'Root-owned durable admission and worker bridge for Remote Workroom Assignments');
+export const remoteAssignmentDispatchSchedulerToken = createToken('zhin.agent.remote-assignment-dispatch-scheduler', 'Generation-owned durable Remote Workroom Assignment Outbox scheduler');
+/** Control-plane only; never projected into ordinary Agent Tool metadata. */
+export const remoteAssignmentDispatchCommandServiceToken = createToken('zhin.agent.remote-assignment-dispatch-command-service', 'Kernel-owned Remote Assignment issuance and durable admission producer');
+/**
+ * Composition boundary for authenticated transport observations. The exposed
+ * application has no Task command port; its sole writer is the trusted
+ * AssignmentObservationIngress backed by the Workroom Kernel.
+ */
+export function createWorkroomRemoteCallbackRuntime(options) {
+    const linkRegistry = new FileRemoteExecutionLinkRegistryRepository(join(options.stateRoot, 'workroom-remote-links'));
+    const inboxRepository = new FileRemoteCallbackInboxRepository(join(options.stateRoot, 'workroom-remote-callbacks'));
+    const observationIngress = new AssignmentObservationIngress({ kernel: options.kernel });
+    const clock = options.clock ?? systemClock;
+    const runState = Object.freeze({
+        read: async (projectId, runId) => await options.kernel.read(projectId, runId),
+    });
+    const dispatchOutbox = new FileWorkroomRemoteDispatchOutboxRepository(join(options.stateRoot, 'workroom-remote-dispatches'));
+    return Object.freeze({
+        linkRegistry,
+        inboxRepository,
+        readRun: (projectId, runId) => options.kernel.read(projectId, runId),
+        pinTaskAcceptance: (projectId, runId, taskKey) => options.kernel.pinTaskAcceptance(projectId, runId, taskKey),
+        createApplication(maxSequenceGap, applicationPollPort) {
+            return new RemoteCallbackApplication({
+                registry: linkRegistry,
+                inboxRepository,
+                maxSequenceGap,
+                pollPort: applicationPollPort ?? options.pollPort ?? unavailablePollPort,
+                reconciliationClock: clock,
+                observationIngress,
+                runState,
+            });
+        },
+        createDispatchService(executor) {
+            return new RemoteAssignmentDispatchService({
+                runState,
+                linkRegistry,
+                outbox: dispatchOutbox,
+                executor,
+                clock,
+                governance: options.governance,
+            });
+        },
+        createDispatchScheduler(dispatch, schedulerOptions) {
+            return new RemoteAssignmentDispatchScheduler({
+                ...schedulerOptions,
+                outbox: dispatchOutbox,
+                dispatch,
+                clock,
+            });
+        },
+        createDispatchCommandService(dispatch, scheduler) {
+            return new RemoteAssignmentDispatchCommandService({
+                kernel: options.kernel,
+                admission: dispatch,
+                scheduler,
+            });
+        },
+    });
+}
+const systemClock = Object.freeze({
+    now: () => Date.now(),
+});
+const unavailablePollPort = Object.freeze({
+    poll: async () => {
+        throw new Error('Workroom Remote Callback reconciliation requires an installed endpoint poll transport');
+    },
+});
+//# sourceMappingURL=workroom-remote-callback-runtime.js.map

package/lib/workroom-runtime/workroom-remote-callback-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-remote-callback-runtime.js","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-remote-callback-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EACL,yCAAyC,EACzC,yBAAyB,GAE1B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,iCAAiC,GAElC,MAAM,sCAAsC,CAAC;AAM9C,OAAO,EAAE,0CAA0C,EAAE,MAAM,uCAAuC,CAAC;AACnG,OAAO,EACL,+BAA+B,GAEhC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,iCAAiC,GAElC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,sCAAsC,EAAE,MAAM,mDAAmD,CAAC;AAG3G,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkCjC,MAAM,CAAC,MAAM,kCAAkC,GAC7C,WAAW,CACT,6CAA6C,EAC7C,oFAAoF,CACrF,CAAC;AAEJ,MAAM,CAAC,MAAM,oCAAoC,GAC/C,WAAW,CACT,+CAA+C,EAC/C,gFAAgF,CACjF,CAAC;AAEJ,MAAM,CAAC,MAAM,sCAAsC,GACjD,WAAW,CACT,iDAAiD,EACjD,sEAAsE,CACvE,CAAC;AAEJ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,2CAA2C,GACtD,WAAW,CACT,uDAAuD,EACvD,wEAAwE,CACzE,CAAC;AAEJ;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CACjD,OAA6C;IAE7C,MAAM,YAAY,GAAG,IAAI,yCAAyC,CAChE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CACjD,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,iCAAiC,CAC3D,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,2BAA2B,CAAC,CACrD,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,4BAA4B,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;IAC3C,MAAM,QAAQ,GAAyC,MAAM,CAAC,MAAM,CAAC;QACnE,IAAI,EAAE,KAAK,EAAE,SAAiB,EAAE,KAAa,EAAE,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;KAC9F,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,IAAI,0CAA0C,CACnE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,4BAA4B,CAAC,CACtD,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY;QACZ,eAAe;QACf,OAAO,EAAE,CAAC,SAAiB,EAAE,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;QACpF,iBAAiB,EAAE,CAAC,SAAiB,EAAE,KAAa,EAAE,OAAe,EAAE,EAAE,CACvE,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC;QAC7D,iBAAiB,CAAC,cAAsB,EAAE,mBAA4C;YACpF,OAAO,IAAI,yBAAyB,CAAC;gBACnC,QAAQ,EAAE,YAAY;gBACtB,eAAe;gBACf,cAAc;gBACd,QAAQ,EAAE,mBAAmB,IAAI,OAAO,CAAC,QAAQ,IAAI,mBAAmB;gBACxE,mBAAmB,EAAE,KAAK;gBAC1B,kBAAkB;gBAClB,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QACD,qBAAqB,CAAC,QAAoC;YACxD,OAAO,IAAI,+BAA+B,CAAC;gBACzC,QAAQ;gBACR,YAAY;gBACZ,MAAM,EAAE,cAAc;gBACtB,QAAQ;gBACR,KAAK;gBACL,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,uBAAuB,CACrB,QAAyC,EACzC,gBAGC;YAED,OAAO,IAAI,iCAAiC,CAAC;gBAC3C,GAAG,gBAAgB;gBACnB,MAAM,EAAE,cAAc;gBACtB,QAAQ;gBACR,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QACD,4BAA4B,CAC1B,QAAyC,EACzC,SAA4C;YAE5C,OAAO,IAAI,sCAAsC,CAAC;gBAChD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,QAAQ;gBACnB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,WAAW,GAAsC,MAAM,CAAC,MAAM,CAAC;IACnE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAA2B,MAAM,CAAC,MAAM,CAAC;IAChE,IAAI,EAAE,KAAK,IAAI,EAAE;QACf,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/lib/workroom-runtime/workroom-remote-executor.d.ts

@@ -0,0 +1,9 @@
+import { type WorkroomRemoteDispatchOutboxItem } from '../workroom/remote-dispatch.js';
+import { type WorkroomRemoteDispatchObservation, type WorkroomRemoteExecutorPort } from '../workroom/remote-executor.js';
+export interface GenerationWorkroomRemoteExecutorPort extends WorkroomRemoteExecutorPort {
+    retry(persisted: WorkroomRemoteDispatchOutboxItem, retry: WorkroomRemoteDispatchOutboxItem, signal: AbortSignal): Promise<WorkroomRemoteDispatchObservation>;
+}
+export declare const workroomRemoteExecutorToken: import("@zhin.js/plugin-runtime").Token<WorkroomRemoteExecutorPort>;
+/** Resolve on every call so an HMR generation never captures a retired transport. */
+export declare function createGenerationWorkroomRemoteExecutorPort(resolve: () => WorkroomRemoteExecutorPort | undefined): GenerationWorkroomRemoteExecutorPort;
+//# sourceMappingURL=workroom-remote-executor.d.ts.map

package/lib/workroom-runtime/workroom-remote-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-remote-executor.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-remote-executor.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEL,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAChC,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,oCAAqC,SAAQ,0BAA0B;IACtF,KAAK,CACH,SAAS,EAAE,gCAAgC,EAC3C,KAAK,EAAE,gCAAgC,EACvC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,iCAAiC,CAAC,CAAC;CAC/C;AAED,eAAO,MAAM,2BAA2B,qEAGvC,CAAC;AAEF,qFAAqF;AACrF,wBAAgB,0CAA0C,CACxD,OAAO,EAAE,MAAM,0BAA0B,GAAG,SAAS,GACpD,oCAAoC,CAqBtC"}

package/lib/workroom-runtime/workroom-remote-executor.js

@@ -0,0 +1,23 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { assertWorkroomRemoteDispatchRetry, } from '../workroom/remote-dispatch.js';
+import { normalizeWorkroomRemoteDispatchObservation, } from '../workroom/remote-executor.js';
+export const workroomRemoteExecutorToken = createToken('zhin.agent.workroom-remote-executor', 'Generation-owned outbound Workroom A2A Assignment transport');
+/** Resolve on every call so an HMR generation never captures a retired transport. */
+export function createGenerationWorkroomRemoteExecutorPort(resolve) {
+    const dispatch = async (item, signal, governedBody) => {
+        const current = resolve();
+        if (!current)
+            throw new Error('Workroom Remote Executor Port is not installed');
+        return normalizeWorkroomRemoteDispatchObservation(await (governedBody === undefined
+            ? current.dispatch(item, signal)
+            : current.dispatch(item, signal, governedBody)));
+    };
+    return Object.freeze({
+        dispatch,
+        async retry(persisted, retry, signal) {
+            assertWorkroomRemoteDispatchRetry(persisted, retry);
+            return await dispatch(retry, signal);
+        },
+    });
+}
+//# sourceMappingURL=workroom-remote-executor.js.map

package/lib/workroom-runtime/workroom-remote-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-remote-executor.js","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-remote-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,iCAAiC,GAElC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,0CAA0C,GAG3C,MAAM,gCAAgC,CAAC;AAUxC,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CACpD,qCAAqC,EACrC,6DAA6D,CAC9D,CAAC;AAEF,qFAAqF;AACrF,MAAM,UAAU,0CAA0C,CACxD,OAAqD;IAErD,MAAM,QAAQ,GAAG,KAAK,EACpB,IAAsC,EACtC,MAAmB,EACnB,YAAyB,EACmB,EAAE;QAC9C,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAChF,OAAO,0CAA0C,CAC/C,MAAM,CAAC,YAAY,KAAK,SAAS;YAC/B,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAChC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAClD,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM;YAClC,iCAAiC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpD,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;KAC6C,CAAC,CAAC;AACpD,CAAC"}

package/lib/workroom-runtime/workroom-reviewer-authority-runtime.d.ts

@@ -0,0 +1,72 @@
+import type { WorkroomAcceptedReportReader } from '../workroom/accepted-source-memory-application.js';
+import type { ReviewerVerdict, WorkroomAcceptanceAuthorityPort, WorkroomAcceptanceAuthorizationDecision, WorkroomAcceptanceAuthorizationInput } from '../workroom/acceptance-control.js';
+import type { WorkroomRunState } from '../workroom/kernel-contracts.js';
+import type { WorkroomKernel } from '../workroom/workroom-kernel.js';
+export interface WorkroomAcceptancePrincipalFacts {
+    readonly principalId: string;
+    readonly roles: readonly ('reviewer' | 'sponsor' | 'executor' | 'orchestrator' | 'integration')[];
+    readonly profileRef: string;
+    readonly profileDigest: string;
+    readonly revision: number;
+    readonly issuer: string;
+    readonly catalogRevision: string;
+    readonly projectDigest: string;
+}
+export interface WorkroomAcceptancePrincipalRegistryPort {
+    resolve(input: Readonly<{
+        projectId: string;
+        runId: string;
+        principalId: string;
+    }>): Promise<WorkroomAcceptancePrincipalFacts | null>;
+}
+export declare const workroomAcceptancePrincipalRegistryToken: import("@zhin.js/plugin-runtime").Token<WorkroomAcceptancePrincipalRegistryPort>;
+export interface ProfileWorkroomAcceptanceAuthorityOptions {
+    readonly principals: WorkroomAcceptancePrincipalRegistryPort;
+    readonly runState: Readonly<{
+        read(projectId: string, runId: string): Promise<WorkroomRunState>;
+    }>;
+}
+/** Exact current-target RBAC. Discussion and model metadata are never inputs. */
+export declare class ProfileWorkroomAcceptanceAuthority implements WorkroomAcceptanceAuthorityPort {
+    readonly options: ProfileWorkroomAcceptanceAuthorityOptions;
+    constructor(options: ProfileWorkroomAcceptanceAuthorityOptions);
+    authorize(input: Readonly<WorkroomAcceptanceAuthorizationInput>): Promise<WorkroomAcceptanceAuthorizationDecision>;
+}
+export interface WorkroomReviewerViewReadInput {
+    readonly projectId: string;
+    readonly runId: string;
+    readonly assignmentId: string;
+    readonly principalId: string;
+}
+export interface WorkroomReviewerViewReaderPort {
+    read(input: WorkroomReviewerViewReadInput): Promise<Readonly<Record<string, unknown>>>;
+}
+export declare const workroomReviewerViewReaderToken: import("@zhin.js/plugin-runtime").Token<WorkroomReviewerViewReaderPort>;
+export interface WorkroomReviewerVerdictCommandBinding {
+    readonly projectId: string;
+    readonly runId: string;
+    readonly assignmentId: string;
+    readonly principalId: string;
+}
+export interface WorkroomReviewerVerdictCommandPort {
+    /** Candidate/criteria remain typed payload; all authority scope is already fixed. */
+    submit(verdict: ReviewerVerdict): Promise<WorkroomRunState>;
+}
+/**
+ * Reviewer-only writer. The caller cannot claim work, select another target,
+ * decide a Sponsor Gate, or invoke a generic Kernel transition.
+ */
+export declare function createWorkroomReviewerVerdictCommandPort(options: Readonly<{
+    kernel: Pick<WorkroomKernel, 'submitReviewerVerdict'>;
+    binding: WorkroomReviewerVerdictCommandBinding;
+}>): WorkroomReviewerVerdictCommandPort;
+export interface WorkroomReviewerViewReaderOptions {
+    readonly runState: ProfileWorkroomAcceptanceAuthorityOptions['runState'];
+    readonly reports: WorkroomAcceptedReportReader;
+}
+export declare class WorkroomReviewerViewReader implements WorkroomReviewerViewReaderPort {
+    readonly options: WorkroomReviewerViewReaderOptions;
+    constructor(options: WorkroomReviewerViewReaderOptions);
+    read(input: WorkroomReviewerViewReadInput): Promise<Readonly<Record<string, unknown>>>;
+}
+//# sourceMappingURL=workroom-reviewer-authority-runtime.d.ts.map

package/lib/workroom-runtime/workroom-reviewer-authority-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-reviewer-authority-runtime.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-reviewer-authority-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mDAAmD,CAAC;AACtG,OAAO,KAAK,EACV,eAAe,EACf,+BAA+B,EAC/B,uCAAuC,EACvC,oCAAoC,EACrC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGrE,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,cAAc,GAAG,aAAa,CAAC,EAAE,CAAC;IAClG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,uCAAuC;IACtD,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,GAAG,OAAO,CAAC,gCAAgC,GAAG,IAAI,CAAC,CAAC;CACvD;AAED,eAAO,MAAM,wCAAwC,kFAIlD,CAAC;AAEJ,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,UAAU,EAAE,uCAAuC,CAAC;IAC7D,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC1B,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;KACnE,CAAC,CAAC;CACJ;AAED,iFAAiF;AACjF,qBAAa,kCAAmC,YAAW,+BAA+B;IAC5E,QAAQ,CAAC,OAAO,EAAE,yCAAyC;gBAAlD,OAAO,EAAE,yCAAyC;IAEjE,SAAS,CACb,KAAK,EAAE,QAAQ,CAAC,oCAAoC,CAAC,GACpD,OAAO,CAAC,uCAAuC,CAAC;CAqDpD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,IAAI,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;CACxF;AAED,eAAO,MAAM,+BAA+B,yEAG3C,CAAC;AAEF,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kCAAkC;IACjD,qFAAqF;IACrF,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC7D;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,CAAC,OAAO,EAAE,QAAQ,CAAC;IACzE,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;IACtD,OAAO,EAAE,qCAAqC,CAAC;CAChD,CAAC,GAAG,kCAAkC,CAiBtC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,yCAAyC,CAAC,UAAU,CAAC,CAAC;IACzE,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;CAChD;AAED,qBAAa,0BAA2B,YAAW,8BAA8B;IACnE,QAAQ,CAAC,OAAO,EAAE,iCAAiC;gBAA1C,OAAO,EAAE,iCAAiC;IAEzD,IAAI,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAyC7F"}

package/lib/workroom-runtime/workroom-reviewer-authority-runtime.js

@@ -0,0 +1,142 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { deepFreezeWorkroomValue as deepFreeze } from '../workroom/canonical-value.js';
+export const workroomAcceptancePrincipalRegistryToken = createToken('zhin.agent.workroom-acceptance-principal-registry', 'Generation/Profile-owned Reviewer and Sponsor principal facts');
+/** Exact current-target RBAC. Discussion and model metadata are never inputs. */
+export class ProfileWorkroomAcceptanceAuthority {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async authorize(input) {
+        const reject = (reason) => deepFreeze({
+            ...input,
+            role: input.requiredRole,
+            authorized: false,
+            reason,
+        });
+        const state = await this.options.runState.read(input.projectId, input.runId);
+        if (state.projectId !== input.projectId || state.runId !== input.runId
+            || state.sequence !== input.expectedSequence) {
+            return reject('Acceptance authority targets a stale Run sequence');
+        }
+        const task = state.tasks[input.taskKey];
+        if (!task)
+            return reject('Acceptance authority Task is absent');
+        if (input.requiredRole === 'reviewer') {
+            const assignment = state.reviewerAssignments[input.targetId];
+            if (!assignment || task.currentReviewerAssignmentId !== assignment.id
+                || assignment.taskKey !== input.taskKey) {
+                return reject('Reviewer Assignment is not the current Task target');
+            }
+            if (assignment.producerPrincipalId === input.principalId) {
+                return reject('Reviewer principal is the Candidate producer');
+            }
+        }
+        else {
+            const gate = state.sponsorGates[input.targetId];
+            if (!gate || task.currentSponsorGateId !== gate.id || gate.taskKey !== input.taskKey) {
+                return reject('Sponsor Gate is not the current Task target');
+            }
+        }
+        const principal = await this.options.principals.resolve({
+            projectId: input.projectId,
+            runId: input.runId,
+            principalId: input.principalId,
+        });
+        if (!principal || principal.principalId !== input.principalId
+            || !principal.roles.includes(input.requiredRole)) {
+            return reject(`Principal lacks exact Profile ${input.requiredRole} role`);
+        }
+        requireText(principal.profileRef, 'Profile ref');
+        requireDigest(principal.profileDigest, 'Profile digest');
+        requireText(principal.issuer, 'Profile authority issuer');
+        requireText(principal.catalogRevision, 'Catalog revision');
+        requireDigest(principal.projectDigest, 'Catalog Project digest');
+        if (!Number.isSafeInteger(principal.revision) || principal.revision < 1) {
+            return reject('Profile authority revision is invalid');
+        }
+        return deepFreeze({
+            ...input,
+            role: input.requiredRole,
+            authorized: true,
+            authorizedBy: `profile-authority:${principal.profileDigest}:${principal.revision}:${principal.issuer}`,
+        });
+    }
+}
+export const workroomReviewerViewReaderToken = createToken('zhin.agent.workroom-reviewer-view-reader', 'Governed read-only Workroom Reviewer View with no Executor capability or workspace');
+/**
+ * Reviewer-only writer. The caller cannot claim work, select another target,
+ * decide a Sponsor Gate, or invoke a generic Kernel transition.
+ */
+export function createWorkroomReviewerVerdictCommandPort(options) {
+    const binding = deepFreeze({
+        projectId: requireText(options.binding.projectId, 'Reviewer command Project id'),
+        runId: requireText(options.binding.runId, 'Reviewer command Run id'),
+        assignmentId: requireText(options.binding.assignmentId, 'Reviewer command Assignment id'),
+        principalId: requireText(options.binding.principalId, 'Reviewer command principal id'),
+    });
+    return Object.freeze({
+        submit: async (verdict) => await options.kernel.submitReviewerVerdict(binding.projectId, binding.runId, binding.assignmentId, binding.principalId, deepFreeze(structuredClone(verdict))),
+    });
+}
+export class WorkroomReviewerViewReader {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async read(input) {
+        const state = await this.options.runState.read(input.projectId, input.runId);
+        const assignment = state.reviewerAssignments[input.assignmentId];
+        if (!assignment || assignment.status !== 'claimed'
+            || assignment.reviewerPrincipalId !== input.principalId
+            || assignment.producerPrincipalId === input.principalId) {
+            throw new Error('Reviewer View requires the independently claimed current Reviewer Assignment');
+        }
+        const task = state.tasks[assignment.taskKey];
+        if (!task || task.currentReviewerAssignmentId !== assignment.id
+            || task.revision !== assignment.taskRevision
+            || task.candidateHash !== assignment.candidateHash) {
+            throw new Error('Reviewer View target is stale');
+        }
+        const evaluation = assignment.evaluation;
+        const report = await this.options.reports.read({
+            projectId: input.projectId,
+            runId: input.runId,
+            taskKey: assignment.taskKey,
+            reportRef: evaluation.candidate.reportRef,
+            candidateHash: assignment.candidateHash,
+            purpose: 'acceptance-review',
+        });
+        if (!report)
+            throw new Error('Governed Reviewer Report View is unavailable');
+        return deepFreeze({
+            version: 1,
+            projectId: input.projectId,
+            runId: input.runId,
+            taskKey: assignment.taskKey,
+            taskRevision: assignment.taskRevision,
+            reviewerAssignmentId: assignment.id,
+            reviewerPrincipalId: input.principalId,
+            producerPrincipalId: assignment.producerPrincipalId,
+            candidateHash: assignment.candidateHash,
+            contract: evaluation.contract,
+            riskAssessment: evaluation.riskAssessment,
+            checkResults: evaluation.checkResults,
+            report,
+            readOnly: true,
+        });
+    }
+}
+function requireText(value, label) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim()) {
+        throw new Error(`${label} is invalid`);
+    }
+    return value;
+}
+function requireDigest(value, label) {
+    if (typeof value !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(value)) {
+        throw new Error(`${label} is invalid`);
+    }
+    return value;
+}
+//# sourceMappingURL=workroom-reviewer-authority-runtime.js.map

package/lib/workroom-runtime/workroom-reviewer-authority-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-reviewer-authority-runtime.js","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-reviewer-authority-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAUtD,OAAO,EAAE,uBAAuB,IAAI,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAqBvF,MAAM,CAAC,MAAM,wCAAwC,GACnD,WAAW,CACT,mDAAmD,EACnD,+DAA+D,CAChE,CAAC;AASJ,iFAAiF;AACjF,MAAM,OAAO,kCAAkC;IACxB;IAArB,YAAqB,OAAkD;QAAlD,YAAO,GAAP,OAAO,CAA2C;IAAG,CAAC;IAE3E,KAAK,CAAC,SAAS,CACb,KAAqD;QAErD,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,UAAU,CAAC;YAC5C,GAAG,KAAK;YACR,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,UAAU,EAAE,KAAc;YAC1B,MAAM;SACP,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;eACjE,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC,mDAAmD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7D,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,2BAA2B,KAAK,UAAU,CAAC,EAAE;mBAChE,UAAU,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC1C,OAAO,MAAM,CAAC,oDAAoD,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,UAAU,CAAC,mBAAmB,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;gBACzD,OAAO,MAAM,CAAC,8CAA8C,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,oBAAoB,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;gBACrF,OAAO,MAAM,CAAC,6CAA6C,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YACtD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;eACxD,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACnD,OAAO,MAAM,CAAC,iCAAiC,KAAK,CAAC,YAAY,OAAO,CAAC,CAAC;QAC5E,CAAC;QACD,WAAW,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACjD,aAAa,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QACzD,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;QAC1D,WAAW,CAAC,SAAS,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;QAC3D,aAAa,CAAC,SAAS,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACxE,OAAO,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,UAAU,CAAC;YAChB,GAAG,KAAK;YACR,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,UAAU,EAAE,IAAa;YACzB,YAAY,EAAE,qBAAqB,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,EAAE;SACvG,CAAC,CAAC;IACL,CAAC;CACF;AAaD,MAAM,CAAC,MAAM,+BAA+B,GAAG,WAAW,CACxD,0CAA0C,EAC1C,oFAAoF,CACrF,CAAC;AAcF;;;GAGG;AACH,MAAM,UAAU,wCAAwC,CAAC,OAGvD;IACA,MAAM,OAAO,GAAG,UAAU,CAAC;QACzB,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,6BAA6B,CAAC;QAChF,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,yBAAyB,CAAC;QACpE,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,gCAAgC,CAAC;QACzF,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,+BAA+B,CAAC;KACvF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,KAAK,EAAE,OAAwB,EAA6B,EAAE,CACpE,MAAM,OAAO,CAAC,MAAM,CAAC,qBAAqB,CACxC,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,WAAW,EACnB,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CACrC;KACJ,CAAC,CAAC;AACL,CAAC;AAOD,MAAM,OAAO,0BAA0B;IAChB;IAArB,YAAqB,OAA0C;QAA1C,YAAO,GAAP,OAAO,CAAmC;IAAG,CAAC;IAEnE,KAAK,CAAC,IAAI,CAAC,KAAoC;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;eAC7C,UAAU,CAAC,mBAAmB,KAAK,KAAK,CAAC,WAAW;eACpD,UAAU,CAAC,mBAAmB,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,2BAA2B,KAAK,UAAU,CAAC,EAAE;eAC1D,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,YAAY;eACzC,IAAI,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,SAAS;YACzC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,OAAO,EAAE,mBAAmB;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC7E,OAAO,UAAU,CAAC;YAChB,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,oBAAoB,EAAE,UAAU,CAAC,EAAE;YACnC,mBAAmB,EAAE,KAAK,CAAC,WAAW;YACtC,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;YACnD,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,MAAM;YACN,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/workroom-runtime/workroom-risk-acceptance-runtime.d.ts

@@ -0,0 +1,112 @@
+import type { WorkroomAcceptedReportReader } from '../workroom/accepted-source-memory-application.js';
+import { type WorkroomAcceptanceCheckResult, type WorkroomAcceptanceContractPinInput, type WorkroomAcceptanceCriterion, type WorkroomAcceptanceDecision, type WorkroomAcceptanceDecisionInput, type WorkroomAcceptancePolicyDecisionPort, type WorkroomAcceptancePolicySnapshot, type WorkroomRiskTier } from '../workroom/acceptance-policy.js';
+export interface WorkroomTrustedFactSource {
+    readonly sourceType: 'project-profile' | 'workflow-plan' | 'capability-snapshot' | 'artifact-header' | 'effect-intent' | 'report-header';
+    readonly sourceRef: string;
+    readonly sourceDigest: string;
+    readonly issuer: string;
+    readonly policyRevision: number;
+}
+export interface WorkroomAcceptancePolicyFacts {
+    readonly profileRef: string;
+    readonly profileDigest: string;
+    readonly policy: WorkroomAcceptancePolicySnapshot;
+    readonly kind: 'task_result' | 'integration_candidate' | 'effect_intent';
+    readonly criteria: readonly WorkroomAcceptanceCriterion[];
+    readonly requiredEvidence: readonly string[];
+    readonly minimumRoute: 'baseline' | 'reviewer_required' | 'sponsor_required' | 'reviewer_then_sponsor';
+    readonly reviewerOwner: string;
+    readonly sponsorOwner: string;
+    readonly reviewerTimeoutMs: number;
+    readonly sponsorTimeoutMs: number;
+    readonly binding: WorkroomTrustedFactSource;
+}
+export interface WorkroomAcceptancePolicyFactsPort {
+    resolve(input: Readonly<{
+        projectId: string;
+        runId: string;
+        taskKey: string;
+        taskRevision: number;
+    }>): Promise<WorkroomAcceptancePolicyFacts>;
+}
+export interface WorkroomConservativeRiskDimensions {
+    readonly sideEffect: 'none' | 'local' | 'external' | 'unknown';
+    readonly reversibility: 'discard_only' | 'compensatable' | 'irreversible' | 'unknown';
+    readonly dataClass: 'public' | 'internal' | 'confidential' | 'restricted' | 'unknown';
+    readonly blastRadius: 'single_artifact' | 'project' | 'organization' | 'external' | 'unknown';
+    readonly capabilityTags: readonly string[];
+    readonly uncertainty: 'known' | 'unknown';
+}
+export interface WorkroomTrustedRiskFacts {
+    readonly candidateHash: string;
+    readonly facts: WorkroomConservativeRiskDimensions;
+    readonly sources: readonly WorkroomTrustedFactSource[];
+}
+export interface WorkroomTrustedRiskFactsPort {
+    assess(input: Readonly<{
+        projectId: string;
+        runId: string;
+        taskKey: string;
+        taskRevision: number;
+        candidateHash: string;
+        reportRef: string;
+        reportDigest: string;
+        artifactRefs: readonly string[];
+        planRef: string;
+        planRevision: number;
+        policy: WorkroomAcceptancePolicySnapshot;
+    }>): Promise<WorkroomTrustedRiskFacts>;
+}
+export interface WorkroomTrustedAcceptanceCheckRunnerPort {
+    run(input: Readonly<{
+        projectId: string;
+        runId: string;
+        taskKey: string;
+        criterion: WorkroomAcceptanceCriterion;
+        candidateHash: string;
+        reportRef: string;
+        evidenceRefs: readonly string[];
+        policy: WorkroomAcceptancePolicySnapshot;
+    }>): Promise<WorkroomAcceptanceCheckResult>;
+}
+export type WorkroomAcceptanceEffectState = 'pending_authorization' | 'authorized' | 'committed' | 'failed' | 'outcome_unknown' | 'cancelled';
+export interface WorkroomAcceptanceEffectStateFacts {
+    readonly projectId: string;
+    readonly runId: string;
+    readonly taskKey: string;
+    readonly taskRevision: number;
+    readonly candidateHash: string;
+    readonly intentRef: string;
+    readonly intentDigest: string;
+    readonly state: WorkroomAcceptanceEffectState;
+    readonly authorizationDigest?: string;
+    readonly receiptDigest?: string;
+}
+export interface WorkroomAcceptanceEffectStatePort {
+    resolve(input: Readonly<{
+        projectId: string;
+        runId: string;
+        taskKey: string;
+        taskRevision: number;
+        candidateHash: string;
+    }>): Promise<WorkroomAcceptanceEffectStateFacts | null>;
+}
+export declare const workroomAcceptancePolicyFactsToken: import("@zhin.js/plugin-runtime").Token<WorkroomAcceptancePolicyFactsPort>;
+export declare const workroomTrustedRiskFactsToken: import("@zhin.js/plugin-runtime").Token<WorkroomTrustedRiskFactsPort>;
+export declare const workroomAcceptanceCheckRunnerToken: import("@zhin.js/plugin-runtime").Token<WorkroomTrustedAcceptanceCheckRunnerPort>;
+export interface PinnedWorkroomAcceptancePolicyOptions {
+    readonly policies: WorkroomAcceptancePolicyFactsPort;
+    readonly reports: WorkroomAcceptedReportReader;
+    readonly risk: WorkroomTrustedRiskFactsPort;
+    readonly checks: WorkroomTrustedAcceptanceCheckRunnerPort;
+    readonly effects?: WorkroomAcceptanceEffectStatePort;
+}
+/** Pure routing policy over pinned facts. Model output never supplies risk, route, or authority. */
+export declare class PinnedWorkroomAcceptancePolicy implements WorkroomAcceptancePolicyDecisionPort {
+    readonly options: PinnedWorkroomAcceptancePolicyOptions;
+    constructor(options: PinnedWorkroomAcceptancePolicyOptions);
+    pinContract(input: WorkroomAcceptanceContractPinInput): Promise<import("../index.js").WorkroomAcceptanceContract>;
+    decide(input: WorkroomAcceptanceDecisionInput): Promise<WorkroomAcceptanceDecision>;
+}
+export declare function assessRiskTier(facts: WorkroomConservativeRiskDimensions): WorkroomRiskTier;
+//# sourceMappingURL=workroom-risk-acceptance-runtime.d.ts.map

package/lib/workroom-runtime/workroom-risk-acceptance-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-risk-acceptance-runtime.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-risk-acceptance-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mDAAmD,CAAC;AACtG,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,kCAAkC,EACvC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,oCAAoC,EACzC,KAAK,gCAAgC,EAErC,KAAK,gBAAgB,EACtB,MAAM,kCAAkC,CAAC;AAO1C,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,GAAG,eAAe,GAAG,qBAAqB,GAAG,iBAAiB,GAAG,eAAe,GAAG,eAAe,CAAC;IACzI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAClD,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,uBAAuB,GAAG,eAAe,CAAC;IACzE,QAAQ,CAAC,QAAQ,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,UAAU,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,uBAAuB,CAAC;IACvG,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;CAC7C;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,aAAa,EAAE,cAAc,GAAG,eAAe,GAAG,cAAc,GAAG,SAAS,CAAC;IACtF,QAAQ,CAAC,SAAS,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,GAAG,SAAS,CAAC;IACtF,QAAQ,CAAC,WAAW,EAAE,iBAAiB,GAAG,SAAS,GAAG,cAAc,GAAG,UAAU,GAAG,SAAS,CAAC;IAC9F,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,gCAAgC,CAAC;KAC1C,CAAC,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,wCAAwC;IACvD,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,2BAA2B,CAAC;QACvC,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;QAChC,MAAM,EAAE,gCAAgC,CAAC;KAC1C,CAAC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;CAC7C;AAED,MAAM,MAAM,6BAA6B,GACrC,uBAAuB,GACvB,YAAY,GACZ,WAAW,GACX,QAAQ,GACR,iBAAiB,GACjB,WAAW,CAAC;AAEhB,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;IAC9C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC,GAAG,OAAO,CAAC,kCAAkC,GAAG,IAAI,CAAC,CAAC;CACzD;AAED,eAAO,MAAM,kCAAkC,4EAG9C,CAAC;AACF,eAAO,MAAM,6BAA6B,uEAGzC,CAAC;AACF,eAAO,MAAM,kCAAkC,mFAG9C,CAAC;AAEF,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,EAAE,iCAAiC,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,wCAAwC,CAAC;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,iCAAiC,CAAC;CACtD;AAED,oGAAoG;AACpG,qBAAa,8BAA+B,YAAW,oCAAoC;IAC7E,QAAQ,CAAC,OAAO,EAAE,qCAAqC;gBAA9C,OAAO,EAAE,qCAAqC;IAE7D,WAAW,CAAC,KAAK,EAAE,kCAAkC;IAoBrD,MAAM,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,0BAA0B,CAAC;CA6I1F;AA2DD,wBAAgB,cAAc,CAAC,KAAK,EAAE,kCAAkC,GAAG,gBAAgB,CAyB1F"}