agentic-workflow-manager 9.7.0 → 9.8.0

package/dist/tests/core/bundles-multiroot.test.js

@@ -8,9 +8,10 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
 function writeBundleRoot(root, bundleName, skillName) {
+    const canonicalSkillName = typeof skillName === 'string' ? skillName : skillName.name;
     fs_1.default.mkdirSync(path_1.default.join(root, 'bundles', bundleName), { recursive: true });
-    fs_1.default.mkdirSync(path_1.default.join(root, 'skills', skillName), { recursive: true });
-    fs_1.default.writeFileSync(path_1.default.join(root, 'skills', skillName, 'SKILL.md'), `---\nname: ${skillName}\ndescription: d\n---\n`);
+    fs_1.default.mkdirSync(path_1.default.join(root, 'skills', canonicalSkillName), { recursive: true });
+    fs_1.default.writeFileSync(path_1.default.join(root, 'skills', canonicalSkillName, 'SKILL.md'), `---\nname: ${canonicalSkillName}\ndescription: d\n---\n`);
     fs_1.default.writeFileSync(path_1.default.join(root, 'bundles', bundleName, 'bundle.json'), JSON.stringify({ name: bundleName, version: '1.0.0', scope: 'ambient', skills: [skillName] }));
     fs_1.default.writeFileSync(path_1.default.join(root, 'catalog.json'), JSON.stringify({
         version: 1,
@@ -38,6 +39,27 @@ describe('bundles multi-root', () => {
         expect(all.map((b) => b.name).sort()).toEqual(['dev-x', 'personal-x']);
         expect(all.find((b) => b.name === 'personal-x').contentRoot).toBe(rootB);
     });
+    it('composes one legacy migration diagnostic for each affected manifest', () => {
+        writeBundleRoot(rootA, 'dev-x', { name: 'sx', onSignal: true });
+        writeBundleRoot(rootB, 'personal-x', { name: 'px', onSignal: false });
+        const { inspectAllBundles } = require('../../src/core/bundles');
+        const result = inspectAllBundles([rootA, rootB]);
+        expect(result.bundles.map((b) => b.skills)).toEqual([['sx'], ['px']]);
+        expect(result.diagnostics).toHaveLength(2);
+        expect(new Set(result.diagnostics).size).toBe(2);
+    });
+    it('keeps diagnostics distinct when manifest identities share a truncated prefix', () => {
+        const sharedPrefix = path_1.default.join(tmp, ...Array.from({ length: 30 }, () => 'shared-prefix'));
+        const longRootA = path_1.default.join(sharedPrefix, 'registry-a');
+        const longRootB = path_1.default.join(sharedPrefix, 'registry-b');
+        writeBundleRoot(longRootA, 'legacy-a', { name: 'sa', onSignal: true });
+        writeBundleRoot(longRootB, 'legacy-b', { name: 'sb', onSignal: false });
+        const { inspectAllBundles } = require('../../src/core/bundles');
+        const result = inspectAllBundles([longRootA, longRootB]);
+        expect(result.diagnostics).toHaveLength(2);
+        expect(result.diagnostics.every((diagnostic) => diagnostic.length <= 512)).toBe(true);
+        expect(result.diagnostics[0]).not.toBe(result.diagnostics[1]);
+    });
     it('discoverAllBundles throws naming both sources on bundle name collision', () => {
         writeBundleRoot(rootA, 'dup', 's1');
         writeBundleRoot(rootB, 'dup', 's2');

package/dist/tests/core/bundles-overrides.test.js

@@ -7,9 +7,10 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
 function writeBundleRoot(root, bundleName, skillName) {
+    const canonicalSkillName = typeof skillName === 'string' ? skillName : skillName.name;
     fs_1.default.mkdirSync(path_1.default.join(root, 'bundles', bundleName), { recursive: true });
-    fs_1.default.mkdirSync(path_1.default.join(root, 'skills', skillName), { recursive: true });
-    fs_1.default.writeFileSync(path_1.default.join(root, 'skills', skillName, 'SKILL.md'), `---\nname: ${skillName}\ndescription: d\n---\n`);
+    fs_1.default.mkdirSync(path_1.default.join(root, 'skills', canonicalSkillName), { recursive: true });
+    fs_1.default.writeFileSync(path_1.default.join(root, 'skills', canonicalSkillName, 'SKILL.md'), `---\nname: ${canonicalSkillName}\ndescription: d\n---\n`);
     fs_1.default.writeFileSync(path_1.default.join(root, 'bundles', bundleName, 'bundle.json'), JSON.stringify({ name: bundleName, version: '1.0.0', scope: 'ambient', skills: [skillName] }));
     fs_1.default.writeFileSync(path_1.default.join(root, 'catalog.json'), JSON.stringify({
         version: 1,
@@ -33,11 +34,13 @@ describe('bundle override resolution', () => {
         writeBundleRoot(rootA, 'pack', 's1');
         writeBundleRoot(rootB, 'pack', 's2');
         fs_1.default.writeFileSync(path_1.default.join(rootB, 'awm-registry.json'), JSON.stringify({ overrides: ['pack'] }));
-        const { discoverAllBundles } = require('../../src/core/bundles');
-        const out = discoverAllBundles([rootA, rootB]);
-        expect(out).toHaveLength(1);
-        expect(out[0].contentRoot).toBe(rootB);
-        expect(out[0].overrode).toBe(rootA);
+        const { inspectAllBundles } = require('../../src/core/bundles');
+        const result = inspectAllBundles([rootA, rootB]);
+        expect(result.bundles).toHaveLength(1);
+        expect(result.bundles[0].contentRoot).toBe(rootB);
+        expect(result.bundles[0].overrode).toBe(rootA);
+        expect(result.bundles[0].skills).toEqual(['s2']);
+        expect(result.diagnostics).toHaveLength(0);
     });
     it('undeclared collision still throws naming both sources', () => {
         writeBundleRoot(rootA, 'dup', 's1');

package/dist/tests/core/bundles.test.js

@@ -21,7 +21,7 @@ function makeFixture() {
     }));
     fs_1.default.writeFileSync(path_1.default.join(content, 'bundles', 'dev', 'bundle.json'), JSON.stringify({
         name: 'dev', version: '1.0.0', description: 'Dev core', scope: 'baseline', dependsOn: [],
-        skills: ['brainstorming', { name: 'architecture-advisor', onSignal: true }],
+        skills: ['brainstorming', 'architecture-advisor'],
         workflows: ['development-process'], agents: ['development-process'],
     }));
     fs_1.default.writeFileSync(path_1.default.join(content, 'bundles', 'frontend', 'bundle.json'), JSON.stringify({
@@ -47,17 +47,86 @@ describe('readCatalog', () => {
     });
 });
 describe('discoverBundles', () => {
-    it('loads each bundle and normalizes skill refs (string | object)', () => {
+    it('loads each bundle with canonical skill names', () => {
         const content = makeFixture();
         const bundles = (0, bundles_1.discoverBundles)(content);
         const dev = bundles.find((b) => b.name === 'dev');
-        expect(dev.skills).toEqual([
-            { name: 'brainstorming', onSignal: false },
-            { name: 'architecture-advisor', onSignal: true },
-        ]);
+        expect(dev.skills).toEqual(['brainstorming', 'architecture-advisor']);
         expect(dev.scope).toBe('baseline');
         expect(dev.dependsOn).toEqual([]);
     });
+    it('canonicalizes legacy skill objects and reports one bounded migration diagnostic per manifest', () => {
+        const content = makeFixture();
+        const manifest = path_1.default.join(content, 'bundles', 'dev', 'bundle.json');
+        fs_1.default.writeFileSync(manifest, JSON.stringify({
+            name: 'dev', version: '1.0.0', scope: 'baseline',
+            skills: [
+                { name: 'brainstorming', onSignal: true },
+                { name: 'architecture-advisor', onSignal: false },
+            ],
+        }));
+        const { inspectBundles } = require('../../src/core/bundles');
+        const result = inspectBundles(content);
+        expect(result.bundles[0].skills).toEqual(['brainstorming', 'architecture-advisor']);
+        expect(result.diagnostics).toHaveLength(1);
+        expect(result.diagnostics[0]).toContain('bundle.json');
+        expect(result.diagnostics[0]).toContain('skills: ["skill-name"]');
+        expect(result.diagnostics[0]).toMatch(/v10/i);
+        expect(result.diagnostics[0]).not.toMatch(/[\x00-\x1f\x7f-\x9f]/);
+        expect(result.diagnostics[0]).not.toContain('{"name"');
+        expect(result.diagnostics[0].length).toBeLessThanOrEqual(512);
+    });
+    it('forwards one deduplicated legacy diagnostic to an injected reporter', () => {
+        const content = makeFixture();
+        const manifest = path_1.default.join(content, 'bundles', 'dev', 'bundle.json');
+        fs_1.default.writeFileSync(manifest, JSON.stringify({
+            name: 'dev', version: '1.0.0', scope: 'baseline',
+            skills: [{ name: 'brainstorming', onSignal: true }, { name: 'architecture-advisor', onSignal: false }],
+        }));
+        const diagnostics = [];
+        const bundles = (0, bundles_1.discoverBundles)(content, (diagnostic) => diagnostics.push(diagnostic));
+        expect(bundles[0].skills).toEqual(['brainstorming', 'architecture-advisor']);
+        expect(diagnostics).toHaveLength(1);
+    });
+    it('creates a command-scoped warning reporter that suppresses repeated diagnostics', () => {
+        const warnings = [];
+        const report = (0, bundles_1.createBundleDiagnosticReporter)((warning) => warnings.push(warning));
+        report('legacy warning');
+        report('legacy warning');
+        expect(warnings).toEqual(['warning: legacy warning']);
+    });
+    it('sanitizes, bounds, and then deduplicates caller-provided diagnostics', () => {
+        const warnings = [];
+        const report = (0, bundles_1.createBundleDiagnosticReporter)((warning) => warnings.push(warning));
+        const payload = `legacy\x1b\n${'x'.repeat(600)}`;
+        report(payload);
+        report(`legacy ${'x'.repeat(600)}`);
+        expect(warnings).toHaveLength(1);
+        expect(warnings[0]).toMatch(/^warning: legacy /);
+        expect(warnings[0]).not.toMatch(/[\x00-\x1f\x7f-\x9f]/);
+        expect(warnings[0].length).toBeLessThanOrEqual('warning: '.length + 512);
+    });
+    it.each([
+        ['missing skills', undefined, /skills/],
+        ['a non-array skills value', 'brainstorming', /skills/],
+        ['an empty string skill', [''], /skills\[0\]/],
+        ['an array skill', [['brainstorming']], /skills\[0\]/],
+        ['a null skill', [null], /skills\[0\]/],
+        ['an object missing name', [{ onSignal: true }], /skills\[0\]/],
+        ['an object with an empty name', [{ name: '', onSignal: true }], /skills\[0\]/],
+        ['an object with a non-string name', [{ name: 1, onSignal: true }], /skills\[0\]/],
+        ['an object with a non-boolean onSignal', [{ name: 'brainstorming', onSignal: 'true' }], /skills\[0\]/],
+        ['an object with an unknown key', [{ name: 'brainstorming', extra: true }], /skills\[0\]/],
+    ])('rejects %s with a safe manifest identity', (_case, skills, location) => {
+        const content = makeFixture();
+        const manifest = path_1.default.join(content, 'bundles', 'dev', 'bundle.json');
+        const bundle = { name: 'dev', version: '1.0.0', scope: 'baseline' };
+        if (skills !== undefined)
+            bundle.skills = skills;
+        fs_1.default.writeFileSync(manifest, JSON.stringify(bundle));
+        expect(() => (0, bundles_1.discoverBundles)(content)).toThrow(/bundle\.json/);
+        expect(() => (0, bundles_1.discoverBundles)(content)).toThrow(location);
+    });
     it('returns [] when catalog is missing', () => {
         const empty = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-empty-'));
         expect((0, bundles_1.discoverBundles)(empty)).toEqual([]);

package/dist/tests/core/diagnostics/context.test.js

@@ -9,7 +9,7 @@ const path_1 = __importDefault(require("path"));
 function bundle(name, scope, skills) {
     return {
         name, description: '', version: '1.0.0', scope, visibility: 'public',
-        dependsOn: [], skills: skills.map((s) => ({ name: s, onSignal: false })),
+        dependsOn: [], skills,
         workflows: [], agents: [],
     };
 }
@@ -86,7 +86,7 @@ describe('gatherContext', () => {
     it('machine: devCore surfaces a missing per-agent artifact even when the shared skill link is already present', () => {
         const bundleWithAgent = () => ({
             name: 'dev-core', description: '', version: '1.0.0', scope: 'baseline', visibility: 'public',
-            dependsOn: [], skills: [{ name: 'development-process', onSignal: false }],
+            dependsOn: [], skills: ['development-process'],
             workflows: [], agents: ['development-process'],
         });
         // Simulate OpenCode having already linked the shared ~/.agents/skills dir.

package/dist/tests/core/export/engine.test.js

@@ -21,7 +21,7 @@ function makeRoot() {
     }));
     fs_1.default.writeFileSync(path_1.default.join(root, 'bundles/dev/bundle.json'), JSON.stringify({
         name: 'dev', version: '1.0.0', scope: 'baseline', dependsOn: [],
-        skills: ['proc-skill', { name: 'mermaid', onSignal: true }, { name: 'ported', onSignal: true }],
+        skills: ['proc-skill', 'mermaid', 'ported'],
         workflows: [], agents: [],
     }));
     const mk = (name, fm) => {

package/dist/tests/core/export/resolve.test.js

@@ -17,7 +17,7 @@ function makeRoot() {
     }));
     fs_1.default.writeFileSync(path_1.default.join(root, 'bundles/dev/bundle.json'), JSON.stringify({
         name: 'dev', version: '1.0.0', scope: 'baseline', dependsOn: [],
-        skills: ['proc-skill', { name: 'mermaid', onSignal: true }, { name: 'ported', onSignal: true }],
+        skills: ['proc-skill', 'mermaid', 'ported'],
         workflows: [], agents: [],
     }));
     const mk = (name, fm) => {

package/dist/tests/core/init/mutation-targets.test.js

@@ -23,7 +23,7 @@ const tmp_1 = require("../../support/tmp");
 function bundle(name, scope, skills) {
     return {
         name, description: '', version: '1.0.0', scope, visibility: 'public',
-        dependsOn: [], skills: skills.map((s) => ({ name: s, onSignal: false })),
+        dependsOn: [], skills,
         workflows: [], agents: [],
     };
 }

package/dist/tests/core/init/orchestrator.test.js

@@ -31,7 +31,7 @@ function seedRegistry(contentRoot) {
     fs_1.default.mkdirSync(path_1.default.join(contentRoot, 'bundles', 'dev'), { recursive: true });
     fs_1.default.writeFileSync(path_1.default.join(contentRoot, 'bundles', 'dev', 'bundle.json'), JSON.stringify({
         name: 'dev', version: '1.0.0', scope: 'baseline', dependsOn: [],
-        skills: [{ name: 'brainstorming' }, { name: 'using-awm' }], workflows: [], agents: [],
+        skills: ['brainstorming', 'using-awm'], workflows: [], agents: [],
     }));
     // Seed .git in the content root so gatherMachine.registryCache.present is true.
     fs_1.default.mkdirSync(path_1.default.join(contentRoot, '.git'), { recursive: true });

package/dist/tests/core/init/steps.test.js

@@ -12,7 +12,7 @@ const context_1 = require("../../../src/core/diagnostics/context");
 function bundle(name, scope, skills) {
     return {
         name, description: '', version: '1.0.0', scope, visibility: 'public',
-        dependsOn: [], skills: skills.map((s) => ({ name: s, onSignal: false })),
+        dependsOn: [], skills,
         workflows: [], agents: [],
     };
 }

package/dist/tests/core/journal/fingerprint.test.js

@@ -8,6 +8,7 @@ const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
 const child_process_1 = require("child_process");
 const fingerprint_1 = require("../../../src/core/journal/fingerprint");
+const types_1 = require("../../../src/core/journal/types");
 function git(cwd, ...args) {
     (0, child_process_1.execFileSync)('git', ['-c', 'user.email=t@t.t', '-c', 'user.name=t', '-c', 'commit.gpgsign=false', ...args], { cwd });
 }
@@ -96,6 +97,27 @@ describe('computeFingerprint', () => {
         expect(() => (0, fingerprint_1.computeFingerprint)(repo, ['npm', 'test'], [], '.')).not.toThrow();
     });
 });
+describe('reconcileUnattendedRecovery', () => {
+    test.each([
+        ['journal', { journal: null, journalCorrupt: true }, 'repair-journal'],
+        ['binding', { plan: { path: 'other.md' } }, 'rebind-plan'],
+        ['git', { git: 'changed' }, 'reconcile-git'],
+        ['verdicts', { verdicts: 'missing' }, 'repair-verdicts'],
+        ['tests', { tests: 'fail' }, 'run-tests'],
+        ['sensors', { sensors: 'missing' }, 'run-sensors'],
+        ['ready', {}, 'select-work'],
+    ])('covers recovery action %s', (_name, overrides, nextAction) => {
+        const journal = { ...(0, types_1.emptyState)('main'), schema: 2, planBinding: { path: 'docs/plan.md', digest: 'a'.repeat(64), schema: 'compact-slices/v1', executionMode: 'desatendido', boundAt: '2026-09-15T00:00:00.000Z' } };
+        const input = { journal, journalCorrupt: false, plan: journal.planBinding, git: 'current', activeJobIds: [], tests: 'pass', sensors: 'pass', verdicts: 'current', ...overrides };
+        expect((0, fingerprint_1.reconcileUnattendedRecovery)(input).nextAction).toBe(nextAction);
+    });
+    test('reuses active obligations before later verdict repair', () => {
+        const journal = { ...(0, types_1.emptyState)('main'), schema: 2, planBinding: { path: 'docs/plan.md', digest: 'a'.repeat(64), schema: 'compact-slices/v1', executionMode: 'desatendido', boundAt: '2026-09-15T00:00:00.000Z' } };
+        const input = { journal, journalCorrupt: false, plan: journal.planBinding, git: 'current', activeJobIds: ['job-b', 'job-a', 'job-a'], tests: 'pass', sensors: 'pass', verdicts: 'current' };
+        expect((0, fingerprint_1.reconcileUnattendedRecovery)(input)).toEqual({ state: 'ready', nextAction: 'reconcile-active-jobs', activeJobIds: ['job-a', 'job-b'], diagnostics: [] });
+        expect((0, fingerprint_1.reconcileUnattendedRecovery)({ ...input, verdicts: 'missing' })).toEqual({ state: 'ready', nextAction: 'reconcile-active-jobs', activeJobIds: ['job-a', 'job-b'], diagnostics: [] });
+    });
+});
 /** Defense-in-depth (post-implementation-qa, follow-up a Task 20): el `git()`
  *  interno de este archivo backea `computeFingerprint`, invocado en CADA tick
  *  del supervisor via `FingerprintNow`/`computeGate` (job/gate.ts). Sin stdio

package/dist/tests/core/journal/store.test.js

@@ -27,6 +27,11 @@ describe('journal store', () => {
         expect(r.corrupt).toBe(false);
         expect(r.state.revision).toBe(0);
     });
+    test('initJournal es idempotente cuando el arbol de journal ya existe', () => {
+        (0, store_1.initJournal)(repo, 'rama');
+        expect(() => (0, store_1.initJournal)(repo, 'rama')).not.toThrow();
+        expect((0, store_1.readJournal)(repo, 'rama')).toMatchObject({ corrupt: false, state: { revision: 0 } });
+    });
     test('writeJournal incrementa revision y rechaza revision vieja (R1.2)', () => {
         (0, store_1.initJournal)(repo, 'rama');
         const s1 = (0, store_1.readJournal)(repo, 'rama').state;
@@ -51,6 +56,46 @@ describe('journal store', () => {
         fs_1.default.writeFileSync((0, paths_1.statePath)(repo, 'rama'), '{roto'); // sintaxis invalida
         expect((0, store_1.readJournal)(repo, 'rama').corrupt).toBe(true);
     });
+    test('rechaza un state.json symlink sin leer el destino externo', () => {
+        (0, store_1.initJournal)(repo, 'rama');
+        const outside = path_1.default.join(repo, 'outside.json');
+        fs_1.default.writeFileSync(outside, fs_1.default.readFileSync((0, paths_1.statePath)(repo, 'rama')));
+        fs_1.default.rmSync((0, paths_1.statePath)(repo, 'rama'));
+        fs_1.default.symlinkSync(outside, (0, paths_1.statePath)(repo, 'rama'));
+        expect((0, store_1.readJournal)(repo, 'rama')).toMatchObject({ state: null, corrupt: true });
+    });
+    test('initJournal rechaza un padre .awm symlink sin crear journal fuera del repo', () => {
+        const outside = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-store-outside-'));
+        try {
+            fs_1.default.symlinkSync(outside, path_1.default.join(repo, '.awm'));
+            expect(() => (0, store_1.initJournal)(repo, 'rama')).toThrow(/symlink/i);
+            expect(fs_1.default.existsSync(path_1.default.join(outside, 'journal'))).toBe(false);
+        }
+        finally {
+            fs_1.default.rmSync(outside, { recursive: true, force: true });
+        }
+    });
+    test.each([
+        ['.awm', (root) => path_1.default.join(root, '.awm')],
+        ['journal', (root) => path_1.default.join(root, '.awm', 'journal')],
+        ['branch', (root) => (0, paths_1.journalDir)(root, 'rama')],
+        ['requests', (root) => (0, paths_1.requestsDir)(root, 'rama')],
+        ['acks', (root) => (0, paths_1.acksDir)(root, 'rama')],
+        ['logs', (root) => (0, paths_1.logsDir)(root, 'rama')],
+        ['export', (root) => (0, paths_1.exportDir)(root, 'rama')],
+    ])('initJournal rechaza el segmento symlink %s', (_name, segment) => {
+        const outside = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-store-outside-'));
+        const target = segment(repo);
+        try {
+            fs_1.default.mkdirSync(path_1.default.dirname(target), { recursive: true });
+            fs_1.default.symlinkSync(outside, target);
+            expect(() => (0, store_1.initJournal)(repo, 'rama')).toThrow(/symlink/i);
+            expect(fs_1.default.readdirSync(outside)).toEqual([]);
+        }
+        finally {
+            fs_1.default.rmSync(outside, { recursive: true, force: true });
+        }
+    });
     test('normaliza campos aditivos de snapshots schema 1 sin certificar evidencia legacy', () => {
         (0, store_1.initJournal)(repo, 'rama');
         const legacy = (0, store_1.readJournal)(repo, 'rama').state;
@@ -74,6 +119,14 @@ describe('journal store', () => {
         expect(JSON.parse(lines[0]).kind).toBe('generation-launched');
         expect(typeof JSON.parse(lines[0]).at).toBe('string');
     });
+    test('appendEvent no sigue un events.jsonl symlink externo', () => {
+        (0, store_1.initJournal)(repo, 'rama');
+        const outside = path_1.default.join(repo, 'outside-events.jsonl');
+        fs_1.default.writeFileSync(outside, 'outside\n');
+        fs_1.default.symlinkSync(outside, (0, paths_1.eventsPath)(repo, 'rama'));
+        (0, store_1.appendEvent)(repo, 'rama', { kind: 'must-not-escape' });
+        expect(fs_1.default.readFileSync(outside, 'utf8')).toBe('outside\n');
+    });
     test('writeJournal rechaza un estado propuesto con forma invalida, nunca lo persiste (R1.6)', () => {
         (0, store_1.initJournal)(repo, 'rama');
         const s = (0, store_1.readJournal)(repo, 'rama').state;

package/dist/tests/core/journal/types.test.js

@@ -22,6 +22,13 @@ describe('journal types', () => {
         expect(s.requiredVerifiers).toEqual([]);
         expect(s.dispatches).toEqual([]);
     });
+    test('binding metadata rejects persisted plan bodies and unversioned execution commitments', () => {
+        const state = { ...(0, types_1.emptyState)('main'), schema: 2, planBinding: { path: 'docs/plan.md', digest: 'a'.repeat(64), schema: 'compact-slices/v1', executionMode: 'desatendido', boundAt: '2026-09-16' } };
+        expect((0, types_1.isWellFormedState)(state)).toBe(true);
+        expect((0, types_1.isWellFormedState)({ ...state, planBinding: { ...state.planBinding, snapshot: 'private source body' } })).toBe(false);
+        expect((0, types_1.isWellFormedState)({ ...state, planBinding: { ...state.planBinding, executionDigest: 'b'.repeat(64) } })).toBe(false);
+        expect((0, types_1.isWellFormedState)({ ...state, planBinding: { ...state.planBinding, executionDigest: 'b'.repeat(64), executionIdentitySchema: 'awm-plan-execution/v1' } })).toBe(true);
+    });
     test('isWellFormedState rechaza no-objetos y shapes rotos (R1.6)', () => {
         expect((0, types_1.isWellFormedState)(null)).toBe(false);
         expect((0, types_1.isWellFormedState)(42)).toBe(false);