anantham-v2 2.0.0-alpha.1

package/dist/policy/policy-engine.js

@@ -0,0 +1,142 @@
+import { PolicyDecisionSchema, PolicyEvaluationContextSchema, } from "../domain/policy.js";
+import { RiskClassifier } from "./risk-classifier.js";
+export class PolicyEngine {
+    policyVersion;
+    rules;
+    defaultApprovalOnHighRisk;
+    constructor(options = {}) {
+        this.policyVersion = options.policyVersion || "1.0.0";
+        this.rules = [...(options.rules || [])].sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+        this.defaultApprovalOnHighRisk = options.defaultApprovalOnHighRisk ?? true;
+    }
+    /**
+     * Evaluates an operation request deterministically against invariants, rules, and risk tiers.
+     * PRD Part 1 Section 34-39 & PRD Part 3 Section 146-150.
+     */
+    evaluate(context) {
+        const evaluatedAt = new Date().toISOString();
+        // 0. Fail-Closed validation of incoming context
+        const parsed = PolicyEvaluationContextSchema.safeParse(context);
+        if (!parsed.success) {
+            return PolicyDecisionSchema.parse({
+                decision: "deny",
+                riskLevel: "critical",
+                reason: `Fail-closed: Malformed policy evaluation context: ${parsed.error.message}`,
+                evaluatedAt,
+                policyVersion: this.policyVersion,
+            });
+        }
+        const ctx = parsed.data;
+        // 1. SYSTEM INVARIANT 1: Strict Cross-Project Isolation
+        if (ctx.operation.targetProjectId &&
+            ctx.operation.targetProjectId !== ctx.project.id) {
+            return PolicyDecisionSchema.parse({
+                decision: "deny",
+                riskLevel: "critical",
+                reason: `Cross-project isolation breach: Actor from project "${ctx.project.id}" attempted unauthorized access to project "${ctx.operation.targetProjectId}".`,
+                evaluatedAt,
+                policyVersion: this.policyVersion,
+            });
+        }
+        // 2. SYSTEM INVARIANT 2: Zero Raw Credential / Secret Exposure to Untrusted Actors or Models
+        const toolName = (ctx.operation.toolName || ctx.operation.type || "").toLowerCase();
+        if (toolName.includes("secret") ||
+            toolName.includes("credential") ||
+            ctx.dataSensitivity === "secret") {
+            if (ctx.actor.type !== "user" && ctx.actor.type !== "system") {
+                return PolicyDecisionSchema.parse({
+                    decision: "deny",
+                    riskLevel: "critical",
+                    reason: `Security invariant: Raw credential or secret data access prohibited for actor type "${ctx.actor.type}".`,
+                    evaluatedAt,
+                    policyVersion: this.policyVersion,
+                });
+            }
+        }
+        // 3. SYSTEM INVARIANT 3: Sensitivity Clearance Check
+        if (ctx.dataSensitivity === "sensitive" && ctx.actor.type === "mcp") {
+            return PolicyDecisionSchema.parse({
+                decision: "deny",
+                riskLevel: "high",
+                reason: `Sensitivity violation: MCP actor is not authorized to access sensitive classified data.`,
+                evaluatedAt,
+                policyVersion: this.policyVersion,
+            });
+        }
+        // Determine deterministic risk
+        const classifiedRisk = RiskClassifier.classify({
+            type: ctx.operation.type,
+            toolName: ctx.operation.toolName,
+            resource: ctx.operation.resource,
+            arguments: ctx.operation.arguments,
+            targetProjectId: ctx.operation.targetProjectId,
+            sourceProjectId: ctx.project.id,
+        });
+        const evaluatedRisk = ctx.requestedRiskLevel || classifiedRisk;
+        // 4. PRECEDENCE TIER 2: Explicit Configured Policy Rules
+        for (const rule of this.rules) {
+            if (this.matchesRule(rule, ctx)) {
+                return PolicyDecisionSchema.parse({
+                    decision: rule.effect,
+                    riskLevel: rule.riskLevel || evaluatedRisk,
+                    reason: `Policy rule matched: [${rule.ruleId}] ${rule.reason}`,
+                    ruleId: rule.ruleId,
+                    evaluatedAt,
+                    policyVersion: this.policyVersion,
+                });
+            }
+        }
+        // 5. PRECEDENCE TIER 3: Default Risk & Actor-Based Evaluation
+        if (ctx.actor.type === "user" || ctx.actor.type === "system") {
+            // User or system direct actions
+            if (evaluatedRisk === "critical") {
+                return PolicyDecisionSchema.parse({
+                    decision: "require_approval",
+                    riskLevel: "critical",
+                    reason: `Critical system operation requires explicit confirmation.`,
+                    evaluatedAt,
+                    policyVersion: this.policyVersion,
+                });
+            }
+            return PolicyDecisionSchema.parse({
+                decision: "allow",
+                riskLevel: evaluatedRisk,
+                reason: `Authorized direct user/system operation within project "${ctx.project.id}".`,
+                evaluatedAt,
+                policyVersion: this.policyVersion,
+            });
+        }
+        // Autonomous Agent / Tool / MCP execution
+        if (evaluatedRisk === "critical" || (evaluatedRisk === "high" && this.defaultApprovalOnHighRisk)) {
+            return PolicyDecisionSchema.parse({
+                decision: "require_approval",
+                riskLevel: evaluatedRisk,
+                reason: `Operation classified as ${evaluatedRisk.toUpperCase()} risk requires human-in-the-loop approval.`,
+                evaluatedAt,
+                policyVersion: this.policyVersion,
+            });
+        }
+        return PolicyDecisionSchema.parse({
+            decision: "allow",
+            riskLevel: evaluatedRisk,
+            reason: `Authorized ${evaluatedRisk.toUpperCase()} risk operation for actor "${ctx.actor.id}".`,
+            evaluatedAt,
+            policyVersion: this.policyVersion,
+        });
+    }
+    matchesRule(rule, ctx) {
+        const scope = rule.scope || {};
+        if (scope.projectId && scope.projectId !== ctx.project.id)
+            return false;
+        if (scope.actorType && scope.actorType !== ctx.actor.type)
+            return false;
+        if (scope.toolName && scope.toolName !== ctx.operation.toolName)
+            return false;
+        if (scope.sensitivity && scope.sensitivity !== ctx.dataSensitivity)
+            return false;
+        if (scope.operationType && scope.operationType !== ctx.operation.type)
+            return false;
+        return true;
+    }
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/policy/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/policy/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAQtD,MAAM,OAAO,YAAY;IACP,aAAa,CAAS;IACrB,KAAK,CAAe;IACpB,yBAAyB,CAAU;IAEpD,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC;QACtD,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,IAAI,IAAI,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACI,QAAQ,CAAC,OAAgC;QAC9C,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE7C,gDAAgD;QAChD,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,oBAAoB,CAAC,KAAK,CAAC;gBAChC,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,qDAAqD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;gBACnF,WAAW;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;QAExB,wDAAwD;QACxD,IACE,GAAG,CAAC,SAAS,CAAC,eAAe;YAC7B,GAAG,CAAC,SAAS,CAAC,eAAe,KAAK,GAAG,CAAC,OAAO,CAAC,EAAE,EAChD,CAAC;YACD,OAAO,oBAAoB,CAAC,KAAK,CAAC;gBAChC,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,uDAAuD,GAAG,CAAC,OAAO,CAAC,EAAE,+CAA+C,GAAG,CAAC,SAAS,CAAC,eAAe,IAAI;gBAC7J,WAAW;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;QAED,6FAA6F;QAC7F,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACpF,IACE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC/B,GAAG,CAAC,eAAe,KAAK,QAAQ,EAChC,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7D,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,QAAQ,EAAE,MAAM;oBAChB,SAAS,EAAE,UAAU;oBACrB,MAAM,EAAE,uFAAuF,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI;oBACjH,WAAW;oBACX,aAAa,EAAE,IAAI,CAAC,aAAa;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,CAAC,eAAe,KAAK,WAAW,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACpE,OAAO,oBAAoB,CAAC,KAAK,CAAC;gBAChC,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,yFAAyF;gBACjG,WAAW;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,MAAM,cAAc,GAAc,cAAc,CAAC,QAAQ,CAAC;YACxD,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI;YACxB,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ;YAChC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,SAAS;YAClC,eAAe,EAAE,GAAG,CAAC,SAAS,CAAC,eAAe;YAC9C,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,aAAa,GAAc,GAAG,CAAC,kBAAkB,IAAI,cAAc,CAAC;QAE1E,yDAAyD;QACzD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,QAAQ,EAAE,IAAI,CAAC,MAAM;oBACrB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,aAAa;oBAC1C,MAAM,EAAE,yBAAyB,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE;oBAC9D,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW;oBACX,aAAa,EAAE,IAAI,CAAC,aAAa;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7D,gCAAgC;YAChC,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;gBACjC,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,QAAQ,EAAE,kBAAkB;oBAC5B,SAAS,EAAE,UAAU;oBACrB,MAAM,EAAE,2DAA2D;oBACnE,WAAW;oBACX,aAAa,EAAE,IAAI,CAAC,aAAa;iBAClC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,oBAAoB,CAAC,KAAK,CAAC;gBAChC,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,aAAa;gBACxB,MAAM,EAAE,2DAA2D,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI;gBACrF,WAAW;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,IAAI,aAAa,KAAK,UAAU,IAAI,CAAC,aAAa,KAAK,MAAM,IAAI,IAAI,CAAC,yBAAyB,CAAC,EAAE,CAAC;YACjG,OAAO,oBAAoB,CAAC,KAAK,CAAC;gBAChC,QAAQ,EAAE,kBAAkB;gBAC5B,SAAS,EAAE,aAAa;gBACxB,MAAM,EAAE,2BAA2B,aAAa,CAAC,WAAW,EAAE,4CAA4C;gBAC1G,WAAW;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,oBAAoB,CAAC,KAAK,CAAC;YAChC,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,aAAa;YACxB,MAAM,EAAE,cAAc,aAAa,CAAC,WAAW,EAAE,8BAA8B,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI;YAC/F,WAAW;YACX,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,IAAgB,EAAE,GAA4B;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,SAAS,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9E,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,GAAG,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,KAAK,GAAG,CAAC,SAAS,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/policy/risk-classifier.d.ts

@@ -0,0 +1,21 @@
+import type { RiskLevel } from "../domain/policy.js";
+export interface OperationContext {
+    type: string;
+    toolName?: string;
+    resource?: string;
+    arguments?: Record<string, unknown>;
+    targetProjectId?: string;
+    sourceProjectId?: string;
+}
+export declare class RiskClassifier {
+    private static readonly CRITICAL_TOOLS;
+    private static readonly HIGH_RISK_TOOLS;
+    private static readonly MEDIUM_RISK_TOOLS;
+    private static readonly LOW_RISK_TOOLS;
+    /**
+     * Deterministically classifies an operation into a RiskLevel.
+     * PRD Part 1 Section 34 & PRD Part 3 Section 146.
+     */
+    static classify(operation: OperationContext): RiskLevel;
+}
+//# sourceMappingURL=risk-classifier.d.ts.map

package/dist/policy/risk-classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-classifier.d.ts","sourceRoot":"","sources":["../../src/policy/risk-classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAOnC;IAEH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAUpC;IAEH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAOtC;IAEH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CASnC;IAEH;;;OAGG;WACW,QAAQ,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS;CA6E/D"}

package/dist/policy/risk-classifier.js

@@ -0,0 +1,102 @@
+export class RiskClassifier {
+    static CRITICAL_TOOLS = new Set([
+        "export_credentials",
+        "delete_project",
+        "exec_binary",
+        "format_disk",
+        "manage_secret",
+        "system_shutdown",
+    ]);
+    static HIGH_RISK_TOOLS = new Set([
+        "run_command",
+        "execute_shell",
+        "bash",
+        "terminal",
+        "http_request",
+        "fetch_url",
+        "delete_file",
+        "delete_artifact",
+        "modify_config",
+    ]);
+    static MEDIUM_RISK_TOOLS = new Set([
+        "write_to_file",
+        "replace_file_content",
+        "create_artifact",
+        "save_memory",
+        "invoke_model",
+        "fork_session",
+    ]);
+    static LOW_RISK_TOOLS = new Set([
+        "read_file",
+        "view_file",
+        "list_dir",
+        "grep_search",
+        "find_by_name",
+        "search_memory",
+        "read_artifact",
+        "inspect_context",
+    ]);
+    /**
+     * Deterministically classifies an operation into a RiskLevel.
+     * PRD Part 1 Section 34 & PRD Part 3 Section 146.
+     */
+    static classify(operation) {
+        // 1. Cross-project access attempt is always CRITICAL
+        if (operation.targetProjectId &&
+            operation.sourceProjectId &&
+            operation.targetProjectId !== operation.sourceProjectId) {
+            return "critical";
+        }
+        const toolName = (operation.toolName || operation.type || "").toLowerCase().trim();
+        const opType = (operation.type || "").toLowerCase().trim();
+        // 2. Critical tools & credential manipulation
+        if (this.CRITICAL_TOOLS.has(toolName) ||
+            toolName.includes("credential") ||
+            toolName.includes("secret") ||
+            opType.includes("credential") ||
+            opType.includes("secret")) {
+            return "critical";
+        }
+        // Inspect command arguments for dangerous destructive commands
+        if (operation.arguments) {
+            const argsStr = JSON.stringify(operation.arguments).toLowerCase();
+            if (argsStr.includes("rm -rf") ||
+                argsStr.includes("format ") ||
+                argsStr.includes("drop table") ||
+                argsStr.includes("eval(")) {
+                return "critical";
+            }
+        }
+        // 3. High risk: shell / network / file deletion
+        if (this.HIGH_RISK_TOOLS.has(toolName) ||
+            toolName.includes("shell") ||
+            toolName.includes("exec") ||
+            toolName.includes("network") ||
+            toolName.includes("delete") ||
+            opType.includes("delete")) {
+            return "high";
+        }
+        // 4. Low risk: pure reads / search / inspection
+        if (this.LOW_RISK_TOOLS.has(toolName) ||
+            toolName.startsWith("read_") ||
+            toolName.startsWith("view_") ||
+            toolName.startsWith("list_") ||
+            toolName.startsWith("search_") ||
+            opType === "read" ||
+            opType === "inspect" ||
+            opType === "query") {
+            return "low";
+        }
+        // 5. Medium risk: file writes / artifact mutations / model execution
+        if (this.MEDIUM_RISK_TOOLS.has(toolName) ||
+            toolName.startsWith("write_") ||
+            toolName.startsWith("create_") ||
+            opType === "write" ||
+            opType === "mutate") {
+            return "medium";
+        }
+        // Default safe tier
+        return "medium";
+    }
+}
+//# sourceMappingURL=risk-classifier.js.map

package/dist/policy/risk-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-classifier.js","sourceRoot":"","sources":["../../src/policy/risk-classifier.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,cAAc;IACjB,MAAM,CAAU,cAAc,GAAG,IAAI,GAAG,CAAC;QAC/C,oBAAoB;QACpB,gBAAgB;QAChB,aAAa;QACb,aAAa;QACb,eAAe;QACf,iBAAiB;KAClB,CAAC,CAAC;IAEK,MAAM,CAAU,eAAe,GAAG,IAAI,GAAG,CAAC;QAChD,aAAa;QACb,eAAe;QACf,MAAM;QACN,UAAU;QACV,cAAc;QACd,WAAW;QACX,aAAa;QACb,iBAAiB;QACjB,eAAe;KAChB,CAAC,CAAC;IAEK,MAAM,CAAU,iBAAiB,GAAG,IAAI,GAAG,CAAC;QAClD,eAAe;QACf,sBAAsB;QACtB,iBAAiB;QACjB,aAAa;QACb,cAAc;QACd,cAAc;KACf,CAAC,CAAC;IAEK,MAAM,CAAU,cAAc,GAAG,IAAI,GAAG,CAAC;QAC/C,WAAW;QACX,WAAW;QACX,UAAU;QACV,aAAa;QACb,cAAc;QACd,eAAe;QACf,eAAe;QACf,iBAAiB;KAClB,CAAC,CAAC;IAEH;;;OAGG;IACI,MAAM,CAAC,QAAQ,CAAC,SAA2B;QAChD,qDAAqD;QACrD,IACE,SAAS,CAAC,eAAe;YACzB,SAAS,CAAC,eAAe;YACzB,SAAS,CAAC,eAAe,KAAK,SAAS,CAAC,eAAe,EACvD,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACnF,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAE3D,8CAA8C;QAC9C,IACE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC/B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC7B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACzB,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,+DAA+D;QAC/D,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;YAClE,IACE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EACzB,CAAC;gBACD,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IACE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC1B,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC5B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACzB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,gDAAgD;QAChD,IACE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAC5B,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAC5B,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAC5B,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YAC9B,MAAM,KAAK,MAAM;YACjB,MAAM,KAAK,SAAS;YACpB,MAAM,KAAK,OAAO,EAClB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qEAAqE;QACrE,IACE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;YACpC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC7B,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YAC9B,MAAM,KAAK,OAAO;YAClB,MAAM,KAAK,QAAQ,EACnB,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,oBAAoB;QACpB,OAAO,QAAQ,CAAC;IAClB,CAAC"}

package/dist/recovery/checkpoint-manifest.d.ts

@@ -0,0 +1,27 @@
+import { type Checkpoint, type CheckpointManifest, type CheckpointType } from "../domain/checkpoint.js";
+export interface CreateCheckpointOptions {
+    id?: string;
+    projectId: string;
+    sessionId: string;
+    type: CheckpointType;
+    eventOffset: number;
+    branch?: string;
+    taskStateSummary?: Record<string, string>;
+    memorySummary?: string;
+    contextSummary?: string;
+    artifactHashes?: Record<string, string>;
+    workspaceStateHash?: string;
+    providerStateSummary?: string;
+    createdAt?: string;
+}
+export declare class CheckpointManifestBuilder {
+    /**
+     * Computes the deterministic SHA-256 digest of a checkpoint manifest.
+     */
+    static computeManifestSha256(manifest: CheckpointManifest): string;
+    /**
+     * Creates and cryptographically signs a Checkpoint instance.
+     */
+    static createCheckpoint(options: CreateCheckpointOptions): Readonly<Checkpoint>;
+}
+//# sourceMappingURL=checkpoint-manifest.d.ts.map

package/dist/recovery/checkpoint-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-manifest.d.ts","sourceRoot":"","sources":["../../src/recovery/checkpoint-manifest.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,uBAAuB;IACtC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,yBAAyB;IACpC;;OAEG;WACW,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM;IAMzE;;OAEG;WACW,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,QAAQ,CAAC,UAAU,CAAC;CAoCvF"}

package/dist/recovery/checkpoint-manifest.js

@@ -0,0 +1,48 @@
+import { createHash } from "node:crypto";
+import { CheckpointSchema, freezeCheckpoint, } from "../domain/checkpoint.js";
+export class CheckpointManifestBuilder {
+    /**
+     * Computes the deterministic SHA-256 digest of a checkpoint manifest.
+     */
+    static computeManifestSha256(manifest) {
+        // Sort keys deterministically for canonical JSON
+        const canonicalString = JSON.stringify(manifest, Object.keys(manifest).sort());
+        return createHash("sha256").update(canonicalString, "utf8").digest("hex");
+    }
+    /**
+     * Creates and cryptographically signs a Checkpoint instance.
+     */
+    static createCheckpoint(options) {
+        const manifest = {
+            schemaVersion: 1,
+            eventOffset: options.eventOffset,
+            branch: options.branch ?? "main",
+            taskStateSummary: options.taskStateSummary ?? {},
+            memorySummary: options.memorySummary,
+            contextSummary: options.contextSummary,
+            artifactHashes: options.artifactHashes ?? {},
+            workspaceStateHash: options.workspaceStateHash,
+            providerStateSummary: options.providerStateSummary,
+        };
+        const sha256 = CheckpointManifestBuilder.computeManifestSha256(manifest);
+        const createdAt = options.createdAt ?? new Date().toISOString();
+        const id = options.id ?? `chk_${Date.now()}_${Math.random().toString(36).slice(2, 9)}`;
+        // validationChecksum binds id, type, sessionId, createdAt, and sha256
+        const validationChecksum = createHash("sha256")
+            .update(`${id}:${options.type}:${options.sessionId}:${createdAt}:${sha256}`, "utf8")
+            .digest("hex");
+        const checkpoint = {
+            id,
+            type: options.type,
+            projectId: options.projectId,
+            sessionId: options.sessionId,
+            manifest,
+            sha256,
+            createdAt,
+            validationChecksum,
+        };
+        const validated = CheckpointSchema.parse(checkpoint);
+        return freezeCheckpoint(validated);
+    }
+}
+//# sourceMappingURL=checkpoint-manifest.js.map

package/dist/recovery/checkpoint-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-manifest.js","sourceRoot":"","sources":["../../src/recovery/checkpoint-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GAIjB,MAAM,yBAAyB,CAAC;AAkBjC,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACI,MAAM,CAAC,qBAAqB,CAAC,QAA4B;QAC9D,iDAAiD;QACjD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,gBAAgB,CAAC,OAAgC;QAC7D,MAAM,QAAQ,GAAuB;YACnC,aAAa,EAAE,CAAC;YAChB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM;YAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,EAAE;YAChD,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;YAC5C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;SACnD,CAAC;QAEF,MAAM,MAAM,GAAG,yBAAyB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAChE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAEvF,sEAAsE;QACtE,MAAM,kBAAkB,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC5C,MAAM,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,SAAS,IAAI,SAAS,IAAI,MAAM,EAAE,EAAE,MAAM,CAAC;aACnF,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,MAAM,UAAU,GAAe;YAC7B,EAAE;YACF,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ;YACR,MAAM;YACN,SAAS;YACT,kBAAkB;SACnB,CAAC;QAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/recovery/checkpoint-validator.d.ts

@@ -0,0 +1,32 @@
+import { type Checkpoint } from "../domain/checkpoint.js";
+import type { ArtifactRepository } from "../persistence/repositories/artifact-repository.js";
+import type { EventRepository } from "../persistence/repositories/event-repository.js";
+export interface CheckpointValidationResult {
+    isValid: boolean;
+    manifestSha256Valid: boolean;
+    checksumValid: boolean;
+    artifactsValid: boolean;
+    missingArtifactIds: string[];
+    mismatchedArtifactIds: string[];
+    eventOffsetValid: boolean;
+    errors: string[];
+}
+export declare class CheckpointValidator {
+    /**
+     * Validates the internal cryptographic integrity of a Checkpoint.
+     */
+    static validateIntegrity(checkpoint: Checkpoint): {
+        isValid: boolean;
+        errors: string[];
+    };
+    /**
+     * Performs full structural, persistent, and physical disk validation against database repositories and storage.
+     */
+    static validateComplete(checkpoint: Checkpoint, repositories?: {
+        artifactRepo?: ArtifactRepository;
+        eventRepo?: EventRepository;
+    }, options?: {
+        verifyPhysicalDisk?: boolean;
+    }): Promise<CheckpointValidationResult>;
+}
+//# sourceMappingURL=checkpoint-validator.d.ts.map

package/dist/recovery/checkpoint-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-validator.d.ts","sourceRoot":"","sources":["../../src/recovery/checkpoint-validator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAEvF,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qBAAa,mBAAmB;IAC9B;;OAEG;WACW,iBAAiB,CAAC,UAAU,EAAE,UAAU,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;IA+B/F;;OAEG;WACiB,gBAAgB,CAClC,UAAU,EAAE,UAAU,EACtB,YAAY,CAAC,EAAE;QACb,YAAY,CAAC,EAAE,kBAAkB,CAAC;QAClC,SAAS,CAAC,EAAE,eAAe,CAAC;KAC7B,EACD,OAAO,CAAC,EAAE;QACR,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,GACA,OAAO,CAAC,0BAA0B,CAAC;CAgFvC"}

package/dist/recovery/checkpoint-validator.js

@@ -0,0 +1,101 @@
+import { createHash } from "node:crypto";
+import * as fs from "node:fs";
+import { CheckpointManifestBuilder } from "./checkpoint-manifest.js";
+export class CheckpointValidator {
+    /**
+     * Validates the internal cryptographic integrity of a Checkpoint.
+     */
+    static validateIntegrity(checkpoint) {
+        const errors = [];
+        // 1. Check SHA-256 of manifest
+        const expectedSha256 = CheckpointManifestBuilder.computeManifestSha256(checkpoint.manifest);
+        if (checkpoint.sha256 !== expectedSha256) {
+            errors.push(`Manifest SHA-256 mismatch: recorded ${checkpoint.sha256}, calculated ${expectedSha256}`);
+        }
+        // 2. Check validationChecksum
+        const expectedChecksum = createHash("sha256")
+            .update(`${checkpoint.id}:${checkpoint.type}:${checkpoint.sessionId}:${checkpoint.createdAt}:${checkpoint.sha256}`, "utf8")
+            .digest("hex");
+        if (checkpoint.validationChecksum !== expectedChecksum) {
+            errors.push(`Validation checksum mismatch: recorded ${checkpoint.validationChecksum}, calculated ${expectedChecksum}`);
+        }
+        return {
+            isValid: errors.length === 0,
+            errors,
+        };
+    }
+    /**
+     * Performs full structural, persistent, and physical disk validation against database repositories and storage.
+     */
+    static async validateComplete(checkpoint, repositories, options) {
+        const integrity = CheckpointValidator.validateIntegrity(checkpoint);
+        const errors = [...integrity.errors];
+        let artifactsValid = true;
+        const missingArtifactIds = [];
+        const mismatchedArtifactIds = [];
+        // Validate referenced artifacts if artifactRepo is provided
+        if (repositories?.artifactRepo && checkpoint.manifest.artifactHashes) {
+            for (const [artifactId, expectedHash] of Object.entries(checkpoint.manifest.artifactHashes)) {
+                const artifact = repositories.artifactRepo.findById(artifactId);
+                if (!artifact) {
+                    missingArtifactIds.push(artifactId);
+                    artifactsValid = false;
+                    errors.push(`Referenced artifact '${artifactId}' not found in database.`);
+                }
+                else if (artifact.sha256 !== expectedHash) {
+                    mismatchedArtifactIds.push(artifactId);
+                    artifactsValid = false;
+                    errors.push(`Artifact '${artifactId}' hash mismatch: manifest recorded ${expectedHash}, database has ${artifact.sha256}.`);
+                }
+                else if (options?.verifyPhysicalDisk) {
+                    const rawUri = artifact.contentUri || artifact.path;
+                    let diskPath = rawUri;
+                    if (rawUri?.startsWith("file://")) {
+                        diskPath = rawUri.replace(/^file:\/\//, "");
+                        // Handle Windows file:///C:/ or file://C:/
+                        if (process.platform === "win32" && diskPath.startsWith("/")) {
+                            diskPath = diskPath.slice(1);
+                        }
+                    }
+                    if (diskPath) {
+                        // Physical filesystem validation
+                        if (!fs.existsSync(diskPath)) {
+                            missingArtifactIds.push(artifactId);
+                            artifactsValid = false;
+                            errors.push(`Referenced physical artifact file '${diskPath}' does not exist on disk.`);
+                        }
+                        else {
+                            const diskHash = createHash("sha256").update(fs.readFileSync(diskPath)).digest("hex");
+                            if (diskHash !== expectedHash) {
+                                mismatchedArtifactIds.push(artifactId);
+                                artifactsValid = false;
+                                errors.push(`Artifact '${artifactId}' physical file on disk hash mismatch: manifest recorded ${expectedHash}, disk file has ${diskHash}.`);
+                            }
+                        }
+                    }
+                }
+            }
+        }
+        // Validate event offset if eventRepo is provided
+        let eventOffsetValid = true;
+        if (repositories?.eventRepo) {
+            const eventCount = repositories.eventRepo.countBySession(checkpoint.sessionId);
+            if (checkpoint.manifest.eventOffset > eventCount) {
+                eventOffsetValid = false;
+                errors.push(`Checkpoint event offset ${checkpoint.manifest.eventOffset} exceeds session event count ${eventCount}.`);
+            }
+        }
+        const isValid = integrity.isValid && artifactsValid && eventOffsetValid;
+        return {
+            isValid,
+            manifestSha256Valid: !integrity.errors.some((e) => e.includes("Manifest SHA-256")),
+            checksumValid: !integrity.errors.some((e) => e.includes("Validation checksum")),
+            artifactsValid,
+            missingArtifactIds,
+            mismatchedArtifactIds,
+            eventOffsetValid,
+            errors,
+        };
+    }
+}
+//# sourceMappingURL=checkpoint-validator.js.map

package/dist/recovery/checkpoint-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-validator.js","sourceRoot":"","sources":["../../src/recovery/checkpoint-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAerE,MAAM,OAAO,mBAAmB;IAC9B;;OAEG;IACI,MAAM,CAAC,iBAAiB,CAAC,UAAsB;QACpD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,+BAA+B;QAC/B,MAAM,cAAc,GAAG,yBAAyB,CAAC,qBAAqB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5F,IAAI,UAAU,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,uCAAuC,UAAU,CAAC,MAAM,gBAAgB,cAAc,EAAE,CACzF,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC1C,MAAM,CACL,GAAG,UAAU,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,MAAM,EAAE,EAC1G,MAAM,CACP;aACA,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,IAAI,UAAU,CAAC,kBAAkB,KAAK,gBAAgB,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CACT,0CAA0C,UAAU,CAAC,kBAAkB,gBAAgB,gBAAgB,EAAE,CAC1G,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC5B,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAClC,UAAsB,EACtB,YAGC,EACD,OAEC;QAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACpE,MAAM,MAAM,GAAa,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAE/C,IAAI,cAAc,GAAG,IAAI,CAAC;QAC1B,MAAM,kBAAkB,GAAa,EAAE,CAAC;QACxC,MAAM,qBAAqB,GAAa,EAAE,CAAC;QAE3C,4DAA4D;QAC5D,IAAI,YAAY,EAAE,YAAY,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YACrE,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5F,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACpC,cAAc,GAAG,KAAK,CAAC;oBACvB,MAAM,CAAC,IAAI,CAAC,wBAAwB,UAAU,0BAA0B,CAAC,CAAC;gBAC5E,CAAC;qBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;oBAC5C,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACvC,cAAc,GAAG,KAAK,CAAC;oBACvB,MAAM,CAAC,IAAI,CACT,aAAa,UAAU,sCAAsC,YAAY,kBAAkB,QAAQ,CAAC,MAAM,GAAG,CAC9G,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,EAAE,kBAAkB,EAAE,CAAC;oBACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAK,QAAgB,CAAC,IAAI,CAAC;oBAC7D,IAAI,QAAQ,GAAG,MAAM,CAAC;oBACtB,IAAI,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;wBAClC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;wBAC5C,2CAA2C;wBAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC7D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC/B,CAAC;oBACH,CAAC;oBACD,IAAI,QAAQ,EAAE,CAAC;wBACb,iCAAiC;wBACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC7B,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;4BACpC,cAAc,GAAG,KAAK,CAAC;4BACvB,MAAM,CAAC,IAAI,CAAC,sCAAsC,QAAQ,2BAA2B,CAAC,CAAC;wBACzF,CAAC;6BAAM,CAAC;4BACN,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;4BACtF,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gCAC9B,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gCACvC,cAAc,GAAG,KAAK,CAAC;gCACvB,MAAM,CAAC,IAAI,CACT,aAAa,UAAU,4DAA4D,YAAY,mBAAmB,QAAQ,GAAG,CAC9H,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YAEH,CAAC;QACH,CAAC;QAGD,iDAAiD;QACjD,IAAI,gBAAgB,GAAG,IAAI,CAAC;QAC5B,IAAI,YAAY,EAAE,SAAS,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC/E,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,GAAG,UAAU,EAAE,CAAC;gBACjD,gBAAgB,GAAG,KAAK,CAAC;gBACzB,MAAM,CAAC,IAAI,CACT,2BAA2B,UAAU,CAAC,QAAQ,CAAC,WAAW,gCAAgC,UAAU,GAAG,CACxG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,cAAc,IAAI,gBAAgB,CAAC;QAExE,OAAO;YACL,OAAO;YACP,mBAAmB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAClF,aAAa,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;YAC/E,cAAc;YACd,kBAAkB;YAClB,qBAAqB;YACrB,gBAAgB;YAChB,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}

package/dist/recovery/crash-recovery-engine.d.ts

@@ -0,0 +1,31 @@
+import type { SqliteEngine } from "../persistence/sqlite-engine.js";
+import type { EventStore } from "../event-state/event-store.js";
+import type { ProjectionManager } from "../event-state/projections/projection-manager.js";
+import { LeaseManager } from "./lease-manager.js";
+import type { CheckpointRepository } from "../persistence/repositories/checkpoint-repository.js";
+import type { ArtifactRepository } from "../persistence/repositories/artifact-repository.js";
+import { type RecoveryRecord } from "./recovery-record.js";
+export interface CrashRecoveryOptions {
+    engine: SqliteEngine;
+    eventStore?: EventStore;
+    projectionManager?: ProjectionManager;
+    leaseManager?: LeaseManager;
+    checkpointRepo?: CheckpointRepository;
+    artifactRepo?: ArtifactRepository;
+}
+export declare class CrashRecoveryEngine {
+    private readonly engine;
+    private readonly eventStore?;
+    private readonly projectionManager?;
+    private readonly leaseManager;
+    private readonly orphanDetector;
+    private readonly checkpointRepo?;
+    private readonly artifactRepo?;
+    constructor(options: CrashRecoveryOptions);
+    /**
+     * Executes the full deterministic startup and crash recovery pipeline.
+     * PRD Part 1 Section 47 & Engineering Playbook Rule 20.
+     */
+    executeRecovery(): Promise<RecoveryRecord>;
+}
+//# sourceMappingURL=crash-recovery-engine.d.ts.map

package/dist/recovery/crash-recovery-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-recovery-engine.d.ts","sourceRoot":"","sources":["../../src/recovery/crash-recovery-engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kDAAkD,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAoB;IACvD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAuB;IACvD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAqB;gBAEvC,OAAO,EAAE,oBAAoB;IAUzC;;;OAGG;IACU,eAAe,IAAI,OAAO,CAAC,cAAc,CAAC;CAqNxD"}