clinkx 0.2.3 → 1.0.0

package/clinkx-workflows/dist/plan-review/run-state.d.ts

@@ -0,0 +1,398 @@
+/**
+ * A-5 — the strict, optional `plan_review_state` subtree on RunState.
+ *
+ * This is deliberately a TYPED subtree, not a generic aux blob: everything a
+ * resumed run needs to re-derive its execution contract, its immutable plan
+ * snapshot, its ordered seat mapping, and its per-call bindings lives
+ * here, and nothing else does. Resume reads ONLY this (never `plan_file`, never
+ * re-parsed caller input), so anything absent from this schema is, by
+ * construction, not resumable.
+ */
+import { z } from "zod";
+import type { CouncilPlanReviewExecutionContract } from "./execution-contract.js";
+/** Ordered external seat_id ↔ opaque internal call id mapping (A-4). */
+export declare const PlanReviewSeatMappingSchema: z.ZodObject<{
+    seat_id: z.ZodString;
+    cli_name: z.ZodEnum<["codex", "claude", "glm", "agy", "grok"]>;
+    reviewer_call_id: z.ZodString;
+    cross_review_call_id: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+    seat_id: string;
+    cross_review_call_id: string;
+    reviewer_call_id: string;
+}, {
+    cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+    seat_id: string;
+    cross_review_call_id: string;
+    reviewer_call_id: string;
+}>;
+/**
+ * Per-call binding. One entry per DISPATCHABLE call (reviewer, cross-review,
+ * chairman) — reconstructed on resume so a resumed run cannot silently
+ * re-provider a call. It is also the SOLE carrier of the chairman's call_id:
+ * `PlanReviewSeatMappingSchema` maps reviewer/cross-review calls only.
+ */
+export declare const PlanReviewCallBindingSchema: z.ZodObject<{
+    call_id: z.ZodString;
+    stage_id: z.ZodEnum<["reviewers", "cross_review", "chairman"]>;
+    seat_id: z.ZodString;
+    cli_name: z.ZodEnum<["codex", "claude", "glm", "agy", "grok"]>;
+}, "strict", z.ZodTypeAny, {
+    cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+    seat_id: string;
+    stage_id: "reviewers" | "cross_review" | "chairman";
+    call_id: string;
+}, {
+    cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+    seat_id: string;
+    stage_id: "reviewers" | "cross_review" | "chairman";
+    call_id: string;
+}>;
+export declare const PlanReviewContextPolicySchema: z.ZodObject<{
+    immutable_snapshot_only: z.ZodLiteral<true>;
+    original_plan_context_allowed: z.ZodLiteral<false>;
+    plan_workspace_context_allowed: z.ZodLiteral<false>;
+    /** The original caller `plan_file`, recorded ONLY to keep excluding it. */
+    original_plan_absolute_path: z.ZodEffects<z.ZodString, string, string>;
+    /** Forced exclusion globs folded in before curator dispatch (A-7a). */
+    enforced_exclude_globs: z.ZodArray<z.ZodString, "many">;
+    /** Absolute paths force-excluded regardless of caller globs/focus (A-7b). */
+    excluded_absolute_paths: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+}, "strict", z.ZodTypeAny, {
+    immutable_snapshot_only: true;
+    original_plan_context_allowed: false;
+    plan_workspace_context_allowed: false;
+    original_plan_absolute_path: string;
+    enforced_exclude_globs: string[];
+    excluded_absolute_paths: string[];
+}, {
+    immutable_snapshot_only: true;
+    original_plan_context_allowed: false;
+    plan_workspace_context_allowed: false;
+    original_plan_absolute_path: string;
+    enforced_exclude_globs: string[];
+    excluded_absolute_paths: string[];
+}>;
+/** Written once the preflight seam has actually enforced the policy. */
+export declare const PlanReviewContextProvenanceSchema: z.ZodObject<{
+    enforced: z.ZodLiteral<true>;
+    context_mode: z.ZodOptional<z.ZodString>;
+    copied_paths: z.ZodArray<z.ZodString, "many">;
+    /** Paths the post-filter stripped from the finalized selection. */
+    filtered_out_paths: z.ZodArray<z.ZodString, "many">;
+}, "strict", z.ZodTypeAny, {
+    copied_paths: string[];
+    enforced: true;
+    filtered_out_paths: string[];
+    context_mode?: string | undefined;
+}, {
+    copied_paths: string[];
+    enforced: true;
+    filtered_out_paths: string[];
+    context_mode?: string | undefined;
+}>;
+export declare const PlanReviewRunStateSchema: z.ZodEffects<z.ZodObject<{
+    schema_version: z.ZodLiteral<"council-plan-review-state-v1">;
+    /** Run-relative path to the persisted normalized execution contract. */
+    execution_contract_path: z.ZodEffects<z.ZodString, string, string>;
+    /** SHA-256 of the persisted contract FILE BYTES (corruption check). */
+    execution_contract_sha256: z.ZodString;
+    /** The P0-4 digest recomputed from the normalized contract (identity). */
+    execution_contract_digest: z.ZodString;
+    /** Run-relative path to the canonical, runtime-owned plan snapshot. */
+    snapshot_path: z.ZodEffects<z.ZodString, string, string>;
+    /** SHA-256 of the canonical snapshot FILE BYTES. */
+    snapshot_sha256: z.ZodString;
+    /** checkpoint-text-v1 digest of the canonical snapshot (== plan digest). */
+    plan_digest: z.ZodString;
+    seat_mappings: z.ZodArray<z.ZodObject<{
+        seat_id: z.ZodString;
+        cli_name: z.ZodEnum<["codex", "claude", "glm", "agy", "grok"]>;
+        reviewer_call_id: z.ZodString;
+        cross_review_call_id: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        cross_review_call_id: string;
+        reviewer_call_id: string;
+    }, {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        cross_review_call_id: string;
+        reviewer_call_id: string;
+    }>, "many">;
+    call_bindings: z.ZodArray<z.ZodObject<{
+        call_id: z.ZodString;
+        stage_id: z.ZodEnum<["reviewers", "cross_review", "chairman"]>;
+        seat_id: z.ZodString;
+        cli_name: z.ZodEnum<["codex", "claude", "glm", "agy", "grok"]>;
+    }, "strict", z.ZodTypeAny, {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        stage_id: "reviewers" | "cross_review" | "chairman";
+        call_id: string;
+    }, {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        stage_id: "reviewers" | "cross_review" | "chairman";
+        call_id: string;
+    }>, "many">;
+    context_policy: z.ZodObject<{
+        immutable_snapshot_only: z.ZodLiteral<true>;
+        original_plan_context_allowed: z.ZodLiteral<false>;
+        plan_workspace_context_allowed: z.ZodLiteral<false>;
+        /** The original caller `plan_file`, recorded ONLY to keep excluding it. */
+        original_plan_absolute_path: z.ZodEffects<z.ZodString, string, string>;
+        /** Forced exclusion globs folded in before curator dispatch (A-7a). */
+        enforced_exclude_globs: z.ZodArray<z.ZodString, "many">;
+        /** Absolute paths force-excluded regardless of caller globs/focus (A-7b). */
+        excluded_absolute_paths: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        immutable_snapshot_only: true;
+        original_plan_context_allowed: false;
+        plan_workspace_context_allowed: false;
+        original_plan_absolute_path: string;
+        enforced_exclude_globs: string[];
+        excluded_absolute_paths: string[];
+    }, {
+        immutable_snapshot_only: true;
+        original_plan_context_allowed: false;
+        plan_workspace_context_allowed: false;
+        original_plan_absolute_path: string;
+        enforced_exclude_globs: string[];
+        excluded_absolute_paths: string[];
+    }>;
+    context_provenance: z.ZodOptional<z.ZodObject<{
+        enforced: z.ZodLiteral<true>;
+        context_mode: z.ZodOptional<z.ZodString>;
+        copied_paths: z.ZodArray<z.ZodString, "many">;
+        /** Paths the post-filter stripped from the finalized selection. */
+        filtered_out_paths: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        copied_paths: string[];
+        enforced: true;
+        filtered_out_paths: string[];
+        context_mode?: string | undefined;
+    }, {
+        copied_paths: string[];
+        enforced: true;
+        filtered_out_paths: string[];
+        context_mode?: string | undefined;
+    }>>;
+    publication: z.ZodOptional<z.ZodDiscriminatedUnion<"committed", [z.ZodObject<{
+        committed: z.ZodLiteral<false>;
+    }, "strict", z.ZodTypeAny, {
+        committed: false;
+    }, {
+        committed: false;
+    }>, z.ZodObject<{
+        committed: z.ZodLiteral<true>;
+        sidecar_relpath: z.ZodString;
+        sidecar_sha256: z.ZodString;
+        bytes: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        bytes: number;
+        committed: true;
+        sidecar_relpath: string;
+        sidecar_sha256: string;
+    }, {
+        bytes: number;
+        committed: true;
+        sidecar_relpath: string;
+        sidecar_sha256: string;
+    }>]>>;
+}, "strict", z.ZodTypeAny, {
+    schema_version: "council-plan-review-state-v1";
+    execution_contract_digest: string;
+    plan_digest: string;
+    execution_contract_path: string;
+    execution_contract_sha256: string;
+    snapshot_path: string;
+    snapshot_sha256: string;
+    seat_mappings: {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        cross_review_call_id: string;
+        reviewer_call_id: string;
+    }[];
+    call_bindings: {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        stage_id: "reviewers" | "cross_review" | "chairman";
+        call_id: string;
+    }[];
+    context_policy: {
+        immutable_snapshot_only: true;
+        original_plan_context_allowed: false;
+        plan_workspace_context_allowed: false;
+        original_plan_absolute_path: string;
+        enforced_exclude_globs: string[];
+        excluded_absolute_paths: string[];
+    };
+    publication?: {
+        committed: false;
+    } | {
+        bytes: number;
+        committed: true;
+        sidecar_relpath: string;
+        sidecar_sha256: string;
+    } | undefined;
+    context_provenance?: {
+        copied_paths: string[];
+        enforced: true;
+        filtered_out_paths: string[];
+        context_mode?: string | undefined;
+    } | undefined;
+}, {
+    schema_version: "council-plan-review-state-v1";
+    execution_contract_digest: string;
+    plan_digest: string;
+    execution_contract_path: string;
+    execution_contract_sha256: string;
+    snapshot_path: string;
+    snapshot_sha256: string;
+    seat_mappings: {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        cross_review_call_id: string;
+        reviewer_call_id: string;
+    }[];
+    call_bindings: {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        stage_id: "reviewers" | "cross_review" | "chairman";
+        call_id: string;
+    }[];
+    context_policy: {
+        immutable_snapshot_only: true;
+        original_plan_context_allowed: false;
+        plan_workspace_context_allowed: false;
+        original_plan_absolute_path: string;
+        enforced_exclude_globs: string[];
+        excluded_absolute_paths: string[];
+    };
+    publication?: {
+        committed: false;
+    } | {
+        bytes: number;
+        committed: true;
+        sidecar_relpath: string;
+        sidecar_sha256: string;
+    } | undefined;
+    context_provenance?: {
+        copied_paths: string[];
+        enforced: true;
+        filtered_out_paths: string[];
+        context_mode?: string | undefined;
+    } | undefined;
+}>, {
+    schema_version: "council-plan-review-state-v1";
+    execution_contract_digest: string;
+    plan_digest: string;
+    execution_contract_path: string;
+    execution_contract_sha256: string;
+    snapshot_path: string;
+    snapshot_sha256: string;
+    seat_mappings: {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        cross_review_call_id: string;
+        reviewer_call_id: string;
+    }[];
+    call_bindings: {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        stage_id: "reviewers" | "cross_review" | "chairman";
+        call_id: string;
+    }[];
+    context_policy: {
+        immutable_snapshot_only: true;
+        original_plan_context_allowed: false;
+        plan_workspace_context_allowed: false;
+        original_plan_absolute_path: string;
+        enforced_exclude_globs: string[];
+        excluded_absolute_paths: string[];
+    };
+    publication?: {
+        committed: false;
+    } | {
+        bytes: number;
+        committed: true;
+        sidecar_relpath: string;
+        sidecar_sha256: string;
+    } | undefined;
+    context_provenance?: {
+        copied_paths: string[];
+        enforced: true;
+        filtered_out_paths: string[];
+        context_mode?: string | undefined;
+    } | undefined;
+}, {
+    schema_version: "council-plan-review-state-v1";
+    execution_contract_digest: string;
+    plan_digest: string;
+    execution_contract_path: string;
+    execution_contract_sha256: string;
+    snapshot_path: string;
+    snapshot_sha256: string;
+    seat_mappings: {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        cross_review_call_id: string;
+        reviewer_call_id: string;
+    }[];
+    call_bindings: {
+        cli_name: "codex" | "claude" | "glm" | "agy" | "grok";
+        seat_id: string;
+        stage_id: "reviewers" | "cross_review" | "chairman";
+        call_id: string;
+    }[];
+    context_policy: {
+        immutable_snapshot_only: true;
+        original_plan_context_allowed: false;
+        plan_workspace_context_allowed: false;
+        original_plan_absolute_path: string;
+        enforced_exclude_globs: string[];
+        excluded_absolute_paths: string[];
+    };
+    publication?: {
+        committed: false;
+    } | {
+        bytes: number;
+        committed: true;
+        sidecar_relpath: string;
+        sidecar_sha256: string;
+    } | undefined;
+    context_provenance?: {
+        copied_paths: string[];
+        enforced: true;
+        filtered_out_paths: string[];
+        context_mode?: string | undefined;
+    } | undefined;
+}>;
+export type PlanReviewRunState = z.infer<typeof PlanReviewRunStateSchema>;
+export type PlanReviewCallBinding = z.infer<typeof PlanReviewCallBindingSchema>;
+export type PlanReviewSeatMapping = z.infer<typeof PlanReviewSeatMappingSchema>;
+export type PlanReviewContextPolicy = z.infer<typeof PlanReviewContextPolicySchema>;
+export type PlanReviewContextProvenance = z.infer<typeof PlanReviewContextProvenanceSchema>;
+/**
+ * Derive the ordered seat mapping from the normalized execution contract.
+ * The contract — not caller input — is the sole source.
+ */
+export declare function deriveSeatMappings(contract: CouncilPlanReviewExecutionContract): PlanReviewSeatMapping[];
+/**
+ * Reconstruct the per-call bindings from the normalized execution contract.
+ * This is the ONLY constructor — the same function runs at admission and on
+ * resume, so a resumed run reconstructs byte-identical bindings or the
+ * contract is corrupt.
+ */
+export declare function reconstructPlanReviewCallBindings(contract: CouncilPlanReviewExecutionContract, 
+/**
+ * The chairman stage's call id. It is a property of the workflow definition
+ * (itself persisted + hash-verified as `workflow.snapshot.json`), NOT of the
+ * digest-bound contract, so it is threaded in rather than invented here.
+ */
+chairmanCallId: string): PlanReviewCallBinding[];
+/** Strictly validate the subtree. Throws a ZodError on any deviation. */
+export declare function parsePlanReviewRunState(value: unknown): PlanReviewRunState;

package/clinkx-workflows/dist/plan-review/run-state.js

@@ -0,0 +1,183 @@
+/**
+ * A-5 — the strict, optional `plan_review_state` subtree on RunState.
+ *
+ * This is deliberately a TYPED subtree, not a generic aux blob: everything a
+ * resumed run needs to re-derive its execution contract, its immutable plan
+ * snapshot, its ordered seat mapping, and its per-call bindings lives
+ * here, and nothing else does. Resume reads ONLY this (never `plan_file`, never
+ * re-parsed caller input), so anything absent from this schema is, by
+ * construction, not resumable.
+ */
+import { z } from "zod";
+import { CliNameSchema, DigestSchema, ReviewIdSchema } from "./contract.js";
+import { PlanReviewPublicationMarkerSchema } from "./publication.js";
+/** Run-relative path: never absolute, never an upward traversal. */
+const RunRelativePathSchema = z
+    .string()
+    .min(1)
+    .refine((value) => !value.startsWith("/") &&
+    !value.startsWith("\\") &&
+    !/^[A-Za-z]:[\\/]/.test(value) &&
+    !value.split(/[\\/]/).includes(".."), { message: "must be a run-relative path with no '..' segment" });
+const AbsolutePathSchema = z.string().min(1).refine((value) => value.startsWith("/") || /^[A-Za-z]:[\\/]/.test(value), { message: "must be an absolute path" });
+/** Ordered external seat_id ↔ opaque internal call id mapping (A-4). */
+export const PlanReviewSeatMappingSchema = z
+    .object({
+    seat_id: ReviewIdSchema,
+    cli_name: CliNameSchema,
+    reviewer_call_id: z.string().regex(/^seat_[0-9]{3,}$/),
+    cross_review_call_id: z.string().regex(/^cross_[0-9]{3,}$/),
+})
+    .strict();
+/**
+ * Per-call binding. One entry per DISPATCHABLE call (reviewer, cross-review,
+ * chairman) — reconstructed on resume so a resumed run cannot silently
+ * re-provider a call. It is also the SOLE carrier of the chairman's call_id:
+ * `PlanReviewSeatMappingSchema` maps reviewer/cross-review calls only.
+ */
+export const PlanReviewCallBindingSchema = z
+    .object({
+    call_id: z.string().regex(/^[A-Za-z0-9_-]+$/),
+    stage_id: z.enum(["reviewers", "cross_review", "chairman"]),
+    seat_id: ReviewIdSchema,
+    cli_name: CliNameSchema,
+})
+    .strict();
+export const PlanReviewContextPolicySchema = z
+    .object({
+    immutable_snapshot_only: z.literal(true),
+    original_plan_context_allowed: z.literal(false),
+    plan_workspace_context_allowed: z.literal(false),
+    /** The original caller `plan_file`, recorded ONLY to keep excluding it. */
+    original_plan_absolute_path: AbsolutePathSchema,
+    /** Forced exclusion globs folded in before curator dispatch (A-7a). */
+    enforced_exclude_globs: z.array(z.string().min(1)).min(1),
+    /** Absolute paths force-excluded regardless of caller globs/focus (A-7b). */
+    excluded_absolute_paths: z.array(AbsolutePathSchema),
+})
+    .strict();
+/** Written once the preflight seam has actually enforced the policy. */
+export const PlanReviewContextProvenanceSchema = z
+    .object({
+    enforced: z.literal(true),
+    context_mode: z.string().min(1).optional(),
+    copied_paths: z.array(z.string().min(1)),
+    /** Paths the post-filter stripped from the finalized selection. */
+    filtered_out_paths: z.array(z.string().min(1)),
+})
+    .strict();
+export const PlanReviewRunStateSchema = z
+    .object({
+    schema_version: z.literal("council-plan-review-state-v1"),
+    /** Run-relative path to the persisted normalized execution contract. */
+    execution_contract_path: RunRelativePathSchema,
+    /** SHA-256 of the persisted contract FILE BYTES (corruption check). */
+    execution_contract_sha256: DigestSchema,
+    /** The P0-4 digest recomputed from the normalized contract (identity). */
+    execution_contract_digest: DigestSchema,
+    /** Run-relative path to the canonical, runtime-owned plan snapshot. */
+    snapshot_path: RunRelativePathSchema,
+    /** SHA-256 of the canonical snapshot FILE BYTES. */
+    snapshot_sha256: DigestSchema,
+    /** checkpoint-text-v1 digest of the canonical snapshot (== plan digest). */
+    plan_digest: DigestSchema,
+    seat_mappings: z.array(PlanReviewSeatMappingSchema).min(1).max(10),
+    call_bindings: z.array(PlanReviewCallBindingSchema).min(1),
+    context_policy: PlanReviewContextPolicySchema,
+    context_provenance: PlanReviewContextProvenanceSchema.optional(),
+    publication: PlanReviewPublicationMarkerSchema.optional(),
+})
+    .strict()
+    .superRefine((state, ctx) => {
+    const seatIds = new Set();
+    const callIds = new Set();
+    for (const [index, mapping] of state.seat_mappings.entries()) {
+        if (seatIds.has(mapping.seat_id)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `Duplicate seat_id: ${mapping.seat_id}`,
+                path: ["seat_mappings", index, "seat_id"],
+            });
+        }
+        seatIds.add(mapping.seat_id);
+        for (const callId of [mapping.reviewer_call_id, mapping.cross_review_call_id]) {
+            if (callIds.has(callId)) {
+                ctx.addIssue({
+                    code: z.ZodIssueCode.custom,
+                    message: `Duplicate internal call id: ${callId}`,
+                    path: ["seat_mappings", index],
+                });
+            }
+            callIds.add(callId);
+        }
+    }
+    for (const [index, binding] of state.call_bindings.entries()) {
+        if (!seatIds.has(binding.seat_id)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `call_bindings references unknown seat_id: ${binding.seat_id}`,
+                path: ["call_bindings", index, "seat_id"],
+            });
+        }
+    }
+});
+/**
+ * Derive the ordered seat mapping from the normalized execution contract.
+ * The contract — not caller input — is the sole source.
+ */
+export function deriveSeatMappings(contract) {
+    return contract.seats.map((seat) => {
+        if (seat.cross_review_call_id === undefined) {
+            throw new Error(`Execution contract seat "${seat.seat_id}" has no cross-review call mapping`);
+        }
+        return {
+            seat_id: seat.seat_id,
+            cli_name: seat.cli_name,
+            reviewer_call_id: seat.internal_call_id,
+            cross_review_call_id: seat.cross_review_call_id,
+        };
+    });
+}
+/**
+ * Reconstruct the per-call bindings from the normalized execution contract.
+ * This is the ONLY constructor — the same function runs at admission and on
+ * resume, so a resumed run reconstructs byte-identical bindings or the
+ * contract is corrupt.
+ */
+export function reconstructPlanReviewCallBindings(contract, 
+/**
+ * The chairman stage's call id. It is a property of the workflow definition
+ * (itself persisted + hash-verified as `workflow.snapshot.json`), NOT of the
+ * digest-bound contract, so it is threaded in rather than invented here.
+ */
+chairmanCallId) {
+    const bindings = [];
+    for (const seat of contract.seats) {
+        if (seat.cross_review_call_id === undefined) {
+            throw new Error(`Execution contract seat "${seat.seat_id}" has no cross-review call mapping`);
+        }
+        const shared = { seat_id: seat.seat_id, cli_name: seat.cli_name };
+        bindings.push({ ...shared, call_id: seat.internal_call_id, stage_id: "reviewers" });
+        bindings.push({
+            ...shared,
+            call_id: seat.cross_review_call_id,
+            stage_id: "cross_review",
+        });
+    }
+    const chairmanSeat = contract.seats.find((seat) => seat.seat_id === contract.chairman_seat);
+    if (chairmanSeat === undefined) {
+        throw new Error(`Execution contract chairman_seat "${contract.chairman_seat}" is not in the roster`);
+    }
+    bindings.push({
+        call_id: chairmanCallId,
+        stage_id: "chairman",
+        seat_id: chairmanSeat.seat_id,
+        cli_name: chairmanSeat.cli_name,
+    });
+    return bindings;
+}
+/** Strictly validate the subtree. Throws a ZodError on any deviation. */
+export function parsePlanReviewRunState(value) {
+    return PlanReviewRunStateSchema.parse(value);
+}
+//# sourceMappingURL=run-state.js.map

package/clinkx-workflows/dist/plan-review/run-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-state.js","sourceRoot":"","sources":["../../src/plan-review/run-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE5E,OAAO,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AAErE,oEAAoE;AACpE,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;IACvB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;IAC9B,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAChE,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CACjD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EACjE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CACxC,CAAC;AAEF,wEAAwE;AACxE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,aAAa;IACvB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACtD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IAC3D,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,aAAa;CACxB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,6BAA6B,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/C,8BAA8B,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD,2EAA2E;IAC3E,2BAA2B,EAAE,kBAAkB;IAC/C,uEAAuE;IACvE,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,6EAA6E;IAC7E,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,wEAAwE;AACxE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,mEAAmE;IACnE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC/C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC;IACzD,wEAAwE;IACxE,uBAAuB,EAAE,qBAAqB;IAC9C,uEAAuE;IACvE,yBAAyB,EAAE,YAAY;IACvC,0EAA0E;IAC1E,yBAAyB,EAAE,YAAY;IACvC,uEAAuE;IACvE,aAAa,EAAE,qBAAqB;IACpC,oDAAoD;IACpD,eAAe,EAAE,YAAY;IAC7B,4EAA4E;IAC5E,WAAW,EAAE,YAAY;IACzB,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,cAAc,EAAE,6BAA6B;IAC7C,kBAAkB,EAAE,iCAAiC,CAAC,QAAQ,EAAE;IAChE,WAAW,EAAE,iCAAiC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,sBAAsB,OAAO,CAAC,OAAO,EAAE;gBAChD,IAAI,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,SAAS,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC9E,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,OAAO,EAAE,+BAA+B,MAAM,EAAE;oBAChD,IAAI,EAAE,CAAC,eAAe,EAAE,KAAK,CAAC;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,6CAA6C,OAAO,CAAC,OAAO,EAAE;gBACvE,IAAI,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,SAAS,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAYL;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA4C;IAE5C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,OAAO,oCAAoC,CAC7E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;SAChD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAC/C,QAA4C;AAC5C;;;;GAIG;AACH,cAAsB;IAEtB,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,OAAO,oCAAoC,CAC7E,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QACpF,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,MAAM;YACT,OAAO,EAAE,IAAI,CAAC,oBAAoB;YAClC,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CACtC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,aAAa,CAClD,CAAC;IACF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,qCAAqC,QAAQ,CAAC,aAAa,wBAAwB,CACpF,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;KAChC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC"}

package/clinkx-workflows/dist/plan-review/runtime-policy.d.ts

@@ -0,0 +1,74 @@
+import type { NormalizedWorkflowDefinition } from "../definition-normalizer.js";
+import type { PlanReviewCallBinding, PlanReviewContextPolicy } from "./run-state.js";
+/**
+ * Bind the verified persisted bindings to the persisted normalized definition.
+ * Exact coverage is required: a missing, extra, renamed, or re-providered call
+ * is a corrupt execution contract and must fail pre-backend (D3 — no fallback,
+ * no seat substitution).
+ */
+export declare function validatePlanReviewCallBindings(definition: NormalizedWorkflowDefinition, bindings: readonly PlanReviewCallBinding[]): ReadonlyMap<string, PlanReviewCallBinding>;
+export interface PlanReviewPreparedInputPolicyInput {
+    /**
+     * The canonical text of the RE-VERIFIED persisted snapshot. Required whenever
+     * a bound call has a persisted prepared input; see the D9 note below.
+     */
+    readonly snapshotText?: string | undefined;
+    /** The persisted, non-overridable context policy (A-7). Required likewise. */
+    readonly contextPolicy?: PlanReviewContextPolicy | undefined;
+}
+/**
+ * Validate persisted retry identity AND D9 before any provider/backend is created.
+ *
+ * ## Why the prompt is checked here and not left to the definition
+ *
+ * `WorkflowEngine.buildCallInput` replays a persisted prepared input verbatim —
+ * `structuredClone(resumedInput)` with only `cli_name` re-pinned. The expanded
+ * DEFINITION is not what reaches an actor on a resumed retry, so asserting D9
+ * against the definition proves nothing about that dispatch. The plan text now
+ * lives in the prompt bytes, which means the prompt is the D9 surface and this
+ * is the seam that must hold it: it already runs on the resume path, before any
+ * backend is created.
+ *
+ * A LEGITIMATE persisted input always passes, because `buildCallInput` appended
+ * the bound snapshot block at original dispatch and persisted that exact prompt.
+ * So this rejects only state that was tampered with, hand-written, or carried
+ * over from a different plan revision.
+ *
+ * ## What this check ESTABLISHES — and what it does not
+ *
+ * It establishes exactly two things: the verified snapshot block is the prompt's
+ * SUFFIX, and no other block opens before it. POSITION is what makes this exact.
+ * Mere presence is satisfied by a prompt carrying the verified block beside a
+ * second, different plan revision — the resumed dispatch replays the whole
+ * persisted prompt, so an actor would see both and could not know which binds.
+ * The suffix rule rejects a revision appended AFTER the verified block; the
+ * prefix scan rejects one spliced in BEFORE it.
+ *
+ * Both rules are stated against what `buildCallInput` actually composes —
+ * `renderedPrompt + renderPlanSnapshotBlock(text)` — so every honest persisted
+ * input passes BY CONSTRUCTION rather than by luck, including one rendered from
+ * the shipped templates, whose prose quotes the delimiter inline.
+ *
+ * It does NOT establish prompt EXCLUSIVITY, and must not be read as doing so.
+ * Raw plan text appended WITHOUT delimiters is not detectable here: there is no
+ * way to distinguish it from legitimate instruction prose, and pretending
+ * otherwise would republish precisely the kind of unbacked claim this file's
+ * surrounding work exists to delete. What bounds that residue is the trust
+ * model, not this function: plan review is TRUSTED-INPUT-ONLY, and an actor who
+ * can rewrite `state.json` to append a plan can equally rewrite it
+ * self-consistently. This is a fail-closed integrity check on honest state, not
+ * a boundary against an adversary who already owns the state directory.
+ *
+ * ## What is NOT checked, and why
+ *
+ * NOT `absolute_file_paths === []`. That is true of the expanded call
+ * DEFINITION, and there it is load-bearing. It is NOT true of a dispatched
+ * input: the engine composes `absolute_file_paths` from anonymized peer
+ * artifacts (cross-review, chairman) plus `absolute_file_paths_from:
+ * [context_files, context_bundle_files]` — the caller's repo evidence
+ * (`workflows/plan-review-receipts.yaml:124,147,196`). Requiring an empty list
+ * would reject every legitimate cross-review and chairman resume. The honest
+ * file-side invariant is the one the policy already defines: no attached path
+ * may be the original plan or any plan-workspace `PLAN.md`.
+ */
+export declare function validatePlanReviewPreparedInputPolicy(preparedInputs: ReadonlyMap<string, Readonly<Record<string, unknown>>>, bindingsByCall: ReadonlyMap<string, PlanReviewCallBinding>, input?: PlanReviewPreparedInputPolicyInput): void;