codex-workflow-v2 2.0.0-beta.1 → 2.0.0-beta.10

package/dist/src/lifecycle/compiler-inspection.d.ts

@@ -0,0 +1,48 @@
+import { diagnoseCoreIssuanceClosure, inspectCorePrivateIr } from '../transition-core.js';
+import { assessCorrectiveReplanAuthorityTuple, projectAuthoritySemanticBundle } from './corrective-replan-authority.js';
+export declare const installedCoreRuleBindingsForTests: readonly import("./types.js").CoreReleaseRuleBinding[];
+export declare const installedAuthoritySemanticBindingsForTests: readonly import("./corrective-replan-authority.js").AuthoritySemanticBinding[];
+export declare const installedTransitionExecutableBindingsForTests: import("../transition-core.js").TransitionExecutableBinding[];
+export declare const installedPayloadSchemaArtifactsForTests: readonly import("./types.js").PayloadSchemaArtifactBinding[];
+export declare const installedPayloadSchemaValidatorsForTests: readonly import("./types.js").PayloadSchemaValidatorBinding[];
+export declare const installedSemanticRegistryForTests: import("./types.js").SemanticRegistry;
+export declare const inspectCorePrivateIrForTests: typeof inspectCorePrivateIr;
+export declare const diagnoseCoreIssuanceClosureForTests: typeof diagnoseCoreIssuanceClosure;
+export declare const assessCorrectiveReplanAuthorityTupleForTests: typeof assessCorrectiveReplanAuthorityTuple;
+export declare const projectAuthoritySemanticBundleForTests: typeof projectAuthoritySemanticBundle;
+export declare const correctiveReplanCredentialInspectionForTests: {
+    authorityBindingManifest: {
+        manifestSha256: string;
+        id: "binding-manifest.corrective-replan.exact-v1";
+        version: 1;
+        rows: {
+            ordinal: number;
+            bindingId: string;
+            projection: {
+                id: `projection.${string}`;
+                version: 1;
+            };
+            fieldId: `field.${string}`;
+            valueKind: "sha256" | "literal" | "safe-integer" | "entity-id" | "git-oid" | "actor-role";
+            canonicalization: "exact" | "lowercase-hex" | "safe-nonnegative-integer" | "nfc-trim" | "lowercase-git-oid" | "registered-enum";
+            receiptPath: `/binding/values/${string}`;
+        }[];
+    };
+    executionLinkage: {
+        status: "active";
+        transitionId: "task.plan.corrective-replan";
+    };
+    kernelDescriptor: {
+        id: string;
+        version: 1;
+        wiring: "invoked";
+        buildSha256: string;
+    };
+    schemaArtifacts: readonly import("./corrective-replan-credential-schema.js").CredentialSchemaArtifact[];
+    schemaValidators: readonly import("./corrective-replan-credential-schema.js").CredentialSchemaValidator[];
+    functionBindings: readonly import("./corrective-replan-credential-core.js").CredentialFunctionBinding[];
+    diagnoseClosure: typeof import("./corrective-replan-credentials.js").diagnoseCorrectiveReplanCredentialClosure;
+};
+export declare function runtimeSemanticFingerprintForInspection(metadata: unknown): string;
+export declare function definitionManifestHashForInspection(metadata: unknown, runtime?: string): string;
+export declare function validateTransitionDefinitionForInspection(raw: unknown): import("./catalog.js").TransitionSemanticValidationReport;

package/dist/src/lifecycle/compiler-inspection.js

@@ -0,0 +1,29 @@
+import { diagnoseCoreIssuanceClosure, inspectCorePrivateIr, installedTransitionExecutableBindings } from '../transition-core.js';
+import { validateTransitionDefinitionSemantics } from './catalog.js';
+import { assessCorrectiveReplanAuthorityTuple, installedAuthoritySemanticBindings, projectAuthoritySemanticBundle } from './corrective-replan-authority.js';
+import { correctiveReplanCredentialInspection } from './corrective-replan-credentials.js';
+import { installedCoreRuleBindings } from './core-static-readiness.js';
+import { runtimeSemanticFingerprint, transitionDefinitionManifestHash } from './fingerprint.js';
+import { installedPayloadSchemaArtifacts, installedPayloadSchemaValidators } from './schema-artifact.js';
+import { transitionSemanticRegistry } from './semantic-registry.js';
+export const installedCoreRuleBindingsForTests = installedCoreRuleBindings;
+export const installedAuthoritySemanticBindingsForTests = installedAuthoritySemanticBindings;
+export const installedTransitionExecutableBindingsForTests = installedTransitionExecutableBindings;
+export const installedPayloadSchemaArtifactsForTests = installedPayloadSchemaArtifacts;
+export const installedPayloadSchemaValidatorsForTests = installedPayloadSchemaValidators;
+export const installedSemanticRegistryForTests = transitionSemanticRegistry;
+export const inspectCorePrivateIrForTests = inspectCorePrivateIr;
+export const diagnoseCoreIssuanceClosureForTests = diagnoseCoreIssuanceClosure;
+export const assessCorrectiveReplanAuthorityTupleForTests = assessCorrectiveReplanAuthorityTuple;
+export const projectAuthoritySemanticBundleForTests = projectAuthoritySemanticBundle;
+export const correctiveReplanCredentialInspectionForTests = correctiveReplanCredentialInspection;
+export function runtimeSemanticFingerprintForInspection(metadata) {
+    return runtimeSemanticFingerprint(metadata);
+}
+export function definitionManifestHashForInspection(metadata, runtime) {
+    return transitionDefinitionManifestHash(metadata, runtime);
+}
+export function validateTransitionDefinitionForInspection(raw) {
+    return validateTransitionDefinitionSemantics(raw);
+}
+//# sourceMappingURL=compiler-inspection.js.map

package/dist/src/lifecycle/compiler-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler-inspection.js","sourceRoot":"","sources":["../../../src/lifecycle/compiler-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,qCAAqC,EAAE,MAAM,uBAAuB,CAAC;AACjI,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,oCAAoC,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAC5J,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAE,+BAA+B,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE,MAAM,CAAC,MAAM,iCAAiC,GAAG,yBAAyB,CAAC;AAC3E,MAAM,CAAC,MAAM,0CAA0C,GAAG,kCAAkC,CAAC;AAC7F,MAAM,CAAC,MAAM,6CAA6C,GAAG,qCAAqC,CAAC;AACnG,MAAM,CAAC,MAAM,uCAAuC,GAAG,+BAA+B,CAAC;AACvF,MAAM,CAAC,MAAM,wCAAwC,GAAG,gCAAgC,CAAC;AACzF,MAAM,CAAC,MAAM,iCAAiC,GAAG,0BAA0B,CAAC;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAAoB,CAAC;AACjE,MAAM,CAAC,MAAM,mCAAmC,GAAG,2BAA2B,CAAC;AAC/E,MAAM,CAAC,MAAM,4CAA4C,GAAG,oCAAoC,CAAC;AACjG,MAAM,CAAC,MAAM,sCAAsC,GAAG,8BAA8B,CAAC;AACrF,MAAM,CAAC,MAAM,4CAA4C,GAAG,oCAAoC,CAAC;AACjG,MAAM,UAAU,uCAAuC,CAAC,QAAiB;IACvE,OAAO,0BAA0B,CAAC,QAA4D,CAAC,CAAC;AAClG,CAAC;AACD,MAAM,UAAU,mCAAmC,CAAC,QAAiB,EAAE,OAAgB;IACrF,OAAO,gCAAgC,CAAC,QAAkE,EAAE,OAAO,CAAC,CAAC;AACvH,CAAC;AACD,MAAM,UAAU,yCAAyC,CAAC,GAAY;IACpE,OAAO,qCAAqC,CAAC,GAAY,CAAC,CAAC;AAC7D,CAAC"}

package/dist/src/lifecycle/core-static-readiness.d.ts

@@ -0,0 +1,6 @@
+import type { CoreReleaseRuleBinding, CoreReleaseRuleContext } from './types.js';
+export declare const installedCoreRuleBindings: readonly CoreReleaseRuleBinding[];
+export declare function projectReleaseRuleContextForCore(raw: unknown, ruleId: string): CoreReleaseRuleContext;
+export declare function evaluateInstalledReleaseRulesForCore(bindings: readonly (CoreReleaseRuleBinding & {
+    readonly context: CoreReleaseRuleContext;
+})[]): readonly string[];

package/dist/src/lifecycle/core-static-readiness.js

@@ -0,0 +1,130 @@
+import { runtimeSemanticProjection } from './fingerprint.js';
+import { deepFreeze } from './immutable.js';
+import { coreReleaseRuleDescriptors } from './implementation-table.js';
+const ruleFunctions = [definitionIntegrity, exactAuthority, requiredInputs, admissionBoundary, reliableEffects];
+export const installedCoreRuleBindings = deepFreeze(coreReleaseRuleDescriptors.map(([id, suffix], index) => ({
+    id, version: 1,
+    implementationId: `implementation.release-rule.${suffix}`,
+    implementationVersion: 1,
+    callable: ruleFunctions[index],
+})));
+export function projectReleaseRuleContextForCore(raw, ruleId) {
+    const source = raw;
+    const metadata = Object.fromEntries(Object.entries(source)
+        .filter(([key]) => !['runtimeSemanticFingerprint', 'semanticFingerprint', 'definitionManifestHash'].includes(key)));
+    const closure = runtimeSemanticProjection(metadata).resolvedRegistryEntries;
+    const entries = (category) => closure.filter((entry) => entry.category === category).map(({ entry }) => entry);
+    const guards = () => rows(metadata.guards).map((guard) => ({ guardId: guard.guardId }));
+    if (ruleId === 'semantic-rule.definition-integrity')
+        return context({ guards: guards() });
+    if (ruleId === 'semantic-rule.exact-authority') {
+        const authority = record(metadata.authority);
+        const actor = record(authority.actor);
+        const principal = record(authority.principal);
+        return context({ authority: { actor: { required: actor.required, identity: ref(actor.identity) }, principal: { identity: ref(principal.identity) },
+                capabilities: presence(authority.capabilities), credentials: presence(authority.credentials), separationOfDuty: presence(authority.separationOfDuty),
+                forbiddenCombinations: presence(authority.forbiddenCombinations),
+                ownership: ref(authority.ownership), eligibleRoles: presence(authority.eligibleRoles) }, guards: guards() }, {
+            capabilities: presence(entries('capabilities')), credentialPolicies: presence(entries('credentialPolicies')),
+            identityComparators: presence(entries('identityComparators')), ownershipPolicies: entries('ownershipPolicies').map((entry) => ({ id: entry.id, version: entry.version, c1Ownership: entry.c1Ownership, writerLease: entry.writerLease })),
+        });
+    }
+    if (ruleId === 'semantic-rule.required-inputs')
+        return context({ inputContract: rows(metadata.inputContract).map((entry) => ({ required: entry.required, input: ref(entry.input) })), guards: rows(metadata.guards).map((guard) => ({ requiredInputs: rows(guard.requiredInputs).map(ref) })) });
+    if (ruleId === 'semantic-rule.admission-boundary') {
+        const boundary = record(metadata.admissionBoundary);
+        return context({ admissionBoundary: {
+                lock: { policy: ref(record(boundary.lock).policy) },
+                orderedRevalidations: rows(boundary.orderedRevalidations).map((entry) => ({ underLock: entry.underLock })),
+                firstEffectAfterRevalidation: boundary.firstEffectAfterRevalidation, release: boundary.release,
+            } }, { lockPolicies: entries('lockPolicies').map((entry) => ({ id: entry.id, version: entry.version, lockKind: entry.lockKind })) });
+    }
+    if (ruleId === 'semantic-rule.reliable-effects') {
+        const atomicity = record(metadata.atomicity);
+        const readback = record(atomicity.readback);
+        return context({ atomicity: {
+                classification: atomicity.classification, nonMutatingFailureGuarantee: atomicity.nonMutatingFailureGuarantee,
+                readback: { adapter: ref(readback.adapter), wiring: readback.wiring, checkpoints: record(readback.checkpoints) },
+                journal: { mode: record(atomicity.journal).mode }, recovery: { mode: record(atomicity.recovery).mode, trigger: record(atomicity.recovery).trigger },
+            } }, { readbackAdapters: entries('readbackAdapters').map((entry) => ({ id: entry.id, version: entry.version, wiring: entry.wiring })) });
+    }
+    throw new TypeError(`No installed Core context projection for ${ruleId}.`);
+}
+export function evaluateInstalledReleaseRulesForCore(bindings) {
+    return [...new Set(bindings.flatMap((binding) => binding.callable(binding.context)))].sort();
+}
+function definitionIntegrity({ transition }) {
+    const guards = new Set(array(transition.guards).map((guard) => String(guard.guardId)));
+    const required = ['actor-role-eligible', 'no-c1-claim', 'no-writer-lease', 'plan-validation-passed', 'receipt-valid', 'risk-audit-passed']
+        .map((suffix) => `task.corrective-replan.${suffix}`);
+    return required.every((guard) => guards.has(guard)) ? [] : ['static.definition.mandatory-guard-incomplete'];
+}
+function exactAuthority({ transition, registry }) {
+    const authority = transition.authority;
+    const actor = authority.actor;
+    const principal = authority.principal;
+    const blockers = [];
+    if (actor.required !== true || refText(actor.identity) !== 'identity.actor@1'
+        || refText(principal.identity) !== 'identity.human-principal@1')
+        blockers.push('static.authority.actor-unbound');
+    if (array(authority.capabilities).length === 0 || array(registry.capabilities).length === 0)
+        blockers.push('static.authority.exact-capability-missing');
+    if (array(authority.credentials).length === 0 || array(registry.credentialPolicies).length === 0)
+        blockers.push('static.authority.exact-credential-missing');
+    if (array(authority.separationOfDuty).length !== 2 || array(authority.forbiddenCombinations).length !== 1
+        || array(registry.identityComparators).length !== 3)
+        blockers.push('static.authority.sod-unenforced');
+    const ownership = array(registry.ownershipPolicies).find((entry) => refText(entry) === refText(authority.ownership));
+    if (!ownership || ownership.c1Ownership === 'unchecked' || ownership.writerLease === 'unchecked')
+        blockers.push('static.authority.ownership-unchecked');
+    if (array(authority.eligibleRoles).length === 0 || !array(transition.guards)
+        .some((guard) => guard.guardId === 'task.corrective-replan.actor-role-eligible'))
+        blockers.push('static.authority.role-eligibility-unenforced');
+    return blockers;
+}
+function requiredInputs({ transition }) {
+    const inputs = new Set(array(transition.inputContract).filter((entry) => entry.required === true).map((entry) => refText(entry.input)));
+    const guarded = new Set(array(transition.guards).flatMap((guard) => array(guard.requiredInputs).map(refText)));
+    const exact = ['corrective-execution-receipt', 'corrective-plan-risk-audit', 'corrective-plan-validation', 'corrective-replacement-plan', 'expected-revision', 'task-id']
+        .map((id) => `input.${id}@1`);
+    return exact.every((id) => inputs.has(id) && guarded.has(id)) ? [] : ['static.input.exact-contract-incomplete'];
+}
+function admissionBoundary({ transition, registry }) {
+    const boundary = transition.admissionBoundary;
+    const lock = boundary.lock.policy;
+    const installed = array(registry.lockPolicies).find((entry) => refText(entry) === refText(lock));
+    const revalidations = array(boundary.orderedRevalidations);
+    return installed?.lockKind === 'exclusive-task'
+        && revalidations.length === 3 && revalidations.every((entry) => entry.underLock === true)
+        && boundary.firstEffectAfterRevalidation === true && boundary.release === 'finally-after-readback'
+        ? [] : ['static.admission.exclusive-lock-incomplete'];
+}
+function reliableEffects({ transition, registry }) {
+    const atomicity = transition.atomicity;
+    const readback = atomicity.readback;
+    const installed = array(registry.readbackAdapters).find((entry) => refText(entry) === refText(readback.adapter));
+    const blockers = [];
+    const checkpoints = readback.checkpoints;
+    if (readback.wiring !== 'invoked-post-effect' || installed?.wiring !== 'invoked-post-effect'
+        || checkpoints.preCompletion !== 'domain-readback' || checkpoints.postTerminal !== 'terminal-readback')
+        blockers.push('static.reliability.readback-unwired');
+    if (atomicity.classification !== 'journaled-multi-write' || atomicity.nonMutatingFailureGuarantee !== 'all-guards-before-effects'
+        || atomicity.journal.mode !== 'required' || atomicity.recovery.mode !== 'automatic-roll-forward'
+        || atomicity.recovery.trigger !== 'explicit-repair') {
+        blockers.push('static.reliability.contract-incomplete');
+    }
+    return blockers;
+}
+function context(transition, registry = {}) { return deepFreeze({ transition, registry, policy: {} }); }
+function record(value) { return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : {}; }
+function rows(value) { return Array.isArray(value) ? value.map(record) : []; }
+function presence(value) { return Array.isArray(value) ? value.map(() => ({})) : []; }
+function ref(value) { const entry = record(value); return { id: entry.id, version: entry.version }; }
+function array(value) {
+    return Array.isArray(value) ? value : [];
+}
+function refText(value) {
+    const ref = value;
+    return ref && typeof ref.id === 'string' && Number.isInteger(ref.version) ? `${ref.id}@${ref.version}` : '';
+}
+//# sourceMappingURL=core-static-readiness.js.map

package/dist/src/lifecycle/core-static-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-static-readiness.js","sourceRoot":"","sources":["../../../src/lifecycle/core-static-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAKvE,MAAM,aAAa,GAAG,CAAC,mBAAmB,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,CAAU,CAAC;AAEzH,MAAM,CAAC,MAAM,yBAAyB,GAAsC,UAAU,CACpF,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,EAAE,EAAE,OAAO,EAAE,CAAC;IACd,gBAAgB,EAAE,+BAA+B,MAAM,EAAE;IACzD,qBAAqB,EAAE,CAAC;IACxB,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAE;CAChC,CAAC,CAAC,CACJ,CAAC;AAEF,MAAM,UAAU,gCAAgC,CAAC,GAAY,EAAE,MAAc;IAC3E,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACvD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,4BAA4B,EAAE,qBAAqB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtH,MAAM,OAAO,GAAG,yBAAyB,CAAC,QAAiB,CAAC,CAAC,uBAE1D,CAAC;IACJ,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACvH,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxF,IAAI,MAAM,KAAK,oCAAoC;QAAE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1F,IAAI,MAAM,KAAK,+BAA+B,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnI,OAAO,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;gBAChJ,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC;gBACpJ,qBAAqB,EAAE,QAAQ,CAAC,SAAS,CAAC,qBAAqB,CAAC;gBAChE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YAC7G,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YAC5G,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;SAC1O,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,KAAK,+BAA+B;QAAE,OAAO,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACjS,IAAI,MAAM,KAAK,kCAAkC,EAAE,CAAC;QAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC,EAAE,iBAAiB,EAAE;gBAC5I,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE;gBACnD,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC1G,4BAA4B,EAAE,QAAQ,CAAC,4BAA4B,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC/F,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACvI,IAAI,MAAM,KAAK,gCAAgC,EAAE,CAAC;QAAC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC,EAAE,SAAS,EAAE;gBACxK,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,2BAA2B,EAAE,SAAS,CAAC,2BAA2B;gBAC5G,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;gBAChH,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;aACpJ,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC3I,MAAM,IAAI,SAAS,CAAC,4CAA4C,MAAM,GAAG,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,QAA4F;IAE5F,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAE,UAAU,EAA0B;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,CAAC,qBAAqB,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,eAAe,EAAE,mBAAmB,CAAC;SACvI,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,cAAc,CAAC,EAAE,UAAU,EAAE,QAAQ,EAA0B;IACtE,MAAM,SAAS,GAAG,UAAU,CAAC,SAAwB,CAAC;IACtD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAoB,CAAC;IAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,SAAwB,CAAC;IACrD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,kBAAkB;WACxE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,4BAA4B;QAAE,QAAQ,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACnH,IAAI,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACxJ,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC7J,IAAI,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,MAAM,KAAK,CAAC;WACpG,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACxG,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IACrH,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,WAAW,KAAK,WAAW,IAAI,SAAS,CAAC,WAAW,KAAK,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACxJ,IAAI,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;SACzE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,4CAA4C,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAClJ,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,EAAE,UAAU,EAA0B;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxI,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,CAAC,8BAA8B,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,SAAS,CAAC;SACtK,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAA0B;IACzE,MAAM,QAAQ,GAAG,UAAU,CAAC,iBAAgC,CAAC;IAC7D,MAAM,IAAI,GAAI,QAAQ,CAAC,IAAoB,CAAC,MAAM,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC3D,OAAO,SAAS,EAAE,QAAQ,KAAK,gBAAgB;WAC1C,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;WACtF,QAAQ,CAAC,4BAA4B,KAAK,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,wBAAwB;QAClG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,EAAE,UAAU,EAAE,QAAQ,EAA0B;IACvE,MAAM,SAAS,GAAG,UAAU,CAAC,SAAwB,CAAC;IACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAuB,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACjH,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,QAAQ,CAAC,WAA0B,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,qBAAqB,IAAI,SAAS,EAAE,MAAM,KAAK,qBAAqB;WACvF,WAAW,CAAC,aAAa,KAAK,iBAAiB,IAAI,WAAW,CAAC,YAAY,KAAK,mBAAmB;QAAE,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC/J,IAAI,SAAS,CAAC,cAAc,KAAK,uBAAuB,IAAI,SAAS,CAAC,2BAA2B,KAAK,2BAA2B;WAC3H,SAAS,CAAC,OAAuB,CAAC,IAAI,KAAK,UAAU,IAAK,SAAS,CAAC,QAAwB,CAAC,IAAI,KAAK,wBAAwB;WAC9H,SAAS,CAAC,QAAwB,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,UAAmC,EAAE,WAA+D,EAAE,IAA4B,OAAO,UAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7M,SAAS,MAAM,CAAC,KAAc,IAA6B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjL,SAAS,IAAI,CAAC,KAAc,IAA+B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAClH,SAAS,QAAQ,CAAC,KAAc,IAA6B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxH,SAAS,GAAG,CAAC,KAAc,IAA6B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAEvI,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,GAAG,GAAG,KAAmD,CAAC;IAChE,OAAO,GAAG,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9G,CAAC"}

package/dist/src/lifecycle/corrective-replan-authority.d.ts

@@ -0,0 +1,53 @@
+type AuthorityCallable = (...arguments_: readonly unknown[]) => unknown;
+export interface AuthoritySemanticBinding {
+    readonly id: string;
+    readonly version: 1;
+    readonly kind: 'role-evaluator' | 'identity-comparator';
+    readonly implementationId: `implementation.${string}`;
+    readonly implementationVersion: number;
+    readonly wiring: 'invoked';
+    readonly callable: AuthorityCallable;
+}
+interface AuthorityIssue {
+    readonly issueId: string;
+    readonly path: string;
+    readonly message: string;
+}
+export declare const installedAuthoritySemanticBindings: readonly AuthoritySemanticBinding[];
+/** Diagnostic-only assessment of the installed static tuple. It cannot issue a Core handle. */
+export declare function assessCorrectiveReplanAuthorityTuple(tuple: unknown): {
+    reportHash: string;
+    staticTupleValid: boolean;
+    blockers: string[];
+    issues: AuthorityIssue[];
+    bindings: readonly AuthoritySemanticBinding[];
+};
+export declare function projectAuthoritySemanticBundle(bindings: readonly AuthoritySemanticBinding[]): {
+    bundleSha256: string;
+    bundleVersion: number;
+    bindingManifest: {
+        manifestSha256: string;
+        id: "binding-manifest.corrective-replan.exact-v1";
+        version: 1;
+        rows: {
+            ordinal: number;
+            bindingId: string;
+            projection: {
+                id: `projection.${string}`;
+                version: 1;
+            };
+            fieldId: `field.${string}`;
+            valueKind: "sha256" | "literal" | "safe-integer" | "entity-id" | "git-oid" | "actor-role";
+            canonicalization: "exact" | "lowercase-hex" | "safe-nonnegative-integer" | "nfc-trim" | "lowercase-git-oid" | "registered-enum";
+            receiptPath: `/binding/values/${string}`;
+        }[];
+    };
+    bindings: {
+        id: string;
+        version: 1;
+        kind: "role-evaluator" | "identity-comparator";
+        implementationId: `implementation.${string}`;
+        implementationVersion: number;
+    }[];
+};
+export {};

package/dist/src/lifecycle/corrective-replan-authority.js

@@ -0,0 +1,139 @@
+import { createHash } from 'node:crypto';
+import { correctiveReplanBindingManifest } from './corrective-replan-binding-manifest.js';
+import { hashCanonical } from './fingerprint.js';
+import { deepFreeze } from './immutable.js';
+const eligibleRole = (input) => roleVerdict(input);
+const authorValidator = (input) => identityVerdict(input);
+const authorRiskAuditor = (input) => identityVerdict(input);
+const authorHumanPrincipal = (input) => identityVerdict(input);
+export const installedAuthoritySemanticBindings = deepFreeze([
+    binding('authority-role-evaluator.corrective-replan.eligible-role', 'authority-role-evaluator.corrective-replan.eligible-role', 'role-evaluator', eligibleRole),
+    binding('identity-comparator.corrective-replan.author-validator', 'identity-comparator.corrective-replan.author-validator', 'identity-comparator', authorValidator),
+    binding('identity-comparator.corrective-replan.author-risk-auditor', 'identity-comparator.corrective-replan.author-risk-auditor', 'identity-comparator', authorRiskAuditor),
+    binding('identity-comparator.corrective-replan.author-human-principal', 'identity-comparator.corrective-replan.author-human-principal', 'identity-comparator', authorHumanPrincipal),
+]);
+const ref = (id) => ({ id, version: 1 });
+const constraints = [
+    constraint('constraint.corrective-replan.author-not-validator', 'author-validator', 'actor.validator'),
+    constraint('constraint.corrective-replan.author-not-risk-auditor', 'author-risk-auditor', 'actor.risk-auditor'),
+    constraint('constraint.corrective-replan.author-not-human-principal', 'author-human-principal', 'principal.human'),
+];
+/** Diagnostic-only assessment of the installed static tuple. It cannot issue a Core handle. */
+export function assessCorrectiveReplanAuthorityTuple(tuple) {
+    const value = record(tuple);
+    const issues = [];
+    extraFields(value, ['transitionId', 'actor', 'eligibleRoles', 'roleEvaluator', 'humanPrincipal', 'capability', 'delegation', 'ownership', 'constraints', 'priorPlanAuthorization'], '/', 'authority.tuple.extra-field', issues);
+    extraFields(record(value.actor), ['identity', 'basis'], '/actor/', 'authority.tuple.extra-field', issues);
+    extraFields(record(value.humanPrincipal), ['identity', 'basis', 'kind'], '/humanPrincipal/', 'authority.tuple.extra-field', issues);
+    extraFields(record(value.capability), ['id', 'version', 'source', 'issuer', 'transitionId', 'scope', 'bindingManifest'], '/capability/', 'authority.tuple.extra-field', issues);
+    extraFields(record(value.priorPlanAuthorization), ['disposition', 'authority'], '/priorPlanAuthorization/', 'authority.tuple.extra-field', issues);
+    check(value, '/transitionId', 'authority.transition.mismatch', 'task.plan.corrective-replan', issues);
+    check(value, '/actor/identity', 'authority.actor.identity-mismatch', ref('identity.actor'), issues);
+    check(value, '/actor/basis', 'authority.actor.basis-mismatch', ref('principal-basis.human-confirmation'), issues);
+    check(value, '/eligibleRoles', 'authority.role-evaluator.mismatch', ['delivery-coordinator', 'technical-planner'], issues);
+    check(value, '/roleEvaluator', 'authority.role-evaluator.mismatch', ref('authority-role-evaluator.corrective-replan.eligible-role'), issues);
+    check(value, '/humanPrincipal/identity', 'authority.principal.identity-mismatch', ref('identity.human-principal'), issues);
+    check(value, '/humanPrincipal/basis', 'authority.principal.basis-mismatch', ref('principal-basis.human-confirmation'), issues);
+    check(value, '/humanPrincipal/kind', 'authority.principal.kind-mismatch', 'human', issues);
+    const capability = get(value, '/capability');
+    if (!isRecord(capability))
+        issue(issues, 'authority.capability.missing', '/capability');
+    else {
+        check(value, '/capability/id', 'authority.capability.id-mismatch', 'capability.task.corrective-replan', issues);
+        check(value, '/capability/version', 'authority.capability.version-mismatch', 1, issues);
+        check(value, '/capability/source', 'authority.capability.source-mismatch', ref('authority-source.human-confirmation'), issues);
+        check(value, '/capability/issuer', 'authority.capability.issuer-mismatch', ref('identity.human-principal'), issues);
+        check(value, '/capability/transitionId', 'authority.capability.transition-mismatch', 'task.plan.corrective-replan', issues);
+        check(value, '/capability/scope', 'authority.capability.scope-mismatch', { entity: 'task', task: 'taskId', guardedStep: 'guardedStepId' }, issues);
+        if (capability.bindingManifest !== correctiveReplanBindingManifest)
+            issue(issues, 'authority.capability.binding-manifest-mismatch', '/capability/bindingManifest');
+    }
+    check(value, '/delegation', 'authority.delegation.not-forbidden', ref('delegation.forbidden'), issues);
+    check(value, '/ownership', 'authority.ownership.not-clear', { c1Claim: 'none', writerLease: 'none' }, issues);
+    const rows = Array.isArray(value.constraints) ? value.constraints : [];
+    const seen = new Set();
+    rows.forEach((entry, index) => {
+        const id = isRecord(entry) && typeof entry.constraintId === 'string' ? entry.constraintId : '';
+        if (seen.has(id))
+            issue(issues, 'authority.constraint.duplicate', `/constraints/${index}/constraintId`);
+        else if (id === 'constraint.corrective-replan.validator-not-risk-auditor')
+            issue(issues, 'authority.constraint.forbidden-validator-risk', `/constraints/${index}`);
+        else if (!constraints.some((expected) => expected.constraintId === id))
+            issue(issues, 'authority.constraint.unknown', `/constraints/${index}/constraintId`);
+        seen.add(id);
+        if (isRecord(entry))
+            extraFields(entry, ['constraintId', 'comparator', 'operands', 'relation', 'missing', 'enforcement'], `/constraints/${index}/`, 'authority.constraint.extra-field', issues);
+    });
+    constraints.forEach((expected, index) => {
+        const actualIndex = rows.findIndex((entry) => isRecord(entry) && entry.constraintId === expected.constraintId);
+        if (actualIndex < 0)
+            return issue(issues, 'authority.constraint.missing', `/constraints/${index}`);
+        for (const field of ['comparator', 'operands', 'relation', 'missing', 'enforcement']) {
+            check(value, `/constraints/${actualIndex}/${field}`, `authority.constraint.${field === 'comparator' ? 'comparator-id' : field}-mismatch`, expected[field], issues, field === 'comparator' ? `/constraints/${index}/${field}/id` : `/constraints/${index}/${field}`);
+            if (field === 'comparator')
+                check(value, `/constraints/${actualIndex}/comparator/version`, 'authority.constraint.comparator-version-mismatch', 1, issues, `/constraints/${index}/comparator/version`);
+        }
+    });
+    check(value, '/priorPlanAuthorization/disposition', 'authority.plan-bound-grant-active', 'superseded', issues);
+    check(value, '/priorPlanAuthorization/authority', 'authority.plan-bound-grant-active', 'none', issues);
+    const ordered = [...issues].sort((a, b) => `${a.path}\0${a.issueId}`.localeCompare(`${b.path}\0${b.issueId}`));
+    const blockers = [];
+    if (ordered.some((entry) => entry.issueId === 'authority.capability.missing'))
+        blockers.push('static.authority.exact-capability-missing');
+    if (ordered.some((entry) => entry.issueId === 'authority.plan-bound-grant-active'))
+        blockers.push('static.authority.plan-bound-grant-not-superseded');
+    if (ordered.length > 0)
+        blockers.push('static.authority.exact-tuple-invalid');
+    const content = { staticTupleValid: ordered.length === 0, blockers: [...new Set(blockers)], issues: ordered,
+        bindings: installedAuthoritySemanticBindings };
+    return deepFreeze({ ...content, reportHash: hashCanonical({ ...content, bindings: content.bindings.map(projectBinding) }) });
+}
+function binding(id, suffix, kind, callable) {
+    return { id, version: 1, kind, implementationId: `implementation.${suffix}`, implementationVersion: 1, wiring: 'invoked', callable };
+}
+export function projectAuthoritySemanticBundle(bindings) {
+    const projection = { bundleVersion: 2, bindingManifest: correctiveReplanBindingManifest, bindings: bindings.map(projectBinding) };
+    return deepFreeze({ ...projection, bundleSha256: createHash('sha256').update(JSON.stringify(projection)).digest('hex') });
+}
+function constraint(constraintId, suffix, right) {
+    return { constraintId,
+        comparator: ref(`identity-comparator.corrective-replan.${suffix}`), operands: ['actor.author', right],
+        relation: 'not-equal', missing: 'block', enforcement: 'static-and-runtime' };
+}
+function roleVerdict(input) {
+    const value = record(input);
+    const roles = ['delivery-coordinator', 'technical-planner'];
+    if (!/^[a-f0-9]{64}$/.test(String(value.actorIdentityHash ?? '')) || !sameSet(value.eligibleRoles, roles)
+        || typeof value.actorRole !== 'string' || value.actorRole.length === 0)
+        return verdict(false, 'ROLE_INPUT_INVALID');
+    return roles.includes(value.actorRole) ? verdict(true, null) : verdict(false, 'ROLE_NOT_ELIGIBLE');
+}
+function identityVerdict(input) {
+    const value = record(input);
+    const valid = /^[a-f0-9]{64}$/;
+    if (typeof value.leftIdentityHash !== 'string' || typeof value.rightIdentityHash !== 'string'
+        || !valid.test(value.leftIdentityHash) || !valid.test(value.rightIdentityHash))
+        return verdict(false, 'IDENTITY_INPUT_INVALID');
+    return value.leftIdentityHash !== value.rightIdentityHash ? verdict(true, null) : verdict(false, 'IDENTITY_CONSTRAINT_VIOLATED');
+}
+function verdict(passed, reasonCode) { return deepFreeze({ passed, blocked: !passed, reasonCode }); }
+function projectBinding({ callable: _callable, wiring: _wiring, ...binding }) { return binding; }
+function record(value) { return isRecord(value) ? value : {}; }
+function isRecord(value) { return value !== null && typeof value === 'object' && !Array.isArray(value); }
+function get(value, path) {
+    return path.split('/').filter(Boolean).reduce((cursor, key) => Array.isArray(cursor) && /^\d+$/.test(key) ? cursor[Number(key)] : isRecord(cursor) ? cursor[key] : undefined, value);
+}
+function check(value, path, issueId, expected, issues, reportedPath = path) {
+    const actual = get(value, path);
+    if (actual === undefined || hashCanonical(actual) !== hashCanonical(expected))
+        issue(issues, issueId, reportedPath);
+}
+function sameSet(value, expected) {
+    return Array.isArray(value) && value.length === expected.length
+        && new Set(value).size === expected.length && value.every((entry) => typeof entry === 'string' && expected.includes(entry));
+}
+function extraFields(value, allowed, prefix, issueId, issues) {
+    Object.keys(value).filter((key) => !allowed.includes(key)).forEach((key) => issue(issues, issueId, `${prefix}${key}`));
+}
+function issue(issues, issueId, path) { issues.push({ issueId, path, message: `${issueId} at ${path}.` }); }
+//# sourceMappingURL=corrective-replan-authority.js.map

package/dist/src/lifecycle/corrective-replan-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corrective-replan-authority.js","sourceRoot":"","sources":["../../../src/lifecycle/corrective-replan-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAiB5C,MAAM,YAAY,GAAsB,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AACtE,MAAM,eAAe,GAAsB,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAC7E,MAAM,iBAAiB,GAAsB,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAC/E,MAAM,oBAAoB,GAAsB,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,kCAAkC,GAAwC,UAAU,CAAC;IAChG,OAAO,CAAC,0DAA0D,EAAE,0DAA0D,EAAE,gBAAgB,EAAE,YAAY,CAAC;IAC/J,OAAO,CAAC,wDAAwD,EAAE,wDAAwD,EAAE,qBAAqB,EAAE,eAAe,CAAC;IACnK,OAAO,CAAC,2DAA2D,EAAE,2DAA2D,EAAE,qBAAqB,EAAE,iBAAiB,CAAC;IAC3K,OAAO,CAAC,8DAA8D,EAAE,8DAA8D,EAAE,qBAAqB,EAAE,oBAAoB,CAAC;CACrL,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AACjD,MAAM,WAAW,GAAG;IAClB,UAAU,CAAC,mDAAmD,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;IACtG,UAAU,CAAC,sDAAsD,EAAE,qBAAqB,EAAE,oBAAoB,CAAC;IAC/G,UAAU,CAAC,yDAAyD,EAAE,wBAAwB,EAAE,iBAAiB,CAAC;CACnH,CAAC;AAEF,+FAA+F;AAC/F,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,MAAM,GAAqB,EAAE,CAAC;IACjE,WAAW,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,wBAAwB,CAAC,EAChL,GAAG,EAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;IAC7C,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IAC1G,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACpI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,cAAc,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IAChL,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACnJ,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACtG,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,mCAAmC,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpG,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,gCAAgC,EAAE,GAAG,CAAC,oCAAoC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClH,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,mCAAmC,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3H,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,mCAAmC,EAAE,GAAG,CAAC,0DAA0D,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7I,KAAK,CAAC,KAAK,EAAE,0BAA0B,EAAE,uCAAuC,EAAE,GAAG,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3H,KAAK,CAAC,KAAK,EAAE,uBAAuB,EAAE,oCAAoC,EAAE,GAAG,CAAC,oCAAoC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/H,KAAK,CAAC,KAAK,EAAE,sBAAsB,EAAE,mCAAmC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,KAAK,CAAC,MAAM,EAAE,8BAA8B,EAAE,aAAa,CAAC,CAAC;SACnF,CAAC;QACJ,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,mCAAmC,EAAE,MAAM,CAAC,CAAC;QAChH,KAAK,CAAC,KAAK,EAAE,qBAAqB,EAAE,uCAAuC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACxF,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE,sCAAsC,EAAE,GAAG,CAAC,qCAAqC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/H,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE,sCAAsC,EAAE,GAAG,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAAC;QACpH,KAAK,CAAC,KAAK,EAAE,0BAA0B,EAAE,0CAA0C,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAC5H,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,qCAAqC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC;QACnJ,IAAI,UAAU,CAAC,eAAe,KAAK,+BAA+B;YAChE,KAAK,CAAC,MAAM,EAAE,gDAAgD,EAAE,6BAA6B,CAAC,CAAC;IACnG,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,oCAAoC,EAAE,GAAG,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;IACvG,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,+BAA+B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9G,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,KAAK,CAAC,MAAM,EAAE,gCAAgC,EAAE,gBAAgB,KAAK,eAAe,CAAC,CAAC;aACnG,IAAI,EAAE,KAAK,yDAAyD;YAAE,KAAK,CAAC,MAAM,EAAE,+CAA+C,EAAE,gBAAgB,KAAK,EAAE,CAAC,CAAC;aAC9J,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,EAAE,CAAC;YAAE,KAAK,CAAC,MAAM,EAAE,8BAA8B,EAAE,gBAAgB,KAAK,eAAe,CAAC,CAAC;QAC5J,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,WAAW,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,EACtH,gBAAgB,KAAK,GAAG,EAAE,kCAAkC,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IACH,WAAW,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/G,IAAI,WAAW,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,EAAE,8BAA8B,EAAE,gBAAgB,KAAK,EAAE,CAAC,CAAC;QACnG,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,CAAU,EAAE,CAAC;YAC9F,KAAK,CAAC,KAAK,EAAE,gBAAgB,WAAW,IAAI,KAAK,EAAE,EAAE,wBAAwB,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAC/J,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;YACnG,IAAI,KAAK,KAAK,YAAY;gBAAE,KAAK,CAAC,KAAK,EAAE,gBAAgB,WAAW,qBAAqB,EAAE,kDAAkD,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,KAAK,qBAAqB,CAAC,CAAC;QACxM,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,qCAAqC,EAAE,mCAAmC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAC/G,KAAK,CAAC,KAAK,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/G,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,8BAA8B,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC1I,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,mCAAmC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACtJ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO;QACzG,QAAQ,EAAE,kCAAkC,EAAE,CAAC;IACjD,OAAO,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/H,CAAC;AAED,SAAS,OAAO,CAAC,EAAU,EAAE,MAAc,EAAE,IAAsC,EAAE,QAA2B;IAC9G,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,MAAM,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACvI,CAAC;AACD,MAAM,UAAU,8BAA8B,CAAC,QAA6C;IAC1F,MAAM,UAAU,GAAG,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,EAAE,+BAA+B,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;IAClI,OAAO,UAAU,CAAC,EAAE,GAAG,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC5H,CAAC;AACD,SAAS,UAAU,CAAC,YAAoB,EAAE,MAAc,EAAE,KAAa;IAAI,OAAO,EAAE,YAAY;QAC9F,UAAU,EAAE,GAAG,CAAC,yCAAyC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC;QACrG,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;AAAC,CAAC;AACjF,SAAS,WAAW,CAAC,KAAc;IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;IAC9H,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC;WACpG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACtH,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;AAAC,CAAC;AACvG,SAAS,eAAe,CAAC,KAAc;IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,gBAAgB,CAAC;IACrG,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;WACxF,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;AAAC,CAAC;AACrI,SAAS,OAAO,CAAC,MAAe,EAAE,UAAyB,IAAI,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7H,SAAS,cAAc,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAA4B,IAAI,OAAO,OAAO,CAAC,CAAC,CAAC;AAC3H,SAAS,MAAM,CAAC,KAAc,IAAgB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACpF,SAAS,QAAQ,CAAC,KAAc,IAAyB,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvI,SAAS,GAAG,CAAC,KAAiB,EAAE,IAAY;IAAa,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAU,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAC9H,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAAC,CAAC;AAC1H,SAAS,KAAK,CAAC,KAAiB,EAAE,IAAY,EAAE,OAAe,EAAE,QAAiB,EAAE,MAAwB,EAAE,YAAY,GAAG,IAAI;IAC/H,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AACtH,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,QAA2B;IAAa,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;WACnI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAAC,CAAC;AAChI,SAAS,WAAW,CAAC,KAAiB,EAAE,OAA0B,EAAE,MAAc,EAAE,OAAe,EAAE,MAAwB;IAC3H,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;AACzH,CAAC;AACD,SAAS,KAAK,CAAC,MAAwB,EAAE,OAAe,EAAE,IAAY,IAAU,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC"}

package/dist/src/lifecycle/corrective-replan-binding-manifest.d.ts

@@ -0,0 +1,21 @@
+type ValueKind = 'literal' | 'sha256' | 'safe-integer' | 'entity-id' | 'git-oid' | 'actor-role';
+type Canonicalization = 'exact' | 'lowercase-hex' | 'safe-nonnegative-integer' | 'nfc-trim' | 'lowercase-git-oid' | 'registered-enum';
+export declare const correctiveReplanBindingManifest: {
+    manifestSha256: string;
+    id: "binding-manifest.corrective-replan.exact-v1";
+    version: 1;
+    rows: {
+        ordinal: number;
+        bindingId: string;
+        projection: {
+            id: `projection.${string}`;
+            version: 1;
+        };
+        fieldId: `field.${string}`;
+        valueKind: ValueKind;
+        canonicalization: Canonicalization;
+        receiptPath: `/binding/values/${string}`;
+    }[];
+};
+export declare const correctiveReplanBindingIds: string[];
+export {};

package/dist/src/lifecycle/corrective-replan-binding-manifest.js

@@ -0,0 +1,35 @@
+import { hashCanonical } from './canonical-hash.js';
+import { deepFreeze } from './immutable.js';
+const ref = (id) => ({ id, version: 1 });
+const row = (bindingId, projection, fieldId, valueKind, canonicalization) => ({
+    ordinal: rowsOrdinal++, bindingId, projection: ref(projection), fieldId, valueKind, canonicalization,
+    receiptPath: `/binding/values/${bindingId}`,
+});
+let rowsOrdinal = 0;
+const protocol = (id, field, kind, canonical) => row(id, 'projection.corrective-replan.protocol', field, kind, canonical);
+const state = (id, field, kind, canonical) => row(id, 'projection.corrective-replan.state', field, kind, canonical);
+const candidate = (id, field) => row(id, 'projection.corrective-replan.candidate', field, 'sha256', 'lowercase-hex');
+const authority = (id, field, kind, canonical) => row(id, 'projection.corrective-replan.authority', field, kind, canonical);
+const rows = [
+    protocol('transitionId', 'field.transition-id', 'literal', 'exact'), protocol('runtimeFingerprint', 'field.runtime-fingerprint', 'sha256', 'lowercase-hex'),
+    protocol('catalogHash', 'field.catalog-hash', 'sha256', 'lowercase-hex'), protocol('lifecycleEpoch', 'field.lifecycle-epoch', 'safe-integer', 'safe-nonnegative-integer'),
+    state('taskId', 'field.task-id', 'entity-id', 'nfc-trim'), state('revision', 'field.task-revision', 'safe-integer', 'safe-nonnegative-integer'),
+    state('currentPlanHash', 'field.current-plan-hash', 'sha256', 'lowercase-hex'), state('briefHash', 'field.brief-hash', 'sha256', 'lowercase-hex'),
+    state('knowledgeRevision', 'field.knowledge-revision', 'safe-integer', 'safe-nonnegative-integer'), state('knowledgeHash', 'field.knowledge-hash', 'sha256', 'lowercase-hex'),
+    state('gitHead', 'field.git-head', 'git-oid', 'lowercase-git-oid'), state('guardedStepId', 'field.guarded-step-id', 'entity-id', 'nfc-trim'),
+    state('correctiveDecisionEventId', 'field.corrective-decision-event-id', 'entity-id', 'nfc-trim'), state('correctiveDecisionHash', 'field.corrective-decision-hash', 'sha256', 'lowercase-hex'),
+    state('attemptCount', 'field.attempt-count', 'safe-integer', 'safe-nonnegative-integer'), state('remediationTailHash', 'field.remediation-tail-hash', 'sha256', 'lowercase-hex'),
+    candidate('candidatePlanHash', 'field.candidate-plan-hash'), candidate('candidateStepSetHash', 'field.candidate-step-set-hash'),
+    candidate('planAuthorIdentityHash', 'field.plan-author-identity-hash'), candidate('planValidationHash', 'field.plan-validation-hash'),
+    candidate('planValidatorIdentityHash', 'field.plan-validator-identity-hash'), candidate('riskAuditHash', 'field.risk-audit-hash'), candidate('riskAuditorIdentityHash', 'field.risk-auditor-identity-hash'),
+    authority('actorIdentityHash', 'field.actor-identity-hash', 'sha256', 'lowercase-hex'), authority('actorRole', 'field.actor-role', 'actor-role', 'registered-enum'),
+    authority('humanPrincipalIdentityHash', 'field.human-principal-identity-hash', 'sha256', 'lowercase-hex'), authority('capabilityId', 'field.capability-id', 'literal', 'exact'),
+    authority('capabilityVersion', 'field.capability-version', 'safe-integer', 'safe-nonnegative-integer'),
+];
+const identity = { id: 'binding-manifest.corrective-replan.exact-v1', version: 1, rows };
+export const correctiveReplanBindingManifest = deepFreeze({
+    ...identity,
+    manifestSha256: hashCanonical({ ...identity, rows: [...rows].sort((a, b) => a.bindingId.localeCompare(b.bindingId)) }),
+});
+export const correctiveReplanBindingIds = deepFreeze(rows.map(({ bindingId }) => bindingId));
+//# sourceMappingURL=corrective-replan-binding-manifest.js.map

package/dist/src/lifecycle/corrective-replan-binding-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corrective-replan-binding-manifest.js","sourceRoot":"","sources":["../../../src/lifecycle/corrective-replan-binding-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,MAAM,GAAG,GAAG,CAAqB,EAAO,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAU,EAAE,CAAC,CAAC;AAG3E,MAAM,GAAG,GAAG,CAAC,SAAiB,EAAE,UAAwB,EAAE,OAA0B,EAAE,SAAoB,EAAE,gBAAkC,EAAE,EAAE,CAAC,CAAC;IAClJ,OAAO,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB;IACpG,WAAW,EAAE,mBAAmB,SAAS,EAAiC;CAC3E,CAAC,CAAC;AACH,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,KAAwB,EAAE,IAAe,EAAE,SAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,uCAAuC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AAClL,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,KAAwB,EAAE,IAAe,EAAE,SAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,oCAAoC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AAC5K,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,KAAwB,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,wCAAwC,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AAChJ,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,KAAwB,EAAE,IAAe,EAAE,SAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,wCAAwC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AAEpL,MAAM,IAAI,GAAG;IACX,QAAQ,CAAC,cAAc,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,oBAAoB,EAAE,2BAA2B,EAAE,QAAQ,EAAE,eAAe,CAAC;IAC3J,QAAQ,CAAC,aAAa,EAAE,oBAAoB,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,cAAc,EAAE,0BAA0B,CAAC;IACzK,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE,0BAA0B,CAAC;IAC/I,KAAK,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,eAAe,CAAC;IACjJ,KAAK,CAAC,mBAAmB,EAAE,0BAA0B,EAAE,cAAc,EAAE,0BAA0B,CAAC,EAAE,KAAK,CAAC,eAAe,EAAE,sBAAsB,EAAE,QAAQ,EAAE,eAAe,CAAC;IAC7K,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,KAAK,CAAC,eAAe,EAAE,uBAAuB,EAAE,WAAW,EAAE,UAAU,CAAC;IAC5I,KAAK,CAAC,2BAA2B,EAAE,oCAAoC,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,wBAAwB,EAAE,gCAAgC,EAAE,QAAQ,EAAE,eAAe,CAAC;IAC/L,KAAK,CAAC,cAAc,EAAE,qBAAqB,EAAE,cAAc,EAAE,0BAA0B,CAAC,EAAE,KAAK,CAAC,qBAAqB,EAAE,6BAA6B,EAAE,QAAQ,EAAE,eAAe,CAAC;IAChL,SAAS,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,EAAE,SAAS,CAAC,sBAAsB,EAAE,+BAA+B,CAAC;IAC/H,SAAS,CAAC,wBAAwB,EAAE,iCAAiC,CAAC,EAAE,SAAS,CAAC,oBAAoB,EAAE,4BAA4B,CAAC;IACrI,SAAS,CAAC,2BAA2B,EAAE,oCAAoC,CAAC,EAAE,SAAS,CAAC,eAAe,EAAE,uBAAuB,CAAC,EAAE,SAAS,CAAC,yBAAyB,EAAE,kCAAkC,CAAC;IAC3M,SAAS,CAAC,mBAAmB,EAAE,2BAA2B,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,WAAW,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,CAAC;IACnK,SAAS,CAAC,4BAA4B,EAAE,qCAAqC,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,cAAc,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC;IAC/K,SAAS,CAAC,mBAAmB,EAAE,0BAA0B,EAAE,cAAc,EAAE,0BAA0B,CAAC;CACvG,CAAC;AAEF,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,6CAAsD,EAAE,OAAO,EAAE,CAAU,EAAE,IAAI,EAAE,CAAC;AAC3G,MAAM,CAAC,MAAM,+BAA+B,GAAG,UAAU,CAAC;IACxD,GAAG,QAAQ;IACX,cAAc,EAAE,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;CACvH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC"}

package/dist/src/lifecycle/corrective-replan-credential-core.d.ts

@@ -0,0 +1,86 @@
+type JsonRecord = Record<string, unknown>;
+type Reason = 'schema' | 'binding' | 'authority' | 'sod' | 'time' | 'integrity' | 'provenance';
+type Issue = Readonly<{
+    issueId: string;
+    path: string;
+    reasonClass: Reason;
+}>;
+type Result<T> = Readonly<{
+    ok: true;
+    value: Readonly<T>;
+    issues: readonly [];
+}> | Readonly<{
+    ok: false;
+    value: null;
+    issues: readonly Issue[];
+    reportHash: string;
+}>;
+type Verification<T> = Readonly<{
+    valid: true;
+    projection: Readonly<T>;
+    issues: readonly [];
+    reportHash: string;
+}> | Readonly<{
+    valid: false;
+    projection: null;
+    issues: readonly Issue[];
+    reportHash: string;
+}>;
+declare const planBrand: unique symbol;
+declare const challengeBrand: unique symbol;
+declare const confirmationBrand: unique symbol;
+declare const receiptBrand: unique symbol;
+declare const eventBrand: unique symbol;
+export type PlanValidationHandle = Readonly<{
+    [planBrand]: never;
+}>;
+export type HumanChallengeHandle = Readonly<{
+    [challengeBrand]: never;
+}>;
+export type VerifiedConfirmationHandle = Readonly<{
+    [confirmationBrand]: never;
+}>;
+export type ReceiptHandle = Readonly<{
+    [receiptBrand]: never;
+}>;
+export type StoredPlanValidationEventHandle = Readonly<{
+    [eventBrand]: never;
+}>;
+export interface CorrectiveReplanCredentialCorePorts {
+    readonly snapshotSource: {
+        readCorrectiveReplanSnapshot(taskId: string): unknown;
+    };
+    readonly coreClock: {
+        nowMs(): number;
+    };
+    readonly idSource: {
+        nextId(kind: 'plan-validation-attestation' | 'human-challenge' | 'receipt' | 'plan-validation-event'): string;
+    };
+    readonly challengeCodeSource: {
+        issueConfirmationCode(): string;
+    };
+    readonly validationEventTailSource: {
+        readPlanValidationTail(taskId: string): unknown;
+    };
+}
+export interface CorrectiveReplanCredentialKernel {
+    issuePlanValidation(input: unknown): Result<JsonRecord>;
+    issueHumanChallenge(input: unknown): Result<JsonRecord>;
+    confirmHuman(input: unknown): Result<JsonRecord>;
+    issueReceipt(input: unknown): Result<JsonRecord>;
+    verifyReceipt(input: unknown): Verification<JsonRecord>;
+    materializeStoredEvent(input: unknown): Result<JsonRecord>;
+    verifyStoredEvent(input: unknown): Verification<JsonRecord>;
+}
+export interface CredentialFunctionBinding {
+    readonly id: string;
+    readonly version: 1;
+    readonly kind: 'materializer' | 'verifier';
+    readonly implementationId: `implementation.${string}`;
+    readonly implementationVersion: 1;
+    readonly wiring: 'invoked';
+    readonly callable: (issuer: unknown, input: unknown) => unknown;
+}
+export declare function createCorrectiveReplanCredentialKernel(ports: CorrectiveReplanCredentialCorePorts): CorrectiveReplanCredentialKernel;
+export declare const correctiveReplanCredentialFunctionBindings: readonly CredentialFunctionBinding[];
+export {};