codex-workflow-v2 2.0.0-beta.13.9 → 2.0.0-beta.14

package/dist/src/alpha6/captured-check-evidence.js

@@ -0,0 +1,152 @@
+import { lstatSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { WorkflowError } from '../errors.js';
+import { canonicalJsonStringify, sha256Hex } from './store-sidecars.js';
+const KIND = 'captured-checks/v1';
+const HASH = /^[a-f0-9]{64}$/;
+function corrupt() {
+    // Never include captured output or parsing errors in public diagnostics.
+    throw new WorkflowError('STATE_CORRUPT', 'Captured check evidence is missing, unsafe, or does not match its binding.');
+}
+function inspect(file) {
+    try {
+        return lstatSync(file);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        return corrupt();
+    }
+}
+function artifactFile(store, task, checksHash) {
+    if (!HASH.test(checksHash))
+        corrupt();
+    const root = store.taskRoot(task.projectId, task.id);
+    const directory = path.join(root, 'check-results');
+    for (const item of [root, directory]) {
+        const stat = inspect(item);
+        if (stat && (!stat.isDirectory() || stat.isSymbolicLink() || (stat.mode & 0o077) !== 0))
+            corrupt();
+    }
+    return path.join(directory, `${checksHash}.json`);
+}
+function readBytes(file, maxBytes) {
+    const stat = inspect(file);
+    if (!stat)
+        return null;
+    if (!stat.isFile() || stat.isSymbolicLink() || (stat.mode & 0o077) !== 0 || stat.size > maxBytes)
+        corrupt();
+    try {
+        return readFileSync(file, 'utf8');
+    }
+    catch {
+        return corrupt();
+    }
+}
+function validateChecks(value) {
+    if (!Array.isArray(value) || value.length === 0)
+        corrupt();
+    for (const item of value) {
+        if (!item || typeof item !== 'object' || Array.isArray(item)
+            || Object.keys(item).sort().join(',') !== 'command,exitCode,output,passed'
+            || typeof item.command !== 'string' || typeof item.output !== 'string' || item.output.length > 12_000
+            || typeof item.passed !== 'boolean' || !Number.isInteger(item.exitCode)
+            || item.passed !== (item.exitCode === 0))
+            corrupt();
+    }
+    if (!value.some(item => !item.passed))
+        corrupt();
+}
+/** Prepare one target for the existing failed-Step transaction. Performs no writes. */
+export function prepareCapturedCheckEvidence(store, task, checks) {
+    validateChecks(checks);
+    const canonical = canonicalJsonStringify(checks);
+    const checksHash = sha256Hex(canonical);
+    const content = `${canonical}\n`;
+    const file = artifactFile(store, task, checksHash);
+    const previous = readBytes(file, Buffer.byteLength(content));
+    if (previous !== null && previous !== content)
+        corrupt();
+    return {
+        checksHash,
+        reference: { kind: KIND, artifactHash: sha256Hex(content) },
+        target: previous === null
+            ? { path: path.relative(store.projectRoot(task.projectId), file).split(path.sep).join('/'), content }
+            : null,
+    };
+}
+/** Exact readback for the transaction; captured bytes never escape in its return value. */
+export function assertCapturedCheckEvidence(store, task, pause, expected) {
+    const checks = readVerifiedChecks(store, task, pause, expected.map(check => check.command));
+    if (!checks || canonicalJsonStringify(checks) !== canonicalJsonStringify(expected))
+        corrupt();
+}
+function readVerifiedChecks(store, task, pause, commands) {
+    if (pause.checksEvidence === undefined)
+        return null;
+    const ref = pause.checksEvidence;
+    if (!ref || Object.keys(ref).sort().join(',') !== 'artifactHash,kind'
+        || ref.kind !== KIND || !HASH.test(ref.artifactHash))
+        corrupt();
+    // JSON escaping can expand each captured character to six bytes.
+    const maxBytes = commands.reduce((size, command) => size + command.length * 6 + 12_000 * 6 + 256, 2);
+    const content = readBytes(artifactFile(store, task, pause.checksHash), maxBytes);
+    if (content === null || sha256Hex(content) !== ref.artifactHash)
+        corrupt();
+    let value;
+    try {
+        value = JSON.parse(content);
+    }
+    catch {
+        return corrupt();
+    }
+    validateChecks(value);
+    const canonical = canonicalJsonStringify(value);
+    if (content !== `${canonical}\n` || sha256Hex(canonical) !== pause.checksHash
+        || JSON.stringify(value.map(check => check.command)) !== JSON.stringify(commands))
+        corrupt();
+    return value;
+}
+/** Verify native saved check evidence for admission without deriving authority from display diagnostics. */
+export function assertCurrentCapturedCheckEvidence(store, task, stepId) {
+    const step = task.steps.find(candidate => candidate.id === stepId);
+    if (!step?.failurePause || !readVerifiedChecks(store, task, step.failurePause, step.checks))
+        corrupt();
+}
+/** Best-effort diagnostic display only. Never used in cause bindings, scope, or navigation. */
+export function capturedCheckExcerpt(output, sensitiveValues = []) {
+    let text = output.replace(/\u001b\[[0-9;]*m/g, '');
+    for (const value of sensitiveValues.filter(Boolean))
+        text = text.replaceAll(value, '[REDACTED]');
+    const lines = text.split(/\r?\n/).map(line => line.trim()).filter(Boolean);
+    const errors = lines.filter(line => /\b(?:error|failed|failure|exception|assertion|fatal|panic)\b|\bTS\d{3,5}\b/i.test(line));
+    return (errors.length ? errors : lines).slice(-8).map(line => {
+        // Prefer hiding the whole secret-bearing line over preserving surrounding error text.
+        if (/\b(?:authorization|bearer|password|passwd|secret|token|api[_-]?key|private[_-]?key)\b|-----BEGIN .*PRIVATE KEY/i.test(line)) {
+            return '[REDACTED sensitive diagnostic line]';
+        }
+        return line
+            .replace(/\b[A-Za-z][A-Za-z0-9+.-]*:\/\/[^\s]+/g, '[REDACTED_URL]')
+            .replace(/\b(?:CREF|DGT|WLT|CLAIM)-[^\s]+/g, '[REDACTED]')
+            .replace(/[A-Za-z0-9_+/=-]{40,}/g, '[REDACTED_VALUE]')
+            .slice(0, 240);
+    });
+}
+/** Read-only inspection of a current saved failure; no raw logs enter Task/status JSON. */
+export function readCapturedCheckDiagnostics(store, task, stepId) {
+    const step = task.steps.find(candidate => candidate.id === stepId);
+    if (!step?.failurePause)
+        return { state: 'unavailable', reason: 'no-current-failure' };
+    const checks = readVerifiedChecks(store, task, step.failurePause, step.checks);
+    if (!checks)
+        return { state: 'unavailable', reason: 'legacy-not-captured' };
+    return {
+        state: 'verified',
+        checksHash: step.failurePause.checksHash,
+        artifactHash: step.failurePause.checksEvidence.artifactHash,
+        authority: 'diagnostic-only',
+        capture: 'bounded-output-tail-last-12000-characters',
+        failures: checks.flatMap((check, index) => check.passed ? [] : [{ index, exitCode: check.exitCode, excerpt: capturedCheckExcerpt(check.output) }]),
+    };
+}
+//# sourceMappingURL=captured-check-evidence.js.map

package/dist/src/alpha6/captured-check-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"captured-check-evidence.js","sourceRoot":"","sources":["../../../src/alpha6/captured-check-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAExE,MAAM,IAAI,GAAG,oBAA6B,CAAC;AAC3C,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAC9B,SAAS,OAAO;IACd,yEAAyE;IACzE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,4EAA4E,CAAC,CAAC;AACzH,CAAC;AACD,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC;QAAC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC7C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AACD,SAAS,YAAY,CAAC,KAAqB,EAAE,IAAe,EAAE,UAAkB;IAC9E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;IACrG,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,SAAS,CAAC,IAAY,EAAE,QAAgB;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC5G,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;AACxE,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;eACvD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,gCAAgC;eACvE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM;eAClG,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;eACpE,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;AACnD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,4BAA4B,CAAC,KAAqB,EAAE,IAAe,EAAE,MAAqB;IACxG,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,GAAG,SAAS,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IACzD,OAAO;QACL,UAAU;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE;QAC3D,MAAM,EAAE,QAAQ,KAAK,IAAI;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;YACrG,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,2BAA2B,CACzC,KAAqB,EAAE,IAAe,EAAE,KAAuB,EAAE,QAAuB;IAExF,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5F,IAAI,CAAC,MAAM,IAAI,sBAAsB,CAAC,MAAM,CAAC,KAAK,sBAAsB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAqB,EAAE,IAAe,EAAE,KAAuB,EAAE,QAAkB;IAC7G,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC;IACjC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,mBAAmB;WAChE,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAClE,iEAAiE;IACjE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjF,IAAI,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC3E,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;IAChE,cAAc,CAAC,KAAK,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,GAAG,SAAS,IAAI,IAAI,SAAS,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,UAAU;WACxE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,kCAAkC,CAAC,KAAqB,EAAE,IAAe,EAAE,MAAc;IACvG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,EAAE,YAAY,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;AACzG,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,kBAAqC,EAAE;IAC1F,IAAI,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,6EAA6E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9H,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC3D,sFAAsF;QACtF,IAAI,iHAAiH,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjI,OAAO,sCAAsC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI;aACR,OAAO,CAAC,uCAAuC,EAAE,gBAAgB,CAAC;aAClE,OAAO,CAAC,kCAAkC,EAAE,YAAY,CAAC;aACzD,OAAO,CAAC,wBAAwB,EAAE,kBAAkB,CAAC;aACrD,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,4BAA4B,CAAC,KAAqB,EAAE,IAAe,EAAE,MAAc;IACjG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,EAAE,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,aAAsB,EAAE,MAAM,EAAE,oBAA6B,EAAE,CAAC;IACzG,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,aAAsB,EAAE,MAAM,EAAE,qBAA8B,EAAE,CAAC;IAC9F,OAAO;QACL,KAAK,EAAE,UAAmB;QAC1B,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU;QACxC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,cAAe,CAAC,YAAY;QAC5D,SAAS,EAAE,iBAA0B;QACrC,OAAO,EAAE,2CAAoD;QAC7D,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;KACnJ,CAAC;AACJ,CAAC"}

package/dist/src/alpha6/component-owner.d.ts

@@ -9,9 +9,16 @@ export interface FailedCheckComponentOwnerConflict {
     diagnosticPath: string;
     componentRoot: string;
     causeFingerprint: string;
+    testInvocation?: {
+        kind: 'literal-vitest-catalog';
+        runnerHash: string;
+        argv: string[];
+        migrationOutputs: string[];
+        catalogNames: string[];
+    };
 }
 export declare function inspectFailedCheckComponentOwners(input: {
-    step: Pick<PlanStepInput, 'checks' | 'allowedWrites' | 'forbiddenScope'> & {
+    step: Pick<PlanStepInput, 'checks' | 'allowedWrites' | 'forbiddenScope'> & Partial<Pick<PlanStepInput, 'expectedOutputs'>> & {
         failurePause?: StepFailurePause | null;
     };
     scripts: ReadonlyMap<string, string>;
@@ -19,6 +26,7 @@ export declare function inspectFailedCheckComponentOwners(input: {
         content: string | null;
         hash: string | null;
     };
+    isTracked?: (relativePath: string) => boolean;
 }): FailedCheckComponentOwnerConflict[];
 export declare function semanticBoundaryHash(task: {
     planObjective: string | null;
@@ -26,3 +34,9 @@ export declare function semanticBoundaryHash(task: {
     acceptance: string[];
     risks: string[];
 }): string;
+/** Stored invocation evidence is structurally distinct from an import chain. The
+ * containing conflict hash binds it; fresh recovery rederives it from tracked bytes. */
+export declare function validLiteralTestInvocationEvidence(conflict: {
+    ownerPath: string;
+    testInvocation?: FailedCheckComponentOwnerConflict['testInvocation'];
+}): boolean;

package/dist/src/alpha6/component-owner.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
 import path from 'node:path';
 import { pathAllowed } from '../domain/validation.js';
+import { literalMigrationCatalogNames, literalVitestInvocations } from './literal-test-invocation.js';
 import { parseNpmRunCheck } from './npm-check-contract.js';
 const RUNNER = /(?:^|[;&|]\s*|\s)(?:node|tsx)\s+([A-Za-z0-9._/-]+\.(?:cjs|js|mjs|ts|tsx))(?=\s|$)/g;
 const IMPORT = /(?:\bfrom\s*|\bimport\s*)['"](\.[^'"]+)['"]/g;
@@ -17,7 +18,25 @@ export function inspectFailedCheckComponentOwners(input) {
         for (const runnerPath of extractRunnerPaths(scriptCommand)) {
             const graph = buildImportGraph(runnerPath, input.readFile);
             for (const diagnosticPath of failure.diagnosticPaths) {
-                const node = graph.get(diagnosticPath);
+                let node = graph.get(diagnosticPath);
+                let testInvocation;
+                if (!node && /^(?:node|tsx) [A-Za-z0-9._/-]+\.(?:cjs|js|mjs|ts|tsx)$/.test(scriptCommand.trim())
+                    && input.isTracked?.(runnerPath) && input.isTracked(diagnosticPath)
+                    && !pathAllowed(diagnosticPath, input.step.forbiddenScope)) {
+                    const runner = input.readFile(runnerPath), spec = input.readFile(diagnosticPath);
+                    const argv = runner.content && literalVitestInvocations(runner.content).find(args => args.slice(2).includes(diagnosticPath));
+                    const catalogNames = literalMigrationCatalogNames(spec.content ?? '');
+                    const migrationOutputs = (input.step.expectedOutputs ?? []).map(value => value.startsWith('path:') ? value.slice(5) : value)
+                        .filter(value => /^[A-Za-z0-9._/-]+$/.test(value) && !value.split('/').some(part => part === '..' || part === '.')
+                        && /^[0-9]{4}_[a-z0-9_]+\.sql$/.test(path.posix.basename(value))
+                        && componentBoundary(value) === componentBoundary(diagnosticPath)
+                        && pathAllowed(value, input.step.allowedWrites)
+                        && !catalogNames.includes(path.posix.basename(value))).sort();
+                    if (argv && runner.hash && spec.hash && catalogNames.length && migrationOutputs.length) {
+                        testInvocation = { kind: 'literal-vitest-catalog', runnerHash: runner.hash, argv, migrationOutputs, catalogNames };
+                        node = { hash: spec.hash, chain: [runnerPath] };
+                    }
+                }
                 if (!node || pathAllowed(diagnosticPath, input.step.allowedWrites))
                     continue;
                 const componentRoot = componentBoundary(diagnosticPath);
@@ -33,11 +52,16 @@ export function inspectFailedCheckComponentOwners(input) {
                     diagnosticPath,
                     componentRoot,
                     causeFingerprint: failure.causeFingerprint,
+                    ...(testInvocation ? { testInvocation } : {}),
                 });
             }
         }
     }
-    return conflicts.sort((left, right) => left.command.localeCompare(right.command)
+    // A diagnostic list may include passing suites. Only a unique missing-catalog
+    // anchor for this failed command qualifies; ambiguity grants no new scope.
+    const unambiguous = conflicts.filter(conflict => !conflict.testInvocation
+        || conflicts.filter(other => other.command === conflict.command && other.testInvocation).length === 1);
+    return unambiguous.sort((left, right) => left.command.localeCompare(right.command)
         || left.ownerPath.localeCompare(right.ownerPath));
 }
 function buildImportGraph(runnerPath, readFile) {
@@ -92,4 +116,22 @@ export function semanticBoundaryHash(task) {
     });
     return createHash('sha256').update(material).digest('hex');
 }
+/** Stored invocation evidence is structurally distinct from an import chain. The
+ * containing conflict hash binds it; fresh recovery rederives it from tracked bytes. */
+export function validLiteralTestInvocationEvidence(conflict) {
+    const proof = conflict.testInvocation;
+    if (!proof || proof.kind !== 'literal-vitest-catalog' || !/^[a-f0-9]{64}$/.test(proof.runnerHash))
+        return false;
+    const paths = proof.argv.slice(2).filter(arg => !arg.startsWith('--'));
+    return proof.argv[0] === 'vitest' && proof.argv[1] === 'run'
+        && paths.includes(conflict.ownerPath)
+        && paths.every(value => /^(?:[A-Za-z0-9_-]+\/)*[A-Za-z0-9_.-]+\.(?:spec|test)\.[cm]?[jt]sx?$/.test(value))
+        && proof.argv.slice(2 + paths.length).every(arg => /^--maxWorkers=[1-9][0-9]*$/.test(arg))
+        && proof.argv.length - paths.length <= 3
+        && proof.catalogNames.length > 0 && proof.catalogNames.every(value => /^[0-9]{4}_[a-z0-9_]+\.sql$/.test(value))
+        && proof.migrationOutputs.length > 0 && proof.migrationOutputs.every(value => /^[A-Za-z0-9._/-]+$/.test(value) && !value.split('/').some(part => part === '..' || part === '.')
+        && /^[0-9]{4}_[a-z0-9_]+\.sql$/.test(path.posix.basename(value))
+        && componentBoundary(value) === componentBoundary(conflict.ownerPath)
+        && !proof.catalogNames.includes(path.posix.basename(value)));
+}
 //# sourceMappingURL=component-owner.js.map

package/dist/src/alpha6/component-owner.js.map

@@ -1 +1 @@
-{"version":3,"file":"component-owner.js","sourceRoot":"","sources":["../../../src/alpha6/component-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,MAAM,GAAG,oFAAoF,CAAC;AACpG,MAAM,MAAM,GAAG,8CAA8C,CAAC;AAc9D,MAAM,UAAU,iCAAiC,CAAC,KAIjD;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;IAC7D,MAAM,SAAS,GAAwC,EAAE,CAAC;IAC1D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa;YAAE,SAAS;QAC7B,KAAK,MAAM,UAAU,IAAI,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,KAAK,MAAM,cAAc,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACvC,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;oBAAE,SAAS;gBAC7E,MAAM,aAAa,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;gBACxD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC;oBAAE,SAAS;gBACpG,SAAS,CAAC,IAAI,CAAC;oBACb,UAAU,EAAE,qDAAqD;oBACjE,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,UAAU;oBACV,SAAS,EAAE,cAAc;oBACzB,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,cAAc;oBACd,aAAa;oBACb,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;WAC3E,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAkB,EAClB,QAAmF;IAEnF,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6C,CAAC;IACpE,MAAM,KAAK,GAA6C,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACpG,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACnE,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI;YAAE,SAAS;QACpD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACzE,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClE,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,aAAa,CACpB,QAAgB,EAChB,SAAiB,EACjB,QAAmF;IAEnF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,EAAE,GAAG,MAAM,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC;IACnH,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACrG,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9B,SAAS,EAAE,IAAI,CAAC,aAAa;QAC7B,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;QAC3C,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE;QACvC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;KAC/G,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"component-owner.js","sourceRoot":"","sources":["../../../src/alpha6/component-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,MAAM,GAAG,oFAAoF,CAAC;AACpG,MAAM,MAAM,GAAG,8CAA8C,CAAC;AAe9D,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;IAC7D,MAAM,SAAS,GAAwC,EAAE,CAAC;IAC1D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa;YAAE,SAAS;QAC7B,KAAK,MAAM,UAAU,IAAI,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,KAAK,MAAM,cAAc,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBACrD,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACrC,IAAI,cAAmE,CAAC;gBACxE,IAAI,CAAC,IAAI,IAAI,wDAAwD,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;uBAC3F,KAAK,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC;uBAChE,CAAC,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;oBACjF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;oBAC7H,MAAM,YAAY,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;oBACtE,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;yBACzH,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC;2BAC7G,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;2BAC7D,iBAAiB,CAAC,KAAK,CAAC,KAAK,iBAAiB,CAAC,cAAc,CAAC;2BAC9D,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;2BAC5C,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAClE,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC,MAAM,IAAI,gBAAgB,CAAC,MAAM,EAAE,CAAC;wBACvF,cAAc,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC;wBACnH,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;oBAClD,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;oBAAE,SAAS;gBAC7E,MAAM,aAAa,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;gBACxD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC;oBAAE,SAAS;gBACpG,SAAS,CAAC,IAAI,CAAC;oBACb,UAAU,EAAE,qDAAqD;oBACjE,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,UAAU;oBACV,SAAS,EAAE,cAAc;oBACzB,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,cAAc;oBACd,aAAa;oBACb,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;oBAC1C,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc;WACpE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IACzG,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;WAC7E,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAkB,EAClB,QAAmF;IAEnF,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6C,CAAC;IACpE,MAAM,KAAK,GAA6C,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACpG,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACnE,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI;YAAE,SAAS;QACpD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACzE,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClE,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,aAAa,CACpB,QAAgB,EAChB,SAAiB,EACjB,QAAmF;IAEnF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,EAAE,GAAG,MAAM,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC;IACnH,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACrG,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9B,SAAS,EAAE,IAAI,CAAC,aAAa;QAC7B,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;QAC3C,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE;QACvC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;KAC/G,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED;wFACwF;AACxF,MAAM,UAAU,kCAAkC,CAAC,QAElD;IACC,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAChH,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;WACvD,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;WAClC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,qEAAqE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;WACvG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;WACvF,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC;WACrC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;WAC5G,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAC3E,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC;WAC9F,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;WAC7D,iBAAiB,CAAC,KAAK,CAAC,KAAK,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC;WAClE,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/dist/src/alpha6/corrective-decision-boundary.d.ts

@@ -0,0 +1,4 @@
+import type { TaskState } from '../contracts.js';
+import type { FileStateStore } from '../state/store.js';
+/** Checkout eligibility only: never an audit, writer credential, or permission to widen scope. */
+export declare function correctiveDecisionCheckoutEligible(store: FileStateStore, repository: string, task: TaskState, stepId: string): boolean;

package/dist/src/alpha6/corrective-decision-boundary.js

@@ -0,0 +1,47 @@
+import { lstatSync } from 'node:fs';
+import path from 'node:path';
+import { pathAllowed } from '../domain/validation.js';
+import { validateTaskHistory } from '../git.js';
+import { changedFiles, currentBranch, headCommit } from '../repository.js';
+import { hashDirtyWorktree } from './downstream-proof.js';
+import { effectiveStepAllowedWrites, readRemediationEvents } from './remediation.js';
+/** Checkout eligibility only: never an audit, writer credential, or permission to widen scope. */
+export function correctiveDecisionCheckoutEligible(store, repository, task, stepId) {
+    if (!task.taskBranch || currentBranch(repository) !== task.taskBranch)
+        return false;
+    // Includes completed Step commits and recorded system/history commits. A new
+    // unrecorded HEAD must not become a corrective audit's implicit baseline.
+    validateTaskHistory(repository, task);
+    const dirty = changedFiles(repository).sort();
+    if (dirty.length === 0)
+        return true;
+    if (task.workspaceOwner !== 'local' || task.steps.some(step => step.status === 'in_progress'))
+        return false;
+    const step = task.steps.find(candidate => candidate.id === stepId);
+    const pause = step?.failurePause;
+    if (step?.status !== 'failed' || !pause)
+        return false;
+    const terminal = readRemediationEvents(store, task).filter(event => event.stepId === stepId).at(-1);
+    if (!terminal || terminal.failureKind !== 'checks-failed'
+        || terminal.failureEvidence.completionCommit !== headCommit(repository)
+        || terminal.failureEvidence.checksHash !== pause.checksHash
+        || terminal.failureEvidence.dirtyWorktreeHash !== pause.dirtyWorktreeHash
+        || JSON.stringify(dirty) !== JSON.stringify([...pause.dirtyFiles].sort()))
+        return false;
+    const allowedWrites = effectiveStepAllowedWrites(store, task, stepId);
+    for (const file of dirty) {
+        if (!pathAllowed(file, allowedWrites) || pathAllowed(file, step.forbiddenScope))
+            return false;
+        // Do not admit symlinks (including dangling links) or directory substitutions.
+        try {
+            if (!lstatSync(path.join(repository, file)).isFile())
+                return false;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+    }
+    return hashDirtyWorktree(repository, dirty) === pause.dirtyWorktreeHash;
+}
+//# sourceMappingURL=corrective-decision-boundary.js.map

package/dist/src/alpha6/corrective-decision-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corrective-decision-boundary.js","sourceRoot":"","sources":["../../../src/alpha6/corrective-decision-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAErF,kGAAkG;AAClG,MAAM,UAAU,kCAAkC,CAChD,KAAqB,EAAE,UAAkB,EAAE,IAAe,EAAE,MAAc;IAE1E,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IACpF,6EAA6E;IAC7E,0EAA0E;IAC1E,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,IAAI,CAAC,cAAc,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5G,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,EAAE,YAAY,CAAC;IACjC,IAAI,IAAI,EAAE,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,eAAe;WACpD,QAAQ,CAAC,eAAe,CAAC,gBAAgB,KAAK,UAAU,CAAC,UAAU,CAAC;WACpE,QAAQ,CAAC,eAAe,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;WACxD,QAAQ,CAAC,eAAe,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WACtE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,aAAa,GAAG,0BAA0B,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9F,+EAA+E;QAC/E,IAAI,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,KAAK,CAAC;QAAC,CAAC;QAC3E,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IACxF,CAAC;IACD,OAAO,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,KAAK,CAAC,iBAAiB,CAAC;AAC1E,CAAC"}

package/dist/src/alpha6/downstream-proof.d.ts

@@ -1,4 +1,4 @@
-import type { DownstreamProofInvalidationEvent, DownstreamProofReplanCompatibility, DownstreamProofReplanRecoveryEvent, TaskState } from '../contracts.js';
+import type { DownstreamProofInvalidationEvent, DownstreamProofReplanRecoveryEvent, TaskState } from '../contracts.js';
 import type { FileStateStore } from '../state/store.js';
 export interface DownstreamProofInvalidatedStep {
     stepId: string;
@@ -20,19 +20,6 @@ export interface PreparedDownstreamProofInvalidation {
     event: DownstreamProofInvalidationEvent;
     postimage: string;
 }
-export interface DownstreamProofReplanRecoveryAssessment {
-    applicable: boolean;
-    eligible: boolean;
-    invalidation: DownstreamProofInvalidationEvent | null;
-    rebind: TaskState['knowledgeRebinds'][number] | null;
-    compatibility: DownstreamProofReplanCompatibility | null;
-    dependencyRecoveryCommit: string | null;
-    blockers: string[];
-}
-export interface PreparedDownstreamProofReplanRecovery {
-    event: DownstreamProofReplanRecoveryEvent;
-    postimage: string;
-}
 export interface DownstreamProofCarryoverAssessment {
     applicable: boolean;
     eligible: boolean;
@@ -52,17 +39,6 @@ export declare function prepareDownstreamProofInvalidation(store: FileStateStore
 }, now: Date): PreparedDownstreamProofInvalidation;
 export declare function readDownstreamProofInvalidations(store: FileStateStore, task: TaskState): DownstreamProofInvalidationEvent[];
 export declare function downstreamProofInvalidationSidecar(): string;
-export declare function assessDownstreamProofReplanRecovery(store: FileStateStore, repositoryRoot: string, task: TaskState, options?: {
-    historyBoundary?: string;
-    preservedHeadCommit?: string;
-    currentPlanRiskAuditExists?: boolean;
-}): DownstreamProofReplanRecoveryAssessment;
-export declare function prepareDownstreamProofReplanRecovery(store: FileStateStore, resultTask: TaskState, assessment: DownstreamProofReplanRecoveryAssessment, input: {
-    previousTaskRevision: number;
-    actor: string;
-    reason: string;
-}, now: Date): PreparedDownstreamProofReplanRecovery;
 export declare function readDownstreamProofReplanRecoveries(store: FileStateStore, task: TaskState): DownstreamProofReplanRecoveryEvent[];
-export declare function downstreamProofReplanRecoverySidecar(): string;
 export declare function assessDownstreamProofCarryover(store: FileStateStore, repositoryRoot: string, task: TaskState, stepId: string): DownstreamProofCarryoverAssessment;
 export declare function hashDirtyWorktree(repositoryRoot: string, dirtyFiles: readonly string[]): string;

package/dist/src/alpha6/downstream-proof.js

@@ -146,169 +146,9 @@ export function readDownstreamProofInvalidations(store, task) {
 export function downstreamProofInvalidationSidecar() {
     return SIDECAR;
 }
-export function assessDownstreamProofReplanRecovery(store, repositoryRoot, task, options = {}) {
-    const invalidations = readDownstreamProofInvalidations(store, task);
-    const recoveries = readDownstreamProofReplanRecoveries(store, task);
-    const invalidation = invalidations.at(-1) ?? null;
-    const rebind = task.knowledgeRebinds.at(-1) ?? null;
-    if (invalidation && recoveries.some((event) => event.invalidationEventId === invalidation.eventId
-        && event.resultTaskRevision <= task.revision)) {
-        return emptyReplanAssessment();
-    }
-    if (!invalidation || !rebind
-        || rebind.previousPlanHash !== invalidation.planHash
-        || rebind.reboundPlanHash !== task.planHash
-        || Date.parse(rebind.recordedAt) <= Date.parse(invalidation.recordedAt)) {
-        return emptyReplanAssessment();
-    }
-    const blockers = [];
-    const dirtyFiles = changedFiles(repositoryRoot).sort();
-    let dirtyWorktreeHash = null;
-    try {
-        dirtyWorktreeHash = hashDirtyWorktree(repositoryRoot, dirtyFiles);
-    }
-    catch (error) {
-        blockers.push(error instanceof Error ? error.message : String(error));
-    }
-    const sourceBinding = [...(task.dependencyProvenanceRecoveries ?? [])]
-        .reverse()
-        .map((record) => record.activeDownstreamProof)
-        .find((binding) => binding
-        && binding.planHash === invalidation.planHash
-        && binding.activeStepId === invalidation.activeStepId
-        && JSON.stringify([...binding.dirtyFiles].sort()) === JSON.stringify(invalidation.dirtyFiles)
-        && JSON.stringify([...binding.invalidatedStepIds].sort())
-            === JSON.stringify(invalidation.invalidatedSteps.map((step) => step.stepId).sort()))
-        ?? null;
-    if (!sourceBinding) {
-        blockers.push('No dependency provenance record preserves the exact active downstream-proof dirty-set binding.');
-    }
-    else if (dirtyWorktreeHash !== sourceBinding.dirtyWorktreeHash) {
-        blockers.push('Dirty file content changed after the downstream-proof invalidation boundary.');
-    }
-    if (JSON.stringify(dirtyFiles) !== JSON.stringify(invalidation.dirtyFiles)) {
-        blockers.push('Dirty files changed after the downstream-proof invalidation boundary.');
-    }
-    const registeredCompatibility = [...(task.dependencyProvenanceRecoveries ?? [])]
-        .reverse()
-        .find((record) => record.downstreamProofReplan?.invalidationEventId === invalidation.eventId
-        && record.downstreamProofReplan.reboundPlanHash === task.planHash) ?? null;
-    const sourceHead = options.preservedHeadCommit
-        ?? registeredCompatibility?.parentCommitSha
-        ?? headCommit(repositoryRoot);
-    if (sourceHead !== invalidation.preservedHeadCommit) {
-        blockers.push('The recovery history boundary no longer matches the downstream-proof preserved HEAD.');
-    }
-    if (task.workspaceOwner !== 'local')
-        blockers.push('Recovery requires the recorded local Task workspace.');
-    if (!task.taskBranch || currentBranch(repositoryRoot) !== task.taskBranch) {
-        blockers.push('Current branch must equal the recorded Task branch.');
-    }
-    if (task.status !== 'awaiting_execution_authorization') {
-        blockers.push('The legacy stranded Task must still be awaiting execution authorization.');
-    }
-    if (!task.planHash || task.planHash !== rebind.reboundPlanHash) {
-        blockers.push('The current Plan must be the exact mechanically rebound legacy Plan.');
-    }
-    if (task.knowledgeMapRevision !== rebind.toKnowledgeMapRevision
-        || task.knowledgeMapHash !== rebind.toKnowledgeMapHash) {
-        blockers.push('The current Project Knowledge binding must match the legacy rebind record.');
-    }
-    for (const invalidated of invalidation.invalidatedSteps) {
-        const step = task.steps.find((candidate) => candidate.id === invalidated.stepId);
-        if (!step || step.status !== 'planned' || step.evidence !== null
-            || !(task.invalidatedStepCommits ?? []).includes(invalidated.evidenceCommit)) {
-            blockers.push(`Invalidated predecessor ${invalidated.stepId} no longer has the preserved planned/no-evidence posture.`);
-        }
-    }
-    const activeStep = task.steps.find((step) => step.id === invalidation.activeStepId);
-    if (!activeStep || activeStep.status !== 'blocked' || activeStep.evidence !== null) {
-        blockers.push(`Former proof Step ${invalidation.activeStepId} no longer has the preserved blocked/no-evidence posture.`);
-    }
-    if (task.authorizations.some((authorization) => authorization.kind === 'execution'
-        && authorization.decision === 'approved'
-        && authorization.planHash === task.planHash)) {
-        blockers.push('The rebound Plan has already received execution authorization.');
-    }
-    if (options.currentPlanRiskAuditExists) {
-        blockers.push('The rebound Plan already has a recorded current Plan Risk Audit.');
-    }
-    const expectedRevision = invalidation.resultTaskRevision + (registeredCompatibility ? 2 : 1);
-    if (task.revision !== expectedRevision) {
-        blockers.push('Task revision contains changes beyond the exact invalidation, accidental rebind, and optional dependency registration sequence.');
-    }
-    if (registeredCompatibility) {
-        if (registeredCompatibility.commitSha !== headCommit(repositoryRoot)
-            || registeredCompatibility.downstreamProofReplan?.dirtyWorktreeHash !== dirtyWorktreeHash) {
-            blockers.push('The registered dependency compatibility record does not bind the current HEAD and dirty worktree.');
-        }
-    }
-    else if (!options.historyBoundary && headCommit(repositoryRoot) !== invalidation.preservedHeadCommit) {
-        blockers.push('Unregistered Git history exists after the downstream-proof invalidation boundary.');
-    }
-    try {
-        validateTaskHistory(repositoryRoot, task, options.historyBoundary);
-    }
-    catch (error) {
-        blockers.push(error instanceof Error ? error.message : String(error));
-    }
-    const compatibility = sourceBinding && dirtyWorktreeHash
-        ? {
-            invalidationEventId: invalidation.eventId,
-            activeStepId: invalidation.activeStepId,
-            sourcePlanHash: invalidation.planHash,
-            reboundPlanHash: rebind.reboundPlanHash,
-            knowledgeRebindRecordedAt: rebind.recordedAt,
-            dirtyFiles: [...invalidation.dirtyFiles],
-            dirtyWorktreeHash,
-            invalidatedStepIds: invalidation.invalidatedSteps.map((step) => step.stepId).sort(),
-        }
-        : null;
-    return {
-        applicable: true,
-        eligible: blockers.length === 0 && compatibility !== null,
-        invalidation,
-        rebind,
-        compatibility,
-        dependencyRecoveryCommit: registeredCompatibility?.commitSha ?? null,
-        blockers,
-    };
-}
-export function prepareDownstreamProofReplanRecovery(store, resultTask, assessment, input, now) {
-    if (!assessment.eligible || !assessment.invalidation || !assessment.rebind || !assessment.compatibility) {
-        throw new WorkflowError('TRANSITION_BLOCKED', 'Downstream-proof replan compatibility assessment is not eligible.');
-    }
-    const actor = normalizeRequired(input.actor, 'Recovery actor');
-    const reason = normalizeRequired(input.reason, 'Recovery reason');
-    const events = readDownstreamProofReplanRecoveries(store, resultTask);
-    const prepared = prepareSidecarAppend(events, {
-        eventId: `DPR-${createUlid(now.getTime())}`,
-        recordedAt: now.toISOString(),
-        taskId: resultTask.id,
-        previousTaskRevision: input.previousTaskRevision,
-        resultTaskRevision: resultTask.revision,
-        invalidationEventId: assessment.invalidation.eventId,
-        invalidationPlanHash: assessment.invalidation.planHash,
-        reboundPlanHash: assessment.rebind.reboundPlanHash,
-        knowledgeRebindRecordedAt: assessment.rebind.recordedAt,
-        dirtyFiles: [...assessment.compatibility.dirtyFiles],
-        dirtyWorktreeHash: assessment.compatibility.dirtyWorktreeHash,
-        preservedHeadCommit: headCommit(resultTask.repositoryRoot),
-        dependencyRecoveryCommit: assessment.dependencyRecoveryCommit,
-        actor,
-        reason,
-        packageVersion: PACKAGE_VERSION,
-    }, {
-        validateEvent: (event) => validateReplanRecoveryEvent(event, resultTask),
-    });
-    return { event: prepared.event, postimage: prepared.content };
-}
 export function readDownstreamProofReplanRecoveries(store, task) {
     return store.readSidecarEvents(store.taskRoot(task.projectId, task.id), REPLAN_RECOVERY_SIDECAR, { validateEvent: (event) => validateReplanRecoveryEvent(event, task) });
 }
-export function downstreamProofReplanRecoverySidecar() {
-    return REPLAN_RECOVERY_SIDECAR;
-}
 export function assessDownstreamProofCarryover(store, repositoryRoot, task, stepId) {
     const invalidation = readDownstreamProofInvalidations(store, task).at(-1) ?? null;
     if (!invalidation || !task.planHash || task.planHash === invalidation.planHash) {
@@ -383,17 +223,6 @@ export function assessDownstreamProofCarryover(store, repositoryRoot, task, step
         blockers,
     };
 }
-function emptyReplanAssessment() {
-    return {
-        applicable: false,
-        eligible: false,
-        invalidation: null,
-        rebind: null,
-        compatibility: null,
-        dependencyRecoveryCommit: null,
-        blockers: [],
-    };
-}
 function emptyAssessment() {
     return {
         applicable: false,