codex-workflow-v2 2.0.0-beta.2 → 2.0.0-beta.4

package/dist/src/lifecycle/corrective-replan-authority.js

@@ -0,0 +1,139 @@
+import { createHash } from 'node:crypto';
+import { correctiveReplanBindingManifest } from './corrective-replan-binding-manifest.js';
+import { hashCanonical } from './fingerprint.js';
+import { deepFreeze } from './immutable.js';
+const eligibleRole = (input) => roleVerdict(input);
+const authorValidator = (input) => identityVerdict(input);
+const authorRiskAuditor = (input) => identityVerdict(input);
+const authorHumanPrincipal = (input) => identityVerdict(input);
+export const installedAuthoritySemanticBindings = deepFreeze([
+    binding('authority-role-evaluator.corrective-replan.eligible-role', 'authority-role-evaluator.corrective-replan.eligible-role', 'role-evaluator', eligibleRole),
+    binding('identity-comparator.corrective-replan.author-validator', 'identity-comparator.corrective-replan.author-validator', 'identity-comparator', authorValidator),
+    binding('identity-comparator.corrective-replan.author-risk-auditor', 'identity-comparator.corrective-replan.author-risk-auditor', 'identity-comparator', authorRiskAuditor),
+    binding('identity-comparator.corrective-replan.author-human-principal', 'identity-comparator.corrective-replan.author-human-principal', 'identity-comparator', authorHumanPrincipal),
+]);
+const ref = (id) => ({ id, version: 1 });
+const constraints = [
+    constraint('constraint.corrective-replan.author-not-validator', 'author-validator', 'actor.validator'),
+    constraint('constraint.corrective-replan.author-not-risk-auditor', 'author-risk-auditor', 'actor.risk-auditor'),
+    constraint('constraint.corrective-replan.author-not-human-principal', 'author-human-principal', 'principal.human'),
+];
+/** Diagnostic-only assessment of the installed static tuple. It cannot issue a Core handle. */
+export function assessCorrectiveReplanAuthorityTuple(tuple) {
+    const value = record(tuple);
+    const issues = [];
+    extraFields(value, ['transitionId', 'actor', 'eligibleRoles', 'roleEvaluator', 'humanPrincipal', 'capability', 'delegation', 'ownership', 'constraints', 'priorPlanAuthorization'], '/', 'authority.tuple.extra-field', issues);
+    extraFields(record(value.actor), ['identity', 'basis'], '/actor/', 'authority.tuple.extra-field', issues);
+    extraFields(record(value.humanPrincipal), ['identity', 'basis', 'kind'], '/humanPrincipal/', 'authority.tuple.extra-field', issues);
+    extraFields(record(value.capability), ['id', 'version', 'source', 'issuer', 'transitionId', 'scope', 'bindingManifest'], '/capability/', 'authority.tuple.extra-field', issues);
+    extraFields(record(value.priorPlanAuthorization), ['disposition', 'authority'], '/priorPlanAuthorization/', 'authority.tuple.extra-field', issues);
+    check(value, '/transitionId', 'authority.transition.mismatch', 'task.plan.corrective-replan', issues);
+    check(value, '/actor/identity', 'authority.actor.identity-mismatch', ref('identity.actor'), issues);
+    check(value, '/actor/basis', 'authority.actor.basis-mismatch', ref('principal-basis.human-confirmation'), issues);
+    check(value, '/eligibleRoles', 'authority.role-evaluator.mismatch', ['delivery-coordinator', 'technical-planner'], issues);
+    check(value, '/roleEvaluator', 'authority.role-evaluator.mismatch', ref('authority-role-evaluator.corrective-replan.eligible-role'), issues);
+    check(value, '/humanPrincipal/identity', 'authority.principal.identity-mismatch', ref('identity.human-principal'), issues);
+    check(value, '/humanPrincipal/basis', 'authority.principal.basis-mismatch', ref('principal-basis.human-confirmation'), issues);
+    check(value, '/humanPrincipal/kind', 'authority.principal.kind-mismatch', 'human', issues);
+    const capability = get(value, '/capability');
+    if (!isRecord(capability))
+        issue(issues, 'authority.capability.missing', '/capability');
+    else {
+        check(value, '/capability/id', 'authority.capability.id-mismatch', 'capability.task.corrective-replan', issues);
+        check(value, '/capability/version', 'authority.capability.version-mismatch', 1, issues);
+        check(value, '/capability/source', 'authority.capability.source-mismatch', ref('authority-source.human-confirmation'), issues);
+        check(value, '/capability/issuer', 'authority.capability.issuer-mismatch', ref('identity.human-principal'), issues);
+        check(value, '/capability/transitionId', 'authority.capability.transition-mismatch', 'task.plan.corrective-replan', issues);
+        check(value, '/capability/scope', 'authority.capability.scope-mismatch', { entity: 'task', task: 'taskId', guardedStep: 'guardedStepId' }, issues);
+        if (capability.bindingManifest !== correctiveReplanBindingManifest)
+            issue(issues, 'authority.capability.binding-manifest-mismatch', '/capability/bindingManifest');
+    }
+    check(value, '/delegation', 'authority.delegation.not-forbidden', ref('delegation.forbidden'), issues);
+    check(value, '/ownership', 'authority.ownership.not-clear', { c1Claim: 'none', writerLease: 'none' }, issues);
+    const rows = Array.isArray(value.constraints) ? value.constraints : [];
+    const seen = new Set();
+    rows.forEach((entry, index) => {
+        const id = isRecord(entry) && typeof entry.constraintId === 'string' ? entry.constraintId : '';
+        if (seen.has(id))
+            issue(issues, 'authority.constraint.duplicate', `/constraints/${index}/constraintId`);
+        else if (id === 'constraint.corrective-replan.validator-not-risk-auditor')
+            issue(issues, 'authority.constraint.forbidden-validator-risk', `/constraints/${index}`);
+        else if (!constraints.some((expected) => expected.constraintId === id))
+            issue(issues, 'authority.constraint.unknown', `/constraints/${index}/constraintId`);
+        seen.add(id);
+        if (isRecord(entry))
+            extraFields(entry, ['constraintId', 'comparator', 'operands', 'relation', 'missing', 'enforcement'], `/constraints/${index}/`, 'authority.constraint.extra-field', issues);
+    });
+    constraints.forEach((expected, index) => {
+        const actualIndex = rows.findIndex((entry) => isRecord(entry) && entry.constraintId === expected.constraintId);
+        if (actualIndex < 0)
+            return issue(issues, 'authority.constraint.missing', `/constraints/${index}`);
+        for (const field of ['comparator', 'operands', 'relation', 'missing', 'enforcement']) {
+            check(value, `/constraints/${actualIndex}/${field}`, `authority.constraint.${field === 'comparator' ? 'comparator-id' : field}-mismatch`, expected[field], issues, field === 'comparator' ? `/constraints/${index}/${field}/id` : `/constraints/${index}/${field}`);
+            if (field === 'comparator')
+                check(value, `/constraints/${actualIndex}/comparator/version`, 'authority.constraint.comparator-version-mismatch', 1, issues, `/constraints/${index}/comparator/version`);
+        }
+    });
+    check(value, '/priorPlanAuthorization/disposition', 'authority.plan-bound-grant-active', 'superseded', issues);
+    check(value, '/priorPlanAuthorization/authority', 'authority.plan-bound-grant-active', 'none', issues);
+    const ordered = [...issues].sort((a, b) => `${a.path}\0${a.issueId}`.localeCompare(`${b.path}\0${b.issueId}`));
+    const blockers = [];
+    if (ordered.some((entry) => entry.issueId === 'authority.capability.missing'))
+        blockers.push('static.authority.exact-capability-missing');
+    if (ordered.some((entry) => entry.issueId === 'authority.plan-bound-grant-active'))
+        blockers.push('static.authority.plan-bound-grant-not-superseded');
+    if (ordered.length > 0)
+        blockers.push('static.authority.exact-tuple-invalid');
+    const content = { staticTupleValid: ordered.length === 0, blockers: [...new Set(blockers)], issues: ordered,
+        bindings: installedAuthoritySemanticBindings };
+    return deepFreeze({ ...content, reportHash: hashCanonical({ ...content, bindings: content.bindings.map(projectBinding) }) });
+}
+function binding(id, suffix, kind, callable) {
+    return { id, version: 1, kind, implementationId: `implementation.${suffix}`, implementationVersion: 1, wiring: 'invoked', callable };
+}
+export function projectAuthoritySemanticBundle(bindings) {
+    const projection = { bundleVersion: 2, bindingManifest: correctiveReplanBindingManifest, bindings: bindings.map(projectBinding) };
+    return deepFreeze({ ...projection, bundleSha256: createHash('sha256').update(JSON.stringify(projection)).digest('hex') });
+}
+function constraint(constraintId, suffix, right) {
+    return { constraintId,
+        comparator: ref(`identity-comparator.corrective-replan.${suffix}`), operands: ['actor.author', right],
+        relation: 'not-equal', missing: 'block', enforcement: 'static-and-runtime' };
+}
+function roleVerdict(input) {
+    const value = record(input);
+    const roles = ['delivery-coordinator', 'technical-planner'];
+    if (!/^[a-f0-9]{64}$/.test(String(value.actorIdentityHash ?? '')) || !sameSet(value.eligibleRoles, roles)
+        || typeof value.actorRole !== 'string' || value.actorRole.length === 0)
+        return verdict(false, 'ROLE_INPUT_INVALID');
+    return roles.includes(value.actorRole) ? verdict(true, null) : verdict(false, 'ROLE_NOT_ELIGIBLE');
+}
+function identityVerdict(input) {
+    const value = record(input);
+    const valid = /^[a-f0-9]{64}$/;
+    if (typeof value.leftIdentityHash !== 'string' || typeof value.rightIdentityHash !== 'string'
+        || !valid.test(value.leftIdentityHash) || !valid.test(value.rightIdentityHash))
+        return verdict(false, 'IDENTITY_INPUT_INVALID');
+    return value.leftIdentityHash !== value.rightIdentityHash ? verdict(true, null) : verdict(false, 'IDENTITY_CONSTRAINT_VIOLATED');
+}
+function verdict(passed, reasonCode) { return deepFreeze({ passed, blocked: !passed, reasonCode }); }
+function projectBinding({ callable: _callable, wiring: _wiring, ...binding }) { return binding; }
+function record(value) { return isRecord(value) ? value : {}; }
+function isRecord(value) { return value !== null && typeof value === 'object' && !Array.isArray(value); }
+function get(value, path) {
+    return path.split('/').filter(Boolean).reduce((cursor, key) => Array.isArray(cursor) && /^\d+$/.test(key) ? cursor[Number(key)] : isRecord(cursor) ? cursor[key] : undefined, value);
+}
+function check(value, path, issueId, expected, issues, reportedPath = path) {
+    const actual = get(value, path);
+    if (actual === undefined || hashCanonical(actual) !== hashCanonical(expected))
+        issue(issues, issueId, reportedPath);
+}
+function sameSet(value, expected) {
+    return Array.isArray(value) && value.length === expected.length
+        && new Set(value).size === expected.length && value.every((entry) => typeof entry === 'string' && expected.includes(entry));
+}
+function extraFields(value, allowed, prefix, issueId, issues) {
+    Object.keys(value).filter((key) => !allowed.includes(key)).forEach((key) => issue(issues, issueId, `${prefix}${key}`));
+}
+function issue(issues, issueId, path) { issues.push({ issueId, path, message: `${issueId} at ${path}.` }); }
+//# sourceMappingURL=corrective-replan-authority.js.map

package/dist/src/lifecycle/corrective-replan-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corrective-replan-authority.js","sourceRoot":"","sources":["../../../src/lifecycle/corrective-replan-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAiB5C,MAAM,YAAY,GAAsB,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AACtE,MAAM,eAAe,GAAsB,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAC7E,MAAM,iBAAiB,GAAsB,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAC/E,MAAM,oBAAoB,GAAsB,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,kCAAkC,GAAwC,UAAU,CAAC;IAChG,OAAO,CAAC,0DAA0D,EAAE,0DAA0D,EAAE,gBAAgB,EAAE,YAAY,CAAC;IAC/J,OAAO,CAAC,wDAAwD,EAAE,wDAAwD,EAAE,qBAAqB,EAAE,eAAe,CAAC;IACnK,OAAO,CAAC,2DAA2D,EAAE,2DAA2D,EAAE,qBAAqB,EAAE,iBAAiB,CAAC;IAC3K,OAAO,CAAC,8DAA8D,EAAE,8DAA8D,EAAE,qBAAqB,EAAE,oBAAoB,CAAC;CACrL,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AACjD,MAAM,WAAW,GAAG;IAClB,UAAU,CAAC,mDAAmD,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;IACtG,UAAU,CAAC,sDAAsD,EAAE,qBAAqB,EAAE,oBAAoB,CAAC;IAC/G,UAAU,CAAC,yDAAyD,EAAE,wBAAwB,EAAE,iBAAiB,CAAC;CACnH,CAAC;AAEF,+FAA+F;AAC/F,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,MAAM,GAAqB,EAAE,CAAC;IACjE,WAAW,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,wBAAwB,CAAC,EAChL,GAAG,EAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;IAC7C,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IAC1G,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACpI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,cAAc,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IAChL,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACnJ,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACtG,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,mCAAmC,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpG,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,gCAAgC,EAAE,GAAG,CAAC,oCAAoC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClH,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,mCAAmC,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3H,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,mCAAmC,EAAE,GAAG,CAAC,0DAA0D,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7I,KAAK,CAAC,KAAK,EAAE,0BAA0B,EAAE,uCAAuC,EAAE,GAAG,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3H,KAAK,CAAC,KAAK,EAAE,uBAAuB,EAAE,oCAAoC,EAAE,GAAG,CAAC,oCAAoC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/H,KAAK,CAAC,KAAK,EAAE,sBAAsB,EAAE,mCAAmC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,KAAK,CAAC,MAAM,EAAE,8BAA8B,EAAE,aAAa,CAAC,CAAC;SACnF,CAAC;QACJ,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,mCAAmC,EAAE,MAAM,CAAC,CAAC;QAChH,KAAK,CAAC,KAAK,EAAE,qBAAqB,EAAE,uCAAuC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACxF,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE,sCAAsC,EAAE,GAAG,CAAC,qCAAqC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/H,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE,sCAAsC,EAAE,GAAG,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAAC;QACpH,KAAK,CAAC,KAAK,EAAE,0BAA0B,EAAE,0CAA0C,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAC5H,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,qCAAqC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC;QACnJ,IAAI,UAAU,CAAC,eAAe,KAAK,+BAA+B;YAChE,KAAK,CAAC,MAAM,EAAE,gDAAgD,EAAE,6BAA6B,CAAC,CAAC;IACnG,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,oCAAoC,EAAE,GAAG,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;IACvG,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,+BAA+B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9G,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,KAAK,CAAC,MAAM,EAAE,gCAAgC,EAAE,gBAAgB,KAAK,eAAe,CAAC,CAAC;aACnG,IAAI,EAAE,KAAK,yDAAyD;YAAE,KAAK,CAAC,MAAM,EAAE,+CAA+C,EAAE,gBAAgB,KAAK,EAAE,CAAC,CAAC;aAC9J,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,EAAE,CAAC;YAAE,KAAK,CAAC,MAAM,EAAE,8BAA8B,EAAE,gBAAgB,KAAK,eAAe,CAAC,CAAC;QAC5J,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,WAAW,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,EACtH,gBAAgB,KAAK,GAAG,EAAE,kCAAkC,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IACH,WAAW,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/G,IAAI,WAAW,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,EAAE,8BAA8B,EAAE,gBAAgB,KAAK,EAAE,CAAC,CAAC;QACnG,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,CAAU,EAAE,CAAC;YAC9F,KAAK,CAAC,KAAK,EAAE,gBAAgB,WAAW,IAAI,KAAK,EAAE,EAAE,wBAAwB,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAC/J,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;YACnG,IAAI,KAAK,KAAK,YAAY;gBAAE,KAAK,CAAC,KAAK,EAAE,gBAAgB,WAAW,qBAAqB,EAAE,kDAAkD,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,KAAK,qBAAqB,CAAC,CAAC;QACxM,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,qCAAqC,EAAE,mCAAmC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAC/G,KAAK,CAAC,KAAK,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/G,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,8BAA8B,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC1I,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,mCAAmC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACtJ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO;QACzG,QAAQ,EAAE,kCAAkC,EAAE,CAAC;IACjD,OAAO,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/H,CAAC;AAED,SAAS,OAAO,CAAC,EAAU,EAAE,MAAc,EAAE,IAAsC,EAAE,QAA2B;IAC9G,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,MAAM,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACvI,CAAC;AACD,MAAM,UAAU,8BAA8B,CAAC,QAA6C;IAC1F,MAAM,UAAU,GAAG,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,EAAE,+BAA+B,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;IAClI,OAAO,UAAU,CAAC,EAAE,GAAG,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC5H,CAAC;AACD,SAAS,UAAU,CAAC,YAAoB,EAAE,MAAc,EAAE,KAAa;IAAI,OAAO,EAAE,YAAY;QAC9F,UAAU,EAAE,GAAG,CAAC,yCAAyC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC;QACrG,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;AAAC,CAAC;AACjF,SAAS,WAAW,CAAC,KAAc;IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;IAC9H,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC;WACpG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACtH,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;AAAC,CAAC;AACvG,SAAS,eAAe,CAAC,KAAc;IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,gBAAgB,CAAC;IACrG,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;WACxF,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;AAAC,CAAC;AACrI,SAAS,OAAO,CAAC,MAAe,EAAE,UAAyB,IAAI,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7H,SAAS,cAAc,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAA4B,IAAI,OAAO,OAAO,CAAC,CAAC,CAAC;AAC3H,SAAS,MAAM,CAAC,KAAc,IAAgB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACpF,SAAS,QAAQ,CAAC,KAAc,IAAyB,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvI,SAAS,GAAG,CAAC,KAAiB,EAAE,IAAY;IAAa,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAU,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAC9H,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAAC,CAAC;AAC1H,SAAS,KAAK,CAAC,KAAiB,EAAE,IAAY,EAAE,OAAe,EAAE,QAAiB,EAAE,MAAwB,EAAE,YAAY,GAAG,IAAI;IAC/H,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AACtH,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,QAA2B;IAAa,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;WACnI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAAC,CAAC;AAChI,SAAS,WAAW,CAAC,KAAiB,EAAE,OAA0B,EAAE,MAAc,EAAE,OAAe,EAAE,MAAwB;IAC3H,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;AACzH,CAAC;AACD,SAAS,KAAK,CAAC,MAAwB,EAAE,OAAe,EAAE,IAAY,IAAU,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC"}

package/dist/src/lifecycle/corrective-replan-binding-manifest.d.ts

@@ -0,0 +1,21 @@
+type ValueKind = 'literal' | 'sha256' | 'safe-integer' | 'entity-id' | 'git-oid' | 'actor-role';
+type Canonicalization = 'exact' | 'lowercase-hex' | 'safe-nonnegative-integer' | 'nfc-trim' | 'lowercase-git-oid' | 'registered-enum';
+export declare const correctiveReplanBindingManifest: {
+    manifestSha256: string;
+    id: "binding-manifest.corrective-replan.exact-v1";
+    version: 1;
+    rows: {
+        ordinal: number;
+        bindingId: string;
+        projection: {
+            id: `projection.${string}`;
+            version: 1;
+        };
+        fieldId: `field.${string}`;
+        valueKind: ValueKind;
+        canonicalization: Canonicalization;
+        receiptPath: `/binding/values/${string}`;
+    }[];
+};
+export declare const correctiveReplanBindingIds: string[];
+export {};

package/dist/src/lifecycle/corrective-replan-binding-manifest.js

@@ -0,0 +1,35 @@
+import { hashCanonical } from './canonical-hash.js';
+import { deepFreeze } from './immutable.js';
+const ref = (id) => ({ id, version: 1 });
+const row = (bindingId, projection, fieldId, valueKind, canonicalization) => ({
+    ordinal: rowsOrdinal++, bindingId, projection: ref(projection), fieldId, valueKind, canonicalization,
+    receiptPath: `/binding/values/${bindingId}`,
+});
+let rowsOrdinal = 0;
+const protocol = (id, field, kind, canonical) => row(id, 'projection.corrective-replan.protocol', field, kind, canonical);
+const state = (id, field, kind, canonical) => row(id, 'projection.corrective-replan.state', field, kind, canonical);
+const candidate = (id, field) => row(id, 'projection.corrective-replan.candidate', field, 'sha256', 'lowercase-hex');
+const authority = (id, field, kind, canonical) => row(id, 'projection.corrective-replan.authority', field, kind, canonical);
+const rows = [
+    protocol('transitionId', 'field.transition-id', 'literal', 'exact'), protocol('runtimeFingerprint', 'field.runtime-fingerprint', 'sha256', 'lowercase-hex'),
+    protocol('catalogHash', 'field.catalog-hash', 'sha256', 'lowercase-hex'), protocol('lifecycleEpoch', 'field.lifecycle-epoch', 'safe-integer', 'safe-nonnegative-integer'),
+    state('taskId', 'field.task-id', 'entity-id', 'nfc-trim'), state('revision', 'field.task-revision', 'safe-integer', 'safe-nonnegative-integer'),
+    state('currentPlanHash', 'field.current-plan-hash', 'sha256', 'lowercase-hex'), state('briefHash', 'field.brief-hash', 'sha256', 'lowercase-hex'),
+    state('knowledgeRevision', 'field.knowledge-revision', 'safe-integer', 'safe-nonnegative-integer'), state('knowledgeHash', 'field.knowledge-hash', 'sha256', 'lowercase-hex'),
+    state('gitHead', 'field.git-head', 'git-oid', 'lowercase-git-oid'), state('guardedStepId', 'field.guarded-step-id', 'entity-id', 'nfc-trim'),
+    state('correctiveDecisionEventId', 'field.corrective-decision-event-id', 'entity-id', 'nfc-trim'), state('correctiveDecisionHash', 'field.corrective-decision-hash', 'sha256', 'lowercase-hex'),
+    state('attemptCount', 'field.attempt-count', 'safe-integer', 'safe-nonnegative-integer'), state('remediationTailHash', 'field.remediation-tail-hash', 'sha256', 'lowercase-hex'),
+    candidate('candidatePlanHash', 'field.candidate-plan-hash'), candidate('candidateStepSetHash', 'field.candidate-step-set-hash'),
+    candidate('planAuthorIdentityHash', 'field.plan-author-identity-hash'), candidate('planValidationHash', 'field.plan-validation-hash'),
+    candidate('planValidatorIdentityHash', 'field.plan-validator-identity-hash'), candidate('riskAuditHash', 'field.risk-audit-hash'), candidate('riskAuditorIdentityHash', 'field.risk-auditor-identity-hash'),
+    authority('actorIdentityHash', 'field.actor-identity-hash', 'sha256', 'lowercase-hex'), authority('actorRole', 'field.actor-role', 'actor-role', 'registered-enum'),
+    authority('humanPrincipalIdentityHash', 'field.human-principal-identity-hash', 'sha256', 'lowercase-hex'), authority('capabilityId', 'field.capability-id', 'literal', 'exact'),
+    authority('capabilityVersion', 'field.capability-version', 'safe-integer', 'safe-nonnegative-integer'),
+];
+const identity = { id: 'binding-manifest.corrective-replan.exact-v1', version: 1, rows };
+export const correctiveReplanBindingManifest = deepFreeze({
+    ...identity,
+    manifestSha256: hashCanonical({ ...identity, rows: [...rows].sort((a, b) => a.bindingId.localeCompare(b.bindingId)) }),
+});
+export const correctiveReplanBindingIds = deepFreeze(rows.map(({ bindingId }) => bindingId));
+//# sourceMappingURL=corrective-replan-binding-manifest.js.map

package/dist/src/lifecycle/corrective-replan-binding-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corrective-replan-binding-manifest.js","sourceRoot":"","sources":["../../../src/lifecycle/corrective-replan-binding-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,MAAM,GAAG,GAAG,CAAqB,EAAO,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAU,EAAE,CAAC,CAAC;AAG3E,MAAM,GAAG,GAAG,CAAC,SAAiB,EAAE,UAAwB,EAAE,OAA0B,EAAE,SAAoB,EAAE,gBAAkC,EAAE,EAAE,CAAC,CAAC;IAClJ,OAAO,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB;IACpG,WAAW,EAAE,mBAAmB,SAAS,EAAiC;CAC3E,CAAC,CAAC;AACH,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,KAAwB,EAAE,IAAe,EAAE,SAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,uCAAuC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AAClL,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,KAAwB,EAAE,IAAe,EAAE,SAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,oCAAoC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AAC5K,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,KAAwB,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,wCAAwC,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AAChJ,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,KAAwB,EAAE,IAAe,EAAE,SAA2B,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,wCAAwC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AAEpL,MAAM,IAAI,GAAG;IACX,QAAQ,CAAC,cAAc,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,oBAAoB,EAAE,2BAA2B,EAAE,QAAQ,EAAE,eAAe,CAAC;IAC3J,QAAQ,CAAC,aAAa,EAAE,oBAAoB,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,cAAc,EAAE,0BAA0B,CAAC;IACzK,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE,0BAA0B,CAAC;IAC/I,KAAK,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,eAAe,CAAC;IACjJ,KAAK,CAAC,mBAAmB,EAAE,0BAA0B,EAAE,cAAc,EAAE,0BAA0B,CAAC,EAAE,KAAK,CAAC,eAAe,EAAE,sBAAsB,EAAE,QAAQ,EAAE,eAAe,CAAC;IAC7K,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,KAAK,CAAC,eAAe,EAAE,uBAAuB,EAAE,WAAW,EAAE,UAAU,CAAC;IAC5I,KAAK,CAAC,2BAA2B,EAAE,oCAAoC,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,wBAAwB,EAAE,gCAAgC,EAAE,QAAQ,EAAE,eAAe,CAAC;IAC/L,KAAK,CAAC,cAAc,EAAE,qBAAqB,EAAE,cAAc,EAAE,0BAA0B,CAAC,EAAE,KAAK,CAAC,qBAAqB,EAAE,6BAA6B,EAAE,QAAQ,EAAE,eAAe,CAAC;IAChL,SAAS,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,EAAE,SAAS,CAAC,sBAAsB,EAAE,+BAA+B,CAAC;IAC/H,SAAS,CAAC,wBAAwB,EAAE,iCAAiC,CAAC,EAAE,SAAS,CAAC,oBAAoB,EAAE,4BAA4B,CAAC;IACrI,SAAS,CAAC,2BAA2B,EAAE,oCAAoC,CAAC,EAAE,SAAS,CAAC,eAAe,EAAE,uBAAuB,CAAC,EAAE,SAAS,CAAC,yBAAyB,EAAE,kCAAkC,CAAC;IAC3M,SAAS,CAAC,mBAAmB,EAAE,2BAA2B,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,WAAW,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,CAAC;IACnK,SAAS,CAAC,4BAA4B,EAAE,qCAAqC,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,cAAc,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC;IAC/K,SAAS,CAAC,mBAAmB,EAAE,0BAA0B,EAAE,cAAc,EAAE,0BAA0B,CAAC;CACvG,CAAC;AAEF,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,6CAAsD,EAAE,OAAO,EAAE,CAAU,EAAE,IAAI,EAAE,CAAC;AAC3G,MAAM,CAAC,MAAM,+BAA+B,GAAG,UAAU,CAAC;IACxD,GAAG,QAAQ;IACX,cAAc,EAAE,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;CACvH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC"}

package/dist/src/lifecycle/corrective-replan-credential-core.d.ts

@@ -0,0 +1,86 @@
+type JsonRecord = Record<string, unknown>;
+type Reason = 'schema' | 'binding' | 'authority' | 'sod' | 'time' | 'integrity' | 'provenance';
+type Issue = Readonly<{
+    issueId: string;
+    path: string;
+    reasonClass: Reason;
+}>;
+type Result<T> = Readonly<{
+    ok: true;
+    value: Readonly<T>;
+    issues: readonly [];
+}> | Readonly<{
+    ok: false;
+    value: null;
+    issues: readonly Issue[];
+    reportHash: string;
+}>;
+type Verification<T> = Readonly<{
+    valid: true;
+    projection: Readonly<T>;
+    issues: readonly [];
+    reportHash: string;
+}> | Readonly<{
+    valid: false;
+    projection: null;
+    issues: readonly Issue[];
+    reportHash: string;
+}>;
+declare const planBrand: unique symbol;
+declare const challengeBrand: unique symbol;
+declare const confirmationBrand: unique symbol;
+declare const receiptBrand: unique symbol;
+declare const eventBrand: unique symbol;
+export type PlanValidationHandle = Readonly<{
+    [planBrand]: never;
+}>;
+export type HumanChallengeHandle = Readonly<{
+    [challengeBrand]: never;
+}>;
+export type VerifiedConfirmationHandle = Readonly<{
+    [confirmationBrand]: never;
+}>;
+export type ReceiptHandle = Readonly<{
+    [receiptBrand]: never;
+}>;
+export type StoredPlanValidationEventHandle = Readonly<{
+    [eventBrand]: never;
+}>;
+export interface CorrectiveReplanCredentialCorePorts {
+    readonly snapshotSource: {
+        readCorrectiveReplanSnapshot(taskId: string): unknown;
+    };
+    readonly coreClock: {
+        nowMs(): number;
+    };
+    readonly idSource: {
+        nextId(kind: 'plan-validation-attestation' | 'human-challenge' | 'receipt' | 'plan-validation-event'): string;
+    };
+    readonly challengeCodeSource: {
+        issueConfirmationCode(): string;
+    };
+    readonly validationEventTailSource: {
+        readPlanValidationTail(taskId: string): unknown;
+    };
+}
+export interface CorrectiveReplanCredentialKernel {
+    issuePlanValidation(input: unknown): Result<JsonRecord>;
+    issueHumanChallenge(input: unknown): Result<JsonRecord>;
+    confirmHuman(input: unknown): Result<JsonRecord>;
+    issueReceipt(input: unknown): Result<JsonRecord>;
+    verifyReceipt(input: unknown): Verification<JsonRecord>;
+    materializeStoredEvent(input: unknown): Result<JsonRecord>;
+    verifyStoredEvent(input: unknown): Verification<JsonRecord>;
+}
+export interface CredentialFunctionBinding {
+    readonly id: string;
+    readonly version: 1;
+    readonly kind: 'materializer' | 'verifier';
+    readonly implementationId: `implementation.${string}`;
+    readonly implementationVersion: 1;
+    readonly wiring: 'invoked';
+    readonly callable: (issuer: unknown, input: unknown) => unknown;
+}
+export declare function createCorrectiveReplanCredentialKernel(ports: CorrectiveReplanCredentialCorePorts): CorrectiveReplanCredentialKernel;
+export declare const correctiveReplanCredentialFunctionBindings: readonly CredentialFunctionBinding[];
+export {};