foundation-ai-agent 1.0.0

package/dist/s07-identity/session.d.ts

@@ -0,0 +1,53 @@
+/**
+ * S7 — Identity & Consent
+ *
+ * Consent ist nicht ein Subsystem. Consent IST Autorisierung.
+ * observe/assist/act sind OAuth2-Scopes in Verkleidung.
+ *
+ * Session = Wer bist du + Was darfst du.
+ * Kein Auth0. Kein Clerk. UUID-Tokens in V1, Passkeys in V2.
+ *
+ * K4: Gate bleibt rein consent-basiert. Quality-Checks (Confidence,
+ * Type-Validation) gehören in validate() der Action, nicht hierhin.
+ */
+import type { Result } from '../types.js';
+export type ConsentLevel = 'observe' | 'assist' | 'act';
+/** Bekannte Features. Offen für Erweiterung wie EntryCategory. */
+export type Feature = 'listening' | 'keyword_detection' | 'material_search' | 'ghost_drafting' | 'queue_suggest' | 'chat_private' | 'chat_room' | 'phantom_presence' | 'mirror_mode' | 'messenger_briefing' | 'file_access' | (string & {});
+export type ConsentScope = {
+    feature: Feature;
+    level: ConsentLevel;
+};
+export type Session = {
+    id: string;
+    userId: string;
+    scopes: ConsentScope[];
+    createdAt: number;
+};
+export type AuditEntry = {
+    ts: number;
+    userId: string;
+    feature: string;
+    required: ConsentLevel;
+    granted: ConsentLevel;
+    allowed: boolean;
+    action: string;
+    /** Was passiert ist — z.B. 'queue_item_released', 'chat_sent' */
+    outcome?: string;
+};
+export type ConsentConfig = ReadonlyMap<Feature, ConsentLevel>;
+export type Identity = {
+    createSession(userId: string, scopes?: ConsentScope[]): Session;
+    /** Initialisiert Session mit Default-Scopes für einen neuen User */
+    initDefaults(userId: string): Session;
+    checkConsent(session: Session, feature: Feature, required: ConsentLevel): Result<true, string>;
+    /** Loggt ein Audit-Ergebnis NACH einer Aktion (outcome-Feld) */
+    recordOutcome(session: Session, feature: Feature, outcome: string): void;
+    setScope(session: Session, feature: Feature, level: ConsentLevel): void;
+    /** Gibt die aktuelle Consent-Konfiguration eines Users zurück */
+    getConfig(session: Session): ConsentConfig;
+    getAudit(userId: string): readonly AuditEntry[];
+};
+export declare const DEFAULT_SCOPES: readonly ConsentScope[];
+export declare function createIdentity(): Identity;
+//# sourceMappingURL=session.d.ts.map

package/dist/s07-identity/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/s07-identity/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAKzC,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEvD,kEAAkE;AAClE,MAAM,MAAM,OAAO,GACf,WAAW,GACX,mBAAmB,GACnB,iBAAiB,GACjB,gBAAgB,GAChB,eAAe,GACf,cAAc,GACd,WAAW,GACX,kBAAkB,GAClB,aAAa,GACb,oBAAoB,GACpB,aAAa,GACb,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAQjB,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,YAAY,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,YAAY,CAAA;IACtB,OAAO,EAAE,YAAY,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;AAE9D,MAAM,MAAM,QAAQ,GAAG;IACrB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IAC/D,oEAAoE;IACpE,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;IACrC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9F,gEAAgE;IAChE,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACxE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAA;IACvE,iEAAiE;IACjE,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAAA;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,UAAU,EAAE,CAAA;CAChD,CAAA;AAID,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAYjD,CAAA;AAID,wBAAgB,cAAc,IAAI,QAAQ,CAsFzC"}

package/dist/s07-identity/session.js

@@ -0,0 +1,114 @@
+/**
+ * S7 — Identity & Consent
+ *
+ * Consent ist nicht ein Subsystem. Consent IST Autorisierung.
+ * observe/assist/act sind OAuth2-Scopes in Verkleidung.
+ *
+ * Session = Wer bist du + Was darfst du.
+ * Kein Auth0. Kein Clerk. UUID-Tokens in V1, Passkeys in V2.
+ *
+ * K4: Gate bleibt rein consent-basiert. Quality-Checks (Confidence,
+ * Type-Validation) gehören in validate() der Action, nicht hierhin.
+ */
+import { randomUUID } from 'node:crypto';
+import { ok, err } from '../types.js';
+const LEVEL_RANK = {
+    observe: 0,
+    assist: 1,
+    act: 2,
+};
+// ── Defaults ────────────────────────────────────────────────
+export const DEFAULT_SCOPES = [
+    { feature: 'listening', level: 'observe' },
+    { feature: 'keyword_detection', level: 'observe' },
+    { feature: 'material_search', level: 'assist' },
+    { feature: 'queue_suggest', level: 'assist' },
+    { feature: 'chat_private', level: 'assist' },
+    { feature: 'chat_room', level: 'observe' },
+    { feature: 'messenger_briefing', level: 'assist' },
+    { feature: 'file_access', level: 'observe' },
+    { feature: 'ghost_drafting', level: 'observe' },
+    { feature: 'phantom_presence', level: 'observe' },
+    { feature: 'mirror_mode', level: 'observe' },
+];
+// ── Implementation ──────────────────────────────────────────
+export function createIdentity() {
+    const audit = [];
+    return {
+        createSession(userId, scopes) {
+            return {
+                id: randomUUID(),
+                userId,
+                scopes: scopes ?? DEFAULT_SCOPES.map(s => ({ ...s })),
+                createdAt: Date.now(),
+            };
+        },
+        initDefaults(userId) {
+            // Direkt statt this.createSession — sicher bei Destrukturierung
+            return {
+                id: randomUUID(),
+                userId,
+                scopes: DEFAULT_SCOPES.map(s => ({ ...s })),
+                createdAt: Date.now(),
+            };
+        },
+        checkConsent(session, feature, required) {
+            const scope = session.scopes.find(s => s.feature === feature);
+            const granted = scope?.level ?? 'observe';
+            const allowed = LEVEL_RANK[granted] >= LEVEL_RANK[required];
+            audit.push({
+                ts: Date.now(),
+                userId: session.userId,
+                feature,
+                required,
+                granted,
+                allowed,
+                action: allowed ? 'granted' : 'denied',
+            });
+            return allowed
+                ? ok(true)
+                : err(`Consent ${required} required for ${feature}, but only ${granted} granted`);
+        },
+        recordOutcome(session, feature, outcome) {
+            // Finde den letzten Audit-Eintrag für diesen User+Feature und ergänze outcome
+            for (let i = audit.length - 1; i >= 0; i--) {
+                const entry = audit[i];
+                if (entry.userId === session.userId && entry.feature === feature && !entry.outcome) {
+                    entry.outcome = outcome;
+                    return;
+                }
+            }
+            // Kein passender Eintrag → neuen anlegen (standalone outcome)
+            audit.push({
+                ts: Date.now(),
+                userId: session.userId,
+                feature,
+                required: 'observe',
+                granted: session.scopes.find(s => s.feature === feature)?.level ?? 'observe',
+                allowed: true,
+                action: 'outcome_recorded',
+                outcome,
+            });
+        },
+        setScope(session, feature, level) {
+            const existing = session.scopes.find(s => s.feature === feature);
+            if (existing) {
+                existing.level = level;
+            }
+            else {
+                session.scopes.push({ feature, level });
+            }
+        },
+        getConfig(session) {
+            const config = new Map();
+            for (const scope of session.scopes) {
+                config.set(scope.feature, scope.level);
+            }
+            return config;
+        },
+        getAudit(userId) {
+            return audit.filter(a => a.userId === userId);
+        },
+    };
+}
+//# sourceMappingURL=session.js.map

package/dist/s07-identity/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/s07-identity/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAqBrC,MAAM,UAAU,GAAiC;IAC/C,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;CACP,CAAA;AAyCD,+DAA+D;AAE/D,MAAM,CAAC,MAAM,cAAc,GAA4B;IACrD,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE;IAC1C,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE;IAClD,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC/C,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC7C,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC5C,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE;IAC1C,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE;IAClD,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE;IAC5C,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE;IAC/C,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE;IACjD,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE;CAC7C,CAAA;AAED,+DAA+D;AAE/D,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAiB,EAAE,CAAA;IAE9B,OAAO;QACL,aAAa,CAAC,MAAM,EAAE,MAAM;YAC1B,OAAO;gBACL,EAAE,EAAE,UAAU,EAAE;gBAChB,MAAM;gBACN,MAAM,EAAE,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAA;QACH,CAAC;QAED,YAAY,CAAC,MAAM;YACjB,gEAAgE;YAChE,OAAO;gBACL,EAAE,EAAE,UAAU,EAAE;gBAChB,MAAM;gBACN,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC3C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAA;QACH,CAAC;QAED,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ;YACrC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAA;YAC7D,MAAM,OAAO,GAAG,KAAK,EAAE,KAAK,IAAI,SAAS,CAAA;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAA;YAE3D,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO;gBACP,QAAQ;gBACR,OAAO;gBACP,OAAO;gBACP,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;aACvC,CAAC,CAAA;YAEF,OAAO,OAAO;gBACZ,CAAC,CAAC,EAAE,CAAC,IAAa,CAAC;gBACnB,CAAC,CAAC,GAAG,CAAC,WAAW,QAAQ,iBAAiB,OAAO,cAAc,OAAO,UAAU,CAAC,CAAA;QACrF,CAAC;QAED,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO;YACrC,8EAA8E;YAC9E,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;gBACvB,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnF,KAAK,CAAC,OAAO,GAAG,OAAO,CAAA;oBACvB,OAAM;gBACR,CAAC;YACH,CAAC;YACD,8DAA8D;YAC9D,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO;gBACP,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,KAAK,IAAI,SAAS;gBAC5E,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,kBAAkB;gBAC1B,OAAO;aACR,CAAC,CAAA;QACJ,CAAC;QAED,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK;YAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAA;YAChE,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAA;YACxB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QAED,SAAS,CAAC,OAAO;YACf,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAA;YAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;YACxC,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QAED,QAAQ,CAAC,MAAM;YACb,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QAC/C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/s08-containers/docker.d.ts

@@ -0,0 +1,39 @@
+/**
+ * S8 — Docker Sandbox
+ *
+ * Zweite Sandbox-Implementierung. Production-fähig.
+ * Selbes Interface wie In-Memory. Austauschbar.
+ *
+ * Design: DockerClient als DI — kein Dockerode/Docker SDK Import.
+ * Consumer übergibt den Client. Foundation bleibt frei von Docker-Deps.
+ */
+import type { Sandbox } from './types.js';
+/** Docker-kompatibles Client-Interface */
+export type DockerClient = {
+    createContainer(params: {
+        name: string;
+        image: string;
+        env?: Record<string, string>;
+        cpuLimit?: number;
+        memoryLimit?: number;
+        gpuDevices?: string[];
+    }): Promise<{
+        containerId: string;
+    }>;
+    startContainer(containerId: string): Promise<void>;
+    stopContainer(containerId: string): Promise<void>;
+    removeContainer(containerId: string): Promise<void>;
+    inspectContainer(containerId: string): Promise<{
+        status: 'running' | 'stopped' | 'created' | 'exited';
+        startedAt?: number;
+        stoppedAt?: number;
+    } | null>;
+};
+export type DockerSandboxConfig = {
+    /** Default Docker Image für Room-Container */
+    defaultImage?: string;
+    /** GPU Device IDs die verfügbar sind */
+    gpuDevices?: string[];
+};
+export declare function createDockerSandbox(docker: DockerClient, config?: DockerSandboxConfig): Sandbox;
+//# sourceMappingURL=docker.d.ts.map

package/dist/s08-containers/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../src/s08-containers/docker.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAkC,OAAO,EAAE,MAAM,YAAY,CAAA;AAEzE,0CAA0C;AAC1C,MAAM,MAAM,YAAY,GAAG;IACzB,eAAe,CAAC,MAAM,EAAE;QACtB,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,CAAA;QACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KACtB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEpC,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnD,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;QACpD,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GAAG,IAAI,CAAC,CAAA;CACV,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,8CAA8C;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CACtB,CAAA;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAgET"}

package/dist/s08-containers/docker.js

@@ -0,0 +1,72 @@
+/**
+ * S8 — Docker Sandbox
+ *
+ * Zweite Sandbox-Implementierung. Production-fähig.
+ * Selbes Interface wie In-Memory. Austauschbar.
+ *
+ * Design: DockerClient als DI — kein Dockerode/Docker SDK Import.
+ * Consumer übergibt den Client. Foundation bleibt frei von Docker-Deps.
+ */
+import { ok, err } from '../types.js';
+export function createDockerSandbox(docker, config) {
+    const containers = new Map();
+    const defaultImage = config?.defaultImage ?? 'foundation-room:latest';
+    return {
+        async create(containerConfig) {
+            const result = await docker.createContainer({
+                name: `foundation-${containerConfig.id}`,
+                image: defaultImage,
+                env: containerConfig.env,
+                cpuLimit: containerConfig.limits.cpuMillicores,
+                memoryLimit: containerConfig.limits.memoryMb,
+                gpuDevices: containerConfig.limits.gpuMemoryMb ? config?.gpuDevices : undefined,
+            });
+            const info = { config: containerConfig, status: 'pending' };
+            containers.set(containerConfig.id, { dockerId: result.containerId, info });
+            return info;
+        },
+        async start(containerId) {
+            const entry = containers.get(containerId);
+            if (!entry)
+                return err(`Container ${containerId} not found`);
+            try {
+                await docker.startContainer(entry.dockerId);
+                entry.info.status = 'running';
+                entry.info.startedAt = Date.now();
+                return ok(undefined);
+            }
+            catch (e) {
+                entry.info.status = 'failed';
+                return err(`Docker start failed: ${e}`);
+            }
+        },
+        async stop(containerId) {
+            const entry = containers.get(containerId);
+            if (!entry)
+                return err(`Container ${containerId} not found`);
+            try {
+                await docker.stopContainer(entry.dockerId);
+                entry.info.status = 'stopped';
+                entry.info.stoppedAt = Date.now();
+                return ok(undefined);
+            }
+            catch (e) {
+                return err(`Docker stop failed: ${e}`);
+            }
+        },
+        async destroy(containerId) {
+            const entry = containers.get(containerId);
+            if (!entry)
+                return;
+            await docker.removeContainer(entry.dockerId).catch(() => { });
+            containers.delete(containerId);
+        },
+        status(containerId) {
+            return containers.get(containerId)?.info;
+        },
+        list() {
+            return Array.from(containers.values()).map(e => e.info);
+        },
+    };
+}
+//# sourceMappingURL=docker.js.map

package/dist/s08-containers/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/s08-containers/docker.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAgCrC,MAAM,UAAU,mBAAmB,CACjC,MAAoB,EACpB,MAA4B;IAE5B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAqD,CAAA;IAC/E,MAAM,YAAY,GAAG,MAAM,EAAE,YAAY,IAAI,wBAAwB,CAAA;IAErE,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,eAAe;YAC1B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;gBAC1C,IAAI,EAAE,cAAc,eAAe,CAAC,EAAE,EAAE;gBACxC,KAAK,EAAE,YAAY;gBACnB,GAAG,EAAE,eAAe,CAAC,GAAG;gBACxB,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,aAAa;gBAC9C,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ;gBAC5C,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS;aAChF,CAAC,CAAA;YAEF,MAAM,IAAI,GAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;YAC1E,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;YAC1E,OAAO,IAAI,CAAA;QACb,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,WAAW;YACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACzC,IAAI,CAAC,KAAK;gBAAE,OAAO,GAAG,CAAC,aAAa,WAAW,YAAY,CAAC,CAAA;YAE5D,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBAC3C,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;gBAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACjC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAA;YACtB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAA;gBAC5B,OAAO,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,WAAW;YACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACzC,IAAI,CAAC,KAAK;gBAAE,OAAO,GAAG,CAAC,aAAa,WAAW,YAAY,CAAC,CAAA;YAE5D,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBAC1C,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;gBAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACjC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAA;YACtB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,WAAW;YACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACzC,IAAI,CAAC,KAAK;gBAAE,OAAM;YAClB,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC5D,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAChC,CAAC;QAED,MAAM,CAAC,WAAW;YAChB,OAAO,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,CAAA;QAC1C,CAAC;QAED,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACzD,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/s08-containers/index.d.ts

@@ -0,0 +1,4 @@
+export { type IsolationLevel, type ResourceLimit, type ContainerConfig, type ContainerStatus, type ContainerInfo, type Sandbox, type GpuScheduler, } from './types.js';
+export { createSandbox, createGpuScheduler } from './sandbox.js';
+export { type DockerClient, type DockerSandboxConfig, createDockerSandbox } from './docker.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/s08-containers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/s08-containers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,KAAK,YAAY,GAClB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA"}

package/dist/s08-containers/index.js

@@ -0,0 +1,3 @@
+export { createSandbox, createGpuScheduler } from './sandbox.js';
+export { createDockerSandbox } from './docker.js';
+//# sourceMappingURL=index.js.map

package/dist/s08-containers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/s08-containers/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAA+C,mBAAmB,EAAE,MAAM,aAAa,CAAA"}

package/dist/s08-containers/sandbox.d.ts

@@ -0,0 +1,10 @@
+/**
+ * S8 — In-Memory Sandbox + GPU Scheduler
+ *
+ * Erste Implementierung. OCI/Docker Runtime sind Alternativen.
+ * In-Memory Sandbox simuliert Container-Lifecycle für Tests und Single-Node.
+ */
+import type { GpuScheduler, Sandbox } from './types.js';
+export declare function createSandbox(): Sandbox;
+export declare function createGpuScheduler(totalGpuMemoryMb: number): GpuScheduler;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/s08-containers/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/s08-containers/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAGV,YAAY,EACZ,OAAO,EACR,MAAM,YAAY,CAAA;AAEnB,wBAAgB,aAAa,IAAI,OAAO,CAsCvC;AAED,wBAAgB,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,GAAG,YAAY,CA2BzE"}

package/dist/s08-containers/sandbox.js

@@ -0,0 +1,68 @@
+/**
+ * S8 — In-Memory Sandbox + GPU Scheduler
+ *
+ * Erste Implementierung. OCI/Docker Runtime sind Alternativen.
+ * In-Memory Sandbox simuliert Container-Lifecycle für Tests und Single-Node.
+ */
+import { ok, err } from '../types.js';
+export function createSandbox() {
+    const containers = new Map();
+    return {
+        async create(config) {
+            const info = { config, status: 'pending' };
+            containers.set(config.id, info);
+            return info;
+        },
+        async start(containerId) {
+            const info = containers.get(containerId);
+            if (!info)
+                return err(`Container ${containerId} not found`);
+            info.status = 'running';
+            info.startedAt = Date.now();
+            return ok(undefined);
+        },
+        async stop(containerId) {
+            const info = containers.get(containerId);
+            if (!info)
+                return err(`Container ${containerId} not found`);
+            info.status = 'stopped';
+            info.stoppedAt = Date.now();
+            return ok(undefined);
+        },
+        async destroy(containerId) {
+            containers.delete(containerId);
+        },
+        status(containerId) {
+            return containers.get(containerId);
+        },
+        list() {
+            return Array.from(containers.values());
+        },
+    };
+}
+export function createGpuScheduler(totalGpuMemoryMb) {
+    const allocs = new Map();
+    return {
+        allocate(containerId, gpuMemoryMb) {
+            const used = Array.from(allocs.values()).reduce((s, m) => s + m, 0);
+            if (used + gpuMemoryMb > totalGpuMemoryMb)
+                return false;
+            allocs.set(containerId, gpuMemoryMb);
+            return true;
+        },
+        release(containerId) {
+            allocs.delete(containerId);
+        },
+        available() {
+            const used = Array.from(allocs.values()).reduce((s, m) => s + m, 0);
+            return totalGpuMemoryMb - used;
+        },
+        allocations() {
+            return Array.from(allocs.entries()).map(([containerId, gpuMemoryMb]) => ({
+                containerId,
+                gpuMemoryMb,
+            }));
+        },
+    };
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/s08-containers/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/s08-containers/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAQrC,MAAM,UAAU,aAAa;IAC3B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAA;IAEnD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,IAAI,GAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;YACzD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;YAC/B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,WAAW;YACrB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACxC,IAAI,CAAC,IAAI;gBAAE,OAAO,GAAG,CAAC,aAAa,WAAW,YAAY,CAAC,CAAA;YAC3D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;YACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC3B,OAAO,EAAE,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,WAAW;YACpB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACxC,IAAI,CAAC,IAAI;gBAAE,OAAO,GAAG,CAAC,aAAa,WAAW,YAAY,CAAC,CAAA;YAC3D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;YACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC3B,OAAO,EAAE,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,WAAW;YACvB,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAChC,CAAC;QAED,MAAM,CAAC,WAAW;YAChB,OAAO,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,CAAC;QAED,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QACxC,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,gBAAwB;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IAExC,OAAO;QACL,QAAQ,CAAC,WAAW,EAAE,WAAW;YAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YACnE,IAAI,IAAI,GAAG,WAAW,GAAG,gBAAgB;gBAAE,OAAO,KAAK,CAAA;YACvD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YACpC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,CAAC,WAAW;YACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC5B,CAAC;QAED,SAAS;YACP,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YACnE,OAAO,gBAAgB,GAAG,IAAI,CAAA;QAChC,CAAC;QAED,WAAW;YACT,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvE,WAAW;gBACX,WAAW;aACZ,CAAC,CAAC,CAAA;QACL,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/s08-containers/types.d.ts

@@ -0,0 +1,66 @@
+/**
+ * S8 — Containers Types
+ *
+ * Prozess-Isolation, Resource Limits, GPU-Scheduling.
+ * Interface first — OCI/Docker ist eine Implementierung.
+ */
+import type { Result } from '../types.js';
+export type IsolationLevel = 'none' | 'process' | 'container' | 'vm';
+export type ResourceLimit = {
+    /** Max CPU in Millicores (1000 = 1 Core) */
+    cpuMillicores?: number;
+    /** Max RAM in MB */
+    memoryMb?: number;
+    /** Max GPU Memory in MB (für Inference) */
+    gpuMemoryMb?: number;
+    /** Max Disk in MB */
+    diskMb?: number;
+    /** Max Netzwerk-Bandwidth in Mbps */
+    networkMbps?: number;
+};
+export type ContainerConfig = {
+    id: string;
+    /** Was läuft in diesem Container */
+    role: 'room' | 'inference' | 'worker' | (string & {});
+    isolation: IsolationLevel;
+    limits: ResourceLimit;
+    /** Umgebungsvariablen */
+    env: Record<string, string>;
+};
+export type ContainerStatus = 'pending' | 'running' | 'stopped' | 'failed';
+export type ContainerInfo = {
+    config: ContainerConfig;
+    status: ContainerStatus;
+    startedAt?: number;
+    stoppedAt?: number;
+    /** Aktuelle Auslastung */
+    usage?: {
+        cpuPercent: number;
+        memoryMb: number;
+        gpuMemoryMb?: number;
+    };
+};
+/** Sandbox Interface — Container-Lifecycle */
+export type Sandbox = {
+    create(config: ContainerConfig): Promise<ContainerInfo>;
+    start(containerId: string): Promise<Result<void, string>>;
+    stop(containerId: string): Promise<Result<void, string>>;
+    destroy(containerId: string): Promise<void>;
+    status(containerId: string): ContainerInfo | undefined;
+    list(): ContainerInfo[];
+};
+/** GPU-Scheduler — verteilt GPU-Ressourcen auf Container */
+export type GpuScheduler = {
+    /** Fordere GPU-Memory an. Gibt Container-ID zurück oder null wenn voll. */
+    allocate(containerId: string, gpuMemoryMb: number): boolean;
+    /** Gib GPU-Memory frei */
+    release(containerId: string): void;
+    /** Verfügbare GPU-Memory in MB */
+    available(): number;
+    /** Alle Allocations */
+    allocations(): {
+        containerId: string;
+        gpuMemoryMb: number;
+    }[];
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/s08-containers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/s08-containers/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,IAAI,CAAA;AAEpE,MAAM,MAAM,aAAa,GAAG;IAC1B,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oBAAoB;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,qBAAqB;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,oCAAoC;IACpC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IACrD,SAAS,EAAE,cAAc,CAAA;IACzB,MAAM,EAAE,aAAa,CAAA;IACrB,yBAAyB;IACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE1E,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,eAAe,CAAA;IACvB,MAAM,EAAE,eAAe,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,0BAA0B;IAC1B,KAAK,CAAC,EAAE;QACN,UAAU,EAAE,MAAM,CAAA;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,CAAA;CACF,CAAA;AAED,8CAA8C;AAC9C,MAAM,MAAM,OAAO,GAAG;IACpB,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACvD,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACzD,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACxD,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAA;IACtD,IAAI,IAAI,aAAa,EAAE,CAAA;CACxB,CAAA;AAED,4DAA4D;AAC5D,MAAM,MAAM,YAAY,GAAG;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAA;IAC3D,0BAA0B;IAC1B,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,kCAAkC;IAClC,SAAS,IAAI,MAAM,CAAA;IACnB,uBAAuB;IACvB,WAAW,IAAI;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC9D,CAAA"}

package/dist/s08-containers/types.js

@@ -0,0 +1,8 @@
+/**
+ * S8 — Containers Types
+ *
+ * Prozess-Isolation, Resource Limits, GPU-Scheduling.
+ * Interface first — OCI/Docker ist eine Implementierung.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/s08-containers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/s08-containers/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/s09-persistence/cold.d.ts

@@ -0,0 +1,43 @@
+/**
+ * S9 — COLD Memory
+ *
+ * Content-Addressed Artifact Storage.
+ * Interface first, Filesystem als erste Implementierung.
+ * Observer-Korrektur K3: Gleiche Strategie wie Provider und Transport.
+ *
+ * COLD speichert immutable Blobs: Transcripts, Dokumente, Medien, Snapshots.
+ * Adressierung via Content-Hash (SHA-256) — S12 Seed.
+ *
+ * Observer-Fixes nach M2:
+ *   - Alle Methoden async (Promise<Result>)
+ *   - ArtifactType offen wie EntryCategory
+ *   - retrieve() akzeptiert optionalen sessionId zur O(1)-Lookup
+ *   - store() destrukturiert type sicher raus, kein Spread-Override
+ */
+import type { Result } from '../types.js';
+/** Offen für Erweiterung — gleiche Strategie wie EntryCategory */
+export type ArtifactType = 'transcript' | 'document' | 'media' | 'snapshot' | (string & {});
+export type ArtifactMeta = {
+    id: string;
+    sessionId: string;
+    type: ArtifactType;
+    contentHash: string;
+    createdAt: number;
+    sizeBytes: number;
+    [key: string]: unknown;
+};
+export type StoreMeta = {
+    type: ArtifactType;
+    [key: string]: unknown;
+};
+export type ColdMemory = {
+    store(sessionId: string, data: Buffer | string, meta: StoreMeta): Promise<Result<ArtifactMeta, string>>;
+    retrieve(artifactId: string, sessionId?: string): Promise<Result<{
+        data: Buffer;
+        meta: ArtifactMeta;
+    }, string>>;
+    listBySession(sessionId: string): Promise<ArtifactMeta[]>;
+    exists(artifactId: string, sessionId?: string): Promise<boolean>;
+};
+export declare function createFsColdMemory(rootDir: string): ColdMemory;
+//# sourceMappingURL=cold.d.ts.map

package/dist/s09-persistence/cold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cold.d.ts","sourceRoot":"","sources":["../../src/s09-persistence/cold.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAKzC,kEAAkE;AAClE,MAAM,MAAM,YAAY,GACpB,YAAY,GACZ,UAAU,GACV,OAAO,GACP,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,YAAY,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,YAAY,CAAA;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;IACvG,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,CAAA;KAAE,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/G,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IACzD,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACjE,CAAA;AAQD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CA8G9D"}