oh-my-codex 0.21.0 → 0.21.2

package/dist/ralplan/advisory-evidence.d.ts

@@ -0,0 +1,91 @@
+export interface PinnedDirectory {
+    readonly canonicalPath: string;
+    readonly identity: {
+        dev: number;
+        ino: number;
+    };
+    readFile(name: string, maxBytes?: number): Promise<Buffer>;
+    close(): Promise<void>;
+}
+export interface DigestAdvisoryArtifactsDependencies {
+    afterCanonicalArtifactPath?: (artifact: {
+        absolute: string;
+        relative: string;
+    }) => void | Promise<void>;
+    beforePinnedRead?: (artifact: {
+        absolute: string;
+        relative: string;
+    }) => void | Promise<void>;
+}
+/** Pin a directory descriptor and address children through it on Linux. On
+ * platforms without /proc/self/fd, every read revalidates the pinned directory
+ * identity before and after the child fstat/read/fstat sequence. */
+export declare function pinDirectory(path: string): Promise<PinnedDirectory>;
+export interface AdvisoryArtifactDigest {
+    path: string;
+    byte_length: number;
+    sha256: string;
+}
+export interface AdvisoryManifest {
+    schema_version: 1;
+    entries: AdvisoryArtifactDigest[];
+    sha256: string;
+}
+export declare function digestAdvisoryArtifacts(cwd: string, paths: readonly string[], dependencies?: DigestAdvisoryArtifactsDependencies): Promise<AdvisoryManifest>;
+export declare function advisoryIterationId(input: {
+    generationId: string;
+    sessionId: string;
+    activationTurnId: string;
+    iteration: number;
+    planManifestSha256: string;
+}): string;
+export declare function advisoryReviewDigest(input: {
+    role: 'architect' | 'critic';
+    generationId: string;
+    iterationId: string;
+    planManifestSha256: string;
+    reviewArtifact: AdvisoryArtifactDigest;
+    architectReviewDigest?: string;
+}): string;
+export interface AdvisoryReviewLifecycle {
+    complete: boolean;
+    sequence_valid: boolean;
+    iteration: number;
+    iteration_id: string;
+    plan_manifest_sha256: string;
+    architect_review_sha256: string;
+    critic_review_sha256: string;
+    evidence_bundle_sha256: string;
+    evidence_scope: 'local_runtime';
+    host_observable: false;
+    host_verified: false;
+}
+export interface AdvisoryArtifactBaselines {
+    planManifestSha256: string;
+    architectArtifactManifestSha256: string;
+    criticArtifactManifestSha256: string;
+}
+export declare function projectAdvisoryReviewLifecycle(input: {
+    cwd: string;
+    sessionId: string;
+    generationId: string;
+    activationTurnId: string;
+    activationCreatedAt: string;
+    rootThreadId: string;
+    iteration: number;
+    planPaths: readonly string[];
+    architect: {
+        threadId: string;
+        artifactPath: string;
+        verdict: string;
+        sessionId?: string;
+    };
+    critic: {
+        threadId: string;
+        artifactPath: string;
+        verdict: string;
+        sessionId?: string;
+    };
+    artifactBaselines?: AdvisoryArtifactBaselines;
+}): Promise<AdvisoryReviewLifecycle>;
+//# sourceMappingURL=advisory-evidence.d.ts.map

package/dist/ralplan/advisory-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advisory-evidence.d.ts","sourceRoot":"","sources":["../../src/ralplan/advisory-evidence.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,mCAAmC;IAClD,0BAA0B,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxG,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/F;AAwCD;;oEAEoE;AACpE,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAwEzE;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB;AAgHD,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,YAAY,GAAE,mCAAwC,GACrD,OAAO,CAAC,gBAAgB,CAAC,CAkD3B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,GAAG,MAAM,CAKT;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,sBAAsB,CAAC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,MAAM,CAST;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,eAAe,CAAC;IAChC,eAAe,EAAE,KAAK,CAAC;IACvB,aAAa,EAAE,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+BAA+B,EAAE,MAAM,CAAC;IACxC,4BAA4B,EAAE,MAAM,CAAC;CACtC;AAaD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,SAAS,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3F,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;CAC/C,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAyFnC"}

package/dist/ralplan/advisory-evidence.js

@@ -0,0 +1,393 @@
+import { createHash } from 'node:crypto';
+import { constants as fsConstants } from 'node:fs';
+import { lstat, open, realpath } from 'node:fs/promises';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { readSubagentTrackingStateStrict } from '../subagents/tracker.js';
+import { pinDirectory as pinPlatformDirectory } from './documented-leader-preflight.js';
+// The Darwin pinned-directory helper deliberately caps each request at 128 KiB.
+// Keep the public artifact contract equal to the actual platform guarantee
+// instead of silently advertising the Linux 8 MiB limit and truncating it.
+const MAX_ARTIFACT_BYTES = process.platform === 'darwin' ? 128 * 1024 : 8 * 1024 * 1024;
+const ALLOWED_ROOTS = ['.omx/plans', '.omx/specs', '.omx/artifacts', '.omx/context'];
+async function readBoundedHandle(handle, size) {
+    if (size < 0n || size > BigInt(MAX_ARTIFACT_BYTES) || size > BigInt(Number.MAX_SAFE_INTEGER)) {
+        throw new Error('ralplan_advisory_artifact_not_regular');
+    }
+    const bytes = Buffer.alloc(Number(size));
+    let offset = 0;
+    while (offset < bytes.length) {
+        const result = await handle.read(bytes, offset, bytes.length - offset, offset);
+        if (result.bytesRead === 0)
+            throw new Error('ralplan_advisory_artifact_changed_during_read');
+        offset += result.bytesRead;
+    }
+    return bytes;
+}
+function safeBasename(name) {
+    return name.length > 0 && name !== '.' && name !== '..' && !name.includes('/') && !name.includes('\\');
+}
+function sameIdentity(left, right) {
+    return left.dev === right.dev && left.ino === right.ino;
+}
+function sameArtifactFileIdentity(left, right) {
+    return left.dev === right.dev
+        && left.ino === right.ino
+        && left.size === right.size
+        && left.mtimeNs === right.mtimeNs
+        && left.ctimeNs === right.ctimeNs;
+}
+/** Pin a directory descriptor and address children through it on Linux. On
+ * platforms without /proc/self/fd, every read revalidates the pinned directory
+ * identity before and after the child fstat/read/fstat sequence. */
+export async function pinDirectory(path) {
+    const canonicalPath = await realpath(path);
+    const before = await lstat(canonicalPath);
+    if (!before.isDirectory() || before.isSymbolicLink())
+        throw new Error('ralplan_advisory_directory_invalid');
+    const handle = await open(canonicalPath, fsConstants.O_RDONLY | fsConstants.O_DIRECTORY | fsConstants.O_NOFOLLOW);
+    const opened = await handle.stat();
+    if (!opened.isDirectory() || !sameIdentity(before, opened)) {
+        await handle.close();
+        throw new Error('ralplan_advisory_directory_identity_changed');
+    }
+    if (process.platform === 'darwin') {
+        await handle.close();
+        const pinned = await pinPlatformDirectory(canonicalPath);
+        if (!pinned)
+            throw new Error('ralplan_advisory_directory_pin_failed');
+        const current = await lstat(canonicalPath);
+        if (!current.isDirectory() || current.isSymbolicLink() || !sameIdentity(before, current)) {
+            await pinned.close();
+            throw new Error('ralplan_advisory_directory_identity_changed');
+        }
+        return {
+            canonicalPath,
+            identity: { dev: before.dev, ino: before.ino },
+            async readFile(name, maxBytes = MAX_ARTIFACT_BYTES) {
+                if (maxBytes > MAX_ARTIFACT_BYTES)
+                    throw new Error('ralplan_advisory_artifact_limit_unsupported');
+                const bytes = await pinned.read(name, maxBytes);
+                if (!bytes)
+                    throw new Error('ralplan_advisory_artifact_read_failed');
+                return bytes;
+            },
+            close: () => pinned.close(),
+        };
+    }
+    const descriptorPath = process.platform === 'linux' ? `/proc/self/fd/${handle.fd}` : null;
+    let closed = false;
+    return {
+        canonicalPath,
+        identity: { dev: opened.dev, ino: opened.ino },
+        async readFile(name, maxBytes = MAX_ARTIFACT_BYTES) {
+            if (!Number.isSafeInteger(maxBytes) || maxBytes < 0 || maxBytes > MAX_ARTIFACT_BYTES) {
+                throw new Error('ralplan_advisory_artifact_limit_unsupported');
+            }
+            if (closed || !safeBasename(name)) {
+                throw new Error('ralplan_advisory_artifact_name_invalid');
+            }
+            if (!descriptorPath)
+                throw new Error('ralplan_advisory_descriptor_relative_open_unsupported');
+            const directoryBefore = await handle.stat();
+            if (!sameIdentity(opened, directoryBefore))
+                throw new Error('ralplan_advisory_directory_identity_changed');
+            const file = await open(join(descriptorPath, name), fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+            try {
+                const first = await file.stat({ bigint: true });
+                if (!first.isFile() || first.nlink !== 1n || first.size > BigInt(maxBytes)) {
+                    throw new Error('ralplan_advisory_artifact_not_regular');
+                }
+                const bytes = await readBoundedHandle(file, first.size);
+                const second = await file.stat({ bigint: true });
+                if (!sameArtifactFileIdentity(first, second)
+                    || BigInt(bytes.length) !== first.size) {
+                    throw new Error('ralplan_advisory_artifact_changed_during_read');
+                }
+                const directoryAfter = await handle.stat();
+                if (!sameIdentity(opened, directoryAfter))
+                    throw new Error('ralplan_advisory_directory_identity_changed');
+                return bytes;
+            }
+            finally {
+                await file.close();
+            }
+        },
+        async close() {
+            if (!closed) {
+                closed = true;
+                await handle.close();
+            }
+        },
+    };
+}
+function hashParts(domain, parts) {
+    const hash = createHash('sha256').update(`${domain}\0`);
+    for (const part of parts) {
+        const bytes = Buffer.isBuffer(part) ? part : Buffer.from(part);
+        hash.update(String(bytes.length)).update('\0').update(bytes).update('\0');
+    }
+    return hash.digest('hex');
+}
+async function canonicalDirectoryIdentity(path) {
+    const [canonical, info] = await Promise.all([realpath(path), lstat(path)]);
+    if (canonical !== path || !info.isDirectory() || info.isSymbolicLink()) {
+        throw new Error('ralplan_advisory_directory_not_canonical');
+    }
+    return { path, dev: info.dev, ino: info.ino };
+}
+async function assertDirectoryIdentity(expected) {
+    const current = await canonicalDirectoryIdentity(expected.path);
+    if (!sameIdentity(expected, current))
+        throw new Error('ralplan_advisory_directory_identity_changed');
+}
+async function readArtifactFileIdentity(path) {
+    const info = await lstat(path, { bigint: true });
+    if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1n) {
+        throw new Error('ralplan_advisory_artifact_identity_changed');
+    }
+    return {
+        dev: info.dev,
+        ino: info.ino,
+        size: info.size,
+        mtimeNs: info.mtimeNs,
+        ctimeNs: info.ctimeNs,
+    };
+}
+async function assertFileIdentity(path, expected) {
+    const info = await readArtifactFileIdentity(path);
+    if (!sameArtifactFileIdentity(expected, info)) {
+        throw new Error('ralplan_advisory_artifact_identity_changed');
+    }
+}
+async function canonicalArtifactPath(cwd, input) {
+    const canonicalCwd = await realpath(cwd);
+    const lexicalCwd = resolve(cwd);
+    const lexical = isAbsolute(input) ? resolve(input) : resolve(canonicalCwd, input);
+    const canonical = await realpath(lexical);
+    const rel = relative(canonicalCwd, canonical).split(sep).join('/');
+    if (!rel || rel.startsWith('../') || isAbsolute(rel))
+        throw new Error('ralplan_advisory_artifact_outside_cwd');
+    if (!ALLOWED_ROOTS.some((root) => rel === root || rel.startsWith(`${root}/`))) {
+        throw new Error('ralplan_advisory_artifact_root_denied');
+    }
+    if (isAbsolute(input)) {
+        const lexicalRel = relative(lexicalCwd, lexical);
+        if (!lexicalRel || lexicalRel.startsWith('..') || isAbsolute(lexicalRel)
+            || canonical !== resolve(canonicalCwd, lexicalRel)) {
+            throw new Error('ralplan_advisory_artifact_symlink_denied');
+        }
+    }
+    else if (canonical !== lexical) {
+        throw new Error('ralplan_advisory_artifact_symlink_denied');
+    }
+    const ancestry = [];
+    let cursor = canonicalCwd;
+    ancestry.push(await canonicalDirectoryIdentity(cursor));
+    for (const part of dirname(rel).split('/').filter(Boolean)) {
+        cursor = join(cursor, part);
+        ancestry.push(await canonicalDirectoryIdentity(cursor));
+    }
+    const fileIdentity = await readArtifactFileIdentity(canonical);
+    // Capture a bounded content baseline before any caller interposition. Some
+    // filesystems can preserve nanosecond timestamps across two same-size writes;
+    // identity metadata alone therefore cannot detect that overwrite. The later
+    // descriptor read must match these bytes as well as the pinned identities.
+    let initialBytes = Buffer.alloc(0);
+    const initialBytesCaptured = fileIdentity.size <= BigInt(MAX_ARTIFACT_BYTES);
+    if (initialBytesCaptured) {
+        const handle = await open(canonical, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+        try {
+            const opened = await handle.stat({ bigint: true });
+            if (!sameArtifactFileIdentity(fileIdentity, opened)) {
+                throw new Error('ralplan_advisory_artifact_identity_changed');
+            }
+            initialBytes = await readBoundedHandle(handle, opened.size);
+            const closed = await handle.stat({ bigint: true });
+            if (!sameArtifactFileIdentity(fileIdentity, closed)) {
+                throw new Error('ralplan_advisory_artifact_identity_changed');
+            }
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    await assertFileIdentity(canonical, fileIdentity);
+    return {
+        absolute: canonical,
+        relative: rel,
+        ancestry,
+        fileIdentity,
+        initialBytes,
+        initialBytesCaptured,
+    };
+}
+export async function digestAdvisoryArtifacts(cwd, paths, dependencies = {}) {
+    if (paths.length === 0)
+        throw new Error('ralplan_advisory_artifacts_missing');
+    const entries = [];
+    const seen = new Set();
+    const folded = new Set();
+    for (const input of paths) {
+        const canonical = await canonicalArtifactPath(cwd, input);
+        await dependencies.afterCanonicalArtifactPath?.({
+            absolute: canonical.absolute,
+            relative: canonical.relative,
+        });
+        if (seen.has(canonical.relative) || folded.has(canonical.relative.toLocaleLowerCase('en-US'))) {
+            throw new Error('ralplan_advisory_artifact_duplicate');
+        }
+        seen.add(canonical.relative);
+        folded.add(canonical.relative.toLocaleLowerCase('en-US'));
+        const pinned = [];
+        try {
+            for (const expected of canonical.ancestry) {
+                const directory = await pinDirectory(expected.path);
+                if (directory.canonicalPath !== expected.path || !sameIdentity(directory.identity, expected)) {
+                    await directory.close();
+                    throw new Error('ralplan_advisory_directory_identity_changed');
+                }
+                pinned.push(directory);
+            }
+            await Promise.all(canonical.ancestry.map(assertDirectoryIdentity));
+            await assertFileIdentity(canonical.absolute, canonical.fileIdentity);
+            await dependencies.beforePinnedRead?.({ absolute: canonical.absolute, relative: canonical.relative });
+            const bytes = await pinned.at(-1).readFile(canonical.absolute.slice(dirname(canonical.absolute).length + 1));
+            if (canonical.initialBytesCaptured && !canonical.initialBytes.equals(bytes)) {
+                throw new Error('ralplan_advisory_artifact_changed_during_read');
+            }
+            await assertFileIdentity(canonical.absolute, canonical.fileIdentity);
+            await Promise.all(canonical.ancestry.map(assertDirectoryIdentity));
+            entries.push({
+                path: canonical.relative,
+                byte_length: bytes.length,
+                sha256: hashParts('omx.ralplan.advisory.artifact.v1', [canonical.relative, bytes]),
+            });
+        }
+        finally {
+            for (const directory of pinned.reverse())
+                await directory.close();
+        }
+    }
+    entries.sort((left, right) => left.path.localeCompare(right.path));
+    return {
+        schema_version: 1,
+        entries,
+        sha256: hashParts('omx.ralplan.advisory.manifest.v1', entries.map((entry) => JSON.stringify(entry))),
+    };
+}
+export function advisoryIterationId(input) {
+    return hashParts('omx.ralplan.advisory.iteration.v1', [
+        '1', input.generationId, input.sessionId, input.activationTurnId,
+        String(input.iteration), input.planManifestSha256,
+    ]);
+}
+export function advisoryReviewDigest(input) {
+    if (input.role === 'critic' && !input.architectReviewDigest)
+        throw new Error('ralplan_advisory_architect_digest_missing');
+    return hashParts(`omx.ralplan.advisory.${input.role}.review.v1`, [
+        input.generationId,
+        input.iterationId,
+        input.planManifestSha256,
+        JSON.stringify(input.reviewArtifact),
+        input.architectReviewDigest ?? '',
+    ]);
+}
+function assertAdvisoryArtifactBaselines(expected, current) {
+    if (current.planManifestSha256 !== expected.planManifestSha256
+        || current.architectArtifactManifestSha256 !== expected.architectArtifactManifestSha256
+        || current.criticArtifactManifestSha256 !== expected.criticArtifactManifestSha256) {
+        throw new Error('ralplan_advisory_review_artifact_baseline_mismatch');
+    }
+}
+export async function projectAdvisoryReviewLifecycle(input) {
+    if (input.architect.verdict !== 'approve' || input.critic.verdict !== 'approve') {
+        throw new Error('ralplan_advisory_reviews_not_approved');
+    }
+    if (!input.architect.threadId || !input.critic.threadId || input.architect.threadId === input.critic.threadId) {
+        throw new Error('ralplan_advisory_review_threads_invalid');
+    }
+    if ((input.architect.sessionId && input.architect.sessionId !== input.sessionId)
+        || (input.critic.sessionId && input.critic.sessionId !== input.sessionId)) {
+        throw new Error('ralplan_advisory_review_session_mismatch');
+    }
+    const trackerResult = await readSubagentTrackingStateStrict(input.cwd);
+    if (!trackerResult.ok)
+        throw new Error('ralplan_advisory_tracker_evidence_invalid');
+    const tracker = trackerResult.state;
+    const session = tracker.sessions[input.sessionId];
+    const architectThread = session?.threads[input.architect.threadId];
+    const criticThread = session?.threads[input.critic.threadId];
+    const generationScope = `ralplan-advisory:${input.generationId}`;
+    if (!session || session.session_id !== input.sessionId || session.leader_thread_id !== input.rootThreadId
+        || !architectThread || !criticThread
+        || architectThread.kind !== 'subagent' || criticThread.kind !== 'subagent'
+        || architectThread.provenance_kind !== 'native_subagent' || criticThread.provenance_kind !== 'native_subagent'
+        || architectThread.direct_child_root_id !== input.rootThreadId || criticThread.direct_child_root_id !== input.rootThreadId
+        || architectThread.direct_child_parent_id !== input.rootThreadId || criticThread.direct_child_parent_id !== input.rootThreadId
+        || architectThread.scope !== generationScope || criticThread.scope !== generationScope
+        || (architectThread.role ?? architectThread.mode) !== 'architect'
+        || (criticThread.role ?? criticThread.mode) !== 'critic'
+        || !architectThread.completed_at || !criticThread.completed_at) {
+        throw new Error('ralplan_advisory_tracker_evidence_invalid');
+    }
+    const architectCompleted = Date.parse(architectThread.completed_at);
+    const architectStarted = Date.parse(architectThread.first_seen_at);
+    const criticStarted = Date.parse(criticThread.first_seen_at);
+    const criticCompleted = Date.parse(criticThread.completed_at);
+    const activationCreated = Date.parse(input.activationCreatedAt);
+    if (![activationCreated, architectStarted, architectCompleted, criticStarted, criticCompleted].every(Number.isFinite)
+        || architectStarted < activationCreated || architectStarted > architectCompleted
+        || architectCompleted > criticStarted || criticStarted > criticCompleted) {
+        throw new Error('ralplan_advisory_review_sequence_invalid');
+    }
+    const [planManifest, architectManifest, criticManifest] = await Promise.all([
+        digestAdvisoryArtifacts(input.cwd, input.planPaths),
+        digestAdvisoryArtifacts(input.cwd, [input.architect.artifactPath]),
+        digestAdvisoryArtifacts(input.cwd, [input.critic.artifactPath]),
+    ]);
+    if (input.artifactBaselines) {
+        assertAdvisoryArtifactBaselines(input.artifactBaselines, {
+            planManifestSha256: planManifest.sha256,
+            architectArtifactManifestSha256: architectManifest.sha256,
+            criticArtifactManifestSha256: criticManifest.sha256,
+        });
+    }
+    const evidencePaths = [
+        ...planManifest.entries.map((entry) => entry.path),
+        architectManifest.entries[0].path,
+        criticManifest.entries[0].path,
+    ];
+    if (new Set(evidencePaths).size !== evidencePaths.length) {
+        throw new Error('ralplan_advisory_review_artifact_path_reused');
+    }
+    const iterationId = advisoryIterationId({
+        generationId: input.generationId,
+        sessionId: input.sessionId,
+        activationTurnId: input.activationTurnId,
+        iteration: input.iteration,
+        planManifestSha256: planManifest.sha256,
+    });
+    const architectDigest = advisoryReviewDigest({
+        role: 'architect', generationId: input.generationId, iterationId,
+        planManifestSha256: planManifest.sha256, reviewArtifact: architectManifest.entries[0],
+    });
+    const criticDigest = advisoryReviewDigest({
+        role: 'critic', generationId: input.generationId, iterationId,
+        planManifestSha256: planManifest.sha256, reviewArtifact: criticManifest.entries[0],
+        architectReviewDigest: architectDigest,
+    });
+    return {
+        complete: true,
+        sequence_valid: true,
+        iteration: input.iteration,
+        iteration_id: iterationId,
+        plan_manifest_sha256: planManifest.sha256,
+        architect_review_sha256: architectDigest,
+        critic_review_sha256: criticDigest,
+        evidence_bundle_sha256: hashParts('omx.ralplan.advisory.bundle.v1', [iterationId, planManifest.sha256, architectDigest, criticDigest]),
+        evidence_scope: 'local_runtime',
+        host_observable: false,
+        host_verified: false,
+    };
+}
+//# sourceMappingURL=advisory-evidence.js.map

package/dist/ralplan/advisory-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advisory-evidence.js","sourceRoot":"","sources":["../../src/ralplan/advisory-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,YAAY,IAAI,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExF,gFAAgF;AAChF,2EAA2E;AAC3E,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxF,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAU,CAAC;AAc9F,KAAK,UAAU,iBAAiB,CAAC,MAAwC,EAAE,IAAY;IACrF,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC7F,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,YAAY,CAAC,IAAkC,EAAE,KAAmC;IAC3F,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AAC1D,CAAC;AAUD,SAAS,wBAAwB,CAAC,IAA0B,EAAE,KAA2B;IACvF,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACxB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACtB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;WACxB,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAC9B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;AACtC,CAAC;AAED;;oEAEoE;AACpE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAClH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YACzF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO;YACL,aAAa;YACb,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;YAC9C,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB;gBAChD,IAAI,QAAQ,GAAG,kBAAkB;oBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBAClG,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;SAC5B,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,OAAO;QACL,aAAa;QACb,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;QAC9C,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB;YAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,kBAAkB,EAAE,CAAC;gBACrF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC9F,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC3G,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACnG,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC;uBACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;oBACzC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC3C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBAC1G,OAAO,KAAK,CAAC;YACf,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAcD,SAAS,SAAS,CAAC,MAAc,EAAE,KAA6B;IAC9D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAWD,KAAK,UAAU,0BAA0B,CAAC,IAAY;IACpD,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,QAAoD;IACzF,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACvG,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAAY;IAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAA8B;IAC5E,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,KAAa;IAC7D,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC/G,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC;eACnE,SAAS,KAAK,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,IAAI,MAAM,GAAG,YAAY,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC/D,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAI,YAAY,GAA4B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,oBAAoB,GAAG,YAAY,CAAC,IAAI,IAAI,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7E,IAAI,oBAAoB,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACpF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,YAAY,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IACrC,CAAC;IACD,MAAM,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAClD,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,GAAG;QACb,QAAQ;QACR,YAAY;QACZ,YAAY;QACZ,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAW,EACX,KAAwB,EACxB,YAAY,GAAwC,EAAE;IAEtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,YAAY,CAAC,0BAA0B,EAAE,CAAC;YAC9C,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC7B,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBAC1C,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACpD,IAAI,SAAS,CAAC,aAAa,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAC7F,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACnE,MAAM,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtG,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9G,IAAI,SAAS,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,SAAS,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,MAAM;gBACzB,MAAM,EAAE,SAAS,CAAC,kCAAkC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;aACnF,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,OAAO;QACP,MAAM,EAAE,SAAS,CAAC,kCAAkC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;KACrG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAMnC;IACC,OAAO,SAAS,CAAC,mCAAmC,EAAE;QACpD,GAAG,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,gBAAgB;QAChE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,kBAAkB;KAClD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAOpC;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC1H,OAAO,SAAS,CAAC,wBAAwB,KAAK,CAAC,IAAI,YAAY,EAAE;QAC/D,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,kBAAkB;QACxB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;QACpC,KAAK,CAAC,qBAAqB,IAAI,EAAE;KAClC,CAAC,CAAC;AACL,CAAC;AAsBD,SAAS,+BAA+B,CACtC,QAAmC,EACnC,OAAkC;IAElC,IAAI,OAAO,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB;WACzD,OAAO,CAAC,+BAA+B,KAAK,QAAQ,CAAC,+BAA+B;WACpF,OAAO,CAAC,4BAA4B,KAAK,QAAQ,CAAC,4BAA4B,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAYpD;IACC,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9G,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;WAC3E,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,+BAA+B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,CAAC,aAAa,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,oBAAoB,KAAK,CAAC,YAAY,EAAE,CAAC;IACjE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC,YAAY;WACpG,CAAC,eAAe,IAAI,CAAC,YAAY;WACjC,eAAe,CAAC,IAAI,KAAK,UAAU,IAAI,YAAY,CAAC,IAAI,KAAK,UAAU;WACvE,eAAe,CAAC,eAAe,KAAK,iBAAiB,IAAI,YAAY,CAAC,eAAe,KAAK,iBAAiB;WAC3G,eAAe,CAAC,oBAAoB,KAAK,KAAK,CAAC,YAAY,IAAI,YAAY,CAAC,oBAAoB,KAAK,KAAK,CAAC,YAAY;WACvH,eAAe,CAAC,sBAAsB,KAAK,KAAK,CAAC,YAAY,IAAI,YAAY,CAAC,sBAAsB,KAAK,KAAK,CAAC,YAAY;WAC3H,eAAe,CAAC,KAAK,KAAK,eAAe,IAAI,YAAY,CAAC,KAAK,KAAK,eAAe;WACnF,CAAC,eAAe,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,WAAW;WAC9D,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,QAAQ;WACrD,CAAC,eAAe,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;WAChH,gBAAgB,GAAG,iBAAiB,IAAI,gBAAgB,GAAG,kBAAkB;WAC7E,kBAAkB,GAAG,aAAa,IAAI,aAAa,GAAG,eAAe,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,YAAY,EAAE,iBAAiB,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1E,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC;QACnD,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAClE,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;KAChE,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,+BAA+B,CAAC,KAAK,CAAC,iBAAiB,EAAE;YACvD,kBAAkB,EAAE,YAAY,CAAC,MAAM;YACvC,+BAA+B,EAAE,iBAAiB,CAAC,MAAM;YACzD,4BAA4B,EAAE,cAAc,CAAC,MAAM;SACpD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG;QACpB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAClD,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI;QAClC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI;KAChC,CAAC;IACF,IAAI,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,WAAW,GAAG,mBAAmB,CAAC;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,kBAAkB,EAAE,YAAY,CAAC,MAAM;KACxC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,oBAAoB,CAAC;QAC3C,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW;QAChE,kBAAkB,EAAE,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAE;KACvF,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,oBAAoB,CAAC;QACxC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW;QAC7D,kBAAkB,EAAE,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAE;QACnF,qBAAqB,EAAE,eAAe;KACvC,CAAC,CAAC;IACH,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,IAAI;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,WAAW;QACzB,oBAAoB,EAAE,YAAY,CAAC,MAAM;QACzC,uBAAuB,EAAE,eAAe;QACxC,oBAAoB,EAAE,YAAY;QAClC,sBAAsB,EAAE,SAAS,CAAC,gCAAgC,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;QACtI,cAAc,EAAE,eAAe;QAC/B,eAAe,EAAE,KAAK;QACtB,aAAa,EAAE,KAAK;KACrB,CAAC;AACJ,CAAC"}

package/dist/ralplan/advisory-lifecycle-validation.d.ts

@@ -0,0 +1,11 @@
+import type { AdvisoryReviewLifecycle } from './advisory-evidence.js';
+import { type AdvisoryActivation, type AdvisoryFence, type AdvisoryJournal } from './advisory-contract.js';
+export declare function activationValid(value: Record<string, unknown>, cwd: string, sessionId: string, generationId: string): boolean;
+export declare function fenceValid(value: Record<string, unknown>, activation: AdvisoryActivation): boolean;
+export declare function fenceStateSemanticsValid(fence: AdvisoryFence): boolean;
+export declare function fenceTransitionSemanticsValid(prior: AdvisoryFence, event: AdvisoryFence): boolean;
+export declare function committedJournalMatchesFence(journal: AdvisoryJournal | null, fence: AdvisoryFence, complete?: boolean): boolean;
+export declare function releasedEventValid(prior: AdvisoryFence, event: AdvisoryFence, journal: Record<string, unknown> | null): boolean;
+export declare function journalValid(value: Record<string, unknown>, generationId: string): boolean;
+export declare function completeLifecycleBinding(lifecycle: AdvisoryReviewLifecycle | undefined): lifecycle is AdvisoryReviewLifecycle;
+//# sourceMappingURL=advisory-lifecycle-validation.d.ts.map

package/dist/ralplan/advisory-lifecycle-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advisory-lifecycle-validation.d.ts","sourceRoot":"","sources":["../../src/ralplan/advisory-lifecycle-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAiB,KAAK,kBAAkB,EAAE,KAAK,aAAa,EAA2B,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAMnJ,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAM7H;AACD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAMlG;AAID,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAStE;AACD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAEjG;AACD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,UAAQ,GAAG,OAAO,CAI7H;AACD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,OAAO,CAO/H;AACD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAY1F;AACD,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,uBAAuB,GAAG,SAAS,GAAG,SAAS,IAAI,uBAAuB,CAK7H"}

package/dist/ralplan/advisory-lifecycle-validation.js

@@ -0,0 +1,72 @@
+import { JOURNAL_STEPS } from './advisory-contract.js';
+const safeId = (value) => /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(value) && value !== '.' && value !== '..';
+const object = (value) => value && typeof value === 'object' && !Array.isArray(value) ? value : null;
+export function activationValid(value, cwd, sessionId, generationId) {
+    return value.schema_version === 1 && value.generation_id === generationId && value.session_id === sessionId
+        && value.canonical_cwd === cwd && typeof value.root_thread_id === 'string' && safeId(value.root_thread_id)
+        && typeof value.activation_turn_id === 'string' && safeId(value.activation_turn_id) && typeof value.created_at === 'string'
+        && (value.activation_prompt_sha256 === undefined || typeof value.activation_prompt_sha256 === 'string' && /^[a-f0-9]{64}$/i.test(value.activation_prompt_sha256))
+        && (value.predecessor_generation_id === undefined || typeof value.predecessor_generation_id === 'string' && safeId(value.predecessor_generation_id));
+}
+export function fenceValid(value, activation) {
+    const states = ['pending_closeout', 'recovery_required', 'closed', 'abandoned', 'released'];
+    return activationValid(value, activation.canonical_cwd, activation.session_id, activation.generation_id)
+        && states.includes(value.state) && typeof value.closing_turn_id === 'string' && safeId(value.closing_turn_id)
+        && Number.isSafeInteger(value.iteration) && Number(value.iteration) > 0
+        && Number.isSafeInteger(value.sequence) && Number(value.sequence) >= 0 && typeof value.updated_at === 'string';
+}
+const INHERITED = ['schema_version', 'generation_id', 'predecessor_generation_id', 'canonical_cwd', 'session_id',
+    'root_thread_id', 'activation_turn_id', 'created_at', 'closing_turn_id', 'iteration', 'activation_prompt_sha256',
+    'iteration_id', 'plan_manifest_sha256', 'architect_review_sha256', 'critic_review_sha256', 'evidence_bundle_sha256'];
+export function fenceStateSemanticsValid(fence) {
+    if (fence.state === 'pending_closeout')
+        return fence.outcome === undefined && fence.integrity_status === undefined;
+    if (fence.state === 'recovery_required')
+        return fence.integrity_status === 'unproven' && fence.outcome !== undefined;
+    if (fence.state === 'closed')
+        return fence.outcome === 'approved' && fence.integrity_status === 'proven'
+            && [fence.iteration_id, fence.plan_manifest_sha256, fence.architect_review_sha256, fence.critic_review_sha256, fence.evidence_bundle_sha256]
+                .every((value) => typeof value === 'string' && /^[a-f0-9]{64}$/i.test(value));
+    if (fence.state === 'abandoned')
+        return fence.outcome !== undefined && fence.outcome !== 'approved'
+            && (fence.integrity_status === 'proven' || fence.integrity_status === 'unproven');
+    return false;
+}
+export function fenceTransitionSemanticsValid(prior, event) {
+    return INHERITED.every((field) => JSON.stringify(event[field]) === JSON.stringify(prior[field])) && fenceStateSemanticsValid(event);
+}
+export function committedJournalMatchesFence(journal, fence, complete = false) {
+    return Boolean(journal && journal.phase === 'committed' && journal.outcome === fence.outcome
+        && journal.integrity_status === fence.integrity_status && journal.evidence_bundle_sha256 === fence.evidence_bundle_sha256
+        && (!complete || JOURNAL_STEPS.every((step) => journal.steps[step] === 'applied')));
+}
+export function releasedEventValid(prior, event, journal) {
+    if (!['closed', 'abandoned'].includes(prior.state) || !INHERITED.every((field) => JSON.stringify(event[field]) === JSON.stringify(prior[field])))
+        return false;
+    if (prior.state === 'closed' && (!committedJournalMatchesFence(journal, prior, true) || !fenceStateSemanticsValid(prior)))
+        return false;
+    return event.authority_kind === 'new_root_user_execution_request' && typeof event.release_turn_id === 'string' && safeId(event.release_turn_id)
+        && typeof event.release_thread_id === 'string' && safeId(event.release_thread_id)
+        && typeof event.release_prompt_sha256 === 'string' && /^[a-f0-9]{64}$/i.test(event.release_prompt_sha256)
+        && typeof event.requested_lane === 'string' && event.requested_lane.trim().length > 0;
+}
+export function journalValid(value, generationId) {
+    const steps = object(value.steps);
+    const skillUpdates = value.terminal_skill_updates === undefined ? null : object(value.terminal_skill_updates);
+    return value.schema_version === 1 && value.generation_id === generationId
+        && ['approved', 'exhausted', 'rejected', 'failed', 'cancelled', 'abandoned'].includes(String(value.outcome))
+        && (value.integrity_status === 'proven' || value.integrity_status === 'unproven')
+        && (value.phase === 'prepared' || value.phase === 'committed') && typeof value.terminal_timestamp === 'string'
+        && Number.isFinite(Date.parse(value.terminal_timestamp)) && (value.terminal_mode_updates === undefined || object(value.terminal_mode_updates) !== null)
+        && (value.terminal_mode_updates === undefined ? value.terminal_skill_updates === undefined : skillUpdates !== null
+            && ['session_skill', 'root_skill'].every((key) => Object.prototype.hasOwnProperty.call(skillUpdates, key)
+                && (skillUpdates[key] === null || object(skillUpdates[key]) !== null)))
+        && Boolean(steps) && JOURNAL_STEPS.every((step) => steps?.[step] === 'pending' || steps?.[step] === 'applied');
+}
+export function completeLifecycleBinding(lifecycle) {
+    return Boolean(lifecycle?.complete === true && lifecycle.sequence_valid === true && Number.isSafeInteger(lifecycle.iteration)
+        && lifecycle.iteration > 0 && [lifecycle.iteration_id, lifecycle.plan_manifest_sha256, lifecycle.architect_review_sha256,
+        lifecycle.critic_review_sha256, lifecycle.evidence_bundle_sha256]
+        .every((value) => typeof value === 'string' && /^[a-f0-9]{64}$/i.test(value)));
+}
+//# sourceMappingURL=advisory-lifecycle-validation.js.map

package/dist/ralplan/advisory-lifecycle-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advisory-lifecycle-validation.js","sourceRoot":"","sources":["../../src/ralplan/advisory-lifecycle-validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAA8F,MAAM,wBAAwB,CAAC;AAEnJ,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,CAAC;AACtH,MAAM,MAAM,GAAG,CAAC,KAAc,EAAkC,EAAE,CAChE,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AAExG,MAAM,UAAU,eAAe,CAAC,KAA8B,EAAE,GAAW,EAAE,SAAiB,EAAE,YAAoB;IAClH,OAAO,KAAK,CAAC,cAAc,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,YAAY,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;WACtG,KAAK,CAAC,aAAa,KAAK,GAAG,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC;WACvG,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;WACxH,CAAC,KAAK,CAAC,wBAAwB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,wBAAwB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;WAC9J,CAAC,KAAK,CAAC,yBAAyB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,yBAAyB,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;AACzJ,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAA8B,EAAE,UAA8B;IACvF,MAAM,MAAM,GAAyB,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAClH,OAAO,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC;WACnG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAA2B,CAAC,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;WAChI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC;WACpE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;AACnH,CAAC;AACD,MAAM,SAAS,GAAG,CAAC,gBAAgB,EAAE,eAAe,EAAE,2BAA2B,EAAE,eAAe,EAAE,YAAY;IAC9G,gBAAgB,EAAE,oBAAoB,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,0BAA0B;IAChH,cAAc,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,wBAAwB,CAAU,CAAC;AAChI,MAAM,UAAU,wBAAwB,CAAC,KAAoB;IAC3D,IAAI,KAAK,CAAC,KAAK,KAAK,kBAAkB;QAAE,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACnH,IAAI,KAAK,CAAC,KAAK,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC,gBAAgB,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;IACrH,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,IAAI,KAAK,CAAC,gBAAgB,KAAK,QAAQ;eACnG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,sBAAsB,CAAC;iBACzI,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU;eAC9F,CAAC,KAAK,CAAC,gBAAgB,KAAK,QAAQ,IAAI,KAAK,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,6BAA6B,CAAC,KAAoB,EAAE,KAAoB;IACtF,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC;AACtI,CAAC;AACD,MAAM,UAAU,4BAA4B,CAAC,OAA+B,EAAE,KAAoB,EAAE,QAAQ,GAAG,KAAK;IAClH,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WACvF,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,IAAI,OAAO,CAAC,sBAAsB,KAAK,KAAK,CAAC,sBAAsB;WACtH,CAAC,CAAC,QAAQ,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAoB,EAAE,KAAoB,EAAE,OAAuC;IACpH,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/J,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,4BAA4B,CAAC,OAAiC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClK,OAAO,KAAK,CAAC,cAAc,KAAK,iCAAiC,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;WAC1I,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;WAC9E,OAAO,KAAK,CAAC,qBAAqB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC;WACtG,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1F,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAA8B,EAAE,YAAoB;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,KAAK,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC9G,OAAO,KAAK,CAAC,cAAc,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,YAAY;WACpE,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;WACzG,CAAC,KAAK,CAAC,gBAAgB,KAAK,QAAQ,IAAI,KAAK,CAAC,gBAAgB,KAAK,UAAU,CAAC;WAC9E,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;WAC3G,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,IAAI,CAAC;WACpJ,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI;eAC7G,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC;mBACpG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;WACxE,OAAO,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;AACnH,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,SAA8C;IACrF,OAAO,OAAO,CAAC,SAAS,EAAE,QAAQ,KAAK,IAAI,IAAI,SAAS,CAAC,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC;WACxH,SAAS,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,oBAAoB,EAAE,SAAS,CAAC,uBAAuB;QACtH,SAAS,CAAC,oBAAoB,EAAE,SAAS,CAAC,sBAAsB,CAAC;SAChE,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC"}

package/dist/ralplan/advisory-postconditions.d.ts

@@ -0,0 +1,3 @@
+import type { JournalStep } from './advisory-contract.js';
+export declare function closeoutStepPostcondition(cwd: string, sessionId: string, step: Extract<JournalStep, 'session_mode' | 'root_mode' | 'session_skill' | 'root_skill'>, patch: Record<string, unknown> | undefined, expectedSkill?: Record<string, unknown> | null): Promise<boolean>;
+//# sourceMappingURL=advisory-postconditions.d.ts.map

package/dist/ralplan/advisory-postconditions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advisory-postconditions.d.ts","sourceRoot":"","sources":["../../src/ralplan/advisory-postconditions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAe1D,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,cAAc,GAAG,WAAW,GAAG,eAAe,GAAG,YAAY,CAAC,EACzF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAC7C,OAAO,CAAC,OAAO,CAAC,CAalB"}