omc-core 0.4.15 → 0.4.16

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Oh-My-CpAgent contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Oh-My-CpAgent contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,13 +1,13 @@
-# omc-core
-
-OMC（Oh-My-CpAgent）配置能力族的共享内核：能力契约、治理原语（审批协议、受控执行器、
-写租约）、CloudPivot wire 解码器，以及字段/模型/表单的契约阶梯。
-
-硬性保证：
-
-- **零 DSH 依赖。** `omc-core` 从不 import `@deepseek-ai/dsh-*`。由
-  `scripts/check-zero-dsh.mjs` 强制（已接入 CI；违反即为红色）。
-- **宿主无关**：没有宿主插件、没有 profile shell、没有安装 shell——那些属于宿主包
-  （`oh-my-cpagents` 根包、DSH 层）。
-
-本包是 `omc-cli` 的共享运行时依赖，也会与 `omc-cli` 使用相同版本发布到 GitLab npm Package Registry。使用方通常直接安装 `omc-cli`，npm 会自动解析 `omc-core`。
+# omc-core
+
+OMC（Oh-My-CpAgent）配置能力族的共享内核：能力契约、治理原语（审批协议、受控执行器、
+写租约）、CloudPivot wire 解码器，以及字段/模型/表单的契约阶梯。
+
+硬性保证：
+
+- **零 DSH 依赖。** `omc-core` 从不 import `@deepseek-ai/dsh-*`。由
+  `scripts/check-zero-dsh.mjs` 强制（已接入 CI；违反即为红色）。
+- **宿主无关**：没有宿主插件、没有 profile shell、没有安装 shell——那些属于宿主包
+  （`oh-my-cpagents` 根包、DSH 层）。
+
+本包是 `omc-cli` 的共享运行时依赖，也会与 `omc-cli` 使用相同版本发布到 GitLab npm Package Registry。使用方通常直接安装 `omc-cli`，npm 会自动解析 `omc-core`。

package/dist/approval-protocol.js

@@ -11,11 +11,11 @@ export class ApprovalProtocol {
         if (this.key.length !== 32)
             throw new Error("Approval protocol integrity key must be exactly 32 bytes.");
         this.db = new DatabaseSync(databasePath);
-        this.db.exec(`CREATE TABLE IF NOT EXISTS approval_protocol (
-      transaction_id TEXT PRIMARY KEY, kind TEXT NOT NULL, opaque_id TEXT NOT NULL,
-      expected_json TEXT NOT NULL, intent_hash TEXT NOT NULL, status TEXT NOT NULL,
-      completed_boundaries_json TEXT NOT NULL, record_hash TEXT NOT NULL, integrity_mac TEXT NOT NULL,
-      UNIQUE(kind, opaque_id)
+        this.db.exec(`CREATE TABLE IF NOT EXISTS approval_protocol (
+      transaction_id TEXT PRIMARY KEY, kind TEXT NOT NULL, opaque_id TEXT NOT NULL,
+      expected_json TEXT NOT NULL, intent_hash TEXT NOT NULL, status TEXT NOT NULL,
+      completed_boundaries_json TEXT NOT NULL, record_hash TEXT NOT NULL, integrity_mac TEXT NOT NULL,
+      UNIQUE(kind, opaque_id)
     )`);
         for (const column of ["prompt_issued INTEGER NOT NULL DEFAULT 0", "approval_outcome TEXT"]) {
             try {
@@ -48,8 +48,8 @@ export class ApprovalProtocol {
         const next = { ...current, promptIssued: true };
         const recordHash = sha256(next);
         const mac = hmac(recordHash, this.key);
-        const result = this.db.prepare(`UPDATE approval_protocol
-      SET prompt_issued = 1, record_hash = ?, integrity_mac = ?
+        const result = this.db.prepare(`UPDATE approval_protocol
+      SET prompt_issued = 1, record_hash = ?, integrity_mac = ?
       WHERE transaction_id = ? AND kind = ? AND opaque_id = ? AND intent_hash = ? AND prompt_issued = 0`)
             .run(recordHash, mac, current.transactionId, current.kind, current.opaqueId, current.intentHash);
         if (Number(result.changes) !== 1) {
@@ -120,7 +120,7 @@ export class ApprovalProtocol {
     save(value) {
         const recordHash = sha256(value);
         const mac = hmac(recordHash, this.key);
-        this.db.prepare(`INSERT INTO approval_protocol (transaction_id, kind, opaque_id, expected_json, intent_hash, status, completed_boundaries_json, prompt_issued, approval_outcome, record_hash, integrity_mac)
+        this.db.prepare(`INSERT INTO approval_protocol (transaction_id, kind, opaque_id, expected_json, intent_hash, status, completed_boundaries_json, prompt_issued, approval_outcome, record_hash, integrity_mac)
       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT(transaction_id) DO UPDATE SET status = excluded.status, completed_boundaries_json = excluded.completed_boundaries_json, prompt_issued = excluded.prompt_issued, approval_outcome = excluded.approval_outcome, record_hash = excluded.record_hash, integrity_mac = excluded.integrity_mac`)
             .run(value.transactionId, value.kind, value.opaqueId, canonical(value.expected), value.intentHash, value.status, canonical(value.completedBoundaries), value.promptIssued ? 1 : 0, value.approvalOutcome ?? null, recordHash, mac);
     }

package/dist/bootstrap-lifecycle.js

@@ -22,18 +22,18 @@ export class BootstrapLifecycleHost {
         this.executionClaimHook = options.executionClaimHook;
         mkdirSync(dirname(databasePath), { recursive: true });
         this.db = new DatabaseSync(databasePath);
-        this.db.exec(`CREATE TABLE IF NOT EXISTS bootstrap_lifecycle (
-      lifecycle_id TEXT PRIMARY KEY,
-      plan_json TEXT NOT NULL,
-      plan_hash TEXT NOT NULL,
-      package_json TEXT,
-      package_hash TEXT,
-      namespace_json TEXT NOT NULL,
-       state TEXT NOT NULL,
-       execution_approval_id TEXT,
-       consumed_execution_approval_ids_json TEXT NOT NULL DEFAULT '[]',
-       record_hash TEXT NOT NULL,
-       integrity_mac TEXT NOT NULL
+        this.db.exec(`CREATE TABLE IF NOT EXISTS bootstrap_lifecycle (
+      lifecycle_id TEXT PRIMARY KEY,
+      plan_json TEXT NOT NULL,
+      plan_hash TEXT NOT NULL,
+      package_json TEXT,
+      package_hash TEXT,
+      namespace_json TEXT NOT NULL,
+       state TEXT NOT NULL,
+       execution_approval_id TEXT,
+       consumed_execution_approval_ids_json TEXT NOT NULL DEFAULT '[]',
+       record_hash TEXT NOT NULL,
+       integrity_mac TEXT NOT NULL
     )`);
         for (const column of ["execution_approval_id TEXT", "execution_intent_token TEXT", "consumed_execution_approval_ids_json TEXT NOT NULL DEFAULT '[]'", "integrity_mac TEXT NOT NULL DEFAULT ''"]) {
             try {
@@ -41,13 +41,13 @@ export class BootstrapLifecycleHost {
             }
             catch { /* already present */ }
         }
-        this.db.exec(`CREATE TABLE IF NOT EXISTS bootstrap_lifecycle_event (
-      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
-      lifecycle_id TEXT NOT NULL,
-      type TEXT NOT NULL,
-      plan_hash TEXT NOT NULL,
-      package_hash TEXT,
-      payload_json TEXT NOT NULL
+        this.db.exec(`CREATE TABLE IF NOT EXISTS bootstrap_lifecycle_event (
+      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+      lifecycle_id TEXT NOT NULL,
+      type TEXT NOT NULL,
+      plan_hash TEXT NOT NULL,
+      package_hash TEXT,
+      payload_json TEXT NOT NULL
     )`);
         this.recoverExecutingRecords();
     }

package/dist/bootstrap-plan-registry.js

@@ -13,17 +13,17 @@ export class BootstrapPlanRegistry {
         this.integrityKey = loadIntegrityKey(databasePath, options.integrityKey);
         mkdirSync(dirname(databasePath), { recursive: true });
         this.db = new DatabaseSync(databasePath);
-        this.db.exec(`CREATE TABLE IF NOT EXISTS bootstrap_plan_registry (
-      plan_approval_id TEXT PRIMARY KEY,
-      plan_hash TEXT NOT NULL,
-      serialized_plan TEXT NOT NULL,
-      binding_json TEXT NOT NULL,
-      approval_status TEXT NOT NULL,
-      namespace_json TEXT NOT NULL,
-      created_at TEXT NOT NULL,
-      finalized_at TEXT,
-      record_hash TEXT NOT NULL,
-      integrity_mac TEXT NOT NULL
+        this.db.exec(`CREATE TABLE IF NOT EXISTS bootstrap_plan_registry (
+      plan_approval_id TEXT PRIMARY KEY,
+      plan_hash TEXT NOT NULL,
+      serialized_plan TEXT NOT NULL,
+      binding_json TEXT NOT NULL,
+      approval_status TEXT NOT NULL,
+      namespace_json TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      finalized_at TEXT,
+      record_hash TEXT NOT NULL,
+      integrity_mac TEXT NOT NULL
     )`);
     }
     register(input) {

package/dist/capability-catalog.js

@@ -11,25 +11,25 @@ export class CapabilityCatalog {
     constructor(databasePath) {
         mkdirSync(pathDirname(databasePath), { recursive: true });
         this.db = new DatabaseSync(databasePath);
-        this.db.exec(`CREATE TABLE IF NOT EXISTS capability (
-      id TEXT PRIMARY KEY,
-      name TEXT NOT NULL,
-      kind TEXT NOT NULL,
-      permissions_json TEXT NOT NULL,
-      lifecycle_json TEXT NOT NULL,
-      freeze_json TEXT NOT NULL,
-      operation_contract_hashes_json TEXT NOT NULL DEFAULT '[]',
-      status TEXT NOT NULL,
-      promotion_status TEXT NOT NULL
-    );
-    CREATE TABLE IF NOT EXISTS capability_evidence (
-      id TEXT PRIMARY KEY,
-      capability_id TEXT NOT NULL,
-      kind TEXT NOT NULL,
-      artifact_id TEXT NOT NULL,
-      sha256 TEXT NOT NULL,
-      recorded_at TEXT NOT NULL,
-      UNIQUE(capability_id, kind)
+        this.db.exec(`CREATE TABLE IF NOT EXISTS capability (
+      id TEXT PRIMARY KEY,
+      name TEXT NOT NULL,
+      kind TEXT NOT NULL,
+      permissions_json TEXT NOT NULL,
+      lifecycle_json TEXT NOT NULL,
+      freeze_json TEXT NOT NULL,
+      operation_contract_hashes_json TEXT NOT NULL DEFAULT '[]',
+      status TEXT NOT NULL,
+      promotion_status TEXT NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS capability_evidence (
+      id TEXT PRIMARY KEY,
+      capability_id TEXT NOT NULL,
+      kind TEXT NOT NULL,
+      artifact_id TEXT NOT NULL,
+      sha256 TEXT NOT NULL,
+      recorded_at TEXT NOT NULL,
+      UNIQUE(capability_id, kind)
     )`);
         try {
             this.db.exec("ALTER TABLE capability ADD COLUMN operation_contract_hashes_json TEXT NOT NULL DEFAULT '[]'");

package/dist/change-workflow.js

@@ -10,13 +10,13 @@ export class ChangeLedger {
         mkdirSync(artifactRoot, { recursive: true });
         this.db = new DatabaseSync(databasePath);
         this.artifactRoot = resolve(artifactRoot);
-        this.db.exec(`CREATE TABLE IF NOT EXISTS change_event (
-      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
-      change_id TEXT NOT NULL,
-      at TEXT NOT NULL,
-      type TEXT NOT NULL,
-      binding_json TEXT NOT NULL,
-      payload_json TEXT NOT NULL
+        this.db.exec(`CREATE TABLE IF NOT EXISTS change_event (
+      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+      change_id TEXT NOT NULL,
+      at TEXT NOT NULL,
+      type TEXT NOT NULL,
+      binding_json TEXT NOT NULL,
+      payload_json TEXT NOT NULL
     )`);
     }
     create(binding) {

package/dist/delivery-graph.js

@@ -109,15 +109,15 @@ export class DeliveryLedger {
     constructor(databasePath) {
         mkdirSync(dirname(databasePath), { recursive: true });
         this.db = new DatabaseSync(databasePath);
-        this.db.exec(`CREATE TABLE IF NOT EXISTS delivery_event (
-      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
-      delivery_id TEXT NOT NULL,
-      at TEXT NOT NULL,
-      type TEXT NOT NULL,
-      binding_json TEXT NOT NULL,
-     payload_json TEXT NOT NULL
-      ,event_hash TEXT NOT NULL DEFAULT ''
-      ,previous_hash TEXT NOT NULL DEFAULT ''
+        this.db.exec(`CREATE TABLE IF NOT EXISTS delivery_event (
+      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+      delivery_id TEXT NOT NULL,
+      at TEXT NOT NULL,
+      type TEXT NOT NULL,
+      binding_json TEXT NOT NULL,
+     payload_json TEXT NOT NULL
+      ,event_hash TEXT NOT NULL DEFAULT ''
+      ,previous_hash TEXT NOT NULL DEFAULT ''
     )`);
         for (const column of ["event_hash TEXT NOT NULL DEFAULT ''", "previous_hash TEXT NOT NULL DEFAULT ''"]) {
             try {

package/dist/environment-release-freeze.js

@@ -12,12 +12,12 @@ export class EnvironmentReleaseLedger {
     constructor(databasePath) {
         mkdirSync(dirname(databasePath), { recursive: true });
         this.db = new DatabaseSync(databasePath);
-        this.db.exec(`CREATE TABLE IF NOT EXISTS release_event (
-      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
-      release_id TEXT NOT NULL,
-      at TEXT NOT NULL,
-      type TEXT NOT NULL,
-      payload_json TEXT NOT NULL
+        this.db.exec(`CREATE TABLE IF NOT EXISTS release_event (
+      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+      release_id TEXT NOT NULL,
+      at TEXT NOT NULL,
+      type TEXT NOT NULL,
+      payload_json TEXT NOT NULL
     )`);
     }
     open(input) {

package/dist/host-package-registry.js

@@ -13,20 +13,20 @@ export class HostPackageRegistry {
         this.integrityKey = loadIntegrityKey(databasePath, options.integrityKey);
         mkdirSync(dirname(databasePath), { recursive: true });
         this.db = new DatabaseSync(databasePath);
-        this.db.exec(`CREATE TABLE IF NOT EXISTS host_package_registry (
-      package_id TEXT PRIMARY KEY,
-      package_hash TEXT NOT NULL,
-      serialized_package TEXT NOT NULL,
-      serialized_prepared TEXT NOT NULL,
-      plan_binding TEXT NOT NULL,
-      environment_binding TEXT NOT NULL,
-      baseline_fingerprint TEXT NOT NULL,
-      scope_json TEXT NOT NULL,
-      projection_json TEXT NOT NULL,
-      created_at TEXT NOT NULL,
-      namespace_json TEXT NOT NULL,
-      record_hash TEXT NOT NULL,
-      integrity_mac TEXT NOT NULL
+        this.db.exec(`CREATE TABLE IF NOT EXISTS host_package_registry (
+      package_id TEXT PRIMARY KEY,
+      package_hash TEXT NOT NULL,
+      serialized_package TEXT NOT NULL,
+      serialized_prepared TEXT NOT NULL,
+      plan_binding TEXT NOT NULL,
+      environment_binding TEXT NOT NULL,
+      baseline_fingerprint TEXT NOT NULL,
+      scope_json TEXT NOT NULL,
+      projection_json TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      namespace_json TEXT NOT NULL,
+      record_hash TEXT NOT NULL,
+      integrity_mac TEXT NOT NULL
     )`);
         for (const column of [
             "namespace_json TEXT NOT NULL DEFAULT '{}'",
@@ -38,13 +38,13 @@ export class HostPackageRegistry {
             }
             catch { /* already present */ }
         }
-        this.db.exec(`CREATE TABLE IF NOT EXISTS host_package_approval_use (
-      approval_id TEXT PRIMARY KEY, call_id TEXT NOT NULL UNIQUE, package_hash TEXT NOT NULL,
-      expires_at TEXT NOT NULL, consumed_at TEXT NOT NULL
+        this.db.exec(`CREATE TABLE IF NOT EXISTS host_package_approval_use (
+      approval_id TEXT PRIMARY KEY, call_id TEXT NOT NULL UNIQUE, package_hash TEXT NOT NULL,
+      expires_at TEXT NOT NULL, consumed_at TEXT NOT NULL
     )`);
-        this.db.exec(`CREATE TABLE IF NOT EXISTS host_package_execution_approval (
-      approval_id TEXT PRIMARY KEY, package_id TEXT NOT NULL, package_hash TEXT NOT NULL,
-      call_id TEXT NOT NULL, session_id TEXT NOT NULL, issued_at TEXT NOT NULL, consumed_at TEXT
+        this.db.exec(`CREATE TABLE IF NOT EXISTS host_package_execution_approval (
+      approval_id TEXT PRIMARY KEY, package_id TEXT NOT NULL, package_hash TEXT NOT NULL,
+      call_id TEXT NOT NULL, session_id TEXT NOT NULL, issued_at TEXT NOT NULL, consumed_at TEXT
     )`);
         for (const column of ["call_id TEXT", "session_id TEXT"]) {
             try {

package/package.json

@@ -1,38 +1,38 @@
-{
-  "name": "omc-core",
-  "version": "0.4.15",
-  "description": "Shared OMC capability kernel: capability contracts, governance, and decoders. Zero DSH dependencies.",
-  "type": "module",
-  "files": [
-    "dist",
-    "package.json",
-    "README.md",
-    "!dist/**/*.js.map",
-    "!dist/**/*.d.ts",
-    "!dist/**/*.d.ts.map"
-  ],
-  "exports": {
-    ".": "./dist/index.js",
-    "./package.json": "./package.json"
-  },
-  "scripts": {
-    "build": "tsc --project tsconfig.build.json",
-    "typecheck": "tsc --noEmit",
-    "check:zero-dsh": "node scripts/check-zero-dsh.mjs",
-    "verify": "npm run check:zero-dsh && npm run typecheck && npm run build",
-    "prepublishOnly": "npm run build"
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "devDependencies": {
-    "@types/node": "^22.0.0",
-    "typescript": "^5.6.0"
-  },
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://gitlab.h3yun.com/fuwenbin/oh-my-cpagents.git",
-    "directory": "packages/omc-core"
-  }
-}
+{
+  "name": "omc-core",
+  "version": "0.4.16",
+  "description": "Shared OMC capability kernel: capability contracts, governance, and decoders. Zero DSH dependencies.",
+  "type": "module",
+  "files": [
+    "dist",
+    "package.json",
+    "README.md",
+    "!dist/**/*.js.map",
+    "!dist/**/*.d.ts",
+    "!dist/**/*.d.ts.map"
+  ],
+  "exports": {
+    ".": "./dist/index.js",
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "build": "tsc --project tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "check:zero-dsh": "node scripts/check-zero-dsh.mjs",
+    "verify": "npm run check:zero-dsh && npm run typecheck && npm run build",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.6.0"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://gitlab.h3yun.com/fuwenbin/oh-my-cpagents.git",
+    "directory": "packages/omc-core"
+  }
+}