omc-core 0.4.35 → 0.4.37

package/dist/ticket08-test-model-mutation.js

@@ -1,901 +0,0 @@
-import { createHash, randomUUID } from "node:crypto";
-import { canonicalCloudPivotBaselineFingerprint, canonicalCloudPivotEnvironmentFingerprint } from "./cloudpivot-fingerprints.js";
-import { canonicalFormalDiscoveryFingerprint } from "./formal-capability-discovery.js";
-import { CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE } from "./cloudpivot-low-code.js";
-import { buildListModelPayload, buildNativeConfigurationDryRun, buildPhysicalCleanupOperation, compileNativeOperations, runNativeConfigurationPackage } from "./cloudpivot-native-configuration.js";
-import { buildKnowledgePack } from "./knowledge-pack-builder.js";
-import { KnowledgePackRuntime } from "./knowledge-pack-runtime.js";
-import { createDeliveryPlanApproval, deliveryPlanApprovalHash, proposeDeliveryPlan } from "./two-stage-change-package.js";
-import { validateConfigurationIntent } from "./configuration-intent.js";
-import { SENSITIVE_SECRET_VALUE } from "./delivery-graph.js";
-import { appendApprovalHumanBlock } from "./approval-frame-readability.js";
-/**
- * Ticket 08 (MVP series) promotes exactly one independently bounded CloudPivot
- * `test` configuration mutation: a unique test-only LIST model create with
- * authoritative readback, real behavior validation, and separately approved
- * owned cleanup. Evidence from this capability is never inferred for any other
- * capability; production, staging, tenant administration, Redis, restart,
- * deployment, and release stay rejected.
- */
-export const TICKET08_TEST_MUTATION_ROUTE = "ticket08-test-model-mutation";
-export const TICKET08_TEST_MODEL_CLEANUP_ROUTE = "ticket08-test-model-cleanup";
-export const TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID = "cloudpivot.test.model-create-8.6.26";
-export const TICKET08_TEST_MODEL_CLEANUP_CAPABILITY_ID = "cloudpivot.test.model-cleanup-8.6.26";
-export const TICKET08_TEST_MUTATION_KNOWLEDGE_PACK_ID = "cloudpivot-8.6-ticket08-test-model-mutation";
-export const TICKET08_TEST_ENVIRONMENT_NAME = "test";
-export const TICKET08_TEST_APPLICATION_CODE = "test";
-export const TICKET08_REFERENCE_EVIDENCE_VERSION = "8.6.26";
-export const TICKET08_MODEL_CREATE_ENDPOINT = "/api/api/app/bizmodels/create";
-export const TICKET08_MODEL_READBACK_ENDPOINT = "/api/api/app/bizmodels/get_all";
-export const TICKET08_MODEL_CLEANUP_ENDPOINT = "/api/api/app/apppackage/physically_delete";
-export const TICKET08_PROHIBITED_MUTATION_TERMS = Object.freeze([
-    "publish", "deploy", "restart", "release", "redis", "tenant-admin", "runtime-crud",
-    "field-create", "form-create", "view-create", "folder-create", "folder-delete",
-]);
-const TICKET08_UUID_V4 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-const SHA256 = /^[a-f0-9]{64}$/i;
-/** The named `test` environment and its dedicated test application are hard preconditions. */
-export function assertTicket08TestMutationEnvironment(settings) {
-    if (settings.environmentName !== "test")
-        throw new Error("Ticket 08 test mutation is restricted to the named test environment; production and staging are rejected.");
-    if (!settings.baseUrl.trim() || !/^https?:\/\/\S+$/i.test(settings.baseUrl.trim()))
-        throw new Error("Ticket 08 test mutation requires an absolute configured test environment endpoint.");
-    if (settings.testApplicationCode !== "test")
-        throw new Error("Ticket 08 test mutation requires the dedicated test application to be test.");
-}
-/**
- * CloudPivot 8.6.26 enforces bizSchemaCode `^[A-Za-z][A-Za-z0-9_]*$` with a
- * 26-character maximum (live authoritative errcode 10005 evidence). The
- * host-owned fixture code is therefore `omc_t08_` + 16 lowercase hex digits
- * (24 characters, unique per run; exact-absence preflight still guards
- * collisions).
- */
-export const TICKET08_TARGET_SCHEMA_PATTERN = /^omc_t08_[0-9a-f]{16}$/;
-const TICKET08_SCHEMA_CODE_PREFIX = "omc_t08_";
-export function ticket08TargetSchemaCode() {
-    return `${TICKET08_SCHEMA_CODE_PREFIX}${randomUUID().replaceAll("-", "").slice(0, 16)}`;
-}
-export function isTicket08TargetSchema(targetSchemaCode) {
-    return TICKET08_TARGET_SCHEMA_PATTERN.test(targetSchemaCode);
-}
-export function assertTicket08TargetSchema(targetSchemaCode) {
-    if (!isTicket08TargetSchema(targetSchemaCode))
-        throw new Error("Ticket 08 targetSchemaCode must be a host-scoped omc_t08_<16-hex> schema within the CloudPivot 8.6.26 26-character code contract.");
-    return targetSchemaCode;
-}
-export function ticket08DeliveryId(testRunId) { return `ticket08-${testRunId}`; }
-export function ticket08CleanupDeliveryId(testRunId) { return `ticket08-cleanup-${testRunId}`; }
-export function ticket08ModelScope(targetSchemaCode) { return `cloudpivot:model:${targetSchemaCode}`; }
-export function ticket08ResourceName(targetSchemaCode) { return assertTicket08TargetSchema(targetSchemaCode); }
-export function buildTicket08CleanupContract(testRunId, targetSchemaCode) {
-    if (!TICKET08_UUID_V4.test(testRunId) || !isTicket08TargetSchema(targetSchemaCode))
-        throw new Error("Ticket 08 cleanup contract requires the exact host-owned testRunId and server-legal target schema binding.");
-    return Object.freeze({
-        capabilityId: TICKET08_TEST_MODEL_CLEANUP_CAPABILITY_ID,
-        testRunId,
-        targetSchemaCode,
-        operation: { method: "POST", endpoint: TICKET08_MODEL_CLEANUP_ENDPOINT, payload: "AppDeleteParamVO[1]" },
-        dependencyCheck: { endpoint: "/api/api/app/bizmodels/exits_bizschema", expected: "errTypes-empty" },
-        taskHistory: { endpoint: "/api/api/app/apppackage/delete/history", expected: "taskStatus-END" },
-        postDeleteAbsenceReadback: { method: "GET", endpoint: TICKET08_MODEL_READBACK_ENDPOINT, expected: "exact-absence" },
-        ownership: "model-id-folder-and-schema-prefix-bound-to-testRunId",
-        replayPolicy: "absent-is-no-op",
-        uncertainPolicy: "stop-retain-report-no-retry",
-    });
-}
-/** Deterministic, run-independent contract identities pinned by the Knowledge Pack promotion. */
-export function ticket08ModelCreateContractHash() { return digest(ticket08ModelCreateContract()); }
-export function ticket08CleanupContractHash() { return digest(ticket08CleanupContractTemplate()); }
-function ticket08ModelCreateContract() {
-    return {
-        capabilityId: TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID,
-        operationKind: "model-create",
-        method: "POST",
-        endpoint: CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE.endpoint,
-        readbackEndpoint: CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE.readbackEndpoint,
-        preflight: CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE.preflight,
-        modelType: CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE.modelType,
-        transportMode: "serialized-server-model-create-8.6.26",
-        schemaCodeContract: { pattern: "^[A-Za-z][A-Za-z0-9_]*$", maxLength: 26, evidence: "live-authoritative-errcode-10005" },
-        capability: CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE,
-        evidence: [...CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE.evidence],
-        requiredPermissions: ["configuration-write"],
-        prohibited: [...TICKET08_PROHIBITED_MUTATION_TERMS],
-    };
-}
-function ticket08CleanupContractTemplate() {
-    return {
-        capabilityId: TICKET08_TEST_MODEL_CLEANUP_CAPABILITY_ID,
-        operationKind: "owned-model-physical-delete",
-        method: "POST",
-        endpoint: TICKET08_MODEL_CLEANUP_ENDPOINT,
-        dependencyCheck: "/api/api/app/bizmodels/exits_bizschema:errTypes-empty",
-        taskHistory: "/api/api/app/apppackage/delete/history:taskStatus-END",
-        postDeleteAbsenceReadback: `${TICKET08_MODEL_READBACK_ENDPOINT}:exact-absence`,
-        ownership: "model-id-folder-and-schema-prefix-bound-to-testRunId",
-        replayPolicy: "absent-is-no-op",
-        uncertainPolicy: "stop-retain-report-no-retry",
-    };
-}
-/** Package operations must be exactly one bounded create (or cleanup) step for the bound target. */
-export function assertTicket08OperationsBounded(input) {
-    if (input.operations.length !== 1)
-        throw new Error("Ticket 08 packages must contain exactly one bounded operation.");
-    const operation = input.operations[0];
-    const identity = `${operation.id} ${operation.target} ${operation.path}`.toLowerCase();
-    const expectedPrefix = input.route === TICKET08_TEST_MUTATION_ROUTE ? "model:" : "cleanup:model:";
-    if (TICKET08_PROHIBITED_MUTATION_TERMS.some((term) => identity.includes(term)) || !operation.id.startsWith(expectedPrefix))
-        throw new Error(`Ticket 08 operation ${operation.id} is outside the bounded operation set; prohibited families (publish, deploy, restart, release, redis, tenant administration, runtime CRUD, field/form/view writes) remain rejected.`);
-    const expected = input.route === TICKET08_TEST_MUTATION_ROUTE
-        ? { id: `model:${input.targetSchemaCode}`, path: TICKET08_MODEL_CREATE_ENDPOINT, transportMode: "serialized-server-model-create-8.6.26" }
-        : { id: `cleanup:model:${input.targetSchemaCode}`, path: TICKET08_MODEL_CLEANUP_ENDPOINT, transportMode: "cloudpivot-model-physical-delete-8.6.26" };
-    if (operation.id !== expected.id || operation.path !== expected.path || operation.transportMode !== expected.transportMode || operation.target !== `model:${input.targetSchemaCode}`)
-        throw new Error(`Ticket 08 operation ${operation.id} does not match the exact target binding for ${input.targetSchemaCode}.`);
-}
-/** Builds the signed, version-bound pack promoting exactly the single test model-create capability. */
-export function buildTicket08TestMutationKnowledgePack(input) {
-    const compiler = { id: "src/ticket08-test-model-mutation.ts:createTicket08TestMutationPlanApproval", sha256: digest("omc-ticket08-compiler-v1") };
-    const decoder = { id: "src/dsh-host-plugin.ts:createCloudPivotWriteTransport", sha256: digest("omc-ticket08-decoder-v1") };
-    return buildKnowledgePack({
-        packId: TICKET08_TEST_MUTATION_KNOWLEDGE_PACK_ID,
-        packVersion: "1.0.0",
-        sourceVersion: TICKET08_REFERENCE_EVIDENCE_VERSION,
-        sourceArtifacts: [{ id: "cloudpivot-8.6.26-serialized-model-create-capability", sha256: digest(CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE) }],
-        references: [
-            { id: "ticket02-live-test-model-create-readback-cleanup-evidence", sha256: digest("ticket02-live-acceptance") },
-            { id: TICKET08_MODEL_CREATE_ENDPOINT, sha256: digest(TICKET08_MODEL_CREATE_ENDPOINT) },
-            { id: TICKET08_MODEL_READBACK_ENDPOINT, sha256: digest(TICKET08_MODEL_READBACK_ENDPOINT) },
-            { id: TICKET08_MODEL_CLEANUP_ENDPOINT, sha256: digest(TICKET08_MODEL_CLEANUP_ENDPOINT) },
-        ],
-        compilers: [compiler],
-        decoders: [decoder],
-        capabilities: [{
-                id: TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID,
-                status: "runtime-verified",
-                promote: true,
-                compilerRef: compiler.id,
-                decoderRef: decoder.id,
-                sourceEvidence: [...CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE.evidence, TICKET08_MODEL_CREATE_ENDPOINT, TICKET08_MODEL_READBACK_ENDPOINT, "AppIntegrationFacadeImpl.java:1273-1302"],
-                runtimeEvidence: ["ticket02-live-test-model-create-readback-physical-delete-cycle", "cloudpivot.model-create.serialized-server-8.6.26"],
-                operationPromotions: [{
-                        id: "model-create",
-                        status: "promoted",
-                        operationContractHash: ticket08ModelCreateContractHash(),
-                        sourceRefs: [...CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE.evidence, TICKET08_MODEL_CREATE_ENDPOINT, TICKET08_MODEL_READBACK_ENDPOINT, TICKET08_MODEL_CLEANUP_ENDPOINT],
-                        versionFamily: "8.6",
-                        referenceVersion: TICKET08_REFERENCE_EVIDENCE_VERSION,
-                        requiredEvidence: ["cleanup", "discovery", "permission", "readback", "test", "write"],
-                        evidence: ["cleanup", "discovery", "permission", "readback", "test", "write"],
-                        blockedReasons: [],
-                    }],
-            }],
-        signerKeyId: input.signerKeyId,
-        signingKey: input.signingKey,
-        createdAt: input.createdAt,
-    });
-}
-/** Loads the pack against CloudPivot 8.6.26 and pins the single executable capability and contract hash. */
-export function loadTicket08KnowledgePack(artifact, trustedKeys) {
-    const runtime = new KnowledgePackRuntime(trustedKeys);
-    const load = runtime.load(artifact, TICKET08_REFERENCE_EVIDENCE_VERSION);
-    if (!load.accepted)
-        throw new Error(`Ticket 08 Knowledge Pack is not authoritative: ${load.blockingReasons.join(", ")}.`);
-    const active = runtime.active();
-    const capabilities = active.capabilities;
-    if (capabilities.length !== 1 || capabilities[0].id !== TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID)
-        throw new Error("Ticket 08 Knowledge Pack must promote exactly the single test model-create capability; evidence inference to other capabilities is rejected.");
-    const hashes = capabilities[0].operationContractHashes;
-    if (hashes.length !== 1 || hashes[0] !== ticket08ModelCreateContractHash())
-        throw new Error("Ticket 08 Knowledge Pack operation contract hash does not match the canonical model-create contract.");
-    return { runtime, packId: active.manifest.packId, contentDigest: active.manifest.contentSha256, executableCapabilities: capabilities.map(({ id }) => id) };
-}
-/** Host-owned evidence capture: exact absence, dedicated application, existing non-default folder, canonical fingerprints. */
-export function captureTicket08TestMutationEvidence(input) {
-    assertTicket08TestMutationEnvironment(input.settings);
-    if (!TICKET08_UUID_V4.test(input.testRunId))
-        throw new Error("Ticket 08 evidence capture requires a host-owned UUID v4 testRunId.");
-    const discovery = input.discovery;
-    if (!discovery.applications.some((application) => application.code === TICKET08_TEST_APPLICATION_CODE))
-        throw new Error("Ticket 08 evidence capture requires the dedicated test application to be present in authoritative discovery.");
-    const isDefaultFolder = (folder) => [folder.code, folder.name].some((value) => value?.trim().toLowerCase() === "default" || value?.trim() === "默认分组");
-    const candidates = discovery.folders.filter((folder) => folder.applicationCode === TICKET08_TEST_APPLICATION_CODE);
-    const nonDefault = candidates.filter((folder) => !isDefaultFolder(folder));
-    // An explicit folderId must name a real non-default folder of the
-    // application; the default folder is only a fallback when the dedicated
-    // test application has no non-default folder at all. Ownership stays
-    // provable in both cases through the prefix, folder binding, and readback.
-    const folder = input.folderId
-        ? (() => { const match = nonDefault.find((candidate) => candidate.id === input.folderId); if (!match)
-            throw new Error("Ticket 08 evidence capture folderId must match an existing non-default folder of the dedicated test application."); return match; })()
-        : nonDefault.length === 1 ? nonDefault[0] : nonDefault.length === 0 ? candidates.find(isDefaultFolder) : undefined;
-    if (!folder)
-        throw new Error("Ticket 08 evidence capture requires exactly one existing non-default folder in the dedicated test application, or an explicit matching folderId.");
-    const targetSchemaCode = assertTicket08TargetSchema(input.targetSchemaCode);
-    const modelEvidence = input.modelEvidence;
-    if (modelEvidence.classification !== "absent" || modelEvidence.reason !== "exact-absence" || modelEvidence.query.schemaCode !== targetSchemaCode || modelEvidence.url !== `${TICKET08_MODEL_READBACK_ENDPOINT}?schemaCode=${encodeURIComponent(targetSchemaCode)}`)
-        throw new Error("Ticket 08 evidence capture requires exact authenticated absence evidence for the host-derived target model.");
-    if (discovery.models.some((model) => model.applicationCode === TICKET08_TEST_APPLICATION_CODE && model.schemaCode === targetSchemaCode))
-        throw new Error("Ticket 08 target model is already present in authoritative discovery.");
-    const authoritativeOrigin = discovery.authoritativeOrigin;
-    const enterpriseId = discovery.enterpriseId;
-    if (!authoritativeOrigin || !enterpriseId)
-        throw new Error("Ticket 08 evidence capture requires authenticated environment fingerprint evidence.");
-    const environmentFingerprint = canonicalCloudPivotEnvironmentFingerprint({ environment: TICKET08_TEST_ENVIRONMENT_NAME, authoritativeOrigin, applicationCode: TICKET08_TEST_APPLICATION_CODE, enterpriseId });
-    const evidence = Object.freeze({
-        route: TICKET08_TEST_MUTATION_ROUTE,
-        capabilityId: TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID,
-        environmentName: TICKET08_TEST_ENVIRONMENT_NAME,
-        applicationCode: TICKET08_TEST_APPLICATION_CODE,
-        folder: Object.freeze({ id: folder.id, name: folder.name }),
-        targetSchemaCode,
-        testRunId: input.testRunId,
-        resourceName: ticket08ResourceName(targetSchemaCode),
-        environmentFingerprint,
-        baselineFingerprint: canonicalCloudPivotBaselineFingerprint({ environmentFingerprint, applicationCode: TICKET08_TEST_APPLICATION_CODE, discovery }),
-        discoveryFingerprint: canonicalFormalDiscoveryFingerprint(discovery),
-        modelEvidence,
-        cleanupContract: buildTicket08CleanupContract(input.testRunId, targetSchemaCode),
-        capturedAt: new Date((input.now ?? Date.now)()).toISOString(),
-    });
-    if ([evidence.environmentFingerprint, evidence.baselineFingerprint, evidence.discoveryFingerprint].some((value) => !SHA256.test(value)))
-        throw new Error("Ticket 08 evidence fingerprints are not canonical.");
-    if (SENSITIVE_SECRET_VALUE.test(stable(evidence)))
-        throw new Error("Ticket 08 evidence contains prohibited sensitive data.");
-    return evidence;
-}
-export const TICKET08_EVIDENCE_DEFAULT_TTL_MS = 25 * 60_000;
-export const TICKET08_EVIDENCE_MAX_TTL_MS = 30 * 60_000;
-/** Single-use, TTL-bounded evidence store; consumed exactly once by plan creation. */
-export class Ticket08EvidenceStore {
-    records = new Map();
-    now;
-    ttlMs;
-    lastNow;
-    constructor(options = {}) {
-        this.now = options.now ?? Date.now;
-        this.ttlMs = options.ttlMs ?? TICKET08_EVIDENCE_DEFAULT_TTL_MS;
-        if (!Number.isFinite(this.ttlMs) || this.ttlMs < 1 || this.ttlMs > TICKET08_EVIDENCE_MAX_TTL_MS)
-            throw new Error("Ticket 08 evidence TTL must be between 1ms and its safety maximum.");
-    }
-    capture(evidence) {
-        validateTicket08Evidence(evidence);
-        const evidenceId = `ticket08-evidence-${randomUUID()}`;
-        const expiresAt = this.readClock() + this.ttlMs;
-        const stored = Object.freeze({ ...evidence, evidenceArtifactId: evidenceId });
-        this.records.set(evidenceId, { evidence: stored, expiresAt, consumed: false });
-        return { evidenceId, expiresAt, evidence: stored };
-    }
-    consume(evidenceId) {
-        const record = this.records.get(evidenceId);
-        if (!record)
-            throw new Error("Ticket 08 evidence artifact is missing or divergent.");
-        if (record.consumed)
-            throw new Error("Ticket 08 evidence has already been consumed.");
-        if (record.expiresAt <= this.readClock())
-            throw new Error("Ticket 08 evidence is stale or expired.");
-        record.consumed = true;
-        return record.evidence;
-    }
-    resolve(evidenceId) {
-        const record = this.records.get(evidenceId);
-        if (!record || !record.consumed)
-            throw new Error("Ticket 08 evidence artifact is missing or has not been consumed by planning.");
-        if (record.expiresAt <= this.readClock())
-            throw new Error("Ticket 08 evidence artifact is stale or expired.");
-        return record.evidence;
-    }
-    readClock() {
-        const currentTime = this.now();
-        if (!Number.isFinite(currentTime))
-            throw new Error("Ticket 08 evidence clock is invalid; fail closed.");
-        if (this.lastNow !== undefined && currentTime < this.lastNow)
-            throw new Error("Ticket 08 evidence clock moved backwards; fail closed.");
-        this.lastNow = currentTime;
-        return currentTime;
-    }
-}
-export function buildTicket08ConfigurationIntent(evidence) {
-    validateTicket08Evidence(evidence);
-    return {
-        intentVersion: 1,
-        targetFamily: "8.6",
-        environmentBinding: { application: evidence.applicationCode, model: evidence.targetSchemaCode, baselineFingerprint: evidence.baselineFingerprint },
-        sourceRequirement: "Ticket 08 maintainer test: create one unique test-only LIST model with authoritative readback, behavior validation, and owned cleanup.",
-        resources: [{ id: evidence.targetSchemaCode, kind: "model", state: "create", properties: { modelType: "LIST", folderId: evidence.folder.id, name: evidence.resourceName } }],
-        relationships: [],
-        lifecycle: [{ resourceId: evidence.targetSchemaCode, transitions: ["create"], order: 1, idempotent: false, dependencyChecks: ["exact-absence-preflight"], recoveryBoundary: `model:${evidence.targetSchemaCode}` }],
-        behavior: [{ id: "created-model-structure", kind: "structure", requiredCapabilityIds: [TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID], resourceIds: [evidence.targetSchemaCode], obligations: ["authoritative get_all readback as LIST", "directory projection under the bound folder", "default form binding to the created model"] }],
-        acceptance: [{ id: "ticket08-create-readback", scenario: "create-readback-behavior", actor: "omc-maintainer-opencode", assertions: ["model is present with exact schemaCode and modelType LIST", "model appears in discovery under the bound non-default folder", "default form binding targets the created model"], readbackInvariants: [`${TICKET08_MODEL_READBACK_ENDPOINT}?schemaCode=<target> returns the exact LIST model`, "discovery directory binds the model to the bound folder with a default form"], outcome: "validated" }],
-        cleanup: [{ id: "ticket08-owned-cleanup", boundary: `ticket08:${evidence.testRunId}:model-physical-delete`, dependencyChecks: [`${TICKET08_MODEL_CLEANUP_ENDPOINT} dependency preflight errTypes empty`, "delete history taskStatus END"], resources: [`model:${evidence.targetSchemaCode}`] }],
-        implementationConstraints: { nativePreferred: true, backendRequired: false, prohibitedPaths: ["form.online-js", "business-rule", "integration", "backend.extension"], approvalExceptions: [] },
-        evidenceRefs: [TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID, TICKET08_MODEL_CREATE_ENDPOINT, TICKET08_MODEL_READBACK_ENDPOINT, TICKET08_MODEL_CLEANUP_ENDPOINT, ...CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE.evidence],
-        unresolved: [],
-    };
-}
-function ticket08ModelCreateOperation(evidence) {
-    return {
-        id: `model:${evidence.targetSchemaCode}`,
-        method: "POST",
-        path: TICKET08_MODEL_CREATE_ENDPOINT,
-        target: `model:${evidence.targetSchemaCode}`,
-        payload: buildListModelPayload({ appCode: evidence.applicationCode, parentId: evidence.folder.id, name: evidence.resourceName, schemaCode: evidence.targetSchemaCode }),
-        expectedReadback: `model:${evidence.targetSchemaCode}:LIST`,
-        evidence: [TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID, ...CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE.evidence, TICKET08_MODEL_READBACK_ENDPOINT],
-        transportMode: "serialized-server-model-create-8.6.26",
-        capability: CLOUDPIVOT_8_6_26_SERIALIZED_MODEL_CREATE,
-    };
-}
-/** Creates and proposes the immutable Ticket 08 Delivery Plan Approval for the single create step. */
-export function createTicket08TestMutationPlanApproval(input) {
-    const evidence = validateTicket08Evidence(input.evidence);
-    assertDigest(input.knowledgePackDigest, "knowledge pack digest");
-    const operation = ticket08ModelCreateOperation(evidence);
-    assertTicket08OperationsBounded({ route: TICKET08_TEST_MUTATION_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode });
-    const intent = buildTicket08ConfigurationIntent(evidence);
-    if (validateConfigurationIntent(intent).length)
-        throw new Error("Ticket 08 Configuration Intent is invalid; planning is blocked.");
-    const binding = {
-        deliveryId: ticket08DeliveryId(evidence.testRunId),
-        environment: TICKET08_TEST_ENVIRONMENT_NAME,
-        baselineFingerprint: evidence.baselineFingerprint,
-        environmentFingerprint: evidence.environmentFingerprint,
-        discoveryFingerprint: evidence.discoveryFingerprint,
-        ...(evidence.evidenceArtifactId ? { evidenceArtifactId: evidence.evidenceArtifactId } : {}),
-    };
-    const planHash = digest({ route: TICKET08_TEST_MUTATION_ROUTE, capabilityId: TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID, target: evidence.targetSchemaCode, testRunId: evidence.testRunId, operation: { id: operation.id, readback: operation.expectedReadback }, folder: evidence.folder, fingerprints: { baseline: evidence.baselineFingerprint, environment: evidence.environmentFingerprint, discovery: evidence.discoveryFingerprint }, cleanupContractHash: ticket08CleanupContractHash(), knowledgePackDigest: input.knowledgePackDigest, prohibited: [...TICKET08_PROHIBITED_MUTATION_TERMS] });
-    const base = createDeliveryPlanApproval({
-        binding,
-        requirementHash: digest({ target: evidence.targetSchemaCode }),
-        clarificationHash: digest("ticket08-test-model-mutation"),
-        intentHash: digest(intent),
-        decisionHash: digest(TICKET08_TEST_MUTATION_ROUTE),
-        graphHash: digest([operation.id]),
-        riskHash: digest(TICKET08_RISKS),
-        validationPlanHash: digest("authoritative-model-get-readback-and-default-form-behavior"),
-        cleanupPlanHash: ticket08CleanupContractHash(),
-        allowedOperationScope: [ticket08ModelScope(evidence.targetSchemaCode)],
-        planHash,
-        applicationCode: TICKET08_TEST_APPLICATION_CODE,
-        folderId: evidence.folder.id,
-        folderName: evidence.folder.name,
-        targets: [evidence.targetSchemaCode],
-    });
-    const approval = {
-        ...base,
-        route: TICKET08_TEST_MUTATION_ROUTE,
-        testRunId: evidence.testRunId,
-        targetSchemaCode: evidence.targetSchemaCode,
-        capabilityId: TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID,
-        knowledgePackDigest: input.knowledgePackDigest,
-        cleanupContractHash: ticket08CleanupContractHash(),
-        environmentName: TICKET08_TEST_ENVIRONMENT_NAME,
-    };
-    const proposal = { ...approval, approvalHash: deliveryPlanApprovalHash(approval) };
-    proposeDeliveryPlan(input.ledger, proposal);
-    return { approval: proposal, operation, cleanupContract: evidence.cleanupContract, intent, binding };
-}
-const TICKET08_RISKS = [
-    "Exactly one unique test-only LIST model create is in scope; field, form, view, runtime, folder, publish, deployment, restart, release, Redis, and tenant administration remain rejected.",
-    "Owned cleanup is separately approved and bounded to resources created by this testRunId with authoritative absence readback.",
-];
-/** Proves the fixture was created by this run: schema prefix, dedicated application, bound folder, present readback. */
-export function validateTicket08CleanupOwnership(input) {
-    const evidence = validateTicket08Evidence(input.evidence);
-    assertTicket08TargetSchema(evidence.targetSchemaCode);
-    const entry = input.designTime.directory.models.find((candidate) => candidate.schemaCode === evidence.targetSchemaCode);
-    if (!entry || entry.appCode !== evidence.applicationCode)
-        throw new Error(`Ticket 08 cleanup target ${evidence.targetSchemaCode} is not present in the authoritative design-time directory under the dedicated test application.`);
-    if (input.modelEvidence.classification !== "present" || input.modelEvidence.query.schemaCode !== evidence.targetSchemaCode)
-        throw new Error("Ticket 08 cleanup requires the created model to be present in authoritative readback.");
-    if (entry.modelType !== "LIST")
-        throw new Error("Ticket 08 cleanup ownership requires the created LIST model semantics.");
-    if (entry.parentId !== evidence.folder.id)
-        throw new Error("Ticket 08 cleanup ownership folder binding diverges from the evidence folder.");
-    if (typeof entry.id !== "string" || !entry.id)
-        throw new Error("Ticket 08 cleanup ownership requires the authoritative model id.");
-    return {
-        modelId: entry.id,
-        folderId: entry.parentId ?? evidence.folder.id,
-        testRunId: evidence.testRunId,
-        postCreateBaselineFingerprint: canonicalCloudPivotBaselineFingerprint({ environmentFingerprint: evidence.environmentFingerprint, applicationCode: evidence.applicationCode, discovery: input.discovery }),
-    };
-}
-/** Creates and proposes the separately gated cleanup Delivery Plan Approval bound to the owned fixture. */
-export function createTicket08CleanupPlanApproval(input) {
-    const evidence = validateTicket08Evidence(input.evidence);
-    assertDigest(input.knowledgePackDigest, "knowledge pack digest");
-    if (input.ownership.testRunId !== evidence.testRunId || input.ownership.folderId !== evidence.folder.id || !input.ownership.modelId || !SHA256.test(input.ownership.postCreateBaselineFingerprint))
-        throw new Error("Ticket 08 cleanup approval requires the exact validated ownership binding.");
-    const operation = buildPhysicalCleanupOperation({ kind: "model", schemaCode: evidence.targetSchemaCode, id: input.ownership.modelId });
-    assertTicket08OperationsBounded({ route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode });
-    const binding = {
-        deliveryId: ticket08CleanupDeliveryId(evidence.testRunId),
-        environment: TICKET08_TEST_ENVIRONMENT_NAME,
-        baselineFingerprint: input.ownership.postCreateBaselineFingerprint,
-        environmentFingerprint: evidence.environmentFingerprint,
-        ...(evidence.evidenceArtifactId ? { evidenceArtifactId: evidence.evidenceArtifactId } : {}),
-    };
-    const planHash = digest({ route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, capabilityId: TICKET08_TEST_MODEL_CLEANUP_CAPABILITY_ID, target: evidence.targetSchemaCode, testRunId: evidence.testRunId, modelId: input.ownership.modelId, operation: { id: operation.id, readback: operation.expectedReadback }, cleanupContractHash: ticket08CleanupContractHash(), knowledgePackDigest: input.knowledgePackDigest, prohibited: [...TICKET08_PROHIBITED_MUTATION_TERMS] });
-    const base = createDeliveryPlanApproval({
-        binding,
-        requirementHash: digest({ target: evidence.targetSchemaCode, cleanup: true }),
-        clarificationHash: digest("ticket08-owned-cleanup"),
-        intentHash: digest({ cleanup: true, target: evidence.targetSchemaCode, modelId: input.ownership.modelId }),
-        decisionHash: digest(TICKET08_TEST_MODEL_CLEANUP_ROUTE),
-        graphHash: digest([operation.id]),
-        riskHash: digest(TICKET08_CLEANUP_RISKS),
-        validationPlanHash: digest("physical-delete-history-end-and-exact-absence"),
-        cleanupPlanHash: ticket08CleanupContractHash(),
-        allowedOperationScope: [ticket08ModelScope(evidence.targetSchemaCode)],
-        planHash,
-        applicationCode: TICKET08_TEST_APPLICATION_CODE,
-        folderId: evidence.folder.id,
-        folderName: evidence.folder.name,
-        targets: [evidence.targetSchemaCode],
-    });
-    const approval = {
-        ...base,
-        route: TICKET08_TEST_MODEL_CLEANUP_ROUTE,
-        testRunId: evidence.testRunId,
-        targetSchemaCode: evidence.targetSchemaCode,
-        capabilityId: TICKET08_TEST_MODEL_CLEANUP_CAPABILITY_ID,
-        knowledgePackDigest: input.knowledgePackDigest,
-        cleanupContractHash: ticket08CleanupContractHash(),
-        environmentName: TICKET08_TEST_ENVIRONMENT_NAME,
-    };
-    const proposal = { ...approval, approvalHash: deliveryPlanApprovalHash(approval) };
-    proposeDeliveryPlan(input.ledger, proposal);
-    return { approval: proposal, operation, cleanupContract: evidence.cleanupContract, intent: buildTicket08ConfigurationIntent(evidence), binding };
-}
-const TICKET08_CLEANUP_RISKS = [
-    "Cleanup physically deletes exactly the one model created by this testRunId after ownership and dependency preflight.",
-    "Uncertain delete outcomes stop, retain, and report the fixture; replay and unbounded deletion are rejected.",
-];
-/**
- * Maintainer orphan cleanup: prior Ticket 08 runs whose create committed but
- * whose cleanup could not complete left host-owned fixtures. They are provably
- * ours (omc_t08_ prefix, dedicated test application, non-default folder, LIST,
- * present schema, design-time directory entry) and are invisible to every
- * published UI view. Adoption is bounded to exactly this shape and still
- * requires both DSH-native approvals and exact absence readback.
- */
-export const TICKET08_ORPHAN_CLEANUP_CAPABILITY_ID = "cloudpivot.test.orphan-cleanup-8.6.26";
-export function captureTicket08OrphanCleanupEvidence(input) {
-    assertTicket08TestMutationEnvironment(input.settings);
-    const targetSchemaCode = assertTicket08TargetSchema(input.modelEvidence.query.schemaCode);
-    if (input.modelEvidence.classification !== "present")
-        throw new Error(`Ticket 08 orphan cleanup requires the fixture to be present in authoritative readback; ${targetSchemaCode} is ${input.modelEvidence.classification}.`);
-    const entry = input.designTime.directory.models.find((candidate) => candidate.schemaCode === targetSchemaCode);
-    if (!entry || entry.appCode !== TICKET08_TEST_APPLICATION_CODE || entry.modelType !== "LIST")
-        throw new Error(`Ticket 08 orphan cleanup requires a design-time directory entry binding ${targetSchemaCode} to the dedicated test application as LIST.`);
-    if (entry.parentId !== input.folder.id || input.designTime.directory.folderId !== input.folder.id)
-        throw new Error("Ticket 08 orphan cleanup folder binding diverges between the directory entry and the adopted folder.");
-    if (typeof entry.id !== "string" || !entry.id)
-        throw new Error("Ticket 08 orphan cleanup requires the design-time directory node id.");
-    if (!input.folder.name)
-        throw new Error("Ticket 08 orphan cleanup requires the adopted folder of the dedicated test application.");
-    const environmentFingerprint = canonicalCloudPivotEnvironmentFingerprint({ environment: TICKET08_TEST_ENVIRONMENT_NAME, authoritativeOrigin: input.authoritativeOrigin, applicationCode: TICKET08_TEST_APPLICATION_CODE, enterpriseId: input.enterpriseId });
-    // The canonical discovery baseline keeps the executor mutation boundary
-    // comparable at orphan execution time.
-    const baselineFingerprint = canonicalCloudPivotBaselineFingerprint({ environmentFingerprint, applicationCode: TICKET08_TEST_APPLICATION_CODE, discovery: input.discovery });
-    const evidence = Object.freeze({
-        route: TICKET08_TEST_MODEL_CLEANUP_ROUTE,
-        capabilityId: TICKET08_ORPHAN_CLEANUP_CAPABILITY_ID,
-        environmentName: TICKET08_TEST_ENVIRONMENT_NAME,
-        applicationCode: TICKET08_TEST_APPLICATION_CODE,
-        folder: Object.freeze({ id: input.folder.id, name: input.folder.name }),
-        targetSchemaCode,
-        nodeModelId: entry.id,
-        environmentFingerprint,
-        baselineFingerprint,
-        modelEvidence: input.modelEvidence,
-        capturedAt: new Date((input.now ?? Date.now)()).toISOString(),
-    });
-    if (!SHA256.test(evidence.environmentFingerprint) || !SHA256.test(evidence.baselineFingerprint))
-        throw new Error("Ticket 08 orphan evidence fingerprints are not canonical.");
-    if (SENSITIVE_SECRET_VALUE.test(stable(evidence)))
-        throw new Error("Ticket 08 orphan evidence contains prohibited sensitive data.");
-    return evidence;
-}
-const TICKET08_ORPHAN_CLEANUP_RISKS = [
-    "Orphan cleanup physically deletes exactly one previously retained host-owned omc_t08 fixture after adoption ownership and dependency preflight.",
-    "Uncertain delete outcomes stop, retain, and report the fixture; replay and unbounded deletion are rejected.",
-];
-export function createTicket08OrphanCleanupPlanApproval(input) {
-    const evidence = input.evidence;
-    assertDigest(input.knowledgePackDigest, "knowledge pack digest");
-    assertTicket08TargetSchema(evidence.targetSchemaCode);
-    const operation = buildPhysicalCleanupOperation({ kind: "model", schemaCode: evidence.targetSchemaCode, id: evidence.nodeModelId });
-    assertTicket08OperationsBounded({ route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode });
-    const binding = {
-        deliveryId: `ticket08-orphan-cleanup-${evidence.targetSchemaCode}`,
-        environment: TICKET08_TEST_ENVIRONMENT_NAME,
-        baselineFingerprint: evidence.baselineFingerprint,
-        environmentFingerprint: evidence.environmentFingerprint,
-    };
-    const planHash = digest({ route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, capabilityId: TICKET08_ORPHAN_CLEANUP_CAPABILITY_ID, target: evidence.targetSchemaCode, nodeModelId: evidence.nodeModelId, operation: { id: operation.id, readback: operation.expectedReadback }, cleanupContractHash: ticket08CleanupContractHash(), knowledgePackDigest: input.knowledgePackDigest, prohibited: [...TICKET08_PROHIBITED_MUTATION_TERMS] });
-    const base = createDeliveryPlanApproval({
-        binding,
-        requirementHash: digest({ orphanCleanup: true, target: evidence.targetSchemaCode }),
-        clarificationHash: digest("ticket08-orphan-cleanup"),
-        intentHash: digest({ orphanCleanup: true, target: evidence.targetSchemaCode, nodeModelId: evidence.nodeModelId }),
-        decisionHash: digest("ticket08-orphan-cleanup"),
-        graphHash: digest([operation.id]),
-        riskHash: digest(TICKET08_ORPHAN_CLEANUP_RISKS),
-        validationPlanHash: digest("physical-delete-history-end-and-exact-absence"),
-        cleanupPlanHash: ticket08CleanupContractHash(),
-        allowedOperationScope: [ticket08ModelScope(evidence.targetSchemaCode)],
-        planHash,
-        applicationCode: TICKET08_TEST_APPLICATION_CODE,
-        folderId: evidence.folder.id,
-        folderName: evidence.folder.name,
-        targets: [evidence.targetSchemaCode],
-    });
-    const approval = {
-        ...base,
-        route: TICKET08_TEST_MODEL_CLEANUP_ROUTE,
-        testRunId: `orphan-${evidence.targetSchemaCode}`,
-        targetSchemaCode: evidence.targetSchemaCode,
-        capabilityId: TICKET08_ORPHAN_CLEANUP_CAPABILITY_ID,
-        knowledgePackDigest: input.knowledgePackDigest,
-        cleanupContractHash: ticket08CleanupContractHash(),
-        environmentName: TICKET08_TEST_ENVIRONMENT_NAME,
-    };
-    const proposal = { ...approval, approvalHash: deliveryPlanApprovalHash(approval) };
-    proposeDeliveryPlan(input.ledger, proposal);
-    return { approval: proposal, operation };
-}
-export function prepareTicket08OrphanCleanupPackage(input) {
-    const evidence = input.evidence;
-    const value = input.approval;
-    if (value.route !== TICKET08_TEST_MODEL_CLEANUP_ROUTE || value.capabilityId !== TICKET08_ORPHAN_CLEANUP_CAPABILITY_ID || value.environmentName !== "test" || value.applicationCode !== "test" || value.targets?.length !== 1 || value.targets?.[0] !== evidence.targetSchemaCode)
-        throw new Error("Ticket 08 orphan package preparation requires the exact proposed orphan cleanup approval.");
-    const persisted = input.ledger.findPlanApproval(value.approvalId);
-    if (!persisted || persisted.status !== "approved" || persisted.approvalHash !== value.approvalHash)
-        throw new Error("Ticket 08 orphan package preparation requires the approved orphan cleanup Delivery Plan Approval.");
-    if (!persisted.allowedOperationScope.includes(ticket08ModelScope(evidence.targetSchemaCode)))
-        throw new Error(`Ticket 08 orphan step is outside the approved operation scope: ${ticket08ModelScope(evidence.targetSchemaCode)}.`);
-    if (input.knowledgePackDigest !== value.knowledgePackDigest)
-        throw new Error("Ticket 08 knowledge pack digest diverges from the orphan cleanup approval binding.");
-    const operation = buildPhysicalCleanupOperation({ kind: "model", schemaCode: evidence.targetSchemaCode, id: evidence.nodeModelId });
-    assertTicket08OperationsBounded({ route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode });
-    const snapshotBase = { id: `snapshot:${operation.id}`, target: operation.target, identity: operation.target, recoveryBoundary: operation.target, state: "absent", baselineFingerprint: persisted.binding.baselineFingerprint };
-    const snapshot = { ...snapshotBase, snapshotHash: digest(snapshotBase) };
-    const pkg = compileNativeOperations({
-        operations: [operation],
-        binding: persisted.binding,
-        planApproval: persisted,
-        snapshotManifest: [snapshot],
-        releasePlanHash: digest("ticket08-no-release"),
-        recoveryPolicyHash: digest("ticket08-orphan-cleanup-step-only"),
-        knowledgePack: { id: TICKET08_TEST_MUTATION_KNOWLEDGE_PACK_ID, digest: input.knowledgePackDigest },
-        capabilityEvidence: [TICKET08_ORPHAN_CLEANUP_CAPABILITY_ID, TICKET08_MODEL_CLEANUP_ENDPOINT, "/api/api/app/apppackage/delete/history", `nodeModelId:${evidence.nodeModelId}`, `adoptedFixture:${evidence.targetSchemaCode}`],
-        requiredPermissions: ["configuration-write"],
-        packageId: `ticket08-orphan-cleanup-${digest(persisted.approvalId).slice(0, 32)}`,
-        ledger: input.ledger,
-    });
-    input.ledger.createPackage(pkg);
-    return { package: pkg, operations: [operation], planApproval: persisted, evidence };
-}
-export async function executeTicket08OrphanCleanupPackage(input) {
-    assertTicket08TestMutationEnvironment(input.settings);
-    if (typeof input.transport.physicalDeleteModel !== "function")
-        throw new Error("Ticket 08 orphan cleanup requires the OMC Host physical model delete transport; bypass transports are rejected.");
-    const projection = input.ledger.project(input.prepared.package.packageId);
-    assertTicket08ExecutionBoundary({ projection, environmentName: input.settings.environmentName, packageId: input.prepared.package.packageId, route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, steps: input.prepared.package.steps });
-    if (input.environmentApproval.packageId !== input.prepared.package.packageId || input.environmentApproval.packageHash !== input.prepared.package.packageHash)
-        throw new Error("Ticket 08 orphan cleanup Environment Change Approval does not match the prepared package.");
-    const probe = await input.readModelEvidence();
-    if (probe.classification === "absent") {
-        return { reportType: "omc.ticket08.test-mutation-execution", schemaVersion: 1, packageId: input.prepared.package.packageId, packageHash: input.prepared.package.packageHash, route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, testRunId: `orphan-${input.evidence.targetSchemaCode}`, targetSchemaCode: input.evidence.targetSchemaCode, status: "blocked", mutationExecuted: false, steps: projection.steps, blockers: ["Ticket 08 orphan cleanup target is already absent; no unbounded deletion is attempted."], nextAction: "accept", absenceReadback: probe };
-    }
-    const result = await runNativeConfigurationPackage({
-        package: input.prepared.package,
-        gate: {
-            mode: "approved",
-            planApproval: { status: "approved", approvalHash: input.prepared.planApproval.approvalHash },
-            environmentApproval: { status: "approved", packageHash: input.environmentApproval.packageHash },
-            lease: { owner: "configuration-agent", environment: TICKET08_TEST_ENVIRONMENT_NAME },
-            baselineFingerprint: input.prepared.package.binding.baselineFingerprint,
-            snapshots: input.prepared.package.snapshotManifest,
-            package: input.prepared.package,
-        },
-        operations: input.prepared.operations,
-        ledger: input.ledger,
-        planApproval: input.prepared.planApproval,
-        transport: input.transport,
-        credentials: input.credentials,
-        authoritativeOrigin: input.authoritativeOrigin,
-        testApplicationCode: TICKET08_TEST_APPLICATION_CODE,
-    }, input.signal);
-    const mutationExecuted = result.steps.some((step) => step.status === "committed" || step.status === "uncertain");
-    const blockers = [...result.blockers];
-    let status = ticket08ExecutionStatus(result.status);
-    let nextAction = result.nextAction;
-    let absenceReadback;
-    if (result.status === "completed") {
-        absenceReadback = await input.readModelEvidence();
-        if (absenceReadback.classification !== "absent" || absenceReadback.reason !== "exact-absence") {
-            status = "uncertain";
-            blockers.push("Ticket 08 orphan post-cleanup exact absence readback did not confirm absence; the fixture is retained and reported.");
-            nextAction = "reconcile";
-        }
-    }
-    return { reportType: "omc.ticket08.test-mutation-execution", schemaVersion: 1, packageId: result.packageId, packageHash: result.packageHash, route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, testRunId: `orphan-${input.evidence.targetSchemaCode}`, targetSchemaCode: input.evidence.targetSchemaCode, status, mutationExecuted, steps: result.steps, blockers, nextAction, ...(absenceReadback ? { absenceReadback } : {}) };
-}
-export function formatTicket08OrphanCleanupDeliveryPlanApprovalFrame(approval) {
-    const value = approval;
-    if (value.route !== TICKET08_TEST_MODEL_CLEANUP_ROUTE || value.capabilityId !== TICKET08_ORPHAN_CLEANUP_CAPABILITY_ID)
-        throw new Error("Approval frame is not the Ticket 08 orphan cleanup Delivery Plan Approval.");
-    return appendApprovalHumanBlock(`Approve Ticket 08 orphan cleanup Delivery Plan Approval ${value.approvalId} hash ${value.approvalHash}; plan hash ${value.planHash}; capability ${value.capabilityId}; environment test; application test; environment fingerprint ${value.binding.environmentFingerprint}; adopted baseline fingerprint ${value.binding.baselineFingerprint}; folder ${value.folderId} (${value.folderName}); adopted fixture ${value.targetSchemaCode}; exact scope ${value.allowedOperationScope[0]}; physically delete exactly this retained host-owned omc_t08 fixture after adoption ownership and dependency preflight.`, { capability: "ticket08-orphan-cleanup", kind: "delivery-plan", identities: [value.targetSchemaCode], scope: [value.allowedOperationScope[0]] });
-}
-export function formatTicket08OrphanCleanupEnvironmentChangeApprovalFrame(input) {
-    const value = input.approval;
-    if (value.route !== TICKET08_TEST_MODEL_CLEANUP_ROUTE || value.capabilityId !== TICKET08_ORPHAN_CLEANUP_CAPABILITY_ID)
-        throw new Error("Approval frame is not the Ticket 08 orphan cleanup Environment Change Approval.");
-    return appendApprovalHumanBlock(`Approve Ticket 08 orphan cleanup Environment Change Approval for package ${input.packageId} hash ${input.packageHash}; plan approval ${value.approvalId} hash ${value.approvalHash}; environment test; adopted fixture ${value.targetSchemaCode}; exactly one owned physical model delete with task-history END and exact absence readback; uncertain outcomes stop, retain, and report.`, { capability: "ticket08-orphan-cleanup", kind: "environment-change", identities: [value.targetSchemaCode], scope: [value.allowedOperationScope[0]] });
-}
-/** Compiles the immutable one-step create package bound to the approved plan, pack digest, and pinned contract hash. */
-export function prepareTicket08TestMutationPackage(input) {
-    const evidence = validateTicket08Evidence(input.evidence);
-    const approval = requireTicket08Approval(input.approval, TICKET08_TEST_MUTATION_ROUTE, TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID);
-    const persisted = requirePersistedApprovedPlan(input.ledger, approval);
-    assertTicket08BindingMatchesEvidence(persisted.binding, evidence);
-    if (!persisted.allowedOperationScope.includes(ticket08ModelScope(evidence.targetSchemaCode)))
-        throw new Error(`Ticket 08 package step is outside the approved operation scope: ${ticket08ModelScope(evidence.targetSchemaCode)}.`);
-    if (input.pinnedModelCreateContractHash !== ticket08ModelCreateContractHash())
-        throw new Error("Ticket 08 pinned model-create contract hash does not match the canonical 8.6.26 capability contract.");
-    assertDigest(input.knowledgePackDigest, "knowledge pack digest");
-    if (input.knowledgePackDigest !== approval.knowledgePackDigest)
-        throw new Error("Ticket 08 knowledge pack digest diverges from the approved plan binding.");
-    const operation = ticket08ModelCreateOperation(evidence);
-    assertTicket08OperationsBounded({ route: TICKET08_TEST_MUTATION_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode });
-    const pkg = compileTicket08Package({ ledger: input.ledger, planApproval: persisted, operation, knowledgePackDigest: input.knowledgePackDigest, packageId: `ticket08-${digest(persisted.approvalId).slice(0, 32)}`, recoveryPolicyHash: digest("ticket08-create-step-only"), capabilityEvidence: [TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID, "cloudpivot.model-create.serialized-server-8.6.26", TICKET08_MODEL_READBACK_ENDPOINT, `folder:${evidence.folder.id}`, `testRunId:${evidence.testRunId}`, `baselineFingerprint:${persisted.binding.baselineFingerprint}`] });
-    const dryRun = buildNativeConfigurationDryRun({ appCode: evidence.applicationCode, models: [{ name: evidence.resourceName, schemaCode: evidence.targetSchemaCode, parentId: evidence.folder.id }], fields: [], forms: [] });
-    return { package: pkg, operations: [operation], planApproval: persisted, dryRun, evidence };
-}
-/** Compiles the immutable one-step owned-cleanup package bound to the separately approved cleanup plan. */
-export function prepareTicket08CleanupPackage(input) {
-    const evidence = validateTicket08Evidence(input.evidence);
-    const approval = requireTicket08Approval(input.approval, TICKET08_TEST_MODEL_CLEANUP_ROUTE, TICKET08_TEST_MODEL_CLEANUP_CAPABILITY_ID);
-    const persisted = requirePersistedApprovedPlan(input.ledger, approval);
-    if (persisted.binding.environmentFingerprint !== evidence.environmentFingerprint)
-        throw new Error("Ticket 08 cleanup approval is outside the evidence environment binding.");
-    if (!persisted.allowedOperationScope.includes(ticket08ModelScope(evidence.targetSchemaCode)))
-        throw new Error(`Ticket 08 cleanup step is outside the approved operation scope: ${ticket08ModelScope(evidence.targetSchemaCode)}.`);
-    if (input.pinnedCleanupContractHash !== ticket08CleanupContractHash())
-        throw new Error("Ticket 08 pinned cleanup contract hash does not match the canonical owned-cleanup contract.");
-    assertDigest(input.knowledgePackDigest, "knowledge pack digest");
-    if (input.knowledgePackDigest !== approval.knowledgePackDigest)
-        throw new Error("Ticket 08 knowledge pack digest diverges from the approved cleanup plan binding.");
-    if (input.ownership.testRunId !== evidence.testRunId || !input.ownership.modelId)
-        throw new Error("Ticket 08 cleanup package requires the exact validated ownership binding.");
-    const operation = buildPhysicalCleanupOperation({ kind: "model", schemaCode: evidence.targetSchemaCode, id: input.ownership.modelId });
-    assertTicket08OperationsBounded({ route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode });
-    const pkg = compileTicket08Package({ ledger: input.ledger, planApproval: persisted, operation, knowledgePackDigest: input.knowledgePackDigest, packageId: `ticket08-cleanup-${digest(persisted.approvalId).slice(0, 32)}`, recoveryPolicyHash: digest("ticket08-cleanup-step-only"), capabilityEvidence: [TICKET08_TEST_MODEL_CLEANUP_CAPABILITY_ID, TICKET08_MODEL_CLEANUP_ENDPOINT, "/api/api/app/apppackage/delete/history", `modelId:${input.ownership.modelId}`, `testRunId:${evidence.testRunId}`] });
-    const dryRun = buildNativeConfigurationDryRun({ appCode: evidence.applicationCode, models: [], fields: [], forms: [] });
-    return { package: pkg, operations: [operation], planApproval: persisted, dryRun, evidence };
-}
-function compileTicket08Package(input) {
-    const snapshotBase = { id: `snapshot:${input.operation.id}`, target: input.operation.target, identity: input.operation.target, recoveryBoundary: input.operation.target, state: "absent", baselineFingerprint: input.planApproval.binding.baselineFingerprint };
-    const snapshot = { ...snapshotBase, snapshotHash: digest(snapshotBase) };
-    const pkg = compileNativeOperations({
-        operations: [input.operation],
-        binding: input.planApproval.binding,
-        planApproval: input.planApproval,
-        snapshotManifest: [snapshot],
-        releasePlanHash: digest("ticket08-no-release"),
-        recoveryPolicyHash: input.recoveryPolicyHash,
-        knowledgePack: { id: TICKET08_TEST_MUTATION_KNOWLEDGE_PACK_ID, digest: input.knowledgePackDigest },
-        capabilityEvidence: input.capabilityEvidence,
-        requiredPermissions: ["configuration-write"],
-        packageId: input.packageId,
-        ledger: input.ledger,
-    });
-    input.ledger.createPackage(pkg);
-    return pkg;
-}
-export function formatTicket08DeliveryPlanApprovalFrame(approval) {
-    const value = requireTicket08Approval(approval, TICKET08_TEST_MUTATION_ROUTE, TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID);
-    return appendApprovalHumanBlock(`Approve Ticket 08 Delivery Plan Approval ${value.approvalId} hash ${value.approvalHash}; plan hash ${value.planHash}; capability ${value.capabilityId}; environment test; application test; environment fingerprint ${value.binding.environmentFingerprint}; baseline fingerprint ${value.binding.baselineFingerprint}; folder ${value.folderId} (${value.folderName}); target ${value.targetSchemaCode}; testRunId ${value.testRunId}; exact scope ${value.allowedOperationScope[0]}; one serialized LIST model-create step with authoritative readback, behavior validation, and separately approved owned cleanup.`, { capability: "ticket08-model-create", kind: "delivery-plan", identities: [value.targetSchemaCode], scope: [value.allowedOperationScope[0]] });
-}
-export function formatTicket08EnvironmentChangeApprovalFrame(input) {
-    const value = requireTicket08Approval(input.approval, TICKET08_TEST_MUTATION_ROUTE, TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID);
-    return appendApprovalHumanBlock(`Approve Ticket 08 Environment Change Approval for package ${input.packageId} hash ${input.packageHash}; plan approval ${value.approvalId} hash ${value.approvalHash}; environment test; folder ${value.folderId} (${value.folderName}); target ${value.targetSchemaCode}; testRunId ${value.testRunId}; exact scope ${value.allowedOperationScope[0]}; exactly one serialized LIST model-create step executed by the single Forge configuration writer lease with authoritative readback.`, { capability: "ticket08-model-create", kind: "environment-change", identities: [value.targetSchemaCode], scope: [value.allowedOperationScope[0]] });
-}
-export function formatTicket08CleanupDeliveryPlanApprovalFrame(approval) {
-    const value = requireTicket08Approval(approval, TICKET08_TEST_MODEL_CLEANUP_ROUTE, TICKET08_TEST_MODEL_CLEANUP_CAPABILITY_ID);
-    return appendApprovalHumanBlock(`Approve Ticket 08 cleanup Delivery Plan Approval ${value.approvalId} hash ${value.approvalHash}; plan hash ${value.planHash}; capability ${value.capabilityId}; environment test; application test; environment fingerprint ${value.binding.environmentFingerprint}; post-create baseline fingerprint ${value.binding.baselineFingerprint}; folder ${value.folderId} (${value.folderName}); target ${value.targetSchemaCode}; testRunId ${value.testRunId}; exact scope ${value.allowedOperationScope[0]}; physically delete only the owned fixture after ownership and dependency preflight.`, { capability: "ticket08-model-cleanup", kind: "delivery-plan", identities: [value.targetSchemaCode], scope: [value.allowedOperationScope[0]] });
-}
-export function formatTicket08CleanupEnvironmentChangeApprovalFrame(input) {
-    const value = requireTicket08Approval(input.approval, TICKET08_TEST_MODEL_CLEANUP_ROUTE, TICKET08_TEST_MODEL_CLEANUP_CAPABILITY_ID);
-    return appendApprovalHumanBlock(`Approve Ticket 08 cleanup Environment Change Approval for package ${input.packageId} hash ${input.packageHash}; plan approval ${value.approvalId} hash ${value.approvalHash}; environment test; target ${value.targetSchemaCode}; testRunId ${value.testRunId}; exactly one owned physical model delete with task-history END and exact absence readback; uncertain outcomes stop, retain, and report.`, { capability: "ticket08-model-cleanup", kind: "environment-change", identities: [value.targetSchemaCode], scope: [value.allowedOperationScope[0]] });
-}
-export function validateTicket08ModelBehavior(input) {
-    const evidence = validateTicket08Evidence(input.evidence);
-    const checks = [];
-    const add = (id, ok, detail) => checks.push({ id, status: ok ? "validated" : "blocked", detail });
-    const present = input.modelEvidence.classification === "present" && input.modelEvidence.query.schemaCode === evidence.targetSchemaCode;
-    add("authoritative-model-present", present, present ? "get_all reports the created model as present." : "authoritative model readback did not report the created model as present.");
-    const directory = input.designTime.directory;
-    const entry = directory.models.find((candidate) => candidate.schemaCode === evidence.targetSchemaCode);
-    add("design-time-directory", Boolean(entry), entry ? "the design-time folder directory lists the created model." : `the design-time directory of folder ${directory.folderId} did not list the created model.`);
-    add("dedicated-application", entry?.appCode === evidence.applicationCode, `directory entry binds the model to application ${entry?.appCode ?? "<missing>"}.`);
-    add("list-semantics", entry?.modelType === "LIST", `model type is ${entry?.modelType ?? "<missing>"}.`);
-    add("folder-binding", entry?.parentId === evidence.folder.id, `model folder is ${entry?.parentId ?? "<missing>"}.`);
-    const form = input.designTime.defaultForm;
-    add("default-form-binding", form?.sheetCode === evidence.targetSchemaCode && (form?.bindingModelCode ?? evidence.targetSchemaCode) === evidence.targetSchemaCode, form ? "the auto-created default form binds the created model." : "default form binding did not bind the created model.");
-    const blocked = checks.find((check) => check.status === "blocked");
-    return blocked ? { status: "blocked", reason: `Ticket 08 behavior validation failed: ${blocked.detail}`, checks } : { status: "validated", checks };
-}
-/** Execution boundary: named test environment, route-bound package steps, active approvals, no replay of terminal or uncertain packages. */
-export function assertTicket08ExecutionBoundary(input) {
-    if (input.environmentName !== "test")
-        throw new Error("Ticket 08 execution is restricted to the named test environment; production and staging are rejected.");
-    const { projection } = input;
-    const routeStepPrefix = input.route === TICKET08_TEST_MUTATION_ROUTE ? "model:" : "cleanup:model:";
-    if (input.steps.length !== 1 || !input.steps[0].id.startsWith(routeStepPrefix))
-        throw new Error(`Ticket 08 execution boundary rejected package ${input.packageId}: its steps are not the single ${routeStepPrefix} operation bound to the ${input.route} route.`);
-    if (projection.status === "approved" && projection.approvals.plan === "approved" && projection.approvals.environment === "approved")
-        return;
-    if (projection.status === "completed")
-        throw new Error(`Ticket 08 package ${input.packageId} is already terminal completed; replay is rejected.`);
-    if (projection.status === "uncertain")
-        throw new Error(`Ticket 08 package ${input.packageId} is uncertain; reconcile by authoritative readback before any replay.`);
-    if (projection.status === "in_progress")
-        throw new Error(`Ticket 08 package ${input.packageId} is already running; concurrent execution is rejected.`);
-    const pending = [...projection.blockers];
-    if (projection.approvals.plan !== "approved")
-        pending.push("Delivery Plan Approval is required before package execution.");
-    if (projection.approvals.environment !== "approved")
-        pending.push("Environment Change Approval is required before mutation.");
-    throw new Error(`Ticket 08 execution boundary rejected package ${input.packageId}: status is ${projection.status} (blocked); ${[...new Set(pending)].join("; ")}.`);
-}
-/** Executes the approved one-step create package through the single OMC Host write transport, then validates behavior. */
-export async function executeTicket08TestMutationPackage(input) {
-    assertTicket08TestMutationEnvironment(input.settings);
-    if (typeof input.transport.serializedServerModelCreate !== "function")
-        throw new Error("Ticket 08 execution requires the OMC Host serialized model-create transport; bypass transports are rejected.");
-    const projection = input.ledger.project(input.prepared.package.packageId);
-    assertTicket08ExecutionBoundary({ projection, environmentName: input.settings.environmentName, packageId: input.prepared.package.packageId, route: TICKET08_TEST_MUTATION_ROUTE, steps: input.prepared.package.steps });
-    if (input.environmentApproval.packageId !== input.prepared.package.packageId || input.environmentApproval.packageHash !== input.prepared.package.packageHash)
-        throw new Error("Ticket 08 Environment Change Approval does not match the prepared package.");
-    const probe = await input.readModelEvidence();
-    if (probe.classification !== "absent" || probe.reason !== "exact-absence")
-        throw new Error(`Ticket 08 execution requires exact target absence; ${input.prepared.package.steps[0].target} is already present or blocked.`);
-    const result = await runNativeConfigurationPackage({
-        package: input.prepared.package,
-        gate: {
-            mode: "approved",
-            planApproval: { status: "approved", approvalHash: input.prepared.planApproval.approvalHash },
-            environmentApproval: { status: "approved", packageHash: input.environmentApproval.packageHash },
-            lease: { owner: "configuration-agent", environment: TICKET08_TEST_ENVIRONMENT_NAME },
-            baselineFingerprint: input.prepared.package.binding.baselineFingerprint,
-            snapshots: input.prepared.package.snapshotManifest,
-            package: input.prepared.package,
-        },
-        operations: input.prepared.operations,
-        ledger: input.ledger,
-        planApproval: input.prepared.planApproval,
-        transport: input.transport,
-        credentials: input.credentials,
-        authoritativeOrigin: input.authoritativeOrigin,
-        testApplicationCode: TICKET08_TEST_APPLICATION_CODE,
-    }, input.signal);
-    const mutationExecuted = result.steps.some((step) => step.status === "committed" || step.status === "uncertain");
-    const blockers = [...result.blockers];
-    let status = ticket08ExecutionStatus(result.status);
-    let nextAction = result.nextAction;
-    let behavior;
-    if (result.status === "completed") {
-        behavior = validateTicket08ModelBehavior({ evidence: input.prepared.evidence, designTime: await input.readDesignTimeEvidence(), modelEvidence: await input.readModelEvidence() });
-        if (behavior.status !== "validated") {
-            status = "blocked";
-            blockers.push(behavior.reason ?? "Ticket 08 behavior validation failed.");
-            nextAction = "reconcile-behavior-retain-and-report-resource";
-        }
-    }
-    return { reportType: "omc.ticket08.test-mutation-execution", schemaVersion: 1, packageId: result.packageId, packageHash: result.packageHash, route: TICKET08_TEST_MUTATION_ROUTE, testRunId: input.prepared.evidence.testRunId, targetSchemaCode: input.prepared.evidence.targetSchemaCode, status, mutationExecuted, steps: result.steps, blockers, nextAction, ...(behavior ? { behavior } : {}) };
-}
-/** Executes the separately approved owned cleanup with exact absence readback; uncertainty stops and retains. */
-export async function executeTicket08CleanupPackage(input) {
-    assertTicket08TestMutationEnvironment(input.settings);
-    if (typeof input.transport.physicalDeleteModel !== "function")
-        throw new Error("Ticket 08 cleanup requires the OMC Host physical model delete transport; bypass transports are rejected.");
-    const projection = input.ledger.project(input.prepared.package.packageId);
-    assertTicket08ExecutionBoundary({ projection, environmentName: input.settings.environmentName, packageId: input.prepared.package.packageId, route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, steps: input.prepared.package.steps });
-    if (input.environmentApproval.packageId !== input.prepared.package.packageId || input.environmentApproval.packageHash !== input.prepared.package.packageHash)
-        throw new Error("Ticket 08 cleanup Environment Change Approval does not match the prepared package.");
-    const probe = await input.readModelEvidence();
-    if (probe.classification === "absent") {
-        return { reportType: "omc.ticket08.test-mutation-execution", schemaVersion: 1, packageId: input.prepared.package.packageId, packageHash: input.prepared.package.packageHash, route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, testRunId: input.evidence.testRunId, targetSchemaCode: input.evidence.targetSchemaCode, status: "blocked", mutationExecuted: false, steps: projection.steps, blockers: ["Ticket 08 cleanup target is already absent; nothing owned remains to delete and no unbounded deletion is attempted."], nextAction: "accept", absenceReadback: probe };
-    }
-    const result = await runNativeConfigurationPackage({
-        package: input.prepared.package,
-        gate: {
-            mode: "approved",
-            planApproval: { status: "approved", approvalHash: input.prepared.planApproval.approvalHash },
-            environmentApproval: { status: "approved", packageHash: input.environmentApproval.packageHash },
-            lease: { owner: "configuration-agent", environment: TICKET08_TEST_ENVIRONMENT_NAME },
-            baselineFingerprint: input.prepared.package.binding.baselineFingerprint,
-            snapshots: input.prepared.package.snapshotManifest,
-            package: input.prepared.package,
-        },
-        operations: input.prepared.operations,
-        ledger: input.ledger,
-        planApproval: input.prepared.planApproval,
-        transport: input.transport,
-        credentials: input.credentials,
-        authoritativeOrigin: input.authoritativeOrigin,
-        testApplicationCode: TICKET08_TEST_APPLICATION_CODE,
-    }, input.signal);
-    const mutationExecuted = result.steps.some((step) => step.status === "committed" || step.status === "uncertain");
-    const blockers = [...result.blockers];
-    let status = ticket08ExecutionStatus(result.status);
-    let nextAction = result.nextAction;
-    let absenceReadback;
-    if (result.status === "completed") {
-        absenceReadback = await input.readModelEvidence();
-        if (absenceReadback.classification !== "absent" || absenceReadback.reason !== "exact-absence") {
-            status = "uncertain";
-            blockers.push("Ticket 08 post-cleanup exact absence readback did not confirm absence; the fixture is retained and reported.");
-            nextAction = "reconcile";
-        }
-    }
-    return { reportType: "omc.ticket08.test-mutation-execution", schemaVersion: 1, packageId: result.packageId, packageHash: result.packageHash, route: TICKET08_TEST_MODEL_CLEANUP_ROUTE, testRunId: input.evidence.testRunId, targetSchemaCode: input.evidence.targetSchemaCode, status, mutationExecuted, steps: result.steps, blockers, nextAction, ...(absenceReadback ? { absenceReadback } : {}) };
-}
-function ticket08ExecutionStatus(status) {
-    if (status === "completed" || status === "uncertain" || status === "partial")
-        return status;
-    return "blocked";
-}
-function requireTicket08Approval(approval, route, capabilityId) {
-    const value = approval;
-    if (value.route !== route || value.capabilityId !== capabilityId || value.environmentName !== "test" || value.applicationCode !== "test" || value.targets?.length !== 1 || !value.folderId || !value.folderName || !value.testRunId || !value.targetSchemaCode)
-        throw new Error(`Ticket 08 approval frame is not bound to the exact ${route} route, target, folder, and testRunId.`);
-    return value;
-}
-function requirePersistedApprovedPlan(ledger, approval) {
-    if (approval.status !== "approved")
-        throw new Error("Ticket 08 package preparation requires the approved exact Ticket 08 Delivery Plan Approval.");
-    const persisted = ledger.findPlanApproval(approval.approvalId);
-    if (!persisted || persisted.status !== "approved" || persisted.approvalHash !== approval.approvalHash)
-        throw new Error("Ticket 08 package preparation requires the exact authoritative approved Delivery Plan Approval.");
-    return persisted;
-}
-function assertTicket08BindingMatchesEvidence(binding, evidence) {
-    const expected = {
-        deliveryId: ticket08DeliveryId(evidence.testRunId),
-        environment: TICKET08_TEST_ENVIRONMENT_NAME,
-        baselineFingerprint: evidence.baselineFingerprint,
-        environmentFingerprint: evidence.environmentFingerprint,
-        discoveryFingerprint: evidence.discoveryFingerprint,
-        ...(evidence.evidenceArtifactId ? { evidenceArtifactId: evidence.evidenceArtifactId } : {}),
-    };
-    if (stable(binding) !== stable(expected))
-        throw new Error("Ticket 08 plan approval binding is outside the evidence baseline, environment, discovery, or delivery binding.");
-}
-function validateTicket08Evidence(evidence) {
-    if (!evidence || evidence.route !== TICKET08_TEST_MUTATION_ROUTE || evidence.capabilityId !== TICKET08_TEST_MODEL_CREATE_CAPABILITY_ID)
-        throw new Error("Ticket 08 evidence is not the host-owned test mutation route.");
-    if (evidence.environmentName !== "test" || evidence.applicationCode !== "test")
-        throw new Error("Ticket 08 evidence is outside the named test environment and dedicated test application.");
-    assertTicket08TargetSchema(evidence.targetSchemaCode);
-    if ([evidence.environmentFingerprint, evidence.baselineFingerprint, evidence.discoveryFingerprint].some((value) => !SHA256.test(value)))
-        throw new Error("Ticket 08 evidence fingerprints are not canonical.");
-    if (evidence.modelEvidence.classification !== "absent" || evidence.modelEvidence.reason !== "exact-absence" || evidence.modelEvidence.query.schemaCode !== evidence.targetSchemaCode)
-        throw new Error("Ticket 08 evidence does not carry exact authenticated absence.");
-    if (!evidence.folder.id || !evidence.folder.name)
-        throw new Error("Ticket 08 evidence folder binding is missing.");
-    return evidence;
-}
-function assertDigest(value, label) {
-    if (typeof value !== "string" || !SHA256.test(value) || !/[1-9a-f]/i.test(value))
-        throw new Error(`Ticket 08 ${label} is invalid.`);
-}
-function digest(value) { return createHash("sha256").update(stable(value)).digest("hex"); }
-function stable(value) { return JSON.stringify(sort(value)); }
-function sort(value) { if (Array.isArray(value))
-    return value.map(sort); if (value && typeof value === "object")
-    return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sort(item)])); return value; }
-//# sourceMappingURL=ticket08-test-model-mutation.js.map