omc-core 0.4.35 → 0.4.37

package/dist/ticket12-test-form-publish.js

@@ -1,917 +0,0 @@
-import { createHash, randomUUID } from "node:crypto";
-import { canonicalCloudPivotBaselineFingerprint, canonicalCloudPivotEnvironmentFingerprint } from "./cloudpivot-fingerprints.js";
-import { canonicalFormalDiscoveryFingerprint } from "./formal-capability-discovery.js";
-import { CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH, decodeRequiredDataRuleRow, decodeDraftControl, decodePublishedControl } from "./cloudpivot-low-code.js";
-import { compileNativeOperations, runNativeConfigurationPackage } from "./cloudpivot-native-configuration.js";
-import { buildKnowledgePack } from "./knowledge-pack-builder.js";
-import { KnowledgePackRuntime } from "./knowledge-pack-runtime.js";
-import { createDeliveryPlanApproval, deliveryPlanApprovalHash, proposeDeliveryPlan } from "./two-stage-change-package.js";
-import { validateConfigurationIntent } from "./configuration-intent.js";
-import { SENSITIVE_SECRET_VALUE } from "./delivery-graph.js";
-import { appendApprovalHumanBlock } from "./approval-frame-readability.js";
-import { isTicket08TargetSchema } from "./ticket08-test-model-mutation.js";
-import { fieldFamilyMembers, activeFieldFamily } from "./families/registry.js";
-import { isTicket09TargetField, TICKET09_FIELD_FAMILY } from "./ticket09-test-field-mutation.js";
-import { TICKET11_FORM_DRAFT_ROUTE, decodeTicket11DraftControlPresence } from "./ticket11-test-form-draft.js";
-import { TICKET20_DATA_RULE_ROUTE } from "./ticket20-test-data-rule.js";
-/**
- * Ticket 03b: the required-rule demo member — the Ticket 20 data-rule
- * handoff binds the dataRuleType=4 row to this member's field — is the
- * ACTIVE family's registered rule-demo position (single source: the
- * family module src/families/<family>.ts).
- */
-function ticket12RuleDemoFieldCode(targetFieldCodes) {
-    return targetFieldCodes[activeFieldFamily().ruleDemoTargetPosition - 1];
-}
-function ticket12RuleDemoMemberName() {
-    return activeFieldFamily().members[activeFieldFamily().ruleDemoTargetPosition - 1].propertyTypeName;
-}
-/**
- * Ticket 12 (usable-model ladder, rung 4 — the ceiling) promotes exactly one
- * independently bounded CloudPivot `test` form mutation: the model-scoped
- * publication of the composite fixture's default form, completing the
- * structurally usable shape — model, published fields, published form —
- * verified at design-time depth through authoritative readback, the form
- * publish history surface, and the designer direct URL. The composite chain
- * runs the executable Ticket 08 model-create, Ticket 09 field-create,
- * Ticket 10 field-publish, and Ticket 11 form-draft capabilities first; the
- * form-publish package consumes the completed, behavior-validated form-draft
- * execution report plus fresh authoritative readbacks (published field
- * present with the published flag decoded; the default form present with the
- * draft control bound and published=false). The package is independently
- * immutable and independently dual-approved. No evidence is inferred from
- * the form-draft rung or any other rung; app publish, Environment release,
- * deployment, restart, Portal-facing operations, production, staging, tenant
- * administration, Redis, and runtime CRUD stay permanently rejected.
- *
- * Authoritative 8.6.26 contract (Stage 0 decompiled sources, research note
- * .scratch/omc-usable-model-ladder/research/form-schema-contract.md §8-12):
- * - publish: POST /api/api/app/bizsheet/publish with the echoed BizSheetVO
- *   normalized exactly as the product's own pre-publish path
- *   (AppFormController → BizFormController.java:824-970, @RequireAdmin,
- *   schema lock, AppIntegrationFacadeImpl.java:2725-2746): the draft JSON
- *   sides promoted to the published members, existDraft:false,
- *   sendMessage:false (the controller unboxes it — null would NPE);
- * - the server flips published=true, copies draft*Json to published*Json,
- *   republishes the schema store, and evicts the form cache
- *   (BizFormServiceImpl.java:189-238) — the mechanism that discharges the
- *   form-consistency-lag recorded on the Ticket 10 rung: after this rung's
- *   explicit publication the authoritative form readback no longer lags;
- * - the binding constraint (BizFormServiceImpl.java:544-582): every
- *   data-bound control key must resolve in the published schema store — the
- *   fixture binds only the Ticket-10-published TEXT field;
- * - history surface (BizFormHistoryController.java:60-167): POST
- *   /api/api/app/bizsheet/history/list {schemaCode, sheetCode, page, size}
- *   decodes a version-DESC page whose entries carry version, publishRemarks
- *   (mirrored from the row's remarks), and the publisher display name; GET
- *   /api/api/app/bizsheet/history/checkVersion?schemaCode&sheetCode decodes
- *   the newest version (data null when no history exists). PINNED LIVE
- *   2026-09-04: a design-time model-scoped publication writes NO history
- *   rows — the controller is read-only across the engine, the publish flow
- *   writes the EDIT_AND_PUBLISH_FORM system operation log instead, and the
- *   manually published agent_test_customer also carries zero entries — so
- *   the authoritative post-publish decode is a live version int with an
- *   empty list (classification present, reason design-time-no-entries);
- *   rows only enter through app-package import/export flows;
- * - success envelope: errcode 0 "发布表单成功" (940114), data = the new
- *   version int;
- * - audit face: server-side LogOperationActionType.EDIT_AND_PUBLISH_FORM
- *   with before/after data (BizFormController.java:902-908); no separate
- *   audit read API is evidenced — the history surface above is the
- *   authoritative publish-history read;
- * - publish-gated menu: apppackage/trees is the published application menu
- *   projection; a model-scoped form publication is not an app publish, so
- *   the live run records the read-only observation and never performs any
- *   Portal-facing mutation;
- * - cleanup (variants A/B, §11): the model physical-delete cascade deletes
- *   every form of the schema with no published-state branch
- *   (AppIntegrationFacadeImpl.java:743-801) and the form history dies with
- *   the model (removeBizModel → formHistoryFacade.deleteBySchemaCode);
- *   variant A keeps the staged chain (Ticket 10 published-field cleanup,
- *   then the Ticket 08 model physical delete) with form absence confirmed by
- *   the 302024 envelope and history absence by checkVersion data null;
- *   variant B stops, retains, and reports if the cascade contradicts the
- *   decompile. Form-level /delete refuses default forms by design and is
- *   never the cleanup path.
- */
-export const TICKET12_FORM_PUBLISH_ROUTE = "ticket12-test-form-publish";
-export const TICKET12_FORM_PUBLISH_CAPABILITY_ID = "cloudpivot.test.form-publish-8.6.26";
-export const TICKET12_FORM_CLEANUP_CAPABILITY_ID = "cloudpivot.test.form-publish-cascade-absence-8.6.26";
-export const TICKET12_FORM_PUBLISH_KNOWLEDGE_PACK_ID = "cloudpivot-8.6-ticket12-test-form-publish";
-export const TICKET12_TEST_ENVIRONMENT_NAME = "test";
-export const TICKET12_TEST_APPLICATION_CODE = "test";
-export const TICKET12_REFERENCE_EVIDENCE_VERSION = "8.6.26";
-export const TICKET12_FORM_PUBLISH_ENDPOINT = "/api/api/app/bizsheet/publish";
-export const TICKET12_FORM_READBACK_ENDPOINT = "/api/api/app/bizsheet/get";
-export const TICKET12_FORM_HISTORY_LIST_ENDPOINT = "/api/api/app/bizsheet/history/list";
-export const TICKET12_FORM_HISTORY_CHECK_VERSION_ENDPOINT = "/api/api/app/bizsheet/history/checkVersion";
-export const TICKET12_TREES_OBSERVATION_ENDPOINT = "/api/api/app/apppackage/trees";
-export const TICKET12_PUBLISH_REMARKS = "omc-ticket12-model-scoped-form-publication";
-export const TICKET12_PROHIBITED_MUTATION_TERMS = Object.freeze([
-    "app-publish", "apppackage/publish", "deploy", "restart", "release", "redis", "tenant-admin", "runtime-crud",
-    "model:", "view", "folder-create", "folder-delete", "portal",
-]);
-const TICKET12_UUID_V4 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-const SHA256 = /^[a-f0-9]{64}$/i;
-/** The named `test` environment and its dedicated test application are hard preconditions. */
-export function assertTicket12TestFormPublishEnvironment(settings) {
-    if (settings.environmentName !== "test")
-        throw new Error("Ticket 12 form publish is restricted to the named test environment; production and staging are rejected.");
-    if (!settings.baseUrl.trim() || !/^https?:\/\/\S+$/i.test(settings.baseUrl.trim()))
-        throw new Error("Ticket 12 form publish requires an absolute configured test environment endpoint.");
-    if (settings.testApplicationCode !== "test")
-        throw new Error("Ticket 12 form publish requires the dedicated test application to be test.");
-}
-export function ticket12DeliveryId(testRunId) { return `ticket12-form-publish-${testRunId}`; }
-/** The exact approved operation scope is the ledger's mutation+target key for the one publish step (same target family as the draft rung; the publication identity is carried by the capability, contract hash, operation id, and route). */
-export function ticket12FormPublishScope(targetSchemaCode, targetSheetCode) { return `cloudpivot:form:${targetSchemaCode}/${targetSheetCode}`; }
-/** Design-time designer direct URL; the published fixture form stays inspectable here. */
-export function ticket12DesignerDirectUrl(targetSchemaCode, targetSheetCode) { return `/admin/#/apps/model/${TICKET12_TEST_APPLICATION_CODE}/${targetSchemaCode}/form-design/${targetSheetCode}`; }
-export function buildTicket12FormCleanupContract(testRunId, targetSchemaCode, targetSheetCode, targetFieldCodes) {
-    if (!TICKET12_UUID_V4.test(testRunId) || !isTicket08TargetSchema(targetSchemaCode) || targetSheetCode !== targetSchemaCode || targetFieldCodes.length !== TICKET09_FIELD_FAMILY.length || targetFieldCodes.some((code) => !isTicket09TargetField(code)) || new Set(targetFieldCodes).size !== TICKET09_FIELD_FAMILY.length)
-        throw new Error("Ticket 12 form cleanup contract requires the exact host-owned testRunId, fixture schema, default sheet, and one distinct family field code per active family member.");
-    return Object.freeze({
-        capabilityId: TICKET12_FORM_CLEANUP_CAPABILITY_ID,
-        testRunId,
-        targetSchemaCode,
-        targetSheetCode,
-        targetFieldCodes,
-        formDeleteEndpointRefusal: "bizsheet/delete-refuses-default-forms(BIZ_SHEET_DEFAULT,BizFormController.java:610-670);never-the-cleanup-path",
-        variants: {
-            modelCascade: "model-physical-delete-cascades-published-forms: staged ticket10-published-field-cleanup then ticket08-model-physical-delete; form absence by bizsheet/get non-success envelope(302024) and history absence by checkVersion data-null",
-            stopAndRetain: "cascade-contradiction: stop, retain, and report; no form-level delete, no unpublish endpoint in scope; the ticket08 orphan backstop remains available",
-        },
-        absenceReadback: { method: "GET", endpoint: TICKET12_FORM_READBACK_ENDPOINT, expected: "non-success-envelope-recorded-errcode-302024" },
-        historyAbsenceReadback: { method: "GET", endpoint: TICKET12_FORM_HISTORY_CHECK_VERSION_ENDPOINT, expected: "data-null-no-history" },
-        ownership: "schema-sheet-and-field-bound-to-testRunId",
-        replayPolicy: "absent-is-no-op",
-        uncertainPolicy: "stop-retain-report-no-retry",
-    });
-}
-/** Deterministic, run-independent contract identities pinned by the Knowledge Pack promotion. */
-export function ticket12FormPublishContractHash() { return digest(ticket12FormPublishContract()); }
-export function ticket12FormCleanupContractHash() { return digest(ticket12FormCleanupContractTemplate()); }
-function ticket12FormPublishContract() {
-    return {
-        capabilityId: TICKET12_FORM_PUBLISH_CAPABILITY_ID,
-        operationKind: "form-publish",
-        method: "POST",
-        endpoint: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH.endpoint,
-        readbackEndpoint: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH.readbackEndpoint,
-        historyEndpoints: [...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH.historyEndpoints],
-        preflight: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH.preflight,
-        dto: "BizSheetVO:echoed-bizsheet-get-with-draft-sides-promoted-to-published;existDraft:false;sendMessage:false;publishRemarks-optional",
-        controlBinding: "control-key===published-field-code",
-        controlType: 1,
-        bindingConstraint: "every-data-bound-control-key-must-resolve-in-the-published-schema-store(BizFormServiceImpl.java:544-582)",
-        postPublishReadback: "published:true;existDraft:false;publishedViewJson/publishedAttributesJson-carry-the-configured-layout",
-        lagResolution: "publishBizSchema-plus-deleteFormCache-inside-the-publish-call-discharge-the-form-consistency-lag-recorded-on-the-field-rungs",
-        historySurface: "history/list-decodes-empty-by-design-for-design-time-publish(version-int-zero-entries;entries-only-from-app-package-import/export);checkVersion-decodes-newest-version-or-data-null",
-        auditSurface: "server-side LogOperationActionType.EDIT_AND_PUBLISH_FORM with before/after data (BizFormController.java:902-908); no separate audit read API is evidenced",
-        successEnvelope: "errcode-0-940114-data-new-version-int",
-        scope: "model-scoped-form-publication-only-never-app-publish-never-environment-release",
-        permission: "@RequireAdmin",
-        transportMode: "serialized-server-form-publish-8.6.26",
-        capability: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH,
-        evidence: [...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH.evidence],
-        requiredPermissions: ["configuration-write"],
-        prohibited: [...TICKET12_PROHIBITED_MUTATION_TERMS],
-    };
-}
-function ticket12FormCleanupContractTemplate() {
-    return {
-        capabilityId: TICKET12_FORM_CLEANUP_CAPABILITY_ID,
-        operationKind: "published-form-cascade-absence-confirmation",
-        formDeleteEndpointRefusal: "bizsheet/delete-refuses-default-forms;never-the-cleanup-path",
-        variants: ["model-physical-delete-cascades-published-forms", "cascade-contradiction-stop-retain-report"],
-        absenceReadback: `${TICKET12_FORM_READBACK_ENDPOINT}:non-success-envelope-recorded-errcode-302024`,
-        historyAbsenceReadback: `${TICKET12_FORM_HISTORY_CHECK_VERSION_ENDPOINT}:data-null-no-history`,
-        ownership: "schema-sheet-and-field-bound-to-testRunId",
-        replayPolicy: "absent-is-no-op",
-        uncertainPolicy: "stop-retain-report-no-retry",
-    };
-}
-/** Package operations must be exactly one bounded default-form publish step for the bound target. */
-export function assertTicket12OperationsBounded(input) {
-    if (input.operations.length !== 1)
-        throw new Error("Ticket 12 packages must contain exactly one bounded operation.");
-    const operation = input.operations[0];
-    const identity = `${operation.id} ${operation.target} ${operation.path}`.toLowerCase();
-    if (TICKET12_PROHIBITED_MUTATION_TERMS.some((term) => identity.includes(term)) || !operation.id.startsWith("form-publish:"))
-        throw new Error(`Ticket 12 operation ${operation.id} is outside the bounded operation set; prohibited families (app publish, deployment, restart, release, redis, tenant administration, runtime CRUD, Portal-facing operations, model/view/folder writes) remain rejected.`);
-    const expected = { id: `form-publish:${input.targetSchemaCode}/${input.targetSheetCode}/${input.targetFieldCodes.join("+")}`, target: `form:${input.targetSchemaCode}/${input.targetSheetCode}`, path: TICKET12_FORM_PUBLISH_ENDPOINT, transportMode: "serialized-server-form-publish-8.6.26" };
-    if (operation.id !== expected.id || operation.path !== expected.path || operation.transportMode !== expected.transportMode || operation.target !== expected.target)
-        throw new Error(`Ticket 12 operation ${operation.id} does not match the exact target binding for ${expected.target}.`);
-}
-/** Builds the signed, version-bound pack promoting exactly the single test form-publish capability. */
-export function buildTicket12FormPublishKnowledgePack(input) {
-    const compiler = { id: "src/ticket12-test-form-publish.ts:createTicket12FormPublishPlanApproval", sha256: digest("omc-ticket12-compiler-v1") };
-    const decoder = { id: "src/dsh-host-plugin.ts:createCloudPivotWriteTransport", sha256: digest("omc-ticket12-decoder-v1") };
-    return buildKnowledgePack({
-        packId: TICKET12_FORM_PUBLISH_KNOWLEDGE_PACK_ID,
-        packVersion: "1.0.0",
-        sourceVersion: TICKET12_REFERENCE_EVIDENCE_VERSION,
-        sourceArtifacts: [{ id: "cloudpivot-8.6.26-serialized-form-publish-capability", sha256: digest(CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH) }],
-        references: [
-            { id: "omc-form-schema-contract-research", sha256: digest("omc-form-schema-contract-research") },
-            { id: TICKET12_FORM_PUBLISH_ENDPOINT, sha256: digest(TICKET12_FORM_PUBLISH_ENDPOINT) },
-            { id: TICKET12_FORM_READBACK_ENDPOINT, sha256: digest(TICKET12_FORM_READBACK_ENDPOINT) },
-            { id: TICKET12_FORM_HISTORY_LIST_ENDPOINT, sha256: digest(TICKET12_FORM_HISTORY_LIST_ENDPOINT) },
-        ],
-        compilers: [compiler],
-        decoders: [decoder],
-        capabilities: [{
-                id: TICKET12_FORM_PUBLISH_CAPABILITY_ID,
-                status: "runtime-verified",
-                promote: true,
-                compilerRef: compiler.id,
-                decoderRef: decoder.id,
-                sourceEvidence: [...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH.evidence, TICKET12_FORM_PUBLISH_ENDPOINT, TICKET12_FORM_READBACK_ENDPOINT, TICKET12_FORM_HISTORY_LIST_ENDPOINT, TICKET12_FORM_HISTORY_CHECK_VERSION_ENDPOINT],
-                runtimeEvidence: ["omc-form-schema-contract-research", "cloudpivot.form-publish.serialized-server-8.6.26"],
-                operationPromotions: [{
-                        id: "form-publish",
-                        status: "promoted",
-                        operationContractHash: ticket12FormPublishContractHash(),
-                        sourceRefs: [...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH.evidence, TICKET12_FORM_PUBLISH_ENDPOINT, TICKET12_FORM_READBACK_ENDPOINT, TICKET12_FORM_HISTORY_LIST_ENDPOINT],
-                        versionFamily: "8.6",
-                        referenceVersion: TICKET12_REFERENCE_EVIDENCE_VERSION,
-                        requiredEvidence: ["cleanup", "discovery", "permission", "readback", "test", "write"],
-                        evidence: ["cleanup", "discovery", "permission", "readback", "test", "write"],
-                        blockedReasons: [],
-                    }],
-            }],
-        signerKeyId: input.signerKeyId,
-        signingKey: input.signingKey,
-        createdAt: input.createdAt,
-    });
-}
-/** Loads the pack against CloudPivot 8.6.26 and pins the single executable capability and contract hash. */
-export function loadTicket12KnowledgePack(artifact, trustedKeys) {
-    const runtime = new KnowledgePackRuntime(trustedKeys);
-    const load = runtime.load(artifact, TICKET12_REFERENCE_EVIDENCE_VERSION);
-    if (!load.accepted)
-        throw new Error(`Ticket 12 Knowledge Pack is not authoritative: ${load.blockingReasons.join(", ")}.`);
-    const active = runtime.active();
-    const capabilities = active.capabilities;
-    if (capabilities.length !== 1 || capabilities[0].id !== TICKET12_FORM_PUBLISH_CAPABILITY_ID)
-        throw new Error("Ticket 12 Knowledge Pack must promote exactly the single test form-publish capability; evidence inference from the form-draft rung or to any other capability (app publish included) is rejected.");
-    const hashes = capabilities[0].operationContractHashes;
-    if (hashes.length !== 1 || hashes[0] !== ticket12FormPublishContractHash())
-        throw new Error("Ticket 12 Knowledge Pack operation contract hash does not match the canonical form-publish contract.");
-    return { runtime, packId: active.manifest.packId, contentDigest: active.manifest.contentSha256, executableCapabilities: capabilities.map(({ id }) => id) };
-}
-/**
- * Decodes the authoritative publish-history surface: the history/list page
- * (version DESC) plus the checkVersion newest version. "present" requires a
- * decodable list entry bound to the queried schema/sheet; "absent" means the
- * surface decoded but carries no entry and checkVersion returns data null.
- */
-export function decodeTicket12FormHistoryEvidence(input) {
-    const query = { schemaCode: input.schemaCode, sheetCode: input.sheetCode };
-    const listStatus = input.listHttpStatus ?? 200;
-    const checkStatus = input.checkVersionHttpStatus ?? 200;
-    const listEnvelope = input.listBody;
-    const checkEnvelope = input.checkVersionBody;
-    if (!listEnvelope || typeof listEnvelope !== "object" || Array.isArray(listEnvelope) || !checkEnvelope || typeof checkEnvelope !== "object" || Array.isArray(checkEnvelope))
-        return Object.freeze({ classification: "blocked", reason: "malformed-response", query, newestVersion: null, entryCount: null });
-    if (listStatus < 200 || listStatus >= 300 || checkStatus < 200 || checkStatus >= 300)
-        return Object.freeze({ classification: "blocked", reason: "http-error", query, newestVersion: null, entryCount: null });
-    if (listEnvelope.errcode !== 0 || checkEnvelope.errcode !== 0)
-        return Object.freeze({ classification: "blocked", reason: "malformed-response", query, newestVersion: null, entryCount: null });
-    const data = listEnvelope.data;
-    const page = data && typeof data === "object" && !Array.isArray(data) ? data : undefined;
-    const content = page && Array.isArray(page.content) ? page.content : undefined;
-    if (!page || !content)
-        return Object.freeze({ classification: "blocked", reason: "malformed-response", query, newestVersion: null, entryCount: null });
-    const entries = content.filter((entry) => Boolean(entry) && typeof entry === "object" && !Array.isArray(entry) && entry.schemaCode === input.schemaCode && (entry.code === input.sheetCode || entry.sheetCode === input.sheetCode));
-    const checkVersionData = checkEnvelope.data;
-    const newestFromCheck = typeof checkVersionData === "number" && Number.isInteger(checkVersionData) && checkVersionData > 0 ? checkVersionData : null;
-    if (!entries.length) {
-        if (checkVersionData === null || checkVersionData === undefined)
-            return Object.freeze({ classification: "absent", reason: "no-history", query, newestVersion: null, entryCount: 0 });
-        if (newestFromCheck === null)
-            return Object.freeze({ classification: "blocked", reason: "malformed-response", query, newestVersion: null, entryCount: 0 });
-        if (content.length > 0)
-            return Object.freeze({ classification: "blocked", reason: "malformed-response", query, newestVersion: newestFromCheck, entryCount: 0 });
-        // Pinned live 2026-09-04: a design-time model-scoped publication decodes as
-        // a live version int with ZERO history/list entries. The engine has no
-        // API-side write into the bizsheet history table (BizFormHistoryController
-        // is read-only; the publish flow writes the EDIT_AND_PUBLISH_FORM system
-        // operation log instead), history rows only enter through app-package
-        // import/export flows, and the team's manually published agent_test_customer
-        // also carries zero entries. An empty list plus a live version is the
-        // authoritative post-publish history shape for this publish class.
-        return Object.freeze({ classification: "present", reason: "design-time-no-entries", query, newestVersion: newestFromCheck, entryCount: 0 });
-    }
-    // The decompiled history surface sorts version DESC; any other order (or a
-    // checkVersion disagreement with the decoded newest entry) is a malformed
-    // response, never a falsely bound publication version.
-    const versions = entries.map((entry) => (typeof entry.version === "number" && Number.isInteger(entry.version) && entry.version > 0 ? entry.version : null));
-    if (versions.some((version) => version === null))
-        return Object.freeze({ classification: "blocked", reason: "malformed-response", query, newestVersion: newestFromCheck, entryCount: entries.length });
-    const ordered = versions.every((version, index) => index === 0 || versions[index - 1] > version);
-    if (!ordered)
-        return Object.freeze({ classification: "blocked", reason: "malformed-response", query, newestVersion: newestFromCheck, entryCount: entries.length });
-    const version = versions[0];
-    if (newestFromCheck !== null && newestFromCheck !== version)
-        return Object.freeze({ classification: "blocked", reason: "malformed-response", query, newestVersion: newestFromCheck, entryCount: entries.length });
-    const first = entries[0];
-    return Object.freeze({
-        classification: "present",
-        reason: "history-decoded",
-        query,
-        newestVersion: version,
-        entryCount: entries.length,
-        newestEntry: {
-            version,
-            publishRemarks: typeof first.publishRemarks === "string" ? first.publishRemarks : typeof first.remarks === "string" ? first.remarks : null,
-            createdName: typeof first.createdName === "string" ? first.createdName : null,
-        },
-    });
-}
-export function decodeTicket12TreesObservation(input) {
-    const httpStatus = input.httpStatus ?? 200;
-    const envelope = input.body;
-    if (httpStatus < 200 || httpStatus >= 300 || !envelope || typeof envelope !== "object" || Array.isArray(envelope) || envelope.errcode !== 0 || !Array.isArray(envelope.data))
-        return Object.freeze({ classification: "unavailable", appCode: input.appCode, schemaCode: input.schemaCode, schemaPresent: null, note: "read-only-observation-only-no-portal-facing-mutation;a-model-scoped-form-publication-is-not-an-app-publish" });
-    const seen = [];
-    const walk = (nodes) => nodes.some((node) => {
-        if (!node || typeof node !== "object" || Array.isArray(node))
-            return false;
-        const record = node;
-        const code = typeof record.code === "string" ? record.code : typeof record.schemaCode === "string" ? record.schemaCode : null;
-        if (code === input.schemaCode)
-            return true;
-        if (code)
-            seen.push(code);
-        return Array.isArray(record.children) ? walk(record.children) : false;
-    });
-    const schemaPresent = walk(envelope.data);
-    return Object.freeze({ classification: "observed", appCode: input.appCode, schemaCode: input.schemaCode, schemaPresent, note: "read-only-observation-only-no-portal-facing-mutation;a-model-scoped-form-publication-is-not-an-app-publish" });
-}
-/** Host-owned composite-chain evidence capture: consumes the completed form-draft + data-rule handoffs and proves the draft-configured, rule-bound, unpublished form pre-state. */
-export function captureTicket12FormPublishEvidence(input) {
-    assertTicket12TestFormPublishEnvironment(input.settings);
-    if (!TICKET12_UUID_V4.test(input.testRunId))
-        throw new Error("Ticket 12 evidence capture requires the run's host-owned UUID v4 testRunId.");
-    const handoff = input.handoff;
-    const report = handoff.formDraftExecutionReport;
-    const draftEvidence = handoff.formDraftEvidence;
-    const ruleReport = handoff.dataRuleExecutionReport;
-    const ruleEvidence = handoff.dataRuleEvidence;
-    if (!handoff.formDraftPackageId || !SHA256.test(handoff.formDraftPackageHash) || !/[1-9a-f]/i.test(handoff.formDraftPackageHash) || report.route !== TICKET11_FORM_DRAFT_ROUTE || report.status !== "completed" || report.mutationExecuted !== true || report.behavior?.status !== "validated")
-        throw new Error("Ticket 12 form publish requires the completed, behavior-validated form-draft handoff; serial writes never assume state.");
-    if (!handoff.dataRulePackageId || !SHA256.test(handoff.dataRulePackageHash) || !/[1-9a-f]/i.test(handoff.dataRulePackageHash) || ruleReport.route !== TICKET20_DATA_RULE_ROUTE || ruleReport.status !== "completed" || ruleReport.mutationExecuted !== true || ruleReport.behavior?.status !== "validated")
-        throw new Error("Ticket 12 form publish requires the completed, behavior-validated Ticket 20 data-rule handoff (issue 02a: the designer-native rule surface precedes the publication); serial writes never assume state.");
-    if (report.testRunId !== input.testRunId || draftEvidence.testRunId !== input.testRunId || ruleReport.testRunId !== input.testRunId || ruleEvidence.testRunId !== input.testRunId)
-        throw new Error("Ticket 12 composite chain requires the single run testRunId across the model, field, publish, form-draft, data-rule, and form-publish packages.");
-    const targetSchemaCode = draftEvidence.targetSchemaCode;
-    const targetFieldCodes = draftEvidence.targetFieldCodes;
-    const targetSheetCode = draftEvidence.targetSheetCode;
-    if (!isTicket08TargetSchema(targetSchemaCode) || report.targetSchemaCode !== targetSchemaCode || report.targetSheetCode !== targetSheetCode || report.targetFieldCodes.length !== targetFieldCodes.length || report.targetFieldCodes.some((fieldCode, index) => fieldCode !== targetFieldCodes[index]))
-        throw new Error("Ticket 12 fixture family identity diverges from the completed form-draft handoff.");
-    if (ruleEvidence.targetSchemaCode !== targetSchemaCode || ruleEvidence.targetFieldCodes.join("+") !== targetFieldCodes.join("+") || ruleEvidence.targetFieldCode !== ticket12RuleDemoFieldCode(targetFieldCodes))
-        throw new Error("Ticket 12 fixture identity diverges from the completed Ticket 20 data-rule handoff; the publish consumes the same rule-bound family.");
-    const modelPresence = input.modelPresence;
-    if (modelPresence.classification !== "present" || modelPresence.query.schemaCode !== targetSchemaCode)
-        throw new Error("Ticket 12 form publish requires the fixture model to be present in fresh authoritative readback.");
-    targetFieldCodes.forEach((targetFieldCode, index) => {
-        const member = TICKET09_FIELD_FAMILY[index];
-        const publishedFieldPresence = input.publishedFieldPresence[index];
-        if (publishedFieldPresence.classification !== "present" || publishedFieldPresence.reason !== "exact-presence" || publishedFieldPresence.query.schemaCode !== targetSchemaCode || publishedFieldPresence.query.propertyCode !== targetFieldCode || publishedFieldPresence.query.isPublish !== "true")
-            throw new Error(`Ticket 12 evidence capture requires exact authenticated published-state presence for the ${member.propertyTypeName} handoff field; the publish ceiling only ever consumes published configuration.`);
-        if (!publishedFieldPresence.field || publishedFieldPresence.field.code !== targetFieldCode || publishedFieldPresence.field.schemaCode !== targetSchemaCode || publishedFieldPresence.field.published !== true)
-            throw new Error(`Ticket 12 evidence capture requires the ${member.propertyTypeName} field's published flag to decode from the authoritative published readback.`);
-    });
-    const formDraftState = input.formDraftState;
-    if (formDraftState.classification !== "present" || formDraftState.reason !== "exact-presence" || formDraftState.query.schemaCode !== targetSchemaCode || formDraftState.query.sheetCode !== targetSheetCode || !formDraftState.form)
-        throw new Error("Ticket 12 evidence capture requires the default form to be present in fresh authoritative readback.");
-    if (formDraftState.form.published !== false || formDraftState.form.publishedViewJson !== null || formDraftState.form.publishedAttributesJson !== null || formDraftState.form.publishedActionsJson !== null || formDraftState.form.publishedHtmlJson !== null)
-        throw new Error("Ticket 12 evidence capture requires the fixture form to be unpublished (published=false, every published JSON side null); the publish rung starts exactly from the draft-configured state.");
-    if (formDraftState.form.existDraft !== true)
-        throw new Error("Ticket 12 evidence capture requires existDraft=true on the draft-configured fixture form.");
-    const formDraft = formDraftState.form;
-    targetFieldCodes.forEach((targetFieldCode, index) => {
-        const member = TICKET09_FIELD_FAMILY[index];
-        const presence = decodeTicket11DraftControlPresence(formDraft, targetFieldCode);
-        if (!presence.decodable)
-            throw new Error("Ticket 12 evidence capture could not decode the form draft JSON; nothing ships on guessed schema JSON.");
-        if (presence.layoutOccurrences !== 1 || !presence.control || presence.control.type !== member.controlType)
-            throw new Error(`Ticket 12 evidence capture requires the ${member.propertyTypeName} handoff field's typed control to be bound exactly once in the draft layout; the publish consumes the completed form-draft configuration.`);
-    });
-    // Issue 02a: the publication consumes the designer-native rule surface
-    // too — the required-rule row bound to the TIME field must decode from
-    // the authoritative rule list before the form publishes (the panel
-    // hydrates required from this row, never from control options strings).
-    const requiredRuleState = input.requiredRuleState;
-    if (requiredRuleState.classification !== "present" || requiredRuleState.query.schemaCode !== targetSchemaCode || requiredRuleState.query.dataRuleType !== 4)
-        throw new Error("Ticket 12 evidence capture requires the authoritative required-rule (dataRuleType=4) list readback to decode.");
-    const boundRequiredRow = requiredRuleState.rows.find((row) => decodeRequiredDataRuleRow(row, targetSchemaCode, ticket12RuleDemoFieldCode(targetFieldCodes)) !== undefined);
-    if (!boundRequiredRow)
-        throw new Error(`Ticket 12 evidence capture requires the completed Ticket 20 required-rule row bound to the ${ticket12RuleDemoMemberName()} field to decode from the authoritative rule list; the publish never ships without its designer-native required semantics.`);
-    const authoritativeOrigin = input.discovery.authoritativeOrigin;
-    const enterpriseId = input.discovery.enterpriseId;
-    if (!authoritativeOrigin || !enterpriseId)
-        throw new Error("Ticket 12 evidence capture requires authenticated environment fingerprint evidence.");
-    const environmentFingerprint = canonicalCloudPivotEnvironmentFingerprint({ environment: TICKET12_TEST_ENVIRONMENT_NAME, authoritativeOrigin, applicationCode: TICKET12_TEST_APPLICATION_CODE, enterpriseId });
-    if (environmentFingerprint !== draftEvidence.environmentFingerprint)
-        throw new Error("Ticket 12 form publish is outside the form-draft handoff environment fingerprint.");
-    const evidence = Object.freeze({
-        route: TICKET12_FORM_PUBLISH_ROUTE,
-        capabilityId: TICKET12_FORM_PUBLISH_CAPABILITY_ID,
-        environmentName: TICKET12_TEST_ENVIRONMENT_NAME,
-        applicationCode: TICKET12_TEST_APPLICATION_CODE,
-        folder: draftEvidence.folder,
-        targetSchemaCode,
-        targetSheetCode,
-        targetFieldCodes,
-        testRunId: input.testRunId,
-        environmentFingerprint,
-        baselineFingerprint: canonicalCloudPivotBaselineFingerprint({ environmentFingerprint, applicationCode: TICKET12_TEST_APPLICATION_CODE, discovery: input.discovery }),
-        discoveryFingerprint: canonicalFormalDiscoveryFingerprint(input.discovery),
-        handoff,
-        modelPresence,
-        publishedFieldPresence: Object.freeze([...input.publishedFieldPresence]),
-        formDraftState,
-        requiredRuleState,
-        publishRemarks: TICKET12_PUBLISH_REMARKS,
-        cleanupContract: buildTicket12FormCleanupContract(input.testRunId, targetSchemaCode, targetSheetCode, targetFieldCodes),
-        designerDirectUrl: ticket12DesignerDirectUrl(targetSchemaCode, targetSheetCode),
-        capturedAt: new Date((input.now ?? Date.now)()).toISOString(),
-    });
-    if ([evidence.environmentFingerprint, evidence.baselineFingerprint, evidence.discoveryFingerprint].some((value) => !SHA256.test(value)))
-        throw new Error("Ticket 12 evidence fingerprints are not canonical.");
-    if (SENSITIVE_SECRET_VALUE.test(stable(evidence)))
-        throw new Error("Ticket 12 evidence contains prohibited sensitive data.");
-    return evidence;
-}
-export const TICKET12_EVIDENCE_DEFAULT_TTL_MS = 25 * 60_000;
-export const TICKET12_EVIDENCE_MAX_TTL_MS = 30 * 60_000;
-/** Single-use, TTL-bounded evidence store; consumed exactly once by plan creation. */
-export class Ticket12EvidenceStore {
-    records = new Map();
-    now;
-    ttlMs;
-    lastNow;
-    constructor(options = {}) {
-        this.now = options.now ?? Date.now;
-        this.ttlMs = options.ttlMs ?? TICKET12_EVIDENCE_DEFAULT_TTL_MS;
-        if (!Number.isFinite(this.ttlMs) || this.ttlMs < 1 || this.ttlMs > TICKET12_EVIDENCE_MAX_TTL_MS)
-            throw new Error("Ticket 12 evidence TTL must be between 1ms and its safety maximum.");
-    }
-    capture(evidence) {
-        validateTicket12Evidence(evidence);
-        const evidenceId = `ticket12-evidence-${randomUUID()}`;
-        const expiresAt = this.readClock() + this.ttlMs;
-        const stored = Object.freeze({ ...evidence, evidenceArtifactId: evidenceId });
-        this.records.set(evidenceId, { evidence: stored, expiresAt, consumed: false });
-        return { evidenceId, expiresAt, evidence: stored };
-    }
-    consume(evidenceId) {
-        const record = this.records.get(evidenceId);
-        if (!record)
-            throw new Error("Ticket 12 evidence artifact is missing or divergent.");
-        if (record.consumed)
-            throw new Error("Ticket 12 evidence has already been consumed.");
-        if (record.expiresAt <= this.readClock())
-            throw new Error("Ticket 12 evidence is stale or expired.");
-        record.consumed = true;
-        return record.evidence;
-    }
-    resolve(evidenceId) {
-        const record = this.records.get(evidenceId);
-        if (!record || !record.consumed)
-            throw new Error("Ticket 12 evidence artifact is missing or has not been consumed by planning.");
-        if (record.expiresAt <= this.readClock())
-            throw new Error("Ticket 12 evidence artifact is stale or expired.");
-        return record.evidence;
-    }
-    readClock() {
-        const currentTime = this.now();
-        if (!Number.isFinite(currentTime))
-            throw new Error("Ticket 12 evidence clock is invalid; fail closed.");
-        if (this.lastNow !== undefined && currentTime < this.lastNow)
-            throw new Error("Ticket 12 evidence clock moved backwards; fail closed.");
-        this.lastNow = currentTime;
-        return currentTime;
-    }
-}
-/**
- * Composes the exact evidenced BizSheetVO publish DTO: the authoritative
- * pre-state form echoed with the draft JSON sides promoted to the published
- * members (the product's own pre-publish normalization,
- * AppIntegrationFacadeImpl.java:2725-2746), existDraft=false, sendMessage=
- * false, and the run's publishRemarks marker. No publish-only property
- * mutation member is set.
- */
-export function buildTicket12FormPublishPayload(evidence) {
-    validateTicket12Evidence(evidence);
-    const pre = evidence.formDraftState.form;
-    evidence.targetFieldCodes.forEach((fieldCode, index) => {
-        const member = TICKET09_FIELD_FAMILY[index];
-        const control = decodeDraftControl(pre.draftViewJson, pre.draftAttributesJson, fieldCode);
-        if (!control || control.type !== member.controlType)
-            throw new Error(`Ticket 12 payload composition requires the bound ${member.propertyTypeName} draft control to decode before promotion.`);
-    });
-    return {
-        ...pre,
-        schemaCode: evidence.targetSchemaCode,
-        code: evidence.targetSheetCode,
-        name: pre.name,
-        sheetType: pre.sheetType ?? 0,
-        published: false,
-        existDraft: false,
-        sendMessage: false,
-        publishRemarks: evidence.publishRemarks,
-        publishedViewJson: pre.draftViewJson,
-        publishedAttributesJson: pre.draftAttributesJson,
-        // Every draft side is promoted verbatim (the decompiled normalization
-        // promotes the non-empty draft members); a null draft member normalizes
-        // to the canonical empty value the configured reference form carries.
-        publishedActionsJson: pre.draftActionsJson ?? "[]",
-        publishedHtmlJson: pre.draftHtmlJson ?? "{}",
-        draftViewJson: pre.draftViewJson,
-        draftAttributesJson: pre.draftAttributesJson,
-        ...(pre.draftActionsJson !== null ? { draftActionsJson: pre.draftActionsJson } : {}),
-        ...(pre.draftHtmlJson !== null ? { draftHtmlJson: pre.draftHtmlJson } : {}),
-    };
-}
-export function buildTicket12ConfigurationIntent(evidence) {
-    validateTicket12Evidence(evidence);
-    const target = `${evidence.targetSchemaCode}/${evidence.targetSheetCode}`;
-    return {
-        intentVersion: 1,
-        targetFamily: "8.6",
-        environmentBinding: { application: evidence.applicationCode, model: evidence.targetSchemaCode, baselineFingerprint: evidence.baselineFingerprint },
-        sourceRequirement: "Ticket 12 maintainer test: publish the composite fixture's draft-configured default form (model-scoped form publication only, never an app publish and never an Environment release), completing the structurally usable shape — model, published fields, published form — with authoritative readback, publish-history decode, and the stated cascade cleanup contract.",
-        resources: [
-            { id: target, kind: "form", state: "update", properties: { schemaCode: evidence.targetSchemaCode, sheetCode: evidence.targetSheetCode, boundFamilyFields: [...evidence.targetFieldCodes], modelScopedPublication: true, publishRemarks: evidence.publishRemarks } },
-            ...evidence.targetFieldCodes.map((fieldCode) => ({ id: `${evidence.targetSchemaCode}/${fieldCode}`, kind: "field", state: "existing", properties: { schemaCode: evidence.targetSchemaCode, published: true } })),
-        ],
-        relationships: evidence.targetFieldCodes.map((fieldCode) => ({ from: target, to: `${evidence.targetSchemaCode}/${fieldCode}`, kind: "bindsTo" })),
-        lifecycle: [{ resourceId: target, transitions: ["publish"], order: 1, idempotent: false, dependencyChecks: ["completed-form-draft-handoff", "draft-bound-control-and-unpublished-form-preflight"], recoveryBoundary: `form:${target}` }],
-        behavior: [{ id: "form-publication", kind: "structure", requiredCapabilityIds: [TICKET12_FORM_PUBLISH_CAPABILITY_ID], resourceIds: [target], obligations: ["the published readback decodes published=true with the configured layout on the published JSON sides", "the form-consistency lag recorded on the field rungs is discharged by this explicit publication", "the publish history decodes a versioned entry bound to the sheet", "the usable shape (model, published fields, published form) is confirmed by authoritative readback", "the designer direct URL stays inspectable"] }],
-        acceptance: [{ id: "ticket12-form-publish-readback", scenario: "model-scoped-form-publication-usable-shape", actor: "omc-maintainer-opencode", assertions: ["the authoritative form readback decodes the published state and the published control binding", "the publish history surface decodes the pinned design-time publish shape (version int with zero entries) or a versioned entry when import/export created one", "the model and the published field remain authoritative-readback present after the publication"], readbackInvariants: [`${TICKET12_FORM_READBACK_ENDPOINT}?schemaCode=<model>&sheetCode=<sheet> decodes published=true existDraft=false`, `${TICKET12_FORM_HISTORY_LIST_ENDPOINT} decodes the pinned design-time publish shape (zero entries) or a versioned entry for the sheet`], outcome: "validated" }],
-        cleanup: [{ id: "ticket12-form-cascade-cleanup", boundary: `ticket12:${evidence.testRunId}:form-publish-cascade-absence`, dependencyChecks: ["staged published-field cleanup", "model physical delete", "form absence readback", "history absence readback"], resources: [`form:${target}`] }],
-        implementationConstraints: { nativePreferred: true, backendRequired: false, prohibitedPaths: ["form.online-js", "business-rule", "integration", "backend.extension"], approvalExceptions: [] },
-        evidenceRefs: [TICKET12_FORM_PUBLISH_CAPABILITY_ID, TICKET12_FORM_PUBLISH_ENDPOINT, TICKET12_FORM_READBACK_ENDPOINT, TICKET12_FORM_HISTORY_LIST_ENDPOINT, ...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH.evidence],
-        unresolved: [],
-    };
-}
-function ticket12FormPublishOperation(evidence) {
-    const target = `form:${evidence.targetSchemaCode}/${evidence.targetSheetCode}`;
-    return {
-        id: `form-publish:${evidence.targetSchemaCode}/${evidence.targetSheetCode}/${evidence.targetFieldCodes.join("+")}`,
-        method: "POST",
-        path: TICKET12_FORM_PUBLISH_ENDPOINT,
-        target,
-        payload: buildTicket12FormPublishPayload(evidence),
-        expectedReadback: `${target}:published`,
-        evidence: [TICKET12_FORM_PUBLISH_CAPABILITY_ID, ...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH.evidence, TICKET12_FORM_READBACK_ENDPOINT],
-        transportMode: "serialized-server-form-publish-8.6.26",
-        capability: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_PUBLISH,
-    };
-}
-/** Creates and proposes the immutable Ticket 12 Delivery Plan Approval for the single default-form publish step. */
-export function createTicket12FormPublishPlanApproval(input) {
-    const evidence = validateTicket12Evidence(input.evidence);
-    assertDigest(input.knowledgePackDigest, "knowledge pack digest");
-    const operation = ticket12FormPublishOperation(evidence);
-    assertTicket12OperationsBounded({ route: TICKET12_FORM_PUBLISH_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode, targetSheetCode: evidence.targetSheetCode, targetFieldCodes: evidence.targetFieldCodes });
-    const intent = buildTicket12ConfigurationIntent(evidence);
-    if (validateConfigurationIntent(intent).length)
-        throw new Error("Ticket 12 Configuration Intent is invalid; planning is blocked.");
-    const binding = {
-        deliveryId: ticket12DeliveryId(evidence.testRunId),
-        environment: TICKET12_TEST_ENVIRONMENT_NAME,
-        baselineFingerprint: evidence.baselineFingerprint,
-        environmentFingerprint: evidence.environmentFingerprint,
-        discoveryFingerprint: evidence.discoveryFingerprint,
-        ...(evidence.evidenceArtifactId ? { evidenceArtifactId: evidence.evidenceArtifactId } : {}),
-    };
-    const planHash = digest({ route: TICKET12_FORM_PUBLISH_ROUTE, capabilityId: TICKET12_FORM_PUBLISH_CAPABILITY_ID, target: `${evidence.targetSchemaCode}/${evidence.targetSheetCode}/${evidence.targetFieldCodes.join("+")}`, testRunId: evidence.testRunId, operation: { id: operation.id, readback: operation.expectedReadback }, familyFieldCodes: [...evidence.targetFieldCodes], formDraftHandoff: { packageId: evidence.handoff.formDraftPackageId, packageHash: evidence.handoff.formDraftPackageHash }, folder: evidence.folder, fingerprints: { baseline: evidence.baselineFingerprint, environment: evidence.environmentFingerprint, discovery: evidence.discoveryFingerprint }, cleanupContractHash: ticket12FormCleanupContractHash(), knowledgePackDigest: input.knowledgePackDigest, prohibited: [...TICKET12_PROHIBITED_MUTATION_TERMS] });
-    const base = createDeliveryPlanApproval({
-        binding,
-        requirementHash: digest({ target: `${evidence.targetSchemaCode}/${evidence.targetSheetCode}`, formPublish: true }),
-        clarificationHash: digest("ticket12-test-form-publish"),
-        intentHash: digest(intent),
-        decisionHash: digest(TICKET12_FORM_PUBLISH_ROUTE),
-        graphHash: digest([operation.id]),
-        riskHash: digest(TICKET12_RISKS),
-        validationPlanHash: digest("authoritative-published-form-readback-history-decode-lag-resolution-and-usable-shape-triple"),
-        cleanupPlanHash: ticket12FormCleanupContractHash(),
-        allowedOperationScope: [ticket12FormPublishScope(evidence.targetSchemaCode, evidence.targetSheetCode)],
-        planHash,
-        applicationCode: TICKET12_TEST_APPLICATION_CODE,
-        folderId: evidence.folder.id,
-        folderName: evidence.folder.name,
-        targets: [`${evidence.targetSchemaCode}/${evidence.targetSheetCode}`],
-    });
-    const approval = {
-        ...base,
-        route: TICKET12_FORM_PUBLISH_ROUTE,
-        testRunId: evidence.testRunId,
-        targetSchemaCode: evidence.targetSchemaCode,
-        targetSheetCode: evidence.targetSheetCode,
-        targetFieldCodes: evidence.targetFieldCodes,
-        capabilityId: TICKET12_FORM_PUBLISH_CAPABILITY_ID,
-        knowledgePackDigest: input.knowledgePackDigest,
-        cleanupContractHash: ticket12FormCleanupContractHash(),
-        environmentName: TICKET12_TEST_ENVIRONMENT_NAME,
-    };
-    const proposal = { ...approval, approvalHash: deliveryPlanApprovalHash(approval) };
-    proposeDeliveryPlan(input.ledger, proposal);
-    return { approval: proposal, operation, cleanupContract: evidence.cleanupContract, intent, binding };
-}
-const TICKET12_RISKS = [
-    "Exactly one model-scoped default-form publication of the run's own composite fixture is in scope — model-scoped form publication only, never an app publish and never an Environment release; app publish, deployment, restart, release, Redis, tenant administration, Portal-facing operations, and runtime CRUD remain permanently rejected.",
-    "The published form's cleanup follows the two-variant contract: the staged model physical delete cascades published forms with no published-state branch (decompile-evidenced), absence confirmed by the 302024 envelope and history absence; any cascade contradiction stops, retains, and reports — the form-level /delete refuses default forms by design and is never attempted.",
-];
-/** Compiles the immutable one-step form-publish package bound to the approved plan, pack digest, and pinned contract hash. */
-export function prepareTicket12FormPublishPackage(input) {
-    const evidence = validateTicket12Evidence(input.evidence);
-    const approval = requireTicket12Approval(input.approval);
-    const persisted = requirePersistedApprovedPlan(input.ledger, approval);
-    assertTicket12BindingMatchesEvidence(persisted.binding, evidence);
-    const scope = ticket12FormPublishScope(evidence.targetSchemaCode, evidence.targetSheetCode);
-    if (!persisted.allowedOperationScope.includes(scope))
-        throw new Error(`Ticket 12 package step is outside the approved operation scope: ${scope}.`);
-    if (input.pinnedFormPublishContractHash !== ticket12FormPublishContractHash())
-        throw new Error("Ticket 12 pinned form-publish contract hash does not match the canonical 8.6.26 capability contract.");
-    assertDigest(input.knowledgePackDigest, "knowledge pack digest");
-    if (input.knowledgePackDigest !== approval.knowledgePackDigest)
-        throw new Error("Ticket 12 knowledge pack digest diverges from the approved plan binding.");
-    const operation = ticket12FormPublishOperation(evidence);
-    assertTicket12OperationsBounded({ route: TICKET12_FORM_PUBLISH_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode, targetSheetCode: evidence.targetSheetCode, targetFieldCodes: evidence.targetFieldCodes });
-    const snapshotBase = { id: `snapshot:${operation.id}`, target: operation.target, identity: operation.target, recoveryBoundary: operation.target, state: "absent", baselineFingerprint: persisted.binding.baselineFingerprint };
-    const snapshot = { ...snapshotBase, snapshotHash: digest(snapshotBase) };
-    const pkg = compileNativeOperations({
-        operations: [operation],
-        binding: persisted.binding,
-        planApproval: persisted,
-        snapshotManifest: [snapshot],
-        releasePlanHash: digest("ticket12-no-release"),
-        recoveryPolicyHash: digest("ticket12-form-publish-step-only"),
-        knowledgePack: { id: TICKET12_FORM_PUBLISH_KNOWLEDGE_PACK_ID, digest: input.knowledgePackDigest },
-        capabilityEvidence: [TICKET12_FORM_PUBLISH_CAPABILITY_ID, "cloudpivot.form-publish.serialized-server-8.6.26", TICKET12_FORM_READBACK_ENDPOINT, `formDraftHandoff:${evidence.handoff.formDraftPackageId}`, `folder:${evidence.folder.id}`, `testRunId:${evidence.testRunId}`, `baselineFingerprint:${persisted.binding.baselineFingerprint}`],
-        requiredPermissions: ["configuration-write"],
-        packageId: `ticket12-form-publish-${digest(persisted.approvalId).slice(0, 32)}`,
-        ledger: input.ledger,
-    });
-    input.ledger.createPackage(pkg);
-    return { package: pkg, operations: [operation], planApproval: persisted, dryRun: ticket12DryRun(evidence, [operation]), evidence };
-}
-/** Read-only dry-run projection; never a CloudPivot write and never an app publish or Environment release operation. */
-function ticket12DryRun(evidence, operations) {
-    const readbackOperations = [
-        { id: `readback:form:${evidence.targetSchemaCode}:${evidence.targetSheetCode}`, method: "GET", path: TICKET12_FORM_READBACK_ENDPOINT, target: `form:${evidence.targetSchemaCode}/${evidence.targetSheetCode}`, payload: { schemaCode: evidence.targetSchemaCode, sheetCode: evidence.targetSheetCode }, expectedReadback: `form:${evidence.targetSchemaCode}/${evidence.targetSheetCode}:read`, evidence: ["BizFormController.java:174-230"] },
-        { id: `readback:form-history:${evidence.targetSchemaCode}:${evidence.targetSheetCode}`, method: "GET", path: TICKET12_FORM_HISTORY_CHECK_VERSION_ENDPOINT, target: `form-history:${evidence.targetSchemaCode}/${evidence.targetSheetCode}`, payload: { schemaCode: evidence.targetSchemaCode, sheetCode: evidence.targetSheetCode }, expectedReadback: `form-history:${evidence.targetSchemaCode}/${evidence.targetSheetCode}:read`, evidence: ["BizFormHistoryController.java:143-167"] },
-        { id: `observation:trees:${TICKET12_TEST_APPLICATION_CODE}`, method: "GET", path: TICKET12_TREES_OBSERVATION_ENDPOINT, target: `application:${TICKET12_TEST_APPLICATION_CODE}`, payload: { appCode: TICKET12_TEST_APPLICATION_CODE }, expectedReadback: `trees:${TICKET12_TEST_APPLICATION_CODE}:read-only-observation`, evidence: ["read-only publish-gated menu projection; never a Portal-facing mutation"] },
-    ];
-    const body = JSON.stringify({ execution: "read-only-dry-run", operations, readbackOperations, blocked: [], prohibitedActions: ["cloudpivot-write"] }, null, 2) + "\n";
-    return { execution: "read-only-dry-run", operations, readbackOperations, blocked: [], prohibitedActions: ["cloudpivot-write"], artifact: { name: "cloudpivot-ticket12-form-publish-dry-run.json", body, sha256: digest(body), mimeType: "application/json" } };
-}
-export function formatTicket12DeliveryPlanApprovalFrame(approval) {
-    const value = requireTicket12Approval(approval);
-    return appendApprovalHumanBlock(`Approve Ticket 12 form publish Delivery Plan Approval ${value.approvalId} hash ${value.approvalHash}; plan hash ${value.planHash}; capability ${value.capabilityId}; environment test; application test; environment fingerprint ${value.binding.environmentFingerprint}; baseline fingerprint ${value.binding.baselineFingerprint}; folder ${value.folderId} (${value.folderName}); fixture model ${value.targetSchemaCode}; default sheet ${value.targetSheetCode}; bound published family fields ${value.targetFieldCodes.join(" + ")}; testRunId ${value.testRunId}; exact scope ${value.allowedOperationScope[0]}; one default-form publish step (POST ${TICKET12_FORM_PUBLISH_ENDPOINT} with the echoed BizSheetVO: the draft JSON sides promoted to the published members, existDraft=false, sendMessage=false) — model-scoped form publication only, never an app publish and never an Environment release — with authoritative readback, publish-history decode, lag-resolution proof, and the stated two-variant cascade cleanup contract.`, { capability: "ticket12-form-publish", kind: "delivery-plan", identities: [value.targetSchemaCode, value.targetSheetCode, ...value.targetFieldCodes], scope: [value.allowedOperationScope[0]] });
-}
-export function formatTicket12EnvironmentChangeApprovalFrame(input) {
-    const value = requireTicket12Approval(input.approval);
-    return appendApprovalHumanBlock(`Approve Ticket 12 form publish Environment Change Approval for package ${input.packageId} hash ${input.packageHash}; plan approval ${value.approvalId} hash ${value.approvalHash}; environment test; folder ${value.folderId} (${value.folderName}); fixture model ${value.targetSchemaCode}; default sheet ${value.targetSheetCode}; bound published family fields ${value.targetFieldCodes.join(" + ")}; testRunId ${value.testRunId}; exact scope ${value.allowedOperationScope[0]}; exactly one default-form publish step (model-scoped form publication only, never an app publish and never an Environment release) executed by the single Forge configuration writer lease with authoritative readback, publish-history decode, and the usable shape proven through authoritative readback.`, { capability: "ticket12-form-publish", kind: "environment-change", identities: [value.targetSchemaCode, value.targetSheetCode, ...value.targetFieldCodes], scope: [value.allowedOperationScope[0]] });
-}
-/**
- * Validates real publication behavior beyond HTTP 2xx: the published state
- * and control binding decode from the authoritative readback, the
- * field-rung-recorded form-consistency lag is discharged, the publish
- * history decodes, and the usable shape (model + published field + published
- * form) is confirmed through authoritative readback.
- */
-export function validateTicket12FormPublishBehavior(input) {
-    const evidence = validateTicket12Evidence(input.evidence);
-    const checks = [];
-    const add = (id, ok, detail) => checks.push({ id, status: ok ? "validated" : "blocked", detail });
-    const before = input.before;
-    const beforeOk = before.classification === "present" && before.query.schemaCode === evidence.targetSchemaCode && before.query.sheetCode === evidence.targetSheetCode && Boolean(before.form) && before.form.published === false;
-    add("pre-state-unpublished", beforeOk, beforeOk ? "the pre-publish authoritative form readback decoded the unpublished draft-configured default form." : "the pre-publish authoritative form readback did not decode the unpublished draft-configured default form.");
-    const after = input.after;
-    const afterOk = after.classification === "present" && after.query.schemaCode === evidence.targetSchemaCode && after.query.sheetCode === evidence.targetSheetCode && Boolean(after.form);
-    add("published-state-decoded", afterOk && after.form.published === true, `the published flag decodes as ${String(after.form?.published)} from the authoritative post-publish readback.`);
-    evidence.targetFieldCodes.forEach((fieldCode, fieldIndex) => {
-        const member = TICKET09_FIELD_FAMILY[fieldIndex];
-        // Ticket 03b: the per-type published-options decode contract (display
-        // name, highlighted keys, pinned-key predicate) is the ACTIVE family's
-        // registered member data.
-        const registeredMember = fieldFamilyMembers()[fieldIndex];
-        const suffix = member.propertyTypeName.toLowerCase();
-        const publishedControl = afterOk ? decodePublishedControl(after.form.publishedViewJson, after.form.publishedAttributesJson, fieldCode) : undefined;
-        const publishedBinding = afterOk && publishedControl?.key === fieldCode && publishedControl.type === member.controlType;
-        add(`published-control-binding-${suffix}`, publishedBinding, publishedBinding ? `the published JSON sides carry the ${member.propertyTypeName} field's control exactly once with the ${registeredMember.control.controlDisplayName} binding.` : `the authoritative published readback did not decode the ${member.propertyTypeName} field's control on the published JSON sides after the publish returned success.`);
-        const options = publishedControl?.options;
-        // Issue 02a (type-matrix §9): the published options decode with visible
-        // plus the always-readonly boolean (Date) — and WITHOUT any
-        // requiredFormula/readonlyCondition condition strings; required lives on
-        // the bizdatarule row, which the panel re-hydrates from.
-        const noConditionStrings = options !== undefined && !("requiredFormula" in options) && !("readonlyCondition" in options) && !("displayFormula" in options);
-        const optionsOk = registeredMember.publishedControlOptions.passes(options, noConditionStrings);
-        add(`published-control-options-${suffix}`, optionsOk, `the published ${member.propertyTypeName} control options decode with the per-type pinned family keys (visible=${JSON.stringify(options?.visible)}${registeredMember.publishedControlOptions.highlightedKeys.map((key) => `, ${key}=${JSON.stringify(options?.[key])}`).join("")}) and WITHOUT any condition strings (requiredFormula/readonlyCondition absent — the designer-native rule row carries required).`);
-        const draftControl = afterOk ? decodeDraftControl(after.form.draftViewJson, after.form.draftAttributesJson, fieldCode) : undefined;
-        add(`draft-side-preserved-${suffix}`, Boolean(draftControl) && draftControl?.type === member.controlType, `the draft side still carries the configured ${member.propertyTypeName} control binding after the publication (the server writes draft*Json back unchanged).`);
-    });
-    add("exist-draft-consumed", after.form?.existDraft === false, `the existDraft flag decodes as ${String(after.form?.existDraft)} after the publication (the draft is consumed into the published side).`);
-    const lagResolved = beforeOk && afterOk && before.form.published === false && after.form.published === true && after.form.publishedViewJson !== null && after.form.publishedAttributesJson !== null;
-    add("form-consistency-lag-resolved", lagResolved, lagResolved ? "the form-consistency lag recorded on the Ticket 10 field rung is discharged by this rung's explicit model-scoped publication: the authoritative form readback no longer lags (published=true with the published JSON sides populated)." : "the authoritative form readback still lags the publication (published state or published JSON sides did not decode); the lag-resolution proof failed.");
-    const history = input.history;
-    const historyOk = history.classification === "present" && history.query.schemaCode === evidence.targetSchemaCode && history.query.sheetCode === evidence.targetSheetCode && history.newestVersion !== null && history.newestVersion >= 1;
-    add("publish-history-decoded", historyOk, historyOk ? (history.entryCount === 0
-        ? `the publish history surface decodes the pinned design-time shape: version ${history.newestVersion} with zero history/list entries (design-time model-scoped publication writes no bizsheet history rows; corroborated live by the manually published agent_test_customer also carrying zero entries).`
-        : `the publish history decodes version ${history.newestVersion} (${history.entryCount} entr${history.entryCount === 1 ? "y" : "ies"}) with publishRemarks ${JSON.stringify(history.newestEntry?.publishRemarks)} by ${JSON.stringify(history.newestEntry?.createdName)}.`) : `the publish history surface did not decode for the fixture sheet (classification=${history.classification}).`);
-    const remarksOk = historyOk && (history.entryCount === 0 || history.newestEntry?.publishRemarks === evidence.publishRemarks);
-    add("publish-remarks-bound", remarksOk, historyOk && history.entryCount === 0
-        ? "the pinned design-time publish shape carries no history entries, so no remarks exist to bind by design; this run's publication identity is bound by the immutable package, the dual approvals, and the testRunId chain instead."
-        : remarksOk ? "the newest history entry carries this run's publishRemarks marker; the history is provably this run's publication." : `the newest history entry's remarks decode as ${JSON.stringify(history.newestEntry?.publishRemarks)} and do not bind this run's marker ${JSON.stringify(evidence.publishRemarks)}.`);
-    const modelPresence = input.modelPresence;
-    add("usable-shape-model", modelPresence.classification === "present" && modelPresence.query.schemaCode === evidence.targetSchemaCode, `the fixture model is ${modelPresence.classification} in the authoritative post-publish readback.`);
-    input.publishedFieldPresence.forEach((publishedFieldPresence, fieldIndex) => {
-        const member = TICKET09_FIELD_FAMILY[fieldIndex];
-        add(`usable-shape-published-field-${member.propertyTypeName.toLowerCase()}`, publishedFieldPresence.classification === "present" && publishedFieldPresence.query.schemaCode === evidence.targetSchemaCode && publishedFieldPresence.query.propertyCode === evidence.targetFieldCodes[fieldIndex] && publishedFieldPresence.query.isPublish === "true" && publishedFieldPresence.field?.published === true, `the bound ${member.propertyTypeName} field remains present with the published flag decoded in the authoritative published-state readback.`);
-    });
-    const everyControlPublished = evidence.targetFieldCodes.every((_, fieldIndex) => checks.some((check) => check.id === `published-control-binding-${TICKET09_FIELD_FAMILY[fieldIndex].propertyTypeName.toLowerCase()}` && check.status === "validated"));
-    add("usable-shape-published-form", everyControlPublished && after.form.published === true, "the structurally usable shape is complete: model, published family fields, and published form all confirmed through authoritative readback.");
-    add("designer-direct-url", evidence.designerDirectUrl === ticket12DesignerDirectUrl(evidence.targetSchemaCode, evidence.targetSheetCode), `designer direct URL ${evidence.designerDirectUrl} stays inspectable.`);
-    const observation = input.treesObservation;
-    add("publish-gated-menu-observation", observation === undefined || observation.classification === "observed" || observation.classification === "unavailable", observation
-        ? `read-only apppackage/trees observation recorded: schema ${observation.schemaCode} ${observation.schemaPresent === null ? "unavailable" : observation.schemaPresent ? "present" : "absent"} in the publish-gated menu projection; a model-scoped form publication is not an app publish and no Portal-facing mutation was performed.`
-        : "the read-only publish-gated menu observation was not part of this validation.");
-    const blocked = checks.find((check) => check.status === "blocked");
-    return blocked ? { status: "blocked", reason: `Ticket 12 behavior validation failed: ${blocked.detail}`, checks } : { status: "validated", checks };
-}
-/** Execution boundary: named test environment, route-bound package steps, active approvals, no replay of terminal or uncertain packages. */
-export function assertTicket12ExecutionBoundary(input) {
-    if (input.environmentName !== "test")
-        throw new Error("Ticket 12 execution is restricted to the named test environment; production and staging are rejected.");
-    const { projection } = input;
-    if (input.steps.length !== 1 || !input.steps[0].id.startsWith("form-publish:"))
-        throw new Error(`Ticket 12 execution boundary rejected package ${input.packageId}: its steps are not the single form-publish: operation bound to the ${input.route} route.`);
-    if (projection.status === "approved" && projection.approvals.plan === "approved" && projection.approvals.environment === "approved")
-        return;
-    if (projection.status === "completed")
-        throw new Error(`Ticket 12 package ${input.packageId} is already terminal completed; replay is rejected.`);
-    if (projection.status === "uncertain")
-        throw new Error(`Ticket 12 package ${input.packageId} is uncertain; reconcile by authoritative readback before any replay.`);
-    if (projection.status === "in_progress")
-        throw new Error(`Ticket 12 package ${input.packageId} is already running; concurrent execution is rejected.`);
-    const pending = [...projection.blockers];
-    if (projection.approvals.plan !== "approved")
-        pending.push("Delivery Plan Approval is required before package execution.");
-    if (projection.approvals.environment !== "approved")
-        pending.push("Environment Change Approval is required before mutation.");
-    throw new Error(`Ticket 12 execution boundary rejected package ${input.packageId}: status is ${projection.status} (blocked); ${[...new Set(pending)].join("; ")}.`);
-}
-/** Executes the approved one-step default-form publish package through the single OMC Host write transport, then validates the published behavior, history, lag resolution, and the usable shape. */
-export async function executeTicket12FormPublishPackage(input) {
-    assertTicket12TestFormPublishEnvironment(input.settings);
-    if (typeof input.transport.serializedServerFormPublish !== "function")
-        throw new Error("Ticket 12 execution requires the OMC Host serialized form-publish transport; bypass transports are rejected.");
-    const projection = input.ledger.project(input.prepared.package.packageId);
-    assertTicket12ExecutionBoundary({ projection, environmentName: input.settings.environmentName, packageId: input.prepared.package.packageId, route: TICKET12_FORM_PUBLISH_ROUTE, steps: input.prepared.package.steps });
-    if (input.environmentApproval.packageId !== input.prepared.package.packageId || input.environmentApproval.packageHash !== input.prepared.package.packageHash)
-        throw new Error("Ticket 12 Environment Change Approval does not match the prepared package.");
-    const evidence = input.prepared.evidence;
-    const preflight = await input.readFormState();
-    if (preflight.classification !== "present" || !preflight.form || preflight.form.published !== evidence.formDraftState.form.published || preflight.form.publishedViewJson !== evidence.formDraftState.form.publishedViewJson || preflight.form.publishedAttributesJson !== evidence.formDraftState.form.publishedAttributesJson || preflight.form.publishedActionsJson !== evidence.formDraftState.form.publishedActionsJson || preflight.form.publishedHtmlJson !== evidence.formDraftState.form.publishedHtmlJson)
-        throw new Error(`Ticket 12 execution requires the form pre-state to match the approved evidence; ${input.prepared.package.steps[0].target} diverges from the approved handoff.`);
-    for (const [fieldIndex, fieldCode] of evidence.targetFieldCodes.entries()) {
-        const preflightPresence = decodeTicket11DraftControlPresence(preflight.form, fieldCode);
-        if (!preflightPresence.decodable || preflightPresence.layoutOccurrences !== 1 || !preflightPresence.control || preflightPresence.control.type !== TICKET09_FIELD_FAMILY[fieldIndex].controlType)
-            throw new Error(`Ticket 12 execution requires the draft control binding to match the approved evidence before the publish; ${fieldCode} is not the completed form-draft configuration.`);
-    }
-    const result = await runNativeConfigurationPackage({
-        package: input.prepared.package,
-        gate: {
-            mode: "approved",
-            planApproval: { status: "approved", approvalHash: input.prepared.planApproval.approvalHash },
-            environmentApproval: { status: "approved", packageHash: input.environmentApproval.packageHash },
-            lease: { owner: "configuration-agent", environment: TICKET12_TEST_ENVIRONMENT_NAME },
-            baselineFingerprint: input.prepared.package.binding.baselineFingerprint,
-            snapshots: input.prepared.package.snapshotManifest,
-            package: input.prepared.package,
-        },
-        operations: input.prepared.operations,
-        ledger: input.ledger,
-        planApproval: input.prepared.planApproval,
-        transport: input.transport,
-        credentials: input.credentials,
-        authoritativeOrigin: input.authoritativeOrigin,
-        testApplicationCode: TICKET12_TEST_APPLICATION_CODE,
-    }, input.signal);
-    const mutationExecuted = result.steps.some((step) => step.status === "committed" || step.status === "uncertain");
-    const blockers = [...result.blockers];
-    let status = ticket12ExecutionStatus(result.status);
-    let nextAction = result.nextAction;
-    let behavior;
-    let treesObservation;
-    if (result.status === "completed") {
-        treesObservation = input.readTreesObservation ? await input.readTreesObservation().catch(() => undefined) : undefined;
-        behavior = validateTicket12FormPublishBehavior({
-            evidence,
-            before: preflight,
-            after: await input.readFormState(),
-            history: await input.readFormHistory(),
-            modelPresence: await input.readModelEvidence(),
-            publishedFieldPresence: await Promise.all(TICKET09_FIELD_FAMILY.map((member) => input.readPublishedFieldEvidence(member.propertyTypeName))),
-            ...(treesObservation ? { treesObservation } : {}),
-        });
-        if (behavior.status !== "validated") {
-            status = "blocked";
-            blockers.push(behavior.reason ?? "Ticket 12 behavior validation failed.");
-            nextAction = "reconcile-behavior-retain-and-report-resource";
-        }
-    }
-    return { reportType: "omc.ticket12.test-form-publish-execution", schemaVersion: 1, packageId: result.packageId, packageHash: result.packageHash, route: TICKET12_FORM_PUBLISH_ROUTE, testRunId: evidence.testRunId, targetSchemaCode: evidence.targetSchemaCode, targetSheetCode: evidence.targetSheetCode, targetFieldCodes: evidence.targetFieldCodes, status, mutationExecuted, steps: result.steps, blockers, nextAction, ...(behavior ? { behavior } : {}), ...(treesObservation ? { treesObservation } : {}) };
-}
-/**
- * Closes the stated two-variant cascade cleanup contract: after the staged
- * cleanup (published-field cleanup, then the model physical delete), the
- * authoritative bizsheet/get readback must be the 302024 non-success envelope
- * for the fixture and the history checkVersion must decode data null. A form
- * still decoding after the cascade contradicts the decompiled contract —
- * variant B: stop, retain, and report.
- */
-export function confirmTicket12FormCascadeAbsence(input) {
-    const evidence = validateTicket12Evidence(input.evidence);
-    const readback = input.formReadback;
-    if (readback.classification !== "absent" || readback.reason !== "form-absence" || readback.query.schemaCode !== evidence.targetSchemaCode || readback.query.sheetCode !== evidence.targetSheetCode)
-        throw new Error(`Ticket 12 form cascade cleanup contract is not closed (variant B): the bizsheet/get readback does not confirm published-form absence after the model physical delete (classification=${readback.classification}, errcode=${String(readback.errcode ?? "n/a")}); stop, retain, and report.`);
-    const history = input.historyReadback;
-    if (history && (history.classification !== "absent" || history.query.schemaCode !== evidence.targetSchemaCode || history.query.sheetCode !== evidence.targetSheetCode))
-        throw new Error(`Ticket 12 history cascade cleanup contract is not closed (variant B): the checkVersion readback does not confirm history absence after the model physical delete (classification=${history.classification}); stop, retain, and report.`);
-}
-function ticket12ExecutionStatus(status) {
-    if (status === "completed" || status === "uncertain" || status === "partial")
-        return status;
-    return "blocked";
-}
-function requireTicket12Approval(approval) {
-    const value = approval;
-    if (value.route !== TICKET12_FORM_PUBLISH_ROUTE || value.capabilityId !== TICKET12_FORM_PUBLISH_CAPABILITY_ID || value.environmentName !== "test" || value.applicationCode !== "test" || value.targets?.length !== 1 || !value.folderId || !value.folderName || !value.testRunId || !value.targetSchemaCode || !value.targetSheetCode || !Array.isArray(value.targetFieldCodes) || value.targetFieldCodes.length !== TICKET09_FIELD_FAMILY.length || value.targetFieldCodes.some((code) => !isTicket09TargetField(code)) || new Set(value.targetFieldCodes).size !== TICKET09_FIELD_FAMILY.length)
-        throw new Error(`Ticket 12 approval frame is not bound to the exact ${TICKET12_FORM_PUBLISH_ROUTE} route, family targets, folder, and testRunId.`);
-    return value;
-}
-function requirePersistedApprovedPlan(ledger, approval) {
-    if (approval.status !== "approved")
-        throw new Error("Ticket 12 package preparation requires the approved exact Ticket 12 Delivery Plan Approval.");
-    const persisted = ledger.findPlanApproval(approval.approvalId);
-    if (!persisted || persisted.status !== "approved" || persisted.approvalHash !== approval.approvalHash)
-        throw new Error("Ticket 12 package preparation requires the exact authoritative approved Delivery Plan Approval.");
-    return persisted;
-}
-function assertTicket12BindingMatchesEvidence(binding, evidence) {
-    const expected = {
-        deliveryId: ticket12DeliveryId(evidence.testRunId),
-        environment: TICKET12_TEST_ENVIRONMENT_NAME,
-        baselineFingerprint: evidence.baselineFingerprint,
-        environmentFingerprint: evidence.environmentFingerprint,
-        discoveryFingerprint: evidence.discoveryFingerprint,
-        ...(evidence.evidenceArtifactId ? { evidenceArtifactId: evidence.evidenceArtifactId } : {}),
-    };
-    if (stable(binding) !== stable(expected))
-        throw new Error("Ticket 12 plan approval binding is outside the evidence baseline, environment, discovery, or delivery binding.");
-}
-function validateTicket12Evidence(evidence) {
-    if (!evidence || evidence.route !== TICKET12_FORM_PUBLISH_ROUTE || evidence.capabilityId !== TICKET12_FORM_PUBLISH_CAPABILITY_ID)
-        throw new Error("Ticket 12 evidence is not the host-owned form publish route.");
-    if (evidence.environmentName !== "test" || evidence.applicationCode !== "test")
-        throw new Error("Ticket 12 evidence is outside the named test environment and dedicated test application.");
-    if (!isTicket08TargetSchema(evidence.targetSchemaCode))
-        throw new Error("Ticket 12 evidence fixture model is not the host-owned Ticket 08 schema.");
-    if (evidence.targetSheetCode !== evidence.targetSchemaCode)
-        throw new Error("Ticket 12 evidence default sheet is not bound to the fixture schema.");
-    if (!Array.isArray(evidence.targetFieldCodes) || evidence.targetFieldCodes.length !== TICKET09_FIELD_FAMILY.length || evidence.targetFieldCodes.some((code) => !isTicket09TargetField(code)) || new Set(evidence.targetFieldCodes).size !== TICKET09_FIELD_FAMILY.length)
-        throw new Error("Ticket 12 evidence family field codes are not the distinct host-owned Ticket 09 field codes (one per active family member).");
-    if ([evidence.environmentFingerprint, evidence.baselineFingerprint, evidence.discoveryFingerprint].some((value) => !SHA256.test(value)))
-        throw new Error("Ticket 12 evidence fingerprints are not canonical.");
-    if (evidence.modelPresence.classification !== "present" || evidence.modelPresence.query.schemaCode !== evidence.targetSchemaCode)
-        throw new Error("Ticket 12 evidence does not carry the authoritative fixture model presence handoff.");
-    evidence.targetFieldCodes.forEach((fieldCode, index) => {
-        const presence = evidence.publishedFieldPresence[index];
-        if (presence?.classification !== "present" || presence.query.schemaCode !== evidence.targetSchemaCode || presence.query.propertyCode !== fieldCode || presence.query.isPublish !== "true" || presence.field?.published !== true)
-            throw new Error("Ticket 12 evidence does not carry exact authenticated published family field presence.");
-    });
-    if (evidence.formDraftState.classification !== "present" || evidence.formDraftState.query.schemaCode !== evidence.targetSchemaCode || evidence.formDraftState.query.sheetCode !== evidence.targetSheetCode || !evidence.formDraftState.form || evidence.formDraftState.form.published !== false)
-        throw new Error("Ticket 12 evidence does not carry the exact authenticated unpublished draft-configured form pre-state.");
-    if (evidence.requiredRuleState.classification !== "present" || evidence.requiredRuleState.query.schemaCode !== evidence.targetSchemaCode || evidence.requiredRuleState.query.dataRuleType !== 4 || !evidence.requiredRuleState.rows.some((row) => decodeRequiredDataRuleRow(row, evidence.targetSchemaCode, ticket12RuleDemoFieldCode(evidence.targetFieldCodes)) !== undefined))
-        throw new Error(`Ticket 12 evidence does not carry the exact authenticated required-rule presence for the ${ticket12RuleDemoMemberName()} family field (the Ticket 20 handoff).`);
-    if (!evidence.folder.id || !evidence.folder.name)
-        throw new Error("Ticket 12 evidence folder binding is missing.");
-    return evidence;
-}
-function assertDigest(value, label) {
-    if (typeof value !== "string" || !SHA256.test(value) || !/[1-9a-f]/i.test(value))
-        throw new Error(`Ticket 12 ${label} is invalid.`);
-}
-function digest(value) { return createHash("sha256").update(stable(value)).digest("hex"); }
-function stable(value) { return JSON.stringify(sort(value)); }
-function sort(value) { if (Array.isArray(value))
-    return value.map(sort); if (value && typeof value === "object")
-    return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sort(item)])); return value; }
-//# sourceMappingURL=ticket12-test-form-publish.js.map