omc-core 0.4.36 → 0.4.37

package/dist/ticket11-test-form-draft.js

@@ -1,1014 +0,0 @@
-import { createHash, randomUUID } from "node:crypto";
-import { canonicalCloudPivotBaselineFingerprint, canonicalCloudPivotEnvironmentFingerprint } from "./cloudpivot-fingerprints.js";
-import { canonicalFormalDiscoveryFingerprint } from "./formal-capability-discovery.js";
-import { CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT, decodeDraftControl } from "./cloudpivot-low-code.js";
-import { compileNativeOperations, runNativeConfigurationPackage } from "./cloudpivot-native-configuration.js";
-import { buildKnowledgePack } from "./knowledge-pack-builder.js";
-import { KnowledgePackRuntime } from "./knowledge-pack-runtime.js";
-import { createDeliveryPlanApproval, deliveryPlanApprovalHash, proposeDeliveryPlan } from "./two-stage-change-package.js";
-import { validateConfigurationIntent } from "./configuration-intent.js";
-import { SENSITIVE_SECRET_VALUE } from "./delivery-graph.js";
-import { appendApprovalHumanBlock } from "./approval-frame-readability.js";
-import { isTicket08TargetSchema } from "./ticket08-test-model-mutation.js";
-import { activeFieldFamily, fieldFamilyAlwaysReadonlyDemoMember, fieldFamilyMemberNamesProse, fieldFamilyMembers, fieldFamilyRuleDemoMember } from "./families/registry.js";
-import { isTicket09TargetField, TICKET09_FIELD_FAMILY } from "./ticket09-test-field-mutation.js";
-import { TICKET10_FIELD_PUBLISH_ROUTE } from "./ticket10-test-field-publish.js";
-/**
- * Ticket 11 (usable-model ladder, rung 3) promotes exactly one independently
- * bounded CloudPivot `test` form mutation: the default-form draft save that
- * binds the run's own published fixture field into the form layout and
- * configures its form-control options (readonly, visibility,
- * required-per-form). The composite chain runs the executable Ticket 08
- * model-create, Ticket 09 field-create, and Ticket 10 field-publish
- * capabilities first; the form-draft package consumes the completed,
- * behavior-validated field-publish execution report plus fresh authoritative
- * readbacks (published field present with the published flag decoded; form
- * pre-state present with the control absent and published=false). The package
- * is independently immutable and independently dual-approved. No evidence is
- * inferred from the field rungs; form publish, app publish, Environment
- * release, production, staging, tenant administration, Redis, restart,
- * deployment, and runtime CRUD stay rejected.
- *
- * Authoritative 8.6.26 contract (Stage 0 read-only live probe + decompiled
- * engine, research note .scratch/omc-usable-model-ladder/research/
- * form-schema-contract.md):
- * - read: GET /api/api/app/bizsheet/get?schemaCode&sheetCode returns the
- *   BizFormModel with `published`, `existDraft`, and the draft/published JSON
- *   sides (BizFormController.java:174-230); an unconfigured default form has
- *   draftViewJson/draftAttributesJson = null, published=false, existDraft=true
- *   (live probe of customer/project); the configured reference form
- *   (agent_test_customer) carries the layout in draftViewJson (JSON string:
- *   array of rows of control keys) and the control map in draftAttributesJson
- *   (JSON string: key -> {key, type, options}); a bound data field's control
- *   key IS the field code, control type 1 = ShortText for TEXT fields;
- * - draft save: POST /api/api/app/bizsheet/update with the full echoed
- *   BizSheetVO, @RequireAdmin, schema lock, sheetType required
- *   (BizFormController.java:276-330, BizSheetVO.java,
- *   ModelManagementFacadeImpl.java:712-760); the server persists the entity as
- *   submitted, so the DTO echoes the authoritative GET with only the draft
- *   members changed — published stays false and published*Json stays null.
- *   A draft save is never a form publish: /publish (EDIT_AND_PUBLISH_FORM,
- *   BizFormController.java:824-970) is the separate ticket-04 rung;
- * - per-form control options (ShortText/schema.ts, AgentBizSchema.java:77;
- *   Ticket 20 amendment per type-matrix §9): options.visible (boolean) plus
- *   options.readonlyFormula (boolean — the ALWAYS-readonly key, the one
- *   rule-family key legitimately written directly on options). The
- *   condition strings (requiredFormula/readonlyCondition/displayFormula)
- *   are NEVER written on the draft options: the panel wipes them on load
- *   (resetConditionRules) and re-hydrates them from the bizdatarule rows,
- *   so required-per-form is authored as a dataRuleType 4 rule row on the
- *   schema (the Ticket 20 rung), distinct from the model-field
- *   propertyEmpty constraint;
- * - designer-standard scaffolding (research §13, amendment for ticket 06):
- *   when the target default form's draft layout is empty (the auto-created
- *   default form), the draft save composes the scaffolding the designer would
- *   insert — Title control (type 203, named after the form/model display
- *   name, useDataTitle: true, styleInfo), the system row [creater(101),
- *   createdTime(104, format YYYY-MM-DD HH:mm:ss), sequenceNo(100, UID
- *   seqNoSetting — a composer constant, not a scheme reference)], one group
- *   (type 200, 业务标题) — then the business field rows. Title/Group keys share
- *   one timestamp per composition (Title<ts>/Group<ts>) derived from the
- *   evidence capture clock, mirroring the designer's insert pattern; the
- *   server persists keys as submitted and never rewrites them. A non-empty
- *   draft layout keeps the append-row composition — the scaffolding is never
- *   injected under or rewriting an existing team layout;
- * - cleanup: no separate form-draft delete is promoted; the form draft state
- *   is design-time state on the schema's default form and dies with the
- *   separately approved staged cleanup (Ticket 10 published-field cleanup,
- *   then the Ticket 08 model physical delete). Form-level absence is then
- *   confirmed by bizsheet/get returning a non-success envelope with the exact
- *   errcode recorded (candidate: 302024 BIZ_SHEET_NOT_EXIST, ErrorCode.java:
- *   256 — pinned exactly by the live run, never guessed). Uncertain outcomes
- *   stop, retain, and report; the orphan backstop reuses the Ticket 08 path.
- */
-export const TICKET11_FORM_DRAFT_ROUTE = "ticket11-test-form-draft";
-export const TICKET11_FORM_DRAFT_CAPABILITY_ID = "cloudpivot.test.form-draft-8.6.26";
-export const TICKET11_FORM_CLEANUP_CAPABILITY_ID = "cloudpivot.test.form-draft-cascade-absence-8.6.26";
-export const TICKET11_FORM_DRAFT_KNOWLEDGE_PACK_ID = "cloudpivot-8.6-ticket11-test-form-draft";
-export const TICKET11_TEST_ENVIRONMENT_NAME = "test";
-export const TICKET11_TEST_APPLICATION_CODE = "test";
-export const TICKET11_REFERENCE_EVIDENCE_VERSION = "8.6.26";
-export const TICKET11_FORM_DRAFT_ENDPOINT = "/api/api/app/bizsheet/update";
-export const TICKET11_FORM_READBACK_ENDPOINT = "/api/api/app/bizsheet/get";
-export const TICKET11_FORM_PUBLISH_ENDPOINT = "/api/api/app/bizsheet/publish";
-export const TICKET11_PROHIBITED_MUTATION_TERMS = Object.freeze([
-    "app-publish", "form-publish", "bizsheet/publish", "deploy", "restart", "release", "redis", "tenant-admin", "runtime-crud",
-    "model:", "view", "folder-create", "folder-delete",
-]);
-/**
- * Designer-standard scaffolding contract (research §13, pinned live
- * 2026-09-04 on agent_test_customer + decompiled sources + the
- * product-family consultant composer): when the target default form's draft
- * layout is empty, the draft save composes [Title<ts>] (type 203,
- * useDataTitle), the system row [creater(101), createdTime(104),
- * sequenceNo(100)], [Group<ts>] (type 200), then the business field rows.
- */
-export const TICKET11_SCAFFOLD_SYSTEM_ROW = Object.freeze(["creater", "createdTime", "sequenceNo"]);
-export const TICKET11_SCAFFOLD_SYSTEM_CONTROL_TYPES = Object.freeze({ creater: 101, createdTime: 104, sequenceNo: 100 });
-/** The UID rule value is a designer/composer constant, not a per-model scheme reference (research §13.2). */
-export const TICKET11_SCAFFOLD_SEQNO_UID_VALUE = "aa860e64ff2e4f86851a661d663ae358";
-export const TICKET11_SCAFFOLD_GROUP_NAME = "业务标题";
-export const TICKET11_SCAFFOLD_DATE_FORMAT = "YYYY-MM-DD HH:mm:ss";
-/** One shared timestamp per composition mirrors the designer's Title<ts>/Group<ts> pattern (research §13.4). */
-export function ticket11ScaffoldControlKeys(capturedAt) {
-    const epochMs = Date.parse(capturedAt);
-    if (!Number.isFinite(epochMs) || epochMs <= 0)
-        throw new Error("Ticket 11 scaffold composition requires the evidence capture clock; nothing ships on guessed layout keys.");
-    return Object.freeze({ titleKey: `Title${epochMs}`, groupKey: `Group${epochMs}` });
-}
-function deepFrozen(value) {
-    if (Array.isArray(value))
-        return Object.freeze(value.map(deepFrozen));
-    if (value && typeof value === "object")
-        return Object.freeze(Object.fromEntries(Object.entries(value).map(([key, item]) => [key, deepFrozen(item)])));
-    return value;
-}
-/** The designer-standard scaffolding control map entries, mirroring the live agent_test_customer sample member-for-member (research §13.1). Deep-frozen: the composition is an immutable contract value. */
-export function buildTicket11ScaffoldControls(input) {
-    return deepFrozen({
-        [input.titleKey]: {
-            key: input.titleKey,
-            type: 203,
-            options: {
-                name: input.formName,
-                name_i18n: { en: input.formName, zh: input.formName },
-                visible: true,
-                labelVisible: true,
-                span: 24,
-                labelAlign: "",
-                style: "",
-                tips: "",
-                dataItemName: "",
-                useDataTitle: true,
-                styleInfo: { height: 1, bgColor: "#ffffff", bgImg: "", textAlign: "center", fontSize: 28, textColor: "#111218", blod: true, italic: false, textCss: "", textCssSwitch: false },
-            },
-        },
-        creater: {
-            key: "creater",
-            type: TICKET11_SCAFFOLD_SYSTEM_CONTROL_TYPES.creater,
-            options: { name: "创建人", name_i18n: "", visible: true, labelVisible: true, span: 8, labelAlign: "", style: "", tips: "", dataItemName: "", widgetType: "", dataItemType: "", mappings: "", verifyFormula: "", defaultValue: "" },
-        },
-        createdTime: {
-            key: "createdTime",
-            type: TICKET11_SCAFFOLD_SYSTEM_CONTROL_TYPES.createdTime,
-            options: { name: "创建时间", name_i18n: "", visible: true, labelVisible: true, span: 8, labelAlign: "", style: "", tips: "", dataItemName: "", widgetType: "", dataItemType: "", format1: TICKET11_SCAFFOLD_DATE_FORMAT, format: TICKET11_SCAFFOLD_DATE_FORMAT, syncFormate: true, verifyFormula: "", defaultValue: "" },
-        },
-        sequenceNo: {
-            key: "sequenceNo",
-            type: TICKET11_SCAFFOLD_SYSTEM_CONTROL_TYPES.sequenceNo,
-            options: { name: "单据号", name_i18n: "", visible: true, labelVisible: true, span: 8, labelAlign: "", style: "", tips: "", dataItemName: "", widgetType: "", dataItemType: "", seqNoSetting: [{ type: "UID", value: TICKET11_SCAFFOLD_SEQNO_UID_VALUE }], formPropertyType: 100, verifyFormula: "", displayFormula: "", defaultValue: "" },
-        },
-        [input.groupKey]: {
-            key: input.groupKey,
-            type: 200,
-            options: { name: TICKET11_SCAFFOLD_GROUP_NAME, tips: "", expand: true, align: "", style: "", styleInfo: { fontSize: 18, textColor: "#111218", blod: true, italic: false, textCss: "", textCssSwitch: false }, span: 24 },
-        },
-    });
-}
-/** An auto-created default form decodes with an empty draft layout (research §2): draftViewJson null/[] and draftAttributesJson null/{}. */
-export function ticket11DraftLayoutIsEmpty(form) {
-    let view = null;
-    let attributes = null;
-    try {
-        view = form.draftViewJson === null ? [] : JSON.parse(form.draftViewJson);
-        attributes = form.draftAttributesJson === null ? {} : JSON.parse(form.draftAttributesJson);
-    }
-    catch {
-        return false;
-    }
-    return Array.isArray(view) && view.length === 0 && typeof attributes === "object" && attributes !== null && !Array.isArray(attributes) && Object.keys(attributes).length === 0;
-}
-export function decodeTicket11ScaffoldPresence(form) {
-    if (form.draftViewJson === null || form.draftAttributesJson === null)
-        return { decodable: false, rowOrderMatchesContract: false };
-    let view;
-    let attributes;
-    try {
-        view = JSON.parse(form.draftViewJson);
-        attributes = JSON.parse(form.draftAttributesJson);
-    }
-    catch {
-        return { decodable: false, rowOrderMatchesContract: false };
-    }
-    if (!Array.isArray(view) || view.some((row) => !Array.isArray(row) || row.some((key) => typeof key !== "string")) || !attributes || typeof attributes !== "object" || Array.isArray(attributes))
-        return { decodable: false, rowOrderMatchesContract: false };
-    const rows = view;
-    const map = attributes;
-    const entry = (key) => {
-        const value = map[key];
-        return value && typeof value === "object" && !Array.isArray(value) && typeof value.type === "number" && value.options && typeof value.options === "object"
-            ? value
-            : undefined;
-    };
-    // The row contract is positional (research §13.5): row 0 is the single-key
-    // Title row, row 1 is exactly the system row, row 2 is the single-key Group
-    // row. Extra or duplicated scaffold rows decode as non-contract.
-    const isTitleKey = (key) => /^Title\d+$/.test(key);
-    const isGroupKey = (key) => /^Group\d+$/.test(key);
-    const titleShaped = rows.length >= 3 && rows[0].length === 1 && isTitleKey(rows[0][0]) && entry(rows[0][0]) !== undefined;
-    const systemShaped = rows.length >= 3 && rows[1].length === 3 && rows[1][0] === "creater" && rows[1][1] === "createdTime" && rows[1][2] === "sequenceNo";
-    const groupShaped = rows.length >= 3 && rows[2].length === 1 && isGroupKey(rows[2][0]) && entry(rows[2][0]) !== undefined;
-    if (!titleShaped || !systemShaped || !groupShaped)
-        return { decodable: false, rowOrderMatchesContract: false };
-    const title = entry(rows[0][0]);
-    const group = entry(rows[2][0]);
-    const systemTypes = rows[1].map((key) => entry(key)?.type ?? -1);
-    const scaffoldRowsOnly = rows.slice(0, 3).every((row, index) => index === 0 ? row.length === 1 && isTitleKey(row[0] ?? "") : index === 1 ? row.length === 3 : row.length === 1 && isGroupKey(row[0] ?? "")) && rows.slice(3).every((row) => row.length === 0 || (!isTitleKey(row[0] ?? "") && !isGroupKey(row[0] ?? "") && row[0] !== "creater" && row[0] !== "createdTime" && row[0] !== "sequenceNo"));
-    return Object.freeze({
-        decodable: true,
-        title: Object.freeze({ key: rows[0][0], type: title.type, useDataTitle: title.options.useDataTitle === true, name: title.options.name }),
-        systemRow: Object.freeze({ keys: Object.freeze([...rows[1]]), types: Object.freeze(systemTypes) }),
-        group: Object.freeze({ key: rows[2][0], type: group.type }),
-        rowOrder: Object.freeze(rows.map((row) => row.join("+"))),
-        rowOrderMatchesContract: scaffoldRowsOnly,
-    });
-}
-const TICKET11_UUID_V4 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-const SHA256 = /^[a-f0-9]{64}$/i;
-/** The named `test` environment and its dedicated test application are hard preconditions. */
-export function assertTicket11TestFormDraftEnvironment(settings) {
-    if (settings.environmentName !== "test")
-        throw new Error("Ticket 11 form draft is restricted to the named test environment; production and staging are rejected.");
-    if (!settings.baseUrl.trim() || !/^https?:\/\/\S+$/i.test(settings.baseUrl.trim()))
-        throw new Error("Ticket 11 form draft requires an absolute configured test environment endpoint.");
-    if (settings.testApplicationCode !== "test")
-        throw new Error("Ticket 11 form draft requires the dedicated test application to be test.");
-}
-export function ticket11DeliveryId(testRunId) { return `ticket11-form-draft-${testRunId}`; }
-export function ticket11FormDraftScope(targetSchemaCode, targetSheetCode) { return `cloudpivot:form:${targetSchemaCode}/${targetSheetCode}`; }
-/** Design-time designer direct URL; the fixture form draft stays inspectable here without any form publish. */
-export function ticket11DesignerDirectUrl(targetSchemaCode, targetSheetCode) { return `/admin/#/apps/model/${TICKET11_TEST_APPLICATION_CODE}/${targetSchemaCode}/form-design/${targetSheetCode}`; }
-export function buildTicket11FormCleanupContract(testRunId, targetSchemaCode, targetSheetCode, targetFieldCodes) {
-    if (!TICKET11_UUID_V4.test(testRunId) || !isTicket08TargetSchema(targetSchemaCode) || targetSheetCode !== targetSchemaCode || targetFieldCodes.length !== TICKET09_FIELD_FAMILY.length || targetFieldCodes.some((code) => !isTicket09TargetField(code)) || new Set(targetFieldCodes).size !== TICKET09_FIELD_FAMILY.length)
-        throw new Error("Ticket 11 form cleanup contract requires the exact host-owned testRunId, fixture schema, default sheet, and one distinct family field code per active family member.");
-    return Object.freeze({
-        capabilityId: TICKET11_FORM_CLEANUP_CAPABILITY_ID,
-        testRunId,
-        targetSchemaCode,
-        targetSheetCode,
-        targetFieldCodes,
-        semantics: "form-draft-state-is-design-time-state-on-the-default-form;no-separate-form-delete-is-promoted;the-separately-approved-staged-cleanup(ticket10-published-field-cleanup-then-ticket08-model-physical-delete)cascades-the-form-draft-away",
-        absenceReadback: { method: "GET", endpoint: TICKET11_FORM_READBACK_ENDPOINT, expected: "non-success-envelope-recorded-errcode" },
-        ownership: "schema-sheet-and-field-bound-to-testRunId",
-        replayPolicy: "absent-is-no-op",
-        uncertainPolicy: "stop-retain-report-no-retry",
-    });
-}
-/** Deterministic, run-independent contract identities pinned by the Knowledge Pack promotion. */
-export function ticket11FormDraftContractHash() { return digest(ticket11FormDraftContract()); }
-export function ticket11FormCleanupContractHash() { return digest(ticket11FormCleanupContractTemplate()); }
-function ticket11FormDraftContract() {
-    return {
-        capabilityId: TICKET11_FORM_DRAFT_CAPABILITY_ID,
-        operationKind: "form-draft-save",
-        method: "POST",
-        endpoint: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.endpoint,
-        readbackEndpoint: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.readbackEndpoint,
-        preflight: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.preflight,
-        dto: "BizSheetVO:echoed-bizsheet-get-with-only-draft-members-changed",
-        scaffoldingComposition: {
-            when: "target-default-form-draft-layout-empty(draftViewJson null-or-[] and draftAttributesJson null-or-{})",
-            rows: [["Title<shared-ts>"], [...TICKET11_SCAFFOLD_SYSTEM_ROW], ["Group<shared-ts>"], ["<numericFieldCode>"], ["<logicalFieldCode>"]],
-            titleControl: { type: 203, useDataTitle: true, name: "form-display-name" },
-            systemControlTypes: { ...TICKET11_SCAFFOLD_SYSTEM_CONTROL_TYPES },
-            groupControl: { type: 200, name: TICKET11_SCAFFOLD_GROUP_NAME },
-            sequenceNoRule: { type: "UID", value: TICKET11_SCAFFOLD_SEQNO_UID_VALUE },
-            keyNaming: "Title<ts>/Group<ts> share one timestamp per composition from the evidence capture clock (research §13.4)",
-            nonEmptyLayout: "append-row composition unchanged; scaffolding never overwrites an existing layout",
-        },
-        controlBinding: "control-key===published-family-field-code-per-field",
-        boundControls: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.boundControls.map((binding) => ({ propertyTypeName: binding.propertyTypeName, controlType: binding.controlType, options: binding.options })),
-        optionRepresentation: `${fieldFamilyMembers().map((member) => {
-            const alwaysReadonly = member.familyPosition === activeFieldFamily().alwaysReadonlyDemoPosition ? "/readonlyFormula(always-readonly boolean)" : "";
-            const ruleTarget = member.familyPosition === activeFieldFamily().ruleDemoTargetPosition ? "/no-required-readonly-keys(required-rule target stays editable)" : "";
-            const multiPart = "multi" in member.control.options ? `/multi=${member.cardinality === "multi"}` : "";
-            return `${member.propertyTypeName}(${member.propertyType}):visible/labelVisible/span${multiPart}${alwaysReadonly}${ruleTarget}`;
-        }).join(";")};NEVER-any-condition-strings(requiredFormula/readonlyCondition/displayFormula)-type-matrix-§9-those-live-on-bizdatarule-rows`,
-        publishedStateInvariant: "published-flag-and-published-json-unchanged;draft-save-only-never-a-form-publish-app-publish-or-Environment-release",
-        scope: "default-form-draft-save",
-        permission: "@RequireAdmin",
-        transportMode: "serialized-server-form-draft-8.6.26",
-        capability: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT,
-        evidence: [...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.evidence],
-        requiredPermissions: ["configuration-write"],
-        prohibited: [...TICKET11_PROHIBITED_MUTATION_TERMS],
-    };
-}
-function ticket11FormCleanupContractTemplate() {
-    return {
-        capabilityId: TICKET11_FORM_CLEANUP_CAPABILITY_ID,
-        operationKind: "form-draft-cascade-absence-confirmation",
-        semantics: "form-draft-state-dies-with-the-model-physical-delete;no-separate-form-delete",
-        absenceReadback: `${TICKET11_FORM_READBACK_ENDPOINT}:non-success-envelope-recorded-errcode`,
-        ownership: "schema-sheet-and-field-bound-to-testRunId",
-        replayPolicy: "absent-is-no-op",
-        uncertainPolicy: "stop-retain-report-no-retry",
-    };
-}
-/** Package operations must be exactly one bounded default-form draft-save step binding BOTH family controls for the bound target. */
-export function assertTicket11OperationsBounded(input) {
-    if (input.operations.length !== 1)
-        throw new Error("Ticket 11 packages must contain exactly one bounded operation.");
-    const operation = input.operations[0];
-    const identity = `${operation.id} ${operation.target} ${operation.path}`.toLowerCase();
-    if (TICKET11_PROHIBITED_MUTATION_TERMS.some((term) => identity.includes(term)) || !operation.id.startsWith("form-draft:"))
-        throw new Error(`Ticket 11 operation ${operation.id} is outside the bounded operation set; prohibited families (form publish, app publish, deploy, restart, release, redis, tenant administration, runtime CRUD, model/view/folder writes) remain rejected.`);
-    const expected = { id: `form-draft:${input.targetSchemaCode}/${input.targetSheetCode}/${input.targetFieldCodes.join("+")}`, target: `form:${input.targetSchemaCode}/${input.targetSheetCode}`, path: TICKET11_FORM_DRAFT_ENDPOINT, transportMode: "serialized-server-form-draft-8.6.26" };
-    if (operation.id !== expected.id || operation.path !== expected.path || operation.transportMode !== expected.transportMode || operation.target !== expected.target)
-        throw new Error(`Ticket 11 operation ${operation.id} does not match the exact target binding for ${expected.target}.`);
-}
-/** Builds the signed, version-bound pack promoting exactly the single test form-draft capability. */
-export function buildTicket11FormDraftKnowledgePack(input) {
-    const compiler = { id: "src/ticket11-test-form-draft.ts:createTicket11FormDraftPlanApproval", sha256: digest("omc-ticket11-compiler-v1") };
-    const decoder = { id: "src/dsh-host-plugin.ts:createCloudPivotWriteTransport", sha256: digest("omc-ticket11-decoder-v1") };
-    return buildKnowledgePack({
-        packId: TICKET11_FORM_DRAFT_KNOWLEDGE_PACK_ID,
-        packVersion: "1.0.0",
-        sourceVersion: TICKET11_REFERENCE_EVIDENCE_VERSION,
-        sourceArtifacts: [{ id: "cloudpivot-8.6.26-serialized-form-draft-capability", sha256: digest(CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT) }],
-        references: [
-            { id: "omc-form-schema-contract-research", sha256: digest("omc-form-schema-contract-research") },
-            { id: TICKET11_FORM_DRAFT_ENDPOINT, sha256: digest(TICKET11_FORM_DRAFT_ENDPOINT) },
-            { id: TICKET11_FORM_READBACK_ENDPOINT, sha256: digest(TICKET11_FORM_READBACK_ENDPOINT) },
-        ],
-        compilers: [compiler],
-        decoders: [decoder],
-        capabilities: [{
-                id: TICKET11_FORM_DRAFT_CAPABILITY_ID,
-                status: "runtime-verified",
-                promote: true,
-                compilerRef: compiler.id,
-                decoderRef: decoder.id,
-                sourceEvidence: [...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.evidence, TICKET11_FORM_DRAFT_ENDPOINT, TICKET11_FORM_READBACK_ENDPOINT, "BizFormController.java:174-230", "BizFormController.java:276-330", "ErrorCode.java:256"],
-                runtimeEvidence: ["omc-form-schema-contract-research", "cloudpivot.form-draft.serialized-server-8.6.26"],
-                operationPromotions: [{
-                        id: "form-draft-save",
-                        status: "promoted",
-                        operationContractHash: ticket11FormDraftContractHash(),
-                        sourceRefs: [...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.evidence, TICKET11_FORM_DRAFT_ENDPOINT, TICKET11_FORM_READBACK_ENDPOINT],
-                        versionFamily: "8.6",
-                        referenceVersion: TICKET11_REFERENCE_EVIDENCE_VERSION,
-                        requiredEvidence: ["cleanup", "discovery", "permission", "readback", "test", "write"],
-                        evidence: ["cleanup", "discovery", "permission", "readback", "test", "write"],
-                        blockedReasons: [],
-                    }],
-            }],
-        signerKeyId: input.signerKeyId,
-        signingKey: input.signingKey,
-        createdAt: input.createdAt,
-    });
-}
-/** Loads the pack against CloudPivot 8.6.26 and pins the single executable capability and contract hash. */
-export function loadTicket11KnowledgePack(artifact, trustedKeys) {
-    const runtime = new KnowledgePackRuntime(trustedKeys);
-    const load = runtime.load(artifact, TICKET11_REFERENCE_EVIDENCE_VERSION);
-    if (!load.accepted)
-        throw new Error(`Ticket 11 Knowledge Pack is not authoritative: ${load.blockingReasons.join(", ")}.`);
-    const active = runtime.active();
-    const capabilities = active.capabilities;
-    if (capabilities.length !== 1 || capabilities[0].id !== TICKET11_FORM_DRAFT_CAPABILITY_ID)
-        throw new Error("Ticket 11 Knowledge Pack must promote exactly the single test form-draft capability; evidence inference from the field rungs or to any other capability (form publish included) is rejected.");
-    const hashes = capabilities[0].operationContractHashes;
-    if (hashes.length !== 1 || hashes[0] !== ticket11FormDraftContractHash())
-        throw new Error("Ticket 11 Knowledge Pack operation contract hash does not match the canonical form-draft contract.");
-    return { runtime, packId: active.manifest.packId, contentDigest: active.manifest.contentSha256, executableCapabilities: capabilities.map(({ id }) => id) };
-}
-/**
- * Decodes the authoritative bizsheet/get envelope. A successful decode
- * (errcode=0 with a record payload bound to the queried schema/sheet) is
- * "present"; any non-success business envelope is "absent" with the exact
- * errcode recorded (the form-cascade absence contract; the exact absence code
- * — e.g. 302024 BIZ_SHEET_NOT_EXIST — is pinned by the live run).
- */
-export function decodeTicket11FormStateEvidence(input) {
-    const url = `${TICKET11_FORM_READBACK_ENDPOINT}?schemaCode=${encodeURIComponent(input.schemaCode)}&sheetCode=${encodeURIComponent(input.sheetCode)}`;
-    const query = { schemaCode: input.schemaCode, sheetCode: input.sheetCode };
-    const httpStatus = input.httpStatus ?? 200;
-    const envelope = input.body;
-    if (!envelope || typeof envelope !== "object" || Array.isArray(envelope))
-        return Object.freeze({ classification: "blocked", reason: "malformed-response", query, url, httpStatus });
-    if (httpStatus < 200 || httpStatus >= 300)
-        return Object.freeze({ classification: "blocked", reason: "http-error", query, url, httpStatus });
-    if (envelope.errcode !== 0) {
-        const errcode = typeof envelope.errcode === "number" ? envelope.errcode : undefined;
-        return Object.freeze({ classification: "absent", reason: "form-absence", query, url, httpStatus, ...(errcode !== undefined ? { errcode } : {}) });
-    }
-    const data = envelope.data;
-    if (!data || typeof data !== "object" || Array.isArray(data))
-        return Object.freeze({ classification: "blocked", reason: "malformed-response", query, url, httpStatus });
-    const record = data;
-    if (record.code !== input.sheetCode || record.schemaCode !== input.schemaCode || typeof record.name !== "string")
-        return Object.freeze({ classification: "blocked", reason: "malformed-response", query, url, httpStatus });
-    const form = Object.freeze({
-        ...(typeof record.id === "string" && record.id ? { id: record.id } : {}),
-        code: input.sheetCode,
-        schemaCode: input.schemaCode,
-        name: record.name,
-        published: record.published === true,
-        existDraft: record.existDraft === true,
-        sheetType: typeof record.sheetType === "number" ? record.sheetType : null,
-        draftViewJson: typeof record.draftViewJson === "string" ? record.draftViewJson : null,
-        draftAttributesJson: typeof record.draftAttributesJson === "string" ? record.draftAttributesJson : null,
-        draftActionsJson: typeof record.draftActionsJson === "string" ? record.draftActionsJson : null,
-        draftHtmlJson: typeof record.draftHtmlJson === "string" ? record.draftHtmlJson : null,
-        publishedViewJson: typeof record.publishedViewJson === "string" ? record.publishedViewJson : null,
-        publishedAttributesJson: typeof record.publishedAttributesJson === "string" ? record.publishedAttributesJson : null,
-        publishedActionsJson: typeof record.publishedActionsJson === "string" ? record.publishedActionsJson : null,
-        publishedHtmlJson: typeof record.publishedHtmlJson === "string" ? record.publishedHtmlJson : null,
-    });
-    return Object.freeze({ classification: "present", reason: "exact-presence", query, url, httpStatus, form });
-}
-/** Loose draft-control presence decode for preflight/evidence checks (never throws on absent draft JSON). */
-export function decodeTicket11DraftControlPresence(form, fieldCode) {
-    if (form.draftViewJson === null || form.draftAttributesJson === null)
-        return { decodable: true, layoutOccurrences: 0 };
-    let view;
-    let attributes;
-    try {
-        view = JSON.parse(form.draftViewJson);
-        attributes = JSON.parse(form.draftAttributesJson);
-    }
-    catch {
-        return { decodable: false, layoutOccurrences: 0 };
-    }
-    if (!Array.isArray(view) || view.some((row) => !Array.isArray(row) || row.some((key) => typeof key !== "string")) || !attributes || typeof attributes !== "object" || Array.isArray(attributes))
-        return { decodable: false, layoutOccurrences: 0 };
-    const layoutOccurrences = view.flat().filter((key) => key === fieldCode).length;
-    const entry = attributes[fieldCode];
-    if (layoutOccurrences === 0 && entry === undefined)
-        return { decodable: true, layoutOccurrences: 0 };
-    const control = decodeDraftControl(form.draftViewJson, form.draftAttributesJson, fieldCode);
-    return { decodable: true, layoutOccurrences, ...(control ? { control } : {}) };
-}
-/** Host-owned composite-chain evidence capture: consumes the completed family field-publish handoff and proves BOTH published family fields are present and their controls are still absent with the published state pinned. */
-export function captureTicket11FormDraftEvidence(input) {
-    assertTicket11TestFormDraftEnvironment(input.settings);
-    if (!TICKET11_UUID_V4.test(input.testRunId))
-        throw new Error("Ticket 11 evidence capture requires the run's host-owned UUID v4 testRunId.");
-    const handoff = input.handoff;
-    const report = handoff.fieldPublishExecutionReport;
-    const publishEvidence = handoff.fieldPublishEvidence;
-    if (!handoff.fieldPublishPackageId || !SHA256.test(handoff.fieldPublishPackageHash) || !/[1-9a-f]/i.test(handoff.fieldPublishPackageHash) || report.route !== TICKET10_FIELD_PUBLISH_ROUTE || report.status !== "completed" || report.mutationExecuted !== true || report.behavior?.status !== "validated")
-        throw new Error("Ticket 11 form draft requires the completed, behavior-validated field-publish handoff; serial writes never assume state.");
-    if (report.testRunId !== input.testRunId || publishEvidence.testRunId !== input.testRunId)
-        throw new Error("Ticket 11 composite chain requires the single run testRunId across the model, field, publish, and form packages.");
-    const targetSchemaCode = publishEvidence.targetSchemaCode;
-    const targetFieldCodes = publishEvidence.targetFieldCodes;
-    const targetSheetCode = targetSchemaCode;
-    if (!isTicket08TargetSchema(targetSchemaCode) || report.targetSchemaCode !== targetSchemaCode || report.targetFieldCodes.length !== targetFieldCodes.length || report.targetFieldCodes.some((fieldCode, index) => fieldCode !== targetFieldCodes[index]))
-        throw new Error("Ticket 11 fixture family identity diverges from the completed field-publish handoff.");
-    const modelPresence = input.modelPresence;
-    if (modelPresence.classification !== "present" || modelPresence.query.schemaCode !== targetSchemaCode)
-        throw new Error("Ticket 11 form draft requires the fixture model to be present in fresh authoritative readback.");
-    targetFieldCodes.forEach((targetFieldCode, index) => {
-        const member = TICKET09_FIELD_FAMILY[index];
-        const publishedFieldPresence = input.publishedFieldPresence[index];
-        if (publishedFieldPresence.classification !== "present" || publishedFieldPresence.reason !== "exact-presence" || publishedFieldPresence.query.schemaCode !== targetSchemaCode || publishedFieldPresence.query.propertyCode !== targetFieldCode || publishedFieldPresence.query.isPublish !== "true")
-            throw new Error(`Ticket 11 evidence capture requires exact authenticated published-state presence for the ${member.propertyTypeName} handoff field; form work only ever consumes published configuration.`);
-        if (!publishedFieldPresence.field || publishedFieldPresence.field.code !== targetFieldCode || publishedFieldPresence.field.schemaCode !== targetSchemaCode || publishedFieldPresence.field.published !== true)
-            throw new Error(`Ticket 11 evidence capture requires the ${member.propertyTypeName} field's published flag to decode from the authoritative published readback.`);
-    });
-    const formPreState = input.formPreState;
-    if (formPreState.classification !== "present" || formPreState.reason !== "exact-presence" || formPreState.query.schemaCode !== targetSchemaCode || formPreState.query.sheetCode !== targetSheetCode || !formPreState.form)
-        throw new Error("Ticket 11 evidence capture requires the default form to be present in fresh authoritative readback.");
-    if (formPreState.form.published !== false || formPreState.form.publishedViewJson !== null || formPreState.form.publishedAttributesJson !== null || formPreState.form.publishedActionsJson !== null || formPreState.form.publishedHtmlJson !== null)
-        throw new Error("Ticket 11 evidence capture requires the fixture form to be unpublished (published=false, every published JSON side null); this rung never touches a published form.");
-    for (const targetFieldCode of targetFieldCodes) {
-        const presence = decodeTicket11DraftControlPresence(formPreState.form, targetFieldCode);
-        if (!presence.decodable)
-            throw new Error("Ticket 11 evidence capture could not decode the form draft JSON; nothing ships on guessed schema JSON.");
-        if (presence.layoutOccurrences !== 0 || presence.control)
-            throw new Error(`Ticket 11 evidence capture requires exact control absence for the handoff family field ${targetFieldCode}; duplicate form binding is rejected.`);
-    }
-    const authoritativeOrigin = input.discovery.authoritativeOrigin;
-    const enterpriseId = input.discovery.enterpriseId;
-    if (!authoritativeOrigin || !enterpriseId)
-        throw new Error("Ticket 11 evidence capture requires authenticated environment fingerprint evidence.");
-    const environmentFingerprint = canonicalCloudPivotEnvironmentFingerprint({ environment: TICKET11_TEST_ENVIRONMENT_NAME, authoritativeOrigin, applicationCode: TICKET11_TEST_APPLICATION_CODE, enterpriseId });
-    if (environmentFingerprint !== publishEvidence.environmentFingerprint)
-        throw new Error("Ticket 11 form draft is outside the field-publish handoff environment fingerprint.");
-    const evidence = Object.freeze({
-        route: TICKET11_FORM_DRAFT_ROUTE,
-        capabilityId: TICKET11_FORM_DRAFT_CAPABILITY_ID,
-        environmentName: TICKET11_TEST_ENVIRONMENT_NAME,
-        applicationCode: TICKET11_TEST_APPLICATION_CODE,
-        folder: publishEvidence.folder,
-        targetSchemaCode,
-        targetSheetCode,
-        targetFieldCodes,
-        testRunId: input.testRunId,
-        environmentFingerprint,
-        baselineFingerprint: canonicalCloudPivotBaselineFingerprint({ environmentFingerprint, applicationCode: TICKET11_TEST_APPLICATION_CODE, discovery: input.discovery }),
-        discoveryFingerprint: canonicalFormalDiscoveryFingerprint(input.discovery),
-        handoff,
-        modelPresence,
-        publishedFieldPresence: Object.freeze([...input.publishedFieldPresence]),
-        formPreState,
-        boundControls: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.boundControls.map((binding) => ({ propertyTypeName: binding.propertyTypeName, controlType: binding.controlType, options: binding.options })),
-        cleanupContract: buildTicket11FormCleanupContract(input.testRunId, targetSchemaCode, targetSheetCode, targetFieldCodes),
-        designerDirectUrl: ticket11DesignerDirectUrl(targetSchemaCode, targetSheetCode),
-        capturedAt: new Date((input.now ?? Date.now)()).toISOString(),
-    });
-    if ([evidence.environmentFingerprint, evidence.baselineFingerprint, evidence.discoveryFingerprint].some((value) => !SHA256.test(value)))
-        throw new Error("Ticket 11 evidence fingerprints are not canonical.");
-    if (SENSITIVE_SECRET_VALUE.test(stable(evidence)))
-        throw new Error("Ticket 11 evidence contains prohibited sensitive data.");
-    return evidence;
-}
-export const TICKET11_EVIDENCE_DEFAULT_TTL_MS = 25 * 60_000;
-export const TICKET11_EVIDENCE_MAX_TTL_MS = 30 * 60_000;
-/** Single-use, TTL-bounded evidence store; consumed exactly once by plan creation. */
-export class Ticket11EvidenceStore {
-    records = new Map();
-    now;
-    ttlMs;
-    lastNow;
-    constructor(options = {}) {
-        this.now = options.now ?? Date.now;
-        this.ttlMs = options.ttlMs ?? TICKET11_EVIDENCE_DEFAULT_TTL_MS;
-        if (!Number.isFinite(this.ttlMs) || this.ttlMs < 1 || this.ttlMs > TICKET11_EVIDENCE_MAX_TTL_MS)
-            throw new Error("Ticket 11 evidence TTL must be between 1ms and its safety maximum.");
-    }
-    capture(evidence) {
-        validateTicket11Evidence(evidence);
-        const evidenceId = `ticket11-evidence-${randomUUID()}`;
-        const expiresAt = this.readClock() + this.ttlMs;
-        const stored = Object.freeze({ ...evidence, evidenceArtifactId: evidenceId });
-        this.records.set(evidenceId, { evidence: stored, expiresAt, consumed: false });
-        return { evidenceId, expiresAt, evidence: stored };
-    }
-    consume(evidenceId) {
-        const record = this.records.get(evidenceId);
-        if (!record)
-            throw new Error("Ticket 11 evidence artifact is missing or divergent.");
-        if (record.consumed)
-            throw new Error("Ticket 11 evidence has already been consumed.");
-        if (record.expiresAt <= this.readClock())
-            throw new Error("Ticket 11 evidence is stale or expired.");
-        record.consumed = true;
-        return record.evidence;
-    }
-    resolve(evidenceId) {
-        const record = this.records.get(evidenceId);
-        if (!record || !record.consumed)
-            throw new Error("Ticket 11 evidence artifact is missing or has not been consumed by planning.");
-        if (record.expiresAt <= this.readClock())
-            throw new Error("Ticket 11 evidence artifact is stale or expired.");
-        return record.evidence;
-    }
-    readClock() {
-        const currentTime = this.now();
-        if (!Number.isFinite(currentTime))
-            throw new Error("Ticket 11 evidence clock is invalid; fail closed.");
-        if (this.lastNow !== undefined && currentTime < this.lastNow)
-            throw new Error("Ticket 11 evidence clock moved backwards; fail closed.");
-        this.lastNow = currentTime;
-        return currentTime;
-    }
-}
-/**
- * Composes the exact evidenced BizSheetVO draft-save DTO: the authoritative
- * pre-state form echoed with only the draft members changed. When the target
- * form's draft layout is EMPTY (the auto-created default form), the draft
- * side is the designer-standard scaffolding — Title control (203, named after
- * the form/model, useDataTitle), the system row (creater 101 / createdTime
- * 104 / sequenceNo 100), one group (200) — followed by the published field's
- * business row with the pinned control options (research §13.5). A non-empty
- * layout keeps the append-row composition; the scaffolding is never injected
- * under or rewriting an existing team layout. The published side stays
- * false/null and no publish-only BizSheetVO member is set.
- */
-export function buildTicket11FormDraftPayload(evidence) {
-    validateTicket11Evidence(evidence);
-    const pre = evidence.formPreState.form;
-    const fieldCreateEvidence = evidence.handoff.fieldPublishEvidence.handoff.fieldCreateEvidence;
-    let view = [];
-    let attributes = {};
-    if (pre.draftViewJson !== null || pre.draftAttributesJson !== null) {
-        try {
-            view = pre.draftViewJson === null ? [] : JSON.parse(pre.draftViewJson);
-            attributes = pre.draftAttributesJson === null ? {} : JSON.parse(pre.draftAttributesJson);
-        }
-        catch {
-            throw new Error("Ticket 11 payload composition could not decode the authoritative form draft JSON.");
-        }
-        if (!Array.isArray(view) || view.some((row) => !Array.isArray(row) || row.some((key) => typeof key !== "string")) || !attributes || typeof attributes !== "object" || Array.isArray(attributes))
-            throw new Error("Ticket 11 payload composition requires the authoritative form draft JSON structure; nothing ships on guessed schema JSON.");
-    }
-    // The two typed controls, in family contract order: Date(3) then Time(28),
-    // each keyed by its published family field's code with the per-type pinned
-    // options (the visible family key plus the always-readonly boolean on the
-    // Date control — the required-rule demo target Time control carries
-    // neither — and the type-specific keys; NEVER the condition strings —
-    // type-matrix §9).
-    const controls = evidence.targetFieldCodes.map((fieldCode, index) => {
-        const binding = CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.boundControls[index];
-        const member = fieldFamilyMembers()[index];
-        const fieldName = fieldCreateEvidence.targetFields[index].fieldName;
-        if (view.flat().includes(fieldCode) || attributes[fieldCode] !== undefined)
-            throw new Error(`Ticket 11 payload composition requires exact control absence for the bound ${binding.propertyTypeName} family field.`);
-        const pinnedOptions = member.control.resolveControlOptions
-            ? member.control.resolveControlOptions({ schemaCode: evidence.targetSchemaCode, memberFieldCodes: evidence.targetFieldCodes, testRunId: evidence.testRunId })
-            : binding.options;
-        return { key: fieldCode, type: binding.controlType, options: { name: fieldName, name_i18n: { en: fieldName, zh: fieldName }, ...pinnedOptions } };
-    });
-    if (view.length === 0 && Object.keys(attributes).length === 0) {
-        const { titleKey, groupKey } = ticket11ScaffoldControlKeys(evidence.capturedAt);
-        const scaffold = buildTicket11ScaffoldControls({ titleKey, groupKey, formName: pre.name });
-        return {
-            ...pre,
-            schemaCode: evidence.targetSchemaCode,
-            code: evidence.targetSheetCode,
-            name: pre.name,
-            sheetType: pre.sheetType ?? 0,
-            published: false,
-            publishedViewJson: null,
-            publishedAttributesJson: null,
-            publishedActionsJson: null,
-            publishedHtmlJson: null,
-            draftViewJson: JSON.stringify([[titleKey], [...TICKET11_SCAFFOLD_SYSTEM_ROW], [groupKey], ...evidence.targetFieldCodes.map((fieldCode) => [fieldCode])]),
-            draftAttributesJson: JSON.stringify({ ...scaffold, ...Object.fromEntries(controls.map((control) => [control.key, control])) }),
-        };
-    }
-    return {
-        ...pre,
-        schemaCode: evidence.targetSchemaCode,
-        code: evidence.targetSheetCode,
-        name: pre.name,
-        sheetType: pre.sheetType ?? 0,
-        published: false,
-        publishedViewJson: null,
-        publishedAttributesJson: null,
-        publishedActionsJson: null,
-        publishedHtmlJson: null,
-        draftViewJson: JSON.stringify([...view, ...evidence.targetFieldCodes.map((fieldCode) => [fieldCode])]),
-        draftAttributesJson: JSON.stringify({ ...attributes, ...Object.fromEntries(controls.map((control) => [control.key, control])) }),
-    };
-}
-export function buildTicket11ConfigurationIntent(evidence) {
-    validateTicket11Evidence(evidence);
-    const target = `${evidence.targetSchemaCode}/${evidence.targetSheetCode}`;
-    return {
-        intentVersion: 1,
-        targetFamily: "8.6",
-        environmentBinding: { application: evidence.applicationCode, model: evidence.targetSchemaCode, baselineFingerprint: evidence.baselineFingerprint },
-        sourceRequirement: `Ticket 11 maintainer test (${activeFieldFamily().familyId} family rung): bind the run's ${fieldFamilyMembers().length} published fixture family fields (${fieldFamilyMemberNamesProse()}) into the default form layout as their registered selector controls — NEVER any condition strings (requiredFormula/readonlyCondition live on bizdatarule rows per type-matrix §9) — and save the form as a draft, composing the designer-standard scaffolding (Title 203 useDataTitle, system row 101/104/100, group 200) when the form's draft layout is empty with the business rows in family order — draft save only, never a form publish, app publish, or Environment release — with authoritative readback, per-type control options decode, behavior validation, and the stated cascade cleanup contract.`,
-        resources: [
-            { id: target, kind: "form", state: "update", properties: { schemaCode: evidence.targetSchemaCode, sheetCode: evidence.targetSheetCode, boundFamilyFields: [...evidence.targetFieldCodes], draftSaveOnly: true, boundControls: evidence.boundControls.map((binding) => ({ propertyTypeName: binding.propertyTypeName, controlType: binding.controlType })) } },
-            ...evidence.targetFieldCodes.map((fieldCode) => ({ id: `${evidence.targetSchemaCode}/${fieldCode}`, kind: "field", state: "existing", properties: { schemaCode: evidence.targetSchemaCode, published: true } })),
-        ],
-        relationships: evidence.targetFieldCodes.map((fieldCode) => ({ from: target, to: `${evidence.targetSchemaCode}/${fieldCode}`, kind: "bindsTo" })),
-        lifecycle: [{ resourceId: target, transitions: ["draft-save"], order: 1, idempotent: false, dependencyChecks: ["completed-family-field-publish-handoff", "published-family-field-presence-and-control-absence-preflight"], recoveryBoundary: `form:${target}` }],
-        behavior: [{ id: "form-draft-family-control-binding", kind: "structure", requiredCapabilityIds: [TICKET11_FORM_DRAFT_CAPABILITY_ID], resourceIds: [target], obligations: [`each published family field's typed control is present in the draft layout and attribute map exactly once`, `each registered control decodes its pinned options; ${fieldFamilyAlwaysReadonlyDemoMember().propertyTypeName} carries the always-readonly boolean and ${fieldFamilyRuleDemoMember().propertyTypeName} stays free of required/readonly keys`, "no control options carry the condition strings requiredFormula/readonlyCondition/displayFormula — the designer panel wipes them on load and re-hydrates them from the bizdatarule rows (type-matrix §9); required-per-form is authored by the Ticket 20 rule row, never here", "when the pre-state draft layout was empty, the designer-standard scaffolding decodes (Title 203 useDataTitle form-named, system row 101/104/100, group 200) with the contracted row order Title, system row, group, then every registered business row in family order", "the published flag and published JSON are unchanged by the draft save", "designer direct URL stays inspectable"] }],
-        acceptance: [{ id: "ticket11-form-draft-readback", scenario: "family-form-draft-binding-and-published-invariance", actor: "omc-maintainer-opencode", assertions: [`the draft readback decodes all ${fieldFamilyMembers().length} registered selector controls with their per-member options`, "the published state readback is unchanged before and after the draft save", "fixture remains inspectable at the designer direct URL"], readbackInvariants: [`${TICKET11_FORM_READBACK_ENDPOINT}?schemaCode=<model>&sheetCode=<sheet> decodes every draft control`, "published flag and published*Json are byte-identical before and after"], outcome: "validated" }],
-        cleanup: [{ id: "ticket11-form-cascade-cleanup", boundary: `ticket11:${evidence.testRunId}:form-draft-cascade-absence`, dependencyChecks: ["staged family field cleanup", "model physical delete", "form absence readback"], resources: [`form:${target}`] }],
-        implementationConstraints: { nativePreferred: true, backendRequired: false, prohibitedPaths: ["form.online-js", "business-rule", "integration", "backend.extension"], approvalExceptions: [] },
-        evidenceRefs: [TICKET11_FORM_DRAFT_CAPABILITY_ID, TICKET11_FORM_DRAFT_ENDPOINT, TICKET11_FORM_READBACK_ENDPOINT, ...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.evidence],
-        unresolved: [],
-    };
-}
-function ticket11FormDraftOperation(evidence) {
-    const target = `form:${evidence.targetSchemaCode}/${evidence.targetSheetCode}`;
-    return {
-        id: `form-draft:${evidence.targetSchemaCode}/${evidence.targetSheetCode}/${evidence.targetFieldCodes.join("+")}`,
-        method: "POST",
-        path: TICKET11_FORM_DRAFT_ENDPOINT,
-        target,
-        payload: buildTicket11FormDraftPayload(evidence),
-        expectedReadback: `${target}:draft`,
-        evidence: [TICKET11_FORM_DRAFT_CAPABILITY_ID, ...CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.evidence, TICKET11_FORM_READBACK_ENDPOINT],
-        transportMode: "serialized-server-form-draft-8.6.26",
-        capability: CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT,
-    };
-}
-/** Creates and proposes the immutable Ticket 11 Delivery Plan Approval for the single default-form draft-save step. */
-export function createTicket11FormDraftPlanApproval(input) {
-    const evidence = validateTicket11Evidence(input.evidence);
-    assertDigest(input.knowledgePackDigest, "knowledge pack digest");
-    const operation = ticket11FormDraftOperation(evidence);
-    assertTicket11OperationsBounded({ route: TICKET11_FORM_DRAFT_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode, targetSheetCode: evidence.targetSheetCode, targetFieldCodes: evidence.targetFieldCodes });
-    const intent = buildTicket11ConfigurationIntent(evidence);
-    if (validateConfigurationIntent(intent).length)
-        throw new Error("Ticket 11 Configuration Intent is invalid; planning is blocked.");
-    const binding = {
-        deliveryId: ticket11DeliveryId(evidence.testRunId),
-        environment: TICKET11_TEST_ENVIRONMENT_NAME,
-        baselineFingerprint: evidence.baselineFingerprint,
-        environmentFingerprint: evidence.environmentFingerprint,
-        discoveryFingerprint: evidence.discoveryFingerprint,
-        ...(evidence.evidenceArtifactId ? { evidenceArtifactId: evidence.evidenceArtifactId } : {}),
-    };
-    const planHash = digest({ route: TICKET11_FORM_DRAFT_ROUTE, capabilityId: TICKET11_FORM_DRAFT_CAPABILITY_ID, target: `${evidence.targetSchemaCode}/${evidence.targetSheetCode}/${evidence.targetFieldCodes.join("+")}`, testRunId: evidence.testRunId, operation: { id: operation.id, readback: operation.expectedReadback }, familyFieldCodes: [...evidence.targetFieldCodes], publishHandoff: { packageId: evidence.handoff.fieldPublishPackageId, packageHash: evidence.handoff.fieldPublishPackageHash }, folder: evidence.folder, fingerprints: { baseline: evidence.baselineFingerprint, environment: evidence.environmentFingerprint, discovery: evidence.discoveryFingerprint }, cleanupContractHash: ticket11FormCleanupContractHash(), knowledgePackDigest: input.knowledgePackDigest, prohibited: [...TICKET11_PROHIBITED_MUTATION_TERMS] });
-    const base = createDeliveryPlanApproval({
-        binding,
-        requirementHash: digest({ target: `${evidence.targetSchemaCode}/${evidence.targetSheetCode}`, formDraft: true }),
-        clarificationHash: digest("ticket11-test-form-draft"),
-        intentHash: digest(intent),
-        decisionHash: digest(TICKET11_FORM_DRAFT_ROUTE),
-        graphHash: digest([operation.id]),
-        riskHash: digest(TICKET11_RISKS),
-        validationPlanHash: digest("authoritative-form-draft-readback-control-decode-and-published-state-invariance"),
-        cleanupPlanHash: ticket11FormCleanupContractHash(),
-        allowedOperationScope: [ticket11FormDraftScope(evidence.targetSchemaCode, evidence.targetSheetCode)],
-        planHash,
-        applicationCode: TICKET11_TEST_APPLICATION_CODE,
-        folderId: evidence.folder.id,
-        folderName: evidence.folder.name,
-        targets: [`${evidence.targetSchemaCode}/${evidence.targetSheetCode}`],
-    });
-    const approval = {
-        ...base,
-        route: TICKET11_FORM_DRAFT_ROUTE,
-        testRunId: evidence.testRunId,
-        targetSchemaCode: evidence.targetSchemaCode,
-        targetSheetCode: evidence.targetSheetCode,
-        targetFieldCodes: evidence.targetFieldCodes,
-        capabilityId: TICKET11_FORM_DRAFT_CAPABILITY_ID,
-        knowledgePackDigest: input.knowledgePackDigest,
-        cleanupContractHash: ticket11FormCleanupContractHash(),
-        environmentName: TICKET11_TEST_ENVIRONMENT_NAME,
-    };
-    const proposal = { ...approval, approvalHash: deliveryPlanApprovalHash(approval) };
-    proposeDeliveryPlan(input.ledger, proposal);
-    return { approval: proposal, operation, cleanupContract: evidence.cleanupContract, intent, binding };
-}
-const TICKET11_RISKS = [
-    "Exactly one default-form draft save binding the run's own published fixture field is in scope — draft save only, never a form publish, app publish, or Environment release; model, view, runtime, folder, deployment, restart, release, Redis, and tenant administration remain rejected.",
-    "The form draft state dies with the separately approved staged cleanup (Ticket 10 published-field cleanup, then the Ticket 08 model physical delete); form-level absence is confirmed by the authoritative bizsheet/get readback and uncertain outcomes stop, retain, and report.",
-];
-/** Compiles the immutable one-step form-draft package bound to the approved plan, pack digest, and pinned contract hash. */
-export function prepareTicket11FormDraftPackage(input) {
-    const evidence = validateTicket11Evidence(input.evidence);
-    const approval = requireTicket11Approval(input.approval);
-    const persisted = requirePersistedApprovedPlan(input.ledger, approval);
-    assertTicket11BindingMatchesEvidence(persisted.binding, evidence);
-    const scope = ticket11FormDraftScope(evidence.targetSchemaCode, evidence.targetSheetCode);
-    if (!persisted.allowedOperationScope.includes(scope))
-        throw new Error(`Ticket 11 package step is outside the approved operation scope: ${scope}.`);
-    if (input.pinnedFormDraftContractHash !== ticket11FormDraftContractHash())
-        throw new Error("Ticket 11 pinned form-draft contract hash does not match the canonical 8.6.26 capability contract.");
-    assertDigest(input.knowledgePackDigest, "knowledge pack digest");
-    if (input.knowledgePackDigest !== approval.knowledgePackDigest)
-        throw new Error("Ticket 11 knowledge pack digest diverges from the approved plan binding.");
-    const operation = ticket11FormDraftOperation(evidence);
-    assertTicket11OperationsBounded({ route: TICKET11_FORM_DRAFT_ROUTE, operations: [operation], targetSchemaCode: evidence.targetSchemaCode, targetSheetCode: evidence.targetSheetCode, targetFieldCodes: evidence.targetFieldCodes });
-    const snapshotBase = { id: `snapshot:${operation.id}`, target: operation.target, identity: operation.target, recoveryBoundary: operation.target, state: "absent", baselineFingerprint: persisted.binding.baselineFingerprint };
-    const snapshot = { ...snapshotBase, snapshotHash: digest(snapshotBase) };
-    const pkg = compileNativeOperations({
-        operations: [operation],
-        binding: persisted.binding,
-        planApproval: persisted,
-        snapshotManifest: [snapshot],
-        releasePlanHash: digest("ticket11-no-release"),
-        recoveryPolicyHash: digest("ticket11-form-draft-step-only"),
-        knowledgePack: { id: TICKET11_FORM_DRAFT_KNOWLEDGE_PACK_ID, digest: input.knowledgePackDigest },
-        capabilityEvidence: [TICKET11_FORM_DRAFT_CAPABILITY_ID, "cloudpivot.form-draft.serialized-server-8.6.26", TICKET11_FORM_READBACK_ENDPOINT, ...evidence.targetFieldCodes.map((fieldCode) => `familyField:${fieldCode}`), `publishHandoff:${evidence.handoff.fieldPublishPackageId}`, `folder:${evidence.folder.id}`, `testRunId:${evidence.testRunId}`, `baselineFingerprint:${persisted.binding.baselineFingerprint}`],
-        requiredPermissions: ["configuration-write"],
-        packageId: `ticket11-form-draft-${digest(persisted.approvalId).slice(0, 32)}`,
-        ledger: input.ledger,
-    });
-    input.ledger.createPackage(pkg);
-    return { package: pkg, operations: [operation], planApproval: persisted, dryRun: ticket11DryRun(evidence, [operation]), evidence };
-}
-/** Read-only dry-run projection; never a CloudPivot write and never a form/app publish operation. */
-function ticket11DryRun(evidence, operations) {
-    const readbackOperations = [
-        { id: `readback:form:${evidence.targetSchemaCode}:${evidence.targetSheetCode}`, method: "GET", path: TICKET11_FORM_READBACK_ENDPOINT, target: `form:${evidence.targetSchemaCode}/${evidence.targetSheetCode}`, payload: { schemaCode: evidence.targetSchemaCode, sheetCode: evidence.targetSheetCode }, expectedReadback: `form:${evidence.targetSchemaCode}/${evidence.targetSheetCode}:read`, evidence: ["BizFormController.java:174-230"] },
-    ];
-    const body = JSON.stringify({ execution: "read-only-dry-run", operations, readbackOperations, blocked: [], prohibitedActions: ["cloudpivot-write"] }, null, 2) + "\n";
-    return { execution: "read-only-dry-run", operations, readbackOperations, blocked: [], prohibitedActions: ["cloudpivot-write"], artifact: { name: "cloudpivot-ticket11-form-draft-dry-run.json", body, sha256: digest(body), mimeType: "application/json" } };
-}
-export function formatTicket11DeliveryPlanApprovalFrame(approval) {
-    const value = requireTicket11Approval(approval);
-    return appendApprovalHumanBlock(`Approve Ticket 11 form draft Delivery Plan Approval ${value.approvalId} hash ${value.approvalHash}; plan hash ${value.planHash}; capability ${value.capabilityId}; environment test; application test; environment fingerprint ${value.binding.environmentFingerprint}; baseline fingerprint ${value.binding.baselineFingerprint}; folder ${value.folderId} (${value.folderName}); fixture model ${value.targetSchemaCode}; default sheet ${value.targetSheetCode}; bound published family fields ${value.targetFieldCodes.join(" + ")} (${fieldFamilyMemberNamesProse()}); testRunId ${value.testRunId}; exact scope ${value.allowedOperationScope[0]}; one default-form draft save step (POST ${TICKET11_FORM_DRAFT_ENDPOINT} with the echoed BizSheetVO: when the draft layout is empty the designer-standard scaffolding — Title 203 useDataTitle, system row 101/104/100, group 200 — is composed before the business rows; layout binding of all registered selector controls with per-member options and no condition strings anywhere — required is authored as a bizdatarule row by the Ticket 20 rung) — draft save only, never a form publish, app publish, or Environment release — with authoritative readback, per-type behavior validation, and the stated cascade cleanup contract.`, { capability: "ticket11-form-draft", kind: "delivery-plan", identities: [value.targetSchemaCode, value.targetSheetCode, ...value.targetFieldCodes], scope: [value.allowedOperationScope[0]] });
-}
-export function formatTicket11EnvironmentChangeApprovalFrame(input) {
-    const value = requireTicket11Approval(input.approval);
-    return appendApprovalHumanBlock(`Approve Ticket 11 form draft Environment Change Approval for package ${input.packageId} hash ${input.packageHash}; plan approval ${value.approvalId} hash ${value.approvalHash}; environment test; folder ${value.folderId} (${value.folderName}); fixture model ${value.targetSchemaCode}; default sheet ${value.targetSheetCode}; bound published family fields ${value.targetFieldCodes.join(" + ")}; testRunId ${value.testRunId}; exact scope ${value.allowedOperationScope[0]}; exactly one default-form draft save step binding all registered selector controls (when the draft layout is empty the designer-standard scaffolding is composed with the business rows; draft save only, never a form publish, app publish, or Environment release) executed by the single Forge configuration writer lease with authoritative readback and the published state proven unchanged.`, { capability: "ticket11-form-draft", kind: "environment-change", identities: [value.targetSchemaCode, value.targetSheetCode, ...value.targetFieldCodes], scope: [value.allowedOperationScope[0]] });
-}
-/** Validates real form-draft behavior beyond HTTP 2xx: the control binding and options decode from the authoritative readback, the published state is byte-unchanged, and — when the pre-state layout was empty — the designer-standard scaffolding decodes with the contracted row order (research §13.6). */
-export function validateTicket11FormDraftBehavior(input) {
-    const evidence = validateTicket11Evidence(input.evidence);
-    const checks = [];
-    const add = (id, ok, detail) => checks.push({ id, status: ok ? "validated" : "blocked", detail });
-    const before = input.before;
-    const beforeOk = before.classification === "present" && before.query.schemaCode === evidence.targetSchemaCode && before.query.sheetCode === evidence.targetSheetCode && Boolean(before.form);
-    add("pre-state-present", beforeOk, beforeOk ? "the pre-save authoritative form readback decoded the default form." : "the pre-save authoritative form readback did not decode the default form.");
-    const after = input.after;
-    const afterOk = after.classification === "present" && after.query.schemaCode === evidence.targetSchemaCode && after.query.sheetCode === evidence.targetSheetCode && Boolean(after.form);
-    evidence.targetFieldCodes.forEach((fieldCode, fieldIndex) => {
-        const binding = CLOUDPIVOT_8_6_26_SERIALIZED_FORM_DRAFT.boundControls[fieldIndex];
-        // Ticket 03b: the per-type decode descriptors (display name, extra
-        // readback guards) are the ACTIVE family's registered member data.
-        const member = fieldFamilyMembers()[fieldIndex];
-        const suffix = binding.propertyTypeName.toLowerCase();
-        const control = afterOk ? decodeTicket11DraftControlPresence(after.form, fieldCode) : { decodable: false, layoutOccurrences: 0 };
-        const bound = afterOk && control.decodable && control.layoutOccurrences === 1 && control.control?.key === fieldCode && control.control.type === binding.controlType;
-        add(`published-field-control-bound-${suffix}`, bound, bound ? `the draft layout carries the published ${binding.propertyTypeName} field's control exactly once with the ${member.control.controlDisplayName} binding.` : `the authoritative draft readback did not decode the published ${binding.propertyTypeName} field's control binding after the draft save returned success.`);
-        const options = control.control?.options;
-        // Per-type decode: the pinned family keys (visible + the always-readonly
-        // boolean for Date; visible and the format keys for Time — the Time
-        // control deliberately carries no required/readonly keys) plus the
-        // type-specific keys, via the shared capability seam so the contract
-        // cannot drift from the transport gates. Runtime-resolved control
-        // options (relevance schemaCode/queryCode) win over the static map.
-        const expectedOptions = member.control.resolveControlOptions
-            ? member.control.resolveControlOptions({ schemaCode: evidence.targetSchemaCode, memberFieldCodes: evidence.targetFieldCodes, testRunId: evidence.testRunId })
-            : binding.options;
-        if (options) {
-            for (const [key, value] of Object.entries(expectedOptions)) {
-                add(`control-${suffix}-${key.replace(/([A-Z])/g, "-$1").toLowerCase()}`, JSON.stringify(options[key]) === JSON.stringify(value), `the ${binding.propertyTypeName} control's pinned option ${key} decodes as ${JSON.stringify(options[key])} (expected ${JSON.stringify(value)}) from the authoritative draft readback.`);
-            }
-            for (const guard of member.control.readbackGuards) {
-                add(`control-${suffix}-${guard.id}`, guard.passes(options), guard.detail);
-            }
-            add(`control-${suffix}-no-condition-strings`, !("requiredFormula" in options) && !("readonlyCondition" in options) && !("displayFormula" in options), `the ${binding.propertyTypeName} control options carry no condition strings (requiredFormula/readonlyCondition/displayFormula): the panel wipes and re-hydrates these from the bizdatarule rows on load (type-matrix §9), so they are authored as rule rows — never as control options.`);
-        }
-        else {
-            add(`control-${suffix}-options`, false, `the ${binding.propertyTypeName} control options did not decode from the authoritative draft readback.`);
-        }
-    });
-    if (ticket11DraftLayoutIsEmpty(evidence.formPreState.form)) {
-        const scaffold = afterOk ? decodeTicket11ScaffoldPresence(after.form) : { decodable: false, rowOrderMatchesContract: false };
-        const formName = evidence.formPreState.form.name;
-        const titleOk = scaffold.decodable && scaffold.title?.type === 203 && scaffold.title.useDataTitle === true && scaffold.title.name === formName;
-        add("scaffolding-title-control", titleOk, titleOk ? `the draft layout decodes the Title control (type 203, useDataTitle) named after the form (${JSON.stringify(formName)}).` : "the authoritative draft readback did not decode the designer-standard Title control (type 203, useDataTitle, form-named) for the empty default form.");
-        const systemOk = scaffold.decodable && scaffold.systemRow !== undefined && scaffold.systemRow.keys.join(",") === TICKET11_SCAFFOLD_SYSTEM_ROW.join(",") && scaffold.systemRow.types.join(",") === [TICKET11_SCAFFOLD_SYSTEM_CONTROL_TYPES.creater, TICKET11_SCAFFOLD_SYSTEM_CONTROL_TYPES.createdTime, TICKET11_SCAFFOLD_SYSTEM_CONTROL_TYPES.sequenceNo].join(",");
-        add("scaffolding-system-row", systemOk, systemOk ? "the draft layout decodes the system row [creater(101), createdTime(104), sequenceNo(100)] exactly as contracted." : "the authoritative draft readback did not decode the designer-standard system row (creater 101 / createdTime 104 / sequenceNo 100) in order.");
-        const groupOk = scaffold.decodable && scaffold.group?.type === 200;
-        add("scaffolding-group-control", groupOk, groupOk ? "the draft layout decodes the group control (type 200) after the system row." : "the authoritative draft readback did not decode the designer-standard group control (type 200).");
-        let viewRows;
-        if (afterOk && typeof after.form?.draftViewJson === "string") {
-            try {
-                const parsed = JSON.parse(after.form.draftViewJson);
-                if (Array.isArray(parsed))
-                    viewRows = parsed;
-            }
-            catch {
-                viewRows = undefined;
-            }
-        }
-        const rowOrderOk = scaffold.rowOrderMatchesContract && viewRows !== undefined && viewRows.length === 3 + evidence.targetFieldCodes.length && evidence.targetFieldCodes.every((fieldCode, i) => viewRows[3 + i].length === 1 && viewRows[3 + i][0] === fieldCode);
-        add("scaffolded-layout-row-order", rowOrderOk, rowOrderOk ? `the layout row order decodes as exactly Title, system row, group, then the ${evidence.targetFieldCodes.length} bound business field rows in family order — matching the contract sample.` : `the authoritative draft readback did not decode the contracted layout shape (Title, system row, group, then exactly the ${evidence.targetFieldCodes.length} bound fields' business rows in family order).`);
-    }
-    const publishedUnchanged = Boolean(before.form && after.form) && before.form.published === evidence.formPreState.form.published && after.form.published === before.form.published && after.form.publishedViewJson === before.form.publishedViewJson && after.form.publishedAttributesJson === before.form.publishedAttributesJson && after.form.publishedActionsJson === before.form.publishedActionsJson && after.form.publishedHtmlJson === before.form.publishedHtmlJson;
-    add("published-state-unchanged", publishedUnchanged, `the published flag decodes as ${String(after.form?.published)} (pre-save ${String(before.form?.published)}) with the published JSON unchanged; a draft save never publishes.`);
-    add("exist-draft", after.form?.existDraft === true, `the existDraft flag decodes as ${String(after.form?.existDraft)} after the draft save.`);
-    add("designer-direct-url", evidence.designerDirectUrl === ticket11DesignerDirectUrl(evidence.targetSchemaCode, evidence.targetSheetCode), `designer direct URL ${evidence.designerDirectUrl} stays inspectable.`);
-    const blocked = checks.find((check) => check.status === "blocked");
-    return blocked ? { status: "blocked", reason: `Ticket 11 behavior validation failed: ${blocked.detail}`, checks } : { status: "validated", checks };
-}
-/** Execution boundary: named test environment, route-bound package steps, active approvals, no replay of terminal or uncertain packages. */
-export function assertTicket11ExecutionBoundary(input) {
-    if (input.environmentName !== "test")
-        throw new Error("Ticket 11 execution is restricted to the named test environment; production and staging are rejected.");
-    const { projection } = input;
-    if (input.steps.length !== 1 || !input.steps[0].id.startsWith("form-draft:"))
-        throw new Error(`Ticket 11 execution boundary rejected package ${input.packageId}: its steps are not the single form-draft: operation bound to the ${input.route} route.`);
-    if (projection.status === "approved" && projection.approvals.plan === "approved" && projection.approvals.environment === "approved")
-        return;
-    if (projection.status === "completed")
-        throw new Error(`Ticket 11 package ${input.packageId} is already terminal completed; replay is rejected.`);
-    if (projection.status === "uncertain")
-        throw new Error(`Ticket 11 package ${input.packageId} is uncertain; reconcile by authoritative readback before any replay.`);
-    if (projection.status === "in_progress")
-        throw new Error(`Ticket 11 package ${input.packageId} is already running; concurrent execution is rejected.`);
-    const pending = [...projection.blockers];
-    if (projection.approvals.plan !== "approved")
-        pending.push("Delivery Plan Approval is required before package execution.");
-    if (projection.approvals.environment !== "approved")
-        pending.push("Environment Change Approval is required before mutation.");
-    throw new Error(`Ticket 11 execution boundary rejected package ${input.packageId}: status is ${projection.status} (blocked); ${[...new Set(pending)].join("; ")}.`);
-}
-/** Executes the approved one-step default-form draft-save package through the single OMC Host write transport, then validates the control binding and the published-state invariance. */
-export async function executeTicket11FormDraftPackage(input) {
-    assertTicket11TestFormDraftEnvironment(input.settings);
-    if (typeof input.transport.serializedServerFormDraftSave !== "function")
-        throw new Error("Ticket 11 execution requires the OMC Host serialized form-draft transport; bypass transports are rejected.");
-    const projection = input.ledger.project(input.prepared.package.packageId);
-    assertTicket11ExecutionBoundary({ projection, environmentName: input.settings.environmentName, packageId: input.prepared.package.packageId, route: TICKET11_FORM_DRAFT_ROUTE, steps: input.prepared.package.steps });
-    if (input.environmentApproval.packageId !== input.prepared.package.packageId || input.environmentApproval.packageHash !== input.prepared.package.packageHash)
-        throw new Error("Ticket 11 Environment Change Approval does not match the prepared package.");
-    const evidence = input.prepared.evidence;
-    const preflight = await input.readFormState();
-    if (preflight.classification !== "present" || !preflight.form || preflight.form.published !== evidence.formPreState.form.published || preflight.form.publishedViewJson !== evidence.formPreState.form.publishedViewJson || preflight.form.publishedAttributesJson !== evidence.formPreState.form.publishedAttributesJson || preflight.form.publishedActionsJson !== evidence.formPreState.form.publishedActionsJson || preflight.form.publishedHtmlJson !== evidence.formPreState.form.publishedHtmlJson)
-        throw new Error(`Ticket 11 execution requires the form pre-state to match the approved evidence; ${input.prepared.package.steps[0].target} diverges from the approved handoff.`);
-    for (const fieldCode of evidence.targetFieldCodes) {
-        const preflightPresence = decodeTicket11DraftControlPresence(preflight.form, fieldCode);
-        if (!preflightPresence.decodable || preflightPresence.layoutOccurrences !== 0 || preflightPresence.control)
-            throw new Error(`Ticket 11 execution requires exact control absence before the draft save; ${fieldCode} is already bound or undecodable.`);
-    }
-    const result = await runNativeConfigurationPackage({
-        package: input.prepared.package,
-        gate: {
-            mode: "approved",
-            planApproval: { status: "approved", approvalHash: input.prepared.planApproval.approvalHash },
-            environmentApproval: { status: "approved", packageHash: input.environmentApproval.packageHash },
-            lease: { owner: "configuration-agent", environment: TICKET11_TEST_ENVIRONMENT_NAME },
-            baselineFingerprint: input.prepared.package.binding.baselineFingerprint,
-            snapshots: input.prepared.package.snapshotManifest,
-            package: input.prepared.package,
-        },
-        operations: input.prepared.operations,
-        ledger: input.ledger,
-        planApproval: input.prepared.planApproval,
-        transport: input.transport,
-        credentials: input.credentials,
-        authoritativeOrigin: input.authoritativeOrigin,
-        testApplicationCode: TICKET11_TEST_APPLICATION_CODE,
-    }, input.signal);
-    const mutationExecuted = result.steps.some((step) => step.status === "committed" || step.status === "uncertain");
-    const blockers = [...result.blockers];
-    let status = ticket11ExecutionStatus(result.status);
-    let nextAction = result.nextAction;
-    let behavior;
-    if (result.status === "completed") {
-        behavior = validateTicket11FormDraftBehavior({ evidence, before: preflight, after: await input.readFormState() });
-        if (behavior.status !== "validated") {
-            status = "blocked";
-            blockers.push(behavior.reason ?? "Ticket 11 behavior validation failed.");
-            nextAction = "reconcile-behavior-retain-and-report-resource";
-        }
-    }
-    return { reportType: "omc.ticket11.test-form-draft-execution", schemaVersion: 1, packageId: result.packageId, packageHash: result.packageHash, route: TICKET11_FORM_DRAFT_ROUTE, testRunId: evidence.testRunId, targetSchemaCode: evidence.targetSchemaCode, targetSheetCode: evidence.targetSheetCode, targetFieldCodes: evidence.targetFieldCodes, status, mutationExecuted, steps: result.steps, blockers, nextAction, ...(behavior ? { behavior } : {}) };
-}
-/**
- * Closes the stated form cascade cleanup contract: after the separately
- * approved staged cleanup (published-field cleanup, then the model physical
- * delete), the authoritative bizsheet/get readback must be a non-success
- * envelope for the fixture (exact errcode recorded). Anything else stops,
- * retains, and reports.
- */
-export function confirmTicket11FormCascadeAbsence(input) {
-    const evidence = validateTicket11Evidence(input.evidence);
-    const readback = input.formReadback;
-    if (readback.classification !== "absent" || readback.reason !== "form-absence" || readback.query.schemaCode !== evidence.targetSchemaCode || readback.query.sheetCode !== evidence.targetSheetCode)
-        throw new Error(`Ticket 11 form cascade cleanup contract is not closed: the bizsheet/get readback does not confirm form absence after the model physical delete (classification=${readback.classification}, errcode=${String(readback.errcode ?? "n/a")}); stop, retain, and report.`);
-}
-function ticket11ExecutionStatus(status) {
-    if (status === "completed" || status === "uncertain" || status === "partial")
-        return status;
-    return "blocked";
-}
-function requireTicket11Approval(approval) {
-    const value = approval;
-    if (value.route !== TICKET11_FORM_DRAFT_ROUTE || value.capabilityId !== TICKET11_FORM_DRAFT_CAPABILITY_ID || value.environmentName !== "test" || value.applicationCode !== "test" || value.targets?.length !== 1 || !value.folderId || !value.folderName || !value.testRunId || !value.targetSchemaCode || !value.targetSheetCode || !Array.isArray(value.targetFieldCodes) || value.targetFieldCodes.length !== TICKET09_FIELD_FAMILY.length || value.targetFieldCodes.some((code) => !isTicket09TargetField(code)) || new Set(value.targetFieldCodes).size !== TICKET09_FIELD_FAMILY.length)
-        throw new Error(`Ticket 11 approval frame is not bound to the exact ${TICKET11_FORM_DRAFT_ROUTE} route, family targets, folder, and testRunId.`);
-    return value;
-}
-function requirePersistedApprovedPlan(ledger, approval) {
-    if (approval.status !== "approved")
-        throw new Error("Ticket 11 package preparation requires the approved exact Ticket 11 Delivery Plan Approval.");
-    const persisted = ledger.findPlanApproval(approval.approvalId);
-    if (!persisted || persisted.status !== "approved" || persisted.approvalHash !== approval.approvalHash)
-        throw new Error("Ticket 11 package preparation requires the exact authoritative approved Delivery Plan Approval.");
-    return persisted;
-}
-function assertTicket11BindingMatchesEvidence(binding, evidence) {
-    const expected = {
-        deliveryId: ticket11DeliveryId(evidence.testRunId),
-        environment: TICKET11_TEST_ENVIRONMENT_NAME,
-        baselineFingerprint: evidence.baselineFingerprint,
-        environmentFingerprint: evidence.environmentFingerprint,
-        discoveryFingerprint: evidence.discoveryFingerprint,
-        ...(evidence.evidenceArtifactId ? { evidenceArtifactId: evidence.evidenceArtifactId } : {}),
-    };
-    if (stable(binding) !== stable(expected))
-        throw new Error("Ticket 11 plan approval binding is outside the evidence baseline, environment, discovery, or delivery binding.");
-}
-function validateTicket11Evidence(evidence) {
-    if (!evidence || evidence.route !== TICKET11_FORM_DRAFT_ROUTE || evidence.capabilityId !== TICKET11_FORM_DRAFT_CAPABILITY_ID)
-        throw new Error("Ticket 11 evidence is not the host-owned form draft route.");
-    if (evidence.environmentName !== "test" || evidence.applicationCode !== "test")
-        throw new Error("Ticket 11 evidence is outside the named test environment and dedicated test application.");
-    if (!isTicket08TargetSchema(evidence.targetSchemaCode))
-        throw new Error("Ticket 11 evidence fixture model is not the host-owned Ticket 08 schema.");
-    if (evidence.targetSheetCode !== evidence.targetSchemaCode)
-        throw new Error("Ticket 11 evidence default sheet is not bound to the fixture schema.");
-    if (!Array.isArray(evidence.targetFieldCodes) || evidence.targetFieldCodes.length !== TICKET09_FIELD_FAMILY.length || evidence.targetFieldCodes.some((code) => !isTicket09TargetField(code)) || new Set(evidence.targetFieldCodes).size !== TICKET09_FIELD_FAMILY.length)
-        throw new Error("Ticket 11 evidence family field codes are not the distinct host-owned Ticket 09 field codes (one per active family member).");
-    if ([evidence.environmentFingerprint, evidence.baselineFingerprint, evidence.discoveryFingerprint].some((value) => !SHA256.test(value)))
-        throw new Error("Ticket 11 evidence fingerprints are not canonical.");
-    if (evidence.modelPresence.classification !== "present" || evidence.modelPresence.query.schemaCode !== evidence.targetSchemaCode)
-        throw new Error("Ticket 11 evidence does not carry the authoritative fixture model presence handoff.");
-    evidence.targetFieldCodes.forEach((fieldCode, index) => {
-        const presence = evidence.publishedFieldPresence[index];
-        if (presence?.classification !== "present" || presence.query.schemaCode !== evidence.targetSchemaCode || presence.query.propertyCode !== fieldCode || presence.query.isPublish !== "true" || presence.field?.published !== true)
-            throw new Error("Ticket 11 evidence does not carry exact authenticated published family field presence.");
-    });
-    if (evidence.formPreState.classification !== "present" || evidence.formPreState.query.schemaCode !== evidence.targetSchemaCode || evidence.formPreState.query.sheetCode !== evidence.targetSheetCode || !evidence.formPreState.form || evidence.formPreState.form.published !== false)
-        throw new Error("Ticket 11 evidence does not carry the exact authenticated unpublished form pre-state.");
-    if (!evidence.folder.id || !evidence.folder.name)
-        throw new Error("Ticket 11 evidence folder binding is missing.");
-    return evidence;
-}
-function assertDigest(value, label) {
-    if (typeof value !== "string" || !SHA256.test(value) || !/[1-9a-f]/i.test(value))
-        throw new Error(`Ticket 11 ${label} is invalid.`);
-}
-function digest(value) { return createHash("sha256").update(stable(value)).digest("hex"); }
-function stable(value) { return JSON.stringify(sort(value)); }
-function sort(value) { if (Array.isArray(value))
-    return value.map(sort); if (value && typeof value === "object")
-    return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sort(item)])); return value; }
-//# sourceMappingURL=ticket11-test-form-draft.js.map