openplanr 1.13.2 → 1.14.0

package/dist/services/operate/evidence-import.js

@@ -0,0 +1,340 @@
+import { readFile, realpath, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { canonicalize } from './canonical.js';
+import { OperateError } from './types.js';
+import { isPathInside } from './workspace.js';
+const FORBIDDEN_KEYS = new Set(['__proto__', 'prototype', 'constructor']);
+class StrictJsonParser {
+    source;
+    limits;
+    index = 0;
+    scalars = 0;
+    constructor(source, limits) {
+        this.source = source;
+        this.limits = limits;
+    }
+    parse() {
+        if (Buffer.byteLength(this.source) > this.limits.maxBytes)
+            this.fail('JSON exceeds byte limit');
+        this.skipWhitespace();
+        const value = this.value(0);
+        this.skipWhitespace();
+        if (this.index !== this.source.length)
+            this.fail('Unexpected trailing JSON content');
+        return value;
+    }
+    value(depth) {
+        if (depth > this.limits.maxDepth)
+            this.fail('JSON exceeds nesting limit');
+        this.skipWhitespace();
+        const char = this.source[this.index];
+        if (char === '{')
+            return this.object(depth + 1);
+        if (char === '[')
+            return this.array(depth + 1);
+        if (char === '"')
+            return this.scalar(this.string());
+        if (this.source.startsWith('true', this.index)) {
+            this.index += 4;
+            return this.scalar(true);
+        }
+        if (this.source.startsWith('false', this.index)) {
+            this.index += 5;
+            return this.scalar(false);
+        }
+        if (this.source.startsWith('null', this.index)) {
+            this.index += 4;
+            return this.scalar(null);
+        }
+        return this.scalar(this.number());
+    }
+    object(depth) {
+        this.index += 1;
+        const result = Object.create(null);
+        const seen = new Set();
+        this.skipWhitespace();
+        if (this.source[this.index] === '}') {
+            this.index += 1;
+            return result;
+        }
+        while (true) {
+            this.skipWhitespace();
+            if (this.source[this.index] !== '"')
+                this.fail('Object key must be a string');
+            const key = this.string();
+            if (FORBIDDEN_KEYS.has(key))
+                this.fail(`Forbidden JSON key: ${key}`);
+            if (seen.has(key))
+                this.fail(`Duplicate JSON key: ${key}`);
+            seen.add(key);
+            this.skipWhitespace();
+            if (this.source[this.index] !== ':')
+                this.fail('Expected colon after object key');
+            this.index += 1;
+            result[key] = this.value(depth);
+            this.skipWhitespace();
+            const separator = this.source[this.index++];
+            if (separator === '}')
+                return result;
+            if (separator !== ',')
+                this.fail('Expected comma or closing brace');
+        }
+    }
+    array(depth) {
+        this.index += 1;
+        const result = [];
+        this.skipWhitespace();
+        if (this.source[this.index] === ']') {
+            this.index += 1;
+            return result;
+        }
+        while (true) {
+            result.push(this.value(depth));
+            this.skipWhitespace();
+            const separator = this.source[this.index++];
+            if (separator === ']')
+                return result;
+            if (separator !== ',')
+                this.fail('Expected comma or closing bracket');
+        }
+    }
+    string() {
+        const start = this.index;
+        this.index += 1;
+        let escaped = false;
+        while (this.index < this.source.length) {
+            const code = this.source.charCodeAt(this.index);
+            if (!escaped && code < 0x20)
+                this.fail('Unescaped control character in string');
+            if (!escaped && this.source[this.index] === '"') {
+                this.index += 1;
+                const value = JSON.parse(this.source.slice(start, this.index));
+                if (value.length > this.limits.maxStringLength)
+                    this.fail('JSON string exceeds limit');
+                return value;
+            }
+            if (!escaped && this.source[this.index] === '\\') {
+                escaped = true;
+            }
+            else {
+                escaped = false;
+            }
+            this.index += 1;
+        }
+        this.fail('Unterminated JSON string');
+    }
+    number() {
+        const match = this.source
+            .slice(this.index)
+            .match(/^-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?/);
+        if (!match)
+            this.fail('Invalid JSON value');
+        this.index += match[0].length;
+        const value = Number(match[0]);
+        if (!Number.isFinite(value))
+            this.fail('JSON number is not finite');
+        return value;
+    }
+    scalar(value) {
+        this.scalars += 1;
+        if (this.scalars > this.limits.maxScalars)
+            this.fail('JSON exceeds scalar limit');
+        return value;
+    }
+    skipWhitespace() {
+        while (/[\t\n\r ]/.test(this.source[this.index] ?? ''))
+            this.index += 1;
+    }
+    fail(message) {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', `${message} at character ${this.index}.`);
+    }
+}
+export function parseStrictJson(source, limits = {}) {
+    return new StrictJsonParser(source.replace(/^\ufeff/, ''), {
+        maxDepth: limits.maxDepth ?? 32,
+        maxScalars: limits.maxScalars ?? 20_000,
+        maxStringLength: limits.maxStringLength ?? 100_000,
+        maxBytes: limits.maxBytes ?? 1_000_000,
+    }).parse();
+}
+export function parseStrictCsv(source, limits = {}) {
+    const resolved = {
+        maxRows: limits.maxRows ?? 10_000,
+        maxColumns: limits.maxColumns ?? 256,
+        maxFieldLength: limits.maxFieldLength ?? 100_000,
+        maxBytes: limits.maxBytes ?? 1_000_000,
+    };
+    if (Buffer.byteLength(source) > resolved.maxBytes || source.includes('\0')) {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'CSV is oversized or contains NUL.');
+    }
+    const rows = [];
+    let row = [];
+    let field = '';
+    let quoted = false;
+    let quoteClosed = false;
+    const input = source.replace(/^\ufeff/, '');
+    const pushField = () => {
+        if (field.length > resolved.maxFieldLength) {
+            throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'CSV field exceeds limit.');
+        }
+        row.push(field);
+        field = '';
+        if (row.length > resolved.maxColumns) {
+            throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'CSV exceeds column limit.');
+        }
+    };
+    const pushRow = () => {
+        pushField();
+        rows.push(row);
+        row = [];
+        if (rows.length > resolved.maxRows) {
+            throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'CSV exceeds row limit.');
+        }
+    };
+    for (let index = 0; index < input.length; index += 1) {
+        const char = input[index];
+        if (quoted) {
+            if (char === '"' && input[index + 1] === '"') {
+                field += '"';
+                index += 1;
+            }
+            else if (char === '"') {
+                quoted = false;
+                quoteClosed = true;
+            }
+            else {
+                field += char;
+            }
+            continue;
+        }
+        if (quoteClosed && char !== ',' && char !== '\n' && char !== '\r') {
+            throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'CSV contains characters after a closing quote.');
+        }
+        if (char === '"' && field.length === 0 && !quoteClosed) {
+            quoted = true;
+        }
+        else if (char === '"') {
+            throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'CSV contains a quote inside an unquoted field.');
+        }
+        else if (char === ',') {
+            pushField();
+            quoteClosed = false;
+        }
+        else if (char === '\n') {
+            pushRow();
+            quoteClosed = false;
+        }
+        else if (char === '\r') {
+            if (input[index + 1] === '\n')
+                index += 1;
+            pushRow();
+            quoteClosed = false;
+        }
+        else {
+            field += char;
+        }
+    }
+    if (quoted) {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'CSV has an unterminated quote.');
+    }
+    if (field.length > 0 || row.length > 0)
+        pushRow();
+    return rows;
+}
+export function escapeSpreadsheetCell(value) {
+    return /^[=+\-@\t\r]/.test(value) ? `'${value}` : value;
+}
+export function serializeSafeCsv(rows) {
+    return `${rows
+        .map((row) => row
+        .map((raw) => {
+        const value = escapeSpreadsheetCell(raw);
+        return /[",\r\n]/.test(value) ? `"${value.replace(/"/g, '""')}"` : value;
+    })
+        .join(','))
+        .join('\n')}\n`;
+}
+function decodeUtf8(buffer) {
+    try {
+        return new TextDecoder('utf-8', { fatal: true }).decode(buffer);
+    }
+    catch {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'Imported evidence is not valid UTF-8.');
+    }
+}
+export async function resolveEvidenceImportPath(projectRoot, configuredPath, roots) {
+    if (!configuredPath.trim() || configuredPath.includes('\0')) {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'Imported evidence path is empty or contains NUL.');
+    }
+    const canonicalRoots = await Promise.all(roots.map(async (entry) => ({
+        componentId: entry.componentId,
+        root: await realpath(entry.root),
+    })));
+    const candidate = path.isAbsolute(configuredPath)
+        ? configuredPath
+        : path.resolve(await realpath(projectRoot), configuredPath);
+    let resolved;
+    try {
+        resolved = await realpath(candidate);
+    }
+    catch {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', `Imported evidence file does not exist: ${configuredPath}.`);
+    }
+    const owner = canonicalRoots
+        .filter((entry) => isPathInside(entry.root, resolved))
+        .sort((left, right) => right.root.length - left.root.length)[0];
+    if (!owner) {
+        throw new OperateError('E_OPERATE_PATH_ESCAPE', 'Imported evidence must remain inside the configured product workspace.');
+    }
+    const info = await stat(resolved);
+    if (!info.isFile()) {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'Imported evidence must be a regular file.');
+    }
+    const extension = path.extname(resolved).toLowerCase();
+    if (extension !== '.json' && extension !== '.csv') {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'Imported evidence supports .json and .csv files only.');
+    }
+    return {
+        absolutePath: resolved,
+        location: `${owner.componentId}/${path.relative(owner.root, resolved).split(path.sep).join('/')}`,
+    };
+}
+export async function readImportedEvidenceFile(input) {
+    if (!Number.isSafeInteger(input.maxBytes) || input.maxBytes < 1) {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'Imported evidence byte limit must be a positive integer.');
+    }
+    const resolved = await resolveEvidenceImportPath(input.projectRoot, input.configuredPath, input.roots);
+    const before = await stat(resolved.absolutePath);
+    if (before.size > input.maxBytes) {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'Imported evidence exceeds the configured byte limit.');
+    }
+    const buffer = await readFile(resolved.absolutePath);
+    if (buffer.byteLength > input.maxBytes) {
+        throw new OperateError('E_OPERATE_EVIDENCE_REJECTED', 'Imported evidence changed while reading and exceeds the byte limit.');
+    }
+    const source = decodeUtf8(buffer);
+    const extension = path.extname(resolved.absolutePath).toLowerCase();
+    if (extension === '.json') {
+        const parsed = parseStrictJson(source, {
+            ...input.jsonLimits,
+            maxBytes: Math.min(input.maxBytes, input.jsonLimits?.maxBytes ?? input.maxBytes),
+        });
+        return {
+            ...resolved,
+            format: 'json',
+            content: canonicalize(parsed),
+            byteCount: buffer.byteLength,
+        };
+    }
+    const rows = parseStrictCsv(source, {
+        ...input.csvLimits,
+        maxBytes: Math.min(input.maxBytes, input.csvLimits?.maxBytes ?? input.maxBytes),
+    });
+    return {
+        ...resolved,
+        format: 'csv',
+        content: serializeSafeCsv(rows),
+        byteCount: buffer.byteLength,
+    };
+}
+//# sourceMappingURL=evidence-import.js.map

package/dist/services/operate/evidence-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-import.js","sourceRoot":"","sources":["../../../src/services/operate/evidence-import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAgB9C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAE1E,MAAM,gBAAgB;IAKD;IACA;IALX,KAAK,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,CAAC,CAAC;IAEpB,YACmB,MAAc,EACd,MAAwB;QADxB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAkB;IACxC,CAAC;IAEJ,KAAK;QACH,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAChG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,KAAa;QACzB,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QACvF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACrE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAClF,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,MAAM,CAAC;YACrC,IAAI,SAAS,KAAK,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAa;QACzB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,MAAM,CAAC;YACrC,IAAI,SAAS,KAAK,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,IAAI,IAAI,GAAG,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YAChF,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAW,CAAC;gBACzE,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe;oBAAE,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBACvF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC;IAEO,MAAM;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM;aACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aACjB,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAI,KAAQ;QACxB,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAClF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc;QACpB,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IAC1E,CAAC;IAEO,IAAI,CAAC,OAAe;QAC1B,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,GAAG,OAAO,iBAAiB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAClG,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,SAAoC,EAAE;IACpF,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE;QACzD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM;QACvC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,OAAO;QAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;KACvC,CAAC,CAAC,KAAK,EAAE,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,SAAmC,EAAE;IAClF,MAAM,QAAQ,GAAoB;QAChC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,MAAM;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG;QACpC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,OAAO;QAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;KACvC,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,mCAAmC,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,GAAG,GAAa,EAAE,CAAC;IACvB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAE5C,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,0BAA0B,CAAC,CAAC;QACpF,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,KAAK,GAAG,EAAE,CAAC;QACX,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,2BAA2B,CAAC,CAAC;QACrF,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,SAAS,EAAE,CAAC;QACZ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,GAAG,GAAG,EAAE,CAAC;QACT,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wBAAwB,CAAC,CAAC;QAClF,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC7C,KAAK,IAAI,GAAG,CAAC;gBACb,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxB,MAAM,GAAG,KAAK,CAAC;gBACf,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,IAAI,CAAC;YAChB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,WAAW,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvD,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,gDAAgD,CACjD,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,SAAS,EAAE,CAAC;YACZ,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;YACV,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,KAAK,IAAI,CAAC,CAAC;YAC1C,OAAO,EAAE,CAAC;YACV,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAoC;IACnE,OAAO,GAAG,IAAI;SACX,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACX,GAAG;SACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,KAAK,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3E,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CACb;SACA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACpB,CAAC;AAeD,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,uCAAuC,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,cAAsB,EACtB,KAAoC;IAEpC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;KACjC,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAC/C,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,CAAC;IAC9D,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,0CAA0C,cAAc,GAAG,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,cAAc;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;SACrD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAClD,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,YAAY,EAAE,QAAQ;QACtB,QAAQ,EAAE,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;KAClG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAO9C;IACC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAC9C,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,KAAK,CACZ,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE;YACrC,GAAG,KAAK,CAAC,UAAU;YACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC;SACjF,CAAC,CAAC;QACH,OAAO;YACL,GAAG,QAAQ;YACX,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE;QAClC,GAAG,KAAK,CAAC,SAAS;QAClB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC;KAChF,CAAC,CAAC;IACH,OAAO;QACL,GAAG,QAAQ;QACX,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC"}

package/dist/services/operate/evidence-readiness.d.ts

@@ -0,0 +1,8 @@
+import { type OperatingEvidence, type OperatingEvidenceReadiness, type OperatingRoleId } from './types.js';
+export declare function evaluateEvidenceReadiness(input: {
+    cycleId: string;
+    evidence: OperatingEvidence;
+    enabledRoles: OperatingRoleId[];
+    now?: Date;
+}): Promise<OperatingEvidenceReadiness>;
+//# sourceMappingURL=evidence-readiness.d.ts.map

package/dist/services/operate/evidence-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-readiness.d.ts","sourceRoot":"","sources":["../../../src/services/operate/evidence-readiness.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAgBpB,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAqFtC"}

package/dist/services/operate/evidence-readiness.js

@@ -0,0 +1,78 @@
+import { canonicalDigest } from './canonical.js';
+import { assertOperatingArtifact, loadOperatingProtocol } from './protocol.js';
+import { compareSensitivity } from './redaction.js';
+import { OPERATE_PROTOCOL_VERSION, OPERATE_SCHEMA_VERSION, } from './types.js';
+function ageHours(iso, now) {
+    return Math.max(0, (now.getTime() - Date.parse(iso)) / (60 * 60 * 1_000));
+}
+export async function evaluateEvidenceReadiness(input) {
+    const now = input.now ?? new Date();
+    const registry = (await loadOperatingProtocol()).listOperatingRoles();
+    let gapNumber = 1;
+    const roles = input.enabledRoles.map((roleId) => {
+        const role = registry.find((entry) => entry.id === roleId);
+        const configured = role?.minimumEvidence.requirements ?? [
+            {
+                source: 'repository',
+                claimTypes: ['code'],
+                minimumItems: 1,
+                maxAgeHours: 168,
+                observationWindow: 'current-state',
+                sensitivityCeiling: 'internal',
+            },
+        ];
+        const requirements = configured.map((requirement) => {
+            const matching = input.evidence.items.filter((item) => item.source === requirement.source &&
+                requirement.claimTypes.some((claim) => item.claimTypes.includes(claim)) &&
+                compareSensitivity(item.sensitivity, requirement.sensitivityCeiling) <= 0);
+            const oldestAgeHours = matching.length > 0
+                ? Math.max(...matching.map((item) => ageHours(item.collectedAt, now)))
+                : null;
+            const satisfied = matching.length >= requirement.minimumItems &&
+                oldestAgeHours !== null &&
+                oldestAgeHours <= requirement.maxAgeHours &&
+                (requirement.observationWindow === 'current-state' ||
+                    requirement.observationWindow === 'current-cycle' ||
+                    matching.some((item) => item.observedFrom && item.observedTo));
+            return {
+                ...structuredClone(requirement),
+                observedItems: matching.length,
+                oldestAgeHours,
+                satisfied,
+            };
+        });
+        const ready = (role?.minimumEvidence.match ?? 'all') === 'any'
+            ? requirements.some((requirement) => requirement.satisfied)
+            : requirements.every((requirement) => requirement.satisfied);
+        const gapId = ready ? null : `GAP-${String(gapNumber++).padStart(3, '0')}`;
+        return {
+            roleId,
+            readiness: ready ? 'ready' : 'not_evaluated',
+            requirements,
+            missingEvidence: requirements
+                .filter((requirement) => !requirement.satisfied)
+                .map((requirement) => `${requirement.source}:${requirement.claimTypes.join('+')} (${requirement.observedItems}/${requirement.minimumItems})`),
+            evidenceRefs: input.evidence.items
+                .filter((item) => requirements.some((requirement) => requirement.source === item.source &&
+                requirement.claimTypes.some((claim) => item.claimTypes.includes(claim))))
+                .map((item) => item.id)
+                .sort(),
+            modelCallAllowed: ready,
+            gapId,
+        };
+    });
+    const readiness = {
+        kind: 'operating-evidence-readiness',
+        schemaVersion: OPERATE_SCHEMA_VERSION,
+        protocolVersion: OPERATE_PROTOCOL_VERSION,
+        cycleId: input.cycleId,
+        inputDigest: canonicalDigest({
+            evidence: input.evidence.fingerprint,
+            roles: input.enabledRoles,
+        }),
+        evaluatedAt: now.toISOString(),
+        roles,
+    };
+    return assertOperatingArtifact('operating-evidence-readiness', readiness);
+}
+//# sourceMappingURL=evidence-readiness.js.map

package/dist/services/operate/evidence-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-readiness.js","sourceRoot":"","sources":["../../../src/services/operate/evidence-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAEL,wBAAwB,EACxB,sBAAsB,GAIvB,MAAM,YAAY,CAAC;AAYpB,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAS;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAK/C;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,CACf,MAAM,qBAAqB,EAAE,CAC9B,CAAC,kBAAkB,EAA+B,CAAC;IACpD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,EAAE,eAAe,CAAC,YAAY,IAAI;YACvD;gBACE,MAAM,EAAE,YAAY;gBACpB,UAAU,EAAE,CAAC,MAAM,CAAC;gBACpB,YAAY,EAAE,CAAC;gBACf,WAAW,EAAE,GAAG;gBAChB,iBAAiB,EAAE,eAAwB;gBAC3C,kBAAkB,EAAE,UAAmB;aACxC;SACF,CAAC;QACF,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;YAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1C,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;gBAClC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACvE,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAC5E,CAAC;YACF,MAAM,cAAc,GAClB,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACjB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtE,CAAC,CAAC,IAAI,CAAC;YACX,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,YAAY;gBAC3C,cAAc,KAAK,IAAI;gBACvB,cAAc,IAAI,WAAW,CAAC,WAAW;gBACzC,CAAC,WAAW,CAAC,iBAAiB,KAAK,eAAe;oBAChD,WAAW,CAAC,iBAAiB,KAAK,eAAe;oBACjD,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACnE,OAAO;gBACL,GAAG,eAAe,CAAC,WAAW,CAAC;gBAC/B,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,cAAc;gBACd,SAAS;aACV,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GACT,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK;YAC9C,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC;YAC3D,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO;YACL,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAE,eAAyB;YAClE,YAAY;YACZ,eAAe,EAAE,YAAY;iBAC1B,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;iBAC/C,GAAG,CACF,CAAC,WAAW,EAAE,EAAE,CACd,GAAG,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,YAAY,GAAG,CACzH;YACH,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;iBAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CAAC,IAAI,CACf,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;gBAClC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAC1E,CACF;iBACA,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;iBACtB,IAAI,EAAE;YACT,gBAAgB,EAAE,KAAK;YACvB,KAAK;SACN,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAA+B;QAC5C,IAAI,EAAE,8BAA8B;QACpC,aAAa,EAAE,sBAAsB;QACrC,eAAe,EAAE,wBAAwB;QACzC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,eAAe,CAAC;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;YACpC,KAAK,EAAE,KAAK,CAAC,YAAY;SAC1B,CAAC;QACF,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;QAC9B,KAAK;KACN,CAAC;IACF,OAAO,uBAAuB,CAAC,8BAA8B,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC"}

package/dist/services/operate/evidence.d.ts

@@ -0,0 +1,71 @@
+import { type ReadOnlyFetch } from './read-only-providers.js';
+import { type CollectedEvidenceItem, type EvidenceBudget, type OperatingDataGap, type OperatingEvidence, type OperatingEvidenceItem, type OperatingSensitivity, type OperatingWorkspaceManifest } from './types.js';
+export interface EvidenceCollectionInput {
+    projectRoot: string;
+    cycleId: string;
+    workspace: OperatingWorkspaceManifest;
+    providers: string[];
+    sensitivityCeiling: OperatingSensitivity;
+    budgets: EvidenceBudget;
+    localRoot?: string;
+    now?: Date;
+    /** Standard cycles may reuse an unchanged machine-local evidence snapshot. */
+    incremental?: boolean;
+    /** Actual runs persist the snapshot; dry-run remains write-free. */
+    persistIncremental?: boolean;
+    /** Evidence already cited by open findings, decisions, or outcomes. */
+    requiredEvidenceRefs?: string[];
+    /** Test seam for deterministic remote-provider fixtures. */
+    remote?: {
+        fetchImpl?: ReadOnlyFetch;
+        githubToken?: string;
+        linearToken?: string;
+    };
+}
+export declare function evidenceFingerprintItems(items: readonly OperatingEvidenceItem[]): Array<{
+    id: string;
+    digest: `sha256:${string}`;
+    sensitivity: OperatingSensitivity;
+}>;
+export declare function collectGitHubEvidence(input: {
+    projectRoot: string;
+    workspace: OperatingWorkspaceManifest;
+    now: Date;
+    deadline: number;
+    budgets: EvidenceBudget;
+    token?: string;
+    fetchImpl?: ReadOnlyFetch;
+}): Promise<{
+    items: CollectedEvidenceItem[];
+    truncated: boolean;
+}>;
+export declare function collectLinearEvidence(input: {
+    projectRoot: string;
+    now: Date;
+    deadline: number;
+    budgets: EvidenceBudget;
+    token?: string;
+    fetchImpl?: ReadOnlyFetch;
+    teamIds?: string[];
+}): Promise<{
+    items: CollectedEvidenceItem[];
+    truncated: boolean;
+}>;
+export declare function collectOperatingEvidence(input: EvidenceCollectionInput): Promise<OperatingEvidence>;
+/**
+ * Convert commercial numbers without reproducible query/window identity into
+ * governed gaps before any advisor can turn them into recommendations.
+ */
+export declare function unqualifiedCommercialEvidenceGaps(input: {
+    cycleId: string;
+    evidence: OperatingEvidence;
+    owner: string;
+    now: string;
+}): Promise<OperatingDataGap[]>;
+export declare function evidenceProjectionSources(evidence: OperatingEvidence): Array<{
+    id: string;
+    freshness: OperatingEvidenceItem['freshness'];
+    status: string;
+    itemCount: number;
+}>;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/services/operate/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/services/operate/evidence.ts"],"names":[],"mappings":"AAOA,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EAInB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EAEzB,KAAK,0BAA0B,EAGhC,MAAM,YAAY,CAAC;AAgCpB,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,0BAA0B,CAAC;IACtC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,oEAAoE;IACpE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,uEAAuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,4DAA4D;IAC5D,MAAM,CAAC,EAAE;QACP,SAAS,CAAC,EAAE,aAAa,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAMD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,qBAAqB,EAAE,GAAG,KAAK,CAAC;IACvF,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,oBAAoB,CAAC;CACnC,CAAC,CASD;AAoUD,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,0BAA0B,CAAC;IACtC,GAAG,EAAE,IAAI,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CA0KlE;AAoDD,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,IAAI,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CA0LlE;AAuPD,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAgK5B;AAED;;;GAGG;AACH,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAwC9B;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,KAAK,CAAC;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAaD"}