openplanr 1.14.4 → 1.15.1

package/dist/services/operate/interaction/charter-suggestions.js

@@ -0,0 +1,104 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { canonicalDigest } from '../canonical.js';
+import { inspectEmbeddedInstructions, normalizeUntrustedText, redactSensitiveText, } from '../redaction.js';
+const ENGINE_VERSION = '1.0.0';
+const MAX_METADATA_BYTES = 64 * 1024;
+const MAX_SUGGESTION_LENGTH = 1_000;
+async function readBoundedJson(projectRoot, relativePath) {
+    const target = path.join(projectRoot, relativePath);
+    const bytes = await readFile(target).catch(() => null);
+    if (!bytes || bytes.byteLength > MAX_METADATA_BYTES)
+        return null;
+    try {
+        const parsed = JSON.parse(bytes.toString('utf8'));
+        return parsed && typeof parsed === 'object' && !Array.isArray(parsed)
+            ? parsed
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function safeMetadataValue(value) {
+    if (typeof value !== 'string')
+        return null;
+    const normalized = normalizeUntrustedText(value).replace(/\s+/g, ' ').trim();
+    if (!normalized || normalized.length > MAX_SUGGESTION_LENGTH)
+        return null;
+    const inspection = inspectEmbeddedInstructions(normalized);
+    if (inspection.annotations.length > 0 || inspection.quarantined)
+        return null;
+    try {
+        const redacted = redactSensitiveText(normalized);
+        return redacted.redactions.length === 0 ? redacted.value : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Produce bounded, provider-free charter drafts from local metadata.
+ *
+ * Only purpose is eligible at launch. Product stage, commercial facts,
+ * customers, goals, metrics, guardrails, and unknowns remain human-owned.
+ */
+export async function buildOperatingCharterSuggestions(input) {
+    const [packageJson, planrConfig] = await Promise.all([
+        readBoundedJson(input.projectRoot, 'package.json'),
+        readBoundedJson(input.projectRoot, '.planr/config.json'),
+    ]);
+    const evidence = {
+        packageDescription: safeMetadataValue(packageJson?.description),
+        projectName: safeMetadataValue(planrConfig?.projectName),
+    };
+    const evidenceDigest = canonicalDigest({
+        engineVersion: ENGINE_VERSION,
+        evidence,
+    });
+    const suggestions = [];
+    if (evidence.packageDescription) {
+        suggestions.push({
+            field: 'purpose',
+            value: evidence.packageDescription,
+            draft: true,
+            confidence: 'high',
+            citation: {
+                source: 'package-json',
+                location: 'package.json#description',
+                digest: canonicalDigest(evidence.packageDescription),
+            },
+            engineVersion: ENGINE_VERSION,
+        });
+    }
+    else if (evidence.projectName) {
+        suggestions.push({
+            field: 'purpose',
+            value: `Operate ${evidence.projectName} with explicit, evidence-cited decisions.`,
+            draft: true,
+            confidence: 'medium',
+            citation: {
+                source: 'planr-config',
+                location: '.planr/config.json#projectName',
+                digest: canonicalDigest(evidence.projectName),
+            },
+            engineVersion: ENGINE_VERSION,
+        });
+    }
+    const suggested = new Set(suggestions.map((entry) => entry.field));
+    return {
+        evidenceDigest,
+        suggestions,
+        gaps: [
+            'purpose',
+            'stage',
+            'businessModel',
+            'idealCustomer',
+            'goals',
+            'successMetrics',
+            'guardrails',
+            'knownUnknowns',
+        ].filter((field) => !suggested.has(field)),
+    };
+}
+//# sourceMappingURL=charter-suggestions.js.map

package/dist/services/operate/interaction/charter-suggestions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"charter-suggestions.js","sourceRoot":"","sources":["../../../../src/services/operate/interaction/charter-suggestions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AA8BpC,KAAK,UAAU,eAAe,CAC5B,WAAmB,EACnB,YAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QAC7D,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,UAAU,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAEtD;IACC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC;QAClD,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG;QACf,kBAAkB,EAAE,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC;QAC/D,WAAW,EAAE,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC;KACzD,CAAC;IACF,MAAM,cAAc,GAAG,eAAe,CAAC;QACrC,aAAa,EAAE,cAAc;QAC7B,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,WAAW,GAAiC,EAAE,CAAC;IACrD,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAChC,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,QAAQ,CAAC,kBAAkB;YAClC,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE;gBACR,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,0BAA0B;gBACpC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC;aACrD;YACD,aAAa,EAAE,cAAc;SAC9B,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChC,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,WAAW,QAAQ,CAAC,WAAW,2CAA2C;YACjF,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE;gBACR,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,gCAAgC;gBAC1C,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC;aAC9C;YACD,aAAa,EAAE,cAAc;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,OAAO;QACL,cAAc;QACd,WAAW;QACX,IAAI,EAAE;YACJ,SAAS;YACT,OAAO;YACP,eAAe;YACf,eAAe;YACf,OAAO;YACP,gBAAgB;YAChB,YAAY;YACZ,eAAe;SAChB,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAkB,CAAC,CACF;KAC9C,CAAC;AACJ,CAAC"}

package/dist/services/operate/interaction/confirmation-service.d.ts

@@ -0,0 +1,30 @@
+import { type GuidedConfirmation, type OperatingActionEffect, type OperatingEventHead } from '../types.js';
+export interface OperatingConfirmationMaterial {
+    actionId: string;
+    sessionId: string;
+    command: string;
+    effect: Exclude<OperatingActionEffect, 'read-only'>;
+    providerUse: boolean;
+    confirmationScope: string;
+    projectIdentity: `sha256:${string}`;
+    projectHead: `sha256:${string}`;
+    configHead: `sha256:${string}`;
+    eventHead?: OperatingEventHead | null;
+    evidenceHead?: `sha256:${string}` | null;
+    providerPolicy?: `sha256:${string}` | null;
+    arguments?: string[];
+    destinations?: string[];
+    writes?: string[];
+    createdAt?: string;
+    expiresAt?: string;
+}
+export declare function operatingConfirmationDigest(material: OperatingConfirmationMaterial): `sha256:${string}`;
+export declare function createOperatingConfirmation(material: OperatingConfirmationMaterial): GuidedConfirmation;
+export declare function assertOperatingConfirmation(input: {
+    expected: GuidedConfirmation;
+    actionId: string;
+    confirmationDigest?: string;
+    confirmed: boolean;
+    now?: Date;
+}): GuidedConfirmation;
+//# sourceMappingURL=confirmation-service.d.ts.map

package/dist/services/operate/interaction/confirmation-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation-service.d.ts","sourceRoot":"","sources":["../../../../src/services/operate/interaction/confirmation-service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,kBAAkB,EAEvB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;IACpD,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,UAAU,MAAM,EAAE,CAAC;IACpC,WAAW,EAAE,UAAU,MAAM,EAAE,CAAC;IAChC,UAAU,EAAE,UAAU,MAAM,EAAE,CAAC;IAC/B,SAAS,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACtC,YAAY,CAAC,EAAE,UAAU,MAAM,EAAE,GAAG,IAAI,CAAC;IACzC,cAAc,CAAC,EAAE,UAAU,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,6BAA6B,GACtC,UAAU,MAAM,EAAE,CAkBpB;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,6BAA6B,GACtC,kBAAkB,CA4BpB;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,kBAAkB,CAkCrB"}

package/dist/services/operate/interaction/confirmation-service.js

@@ -0,0 +1,78 @@
+import { canonicalDigest } from '../canonical.js';
+import { OperateError, } from '../types.js';
+function sorted(values = []) {
+    return [...new Set(values)].sort();
+}
+export function operatingConfirmationDigest(material) {
+    return canonicalDigest({
+        actionId: material.actionId,
+        sessionId: material.sessionId,
+        command: material.command,
+        effect: material.effect,
+        providerUse: material.providerUse,
+        confirmationScope: material.confirmationScope,
+        projectIdentity: material.projectIdentity,
+        projectHead: material.projectHead,
+        configHead: material.configHead,
+        eventHead: material.eventHead ?? null,
+        evidenceHead: material.evidenceHead ?? null,
+        providerPolicy: material.providerPolicy ?? null,
+        arguments: [...(material.arguments ?? [])],
+        destinations: sorted(material.destinations),
+        writes: sorted(material.writes),
+    });
+}
+export function createOperatingConfirmation(material) {
+    const createdAt = material.createdAt ?? new Date().toISOString();
+    const expiresAt = material.expiresAt ?? new Date(Date.parse(createdAt) + 30 * 60 * 1_000).toISOString();
+    const confirmationDigest = operatingConfirmationDigest(material);
+    return {
+        kind: 'guided-confirmation',
+        schemaVersion: '1.0.0',
+        protocolVersion: '1.2.0',
+        confirmationId: `GIC-${confirmationDigest.slice('sha256:'.length, 'sha256:'.length + 24)}`,
+        state: 'preview',
+        actionId: material.actionId,
+        sessionId: material.sessionId,
+        command: material.command,
+        effect: material.effect,
+        providerUse: material.providerUse,
+        confirmationScope: material.confirmationScope,
+        confirmationDigest,
+        projectIdentity: material.projectIdentity,
+        projectHead: material.projectHead,
+        configHead: material.configHead,
+        eventHead: material.eventHead ?? null,
+        arguments: [...(material.arguments ?? [])],
+        destinations: sorted(material.destinations),
+        writes: sorted(material.writes),
+        createdAt,
+        expiresAt,
+    };
+}
+export function assertOperatingConfirmation(input) {
+    const now = input.now ?? new Date();
+    if (!input.confirmed ||
+        input.actionId !== input.expected.actionId ||
+        input.confirmationDigest !== input.expected.confirmationDigest) {
+        throw new OperateError('E_OPERATE_ROUTE_CONFIRMATION_REQUIRED', `Action ${input.expected.actionId} requires its exact named confirmation digest.`, {
+            actionId: input.expected.actionId,
+            confirmationDigest: input.expected.confirmationDigest,
+            previewCommand: input.expected.command.replace(/\s+--yes\b/g, ''),
+        });
+    }
+    if (now.getTime() >= Date.parse(input.expected.expiresAt)) {
+        throw new OperateError('E_OPERATE_ROUTE_DRIFT', `Confirmation for ${input.expected.actionId} expired; preview the action again.`, {
+            actionId: input.expected.actionId,
+            changedDimensions: ['expiry'],
+            previewCommand: input.expected.command.replace(/\s+--yes\b/g, ''),
+        });
+    }
+    return {
+        ...input.expected,
+        state: 'confirmed',
+        confirmedAt: now.toISOString(),
+        confirmedBy: 'explicit-cli-authority',
+    };
+}
+//# sourceMappingURL=confirmation-service.js.map

package/dist/services/operate/interaction/confirmation-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation-service.js","sourceRoot":"","sources":["../../../../src/services/operate/interaction/confirmation-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAEL,YAAY,GAGb,MAAM,aAAa,CAAC;AAsBrB,SAAS,MAAM,CAAC,SAA4B,EAAE;IAC5C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAuC;IAEvC,OAAO,eAAe,CAAC;QACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;QACrC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,IAAI;QAC3C,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,IAAI;QAC/C,SAAS,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC1C,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3C,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAuC;IAEvC,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,SAAS,GACb,QAAQ,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACxF,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IACjE,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,aAAa,EAAE,OAAO;QACtB,eAAe,EAAE,OAAO;QACxB,cAAc,EAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE;QAC1F,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,kBAAkB;QAClB,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;QACrC,SAAS,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC1C,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3C,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/B,SAAS;QACT,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAM3C;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,IACE,CAAC,KAAK,CAAC,SAAS;QAChB,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,QAAQ;QAC1C,KAAK,CAAC,kBAAkB,KAAK,KAAK,CAAC,QAAQ,CAAC,kBAAkB,EAC9D,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,uCAAuC,EACvC,UAAU,KAAK,CAAC,QAAQ,CAAC,QAAQ,gDAAgD,EACjF;YACE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;YACjC,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC,kBAAkB;YACrD,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAClE,CACF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,oBAAoB,KAAK,CAAC,QAAQ,CAAC,QAAQ,qCAAqC,EAChF;YACE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;YACjC,iBAAiB,EAAE,CAAC,QAAQ,CAAC;YAC7B,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAClE,CACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,KAAK,CAAC,QAAQ;QACjB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;QAC9B,WAAW,EAAE,wBAAwB;KACtC,CAAC;AACJ,CAAC"}

package/dist/services/operate/interaction/initialization-replay.d.ts

@@ -0,0 +1,9 @@
+import { type OperatingInitAnswers } from '../types.js';
+/**
+ * Encode the already-reviewed, non-secret initialization answers into a
+ * shell-safe replay token. The confirmation digest still provides authority
+ * and detects any token modification before a write.
+ */
+export declare function encodeOperatingInitializationReplay(answers: OperatingInitAnswers): string;
+export declare function decodeOperatingInitializationReplay(token: string): OperatingInitAnswers;
+//# sourceMappingURL=initialization-replay.d.ts.map

package/dist/services/operate/interaction/initialization-replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialization-replay.d.ts","sourceRoot":"","sources":["../../../../src/services/operate/interaction/initialization-replay.ts"],"names":[],"mappings":"AAIA,OAAO,EAAgB,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAQtE;;;;GAIG;AACH,wBAAgB,mCAAmC,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,CAiBzF;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAuCvF"}

package/dist/services/operate/interaction/initialization-replay.js

@@ -0,0 +1,64 @@
+import { deflateRawSync, inflateRawSync } from 'node:zlib';
+import { canonicalize } from '../canonical.js';
+import { normalizeOperatingInitializationAnswers } from '../config.js';
+import { parseStrictJson } from '../evidence-import.js';
+import { OperateError } from '../types.js';
+const MAX_REPLAY_BYTES = 64 * 1024;
+// Leave headroom below the Windows 32,767-character command-line ceiling for
+// the command, timestamp, confirmation digest, and JSON flags.
+const MAX_TOKEN_LENGTH = 24 * 1024;
+const BASE64URL = /^[A-Za-z0-9_-]+$/;
+/**
+ * Encode the already-reviewed, non-secret initialization answers into a
+ * shell-safe replay token. The confirmation digest still provides authority
+ * and detects any token modification before a write.
+ */
+export function encodeOperatingInitializationReplay(answers) {
+    const normalized = normalizeOperatingInitializationAnswers(answers);
+    const raw = Buffer.from(canonicalize(normalized), 'utf8');
+    if (raw.byteLength > MAX_REPLAY_BYTES) {
+        throw new OperateError('E_OPERATE_INPUT_TOO_LARGE', `Initialization answers exceed the ${MAX_REPLAY_BYTES}-byte replay limit.`);
+    }
+    const token = deflateRawSync(raw, { level: 9 }).toString('base64url');
+    if (token.length > MAX_TOKEN_LENGTH) {
+        throw new OperateError('E_OPERATE_INPUT_TOO_LARGE', 'Encoded initialization replay token exceeds the supported command limit.');
+    }
+    return token;
+}
+export function decodeOperatingInitializationReplay(token) {
+    if (token.length === 0 || token.length > MAX_TOKEN_LENGTH || !BASE64URL.test(token)) {
+        throw new OperateError(token.length > MAX_TOKEN_LENGTH ? 'E_OPERATE_INPUT_TOO_LARGE' : 'E_OPERATE_SESSION_INVALID', 'Initialization replay token is malformed or exceeds the supported limit.');
+    }
+    try {
+        const compressed = Buffer.from(token, 'base64url');
+        if (compressed.toString('base64url') !== token) {
+            throw new Error('non-canonical base64url');
+        }
+        const raw = inflateRawSync(compressed, {
+            maxOutputLength: MAX_REPLAY_BYTES,
+        }).toString('utf8');
+        const parsed = parseStrictJson(raw, {
+            maxBytes: MAX_REPLAY_BYTES,
+            maxDepth: 12,
+            maxScalars: 512,
+            maxStringLength: 4096,
+        });
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            throw new Error('replay payload is not an object');
+        }
+        const normalized = normalizeOperatingInitializationAnswers(parsed);
+        // Raw DEFLATE decoders may accept and ignore trailing bytes. Re-encode the
+        // validated payload so every accepted token has exactly one canonical byte
+        // representation and appended data cannot survive as a valid replay.
+        if (encodeOperatingInitializationReplay(normalized) !== token) {
+            throw new Error('non-canonical replay token');
+        }
+        return normalized;
+    }
+    catch (error) {
+        if (error instanceof OperateError)
+            throw error;
+        throw new OperateError('E_OPERATE_SESSION_INVALID', 'Initialization replay token is invalid or corrupted.');
+    }
+}
+//# sourceMappingURL=initialization-replay.js.map

package/dist/services/operate/interaction/initialization-replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialization-replay.js","sourceRoot":"","sources":["../../../../src/services/operate/interaction/initialization-replay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,uCAAuC,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAA6B,MAAM,aAAa,CAAC;AAEtE,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,6EAA6E;AAC7E,+DAA+D;AAC/D,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CAAC,OAA6B;IAC/E,MAAM,UAAU,GAAG,uCAAuC,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,GAAG,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;QACtC,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,qCAAqC,gBAAgB,qBAAqB,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACpC,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,KAAa;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,YAAY,CACpB,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,2BAA2B,EAC3F,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,UAAU,EAAE;YACrC,eAAe,EAAE,gBAAgB;SAClC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE;YAClC,QAAQ,EAAE,gBAAgB;YAC1B,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,GAAG;YACf,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,UAAU,GAAG,uCAAuC,CAAC,MAA8B,CAAC,CAAC;QAC3F,2EAA2E;QAC3E,2EAA2E;QAC3E,qEAAqE;QACrE,IAAI,mCAAmC,CAAC,UAAU,CAAC,KAAK,KAAK,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,sDAAsD,CACvD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/services/operate/interaction/question-engine.d.ts

@@ -0,0 +1,39 @@
+import { type GuidedQuestion, type GuidedQuestionnaire, type GuidedQuestionValue, type OperatingInitAnswers } from '../types.js';
+import { type OperatingQuestionContext } from './question-registry.js';
+export interface OperatingQuestionEngineContext extends OperatingQuestionContext {
+    projectRoot: string;
+    projectIdentity?: `sha256:${string}`;
+    runtime?: string;
+    interaction?: 'native' | 'chat' | 'terminal' | 'none';
+    projectHead?: `sha256:${string}`;
+    configHead?: `sha256:${string}`;
+    now?: string;
+}
+export type OperatingQuestionEngineResult = {
+    status: 'input-required';
+    stage: 'foundation' | 'product-charter';
+    answers: OperatingInitAnswers;
+    questions: GuidedQuestion[];
+} | {
+    status: 'preview-ready';
+    stage: 'review';
+    answers: OperatingInitAnswers;
+    questions: GuidedQuestion[];
+};
+export declare function operatingInitAnswersFromOptions(options: Record<string, unknown>): OperatingInitAnswers;
+export declare function mergeOperatingInitAnswersIntoOptions(options: Record<string, unknown>, answers: OperatingInitAnswers): Record<string, unknown>;
+export declare function evaluateOperatingInitQuestions(input: {
+    answers?: OperatingInitAnswers;
+    context: OperatingQuestionEngineContext;
+    requireCharter?: boolean;
+}): Promise<OperatingQuestionEngineResult>;
+export declare function applyOperatingInitAnswer(answers: OperatingInitAnswers, context: OperatingQuestionContext, questionId: string, value: GuidedQuestionValue): OperatingInitAnswers;
+export declare function createOperatingInitQuestionnaire(input: {
+    context: OperatingQuestionEngineContext;
+    questions: GuidedQuestion[];
+    stage: 'foundation' | 'product-charter' | 'review';
+    sessionId?: string;
+    createdAt?: string;
+    expiresAt?: string;
+}): Promise<GuidedQuestionnaire>;
+//# sourceMappingURL=question-engine.d.ts.map

package/dist/services/operate/interaction/question-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"question-engine.d.ts","sourceRoot":"","sources":["../../../../src/services/operate/interaction/question-engine.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EAExB,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAErB,OAAO,EAGL,KAAK,wBAAwB,EAE9B,MAAM,wBAAwB,CAAC;AAIhC,MAAM,WAAW,8BAA+B,SAAQ,wBAAwB;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IACtD,WAAW,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;IACjC,UAAU,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,6BAA6B,GACrC;IACE,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,YAAY,GAAG,iBAAiB,CAAC;IACxC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B,GACD;IACE,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B,CAAC;AAEN,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,oBAAoB,CAwDtB;AAED,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,EAAE,oBAAoB,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUzB;AA8GD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,8BAA8B,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CA6DzC;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,wBAAwB,EACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,mBAAmB,GACzB,oBAAoB,CAWtB;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,OAAO,EAAE,8BAA8B,CAAC;IACxC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,KAAK,EAAE,YAAY,GAAG,iBAAiB,GAAG,QAAQ,CAAC;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA2E/B"}

package/dist/services/operate/interaction/question-engine.js

@@ -0,0 +1,277 @@
+import path from 'node:path';
+import { resolveGuidedInteractionValidators } from '../../pipeline-package-service.js';
+import { canonicalDigest } from '../canonical.js';
+import { OperateError, } from '../types.js';
+import { buildOperatingCharterSuggestions } from './charter-suggestions.js';
+import { operatingInitQuestionRegistry, } from './question-registry.js';
+const STAGES = ['foundation', 'product-charter', 'review'];
+export function operatingInitAnswersFromOptions(options) {
+    const list = (value) => Array.isArray(value)
+        ? value
+            .map(String)
+            .map((entry) => entry.trim())
+            .filter(Boolean)
+        : undefined;
+    const charter = options.charter && typeof options.charter === 'object' && !Array.isArray(options.charter)
+        ? options.charter
+        : {
+            ...(typeof options.purpose === 'string' ? { purpose: options.purpose } : {}),
+            ...(typeof options.productStage === 'string' ? { stage: options.productStage } : {}),
+            ...(typeof options.businessModel === 'string'
+                ? { businessModel: options.businessModel }
+                : {}),
+            ...(typeof options.idealCustomer === 'string'
+                ? { idealCustomer: options.idealCustomer }
+                : {}),
+            ...(list(options.goal) ? { goals: list(options.goal) } : {}),
+            ...(list(options.successMetric) ? { successMetrics: list(options.successMetric) } : {}),
+            ...(list(options.guardrail) ? { guardrails: list(options.guardrail) } : {}),
+            ...(list(options.knownUnknown) ? { knownUnknowns: list(options.knownUnknown) } : {}),
+        };
+    return {
+        ...(typeof options.profile === 'string'
+            ? { profile: options.profile }
+            : {}),
+        ...(typeof options.profileFile === 'string' ? { profileFile: options.profileFile } : {}),
+        ...(typeof options.decisionOwner === 'string' ? { decisionOwner: options.decisionOwner } : {}),
+        ...(typeof options.planningEngine === 'string'
+            ? { planningEngine: options.planningEngine }
+            : {}),
+        ...(typeof options.runtime === 'string'
+            ? { runtime: options.runtime }
+            : {}),
+        ...(typeof options.cadence === 'string'
+            ? { cadence: options.cadence }
+            : {}),
+        ...(typeof options.timezone === 'string' ? { timezone: options.timezone } : {}),
+        ...(typeof options.sensitivityCeiling === 'string'
+            ? {
+                sensitivityCeiling: options.sensitivityCeiling,
+            }
+            : {}),
+        ...(list(options.sources ?? options.source)
+            ? { sources: list(options.sources ?? options.source) }
+            : {}),
+        ...(list(options.evidenceFile) ? { evidenceFiles: list(options.evidenceFile) } : {}),
+        ...(list(options.components ?? options.component)
+            ? { componentRoots: list(options.components ?? options.component) }
+            : {}),
+        ...(Object.keys(charter ?? {}).length > 0 ? { charter } : {}),
+    };
+}
+export function mergeOperatingInitAnswersIntoOptions(options, answers) {
+    return {
+        ...options,
+        ...answers,
+        ...(answers.sources === undefined ? {} : { source: answers.sources, sources: answers.sources }),
+        ...(answers.evidenceFiles === undefined ? {} : { evidenceFile: answers.evidenceFiles }),
+        ...(answers.componentRoots === undefined
+            ? {}
+            : { component: answers.componentRoots, components: answers.componentRoots }),
+    };
+}
+function answered(value) {
+    if (typeof value === 'string')
+        return value.trim().length > 0;
+    if (Array.isArray(value))
+        return value.length > 0;
+    return value !== undefined;
+}
+function conditionVisible(definition, definitions, answers) {
+    return (definition.question.visibleWhen ?? []).every((condition) => {
+        const dependency = definitions.find((candidate) => candidate.question.questionId === condition.questionId);
+        const actual = dependency?.read(answers);
+        switch (condition.operator) {
+            case 'answered':
+                return answered(actual);
+            case 'not-answered':
+                return !answered(actual);
+            case 'equals':
+                return actual === condition.value;
+            case 'not-equals':
+                return actual !== condition.value;
+            case 'contains':
+                return Array.isArray(actual)
+                    ? actual.includes(String(condition.value))
+                    : String(actual ?? '').includes(String(condition.value));
+            case 'not-contains':
+                return Array.isArray(actual)
+                    ? !actual.includes(String(condition.value))
+                    : !String(actual ?? '').includes(String(condition.value));
+        }
+        return false;
+    });
+}
+function normalizeValue(question, value) {
+    const normalized = Array.isArray(value)
+        ? [...new Set(value.map((entry) => entry.trim()).filter(Boolean))]
+        : typeof value === 'string'
+            ? value.trim()
+            : value;
+    const choices = question.choices?.map((choice) => choice.id);
+    if (choices &&
+        (Array.isArray(normalized)
+            ? normalized.some((entry) => !choices.includes(entry))
+            : !choices.includes(String(normalized)))) {
+        throw new OperateError('E_OPERATE_QUESTIONNAIRE_INVALID', `${question.label} contains an unsupported choice.`);
+    }
+    const length = typeof normalized === 'string' ? normalized.length : undefined;
+    const itemCount = Array.isArray(normalized) ? normalized.length : undefined;
+    if ((length !== undefined &&
+        ((question.validation?.minLength !== undefined && length < question.validation.minLength) ||
+            (question.validation?.maxLength !== undefined &&
+                length > question.validation.maxLength))) ||
+        (itemCount !== undefined &&
+            ((question.validation?.minItems !== undefined && itemCount < question.validation.minItems) ||
+                (question.validation?.maxItems !== undefined && itemCount > question.validation.maxItems)))) {
+        throw new OperateError('E_OPERATE_QUESTIONNAIRE_INVALID', `${question.label} does not satisfy its bounded validation rules.`);
+    }
+    return normalized;
+}
+function validateSemanticAnswers(answers, context) {
+    if (answers.timezone) {
+        try {
+            new Intl.DateTimeFormat('en', { timeZone: answers.timezone }).format(new Date(0));
+        }
+        catch {
+            throw new OperateError('E_OPERATE_QUESTIONNAIRE_INVALID', `Invalid IANA timezone: ${answers.timezone}.`);
+        }
+    }
+    const unavailable = (answers.sources ?? []).filter((source) => !context.availableSources.includes(source));
+    if (unavailable.length > 0) {
+        throw new OperateError('E_OPERATE_QUESTIONNAIRE_INVALID', `Evidence source is unavailable: ${unavailable.join(', ')}. Configure it or leave it disabled.`);
+    }
+    for (const candidate of answers.evidenceFiles ?? []) {
+        if (path.isAbsolute(candidate) || candidate.split(/[\\/]+/).includes('..')) {
+            throw new OperateError('E_OPERATE_QUESTIONNAIRE_INVALID', 'Evidence import paths must remain relative to a configured workspace root.');
+        }
+    }
+}
+export async function evaluateOperatingInitQuestions(input) {
+    const definitions = operatingInitQuestionRegistry(input.context);
+    let answers = structuredClone(input.answers ?? {});
+    for (const definition of definitions) {
+        const current = definition.read(answers);
+        if (current !== undefined && answered(current)) {
+            answers = definition.write(answers, normalizeValue(definition.question, current));
+        }
+    }
+    validateSemanticAnswers(answers, input.context);
+    for (const stage of STAGES.slice(0, input.requireCharter === false ? 1 : 2)) {
+        const visible = definitions.filter((definition) => definition.stage === stage && conditionVisible(definition, definitions, answers));
+        const missing = visible.filter((definition) => definition.question.type !== 'informational' &&
+            definition.question.required &&
+            !answered(definition.read(answers)));
+        if (missing.length > 0) {
+            const suggestions = stage === 'product-charter'
+                ? await buildOperatingCharterSuggestions({ projectRoot: input.context.projectRoot })
+                : null;
+            return {
+                status: 'input-required',
+                stage: stage,
+                answers,
+                questions: visible
+                    .filter((definition) => !answered(definition.read(answers)))
+                    .map((definition) => {
+                    const question = structuredClone(definition.question);
+                    const suggestion = suggestions?.suggestions.find((entry) => entry.field === question.questionId);
+                    if (!suggestion)
+                        return question;
+                    return {
+                        ...question,
+                        valueSemantics: 'suggestion',
+                        suggestedValue: suggestion.value,
+                        suggestionReason: [
+                            `Draft from ${suggestion.citation.location}`,
+                            `${suggestion.confidence} confidence`,
+                            `evidence ${suggestion.citation.digest}`,
+                            `rules ${suggestion.engineVersion}`,
+                        ].join('; '),
+                    };
+                }),
+            };
+        }
+    }
+    return {
+        status: 'preview-ready',
+        stage: 'review',
+        answers,
+        questions: definitions
+            .filter((definition) => definition.stage === 'review')
+            .map((definition) => structuredClone(definition.question)),
+    };
+}
+export function applyOperatingInitAnswer(answers, context, questionId, value) {
+    const definition = operatingInitQuestionRegistry(context).find((candidate) => candidate.question.questionId === questionId);
+    if (!definition) {
+        throw new OperateError('E_OPERATE_QUESTIONNAIRE_INVALID', `Unknown Operating Board question: ${questionId}.`);
+    }
+    return definition.write(answers, normalizeValue(definition.question, value));
+}
+export async function createOperatingInitQuestionnaire(input) {
+    const createdAt = input.createdAt ?? input.context.now ?? new Date().toISOString();
+    const expiresAt = input.expiresAt ?? new Date(new Date(createdAt).getTime() + 24 * 60 * 60 * 1000).toISOString();
+    const projectIdentity = input.context.projectIdentity ??
+        canonicalDigest({
+            projectRoot: path.resolve(input.context.projectRoot),
+        });
+    const projectHead = input.context.projectHead ?? canonicalDigest({ projectIdentity });
+    const configHead = input.context.configHead ?? canonicalDigest({ config: null });
+    const seed = {
+        command: 'operate.init',
+        projectIdentity,
+        projectHead,
+        configHead,
+        stage: input.stage,
+        questions: input.questions,
+        createdAt,
+        expiresAt,
+    };
+    const sessionId = input.sessionId ??
+        `GIS-${canonicalDigest(seed).slice('sha256:'.length, 'sha256:'.length + 24)}`;
+    const withoutDigest = {
+        kind: 'guided-questionnaire',
+        schemaVersion: '1.0.0',
+        protocolVersion: '1.2.0',
+        sessionId,
+        questionnaireVersion: '1.0.0',
+        command: 'operate.init',
+        projectIdentity,
+        projectHead,
+        configHead,
+        adapter: {
+            runtime: input.context.runtime ?? 'unknown',
+            version: 'detected',
+            interaction: input.context.interaction ?? 'none',
+        },
+        stage: input.stage,
+        step: STAGES.indexOf(input.stage) + 1,
+        totalSteps: 3,
+        title: 'Configure the Operating Board',
+        description: input.stage === 'review'
+            ? 'Review exact writes and boundaries before applying initialization.'
+            : 'Answer only the governance questions in this stage.',
+        questions: input.questions,
+        createdAt,
+        expiresAt,
+    };
+    const questionnaire = {
+        ...withoutDigest,
+        digest: canonicalDigest(withoutDigest),
+    };
+    let validators;
+    try {
+        validators = await resolveGuidedInteractionValidators();
+    }
+    catch (error) {
+        throw new OperateError(error instanceof Error && error.name === 'E_PIPELINE_NOT_INSTALLED'
+            ? 'E_PIPELINE_NOT_INSTALLED'
+            : 'E_PIPELINE_VERSION_INCOMPATIBLE', error instanceof Error ? error.message : 'Compatible guided validators are unavailable.');
+    }
+    const errors = validators.validateGuidedQuestionnaire(questionnaire);
+    if (errors.length > 0) {
+        throw new OperateError('E_OPERATE_QUESTIONNAIRE_INVALID', 'The generated Operating Board questionnaire did not satisfy Protocol v1.2.', { validationErrors: errors });
+    }
+    return questionnaire;
+}
+//# sourceMappingURL=question-engine.js.map