openplanr 1.18.0 → 1.20.0

package/dist/services/operate/evidence-classifications.d.ts

@@ -1,59 +0,0 @@
-export declare function classifyEvidenceDiagnostic(input: {
-    projectRoot: string;
-    candidateId: string;
-    status: 'false-positive' | 'confirmed-secret';
-    reason: string;
-    classifiedBy: string;
-    confirmationDigest?: string;
-    confirmed: boolean;
-    localRoot?: string;
-    now?: Date;
-}): Promise<{
-    state: string;
-    candidateId: string;
-    action: import("./types.js").StructuredOperatingAction;
-    confirmation: import("./types.js").GuidedConfirmation | null;
-    valueDisclosed: boolean;
-    diagnostic?: undefined;
-} | {
-    state: string;
-    diagnostic: {
-        classification: {
-            status: "false-positive" | "confirmed-secret";
-            ruleId: string;
-            contentDigest: `sha256:${string}`;
-            projectHead: `sha256:${string}`;
-            reason: string;
-            confirmationDigest: `sha256:${string}`;
-            classifiedAt: string;
-            classifiedBy: string;
-        };
-        kind: "evidence-diagnostic";
-        schemaVersion: "1.0.0";
-        protocolVersion: "1.2.0";
-        candidateId: string;
-        source: "repository" | "planr" | "git" | "import-json" | "import-csv" | "github" | "linear";
-        componentId: string;
-        location?: string;
-        line?: number;
-        ruleId: string;
-        category: "assignment" | "known-token" | "authorization" | "private-key" | "jwt" | "credential-url" | "structured-secret";
-        contentDigest: `sha256:${string}`;
-        projectHead: `sha256:${string}`;
-        valueDisclosed: false;
-        actions: import("./types.js").StructuredOperatingAction[];
-    };
-    candidateId?: undefined;
-    action?: undefined;
-    confirmation?: undefined;
-    valueDisclosed?: undefined;
-}>;
-export declare function purgeStaleEvidenceClassifications(input: {
-    projectRoot: string;
-    localRoot?: string;
-    purge?: boolean;
-}): Promise<{
-    stale: number;
-    purged: number;
-}>;
-//# sourceMappingURL=evidence-classifications.d.ts.map

package/dist/services/operate/evidence-classifications.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-classifications.d.ts","sourceRoot":"","sources":["../../../src/services/operate/evidence-classifications.ts"],"names":[],"mappings":"AAuBA,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,gBAAgB,GAAG,kBAAkB,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkHA;AAED,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB7C"}

package/dist/services/operate/evidence-classifications.js

@@ -1,132 +0,0 @@
-import { appendFile, mkdir } from 'node:fs/promises';
-import path from 'node:path';
-import { canonicalDigest, canonicalize } from './canonical.js';
-import { listEvidenceDiagnostics, readEvidenceDiagnostic, writeEvidenceDiagnostic, } from './evidence-diagnostics.js';
-import { createOperatingAction } from './interaction/action-service.js';
-import { assertOperatingConfirmation } from './interaction/confirmation-service.js';
-import { currentGuidedSessionBindings } from './interaction/session-service.js';
-import { redactSensitiveText } from './redaction.js';
-import { OperateError } from './types.js';
-import { resolveOperatingPaths } from './workspace.js';
-const HARD_BLOCK_CATEGORIES = new Set([
-    'known-token',
-    'private-key',
-    'jwt',
-    'authorization',
-    'credential-url',
-]);
-export async function classifyEvidenceDiagnostic(input) {
-    const diagnostic = await readEvidenceDiagnostic(input);
-    const bindings = await currentGuidedSessionBindings(input.projectRoot);
-    if (bindings.projectHead !== diagnostic.projectHead) {
-        throw new OperateError('E_OPERATE_ROUTE_DRIFT', 'The project head changed after evidence diagnosis.', { changedDimensions: ['projectHead'], candidateId: diagnostic.candidateId });
-    }
-    if (input.status === 'false-positive' && HARD_BLOCK_CATEGORIES.has(diagnostic.category)) {
-        throw new OperateError('E_OPERATE_SECRET_DETECTED', 'Known credential, authorization, private-key, JWT, and credential-URL signatures cannot be classified as false positives.', {
-            candidateId: diagnostic.candidateId,
-            ruleId: diagnostic.ruleId,
-            category: diagnostic.category,
-            valueDisclosed: false,
-        });
-    }
-    const reason = input.reason.replace(/\s+/g, ' ').trim();
-    if (!reason || reason.length > 1_000) {
-        throw new OperateError('E_OPERATE_CONFIG_INVALID', 'Evidence classification requires a bounded reason.');
-    }
-    const sanitizedReason = redactSensitiveText(reason);
-    if (sanitizedReason.redactions.length > 0) {
-        throw new OperateError('E_OPERATE_CONFIG_INVALID', 'Evidence classification reasons cannot contain sensitive material.');
-    }
-    const created = await createOperatingAction({
-        id: 'operate.evidence.classify',
-        label: input.status === 'false-positive'
-            ? 'Classify this exact candidate as a false positive'
-            : 'Confirm that this candidate requires source remediation',
-        command: `planr operate evidence classify ${diagnostic.candidateId}`,
-        effect: 'machine-local-write',
-        confirmation: {
-            sessionId: `GIS-evidence-${diagnostic.candidateId.slice('EVC-'.length)}`,
-            confirmationScope: `operate.evidence.classify:${diagnostic.candidateId}:${input.status}`,
-            projectIdentity: bindings.projectIdentity,
-            projectHead: bindings.projectHead,
-            configHead: bindings.configHead,
-            eventHead: null,
-            arguments: [
-                input.status,
-                canonicalDigest(reason),
-                diagnostic.ruleId,
-                diagnostic.contentDigest,
-            ],
-            destinations: [],
-            writes: [`evidence-diagnostics/${diagnostic.candidateId}.json`],
-        },
-    });
-    if (!input.confirmed || !input.confirmationDigest || !created.confirmation) {
-        return {
-            state: 'preview',
-            candidateId: diagnostic.candidateId,
-            action: created.action,
-            confirmation: created.confirmation,
-            valueDisclosed: false,
-        };
-    }
-    const accepted = assertOperatingConfirmation({
-        expected: created.confirmation,
-        actionId: created.action.id,
-        confirmationDigest: input.confirmationDigest,
-        confirmed: input.confirmed,
-        now: input.now,
-    });
-    const classifiedAt = (input.now ?? new Date()).toISOString();
-    const next = {
-        ...diagnostic,
-        classification: {
-            status: input.status,
-            ruleId: diagnostic.ruleId,
-            contentDigest: diagnostic.contentDigest,
-            projectHead: diagnostic.projectHead,
-            reason,
-            confirmationDigest: accepted.confirmationDigest,
-            classifiedAt,
-            classifiedBy: input.classifiedBy,
-        },
-    };
-    await writeEvidenceDiagnostic({ ...input, diagnostic: next });
-    const auditPath = path.join(resolveOperatingPaths(input.projectRoot, { localRoot: input.localRoot }).quarantine, 'classification-audit.jsonl');
-    await mkdir(path.dirname(auditPath), { recursive: true, mode: 0o700 });
-    await appendFile(auditPath, `${canonicalize({
-        candidateId: diagnostic.candidateId,
-        status: input.status,
-        ruleId: diagnostic.ruleId,
-        contentDigest: diagnostic.contentDigest,
-        projectHead: diagnostic.projectHead,
-        reasonDigest: canonicalDigest(reason),
-        confirmationDigest: accepted.confirmationDigest,
-        classifiedAt,
-        classifiedBy: input.classifiedBy,
-        valueDisclosed: false,
-    })}\n`, { mode: 0o600 });
-    return { state: 'classified', diagnostic: next };
-}
-export async function purgeStaleEvidenceClassifications(input) {
-    const bindings = await currentGuidedSessionBindings(input.projectRoot);
-    const diagnostics = await listEvidenceDiagnostics(input);
-    let stale = 0;
-    let purged = 0;
-    for (const diagnostic of diagnostics) {
-        if (!diagnostic.classification || diagnostic.projectHead === bindings.projectHead)
-            continue;
-        stale += 1;
-        if (!input.purge)
-            continue;
-        const { classification: _classification, ...current } = diagnostic;
-        await writeEvidenceDiagnostic({
-            projectRoot: input.projectRoot,
-            localRoot: input.localRoot,
-            diagnostic: current,
-        });
-        purged += 1;
-    }
-    return { stale, purged };
-}
-//# sourceMappingURL=evidence-classifications.js.map

package/dist/services/operate/evidence-classifications.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-classifications.js","sourceRoot":"","sources":["../../../src/services/operate/evidence-classifications.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,aAAa;IACb,aAAa;IACb,KAAK;IACL,eAAe;IACf,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAUhD;IACC,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,oDAAoD,EACpD,EAAE,iBAAiB,EAAE,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,IAAI,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,2HAA2H,EAC3H;YACE,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,cAAc,EAAE,KAAK;SACtB,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,YAAY,CACpB,0BAA0B,EAC1B,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,eAAe,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CACpB,0BAA0B,EAC1B,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;QAC1C,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EACH,KAAK,CAAC,MAAM,KAAK,gBAAgB;YAC/B,CAAC,CAAC,mDAAmD;YACrD,CAAC,CAAC,yDAAyD;QAC/D,OAAO,EAAE,mCAAmC,UAAU,CAAC,WAAW,EAAE;QACpE,MAAM,EAAE,qBAAqB;QAC7B,YAAY,EAAE;YACZ,SAAS,EAAE,gBAAgB,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACxE,iBAAiB,EAAE,6BAA6B,UAAU,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,EAAE;YACxF,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,IAAI;YACf,SAAS,EAAE;gBACT,KAAK,CAAC,MAAM;gBACZ,eAAe,CAAC,MAAM,CAAC;gBACvB,UAAU,CAAC,MAAM;gBACjB,UAAU,CAAC,aAAa;aACzB;YACD,YAAY,EAAE,EAAE;YAChB,MAAM,EAAE,CAAC,wBAAwB,UAAU,CAAC,WAAW,OAAO,CAAC;SAChE;KACF,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC3E,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,cAAc,EAAE,KAAK;SACtB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,2BAA2B,CAAC;QAC3C,QAAQ,EAAE,OAAO,CAAC,YAAY;QAC9B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;QAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG;QACX,GAAG,UAAU;QACb,cAAc,EAAE;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,MAAM;YACN,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,YAAY;YACZ,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC;KACF,CAAC;IACF,MAAM,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,EACnF,4BAA4B,CAC7B,CAAC;IACF,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,UAAU,CACd,SAAS,EACT,GAAG,YAAY,CAAC;QACd,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC;QACrC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,YAAY;QACZ,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK;KACtB,CAAC,IAAI,EACN,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAIvD;IACC,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,cAAc,IAAI,UAAU,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;YAAE,SAAS;QAC5F,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,SAAS;QAC3B,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;QACnE,MAAM,uBAAuB,CAAC;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC"}

package/dist/services/operate/evidence-diagnostics.d.ts

@@ -1,23 +0,0 @@
-import type { SecretDetectionMetadata } from './redaction.js';
-import { type CollectedEvidenceItem, type EvidenceDiagnostic } from './types.js';
-export declare function createEvidenceDiagnostic(input: {
-    projectRoot: string;
-    item: CollectedEvidenceItem;
-    detection: SecretDetectionMetadata;
-    localRoot?: string;
-}): Promise<EvidenceDiagnostic>;
-export declare function readEvidenceDiagnostic(input: {
-    projectRoot: string;
-    candidateId: string;
-    localRoot?: string;
-}): Promise<EvidenceDiagnostic>;
-export declare function listEvidenceDiagnostics(input: {
-    projectRoot: string;
-    localRoot?: string;
-}): Promise<EvidenceDiagnostic[]>;
-export declare function writeEvidenceDiagnostic(input: {
-    projectRoot: string;
-    diagnostic: EvidenceDiagnostic;
-    localRoot?: string;
-}): Promise<void>;
-//# sourceMappingURL=evidence-diagnostics.d.ts.map

package/dist/services/operate/evidence-diagnostics.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-diagnostics.d.ts","sourceRoot":"","sources":["../../../src/services/operate/evidence-diagnostics.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,KAAK,qBAAqB,EAAE,KAAK,kBAAkB,EAAgB,MAAM,YAAY,CAAC;AA4D/F,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,EAAE,uBAAuB,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwE9B;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAa9B;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAehC;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhB"}

package/dist/services/operate/evidence-diagnostics.js

@@ -1,152 +0,0 @@
-import { chmod, mkdir, readdir, readFile, rename, writeFile } from 'node:fs/promises';
-import path from 'node:path';
-import { resolveGuidedInteractionValidators } from '../pipeline-package-service.js';
-import { canonicalDigest, canonicalize, sha256Digest } from './canonical.js';
-import { createOperatingAction } from './interaction/action-service.js';
-import { currentGuidedSessionBindings } from './interaction/session-service.js';
-import { OperateError } from './types.js';
-import { resolveOperatingPaths } from './workspace.js';
-const CANDIDATE_ID = /^EVC-[A-Za-z0-9._-]{8,128}$/;
-function diagnosticDirectory(projectRoot, localRoot) {
-    return path.join(resolveOperatingPaths(projectRoot, { localRoot }).quarantine, 'diagnostics');
-}
-function diagnosticPath(projectRoot, candidateId, localRoot) {
-    if (!CANDIDATE_ID.test(candidateId)) {
-        throw new OperateError('E_OPERATE_CONFIG_INVALID', 'Evidence candidate ID is invalid.');
-    }
-    return path.join(diagnosticDirectory(projectRoot, localRoot), `${candidateId}.json`);
-}
-function diagnosticSource(item) {
-    if (item.source === 'file-import') {
-        return item.location.toLowerCase().endsWith('.csv') ? 'import-csv' : 'import-json';
-    }
-    if (['repository', 'planr', 'git', 'github', 'linear'].includes(item.source)) {
-        return item.source;
-    }
-    return 'repository';
-}
-function safeLocation(item) {
-    const value = item.location.replaceAll('\\', '/').trim();
-    if (!value ||
-        path.posix.isAbsolute(value) ||
-        /^[A-Za-z]:\//.test(value) ||
-        value.split('/').includes('..') ||
-        /(?:\/Users\/|\/home\/|[A-Za-z]:\/Users\/)/i.test(value)) {
-        return undefined;
-    }
-    return value.slice(0, 4_096);
-}
-async function atomicDiagnosticWrite(projectRoot, diagnostic, localRoot) {
-    const validators = await resolveGuidedInteractionValidators();
-    if (validators.validateEvidenceDiagnostic(diagnostic).length > 0) {
-        throw new OperateError('E_OPERATE_CONFIG_INVALID', `Evidence diagnostic ${diagnostic.candidateId} failed Protocol v1.2 validation.`);
-    }
-    const target = diagnosticPath(projectRoot, diagnostic.candidateId, localRoot);
-    await mkdir(path.dirname(target), { recursive: true, mode: 0o700 });
-    const temporary = `${target}.${process.pid}.tmp`;
-    await writeFile(temporary, `${canonicalize(diagnostic)}\n`, { mode: 0o600 });
-    await rename(temporary, target);
-    await chmod(target, 0o600);
-}
-export async function createEvidenceDiagnostic(input) {
-    const bindings = await currentGuidedSessionBindings(input.projectRoot);
-    const contentDigest = sha256Digest(input.item.content);
-    const candidateId = `EVC-${canonicalDigest({
-        source: input.item.source,
-        componentId: input.item.repository?.componentId ?? 'control',
-        location: input.item.location,
-        line: input.detection.line,
-        ruleId: input.detection.ruleId,
-        contentDigest,
-        projectHead: bindings.projectHead,
-    }).slice('sha256:'.length, 'sha256:'.length + 24)}`;
-    const componentId = input.item.repository?.componentId ?? 'control';
-    const diagnose = await createOperatingAction({
-        id: 'operate.evidence.diagnose',
-        label: 'Inspect the safe evidence diagnostic',
-        command: `planr operate evidence diagnose ${candidateId}`,
-        effect: 'read-only',
-        recommended: true,
-    });
-    const classify = await createOperatingAction({
-        id: 'operate.evidence.classify',
-        label: 'Review an eligible exact false-positive classification',
-        command: `planr operate evidence classify ${candidateId}`,
-        effect: 'machine-local-write',
-        confirmation: {
-            sessionId: `GIS-evidence-${candidateId.slice('EVC-'.length)}`,
-            confirmationScope: `operate.evidence.classify:${candidateId}`,
-            projectIdentity: bindings.projectIdentity,
-            projectHead: bindings.projectHead,
-            configHead: bindings.configHead,
-            eventHead: null,
-            arguments: [
-                input.detection.ruleId,
-                contentDigest,
-                canonicalDigest({ location: safeLocation(input.item) ?? null }),
-            ],
-            destinations: [],
-            writes: [`evidence-diagnostics/${candidateId}.json`],
-        },
-    });
-    const diagnostic = {
-        kind: 'evidence-diagnostic',
-        schemaVersion: '1.0.0',
-        protocolVersion: '1.2.0',
-        candidateId,
-        source: diagnosticSource(input.item),
-        componentId,
-        ...(safeLocation(input.item) ? { location: safeLocation(input.item) } : {}),
-        ...(Number.isInteger(input.detection.line) ? { line: input.detection.line } : {}),
-        ruleId: input.detection.ruleId,
-        category: input.detection.category,
-        contentDigest,
-        projectHead: bindings.projectHead,
-        valueDisclosed: false,
-        actions: [diagnose.action, classify.action],
-    };
-    const existing = await readEvidenceDiagnostic({
-        projectRoot: input.projectRoot,
-        candidateId,
-        localRoot: input.localRoot,
-    }).catch(() => null);
-    if (existing &&
-        existing.ruleId === diagnostic.ruleId &&
-        existing.contentDigest === diagnostic.contentDigest &&
-        existing.projectHead === diagnostic.projectHead) {
-        return existing;
-    }
-    await atomicDiagnosticWrite(input.projectRoot, diagnostic, input.localRoot);
-    return diagnostic;
-}
-export async function readEvidenceDiagnostic(input) {
-    const target = diagnosticPath(input.projectRoot, input.candidateId, input.localRoot);
-    try {
-        const diagnostic = JSON.parse(await readFile(target, 'utf8'));
-        const validators = await resolveGuidedInteractionValidators();
-        if (validators.validateEvidenceDiagnostic(diagnostic).length > 0)
-            throw new Error('invalid');
-        return diagnostic;
-    }
-    catch {
-        throw new OperateError('E_OPERATE_STATE_INVALID', `Evidence diagnostic ${input.candidateId} is unavailable or invalid.`);
-    }
-}
-export async function listEvidenceDiagnostics(input) {
-    const directory = diagnosticDirectory(input.projectRoot, input.localRoot);
-    const names = (await readdir(directory).catch(() => []))
-        .filter((name) => /^EVC-[A-Za-z0-9._-]+\.json$/.test(name))
-        .sort();
-    const diagnostics = [];
-    for (const name of names) {
-        diagnostics.push(await readEvidenceDiagnostic({
-            ...input,
-            candidateId: name.slice(0, -'.json'.length),
-        }));
-    }
-    return diagnostics;
-}
-export async function writeEvidenceDiagnostic(input) {
-    await atomicDiagnosticWrite(input.projectRoot, input.diagnostic, input.localRoot);
-}
-//# sourceMappingURL=evidence-diagnostics.js.map

package/dist/services/operate/evidence-diagnostics.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-diagnostics.js","sourceRoot":"","sources":["../../../src/services/operate/evidence-diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,EAAuD,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAEnD,SAAS,mBAAmB,CAAC,WAAmB,EAAE,SAAkB;IAClE,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB,EAAE,WAAmB,EAAE,SAAkB;IAClF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,YAAY,CAAC,0BAA0B,EAAE,mCAAmC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA2B;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC,MAAsC,CAAC;IACrD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,YAAY,CAAC,IAA2B;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IACE,CAAC,KAAK;QACN,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/B,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,EACxD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,WAAmB,EACnB,UAA8B,EAC9B,SAAkB;IAElB,MAAM,UAAU,GAAG,MAAM,kCAAkC,EAAE,CAAC;IAC9D,IAAI,UAAU,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,YAAY,CACpB,0BAA0B,EAC1B,uBAAuB,UAAU,CAAC,WAAW,mCAAmC,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9E,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACjD,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAK9C;IACC,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,eAAe,CAAC;QACzC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;QACzB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,IAAI,SAAS;QAC5D,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;QAC1B,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;QAC9B,aAAa;QACb,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;IACpD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,IAAI,SAAS,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE,sCAAsC;QAC7C,OAAO,EAAE,mCAAmC,WAAW,EAAE;QACzD,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE,wDAAwD;QAC/D,OAAO,EAAE,mCAAmC,WAAW,EAAE;QACzD,MAAM,EAAE,qBAAqB;QAC7B,YAAY,EAAE;YACZ,SAAS,EAAE,gBAAgB,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC7D,iBAAiB,EAAE,6BAA6B,WAAW,EAAE;YAC7D,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,IAAI;YACf,SAAS,EAAE;gBACT,KAAK,CAAC,SAAS,CAAC,MAAM;gBACtB,aAAa;gBACb,eAAe,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;aAChE;YACD,YAAY,EAAE,EAAE;YAChB,MAAM,EAAE,CAAC,wBAAwB,WAAW,OAAO,CAAC;SACrD;KACF,CAAC,CAAC;IACH,MAAM,UAAU,GAAuB;QACrC,IAAI,EAAE,qBAAqB;QAC3B,aAAa,EAAE,OAAO;QACtB,eAAe,EAAE,OAAO;QACxB,WAAW;QACX,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,WAAW;QACX,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;QAC9B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;QAClC,aAAa;QACb,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;KAC5C,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC;QAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW;QACX,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrB,IACE,QAAQ;QACR,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QACrC,QAAQ,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa;QACnD,QAAQ,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,EAC/C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAI5C;IACC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACrF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAuB,CAAC;QACpF,MAAM,UAAU,GAAG,MAAM,kCAAkC,EAAE,CAAC;QAC9D,IAAI,UAAU,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7F,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,uBAAuB,KAAK,CAAC,WAAW,6BAA6B,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAG7C;IACC,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;SACrD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1D,IAAI,EAAE,CAAC;IACV,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,WAAW,CAAC,IAAI,CACd,MAAM,sBAAsB,CAAC;YAC3B,GAAG,KAAK;YACR,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SAC5C,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAI7C;IACC,MAAM,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AACpF,CAAC"}

package/dist/services/operate/evidence-readiness.d.ts

@@ -1,8 +0,0 @@
-import { type OperatingEvidence, type OperatingEvidenceReadiness, type OperatingRoleId } from './types.js';
-export declare function evaluateEvidenceReadiness(input: {
-    cycleId: string;
-    evidence: OperatingEvidence;
-    enabledRoles: OperatingRoleId[];
-    now?: Date;
-}): Promise<OperatingEvidenceReadiness>;
-//# sourceMappingURL=evidence-readiness.d.ts.map

package/dist/services/operate/evidence-readiness.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-readiness.d.ts","sourceRoot":"","sources":["../../../src/services/operate/evidence-readiness.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAgBpB,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA8FtC"}

package/dist/services/operate/evidence-readiness.js

@@ -1,84 +0,0 @@
-import { canonicalDigest } from './canonical.js';
-import { assertOperatingArtifact, loadOperatingProtocol } from './protocol.js';
-import { compareSensitivity, prepareAdvisorEvidenceText } from './redaction.js';
-import { OPERATE_PROTOCOL_VERSION, OPERATE_SCHEMA_VERSION, } from './types.js';
-function ageHours(iso, now) {
-    return Math.max(0, (now.getTime() - Date.parse(iso)) / (60 * 60 * 1_000));
-}
-export async function evaluateEvidenceReadiness(input) {
-    const now = input.now ?? new Date();
-    const registry = (await loadOperatingProtocol()).listOperatingRoles();
-    const eligibleItems = input.evidence.items.filter((item) => !prepareAdvisorEvidenceText({
-        evidenceId: item.id,
-        digest: item.digest,
-        value: item.summary ?? '',
-    }).quarantined);
-    let gapNumber = 1;
-    const roles = input.enabledRoles.map((roleId) => {
-        const role = registry.find((entry) => entry.id === roleId);
-        const configured = role?.minimumEvidence.requirements ?? [
-            {
-                source: 'repository',
-                claimTypes: ['code'],
-                minimumItems: 1,
-                maxAgeHours: 168,
-                observationWindow: 'current-state',
-                sensitivityCeiling: 'internal',
-            },
-        ];
-        const requirements = configured.map((requirement) => {
-            const matching = eligibleItems.filter((item) => item.source === requirement.source &&
-                requirement.claimTypes.some((claim) => item.claimTypes.includes(claim)) &&
-                compareSensitivity(item.sensitivity, requirement.sensitivityCeiling) <= 0);
-            const oldestAgeHours = matching.length > 0
-                ? Math.max(...matching.map((item) => ageHours(item.collectedAt, now)))
-                : null;
-            const satisfied = matching.length >= requirement.minimumItems &&
-                oldestAgeHours !== null &&
-                oldestAgeHours <= requirement.maxAgeHours &&
-                (requirement.observationWindow === 'current-state' ||
-                    requirement.observationWindow === 'current-cycle' ||
-                    matching.some((item) => item.observedFrom && item.observedTo));
-            return {
-                ...structuredClone(requirement),
-                observedItems: matching.length,
-                oldestAgeHours,
-                satisfied,
-            };
-        });
-        const ready = (role?.minimumEvidence.match ?? 'all') === 'any'
-            ? requirements.some((requirement) => requirement.satisfied)
-            : requirements.every((requirement) => requirement.satisfied);
-        const gapId = ready ? null : `GAP-${String(gapNumber++).padStart(3, '0')}`;
-        return {
-            roleId,
-            readiness: ready ? 'ready' : 'not_evaluated',
-            requirements,
-            missingEvidence: requirements
-                .filter((requirement) => !requirement.satisfied)
-                .map((requirement) => `${requirement.source}:${requirement.claimTypes.join('+')} (${requirement.observedItems}/${requirement.minimumItems})`),
-            evidenceRefs: eligibleItems
-                .filter((item) => requirements.some((requirement) => requirement.source === item.source &&
-                requirement.claimTypes.some((claim) => item.claimTypes.includes(claim))))
-                .map((item) => item.id)
-                .sort(),
-            modelCallAllowed: ready,
-            gapId,
-        };
-    });
-    const readiness = {
-        kind: 'operating-evidence-readiness',
-        schemaVersion: OPERATE_SCHEMA_VERSION,
-        protocolVersion: OPERATE_PROTOCOL_VERSION,
-        cycleId: input.cycleId,
-        inputDigest: canonicalDigest({
-            evidence: input.evidence.fingerprint,
-            roles: input.enabledRoles,
-            advisorEligibleEvidenceRefs: eligibleItems.map((item) => item.id).sort(),
-        }),
-        evaluatedAt: now.toISOString(),
-        roles,
-    };
-    return assertOperatingArtifact('operating-evidence-readiness', readiness);
-}
-//# sourceMappingURL=evidence-readiness.js.map

package/dist/services/operate/evidence-readiness.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-readiness.js","sourceRoot":"","sources":["../../../src/services/operate/evidence-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAEL,wBAAwB,EACxB,sBAAsB,GAIvB,MAAM,YAAY,CAAC;AAYpB,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAS;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAK/C;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,CACf,MAAM,qBAAqB,EAAE,CAC9B,CAAC,kBAAkB,EAA+B,CAAC;IACpD,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC/C,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,0BAA0B,CAAC;QAC1B,UAAU,EAAE,IAAI,CAAC,EAAE;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;KAC1B,CAAC,CAAC,WAAW,CACjB,CAAC;IACF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,EAAE,eAAe,CAAC,YAAY,IAAI;YACvD;gBACE,MAAM,EAAE,YAAY;gBACpB,UAAU,EAAE,CAAC,MAAM,CAAC;gBACpB,YAAY,EAAE,CAAC;gBACf,WAAW,EAAE,GAAG;gBAChB,iBAAiB,EAAE,eAAwB;gBAC3C,kBAAkB,EAAE,UAAmB;aACxC;SACF,CAAC;QACF,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;YAClD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CACnC,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;gBAClC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACvE,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAC5E,CAAC;YACF,MAAM,cAAc,GAClB,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACjB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtE,CAAC,CAAC,IAAI,CAAC;YACX,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,YAAY;gBAC3C,cAAc,KAAK,IAAI;gBACvB,cAAc,IAAI,WAAW,CAAC,WAAW;gBACzC,CAAC,WAAW,CAAC,iBAAiB,KAAK,eAAe;oBAChD,WAAW,CAAC,iBAAiB,KAAK,eAAe;oBACjD,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACnE,OAAO;gBACL,GAAG,eAAe,CAAC,WAAW,CAAC;gBAC/B,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,cAAc;gBACd,SAAS;aACV,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GACT,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK;YAC9C,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC;YAC3D,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO;YACL,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAE,eAAyB;YAClE,YAAY;YACZ,eAAe,EAAE,YAAY;iBAC1B,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;iBAC/C,GAAG,CACF,CAAC,WAAW,EAAE,EAAE,CACd,GAAG,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,YAAY,GAAG,CACzH;YACH,YAAY,EAAE,aAAa;iBACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CAAC,IAAI,CACf,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;gBAClC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAC1E,CACF;iBACA,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;iBACtB,IAAI,EAAE;YACT,gBAAgB,EAAE,KAAK;YACvB,KAAK;SACN,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAA+B;QAC5C,IAAI,EAAE,8BAA8B;QACpC,aAAa,EAAE,sBAAsB;QACrC,eAAe,EAAE,wBAAwB;QACzC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,eAAe,CAAC;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;YACpC,KAAK,EAAE,KAAK,CAAC,YAAY;YACzB,2BAA2B,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;SACzE,CAAC;QACF,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;QAC9B,KAAK;KACN,CAAC;IACF,OAAO,uBAAuB,CAAC,8BAA8B,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC"}