openplanr 1.25.2 → 2.0.0

package/dist/services/operate/artifacts.js

@@ -1,336 +0,0 @@
-import { readdir, readFile, stat } from 'node:fs/promises';
-import path from 'node:path';
-import { OPENPLANR_VERSION } from '../../utils/package-version.js';
-import { canonicalDigest, sha256Digest } from './canonical.js';
-import { applyJournalTransaction, prepareJournalTransaction } from './journal.js';
-import { assertOperatingArtifact } from './protocol.js';
-import { listGitPlanrTreeAtRevision, readGitPlanrPathAtRevision } from './read-only-providers.js';
-import { redactSensitiveText, sanitizeGeneratedPlainText } from './redaction.js';
-import { OPERATE_PROTOCOL_VERSION, OPERATE_SCHEMA_VERSION, OperateError, } from './types.js';
-import { isPathInside } from './workspace.js';
-const EXTENSIONS = {
-    markdown: '.md',
-    html: '.html',
-    json: '.json',
-    csv: '.csv',
-};
-export async function createArtifactSession(input) {
-    if (path.isAbsolute(input.destination) ||
-        path.extname(input.destination).toLowerCase() !== EXTENSIONS[input.artifactType]) {
-        throw new OperateError('E_OPERATE_ARTIFACT_REJECTED', 'Artifact destination must be project-relative and match the declared type.');
-    }
-    const now = input.now ?? new Date().toISOString();
-    const session = {
-        kind: 'operating-artifact-session',
-        schemaVersion: OPERATE_SCHEMA_VERSION,
-        protocolVersion: OPERATE_PROTOCOL_VERSION,
-        id: input.id,
-        cycleId: input.cycleId,
-        state: 'prepared',
-        artifactType: input.artifactType,
-        inputDigest: input.inputDigest,
-        destination: input.destination,
-        evidenceRefs: [...new Set(input.evidenceRefs)].sort(),
-        producer: {
-            product: 'openplanr',
-            version: OPENPLANR_VERSION,
-            runtime: input.runtime,
-            capability: input.capability ?? 'analysis-standard',
-        },
-        createdAt: now,
-        updatedAt: now,
-    };
-    return assertOperatingArtifact('operating-artifact-session', session);
-}
-export async function commitGeneratedArtifact(input) {
-    if (input.session.state !== 'prepared' && input.session.state !== 'generating') {
-        throw new OperateError('E_OPERATE_ARTIFACT_REJECTED', `Artifact session cannot commit from ${input.session.state}.`);
-    }
-    const sanitized = input.session.artifactType === 'json'
-        ? `${JSON.stringify(JSON.parse(input.content), null, 2)}\n`
-        : sanitizeGeneratedPlainText(input.content);
-    const outputDigest = sha256Digest(sanitized);
-    const now = new Date().toISOString();
-    const committed = {
-        ...input.session,
-        state: 'committed',
-        outputDigest,
-        updatedAt: now,
-    };
-    await assertOperatingArtifact('operating-artifact-session', committed);
-    const sessionPath = `.planr/operate/artifacts/${input.session.id}.json`;
-    const existingSession = await readFile(path.join(input.projectRoot, sessionPath)).catch(() => null);
-    const writes = [
-        {
-            relativePath: input.session.destination,
-            operation: (await readFile(path.join(input.projectRoot, input.session.destination)).catch(() => null))
-                ? 'replace'
-                : 'create',
-            content: sanitized,
-        },
-        {
-            relativePath: sessionPath,
-            operation: existingSession ? 'replace' : 'create',
-            content: `${JSON.stringify(committed, null, 2)}\n`,
-        },
-    ];
-    const transaction = await prepareJournalTransaction(input.projectRoot, {
-        writes,
-        eventHead: input.eventHead,
-        previewDigest: input.previewDigest,
-        localRoot: input.localRoot,
-    });
-    await applyJournalTransaction(input.projectRoot, transaction, {
-        currentEventHead: input.eventHead,
-    });
-    return committed;
-}
-// Planr-artifact citations name a control artifact by its stable ID; the file
-// lives in a prefix-derived `.planr/` directory but its slug is unknown, so the
-// resolver lists the directory at the pinned revision and matches on the ID.
-//
-// The keys are the product's REAL artifact-class prefixes: the default
-// `.planr/config.json` `idPrefix` values (EPIC/FEAT/US/TASK/QT/BL/SPRINT/SPEC)
-// plus the operate register classes (ADR/DEC/FND/GAP/OUT). The bootstrap map
-// handed to every advisor points at `.planr/backlog` and `.planr/quick` as
-// primary evidence, so `BL-*` (backlog) and `QT-*` (quick-task) citations must
-// resolve rather than fail the anchor as an unknown class.
-const PLANR_ARTIFACT_DIRECTORIES = {
-    EPIC: ['.planr/epics'],
-    FEAT: ['.planr/features'],
-    US: ['.planr/stories'],
-    SPEC: ['.planr/specs'],
-    TASK: ['.planr/tasks'],
-    QT: ['.planr/quick'],
-    BL: ['.planr/backlog'],
-    SPRINT: ['.planr/sprints'],
-    ADR: ['.planr/adrs'],
-    DEC: ['.planr/decisions', '.planr/operate/decisions'],
-    FND: ['.planr/findings', '.planr/operate/findings'],
-    GAP: ['.planr/gaps', '.planr/operate/gaps'],
-    OUT: ['.planr/outcomes', '.planr/operate/outcomes'],
-};
-/**
- * The real planr artifact-class prefixes a `planr`-kind citation may name,
- * derived from the directory map so the anchor allowlist and the resolver can
- * never drift. Sorted for a deterministic, byte-stable alternation.
- */
-export const PLANR_ARTIFACT_CLASS_PREFIXES = Object.freeze(Object.keys(PLANR_ARTIFACT_DIRECTORIES).sort());
-const PLANR_ARTIFACT_ID_PATTERN = new RegExp(`^(?:${PLANR_ARTIFACT_CLASS_PREFIXES.join('|')})-[A-Za-z0-9._-]+$`);
-/** Whether `id` names a known planr artifact class (`EPIC-…`, `BL-…`, `QT-…`, …). */
-export function isPlanrArtifactId(id) {
-    return PLANR_ARTIFACT_ID_PATTERN.test(id);
-}
-function planrArtifactPrefix(artifactId) {
-    const match = artifactId.match(/^([A-Z]+)-/);
-    return match ? match[1] : null;
-}
-/** Whether a listed directory entry names the artifact ID (`ID`, `ID-slug`, or `ID.ext`). */
-function entryMatchesArtifact(entry, artifactId) {
-    return (entry === artifactId || entry.startsWith(`${artifactId}-`) || entry.startsWith(`${artifactId}.`));
-}
-const PLANR_WORKING_TREE_MAX_BYTES = 1024 * 1024;
-/**
- * Read one working-tree `.planr/` file for the gitignored fallback, bounded and
- * fail-closed. Returns null when the path is absent, is not a plain file, or
- * exceeds the byte bound — a citation into it then fails closed rather than
- * snapshotting a partial or oversized body.
- */
-async function readWorkingTreePlanrFile(absolutePath, maxBytes) {
-    try {
-        const info = await stat(absolutePath);
-        if (!info.isFile() || info.size > maxBytes)
-            return null;
-        return await readFile(absolutePath, 'utf8');
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Working-tree fallback for a planr-artifact citation whose ID is absent from the
- * committed tree at the pinned revision — the FR8 gitignored `.planr/` case. The
- * committed revision stays authoritative: this reads from disk ONLY when the pin
- * has no matching artifact, because a gitignored planning directory is never in
- * any commit yet remains a legitimate, citable local planning surface. The scan
- * is bounded to the fixed `.planr/` directory allowlist (never a caller path),
- * stays inside the project root, and passes the same redaction path committed
- * planr artifacts use, so a gitignored artifact resolves with a verified,
- * redacted snapshot rather than being misclassified as unresolvable.
- */
-async function resolveWorkingTreePlanrArtifact(input) {
-    const maxBytes = Math.max(1, Math.min(input.maxBytes ?? PLANR_WORKING_TREE_MAX_BYTES, PLANR_WORKING_TREE_MAX_BYTES));
-    const root = path.resolve(input.projectRoot);
-    const snapshotBody = async (absolutePath, location) => {
-        const body = await readWorkingTreePlanrFile(absolutePath, maxBytes);
-        if (body === null) {
-            return {
-                artifactExists: true,
-                location,
-                content: null,
-                sensitivity: input.sensitivity,
-                redactions: [],
-            };
-        }
-        const redacted = redactSensitiveText(body);
-        return {
-            artifactExists: true,
-            location,
-            content: redacted.value,
-            sensitivity: input.sensitivity,
-            redactions: redacted.redactions,
-        };
-    };
-    for (const directory of input.directories) {
-        const directoryAbs = path.resolve(root, ...directory.split('/'));
-        if (!isPathInside(root, directoryAbs))
-            continue;
-        let entries;
-        try {
-            entries = await readdir(directoryAbs);
-        }
-        catch {
-            continue;
-        }
-        const match = entries.find((entry) => entryMatchesArtifact(entry, input.artifactId));
-        if (!match)
-            continue;
-        const matchAbs = path.resolve(directoryAbs, match);
-        if (!isPathInside(root, matchAbs))
-            continue;
-        const location = `${directory}/${match}`;
-        if (path.extname(match)) {
-            return snapshotBody(matchAbs, location);
-        }
-        // Directory-shaped artifact (e.g. a SPEC bundle): look one level in for a
-        // same-ID markdown body, mirroring the committed-tree resolution.
-        let nested;
-        try {
-            nested = await readdir(matchAbs);
-        }
-        catch {
-            return {
-                artifactExists: true,
-                location,
-                content: null,
-                sensitivity: input.sensitivity,
-                redactions: [],
-            };
-        }
-        const nestedMarkdown = nested.find((entry) => entryMatchesArtifact(entry, input.artifactId) && entry.endsWith('.md')) ?? nested.find((entry) => entry.endsWith('.md'));
-        if (nestedMarkdown) {
-            const nestedAbs = path.resolve(matchAbs, nestedMarkdown);
-            if (isPathInside(root, nestedAbs)) {
-                return snapshotBody(nestedAbs, `${location}/${nestedMarkdown}`);
-            }
-        }
-        return {
-            artifactExists: true,
-            location,
-            content: null,
-            sensitivity: input.sensitivity,
-            redactions: [],
-        };
-    }
-    return null;
-}
-/**
- * Resolve a planr-artifact citation against `.planr/` at the cycle's pinned
- * revision (FR3/E-003). Computes the `artifactExists` fact the citation resolver
- * consumes and, when the artifact is a readable markdown/text file, snapshots its
- * content through the same redaction path repository citations use.
- *
- * The committed tree at the pinned revision is authoritative: a tracked artifact
- * resolves against its pinned content, and an in-flight EDIT to a tracked
- * artifact still reads the pinned (committed) version, not the working copy. When
- * the ID is absent from the committed tree entirely — the FR8 gitignored `.planr/`
- * case, where the planning directory is never committed — resolution falls back
- * to the working-tree copy so a gitignored planning artifact resolves with a
- * verified, redacted content snapshot instead of failing closed as unresolvable.
- */
-export async function resolvePlanrArtifactCitation(input) {
-    const sensitivity = input.sensitivity ?? 'internal';
-    const empty = {
-        artifactExists: false,
-        location: null,
-        content: null,
-        sensitivity,
-        redactions: [],
-    };
-    if (!isPlanrArtifactId(input.artifactId))
-        return empty;
-    const prefix = planrArtifactPrefix(input.artifactId);
-    const directories = prefix ? PLANR_ARTIFACT_DIRECTORIES[prefix] : undefined;
-    if (!directories)
-        return empty;
-    for (const directory of directories) {
-        const entries = await listGitPlanrTreeAtRevision(input.projectRoot, input.pinnedRevision, directory, {
-            timeoutMs: input.timeoutMs,
-        });
-        const match = entries.find((entry) => entryMatchesArtifact(entry, input.artifactId));
-        if (!match)
-            continue;
-        // The ID resolves at the pinned revision. Snapshot the artifact body when it
-        // is a directly readable file; a directory-shaped artifact (e.g. a SPEC
-        // bundle) still resolves, and its primary markdown is snapshotted when present.
-        const directFile = `${directory}/${match}`;
-        const directBlob = path.extname(match)
-            ? await readGitPlanrPathAtRevision(input.projectRoot, input.pinnedRevision, directFile, {
-                maxBytes: input.maxBytes,
-                timeoutMs: input.timeoutMs,
-            })
-            : { exists: false, content: null, lineCount: 0 };
-        if (directBlob.exists && directBlob.content !== null) {
-            const redacted = redactSensitiveText(directBlob.content);
-            return {
-                artifactExists: true,
-                location: directFile,
-                content: redacted.value,
-                sensitivity,
-                redactions: redacted.redactions,
-            };
-        }
-        // Directory-shaped artifact: look one level in for a same-ID markdown file.
-        const nested = await listGitPlanrTreeAtRevision(input.projectRoot, input.pinnedRevision, directFile, { timeoutMs: input.timeoutMs });
-        const nestedMarkdown = nested.find((entry) => entryMatchesArtifact(entry, input.artifactId) && entry.endsWith('.md')) ?? nested.find((entry) => entry.endsWith('.md'));
-        if (nestedMarkdown) {
-            const nestedBlob = await readGitPlanrPathAtRevision(input.projectRoot, input.pinnedRevision, `${directFile}/${nestedMarkdown}`, { maxBytes: input.maxBytes, timeoutMs: input.timeoutMs });
-            if (nestedBlob.exists && nestedBlob.content !== null) {
-                const redacted = redactSensitiveText(nestedBlob.content);
-                return {
-                    artifactExists: true,
-                    location: `${directFile}/${nestedMarkdown}`,
-                    content: redacted.value,
-                    sensitivity,
-                    redactions: redacted.redactions,
-                };
-            }
-        }
-        // The ID exists as a tree even if no snapshot-able body was found.
-        return {
-            artifactExists: true,
-            location: directFile,
-            content: null,
-            sensitivity,
-            redactions: [],
-        };
-    }
-    // The ID resolves against no committed tree at the pin. Fall back to the
-    // working tree for the gitignored `.planr/` case (FR8) before failing closed.
-    const workingTree = await resolveWorkingTreePlanrArtifact({
-        projectRoot: input.projectRoot,
-        directories,
-        artifactId: input.artifactId,
-        sensitivity,
-        maxBytes: input.maxBytes,
-    });
-    return workingTree ?? empty;
-}
-export function artifactInputDigest(input) {
-    return canonicalDigest({
-        cycleId: input.cycleId,
-        evidenceRefs: [...new Set(input.evidenceRefs)].sort(),
-        purpose: input.purpose,
-    });
-}
-//# sourceMappingURL=artifacts.js.map

package/dist/services/operate/artifacts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../src/services/operate/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,YAAY,GAIb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,UAAU,GAA6D;IAC3E,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,GAAG,EAAE,MAAM;CACZ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAU3C;IACC,IACE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,EAChF,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,MAAM,OAAO,GAA6B;QACxC,IAAI,EAAE,4BAA4B;QAClC,aAAa,EAAE,sBAAsB;QACrC,eAAe,EAAE,wBAAwB;QACzC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE;QACrD,QAAQ,EAAE;YACR,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,mBAAmB;SACpD;QACD,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IACF,OAAO,uBAAuB,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAO7C;IACC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QAC/E,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,uCAAuC,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GACb,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM;QACnC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QAC3D,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,GAA6B;QAC1C,GAAG,KAAK,CAAC,OAAO;QAChB,KAAK,EAAE,WAAW;QAClB,YAAY;QACZ,SAAS,EAAE,GAAG;KACf,CAAC;IACF,MAAM,uBAAuB,CAAC,4BAA4B,EAAE,SAAS,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,4BAA4B,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IACxE,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CACrF,GAAG,EAAE,CAAC,IAAI,CACX,CAAC;IACF,MAAM,MAAM,GAAG;QACb;YACE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;YACvC,SAAS,EAAE,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CACvF,GAAG,EAAE,CAAC,IAAI,CACX,CAAC;gBACA,CAAC,CAAE,SAAmB;gBACtB,CAAC,CAAE,QAAkB;YACvB,OAAO,EAAE,SAAS;SACnB;QACD;YACE,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,eAAe,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAE,QAAkB;YACvE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;SACnD;KACF,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,WAAW,EAAE;QACrE,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,MAAM,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE;QAC5D,gBAAgB,EAAE,KAAK,CAAC,SAAS;KAClC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,+EAA+E;AAC/E,2DAA2D;AAC3D,MAAM,0BAA0B,GAA6B;IAC3D,IAAI,EAAE,CAAC,cAAc,CAAC;IACtB,IAAI,EAAE,CAAC,iBAAiB,CAAC;IACzB,EAAE,EAAE,CAAC,gBAAgB,CAAC;IACtB,IAAI,EAAE,CAAC,cAAc,CAAC;IACtB,IAAI,EAAE,CAAC,cAAc,CAAC;IACtB,EAAE,EAAE,CAAC,cAAc,CAAC;IACpB,EAAE,EAAE,CAAC,gBAAgB,CAAC;IACtB,MAAM,EAAE,CAAC,gBAAgB,CAAC;IAC1B,GAAG,EAAE,CAAC,aAAa,CAAC;IACpB,GAAG,EAAE,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;IACrD,GAAG,EAAE,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;IACnD,GAAG,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC3C,GAAG,EAAE,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;CACpD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAsB,MAAM,CAAC,MAAM,CAC3E,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,IAAI,EAAE,CAC/C,CAAC;AAEF,MAAM,yBAAyB,GAAG,IAAI,MAAM,CAC1C,OAAO,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CACnE,CAAC;AAEF,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5C,CAAC;AAaD,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,6FAA6F;AAC7F,SAAS,oBAAoB,CAAC,KAAa,EAAE,UAAkB;IAC7D,OAAO,CACL,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CACjG,CAAC;AACJ,CAAC;AAED,MAAM,4BAA4B,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD;;;;;GAKG;AACH,KAAK,UAAU,wBAAwB,CACrC,YAAoB,EACpB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxD,OAAO,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,+BAA+B,CAAC,KAM9C;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,4BAA4B,EAAE,4BAA4B,CAAC,CACvF,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,KAAK,EACxB,YAAoB,EACpB,QAAgB,EAC0B,EAAE;QAC5C,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO;gBACL,cAAc,EAAE,IAAI;gBACpB,QAAQ;gBACR,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,UAAU,EAAE,EAAE;aACf,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO;YACL,cAAc,EAAE,IAAI;YACpB,QAAQ;YACR,OAAO,EAAE,QAAQ,CAAC,KAAK;YACvB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC;IACJ,CAAC,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC;YAAE,SAAS;QAChD,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,SAAS;QAC5C,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,KAAK,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,0EAA0E;QAC1E,kEAAkE;QAClE,IAAI,MAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,cAAc,EAAE,IAAI;gBACpB,QAAQ;gBACR,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,UAAU,EAAE,EAAE;aACf,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAClB,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACzD,IAAI,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;gBAClC,OAAO,YAAY,CAAC,SAAS,EAAE,GAAG,QAAQ,IAAI,cAAc,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,OAAO;YACL,cAAc,EAAE,IAAI;YACpB,QAAQ;YACR,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,EAAE;SACf,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAOlD;IACC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,UAAU,CAAC;IACpD,MAAM,KAAK,GAAoC;QAC7C,cAAc,EAAE,KAAK;QACrB,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;QACb,WAAW;QACX,UAAU,EAAE,EAAE;KACf,CAAC;IACF,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAC9C,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,cAAc,EACpB,SAAS,EACT;YACE,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CACF,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,6EAA6E;QAC7E,wEAAwE;QACxE,gFAAgF;QAChF,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,KAAK,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACpC,CAAC,CAAC,MAAM,0BAA0B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE;gBACpF,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC;YACJ,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACnD,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzD,OAAO;gBACL,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,QAAQ,CAAC,KAAK;gBACvB,WAAW;gBACX,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAC7C,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,cAAc,EACpB,UAAU,EACV,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC/B,CAAC;QACF,MAAM,cAAc,GAClB,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,MAAM,0BAA0B,CACjD,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,cAAc,EACpB,GAAG,UAAU,IAAI,cAAc,EAAE,EACjC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CACzD,CAAC;YACF,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACzD,OAAO;oBACL,cAAc,EAAE,IAAI;oBACpB,QAAQ,EAAE,GAAG,UAAU,IAAI,cAAc,EAAE;oBAC3C,OAAO,EAAE,QAAQ,CAAC,KAAK;oBACvB,WAAW;oBACX,UAAU,EAAE,QAAQ,CAAC,UAAU;iBAChC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,mEAAmE;QACnE,OAAO;YACL,cAAc,EAAE,IAAI;YACpB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,IAAI;YACb,WAAW;YACX,UAAU,EAAE,EAAE;SACf,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,8EAA8E;IAC9E,MAAM,WAAW,GAAG,MAAM,+BAA+B,CAAC;QACxD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW;QACX,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW;QACX,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IACH,OAAO,WAAW,IAAI,KAAK,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAInC;IACC,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE;QACrD,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;AACL,CAAC"}

package/dist/services/operate/cadence.d.ts

@@ -1,50 +0,0 @@
-import { type OperatingConfig } from './types.js';
-/**
- * Cadence state (FR8 / E-008).
- *
- * This module is the engine-side seam onto the pipeline's PURE cadence calculator
- * (`planr-pipeline@0.33.0` → `lib/operate/cadence.mjs`, validated against
- * `operating-cadence-status@1.3.0`). The calendar math is never reimplemented
- * here; this file only:
- *
- *  1. loads and caches the published calculator, and
- *  2. surfaces the next-due instant with an INJECTED clock — the calculator has
- *     no `Date.now()` on its path, so `operate status` stays deterministic under
- *     test — and
- *  3. records the machine-local `lastRunAt` marker at cycle completion, delegating
- *     the atomic preferences write to the preferences owner (`config.ts`).
- *
- * There is no code path here — and, structurally, none in the calculator — that
- * can accept a finding, apply a route, invoke PLAN, or invoke SHIP: the calculator
- * takes only `(cadence, lastRunAt, now)`, so no caller can request an action. See
- * `assertOperatingCadenceCannotMutate`.
- */
-export type OperatingCadence = OperatingConfig['cadence'];
-/**
- * Compute the surfaced next-due instant for a cadence via the pipeline's pure
- * calculator (FR8 / E-008). `clock` is the injected `now` supplied by the CLI
- * boundary — the computation reads no wall clock. `manual` yields `null`;
- * `weekly` / `monthly` yield the calculator's RFC 3339 UTC instant (due
- * immediately when `lastRunAt` is absent).
- */
-export declare function computeNextDueAt(cadence: OperatingCadence, lastRunAt: string | null, clock: string): Promise<string | null>;
-/**
- * Record the cadence `lastRunAt` marker when a cycle reaches a terminal
- * reviewable/blocked/closed state (FR8 / E-008). Delegates the atomic
- * machine-local preferences write to `config.ts`, keeping cadence policy in one
- * module while persistence stays with the preferences owner. `runAt` is the
- * injected cycle instant (RFC 3339 UTC), never a wall-clock read here.
- */
-export declare function recordOperatingCadenceRun(input: {
-    projectRoot: string;
-    localRoot?: string;
-    runAt: string;
-}): Promise<void>;
-/**
- * FR8 never-acts anchor. Re-exposes the pipeline's structural guarantee that the
- * cadence path cannot accept a finding, apply a route, or invoke PLAN/SHIP. The
- * guarantee is the SHAPE of `computeNextDueAt` (no action parameter exists);
- * this returns `true` purely as an explicit review anchor.
- */
-export declare function assertOperatingCadenceCannotMutate(): Promise<boolean>;
-//# sourceMappingURL=cadence.d.ts.map

package/dist/services/operate/cadence.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cadence.d.ts","sourceRoot":"","sources":["../../../src/services/operate/cadence.ts"],"names":[],"mappings":"AAIA,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,MAAM,gBAAgB,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;AA8C1D;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGxB;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB;AAED;;;;;GAKG;AACH,wBAAsB,kCAAkC,IAAI,OAAO,CAAC,OAAO,CAAC,CAE3E"}

package/dist/services/operate/cadence.js

@@ -1,56 +0,0 @@
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { recordOperatingLastRunAt } from './config.js';
-import { resolveOperatingPipelineRoot } from './protocol.js';
-import { OperateError } from './types.js';
-let cachedCadenceModule = null;
-async function loadCadenceModule() {
-    cachedCadenceModule ??= (async () => {
-        const root = resolveOperatingPipelineRoot();
-        if (!root) {
-            throw new OperateError('E_PIPELINE_NOT_INSTALLED', 'Operating cadence status requires the planr-pipeline cadence calculator.');
-        }
-        const module = (await import(pathToFileURL(path.join(root, 'lib', 'operate', 'cadence.mjs')).href));
-        if (typeof module.computeNextDueDate !== 'function' ||
-            typeof module.assertCadenceCannotMutate !== 'function') {
-            throw new OperateError('E_PIPELINE_NOT_INSTALLED', 'The installed pipeline does not expose the Protocol v1.3 cadence calculator.');
-        }
-        return module;
-    })();
-    return cachedCadenceModule;
-}
-/**
- * Compute the surfaced next-due instant for a cadence via the pipeline's pure
- * calculator (FR8 / E-008). `clock` is the injected `now` supplied by the CLI
- * boundary — the computation reads no wall clock. `manual` yields `null`;
- * `weekly` / `monthly` yield the calculator's RFC 3339 UTC instant (due
- * immediately when `lastRunAt` is absent).
- */
-export async function computeNextDueAt(cadence, lastRunAt, clock) {
-    const module = await loadCadenceModule();
-    return module.computeNextDueDate(cadence, lastRunAt, clock).nextDueAt;
-}
-/**
- * Record the cadence `lastRunAt` marker when a cycle reaches a terminal
- * reviewable/blocked/closed state (FR8 / E-008). Delegates the atomic
- * machine-local preferences write to `config.ts`, keeping cadence policy in one
- * module while persistence stays with the preferences owner. `runAt` is the
- * injected cycle instant (RFC 3339 UTC), never a wall-clock read here.
- */
-export async function recordOperatingCadenceRun(input) {
-    await recordOperatingLastRunAt({
-        projectRoot: input.projectRoot,
-        localRoot: input.localRoot,
-        lastRunAt: input.runAt,
-    });
-}
-/**
- * FR8 never-acts anchor. Re-exposes the pipeline's structural guarantee that the
- * cadence path cannot accept a finding, apply a route, or invoke PLAN/SHIP. The
- * guarantee is the SHAPE of `computeNextDueAt` (no action parameter exists);
- * this returns `true` purely as an explicit review anchor.
- */
-export async function assertOperatingCadenceCannotMutate() {
-    return (await loadCadenceModule()).assertCadenceCannotMutate();
-}
-//# sourceMappingURL=cadence.js.map

package/dist/services/operate/cadence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cadence.js","sourceRoot":"","sources":["../../../src/services/operate/cadence.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAwB,MAAM,YAAY,CAAC;AAyChE,IAAI,mBAAmB,GAA0C,IAAI,CAAC;AAEtE,KAAK,UAAU,iBAAiB;IAC9B,mBAAmB,KAAK,CAAC,KAAK,IAAI,EAAE;QAClC,MAAM,IAAI,GAAG,4BAA4B,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,YAAY,CACpB,0BAA0B,EAC1B,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAC1B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CACrE,CAA8C,CAAC;QAChD,IACE,OAAO,MAAM,CAAC,kBAAkB,KAAK,UAAU;YAC/C,OAAO,MAAM,CAAC,yBAAyB,KAAK,UAAU,EACtD,CAAC;YACD,MAAM,IAAI,YAAY,CACpB,0BAA0B,EAC1B,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,OAAO,MAA+B,CAAC;IACzC,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAyB,EACzB,SAAwB,EACxB,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,OAAO,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAI/C;IACC,MAAM,wBAAwB,CAAC;QAC7B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,KAAK;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC;IACtD,OAAO,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC,yBAAyB,EAAE,CAAC;AACjE,CAAC"}

package/dist/services/operate/canonical.d.ts

@@ -1,18 +0,0 @@
-import type { OperatingContentReference, OperatingSensitivity } from './types.js';
-/**
- * RFC 8785/JCS-compatible serialization for I-JSON values. It deliberately
- * rejects non-JSON values instead of silently coercing them.
- */
-export declare function canonicalize(value: unknown): string;
-export declare function canonicalBytes(value: unknown): Uint8Array;
-export declare function sha256Bytes(value: Uint8Array | string): string;
-export declare function sha256Digest(value: Uint8Array | string): `sha256:${string}`;
-export declare function canonicalDigest(value: unknown): `sha256:${string}`;
-export declare function hmacDigest(value: unknown, key: Uint8Array): `hmac-sha256:${string}`;
-export declare function verifyHmacDigest(value: unknown, signature: `hmac-sha256:${string}`, key: Uint8Array): boolean;
-export interface ContentStoreOptions {
-    sensitivity?: OperatingSensitivity;
-}
-export declare function putCanonicalContent(contentRoot: string, value: unknown, options?: ContentStoreOptions): Promise<OperatingContentReference>;
-export declare function readCanonicalContent<T>(contentRoot: string, reference: OperatingContentReference): Promise<T>;
-//# sourceMappingURL=canonical.d.ts.map

package/dist/services/operate/canonical.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../../src/services/operate/canonical.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAuGlF;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAEzD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,MAAM,EAAE,CAE3E;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,MAAM,EAAE,CAElE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,eAAe,MAAM,EAAE,CAEnF;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,eAAe,MAAM,EAAE,EAClC,GAAG,EAAE,UAAU,GACd,OAAO,CAKT;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,oBAAoB,CAAC;CACpC;AAED,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAkCpC;AAED,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,yBAAyB,GACnC,OAAO,CAAC,CAAC,CAAC,CAkBZ"}

package/dist/services/operate/canonical.js

@@ -1,157 +0,0 @@
-import { createHash, createHmac, timingSafeEqual } from 'node:crypto';
-import { mkdir, open, readFile } from 'node:fs/promises';
-import path from 'node:path';
-import { OperateError } from './types.js';
-const textEncoder = new TextEncoder();
-function serializeNumber(value) {
-    if (!Number.isFinite(value)) {
-        throw new OperateError('E_OPERATE_STATE_INVALID', 'Canonical JSON rejects non-finite numbers.');
-    }
-    return Object.is(value, -0) ? '0' : JSON.stringify(value);
-}
-function assertUnicodeScalarString(value) {
-    for (let index = 0; index < value.length; index += 1) {
-        const unit = value.charCodeAt(index);
-        if (unit >= 0xd800 && unit <= 0xdbff) {
-            const next = value.charCodeAt(index + 1);
-            if (!(next >= 0xdc00 && next <= 0xdfff)) {
-                throw new OperateError('E_OPERATE_STATE_INVALID', 'Canonical JSON rejects lone Unicode surrogate code units.');
-            }
-            index += 1;
-        }
-        else if (unit >= 0xdc00 && unit <= 0xdfff) {
-            throw new OperateError('E_OPERATE_STATE_INVALID', 'Canonical JSON rejects lone Unicode surrogate code units.');
-        }
-    }
-}
-function serialize(value, ancestors) {
-    if (value === null)
-        return 'null';
-    if (typeof value === 'string') {
-        assertUnicodeScalarString(value);
-        return JSON.stringify(value);
-    }
-    if (typeof value === 'boolean')
-        return value ? 'true' : 'false';
-    if (typeof value === 'number')
-        return serializeNumber(value);
-    if (typeof value === 'bigint' || typeof value === 'symbol' || typeof value === 'function') {
-        throw new OperateError('E_OPERATE_STATE_INVALID', `Canonical JSON cannot serialize ${typeof value}.`);
-    }
-    if (value === undefined) {
-        throw new OperateError('E_OPERATE_STATE_INVALID', 'Canonical JSON rejects undefined values.');
-    }
-    if (typeof value !== 'object') {
-        throw new OperateError('E_OPERATE_STATE_INVALID', 'Unsupported canonical JSON value.');
-    }
-    if (ancestors.has(value)) {
-        throw new OperateError('E_OPERATE_STATE_INVALID', 'Canonical JSON rejects cyclic values.');
-    }
-    ancestors.add(value);
-    try {
-        if (Array.isArray(value)) {
-            const items = [];
-            for (let index = 0; index < value.length; index += 1) {
-                if (!Object.hasOwn(value, index) || value[index] === undefined) {
-                    throw new OperateError('E_OPERATE_STATE_INVALID', 'Canonical JSON rejects sparse or undefined array entries.');
-                }
-                items.push(serialize(value[index], ancestors));
-            }
-            const extraKeys = Object.keys(value).filter((key) => !/^(?:0|[1-9]\d*)$/.test(key) || Number(key) >= value.length);
-            if (extraKeys.length > 0) {
-                throw new OperateError('E_OPERATE_STATE_INVALID', 'Canonical JSON rejects arrays with named properties.');
-            }
-            return `[${items.join(',')}]`;
-        }
-        const prototype = Object.getPrototypeOf(value);
-        if (prototype !== Object.prototype && prototype !== null) {
-            throw new OperateError('E_OPERATE_STATE_INVALID', 'Canonical JSON accepts plain objects only.');
-        }
-        const object = value;
-        const entries = Object.keys(object)
-            .sort()
-            .map((key) => {
-            assertUnicodeScalarString(key);
-            return `${JSON.stringify(key)}:${serialize(object[key], ancestors)}`;
-        });
-        return `{${entries.join(',')}}`;
-    }
-    finally {
-        ancestors.delete(value);
-    }
-}
-/**
- * RFC 8785/JCS-compatible serialization for I-JSON values. It deliberately
- * rejects non-JSON values instead of silently coercing them.
- */
-export function canonicalize(value) {
-    return serialize(value, new Set());
-}
-export function canonicalBytes(value) {
-    return textEncoder.encode(canonicalize(value));
-}
-export function sha256Bytes(value) {
-    return createHash('sha256').update(value).digest('hex');
-}
-export function sha256Digest(value) {
-    return `sha256:${sha256Bytes(value)}`;
-}
-export function canonicalDigest(value) {
-    return sha256Digest(canonicalBytes(value));
-}
-export function hmacDigest(value, key) {
-    return `hmac-sha256:${createHmac('sha256', key).update(canonicalBytes(value)).digest('hex')}`;
-}
-export function verifyHmacDigest(value, signature, key) {
-    const expected = hmacDigest(value, key);
-    const left = Buffer.from(expected);
-    const right = Buffer.from(signature);
-    return left.byteLength === right.byteLength && timingSafeEqual(left, right);
-}
-export async function putCanonicalContent(contentRoot, value, options = {}) {
-    const bytes = canonicalBytes(value);
-    const digest = sha256Digest(bytes);
-    const hex = digest.slice('sha256:'.length);
-    const directory = path.join(contentRoot, hex.slice(0, 2));
-    const target = path.join(directory, `${hex.slice(2)}.json`);
-    await mkdir(directory, { recursive: true, mode: 0o700 });
-    try {
-        const handle = await open(target, 'wx', 0o600);
-        try {
-            await handle.writeFile(bytes);
-            await handle.sync();
-        }
-        finally {
-            await handle.close();
-        }
-    }
-    catch (error) {
-        if (error.code !== 'EEXIST')
-            throw error;
-        const existing = await readFile(target);
-        if (sha256Digest(existing) !== digest) {
-            throw new OperateError('E_OPERATE_STATE_INVALID', `Content-addressed object ${digest} does not match its path.`);
-        }
-    }
-    return {
-        algorithm: 'sha256',
-        digest,
-        mediaType: 'application/json',
-        size: bytes.byteLength,
-        sensitivity: options.sensitivity ?? 'internal',
-    };
-}
-export async function readCanonicalContent(contentRoot, reference) {
-    const hex = reference.digest.slice('sha256:'.length);
-    const target = path.join(contentRoot, hex.slice(0, 2), `${hex.slice(2)}.json`);
-    const bytes = await readFile(target);
-    if (bytes.byteLength !== reference.size || sha256Digest(bytes) !== reference.digest) {
-        throw new OperateError('E_OPERATE_STATE_INVALID', `Content-addressed object ${reference.digest} failed integrity verification.`);
-    }
-    const parsed = JSON.parse(bytes.toString('utf8'));
-    if (canonicalize(parsed) !== bytes.toString('utf8')) {
-        throw new OperateError('E_OPERATE_STATE_INVALID', `Content-addressed object ${reference.digest} is not canonical JSON.`);
-    }
-    return parsed;
-}
-//# sourceMappingURL=canonical.js.map