openplanr 1.25.3 → 2.0.1

package/dist/services/operate/screened-evidence-service.js

@@ -0,0 +1,186 @@
+import { createHash } from 'node:crypto';
+import { lstat, readdir } from 'node:fs/promises';
+import path from 'node:path';
+import { readScreenedRepositoryText, resolveScreenedRepositoryFile, } from './repository-read-service.js';
+const MAX_EVIDENCE_BYTES = 128 * 1024;
+const MAX_DIRECTORY_ENTRIES = 128;
+const FILESYSTEM_SOURCES = Object.freeze([
+    {
+        sourceContract: 'repository-architecture',
+        sourceRootId: 'project-repository-architecture',
+        paths: Object.freeze([
+            'package.json',
+            'tsconfig.json',
+            'pyproject.toml',
+            'Cargo.toml',
+            'go.mod',
+            'ARCHITECTURE.md',
+            'docs/architecture.md',
+            'docs/ARCHITECTURE.md',
+        ]),
+    },
+    {
+        sourceContract: 'ci-test-evidence',
+        sourceRootId: 'project-ci-test-evidence',
+        paths: Object.freeze([
+            '.github/workflows/ci.yml',
+            '.github/workflows/ci.yaml',
+            'vitest.config.ts',
+            'vitest.config.mts',
+            'pytest.ini',
+        ]),
+    },
+]);
+function sha256(text) {
+    return `sha256:${createHash('sha256').update(Buffer.from(text, 'utf8')).digest('hex')}`;
+}
+function missing(error) {
+    const code = error?.code;
+    return code === 'ENOENT' || code === 'ENOTDIR';
+}
+async function screenedText(projectDir, relativePath) {
+    try {
+        await resolveScreenedRepositoryFile(projectDir, relativePath);
+        return await readScreenedRepositoryText(projectDir, relativePath, {
+            maxBytes: MAX_EVIDENCE_BYTES,
+        });
+    }
+    catch (error) {
+        if (missing(error))
+            return null;
+        throw error;
+    }
+}
+async function safeEntries(projectDir, relativeDirectory) {
+    const absolute = path.join(projectDir, ...relativeDirectory.split('/'));
+    try {
+        const metadata = await lstat(absolute);
+        if (metadata.isSymbolicLink() || !metadata.isDirectory()) {
+            throw Object.assign(new Error(`Screened evidence directory is not a real directory: ${relativeDirectory}`), {
+                code: 'E_OPERATE_REPOSITORY_PATH_DENIED',
+            });
+        }
+        return (await readdir(absolute, { withFileTypes: true }))
+            .sort((left, right) => left.name.localeCompare(right.name))
+            .slice(0, MAX_DIRECTORY_ENTRIES);
+    }
+    catch (error) {
+        if (missing(error))
+            return [];
+        throw error;
+    }
+}
+async function discoverPlanningPaths(projectDir) {
+    const discovered = [];
+    for (const entry of await safeEntries(projectDir, '.planr/specs')) {
+        if (!entry.isDirectory() || entry.isSymbolicLink())
+            continue;
+        const directory = `.planr/specs/${entry.name}`;
+        const document = (await safeEntries(projectDir, directory)).find((candidate) => candidate.isFile() && /^SPEC-[0-9]+.*\.md$/u.test(candidate.name));
+        if (document)
+            discovered.push(`${directory}/${document.name}`);
+    }
+    const story = (await safeEntries(projectDir, '.planr/stories')).find((entry) => entry.isFile() && /-gherkin\.feature$/u.test(entry.name));
+    if (story)
+        discovered.push(`.planr/stories/${story.name}`);
+    return discovered.sort().slice(0, 2);
+}
+function filesystemCandidate(input) {
+    return {
+        kind: 'operating-evidence-candidate',
+        schemaVersion: '1.0.0',
+        protocolVersion: '2.0.0',
+        candidateId: input.candidateId,
+        ...input.scope,
+        sourceArtifactId: input.sourceArtifactId,
+        evidenceKind: 'filesystem',
+        locator: { sourceRootId: input.sourceRootId, path: input.relativePath },
+        provider: { id: 'local-filesystem-evidence-provider', version: '2.0.0' },
+        resolver: { id: 'local-filesystem-evidence-resolver', version: '2.0.0' },
+    };
+}
+/**
+ * Builds only adapter-owned Candidates for a tiny public-file allowlist. Callers supply
+ * scope and runtime IDs, never source contracts, capabilities, roots, or arbitrary paths.
+ */
+export async function prepareScreenedOperateEvidence(input) {
+    const projectDir = path.resolve(input.projectDir);
+    const prepared = [];
+    for (const source of FILESYSTEM_SOURCES) {
+        for (const relativePath of source.paths) {
+            if ((await screenedText(projectDir, relativePath)) === null)
+                continue;
+            const resolverSource = {
+                kind: 'filesystem',
+                sourceRootId: source.sourceRootId,
+                rootPath: projectDir,
+                maxBytes: MAX_EVIDENCE_BYTES,
+                classification: 'internal',
+                sourceContract: { id: source.sourceContract, version: '1.0.0' },
+            };
+            prepared.push({
+                candidate: filesystemCandidate({
+                    candidateId: input.issueCandidateId(),
+                    sourceArtifactId: input.sourceArtifactId,
+                    scope: input.scope,
+                    sourceRootId: source.sourceRootId,
+                    relativePath,
+                }),
+                source: resolverSource,
+                relativePath,
+                sourceContractId: source.sourceContract,
+            });
+        }
+    }
+    let artifactIndex = 0;
+    for (const relativePath of await discoverPlanningPaths(projectDir)) {
+        const text = await screenedText(projectDir, relativePath);
+        if (text === null)
+            continue;
+        artifactIndex += 1;
+        const artifactId = `planning-acceptance-${artifactIndex}`;
+        const contentHash = sha256(text);
+        const source = {
+            kind: 'planr',
+            projectId: 'screened-planr-project',
+            rootPath: projectDir,
+            maxBytes: MAX_EVIDENCE_BYTES,
+            classification: 'internal',
+            scope: input.scope,
+            sourceContract: { id: 'planning-acceptance', version: '1.0.0' },
+            artifacts: [
+                {
+                    artifactId,
+                    artifactType: 'planning-artifact',
+                    path: relativePath,
+                    contentHash,
+                },
+            ],
+        };
+        prepared.push({
+            candidate: {
+                kind: 'operating-evidence-candidate',
+                schemaVersion: '1.0.0',
+                protocolVersion: '2.0.0',
+                candidateId: input.issueCandidateId(),
+                ...input.scope,
+                sourceArtifactId: input.sourceArtifactId,
+                evidenceKind: 'planr',
+                locator: {
+                    projectId: source.projectId,
+                    artifactId,
+                    artifactType: 'planning-artifact',
+                    path: relativePath,
+                    contentHash,
+                },
+                provider: { id: 'local-planr-evidence-provider', version: '2.0.0' },
+                resolver: { id: 'local-planr-evidence-resolver', version: '2.0.0' },
+            },
+            source,
+            relativePath,
+            sourceContractId: 'planning-acceptance',
+        });
+    }
+    return Object.freeze(prepared);
+}
+//# sourceMappingURL=screened-evidence-service.js.map

package/dist/services/operate/screened-evidence-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screened-evidence-service.js","sourceRoot":"","sources":["../../../src/services/operate/screened-evidence-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AACtC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC;QACE,cAAc,EAAE,yBAAkC;QAClD,YAAY,EAAE,iCAAiC;QAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,cAAc;YACd,eAAe;YACf,gBAAgB;YAChB,YAAY;YACZ,QAAQ;YACR,iBAAiB;YACjB,sBAAsB;YACtB,sBAAsB;SACvB,CAAC;KACH;IACD;QACE,cAAc,EAAE,kBAA2B;QAC3C,YAAY,EAAE,0BAA0B;QACxC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,0BAA0B;YAC1B,2BAA2B;YAC3B,kBAAkB;YAClB,mBAAmB;YACnB,YAAY;SACb,CAAC;KACH;CACF,CAAC,CAAC;AAWH,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,UAAkB,EAAE,YAAoB;IAClE,IAAI,CAAC;QACH,MAAM,6BAA6B,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9D,OAAO,MAAM,0BAA0B,CAAC,UAAU,EAAE,YAAY,EAAE;YAChE,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,UAAkB,EAAE,iBAAyB;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YACzD,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,wDAAwD,iBAAiB,EAAE,CAAC,EACtF;gBACE,IAAI,EAAE,kCAAkC;aACzC,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;aACtD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aAC1D,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,UAAkB;IACrD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,WAAW,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,SAAS;QAC7D,MAAM,SAAS,GAAG,gBAAgB,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,CAAC,MAAM,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAC9D,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACjF,CAAC;QACF,IAAI,QAAQ;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,WAAW,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAClE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CACpE,CAAC;IACF,IAAI,KAAK;QAAE,UAAU,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAM5B;IACC,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,aAAa,EAAE,OAAO;QACtB,eAAe,EAAE,OAAO;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,GAAG,KAAK,CAAC,KAAK;QACd,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,YAAY,EAAE,YAAY;QAC1B,OAAO,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE;QACvE,QAAQ,EAAE,EAAE,EAAE,EAAE,oCAAoC,EAAE,OAAO,EAAE,OAAO,EAAE;QACxE,QAAQ,EAAE,EAAE,EAAE,EAAE,oCAAoC,EAAE,OAAO,EAAE,OAAO,EAAE;KACzE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAKpD;IACC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAkC,EAAE,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACxC,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,KAAK,IAAI;gBAAE,SAAS;YACtE,MAAM,cAAc,GAAmC;gBACrD,IAAI,EAAE,YAAY;gBAClB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,kBAAkB;gBAC5B,cAAc,EAAE,UAAU;gBAC1B,cAAc,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE;aAChE,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,mBAAmB,CAAC;oBAC7B,WAAW,EAAE,KAAK,CAAC,gBAAgB,EAAE;oBACrC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;oBACxC,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,YAAY;iBACb,CAAC;gBACF,MAAM,EAAE,cAAc;gBACtB,YAAY;gBACZ,gBAAgB,EAAE,MAAM,CAAC,cAAc;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,YAAY,IAAI,MAAM,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,aAAa,IAAI,CAAC,CAAC;QACnB,MAAM,UAAU,GAAG,uBAAuB,aAAa,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAmC;YAC7C,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,wBAAwB;YACnC,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,kBAAkB;YAC5B,cAAc,EAAE,UAAU;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,cAAc,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE;YAC/D,SAAS,EAAE;gBACT;oBACE,UAAU;oBACV,YAAY,EAAE,mBAAmB;oBACjC,IAAI,EAAE,YAAY;oBAClB,WAAW;iBACZ;aACF;SACF,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE;gBACT,IAAI,EAAE,8BAA8B;gBACpC,aAAa,EAAE,OAAO;gBACtB,eAAe,EAAE,OAAO;gBACxB,WAAW,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBACrC,GAAG,KAAK,CAAC,KAAK;gBACd,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,YAAY,EAAE,OAAO;gBACrB,OAAO,EAAE;oBACP,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU;oBACV,YAAY,EAAE,mBAAmB;oBACjC,IAAI,EAAE,YAAY;oBAClB,WAAW;iBACZ;gBACD,QAAQ,EAAE,EAAE,EAAE,EAAE,+BAA+B,EAAE,OAAO,EAAE,OAAO,EAAE;gBACnE,QAAQ,EAAE,EAAE,EAAE,EAAE,+BAA+B,EAAE,OAAO,EAAE,OAAO,EAAE;aACpE;YACD,MAAM;YACN,YAAY;YACZ,gBAAgB,EAAE,qBAAqB;SACxC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC"}

package/dist/services/operate/search-hit-contract.d.ts

@@ -0,0 +1,11 @@
+export type AccessSafeOperateSearchHitV1 = Readonly<{
+    kind: string;
+    subjectId: string;
+    title: string;
+    summary: string | null;
+    state: string | null;
+    deepLink: string | null;
+}>;
+/** Copy the closed fields from rows that already passed the owner display validator. */
+export declare function projectAccessSafeOperateSearchHits(results: unknown): readonly AccessSafeOperateSearchHitV1[];
+//# sourceMappingURL=search-hit-contract.d.ts.map

package/dist/services/operate/search-hit-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-hit-contract.d.ts","sourceRoot":"","sources":["../../../src/services/operate/search-hit-contract.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC,CAAC;AAEH,wFAAwF;AACxF,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,OAAO,GACf,SAAS,4BAA4B,EAAE,CA2BzC"}

package/dist/services/operate/search-hit-contract.js

@@ -0,0 +1,29 @@
+/** Copy the closed fields from rows that already passed the owner display validator. */
+export function projectAccessSafeOperateSearchHits(results) {
+    if (!Array.isArray(results))
+        return Object.freeze([]);
+    const hits = [];
+    for (const entry of results) {
+        if (typeof entry !== 'object' || entry === null)
+            continue;
+        const kind = Reflect.get(entry, 'kind');
+        const subjectId = Reflect.get(entry, 'subjectId');
+        const title = Reflect.get(entry, 'title');
+        const summary = Reflect.get(entry, 'summary');
+        const state = Reflect.get(entry, 'state');
+        const deepLink = Reflect.get(entry, 'deepLink');
+        if (typeof kind !== 'string' || typeof subjectId !== 'string' || typeof title !== 'string') {
+            continue;
+        }
+        hits.push(Object.freeze({
+            kind,
+            subjectId,
+            title,
+            summary: typeof summary === 'string' ? summary : null,
+            state: typeof state === 'string' ? state : null,
+            deepLink: typeof deepLink === 'string' && deepLink.startsWith('#/operate/') ? deepLink : null,
+        }));
+    }
+    return Object.freeze(hits);
+}
+//# sourceMappingURL=search-hit-contract.js.map

package/dist/services/operate/search-hit-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-hit-contract.js","sourceRoot":"","sources":["../../../src/services/operate/search-hit-contract.ts"],"names":[],"mappings":"AASA,wFAAwF;AACxF,MAAM,UAAU,kCAAkC,CAChD,OAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAmC,EAAE,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC3F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CACP,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI;YACJ,SAAS;YACT,KAAK;YACL,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YACrD,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAC/C,QAAQ,EACN,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;SACtF,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/services/operate/session-capability.d.ts

@@ -0,0 +1,61 @@
+export type OperateSessionBindingV2 = {
+    actorId: string;
+    scopeId: string;
+    domainId: string;
+    domainVersion: string;
+    cycleId: string;
+    eventHead: {
+        sequence: number;
+        hash: string | null;
+    };
+    sourceViewHash: string;
+    actionLocator: {
+        subjectId: string;
+        actionDigest: string;
+    };
+};
+export type OperateSessionCapabilityV2 = {
+    capability: string;
+    sessionId: string;
+    issuedAt: string;
+    expiresAt: string;
+    binding: OperateSessionBindingV2;
+};
+type SessionRecord = Omit<OperateSessionCapabilityV2, 'capability'> & {
+    capabilityHash: Buffer;
+    origin: string;
+};
+export declare class OperateSessionCapabilityError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Process-local bearer capabilities for the loopback browser. Only the digest
+ * is retained. Restart intentionally revokes every browser session while the
+ * project-local Operate state remains durable and replayable.
+ */
+export declare class OperateSessionCapabilityIssuerV2 {
+    private readonly options;
+    private readonly records;
+    constructor(options?: {
+        ttlMs?: number;
+        now?: () => number;
+        entropy?: () => Buffer;
+    });
+    issue(binding: OperateSessionBindingV2, origin: string): OperateSessionCapabilityV2;
+    authorize(input: {
+        sessionId: string;
+        capability: string;
+        origin: string;
+        binding: OperateSessionBindingV2;
+    }): Readonly<SessionRecord>;
+    assert(input: {
+        sessionId: string;
+        capability: string;
+        origin: string;
+    }): Readonly<SessionRecord>;
+    revoke(sessionId: string): void;
+}
+export declare function createOperateSessionCapabilityIssuerV2(options?: ConstructorParameters<typeof OperateSessionCapabilityIssuerV2>[0]): OperateSessionCapabilityIssuerV2;
+export {};
+//# sourceMappingURL=session-capability.d.ts.map

package/dist/services/operate/session-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-capability.d.ts","sourceRoot":"","sources":["../../../src/services/operate/session-capability.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,uBAAuB,CAAC;CAClC,CAAC;AAEF,KAAK,aAAa,GAAG,IAAI,CAAC,0BAA0B,EAAE,YAAY,CAAC,GAAG;IACpE,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,qBAAa,6BAA8B,SAAQ,KAAK;IAEpD,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKlB;AAkCD;;;;GAIG;AACH,qBAAa,gCAAgC;IAIzC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;gBAGzC,OAAO,GAAE;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC;KACnB;IAGR,KAAK,CAAC,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,GAAG,0BAA0B;IAoDnF,SAAS,CAAC,KAAK,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,uBAAuB,CAAC;KAClC,GAAG,QAAQ,CAAC,aAAa,CAAC;IAe3B,MAAM,CAAC,KAAK,EAAE;QACZ,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,QAAQ,CAAC,aAAa,CAAC;IA2B3B,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAGhC;AAED,wBAAgB,sCAAsC,CACpD,OAAO,GAAE,qBAAqB,CAAC,OAAO,gCAAgC,CAAC,CAAC,CAAC,CAAM,GAC9E,gCAAgC,CAElC"}

package/dist/services/operate/session-capability.js

@@ -0,0 +1,124 @@
+import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+const DEFAULT_TTL_MS = 10 * 60 * 1000;
+const MAX_ACTIVE_SESSIONS = 256;
+export class OperateSessionCapabilityError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = code;
+    }
+}
+function digest(value) {
+    return createHash('sha256').update(value).digest();
+}
+function exactBinding(left, right) {
+    return (left.actorId === right.actorId &&
+        left.scopeId === right.scopeId &&
+        left.domainId === right.domainId &&
+        left.domainVersion === right.domainVersion &&
+        left.cycleId === right.cycleId &&
+        left.eventHead.sequence === right.eventHead.sequence &&
+        left.eventHead.hash === right.eventHead.hash &&
+        left.sourceViewHash === right.sourceViewHash &&
+        left.actionLocator.subjectId === right.actionLocator.subjectId &&
+        left.actionLocator.actionDigest === right.actionLocator.actionDigest);
+}
+function validOrigin(value) {
+    try {
+        const origin = new URL(value);
+        return (origin.origin === value &&
+            origin.protocol === 'http:' &&
+            ['127.0.0.1', 'localhost', '[::1]'].includes(origin.hostname));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Process-local bearer capabilities for the loopback browser. Only the digest
+ * is retained. Restart intentionally revokes every browser session while the
+ * project-local Operate state remains durable and replayable.
+ */
+export class OperateSessionCapabilityIssuerV2 {
+    options;
+    records = new Map();
+    constructor(options = {}) {
+        this.options = options;
+    }
+    issue(binding, origin) {
+        if (!validOrigin(origin)) {
+            throw new OperateSessionCapabilityError('OPERATE_ORIGIN_INVALID', 'The local command session requires an exact loopback origin.');
+        }
+        const now = this.options.now?.() ?? Date.now();
+        for (const [sessionId, record] of this.records) {
+            if (now >= Date.parse(record.expiresAt))
+                this.records.delete(sessionId);
+        }
+        if (this.records.size >= MAX_ACTIVE_SESSIONS) {
+            throw new OperateSessionCapabilityError('OPERATE_SESSION_LIMIT', 'The bounded local command-session capacity is exhausted.');
+        }
+        const ttlMs = this.options.ttlMs ?? DEFAULT_TTL_MS;
+        if (!Number.isSafeInteger(ttlMs) || ttlMs < 1_000 || ttlMs > 60 * 60 * 1000) {
+            throw new OperateSessionCapabilityError('OPERATE_SESSION_INVALID', 'The local command session expiry is outside its bounded policy.');
+        }
+        const capability = (this.options.entropy?.() ?? randomBytes(32)).toString('base64url');
+        if (capability.length < 43) {
+            throw new OperateSessionCapabilityError('OPERATE_SESSION_INVALID', 'The local command session capability has insufficient entropy.');
+        }
+        const sessionId = `opsess_${randomBytes(16).toString('hex')}`;
+        const issuedAt = new Date(now).toISOString();
+        const expiresAt = new Date(now + ttlMs).toISOString();
+        const record = {
+            sessionId,
+            capabilityHash: digest(capability),
+            issuedAt,
+            expiresAt,
+            binding: structuredClone(binding),
+            origin,
+        };
+        this.records.set(sessionId, record);
+        return Object.freeze({
+            capability,
+            sessionId,
+            issuedAt,
+            expiresAt,
+            binding: structuredClone(binding),
+        });
+    }
+    authorize(input) {
+        const record = this.assert({
+            sessionId: input.sessionId,
+            capability: input.capability,
+            origin: input.origin,
+        });
+        if (!exactBinding(record.binding, input.binding)) {
+            throw new OperateSessionCapabilityError('OPERATE_SESSION_STALE', 'The local command session no longer matches the current actor, scope, or Event head.');
+        }
+        return record;
+    }
+    assert(input) {
+        const record = this.records.get(input.sessionId);
+        const supplied = digest(input.capability ?? '');
+        const expected = record?.capabilityHash ?? digest('unavailable-session-capability');
+        const validCapability = timingSafeEqual(supplied, expected) && record !== undefined;
+        if (!record || !validCapability) {
+            throw new OperateSessionCapabilityError('OPERATE_SESSION_DENIED', 'The local command session is unavailable or invalid.');
+        }
+        if (record.origin !== input.origin) {
+            throw new OperateSessionCapabilityError('OPERATE_ORIGIN_INVALID', 'The local command session belongs to a different origin.');
+        }
+        const now = this.options.now?.() ?? Date.now();
+        if (now >= Date.parse(record.expiresAt)) {
+            throw new OperateSessionCapabilityError('OPERATE_SESSION_EXPIRED', 'The local command session expired. Refresh the validated projection.');
+        }
+        return Object.freeze(structuredClone(record));
+    }
+    revoke(sessionId) {
+        this.records.delete(sessionId);
+    }
+}
+export function createOperateSessionCapabilityIssuerV2(options = {}) {
+    return new OperateSessionCapabilityIssuerV2(options);
+}
+//# sourceMappingURL=session-capability.js.map

package/dist/services/operate/session-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-capability.js","sourceRoot":"","sources":["../../../src/services/operate/session-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AA0BhC,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAE3C;IADX,YACW,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,IAA6B,EAAE,KAA8B;IACjF,OAAO,CACL,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAChC,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;QAC1C,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,SAAS,CAAC,QAAQ;QACpD,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,CAAC,IAAI;QAC5C,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAC5C,IAAI,CAAC,aAAa,CAAC,SAAS,KAAK,KAAK,CAAC,aAAa,CAAC,SAAS;QAC9D,IAAI,CAAC,aAAa,CAAC,YAAY,KAAK,KAAK,CAAC,aAAa,CAAC,YAAY,CACrE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,KAAK;YACvB,MAAM,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAC9D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAIxB;IAHF,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE5D,YACmB,UAIb,EAAE;QAJW,YAAO,GAAP,OAAO,CAIlB;IACL,CAAC;IAEJ,KAAK,CAAC,OAAgC,EAAE,MAAc;QACpD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,6BAA6B,CACrC,wBAAwB,EACxB,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/C,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,mBAAmB,EAAE,CAAC;YAC7C,MAAM,IAAI,6BAA6B,CACrC,uBAAuB,EACvB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,KAAK,IAAI,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YAC5E,MAAM,IAAI,6BAA6B,CACrC,yBAAyB,EACzB,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvF,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,6BAA6B,CACrC,yBAAyB,EACzB,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,MAAM,GAAkB;YAC5B,SAAS;YACT,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC;YAClC,QAAQ;YACR,SAAS;YACT,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC;YACjC,MAAM;SACP,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU;YACV,SAAS;YACT,QAAQ;YACR,SAAS;YACT,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,KAKT;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,6BAA6B,CACrC,uBAAuB,EACvB,sFAAsF,CACvF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,KAIN;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,EAAE,cAAc,IAAI,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACpF,MAAM,eAAe,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,KAAK,SAAS,CAAC;QACpF,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAChC,MAAM,IAAI,6BAA6B,CACrC,wBAAwB,EACxB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,IAAI,6BAA6B,CACrC,wBAAwB,EACxB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,6BAA6B,CACrC,yBAAyB,EACzB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;CACF;AAED,MAAM,UAAU,sCAAsC,CACpD,UAA6E,EAAE;IAE/E,OAAO,IAAI,gCAAgC,CAAC,OAAO,CAAC,CAAC;AACvD,CAAC"}

package/dist/services/operate/spec-operating-origin-service.d.ts

@@ -0,0 +1,60 @@
+import type { OpenPlanrConfig } from '../../models/types.js';
+type JsonRecord = Record<string, unknown>;
+export type OperatingSpecCreationReceipt = {
+    transactionId: string;
+    receiptHash: string;
+    correlationId: string;
+    proposalId: string;
+    proposalHash: string;
+    specId: string;
+    slug: string;
+    specDir: string;
+    specFile: string;
+    contentHash: string;
+    originPath: string;
+    originHash: string;
+    provenanceEventId: string;
+    replayed: boolean;
+};
+export type OperatingSpecCreationHooks = {
+    /** @internal deterministic crash injection used only by transaction tests. */
+    afterSpecPublish?: () => Promise<void> | void;
+    /** @internal deterministic crash injection used only by transaction tests. */
+    beforeProvenanceWrite?: () => Promise<void> | void;
+    /** @internal deterministic crash injection used only by transaction tests. */
+    afterProvenancePartialWrite?: () => Promise<void> | void;
+    /** @internal deterministic crash injection used only by transaction tests. */
+    afterProvenanceSyncBeforeReturn?: () => Promise<void> | void;
+};
+export type OperatingOriginAuthority = Readonly<{
+    actorId: string;
+    cycleId: string;
+    scopeId: string;
+    domainId: string;
+    domainVersion: string;
+    specId: string;
+    originHash: string;
+}>;
+/**
+ * Promote one confirmed planning proposal into a SPEC, closed origin sidecar,
+ * and separately appended provenance record. Directory rename is the SPEC +
+ * origin commit point; a missing provenance append is reconciled on exact retry.
+ */
+export declare function createSpecFromOperatingProposal(input: {
+    projectDir: string;
+    config: OpenPlanrConfig;
+    proposal: JsonRecord;
+    actor: {
+        actorId: string;
+        kind: 'human';
+    };
+    hooks?: OperatingSpecCreationHooks;
+}): Promise<OperatingSpecCreationReceipt>;
+/**
+ * Load only the immutable owner/source identity required to authorize a trace.
+ * Canonical SPEC markdown bytes are deliberately not read at this boundary.
+ */
+export declare function readSpecOperatingOriginAuthority(specDir: string): Promise<OperatingOriginAuthority>;
+export declare function readSpecOperatingOrigin(specDir: string): Promise<JsonRecord>;
+export {};
+//# sourceMappingURL=spec-operating-origin-service.d.ts.map

package/dist/services/operate/spec-operating-origin-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-operating-origin-service.d.ts","sourceRoot":"","sources":["../../../src/services/operate/spec-operating-origin-service.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAoB7D,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1C,MAAM,MAAM,4BAA4B,GAAG;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9C,8EAA8E;IAC9E,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnD,8EAA8E;IAC9E,2BAA2B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzD,8EAA8E;IAC9E,+BAA+B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC9D,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CAAC;AAoLH;;;;GAIG;AACH,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1C,KAAK,CAAC,EAAE,0BAA0B,CAAC;CACpC,GAAG,OAAO,CAAC,4BAA4B,CAAC,CA0MxC;AAsDD;;;GAGG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,wBAAwB,CAAC,CAWnC;AAED,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAkBlF"}