patchwork-os 1.2.0-beta.3.canary.897 → 1.2.0-beta.3.canary.899

package/dist/recipes/simulation/policyProjection.js

@@ -0,0 +1,62 @@
+/**
+ * What-If Preview — effective-policy projection.
+ *
+ * Answers "would the runtime hold this step for a human?" for every step of a
+ * simulated recipe, by running the SAME calculation the runners consult per
+ * step: `explainRecipePolicy` (the body of `patchwork policy explain`) builds
+ * each step's `EffectivePolicyInput` and calls `computeEffectivePolicy`. This
+ * module only maps those verdicts onto the dry-run plan's step ids — it holds
+ * no rule of its own, because a preview with its own rule drifts from
+ * enforcement and the drift is silent.
+ */
+/** The stage that decided the final verdict, for a one-line reason. */
+function decidingReason(result) {
+    const find = (pred) => result.stages.find(pred)?.reason;
+    if (result.final === "REFUSED") {
+        return find((s) => s.verdict === "REFUSE") ?? "refused";
+    }
+    if (!result.consultsApproval) {
+        return find((s) => s.stage === "trigger") ?? "approval gate not consulted";
+    }
+    if (result.final === "HUMAN_APPROVAL_REQUIRED") {
+        return (find((s) => (s.stage === "worker_authority" || s.stage === "tool_tier") &&
+            s.verdict === "APPROVAL") ?? "approval required");
+    }
+    return find((s) => s.stage === "tool_tier") ?? "allowed";
+}
+export async function projectRecipePolicy(recipeFile, plan, opts = {}) {
+    const { explainRecipePolicy } = await import("../../commands/policyExplain.js");
+    const explained = await explainRecipePolicy(recipeFile, {
+        ...(opts.config && { config: opts.config }),
+        ...(opts.workersDir && { workersDir: opts.workersDir }),
+        ...(opts.patchworkDir && { patchworkDir: opts.patchworkDir }),
+    });
+    const steps = new Map();
+    const chained = plan.triggerType === "chained";
+    for (const [i, planStep] of plan.steps.entries()) {
+        // Chained steps carry a required `id`, which is also explain's step id.
+        // Flat plan ids fall back differently (tool id vs `step_N`), so flat
+        // steps are matched by their position in `steps:` instead.
+        const rawIndex = opts.selectedIndex ?? i;
+        const match = chained
+            ? explained.steps.find((e) => e.stepId === planStep.id)
+            : explained.steps.find((e) => e.index === rawIndex);
+        if (!match)
+            continue;
+        steps.set(planStep.id, {
+            final: match.result.final,
+            consultsApproval: match.result.consultsApproval,
+            reason: decidingReason(match.result),
+        });
+    }
+    // The trigger the verdicts were computed for (explain evaluates a top-level
+    // chained run as "manual", as the chained runner does).
+    const evaluated = explained.steps[0]?.input.trigger;
+    return {
+        profile: explained.profileMode === "governed" ? "governed" : "compat",
+        trigger: String(evaluated ??
+            (explained.trigger === "chained" ? "manual" : explained.trigger)),
+        steps,
+    };
+}
+//# sourceMappingURL=policyProjection.js.map

package/dist/recipes/simulation/policyProjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyProjection.js","sourceRoot":"","sources":["../../../src/recipes/simulation/policyProjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAsBH,uEAAuE;AACvE,SAAS,cAAc,CAAC,MAAuB;IAC7C,MAAM,IAAI,GAAG,CAAC,IAAiC,EAAE,EAAE,CACjD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,IAAI,SAAS,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,6BAA6B,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,yBAAyB,EAAE,CAAC;QAC/C,OAAO,CACL,IAAI,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,KAAK,KAAK,kBAAkB,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC;YAC3D,CAAC,CAAC,OAAO,KAAK,UAAU,CAC3B,IAAI,mBAAmB,CACzB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,SAAS,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,IAAsB,EACtB,OAA6B,EAAE;IAE/B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAC1C,iCAAiC,CAClC,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE;QACtD,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;KAC9D,CAAC,CAAC;IAEH,MAAM,KAAK,GAA8B,IAAI,GAAG,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC;IAC/C,KAAK,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,wEAAwE;QACxE,qEAAqE;QACrE,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO;YACnB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;YACvD,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;YACrB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;YACzB,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB;YAC/C,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;SACrC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,wDAAwD;IACxD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC;IACpD,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;QACrE,OAAO,EAAE,MAAM,CACb,SAAS;YACP,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CACnE;QACD,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/recipes/simulation/simulate.d.ts

@@ -9,9 +9,16 @@
  */
 import type { RecipeDryRunPlan } from "../../commands/recipe.js";
 import type { MockedRunResult } from "./simulateMockedRun.js";
-import { type RecipeSimulationReport } from "./types.js";
-/** Pure transform: a dry-run plan → a What-If Preview simulation report. */
-export declare function simulateFromPlan(plan: RecipeDryRunPlan): RecipeSimulationReport;
+import { type RecipeSimulationReport, type SimulationPolicy } from "./types.js";
+/**
+ * Pure transform: a dry-run plan → a What-If Preview simulation report.
+ *
+ * `policy` carries the per-step `computeEffectivePolicy` verdicts (built by
+ * `projectRecipePolicy`). Without it the approval section is reported as
+ * UNAVAILABLE — this function never derives a gating verdict itself, because
+ * a second derivation is exactly how a preview drifts from enforcement.
+ */
+export declare function simulateFromPlan(plan: RecipeDryRunPlan, policy?: SimulationPolicy): RecipeSimulationReport;
 /**
  * Extract the step ids a `when:` condition references via `{{ ... }}`
  * placeholders. Covers the common dotted forms the chained runner exposes
@@ -31,6 +38,6 @@ export declare function extractReferencedStepIds(condition: string): Set<string>
  *     data), else `"undetermined"`.
  *
  * Risk / side-effect / cost / approvals sections are carried over unchanged
- * from the static report. `gatedOnRecipeSteps` stays false (P0/P4 truth).
+ * from the static report, including the effective-policy approval verdicts.
  */
-export declare function simulateMockedFromPlan(plan: RecipeDryRunPlan, mocked: MockedRunResult): RecipeSimulationReport;
+export declare function simulateMockedFromPlan(plan: RecipeDryRunPlan, mocked: MockedRunResult, policy?: SimulationPolicy): RecipeSimulationReport;

package/dist/recipes/simulation/simulate.js

@@ -91,11 +91,47 @@ function buildCost(plan) {
         note: "Low-confidence chars/4 token estimate over agent prompts (input only). USD is not projected at static fidelity — the default driver is a subscription/subprocess driver that is not billed; set an API driver + budget for a cost number.",
     };
 }
-/** Pure transform: a dry-run plan → a What-If Preview simulation report. */
-export function simulateFromPlan(plan) {
+/**
+ * Is any step of this recipe put in front of the approval gate? Read off the
+ * effective-policy verdicts — never assumed. `null` when there is no policy
+ * input, or when not one step could be evaluated: "we did not look" must not
+ * read as "not gated".
+ */
+function computeGated(steps, policy) {
+    if (!policy)
+        return null;
+    const evaluated = steps
+        .map((s) => policy.steps.get(s.id))
+        .filter((v) => v !== undefined);
+    if (evaluated.length === 0)
+        return null;
+    return evaluated.some((v) => v.consultsApproval);
+}
+/** The one approval caveat, shared by the static and mocked reports. */
+function approvalNote(gated, policy, projected) {
+    if (!policy || gated === null) {
+        return "Approval projection unavailable: the effective policy could not be evaluated, so this report claims nothing about whether steps would wait for approval.";
+    }
+    const scope = `the runtime's effective policy (${policy.profile} profile, ${policy.trigger} run)`;
+    if (!gated) {
+        return `Approval projection comes from ${scope}: the approval gate is not consulted for any step of this recipe, so no step would wait for a human.`;
+    }
+    const waiting = projected.filter((p) => p.wouldRequireApproval === true);
+    const refused = projected.filter((p) => p.verdict === "REFUSED");
+    return `Approval projection comes from ${scope}: ${waiting.length} step(s) would wait for a human${refused.length > 0 ? `, ${refused.length} would be refused` : ""}.`;
+}
+/**
+ * Pure transform: a dry-run plan → a What-If Preview simulation report.
+ *
+ * `policy` carries the per-step `computeEffectivePolicy` verdicts (built by
+ * `projectRecipePolicy`). Without it the approval section is reported as
+ * UNAVAILABLE — this function never derives a gating verdict itself, because
+ * a second derivation is exactly how a preview drifts from enforcement.
+ */
+export function simulateFromPlan(plan, policy) {
     const topology = plan.triggerType === "chained" ? "chained" : "flat";
-    const gatedOnRecipeSteps = false; // P0/P4 truth: recipe steps are not gated today.
     const steps = buildSteps(plan, topology);
+    const gatedOnRecipeSteps = computeGated(steps, policy);
     const sideEffectCounts = emptySideEffectCounts();
     for (const s of steps)
         sideEffectCounts[s.sideEffect] += 1;
@@ -113,17 +149,33 @@ export function simulateFromPlan(plan) {
         sideEffect: s.sideEffect,
         resolved: s.resolved,
     })));
+    // Every risky or writing step is listed, plus any step the policy would
+    // hold or refuse whatever its tier (e.g. `approvalGate: all`, or an agent
+    // step that widened its containment).
     const projected = steps
-        .filter((s) => s.baseRisk !== "low" || s.isWrite)
-        .map((s) => ({
-        stepId: s.id,
-        ...(s.tool !== undefined ? { tool: s.tool } : {}),
-        tier: s.baseRisk,
-        wouldRequireApproval: s.baseRisk !== "low",
-        reason: s.baseRisk !== "low"
-            ? `${s.baseRisk}-risk ${s.sideEffect}`
-            : `write step (${s.sideEffect}), low tier`,
-    }));
+        .filter((s) => {
+        const v = policy?.steps.get(s.id);
+        return (s.baseRisk !== "low" ||
+            s.isWrite ||
+            (v !== undefined && v.final !== "ALLOW"));
+    })
+        .map((s) => {
+        const v = policy?.steps.get(s.id);
+        return {
+            stepId: s.id,
+            ...(s.tool !== undefined ? { tool: s.tool } : {}),
+            tier: s.baseRisk,
+            wouldRequireApproval: v ? v.final === "HUMAN_APPROVAL_REQUIRED" : null,
+            verdict: v ? v.final : "unknown",
+            ...(v ? { consultsApproval: v.consultsApproval } : {}),
+            reason: v
+                ? v.reason
+                : policy
+                    ? `not evaluated (${s.type === "recipe" ? "nested recipe — governed by its own steps" : "no tool or agent to evaluate"})`
+                    : "effective policy unavailable",
+        };
+    });
+    const approvalsNote = approvalNote(gatedOnRecipeSteps, policy, projected);
     const branches = steps
         .filter((s) => typeof s.condition === "string" && s.condition.length > 0)
         .map((s) => ({
@@ -135,7 +187,7 @@ export function simulateFromPlan(plan) {
     const cost = buildCost(plan);
     const notes = [
         "Static fidelity: no step is executed. Agent/LLM outputs and data-dependent branches are not resolved.",
-        "Approval projection shows the tier that WOULD apply if recipe steps were gated — they are NOT gated on the execution path today (gatedOnRecipeSteps=false).",
+        approvalsNote,
         "Cost is a low-confidence estimate; USD is not projected at this phase.",
     ];
     if (topology === "flat") {
@@ -161,8 +213,12 @@ export function simulateFromPlan(plan) {
         risk,
         approvals: {
             gatedOnRecipeSteps,
+            basis: policy && gatedOnRecipeSteps !== null
+                ? "effective-policy"
+                : "unavailable",
+            ...(policy ? { profile: policy.profile, trigger: policy.trigger } : {}),
             projected,
-            note: "Recipe-runner steps are NOT gated by the approval queue today; this column is the tier that would apply if they were.",
+            note: approvalsNote,
         },
         cost,
         branches,
@@ -212,10 +268,10 @@ export function extractReferencedStepIds(condition) {
  *     data), else `"undetermined"`.
  *
  * Risk / side-effect / cost / approvals sections are carried over unchanged
- * from the static report. `gatedOnRecipeSteps` stays false (P0/P4 truth).
+ * from the static report, including the effective-policy approval verdicts.
  */
-export function simulateMockedFromPlan(plan, mocked) {
-    const base = simulateFromPlan(plan);
+export function simulateMockedFromPlan(plan, mocked, policy) {
+    const base = simulateFromPlan(plan, policy);
     const steps = base.steps.map((s) => {
         const state = mocked.stepData.get(s.id);
         const mockedFrom = state?.mockedFrom ??
@@ -245,7 +301,7 @@ export function simulateMockedFromPlan(plan, mocked) {
     const notes = [
         `Mocked fidelity: downstream templates and conditions were resolved by driving the chained runner with ${mocked.sampleRuns} prior run(s) of history. No step executed for real (stubbed deps, no persistence).`,
         "Steps without run history were fed synthesized placeholders; their downstream effects are approximate.",
-        "Approval projection shows the tier that WOULD apply if recipe steps were gated — they are NOT gated on the execution path today (gatedOnRecipeSteps=false).",
+        base.approvals.note,
         "Cost remains a static estimate at this phase; USD is not projected (P3).",
     ];
     if (base.summary.unresolvedSteps > 0) {

package/dist/recipes/simulation/simulate.js.map

@@ -1 +1 @@
-{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/recipes/simulation/simulate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAKL,yBAAyB,GAG1B,MAAM,YAAY,CAAC;AAEpB,sFAAsF;AACtF,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,MAAM,GAAG,CAAC,CAAU,EAAiB,EAAE,CAC3C,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM,CAAC;AAEhD,iFAAiF;AACjF,SAAS,YAAY,CAAC,IAA0B;IAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CACjB,IAAsB,EACtB,QAA4B;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAC9B,CAAC,CAAC,EAA+D,EAAE,CAAC,CAAC;QACnE,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;QACzC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CACH,CAAC;IACF,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE7D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAkB,EAAE;QAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC;QACnC,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC;YACxC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,QAAQ;YACR,OAAO;YACP,WAAW;SACZ,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,QAAQ;YACR,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,QAAQ;YACR,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,QAAQ;YAC9C,UAAU;YACV,OAAO;YACP,WAAW;SACZ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,IAAsB;IACvC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC;IACzC,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAC3D,CAAC;IACF,MAAM,mBAAmB,GAAG,UAAU,CAAC,MAAM,CAAC;IAE9C,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,UAAU,EAAE,CAAC;YACb,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,IAAI;YACrB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,uDAAuD;SAC9D,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,UAAU;YACV,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,IAAI;YACrB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,0IAA0I;SACjJ,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAE,CAAC,CAAC,MAAiB,CAAC,MAAM,GAAG,eAAe,CAAC,EAC1E,CAAC,CACF,CAAC;IACF,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,UAAU;QACV,mBAAmB;QACnB,eAAe;QACf,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,2OAA2O;KAClP,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAC9B,IAAsB;IAEtB,MAAM,QAAQ,GACZ,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,iDAAiD;IAEnF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEzC,MAAM,gBAAgB,GAAG,qBAAqB,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QACjD,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM;QACzD,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;QAC1D,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM;QACxD,gBAAgB;QAChB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,EAAE;KACpD,CAAC;IAEF,MAAM,IAAI,GAAG,gBAAgB,CAC3B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,SAAS,GAAyB,KAAK;SAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,MAAM,EAAE,CAAC,CAAC,EAAE;QACZ,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,IAAI,EAAE,CAAC,CAAC,QAAQ;QAChB,oBAAoB,EAAE,CAAC,CAAC,QAAQ,KAAK,KAAK;QAC1C,MAAM,EACJ,CAAC,CAAC,QAAQ,KAAK,KAAK;YAClB,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,UAAU,EAAE;YACtC,CAAC,CAAC,eAAe,CAAC,CAAC,UAAU,aAAa;KAC/C,CAAC,CAAC,CAAC;IAEN,MAAM,QAAQ,GAAuB,KAAK;SACvC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,MAAM,EAAE,CAAC,CAAC,EAAE;QACZ,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,OAAO,EAAE,cAAuB;QAChC,MAAM,EACJ,6GAA6G;KAChH,CAAC,CAAC,CAAC;IAEN,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAa;QACtB,uGAAuG;QACvG,6JAA6J;QAC7J,wEAAwE;KACzE,CAAC;IACF,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,wGAAwG,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,GAAG,OAAO,CAAC,eAAe,gGAAgG,CAC3H,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,kGAAkG,CACrH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,aAAa,EAAE,yBAAyB;QACxC,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,QAAQ;QAClB,QAAQ;QACR,kBAAkB;QAClB,KAAK;QACL,OAAO;QACP,IAAI;QACJ,SAAS,EAAE;YACT,kBAAkB;YAClB,SAAS;YACT,IAAI,EAAE,uHAAuH;SAC9H;QACD,IAAI;QACJ,QAAQ;QACR,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,WAAW,GAAG,yBAAyB,CAAC;IAC9C,IAAI,CAAC,GAA2B,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,gDAAgD;QAChD,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnE,iCAAiC;gBACjC,MAAM,GAAG,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACrE,IAAI,GAAG;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;iBAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC1B,wCAAwC;gBACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAsB,EACtB,MAAuB;IAEvB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEpC,MAAM,KAAK,GAAqB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,UAAU,GACd,KAAK,EAAE,UAAU;YACjB,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAChE,OAAO,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAuB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3D,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,YAAY,GAChB,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,GAAG,CAAC;gBACJ,OAAO,EAAE,cAAuB;gBAChC,MAAM,EACJ,IAAI,CAAC,IAAI,KAAK,CAAC;oBACb,CAAC,CAAC,qEAAqE;oBACvE,CAAC,CAAC,yGAAyG;aAChH,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAwB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1E,OAAO;YACL,GAAG,CAAC;YACJ,OAAO;YACP,MAAM,EAAE,oDAAoD,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACpF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAa;QACtB,yGAAyG,MAAM,CAAC,UAAU,qFAAqF;QAC/M,wGAAwG;QACxG,6JAA6J;QAC7J,0EAA0E;KAC3E,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,gGAAgG,CAChI,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,IAAI;QACP,aAAa,EAAE,yBAAyB;QACxC,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK;QACL,QAAQ;QACR,KAAK;KACN,CAAC;AACJ,CAAC"}
+{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/recipes/simulation/simulate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAKL,yBAAyB,GAI1B,MAAM,YAAY,CAAC;AAEpB,sFAAsF;AACtF,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,MAAM,GAAG,CAAC,CAAU,EAAiB,EAAE,CAC3C,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM,CAAC;AAEhD,iFAAiF;AACjF,SAAS,YAAY,CAAC,IAA0B;IAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CACjB,IAAsB,EACtB,QAA4B;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAC9B,CAAC,CAAC,EAA+D,EAAE,CAAC,CAAC;QACnE,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;QACzC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CACH,CAAC;IACF,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE7D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAkB,EAAE;QAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC;QACnC,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC;YACxC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,QAAQ;YACR,OAAO;YACP,WAAW;SACZ,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,QAAQ;YACR,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,QAAQ;YACR,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,QAAQ;YAC9C,UAAU;YACV,OAAO;YACP,WAAW;SACZ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,IAAsB;IACvC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC;IACzC,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAC3D,CAAC;IACF,MAAM,mBAAmB,GAAG,UAAU,CAAC,MAAM,CAAC;IAE9C,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,UAAU,EAAE,CAAC;YACb,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,IAAI;YACrB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,uDAAuD;SAC9D,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,UAAU;YACV,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,IAAI;YACrB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,0IAA0I;SACjJ,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAE,CAAC,CAAC,MAAiB,CAAC,MAAM,GAAG,eAAe,CAAC,EAC1E,CAAC,CACF,CAAC;IACF,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,UAAU;QACV,mBAAmB;QACnB,eAAe;QACf,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,2OAA2O;KAClP,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,KAAuB,EACvB,MAAoC;IAEpC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,SAAS,GAAG,KAAK;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAClC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACnD,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CACnB,KAAqB,EACrB,MAAoC,EACpC,SAA+B;IAE/B,IAAI,CAAC,MAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO,0JAA0J,CAAC;IACpK,CAAC;IACD,MAAM,KAAK,GAAG,mCAAmC,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,OAAO,OAAO,CAAC;IAClG,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,kCAAkC,KAAK,sGAAsG,CAAC;IACvJ,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IACjE,OAAO,kCAAkC,KAAK,KAAK,OAAO,CAAC,MAAM,kCAAkC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AACzK,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAsB,EACtB,MAAyB;IAEzB,MAAM,QAAQ,GACZ,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAEtD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,kBAAkB,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAEvD,MAAM,gBAAgB,GAAG,qBAAqB,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QACjD,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM;QACzD,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;QAC1D,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM;QACxD,gBAAgB;QAChB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,EAAE;KACpD,CAAC;IAEF,MAAM,IAAI,GAAG,gBAAgB,CAC3B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CACJ,CAAC;IAEF,wEAAwE;IACxE,0EAA0E;IAC1E,sCAAsC;IACtC,MAAM,SAAS,GAAyB,KAAK;SAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACZ,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO,CACL,CAAC,CAAC,QAAQ,KAAK,KAAK;YACpB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CACzC,CAAC;IACJ,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,EAAsB,EAAE;QAC7B,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,EAAE;YACZ,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,IAAI,EAAE,CAAC,CAAC,QAAQ;YAChB,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,yBAAyB,CAAC,CAAC,CAAC,IAAI;YACtE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAChC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,EAAE,CAAC;gBACP,CAAC,CAAC,CAAC,CAAC,MAAM;gBACV,CAAC,CAAC,MAAM;oBACN,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,8BAA8B,GAAG;oBACzH,CAAC,CAAC,8BAA8B;SACrC,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,MAAM,aAAa,GAAG,YAAY,CAAC,kBAAkB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAE1E,MAAM,QAAQ,GAAuB,KAAK;SACvC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,MAAM,EAAE,CAAC,CAAC,EAAE;QACZ,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,OAAO,EAAE,cAAuB;QAChC,MAAM,EACJ,6GAA6G;KAChH,CAAC,CAAC,CAAC;IAEN,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAa;QACtB,uGAAuG;QACvG,aAAa;QACb,wEAAwE;KACzE,CAAC;IACF,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,wGAAwG,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,GAAG,OAAO,CAAC,eAAe,gGAAgG,CAC3H,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,kGAAkG,CACrH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,aAAa,EAAE,yBAAyB;QACxC,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,QAAQ;QAClB,QAAQ;QACR,kBAAkB;QAClB,KAAK;QACL,OAAO;QACP,IAAI;QACJ,SAAS,EAAE;YACT,kBAAkB;YAClB,KAAK,EACH,MAAM,IAAI,kBAAkB,KAAK,IAAI;gBACnC,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,aAAa;YACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,SAAS;YACT,IAAI,EAAE,aAAa;SACpB;QACD,IAAI;QACJ,QAAQ;QACR,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,WAAW,GAAG,yBAAyB,CAAC;IAC9C,IAAI,CAAC,GAA2B,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,gDAAgD;QAChD,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnE,iCAAiC;gBACjC,MAAM,GAAG,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACrE,IAAI,GAAG;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;iBAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC1B,wCAAwC;gBACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAsB,EACtB,MAAuB,EACvB,MAAyB;IAEzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAqB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,UAAU,GACd,KAAK,EAAE,UAAU;YACjB,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAChE,OAAO,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAuB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3D,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,YAAY,GAChB,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,GAAG,CAAC;gBACJ,OAAO,EAAE,cAAuB;gBAChC,MAAM,EACJ,IAAI,CAAC,IAAI,KAAK,CAAC;oBACb,CAAC,CAAC,qEAAqE;oBACvE,CAAC,CAAC,yGAAyG;aAChH,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAwB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1E,OAAO;YACL,GAAG,CAAC;YACJ,OAAO;YACP,MAAM,EAAE,oDAAoD,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACpF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAa;QACtB,yGAAyG,MAAM,CAAC,UAAU,qFAAqF;QAC/M,wGAAwG;QACxG,IAAI,CAAC,SAAS,CAAC,IAAI;QACnB,0EAA0E;KAC3E,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,gGAAgG,CAChI,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,IAAI;QACP,aAAa,EAAE,yBAAyB;QACxC,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK;QACL,QAAQ;QACR,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/recipes/simulation/types.d.ts

@@ -8,9 +8,11 @@
  *
  * Design constraints baked into the shape (from the 2026-06-04 investigation,
  * `docs/counterfactual-sim-engine-investigation.md`):
- *   - `gatedOnRecipeSteps` is a first-class boolean so a consumer can NEVER
- *     imply an approval gate that does not exist on the recipe execution path
- *     today (the live gate in transport.ts only gates MCP bridge calls).
+ *   - `gatedOnRecipeSteps` is a first-class field so a consumer can never
+ *     imply an approval gate that the runtime would not apply — nor hide one
+ *     it would. Since v3 it is COMPUTED from the effective policy (the same
+ *     `computeEffectivePolicy` both runners consult per step), never a
+ *     constant; `null` when the policy could not be evaluated.
  *   - cost carries an explicit `basis` and is never a precise dollar figure or
  *     `$0` — at static fidelity USD is genuinely not projectable.
  *   - conditional branches resolve to `"undetermined"`, never a faked
@@ -25,8 +27,15 @@
  * and the `taken`/`skipped` branch outcomes (alongside the existing
  * `undetermined`). All additions are additive/back-compatible — a static report
  * is still a valid v2 report.
+ *
+ * v3: the approval projection is the RUNTIME's verdict, not a tier guess.
+ * `gatedOnRecipeSteps` becomes `boolean | null` and is computed;
+ * `ApprovalProjection` gains `verdict` / `consultsApproval` and its
+ * `wouldRequireApproval` now means "the runner would hold this step for a
+ * human" (`null` when unknown); `approvals` gains `basis`, `profile` and
+ * `trigger`. A meaning change, hence the bump.
  */
-export declare const SIMULATION_SCHEMA_VERSION = 2;
+export declare const SIMULATION_SCHEMA_VERSION = 3;
 export type RiskTier = "low" | "medium" | "high";
 /**
  * Side-effect class for a single step, derived from registry metadata
@@ -64,15 +73,45 @@ export interface SimulationStep {
      */
     mockedFrom?: "history" | "synthesized";
 }
-/** Per-step approval projection — "what WOULD gate, if recipe steps were gated". */
+/**
+ * The effective-policy verdict for one step, as `computeEffectivePolicy`
+ * returns it, or `"unknown"` when it was not evaluated (a nested-recipe or
+ * compound step, or a report built with no policy input).
+ */
+export type StepPolicyVerdict = "ALLOW" | "HUMAN_APPROVAL_REQUIRED" | "REFUSED" | "unknown";
+/** Per-step approval projection — what the runtime WOULD do with this step. */
 export interface ApprovalProjection {
     stepId: string;
     tool?: string;
     tier: RiskTier;
-    /** True if this step's tier would trip an approval gate (tier !== "low"). */
-    wouldRequireApproval: boolean;
+    /**
+     * True when the runner would hold this step for a human
+     * (`verdict === "HUMAN_APPROVAL_REQUIRED"`); false when it would not;
+     * `null` when the verdict is unknown.
+     */
+    wouldRequireApproval: boolean | null;
+    /** The effective-policy verdict for this step. */
+    verdict: StepPolicyVerdict;
+    /** True when the runner consults the approval gate for this step at all. */
+    consultsApproval?: boolean;
     reason: string;
 }
+/**
+ * Per-step effective-policy facts handed to the pure transform. Built by
+ * `projectRecipePolicy` from `computeEffectivePolicy` — the transform never
+ * derives a verdict itself.
+ */
+export interface SimulationPolicy {
+    profile: "governed" | "compat";
+    /** The trigger the runtime evaluates (a top-level chained run is "manual"). */
+    trigger: string;
+    /** Keyed by plan step id. A step absent here was not evaluated. */
+    steps: Map<string, {
+        final: Exclude<StepPolicyVerdict, "unknown">;
+        consultsApproval: boolean;
+        reason: string;
+    }>;
+}
 /** A conditional branch surfaced by the engine. */
 export interface BranchProjection {
     stepId: string;
@@ -173,16 +212,28 @@ export interface RecipeSimulationReport {
     /** "chained" recipes have a real DAG; "flat" recipes are a linear list. */
     topology: "chained" | "flat";
     /**
-     * CRITICAL honesty field. False today: the approval queue does NOT gate
-     * recipe-runner steps. Consumers MUST surface this so the approval
-     * projection is never read as live gate behaviour.
+     * CRITICAL honesty field. True when the runtime consults the approval gate
+     * for at least one of this recipe's steps under the current profile,
+     * approval-gate setting and trigger; false when it consults it for none;
+     * `null` when the effective policy could not be evaluated. Computed from
+     * `computeEffectivePolicy`, never a constant.
      */
-    gatedOnRecipeSteps: boolean;
+    gatedOnRecipeSteps: boolean | null;
     steps: SimulationStep[];
     summary: SimulationSummary;
     risk: RunRiskSummary;
     approvals: {
-        gatedOnRecipeSteps: boolean;
+        gatedOnRecipeSteps: boolean | null;
+        /**
+         * `"effective-policy"`: verdicts come from `computeEffectivePolicy`.
+         * `"unavailable"`: the policy could not be evaluated; verdicts are
+         * `"unknown"` and nothing is claimed either way.
+         */
+        basis: "effective-policy" | "unavailable";
+        /** Governance profile the verdicts were computed under. */
+        profile?: "governed" | "compat";
+        /** Trigger the verdicts were computed for. */
+        trigger?: string;
         projected: ApprovalProjection[];
         note: string;
     };

package/dist/recipes/simulation/types.js

@@ -8,9 +8,11 @@
  *
  * Design constraints baked into the shape (from the 2026-06-04 investigation,
  * `docs/counterfactual-sim-engine-investigation.md`):
- *   - `gatedOnRecipeSteps` is a first-class boolean so a consumer can NEVER
- *     imply an approval gate that does not exist on the recipe execution path
- *     today (the live gate in transport.ts only gates MCP bridge calls).
+ *   - `gatedOnRecipeSteps` is a first-class field so a consumer can never
+ *     imply an approval gate that the runtime would not apply — nor hide one
+ *     it would. Since v3 it is COMPUTED from the effective policy (the same
+ *     `computeEffectivePolicy` both runners consult per step), never a
+ *     constant; `null` when the policy could not be evaluated.
  *   - cost carries an explicit `basis` and is never a precise dollar figure or
  *     `$0` — at static fidelity USD is genuinely not projectable.
  *   - conditional branches resolve to `"undetermined"`, never a faked
@@ -25,6 +27,13 @@
  * and the `taken`/`skipped` branch outcomes (alongside the existing
  * `undetermined`). All additions are additive/back-compatible — a static report
  * is still a valid v2 report.
+ *
+ * v3: the approval projection is the RUNTIME's verdict, not a tier guess.
+ * `gatedOnRecipeSteps` becomes `boolean | null` and is computed;
+ * `ApprovalProjection` gains `verdict` / `consultsApproval` and its
+ * `wouldRequireApproval` now means "the runner would hold this step for a
+ * human" (`null` when unknown); `approvals` gains `basis`, `profile` and
+ * `trigger`. A meaning change, hence the bump.
  */
-export const SIMULATION_SCHEMA_VERSION = 2;
+export const SIMULATION_SCHEMA_VERSION = 3;
 //# sourceMappingURL=types.js.map

package/dist/recipes/simulation/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/recipes/simulation/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/recipes/simulation/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC"}

package/dist/recipesHttp.d.ts

@@ -210,6 +210,14 @@ export interface RecipeSummary {
     path: string;
     installedAt: number;
     source: "user" | "project" | "unknown";
+    /**
+     * The install source recorded at install time, exactly as given: an
+     * install dir's `.install.json` (`recipe install`), or a top-level file's
+     * `.install/<file>.json` sidecar (`POST /recipes/install`), the latter only
+     * while the file still has the bytes it was installed with. Absent when no
+     * valid record exists — never inferred.
+     */
+    installedFrom?: string;
     enabled: boolean;
     trustLevel?: TrustLevel;
     vars?: Array<{

package/dist/recipesHttp.js

@@ -5,6 +5,7 @@ import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 import { loadConfig, saveConfig as savePatchworkConfig, } from "./patchworkConfig.js";
 import { patchworkPath } from "./patchworkHome.js";
 import { disabledMarkerPath, getConfigDisabledNames, isInstallDirDisabled, } from "./recipes/disabledMarkers.js";
+import { moveTopLevelProvenance, readInstallProvenance, readTopLevelProvenance, removeTopLevelProvenance, } from "./recipes/installProvenance.js";
 import { RECIPE_NAME_RE } from "./recipes/names.js";
 import { validateRecipeDefinition, } from "./recipes/validation.js";
 import { enrichIssuesWithPositions } from "./recipes/yamlPositions.js";
@@ -618,6 +619,8 @@ export function deleteRecipeContent(recipesDir, name) {
     }
     try {
         rmSync(resolved, { force: true });
+        // Install provenance: a later file with this name must not inherit it.
+        removeTopLevelProvenance(resolved);
         const sidecar = `${resolved}.permissions.json`;
         if (existsSync(sidecar)) {
             try {
@@ -672,6 +675,8 @@ export function archiveRecipe(recipesDir, name) {
             dest = path.join(archiveDir, `${stem}.${stamp}${ext}`);
         }
         renameSync(resolved, dest);
+        // Install provenance moves with the file, out of the live recipes dir.
+        moveTopLevelProvenance(resolved, dest);
         const sidecar = `${resolved}.permissions.json`;
         if (existsSync(sidecar)) {
             try {
@@ -1025,6 +1030,8 @@ export function listInstalledRecipes(recipesDir, opts = {}) {
             // Cron/schedule expression for the trigger column. Surfaces `0 9 * * *`
             // in the UI without forcing a YAML fetch.
             const schedule = scheduleExpressionOf(parsed.trigger);
+            // Sidecar under `.install/`, bound to these exact bytes (sha256).
+            const provenance = readTopLevelProvenance(fullPath, raw);
             recipes.push({
                 name: parsedName,
                 description: parsed.description,
@@ -1035,6 +1042,7 @@ export function listInstalledRecipes(recipesDir, opts = {}) {
                 path: fullPath,
                 installedAt: stat.mtimeMs,
                 source,
+                ...(provenance ? { installedFrom: provenance.source } : {}),
                 // Top-level legacy recipes don't have install dirs to put a marker
                 // in, so the `enabled` field still comes from the legacy config list.
                 enabled: !disabledSet.has(parsedName),
@@ -1091,6 +1099,7 @@ export function listInstalledRecipes(recipesDir, opts = {}) {
             // Cron/schedule expression for the trigger column. Surfaces `0 9 * * *`
             // in the UI without forcing a YAML fetch.
             const schedule = scheduleExpressionOf(parsed.trigger);
+            const provenance = readInstallProvenance(installDir);
             recipes.push({
                 name: parsedName,
                 description: parsed.description,
@@ -1101,6 +1110,7 @@ export function listInstalledRecipes(recipesDir, opts = {}) {
                 path: entrypointPath,
                 installedAt: stat.mtimeMs,
                 source: "user",
+                ...(provenance ? { installedFrom: provenance.source } : {}),
                 // Disabled if EITHER the install marker is set OR the legacy config
                 // names this recipe — defence-in-depth so a stale config entry can't
                 // accidentally re-enable a recipe the user explicitly disabled, and
@@ -1118,7 +1128,6 @@ export function listInstalledRecipes(recipesDir, opts = {}) {
                     ...(firstError ? { firstError } : {}),
                 },
             });
-            void installDir;
         }
         catch {
             // skip malformed install dir