proofscan 0.10.21 → 0.10.23

package/dist/plans/store.js

@@ -0,0 +1,350 @@
+/**
+ * Plans store - manages plans and runs in proofs.db
+ * Phase 5.2: CRUD operations for validation plans
+ */
+import { parse as parseYaml } from 'yaml';
+import { getProofsDb } from '../db/connection.js';
+import { calculatePlanDigest, normalizePlanForDigest } from './digest.js';
+import { validatePlanDefinition, isValidPlanName } from './schema.js';
+import { BUILTIN_PLANS, isBuiltinPlan } from './builtin.js';
+export class PlansStore {
+    configDir;
+    builtinInitialized = false;
+    constructor(configDir) {
+        this.configDir = configDir;
+    }
+    get db() {
+        return getProofsDb(this.configDir);
+    }
+    /**
+     * Ensure built-in plans are installed
+     * Called lazily on first access
+     */
+    ensureBuiltinPlans() {
+        if (this.builtinInitialized)
+            return;
+        this.builtinInitialized = true;
+        for (const builtin of BUILTIN_PLANS) {
+            if (!this.planExists(builtin.name)) {
+                this.addPlan(builtin.name, builtin.yaml, 'builtin');
+            }
+        }
+    }
+    // ============================================================
+    // Plans CRUD
+    // ============================================================
+    /**
+     * List all plans
+     */
+    listPlans() {
+        this.ensureBuiltinPlans();
+        const stmt = this.db.prepare(`
+      SELECT * FROM plans ORDER BY created_at DESC
+    `);
+        return stmt.all();
+    }
+    /**
+     * Get plan by name
+     */
+    getPlan(name) {
+        this.ensureBuiltinPlans();
+        const stmt = this.db.prepare(`SELECT * FROM plans WHERE name = ?`);
+        const result = stmt.get(name);
+        return result ?? null;
+    }
+    /**
+     * Check if plan exists
+     */
+    planExists(name) {
+        const stmt = this.db.prepare(`SELECT 1 FROM plans WHERE name = ?`);
+        return stmt.get(name) !== undefined;
+    }
+    /**
+     * Add a new plan from YAML content
+     */
+    addPlan(name, yamlContent, source = 'manual') {
+        // Validate name
+        if (!isValidPlanName(name)) {
+            return { success: false, error: `Invalid plan name: must match [a-z0-9_-]+` };
+        }
+        // Check if exists
+        if (this.planExists(name)) {
+            return { success: false, error: `Plan '${name}' already exists` };
+        }
+        // Parse YAML
+        let def;
+        try {
+            def = parseYaml(yamlContent);
+        }
+        catch (err) {
+            return { success: false, error: `Invalid YAML: ${err instanceof Error ? err.message : String(err)}` };
+        }
+        // Validate definition
+        const validation = validatePlanDefinition(def);
+        if (!validation.valid) {
+            return { success: false, error: `Invalid plan: ${validation.errors.join('; ')}` };
+        }
+        // Calculate normalized content and digest
+        const contentNormalized = normalizePlanForDigest(def);
+        const digestSha256 = calculatePlanDigest(def);
+        const now = new Date().toISOString();
+        const plan = {
+            name,
+            schema_version: def.version,
+            content_yaml: yamlContent,
+            content_normalized: contentNormalized,
+            digest_sha256: digestSha256,
+            description: def.description || null,
+            default_connector: null,
+            source,
+            created_at: now,
+            updated_at: now,
+        };
+        try {
+            const stmt = this.db.prepare(`
+        INSERT INTO plans (
+          name, schema_version, content_yaml, content_normalized, digest_sha256,
+          description, default_connector, source, created_at, updated_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `);
+            stmt.run(plan.name, plan.schema_version, plan.content_yaml, plan.content_normalized, plan.digest_sha256, plan.description, plan.default_connector, plan.source, plan.created_at, plan.updated_at);
+            return { success: true, plan };
+        }
+        catch (err) {
+            return { success: false, error: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    /**
+     * Update an existing plan
+     */
+    updatePlan(name, yamlContent) {
+        // Check if exists
+        if (!this.planExists(name)) {
+            return { success: false, error: `Plan '${name}' not found` };
+        }
+        // Parse YAML
+        let def;
+        try {
+            def = parseYaml(yamlContent);
+        }
+        catch (err) {
+            return { success: false, error: `Invalid YAML: ${err instanceof Error ? err.message : String(err)}` };
+        }
+        // Validate definition
+        const validation = validatePlanDefinition(def);
+        if (!validation.valid) {
+            return { success: false, error: `Invalid plan: ${validation.errors.join('; ')}` };
+        }
+        // Calculate normalized content and digest
+        const contentNormalized = normalizePlanForDigest(def);
+        const digestSha256 = calculatePlanDigest(def);
+        const now = new Date().toISOString();
+        try {
+            const stmt = this.db.prepare(`
+        UPDATE plans SET
+          schema_version = ?,
+          content_yaml = ?,
+          content_normalized = ?,
+          digest_sha256 = ?,
+          description = ?,
+          updated_at = ?
+        WHERE name = ?
+      `);
+            stmt.run(def.version, yamlContent, contentNormalized, digestSha256, def.description || null, now, name);
+            return { success: true, plan: this.getPlan(name) };
+        }
+        catch (err) {
+            return { success: false, error: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    /**
+     * Delete a plan
+     * @param force If true, also delete associated runs
+     * Note: Built-in plans cannot be deleted
+     */
+    deletePlan(name, force = false) {
+        if (!this.planExists(name)) {
+            return { success: false, error: `Plan '${name}' not found` };
+        }
+        // Prevent deletion of built-in plans
+        if (isBuiltinPlan(name)) {
+            return { success: false, error: `Cannot delete built-in plan '${name}'` };
+        }
+        try {
+            if (force) {
+                // Delete associated runs first
+                const deleteRuns = this.db.prepare(`DELETE FROM runs WHERE plan_name = ?`);
+                deleteRuns.run(name);
+            }
+            const stmt = this.db.prepare(`DELETE FROM plans WHERE name = ?`);
+            stmt.run(name);
+            return { success: true };
+        }
+        catch (err) {
+            return { success: false, error: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    /**
+     * Get plan definition (parsed YAML)
+     */
+    getPlanDefinition(name) {
+        const plan = this.getPlan(name);
+        if (!plan)
+            return null;
+        try {
+            return parseYaml(plan.content_yaml);
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Export plan as YAML
+     */
+    exportPlanYaml(name) {
+        const plan = this.getPlan(name);
+        if (!plan)
+            return null;
+        return plan.content_yaml;
+    }
+    /**
+     * Import multiple plans from multi-document YAML
+     */
+    importPlans(yamlContent, source = 'import') {
+        const imported = [];
+        const errors = [];
+        // Split multi-document YAML
+        const docs = yamlContent.split(/^---$/m).filter(s => s.trim());
+        for (const doc of docs) {
+            try {
+                const def = parseYaml(doc);
+                const name = def.name;
+                if (!name) {
+                    errors.push({ error: 'Plan missing name field' });
+                    continue;
+                }
+                const result = this.addPlan(name, doc.trim(), source);
+                if (result.success) {
+                    imported.push(name);
+                }
+                else {
+                    errors.push({ name, error: result.error });
+                }
+            }
+            catch (err) {
+                errors.push({ error: `YAML parse error: ${err instanceof Error ? err.message : String(err)}` });
+            }
+        }
+        return { imported, errors };
+    }
+    // ============================================================
+    // Runs CRUD
+    // ============================================================
+    /**
+     * Create a new run record (status = 'running')
+     */
+    createRun(params) {
+        const now = new Date().toISOString();
+        const run = {
+            run_id: params.runId,
+            plan_name: params.planName,
+            plan_digest: params.planDigest,
+            connector_id: params.connectorId,
+            status: 'running',
+            artifact_path: params.artifactPath,
+            started_at: now,
+            ended_at: null,
+            created_at: now,
+        };
+        const stmt = this.db.prepare(`
+      INSERT INTO runs (
+        run_id, plan_name, plan_digest, connector_id, status,
+        artifact_path, started_at, ended_at, created_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        stmt.run(run.run_id, run.plan_name, run.plan_digest, run.connector_id, run.status, run.artifact_path, run.started_at, run.ended_at, run.created_at);
+        return run;
+    }
+    /**
+     * Update run status and end time
+     */
+    completeRun(runId, status) {
+        const stmt = this.db.prepare(`
+      UPDATE runs SET status = ?, ended_at = ? WHERE run_id = ?
+    `);
+        stmt.run(status, new Date().toISOString(), runId);
+    }
+    /**
+     * Get run by ID
+     */
+    getRun(runId) {
+        const stmt = this.db.prepare(`SELECT * FROM runs WHERE run_id = ?`);
+        const result = stmt.get(runId);
+        return result ?? null;
+    }
+    /**
+     * Get latest run
+     */
+    getLatestRun() {
+        const stmt = this.db.prepare(`
+      SELECT * FROM runs ORDER BY started_at DESC LIMIT 1
+    `);
+        const result = stmt.get();
+        return result ?? null;
+    }
+    /**
+     * List runs, optionally filtered by plan
+     */
+    listRuns(planName, limit = 50) {
+        if (planName) {
+            const stmt = this.db.prepare(`
+        SELECT * FROM runs WHERE plan_name = ? ORDER BY started_at DESC LIMIT ?
+      `);
+            return stmt.all(planName, limit);
+        }
+        const stmt = this.db.prepare(`
+      SELECT * FROM runs ORDER BY started_at DESC LIMIT ?
+    `);
+        return stmt.all(limit);
+    }
+    /**
+     * Delete a run
+     */
+    deleteRun(runId) {
+        const stmt = this.db.prepare(`DELETE FROM runs WHERE run_id = ?`);
+        const result = stmt.run(runId);
+        return result.changes > 0;
+    }
+    /**
+     * Recover crashed runs (status = 'running' at startup)
+     * Marks them as 'crashed'
+     */
+    recoverCrashedRuns() {
+        const stmt = this.db.prepare(`
+      UPDATE runs SET status = 'crashed', ended_at = ? WHERE status = 'running'
+    `);
+        const result = stmt.run(new Date().toISOString());
+        return result.changes;
+    }
+    /**
+     * Count runs by status
+     */
+    countRunsByStatus() {
+        const stmt = this.db.prepare(`
+      SELECT status, COUNT(*) as count FROM runs GROUP BY status
+    `);
+        const rows = stmt.all();
+        const result = {
+            running: 0,
+            completed: 0,
+            failed: 0,
+            partial: 0,
+            crashed: 0,
+        };
+        for (const row of rows) {
+            result[row.status] = row.count;
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/plans/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/plans/store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAA8B,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE5D,MAAM,OAAO,UAAU;IACb,SAAS,CAAU;IACnB,kBAAkB,GAAG,KAAK,CAAC;IAEnC,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,IAAY,EAAE;QACZ,OAAO,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACK,kBAAkB;QACxB,IAAI,IAAI,CAAC,kBAAkB;YAAE,OAAO;QACpC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAE/B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,aAAa;IACb,+DAA+D;IAE/D;;OAEG;IACH,SAAS;QACP,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAE5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,EAAY,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAqB,CAAC;QAClD,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAY;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,OAAO,CACL,IAAY,EACZ,WAAmB,EACnB,SAA0C,QAAQ;QAElD,gBAAgB;QAChB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;QAChF,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,IAAI,kBAAkB,EAAE,CAAC;QACpE,CAAC;QAED,aAAa;QACb,IAAI,GAAmB,CAAC;QACxB,IAAI,CAAC;YACH,GAAG,GAAG,SAAS,CAAC,WAAW,CAAmB,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACxG,CAAC;QAED,sBAAsB;QACtB,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACpF,CAAC;QAED,0CAA0C;QAC1C,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAE9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAS;YACjB,IAAI;YACJ,cAAc,EAAE,GAAG,CAAC,OAAO;YAC3B,YAAY,EAAE,WAAW;YACzB,kBAAkB,EAAE,iBAAiB;YACrC,aAAa,EAAE,YAAY;YAC3B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;YACpC,iBAAiB,EAAE,IAAI;YACvB,MAAM;YACN,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SAChB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;OAK5B,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CACN,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,UAAU,CAChB,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CACR,IAAY,EACZ,WAAmB;QAEnB,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,CAAC;QAC/D,CAAC;QAED,aAAa;QACb,IAAI,GAAmB,CAAC;QACxB,IAAI,CAAC;YACH,GAAG,GAAG,SAAS,CAAC,WAAW,CAAmB,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACxG,CAAC;QAED,sBAAsB;QACtB,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACpF,CAAC;QAED,0CAA0C;QAC1C,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAE9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;OAS5B,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CACN,GAAG,CAAC,OAAO,EACX,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,GAAG,CAAC,WAAW,IAAI,IAAI,EACvB,GAAG,EACH,IAAI,CACL,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAE,EAAE,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,IAAY,EAAE,KAAK,GAAG,KAAK;QACpC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,CAAC;QAC/D,CAAC;QAED,qCAAqC;QACrC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,IAAI,GAAG,EAAE,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,CAAC;gBACV,+BAA+B;gBAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;gBAC3E,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,IAAY;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,IAAI,CAAC;YACH,OAAO,SAAS,CAAC,IAAI,CAAC,YAAY,CAAmB,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,IAAY;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,WAAW,CACT,WAAmB,EACnB,SAA+B,QAAQ;QAEvC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA4C,EAAE,CAAC;QAE3D,4BAA4B;QAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAE/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAmB,CAAC;gBAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;gBAEtB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;oBAClD,SAAS;gBACX,CAAC;gBAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;gBACtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAM,EAAE,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,+DAA+D;IAC/D,YAAY;IACZ,+DAA+D;IAE/D;;OAEG;IACH,SAAS,CAAC,MAMT;QACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,GAAG,GAAQ;YACf,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,MAAM,EAAE,SAAS;YACjB,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,GAAG;SAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAK5B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CACN,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,UAAU,CACf,CAAC;QAEF,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAa,EAAE,MAAiB;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAE5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAa;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAoB,CAAC;QAClD,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,YAAY;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAE5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAqB,CAAC;QAC7C,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAiB,EAAE,KAAK,GAAG,EAAE;QACpC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;OAE5B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAU,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAE5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAU,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAa;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAE5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAE5B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAiD,CAAC;QAEvE,MAAM,MAAM,GAA8B;YACxC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;SACX,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;QACjC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/popl/index.d.ts

@@ -6,5 +6,5 @@
 export { POPL_VERSION, TRUST_LABELS, type TrustLevel, type TargetKind, type RedactionPolicy, type PoplAuthor, type PoplTrust, type PoplTargetIds, type PoplTarget, type PoplCaptureSummary, type PoplMcpClient, type PoplMcpServer, type PoplMcp, type PoplCaptureWindow, type PoplCapture, type PoplArtifact, type PoplEvidencePolicy, type PoplEvidence, type PoplEntry, type PoplDocument, type CreatePoplOptions, type CreatePoplResult, type PoplConfig, } from './types.js';
 export { SANITIZER_RULESET_VERSION, sanitize, sanitizeRpcPayload, sanitizeLogLine, sanitizeRpcEvent, hashValue, hashFileContent, type SanitizeResult, } from './sanitizer.js';
 export { generateStatusArtifact, generateRpcArtifact, generateLogsArtifact, generateValidationArtifact, generateSessionArtifacts, type SessionStatus, type StatusJson, type ArtifactResult, type GeneratedArtifacts, } from './artifacts.js';
-export { hasPoplDir, getPoplDir, getPoplEntriesDir, initPoplDir, loadPoplConfig, createSessionPoplEntry, listPoplEntries, readPoplEntry, } from './service.js';
+export { hasPoplDir, getPoplDir, getPoplEntriesDir, initPoplDir, loadPoplConfig, createSessionPoplEntry, createPlanPoplEntry, createRunPoplEntry, listPoplEntries, readPoplEntry, } from './service.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/popl/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/popl/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,yBAAyB,EACzB,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,aAAa,GACd,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/popl/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,yBAAyB,EACzB,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,aAAa,GACd,MAAM,cAAc,CAAC"}

package/dist/popl/index.js

@@ -10,5 +10,5 @@ export { SANITIZER_RULESET_VERSION, sanitize, sanitizeRpcPayload, sanitizeLogLin
 // Artifacts
 export { generateStatusArtifact, generateRpcArtifact, generateLogsArtifact, generateValidationArtifact, generateSessionArtifacts, } from './artifacts.js';
 // Service
-export { hasPoplDir, getPoplDir, getPoplEntriesDir, initPoplDir, loadPoplConfig, createSessionPoplEntry, listPoplEntries, readPoplEntry, } from './service.js';
+export { hasPoplDir, getPoplDir, getPoplEntriesDir, initPoplDir, loadPoplConfig, createSessionPoplEntry, createPlanPoplEntry, createRunPoplEntry, listPoplEntries, readPoplEntry, } from './service.js';
 //# sourceMappingURL=index.js.map

package/dist/popl/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/popl/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,QAAQ;AACR,OAAO,EACL,YAAY,EACZ,YAAY,GAsBb,MAAM,YAAY,CAAC;AAEpB,YAAY;AACZ,OAAO,EACL,yBAAyB,EACzB,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,eAAe,GAEhB,MAAM,gBAAgB,CAAC;AAExB,YAAY;AACZ,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,GAKzB,MAAM,gBAAgB,CAAC;AAExB,UAAU;AACV,OAAO,EACL,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,aAAa,GACd,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/popl/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,QAAQ;AACR,OAAO,EACL,YAAY,EACZ,YAAY,GAsBb,MAAM,YAAY,CAAC;AAEpB,YAAY;AACZ,OAAO,EACL,yBAAyB,EACzB,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,eAAe,GAEhB,MAAM,gBAAgB,CAAC;AAExB,YAAY;AACZ,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,GAKzB,MAAM,gBAAgB,CAAC;AAExB,UAAU;AACV,OAAO,EACL,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,aAAa,GACd,MAAM,cAAc,CAAC"}

package/dist/popl/service.d.ts

@@ -32,6 +32,18 @@ export declare function loadPoplConfig(root: string): Promise<PoplConfig>;
  * This is the core service function called by both CLI and shell.
  */
 export declare function createSessionPoplEntry(sessionId: string, configDir: string, options: Omit<CreatePoplOptions, 'kind' | 'ids'>): Promise<CreatePoplResult>;
+/**
+ * Create a POPL entry for a validation plan
+ *
+ * Plans are static definitions, so POPL entries contain the plan YAML and metadata.
+ */
+export declare function createPlanPoplEntry(planName: string, planDigest: string, planYaml: string, planDescription: string | undefined, options: Omit<CreatePoplOptions, 'kind' | 'ids'>): Promise<CreatePoplResult>;
+/**
+ * Create a POPL entry for a plan run
+ *
+ * Run entries contain the execution results, inventory, and plan used.
+ */
+export declare function createRunPoplEntry(runId: string, planName: string | null, planDigest: string, connectorId: string, status: string, resultsJson: string, inventoryJson: string, planYaml: string, startedAt: string, endedAt: string, options: Omit<CreatePoplOptions, 'kind' | 'ids'>): Promise<CreatePoplResult>;
 /**
  * List existing POPL entries
  */

package/dist/popl/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/popl/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,EAGL,KAAK,YAAY,EAEjB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAGtB,MAAM,YAAY,CAAC;AAapB;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB7D;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAiBtE;AA8BD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,KAAK,CAAC,GAC/C,OAAO,CAAC,gBAAgB,CAAC,CA2G3B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAgBzC;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAanF"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/popl/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,EAGL,KAAK,YAAY,EAEjB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAGtB,MAAM,YAAY,CAAC;AAapB;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB7D;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAiBtE;AA8BD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,KAAK,CAAC,GAC/C,OAAO,CAAC,gBAAgB,CAAC,CA2G3B;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,KAAK,CAAC,GAC/C,OAAO,CAAC,gBAAgB,CAAC,CAiG3B;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,KAAK,CAAC,GAC/C,OAAO,CAAC,gBAAgB,CAAC,CA2H3B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAgBzC;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAanF"}

package/dist/popl/service.js

@@ -195,6 +195,219 @@ export async function createSessionPoplEntry(sessionId, configDir, options) {
         };
     }
 }
+/**
+ * Create a POPL entry for a validation plan
+ *
+ * Plans are static definitions, so POPL entries contain the plan YAML and metadata.
+ */
+export async function createPlanPoplEntry(planName, planDigest, planYaml, planDescription, options) {
+    const { outputRoot, title, author } = options;
+    // Validate .popl exists
+    if (!hasPoplDir(outputRoot)) {
+        return {
+            success: false,
+            error: '.popl directory not found. Run "pfscan popl init" first.',
+        };
+    }
+    try {
+        // Generate entry ID
+        const entryId = ulid();
+        // Create entry directory
+        const entryPath = join(getPoplEntriesDir(outputRoot), entryId);
+        await mkdir(entryPath, { recursive: true });
+        // Write plan.yaml artifact
+        const planArtifactPath = join(entryPath, 'plan.yaml');
+        await writeFile(planArtifactPath, planYaml, 'utf-8');
+        // Calculate hash
+        const crypto = await import('crypto');
+        const planHash = crypto.createHash('sha256').update(planYaml).digest('hex');
+        // Load config for author
+        const config = await loadPoplConfig(outputRoot);
+        const effectiveAuthor = author || config.author || { name: 'Unknown' };
+        // Generate title
+        const createdAt = new Date();
+        const effectiveTitle = title || `Validation Plan: ${planName}`;
+        // Build POPL document
+        const poplDoc = {
+            popl: POPL_VERSION,
+            entry: {
+                id: entryId,
+                created_at: createdAt.toISOString(),
+                title: effectiveTitle,
+                author: effectiveAuthor,
+                trust: {
+                    level: 0,
+                    label: TRUST_LABELS[0],
+                },
+            },
+            target: {
+                kind: 'plan',
+                name: planName,
+                ids: {
+                    plan_name: planName,
+                },
+            },
+            capture: {
+                window: {
+                    started_at: createdAt.toISOString(),
+                    ended_at: createdAt.toISOString(),
+                },
+                summary: {
+                    rpc_total: 0,
+                    errors: 0,
+                },
+            },
+            evidence: {
+                policy: {
+                    redaction: 'none',
+                    ruleset_version: SANITIZER_RULESET_VERSION,
+                },
+                artifacts: [
+                    {
+                        name: 'Plan Definition',
+                        path: 'plan.yaml',
+                        sha256: planHash,
+                    },
+                ],
+            },
+        };
+        // Write POPL.yml
+        const poplYmlPath = join(entryPath, 'POPL.yml');
+        const poplYmlContent = yaml.stringify(poplDoc);
+        await writeFile(poplYmlPath, poplYmlContent, 'utf-8');
+        return {
+            success: true,
+            entryId,
+            entryPath: toRelativePath(entryPath, outputRoot),
+            poplYmlPath: toRelativePath(poplYmlPath, outputRoot),
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+/**
+ * Create a POPL entry for a plan run
+ *
+ * Run entries contain the execution results, inventory, and plan used.
+ */
+export async function createRunPoplEntry(runId, planName, planDigest, connectorId, status, resultsJson, inventoryJson, planYaml, startedAt, endedAt, options) {
+    const { outputRoot, title, author } = options;
+    // Validate .popl exists
+    if (!hasPoplDir(outputRoot)) {
+        return {
+            success: false,
+            error: '.popl directory not found. Run "pfscan popl init" first.',
+        };
+    }
+    try {
+        // Generate entry ID
+        const entryId = ulid();
+        // Create entry directory
+        const entryPath = join(getPoplEntriesDir(outputRoot), entryId);
+        await mkdir(entryPath, { recursive: true });
+        // Write artifacts
+        const artifacts = [
+            { name: 'results.json', content: resultsJson },
+            { name: 'inventory.json', content: inventoryJson },
+            { name: 'plan.yaml', content: planYaml },
+        ];
+        const crypto = await import('crypto');
+        const artifactList = [];
+        for (const artifact of artifacts) {
+            const artifactPath = join(entryPath, artifact.name);
+            await writeFile(artifactPath, artifact.content, 'utf-8');
+            const hash = crypto.createHash('sha256').update(artifact.content).digest('hex');
+            artifactList.push({
+                name: artifact.name,
+                path: artifact.name,
+                sha256: hash,
+            });
+        }
+        // Calculate stats from results
+        let rpcTotal = 0;
+        let errors = 0;
+        try {
+            const results = JSON.parse(resultsJson);
+            if (Array.isArray(results)) {
+                rpcTotal = results.filter((r) => !r.skipped).length;
+                errors = results.filter((r) => r.response?.error).length;
+            }
+        }
+        catch {
+            // Ignore parse errors
+        }
+        // Load config for author
+        const config = await loadPoplConfig(outputRoot);
+        const effectiveAuthor = author || config.author || { name: 'Unknown' };
+        // Generate title
+        const createdAt = new Date();
+        const planLabel = planName || `digest:${planDigest.slice(0, 8)}`;
+        const effectiveTitle = title || `Plan Run: ${planLabel} on ${connectorId}`;
+        // Build POPL document
+        const poplDoc = {
+            popl: POPL_VERSION,
+            entry: {
+                id: entryId,
+                created_at: createdAt.toISOString(),
+                title: effectiveTitle,
+                author: effectiveAuthor,
+                trust: {
+                    level: 0,
+                    label: TRUST_LABELS[0],
+                },
+            },
+            target: {
+                kind: 'run',
+                name: `run:${runId.slice(0, 8)}`,
+                ids: {
+                    run_id: runId,
+                    connector_id: connectorId,
+                    ...(planName && { plan_name: planName }),
+                },
+            },
+            capture: {
+                window: {
+                    started_at: startedAt,
+                    ended_at: endedAt,
+                },
+                summary: {
+                    rpc_total: rpcTotal,
+                    errors,
+                },
+                mcp: {
+                    servers: [{ name: connectorId }],
+                },
+            },
+            evidence: {
+                policy: {
+                    redaction: 'default',
+                    ruleset_version: SANITIZER_RULESET_VERSION,
+                },
+                artifacts: artifactList,
+            },
+        };
+        // Write POPL.yml
+        const poplYmlPath = join(entryPath, 'POPL.yml');
+        const poplYmlContent = yaml.stringify(poplDoc);
+        await writeFile(poplYmlPath, poplYmlContent, 'utf-8');
+        return {
+            success: true,
+            entryId,
+            entryPath: toRelativePath(entryPath, outputRoot),
+            poplYmlPath: toRelativePath(poplYmlPath, outputRoot),
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
 /**
  * List existing POPL entries
  */