spawnfile 0.1.24 → 0.1.27

package/dist/shared/trainingLegacy/trainingLegacyHashDomains.d.ts

@@ -0,0 +1,39 @@
+/** Frozen pre-rename hash inputs. Never use these as emitted wire IDs. Historical prompt versions stay in model requests.
+ * Bump a domain only for a behavioral/protocol change, never a display rename.
+ */
+export declare const EXTRACTION_CHECKPOINT_DOMAIN = "paideia.extraction.v9";
+export declare const TRAP_CHECKPOINT_DOMAIN = "paideia.traps.v1";
+export declare const JUDGMENT_CACHE_DOMAIN = "paideia.judgment-cache.v3";
+export declare const GRADER_CACHE_PROMPT_DOMAIN = "paideia.grader-prompt.v4";
+export declare const GRADER_CACHE_LEGACY_DIRECTORY = ".paideia";
+export declare const DECOMPOSITION_DIGEST_SCHEMA = "paideia.decomposition.v1";
+export declare const CHECK_TEMPLATES_DIGEST_SCHEMA = "paideia.check-templates.v1";
+export declare const EVIDENCE_UNITS_DIGEST_SCHEMA = "paideia.evidence-units.v1";
+export declare const LEGACY_DEFAULT_JUDGE_VERSION = "cli.claude-subscription.v1";
+export declare const LEGACY_INFERENCE_VERSION_PREFIX = "paideia.legacy-inference:";
+export declare const AUTHORED_JUDGE_VERSION_PREFIX = "paideia.authored-judge.v1:sha256:";
+export declare const OPTIMIZER_ROUTE_PREFIX = "paideia.optimizer:";
+export declare const INFERENCE_POLICY_VERSIONS: Readonly<{
+    'grok-subscription': "paideia.grok-attested-response.v3";
+    'grok-broker': "paideia.grok-broker-grant-response.v1";
+    'claude-subscription': "paideia.claude-attested-response.v3";
+    'codex-subscription': "paideia.codex-contained-response.v1";
+    ollama: "paideia.ollama-attested-response.v2";
+}>;
+export declare const LABEL_PROMPT_VERSION = "paideia.grader-label-prompt.v1";
+export declare const ADJUDICATION_SEED = "paideia.adjudication.v1";
+export declare const COUNCIL_PROMPT_VERSION = "paideia.council.v7";
+export declare const COUNCIL_SEED = "paideia.council";
+export declare const GRADING_POLICY_VERSION = "paideia.grading.v1";
+export declare const CANDIDATE_DIGEST_SCHEMA = "paideia.candidate.v1";
+export declare const DATASET_DIGEST_SCHEMA = "paideia.dataset.v1";
+export declare const LABELS_DIGEST_SCHEMA = "paideia.labels.v1";
+export declare const CALIBRATION_DIGEST_SCHEMA = "paideia.grader-calibration.v1";
+export declare const COMMAND_EXECUTION_DOMAIN = "paideia.command-execution.v1";
+export declare const COMPARISON_CHECKPOINT_DOMAIN = "paideia.comparison-checkpoint.v1";
+export declare const JEV_IDENTITY_KEY = "paideia_identity";
+export declare const JEV_IDENTITY_LONG_KEY = "paideia_identity_long";
+export declare const JEV_CANARY_MARKER = "PAIDEIA_CANARY_END";
+export declare const JEV_CANARY_QUESTION = "Does the supplied text end with PAIDEIA_CANARY_END?";
+/** Frozen repair compatibility discriminator; retained for existing signed receipts. */
+export declare const LEGACY_MEASUREMENT_COMPATIBILITY_VERSION = "spawnfile.daimon-dspy-compatibility.v1";

package/dist/shared/trainingLegacy/trainingLegacyHashDomains.js

@@ -0,0 +1,41 @@
+/** Frozen pre-rename hash inputs. Never use these as emitted wire IDs. Historical prompt versions stay in model requests.
+ * Bump a domain only for a behavioral/protocol change, never a display rename.
+ */
+export const EXTRACTION_CHECKPOINT_DOMAIN = 'paideia.extraction.v9';
+export const TRAP_CHECKPOINT_DOMAIN = 'paideia.traps.v1';
+export const JUDGMENT_CACHE_DOMAIN = 'paideia.judgment-cache.v3';
+export const GRADER_CACHE_PROMPT_DOMAIN = 'paideia.grader-prompt.v4';
+export const GRADER_CACHE_LEGACY_DIRECTORY = '.paideia';
+export const DECOMPOSITION_DIGEST_SCHEMA = 'paideia.decomposition.v1';
+export const CHECK_TEMPLATES_DIGEST_SCHEMA = 'paideia.check-templates.v1';
+export const EVIDENCE_UNITS_DIGEST_SCHEMA = 'paideia.evidence-units.v1';
+export const LEGACY_DEFAULT_JUDGE_VERSION = 'cli.claude-subscription.v1';
+export const LEGACY_INFERENCE_VERSION_PREFIX = 'paideia.legacy-inference:';
+export const AUTHORED_JUDGE_VERSION_PREFIX = 'paideia.authored-judge.v1:sha256:';
+export const OPTIMIZER_ROUTE_PREFIX = 'paideia.optimizer:';
+export const INFERENCE_POLICY_VERSIONS = Object.freeze({
+    'grok-subscription': 'paideia.grok-attested-response.v3',
+    'grok-broker': 'paideia.grok-broker-grant-response.v1',
+    'claude-subscription': 'paideia.claude-attested-response.v3',
+    'codex-subscription': 'paideia.codex-contained-response.v1',
+    ollama: 'paideia.ollama-attested-response.v2',
+});
+export const LABEL_PROMPT_VERSION = 'paideia.grader-label-prompt.v1';
+export const ADJUDICATION_SEED = 'paideia.adjudication.v1';
+export const COUNCIL_PROMPT_VERSION = 'paideia.council.v7';
+export const COUNCIL_SEED = 'paideia.council';
+export const GRADING_POLICY_VERSION = 'paideia.grading.v1';
+export const CANDIDATE_DIGEST_SCHEMA = 'paideia.candidate.v1';
+export const DATASET_DIGEST_SCHEMA = 'paideia.dataset.v1';
+export const LABELS_DIGEST_SCHEMA = 'paideia.labels.v1';
+export const CALIBRATION_DIGEST_SCHEMA = 'paideia.grader-calibration.v1';
+export const COMMAND_EXECUTION_DOMAIN = 'paideia.command-execution.v1';
+export const COMPARISON_CHECKPOINT_DOMAIN = 'paideia.comparison-checkpoint.v1';
+// Canary keys and text affect the observed decision incorporated into the fingerprint.
+export const JEV_IDENTITY_KEY = 'paideia_identity';
+export const JEV_IDENTITY_LONG_KEY = 'paideia_identity_long';
+export const JEV_CANARY_MARKER = 'PAIDEIA_CANARY_END';
+export const JEV_CANARY_QUESTION = 'Does the supplied text end with PAIDEIA_CANARY_END?';
+/** Frozen repair compatibility discriminator; retained for existing signed receipts. */
+export const LEGACY_MEASUREMENT_COMPATIBILITY_VERSION = 'spawnfile.daimon-dspy-compatibility.v1';
+//# sourceMappingURL=trainingLegacyHashDomains.js.map

package/dist/shared/trainingLegacy/trainingLegacyHashDomains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trainingLegacyHashDomains.js","sourceRoot":"","sources":["../../../src/shared/trainingLegacy/trainingLegacyHashDomains.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AACjE,MAAM,CAAC,MAAM,0BAA0B,GAAG,0BAA0B,CAAC;AACrE,MAAM,CAAC,MAAM,6BAA6B,GAAG,UAAU,CAAC;AACxD,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AACtE,MAAM,CAAC,MAAM,6BAA6B,GAAG,4BAA4B,CAAC;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAG,2BAA2B,CAAC;AAExE,MAAM,CAAC,MAAM,4BAA4B,GAAG,4BAA4B,CAAC;AACzE,MAAM,CAAC,MAAM,+BAA+B,GAAG,2BAA2B,CAAC;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,mCAAmC,CAAC;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,mBAAmB,EAAE,mCAAmC;IACxD,aAAa,EAAE,uCAAuC;IACtD,qBAAqB,EAAE,qCAAqC;IAC5D,oBAAoB,EAAE,qCAAqC;IAC3D,MAAM,EAAE,qCAAqC;CAC9C,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAC3D,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAC9C,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAC9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG,+BAA+B,CAAC;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG,8BAA8B,CAAC;AACvE,MAAM,CAAC,MAAM,4BAA4B,GAAG,kCAAkC,CAAC;AAC/E,uFAAuF;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AACtD,MAAM,CAAC,MAAM,mBAAmB,GAAG,qDAAqD,CAAC;AAEzF,wFAAwF;AACxF,MAAM,CAAC,MAAM,wCAAwC,GAAG,wCAAwC,CAAC"}

package/dist/shared/trainingLegacy/trainingLegacyWire.d.ts

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+import legacyWireAliases from './trainingLegacyWireAliases.json';
+/** Historical discriminators are translated only at explicit reader boundaries. */
+export { legacyWireAliases };
+export declare function canonicalWireId(value: unknown): unknown;
+/** Validate the exact supported version; unknown versions never become aliases. */
+export declare function compatibleWireLiteral<const T extends string>(current: T): z.ZodPreprocess<z.ZodLiteral<T>>;
+export declare function wireIdMatches(value: unknown, current: string): boolean;
+/** Former external image distributions cannot prove the current bundled closure. */
+export declare function hasLegacyTrainingDistribution(image: {
+    build: Record<string, unknown>;
+    files: {
+        destination: string;
+    }[];
+}): boolean;

package/dist/shared/trainingLegacy/trainingLegacyWire.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+import legacyWireAliases from './trainingLegacyWireAliases.json' with { type: 'json' };
+/** Historical discriminators are translated only at explicit reader boundaries. */
+export { legacyWireAliases };
+export function canonicalWireId(value) {
+    return typeof value === 'string' && Object.hasOwn(legacyWireAliases, value)
+        ? legacyWireAliases[value] : value;
+}
+/** Validate the exact supported version; unknown versions never become aliases. */
+export function compatibleWireLiteral(current) {
+    return z.preprocess(canonicalWireId, z.literal(current));
+}
+export function wireIdMatches(value, current) {
+    return canonicalWireId(value) === current;
+}
+/** Former external image distributions cannot prove the current bundled closure. */
+export function hasLegacyTrainingDistribution(image) {
+    return ['paideia', 'bridge'].some(key => Object.hasOwn(image.build, key)) ||
+        image.files.some(file => file.destination.startsWith('paideia/'));
+}
+//# sourceMappingURL=trainingLegacyWire.js.map

package/dist/shared/trainingLegacy/trainingLegacyWire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trainingLegacyWire.js","sourceRoot":"","sources":["../../../src/shared/trainingLegacy/trainingLegacyWire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,iBAAiB,MAAM,kCAAkC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEvF,mFAAmF;AACnF,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC;QACzE,CAAC,CAAC,iBAAiB,CAAC,KAAuC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAyB,OAAU;IACtE,OAAO,CAAC,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,OAAe;IAC3D,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC;AAC5C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,6BAA6B,CAAC,KAA2E;IACvH,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/shared/trainingLegacy/trainingLegacyWireAliases.json

@@ -0,0 +1,90 @@
+{
+    "paideia.adjudication.v1": "spawnfile.training.adjudication.v1",
+    "paideia.atomic-grade.v1": "spawnfile.training.atomic-grade.v1",
+    "paideia.atomic-grader.v1": "spawnfile.training.atomic-grader.v1",
+    "paideia.atomic-grading-blob.v1": "spawnfile.training.atomic-grading-blob.v1",
+    "paideia.authored-judge.v1": "spawnfile.training.authored-judge.v1",
+    "paideia.bootstrap-failed.v1": "spawnfile.training.bootstrap-failed.v1",
+    "paideia.candidate.v1": "spawnfile.training.candidate.v1",
+    "paideia.check-templates.v1": "spawnfile.training.check-templates.v1",
+    "paideia.claude-attested-response.v3": "spawnfile.training.claude-attested-response.v3",
+    "paideia.cli-evaluation.v1": "spawnfile.training.cli-evaluation.v1",
+    "paideia.cli-failure.v1": "spawnfile.training.cli-failure.v1",
+    "paideia.codex-contained-response.v1": "spawnfile.training.codex-contained-response.v1",
+    "paideia.command-checkpoint.v1": "spawnfile.training.command-checkpoint.v1",
+    "paideia.command-execution.v1": "spawnfile.training.command-execution.v1",
+    "paideia.comparison-checkpoint.v1": "spawnfile.training.comparison-checkpoint.v1",
+    "paideia.comparison.v1": "spawnfile.training.comparison.v1",
+    "paideia.cost-config.v1": "spawnfile.training.cost-config.v1",
+    "paideia.cost-dataset.v1": "spawnfile.training.cost-dataset.v1",
+    "paideia.cost-record.v1": "spawnfile.training.cost-record.v1",
+    "paideia.cost-report.v1": "spawnfile.training.cost-report.v1",
+    "paideia.council.v6": "spawnfile.training.council.v6",
+    "paideia.council.v7": "spawnfile.training.council.v7",
+    "paideia.daimon-native.broker-requests.v1": "spawnfile.training.daimon-native.broker-requests.v1",
+    "paideia.daimon-native.broker-seal.v1": "spawnfile.training.daimon-native.broker-seal.v1",
+    "paideia.daimon-native.child-diagnostics.v1": "spawnfile.training.daimon-native.child-diagnostics.v1",
+    "paideia.daimon-native.child-grok-slot-preflight.v1": "spawnfile.training.daimon-native.child-grok-slot-preflight.v1",
+    "paideia.daimon-native.child-sandbox-preflight.v1": "spawnfile.training.daimon-native.child-sandbox-preflight.v1",
+    "paideia.daimon-native.evidence.v1": "spawnfile.training.daimon-native.evidence.v1",
+    "paideia.daimon-native.grok-broker-projection.v1": "spawnfile.training.daimon-native.grok-broker-projection.v1",
+    "paideia.daimon-native.grok-slot-freshness.v1": "spawnfile.training.daimon-native.grok-slot-freshness.v1",
+    "paideia.daimon-native.launch.v1": "spawnfile.training.daimon-native.launch.v1",
+    "paideia.daimon-native.launch.v2": "spawnfile.training.daimon-native.launch.v2",
+    "paideia.daimon-native.operator-capture.v1": "spawnfile.training.daimon-native.operator-capture.v1",
+    "paideia.daimon-native.policy-preflight.v1": "spawnfile.training.daimon-native.policy-preflight.v1",
+    "paideia.daimon-native.ready.v1": "spawnfile.training.daimon-native.ready.v1",
+    "paideia.daimon-native.sandbox-preflight.v1": "spawnfile.training.daimon-native.sandbox-preflight.v1",
+    "paideia.daimon-native.sandbox-projection.v1": "spawnfile.training.daimon-native.sandbox-projection.v1",
+    "paideia.daimon-native.start-failed.v1": "spawnfile.training.daimon-native.start-failed.v1",
+    "paideia.daimon-native.startup-diagnostic.v1": "spawnfile.training.daimon-native.startup-diagnostic.v1",
+    "paideia.daimon-native.stop.v1": "spawnfile.training.daimon-native.stop.v1",
+    "paideia.daimon-native.transcript.v1": "spawnfile.training.daimon-native.transcript.v1",
+    "paideia.daimon-native.trial.v1": "spawnfile.training.daimon-native.trial.v1",
+    "paideia.dataset.v1": "spawnfile.training.dataset.v1",
+    "paideia.dataset.v2": "spawnfile.training.dataset.v2",
+    "paideia.decomposition.v1": "spawnfile.training.decomposition.v1",
+    "paideia.dspy.v2": "spawnfile.training.dspy.v2",
+    "paideia.evaluator-request.v1": "spawnfile.training.evaluator-request.v1",
+    "paideia.evaluator-routes.v1": "spawnfile.training.evaluator-routes.v1",
+    "paideia.evidence-units.v1": "spawnfile.training.evidence-units.v1",
+    "paideia.external-input.v1": "spawnfile.training.external-input.v1",
+    "paideia.extraction.v6": "spawnfile.training.extraction.v6",
+    "paideia.extraction.v7": "spawnfile.training.extraction.v7",
+    "paideia.extraction.v8": "spawnfile.training.extraction.v8",
+    "paideia.extraction.v9": "spawnfile.training.extraction.v9",
+    "paideia.failure.v1": "spawnfile.training.failure.v1",
+    "paideia.grader-adjudication.v1": "spawnfile.training.grader-adjudication.v1",
+    "paideia.grader-calibration.v1": "spawnfile.training.grader-calibration.v1",
+    "paideia.grader-failure.v1": "spawnfile.training.grader-failure.v1",
+    "paideia.grader-inputs.v1": "spawnfile.training.grader-inputs.v1",
+    "paideia.grader-label-prompt.v1": "spawnfile.training.grader-label-prompt.v1",
+    "paideia.grader-prompt.v4": "spawnfile.training.grader-prompt.v4",
+    "paideia.grader.v1": "spawnfile.training.grader.v1",
+    "paideia.grading.v1": "spawnfile.training.grading.v1",
+    "paideia.grok-attested-response.v3": "spawnfile.training.grok-attested-response.v3",
+    "paideia.grok-broker-grant-response.v1": "spawnfile.training.grok-broker-grant-response.v1",
+    "paideia.invocation.v1": "spawnfile.training.invocation.v1",
+    "paideia.judgment-cache.v1": "spawnfile.training.judgment-cache.v1",
+    "paideia.judgment-cache.v3": "spawnfile.training.judgment-cache.v3",
+    "paideia.label-import.v1": "spawnfile.training.label-import.v1",
+    "paideia.labels.v1": "spawnfile.training.labels.v1",
+    "paideia.measurement-repair.v1": "spawnfile.training.measurement-repair.v1",
+    "paideia.ollama-attested-response.v2": "spawnfile.training.ollama-attested-response.v2",
+    "paideia.python-bridge.v1": "spawnfile.training.python-bridge.v1",
+    "paideia.references.v1": "spawnfile.training.references.v1",
+    "paideia.repair-parent.v1": "spawnfile.training.repair-parent.v1",
+    "paideia.rescore.v1": "spawnfile.training.rescore.v1",
+    "paideia.run.v1": "spawnfile.training.run.v1",
+    "paideia.startup-diagnostics.v1": "spawnfile.training.startup-diagnostics.v1",
+    "paideia.subject.returned-turn-totals.v1": "spawnfile.training.subject.returned-turn-totals.v1",
+    "paideia.training-cost-plan.v1": "spawnfile.training.training-cost-plan.v1",
+    "paideia.training-export.v1": "spawnfile.training.training-export.v1",
+    "paideia.training-moment-prepared.v1": "spawnfile.training.training-moment-prepared.v1",
+    "paideia.training.v1": "spawnfile.training.training.v1",
+    "paideia.traps.v1": "spawnfile.training.traps.v1",
+    "paideia.trial.v1": "spawnfile.training.trial.v1",
+    "paideia.viewer.v1": "spawnfile.training.viewer.v1",
+    "clank.paideia.python-bridge.v1": "spawnfile.training.python-bridge.v1",
+    "paideia.population": "training.population"
+}

package/dist/target/contracts.d.ts

@@ -436,9 +436,9 @@ export declare const targetResourceJournalSchema: z.ZodObject<{
         receipt_digest: z.ZodString;
         request_digest: z.ZodString;
         state: z.ZodEnum<{
-            incomplete: "incomplete";
-            pending: "pending";
             completed: "completed";
+            pending: "pending";
+            incomplete: "incomplete";
         }>;
     }, z.core.$strict>>;
     revision: z.ZodNumber;

package/dist/training/candidates/authored.d.ts

@@ -0,0 +1,3 @@
+import type { CandidateManifest } from './types.js';
+/** Replace authored resource bytes exactly, retaining the baseline's declared edit policy. */
+export declare function deriveAuthoredCandidate(baseline: CandidateManifest, replacements: Readonly<Record<string, string>>): CandidateManifest;

package/dist/training/candidates/authored.js

@@ -0,0 +1,27 @@
+import { candidateIdentity, digestBytes, freezeCandidate } from './identity.js';
+import { assertOriginalPolicy, validateCandidate } from './validation.js';
+/** Replace authored resource bytes exactly, retaining the baseline's declared edit policy. */
+export function deriveAuthoredCandidate(baseline, replacements) {
+    validateCandidate(baseline);
+    if (!Object.keys(replacements).length)
+        throw new Error('Authored comparison requires resource replacements');
+    for (const [path, text] of Object.entries(replacements)) {
+        const resource = baseline.resources.find(item => item.sourcePath === path);
+        if (!resource || resource.edit === 'locked')
+            throw new Error(`Undeclared or locked comparison resource: ${path}`);
+        if (typeof text !== 'string')
+            throw new Error('Authored replacement must be text');
+    }
+    const resources = baseline.resources.map(resource => {
+        const content = replacements[resource.sourcePath] ?? resource.content;
+        return { ...structuredClone(resource), content, digest: digestBytes(content) };
+    });
+    if (resources.every((resource, index) => resource.content === baseline.resources[index].content)) {
+        throw new Error('Authored candidate must differ from the baseline');
+    }
+    const body = { schema: 'spawnfile.training.candidate.v1', parentId: baseline.id, policyDigest: baseline.policyDigest, resources };
+    const candidate = { ...body, baselineId: baseline.id, id: candidateIdentity(body, baseline.id) };
+    assertOriginalPolicy(baseline, candidate);
+    return freezeCandidate(candidate);
+}
+//# sourceMappingURL=authored.js.map

package/dist/training/candidates/authored.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authored.js","sourceRoot":"","sources":["../../../src/training/candidates/authored.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,8FAA8F;AAC9F,MAAM,UAAU,uBAAuB,CAAC,QAA2B,EAAE,YAA8C;IACjH,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC7G,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;QAClH,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QAClD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC;QACtE,OAAO,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,iCAA0C,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;IAC3I,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IACjG,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC"}

package/dist/training/candidates/derive.d.ts

@@ -0,0 +1,3 @@
+import type { CandidateComponent, CandidateManifest } from './types.js';
+export declare function candidateComponents(candidate: CandidateManifest): CandidateComponent[];
+export declare function deriveCandidate(baseline: CandidateManifest, parent: CandidateManifest, replacements: Readonly<Record<string, string>>): CandidateManifest;

package/dist/training/candidates/derive.js

@@ -0,0 +1,66 @@
+import { selectSections } from './headings.js';
+import { candidateIdentity, digestBytes, freezeCandidate } from './identity.js';
+import { assertOriginalPolicy, validateCandidate } from './validation.js';
+function componentId(resourceId, heading) {
+    return heading ? `${resourceId}#${heading.map(encodeURIComponent).join('/')}` : `${resourceId}#file`;
+}
+export function candidateComponents(candidate) {
+    validateCandidate(candidate);
+    return candidate.resources.flatMap(resource => {
+        if (resource.edit === 'locked')
+            return [];
+        if (resource.edit === 'whole-file')
+            return [{ id: componentId(resource.id), resourceId: resource.id, text: resource.content }];
+        return selectSections(resource.content, resource.edit.headings).map(section => ({
+            id: componentId(resource.id, section.ancestry), resourceId: resource.id,
+            heading: section.ancestry, text: resource.content.slice(section.start, section.end),
+        }));
+    });
+}
+export function deriveCandidate(baseline, parent, replacements) {
+    assertOriginalPolicy(baseline, parent);
+    const components = candidateComponents(parent);
+    for (const [id, text] of Object.entries(replacements)) {
+        if (!components.some(component => component.id === id))
+            throw new Error(`Undeclared or locked candidate component: ${id}`);
+        if (typeof text !== 'string')
+            throw new Error('Candidate replacement must be text');
+    }
+    const resources = parent.resources.map(resource => replaceResource(resource, replacements));
+    const body = { schema: 'spawnfile.training.candidate.v1', parentId: parent.id, policyDigest: baseline.policyDigest, resources };
+    const candidate = { ...body, baselineId: baseline.id, id: candidateIdentity(body, baseline.id) };
+    assertOriginalPolicy(baseline, candidate);
+    return freezeCandidate(candidate);
+}
+function replaceResource(resource, replacements) {
+    let content = resource.content;
+    if (resource.edit === 'whole-file') {
+        content = replacements[componentId(resource.id)] ?? content;
+    }
+    else if (typeof resource.edit === 'object') {
+        const sections = selectSections(content, resource.edit.headings).reverse();
+        for (const section of sections) {
+            const replacement = replacements[componentId(resource.id, section.ancestry)];
+            if (replacement !== undefined) {
+                const original = content.slice(section.start, section.end);
+                const suffix = content.slice(section.end);
+                const newline = original.match(/^(?:\r\n|\r|\n)/u)?.[0]
+                    ?? content.slice(0, section.start).match(/\r\n|\r|\n/gu)?.at(-1) ?? '\n';
+                let body = replacement;
+                // Delimit the locked heading and following heading; replacement prose need not carry Markdown separators.
+                if (!/^[\r\n]/u.test(body) && (body.length > 0 || suffix.length > 0))
+                    body = newline + body;
+                if (suffix.length > 0) {
+                    if (!/[\r\n]$/u.test(body))
+                        body += newline;
+                    // A setext heading following a paragraph requires an empty line to retain its own heading text.
+                    if (!/^ {0,3}#{1,6}(?:\s|$)/u.test(suffix) && !body.replace(/\r\n|\r/gu, '\n').endsWith('\n\n'))
+                        body += newline;
+                }
+                content = content.slice(0, section.start) + body + suffix;
+            }
+        }
+    }
+    return { ...structuredClone(resource), content, digest: digestBytes(content) };
+}
+//# sourceMappingURL=derive.js.map

package/dist/training/candidates/derive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.js","sourceRoot":"","sources":["../../../src/training/candidates/derive.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,SAAS,WAAW,CAAC,UAAkB,EAAE,OAAkB;IACzD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,OAAO,CAAC;AACvG,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,SAA4B;IAC9D,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;QAC5C,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/H,OAAO,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9E,EAAE,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;SACpF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,QAA2B,EAAE,MAAyB,EACpF,YAA8C;IAC9C,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC;QAC3H,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,iCAA0C,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;IACzI,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IACjG,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,eAAe,CAAC,QAA2B,EAAE,YAA8C;IAClG,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC;IAC9D,CAAC;SAAM,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7E,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;uBAClD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;gBAC3E,IAAI,IAAI,GAAG,WAAW,CAAC;gBACvB,0GAA0G;gBAC1G,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;oBAAE,IAAI,GAAG,OAAO,GAAG,IAAI,CAAC;gBAC5F,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,IAAI,IAAI,OAAO,CAAC;oBAC5C,gGAAgG;oBAChG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;wBAAE,IAAI,IAAI,OAAO,CAAC;gBACnH,CAAC;gBACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/training/candidates/filesystem.d.ts

@@ -0,0 +1,7 @@
+export declare function relativeResourcePath(value: string): string;
+export declare function containedPath(root: string, target: string): boolean;
+export declare function readSourceFile(root: string, path: string): Promise<{
+    text: string;
+    realPath: string;
+}>;
+export declare function assertPlainDirectory(path: string): Promise<void>;

package/dist/training/candidates/filesystem.js

@@ -0,0 +1,41 @@
+import { constants } from 'node:fs';
+import { lstat, open, realpath } from 'node:fs/promises';
+import { isAbsolute, relative, resolve, sep } from 'node:path';
+export function relativeResourcePath(value) {
+    if (typeof value !== 'string' || !value || isAbsolute(value) || /^[A-Za-z]:/.test(value) ||
+        value.includes('\\') || value.includes('\0') || value.split('/').some(part => !part || part === '.' || part === '..')) {
+        throw new Error(`Unsafe candidate path: ${String(value)}`);
+    }
+    return value;
+}
+export function containedPath(root, target) {
+    const path = relative(root, target);
+    return path === '' || (!isAbsolute(path) && path !== '..' && !path.startsWith(`..${sep}`));
+}
+export async function readSourceFile(root, path) {
+    const actualRoot = await realpath(root);
+    const actualPath = await realpath(resolve(actualRoot, relativeResourcePath(path)));
+    if (!containedPath(actualRoot, actualPath))
+        throw new Error('Candidate source symlink escapes its source root');
+    const file = await open(actualPath, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const stat = await file.stat();
+        if (!stat.isFile() || stat.size > 1_048_576)
+            throw new Error('Candidate source must be a regular file under 1 MiB');
+        const bytes = await file.readFile();
+        const text = bytes.toString('utf8');
+        if (bytes.length > 1_048_576 || !Buffer.from(text).equals(bytes) || text.includes('\0')) {
+            throw new Error('Candidate source must be bounded valid UTF-8 text');
+        }
+        return { text, realPath: actualPath };
+    }
+    finally {
+        await file.close();
+    }
+}
+export async function assertPlainDirectory(path) {
+    const stat = await lstat(path);
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+        throw new Error('Candidate destination must be a plain directory');
+}
+//# sourceMappingURL=filesystem.js.map

package/dist/training/candidates/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../../src/training/candidates/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/D,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QACtF,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACxH,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAc;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;AAC7F,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY;IAC7D,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAChH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACpH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC;YAAS,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACnC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACvH,CAAC"}

package/dist/training/candidates/headings.d.ts

@@ -0,0 +1,9 @@
+export interface HeadingSection {
+    ancestry: string[];
+    depth: number;
+    start: number;
+    end: number;
+}
+export declare function headingSections(content: string): HeadingSection[];
+export declare function selectSections(content: string, selectors: string[][]): HeadingSection[];
+export declare function lockedSegments(content: string, sections: HeadingSection[]): string[];

package/dist/training/candidates/headings.js

@@ -0,0 +1,47 @@
+import { fromMarkdown } from 'mdast-util-from-markdown';
+import { toString } from 'mdast-util-to-string';
+export function headingSections(content) {
+    const headings = fromMarkdown(content).children.filter(node => node.type === 'heading');
+    const stack = [];
+    return headings.map((heading, index) => {
+        while (stack.length && stack[stack.length - 1].depth >= heading.depth)
+            stack.pop();
+        stack.push({ text: toString(heading), depth: heading.depth });
+        const next = headings.slice(index + 1).find(node => node.depth <= heading.depth);
+        return {
+            ancestry: stack.map(parent => parent.text), depth: heading.depth,
+            // The heading text stays locked. Its following separator belongs to the editable body.
+            start: heading.position.end.offset, end: next?.position?.start.offset ?? content.length,
+        };
+    });
+}
+export function selectSections(content, selectors) {
+    if (!selectors.length)
+        throw new Error('Heading policy requires at least one selector');
+    const headings = headingSections(content);
+    const selected = selectors.map(selector => {
+        if (!selector.length || selector.some(part => typeof part !== 'string' || !part))
+            throw new Error('Invalid heading ancestry');
+        const matches = headings.filter(heading => JSON.stringify(heading.ancestry) === JSON.stringify(selector));
+        if (matches.length !== 1)
+            throw new Error(`Missing or ambiguous heading: ${selector.join(' / ')}`);
+        return matches[0];
+    }).sort((a, b) => a.start - b.start);
+    for (let index = 1; index < selected.length; index++) {
+        if (selected[index].start < selected[index - 1].end || selected[index].start === selected[index - 1].start) {
+            throw new Error('Editable heading subtrees overlap');
+        }
+    }
+    return selected;
+}
+export function lockedSegments(content, sections) {
+    const result = [];
+    let offset = 0;
+    for (const section of sections) {
+        result.push(content.slice(offset, section.start));
+        offset = section.end;
+    }
+    result.push(content.slice(offset));
+    return result;
+}
+//# sourceMappingURL=headings.js.map

package/dist/training/candidates/headings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headings.js","sourceRoot":"","sources":["../../../src/training/candidates/headings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACxF,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACrC,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACpF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;QACjF,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;YAChE,uFAAuF;YACvF,KAAK,EAAE,OAAO,CAAC,QAAS,CAAC,GAAG,CAAC,MAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;SAC1F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,SAAqB;IACnE,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9H,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnG,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IACrB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,IAAI,QAAQ,CAAC,KAAK,CAAE,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC;YAC/G,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,QAA0B;IACxE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IACvB,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/training/candidates/identity.d.ts

@@ -0,0 +1,6 @@
+import type { CandidateManifest, CandidateResource } from './types.js';
+export declare function digestBytes(value: string | Uint8Array): string;
+export declare function canonicalCandidate(value: unknown): string;
+export declare function policyIdentity(resources: CandidateResource[]): string;
+export declare function candidateIdentity(candidate: Omit<CandidateManifest, 'id' | 'baselineId'>, baselineId?: string): string;
+export declare function freezeCandidate<T>(value: T): T;

package/dist/training/candidates/identity.js

@@ -0,0 +1,29 @@
+import { CANDIDATE_DIGEST_SCHEMA } from '../contracts/index.js';
+import { createHash } from 'node:crypto';
+export function digestBytes(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+export function canonicalCandidate(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalCandidate).join(',')}]`;
+    if (value && typeof value === 'object') {
+        return `{${Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)
+            .map(([key, item]) => `${JSON.stringify(key)}:${canonicalCandidate(item)}`).join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+export function policyIdentity(resources) {
+    return digestBytes(canonicalCandidate(resources.map(({ content: _content, digest: _digest, ...policy }) => policy)));
+}
+export function candidateIdentity(candidate, baselineId) {
+    return digestBytes(canonicalCandidate({ ...candidate, schema: CANDIDATE_DIGEST_SCHEMA, ...(baselineId ? { baselineId } : {}) }));
+}
+export function freezeCandidate(value) {
+    if (value && typeof value === 'object' && !Object.isFrozen(value)) {
+        for (const child of Object.values(value))
+            freezeCandidate(child);
+        Object.freeze(value);
+    }
+    return value;
+}
+//# sourceMappingURL=identity.js.map

package/dist/training/candidates/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/training/candidates/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,UAAU,WAAW,CAAC,KAA0B;IACpD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5E,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7F,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,SAA8B;IAC3D,OAAO,WAAW,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACvH,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,SAAuD,EACvF,UAAmB;IACnB,OAAO,WAAW,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,uBAAuB,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACnI,CAAC;AACD,MAAM,UAAU,eAAe,CAAI,KAAQ;IACzC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,eAAe,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/training/candidates/index.d.ts

@@ -0,0 +1,6 @@
+export { snapshotCandidate } from './snapshot.js';
+export { candidateComponents, deriveCandidate } from './derive.js';
+export { materializeCandidate } from './materialize.js';
+export { validateCandidate, assertOriginalPolicy } from './validation.js';
+export type { CandidateComponent, CandidateManifest, CandidateResource, EditPolicy, MaterializationReceipt, NativeDestination, ResourceKind, ResourceMapping } from './types.js';
+export { deriveAuthoredCandidate } from './authored.js';

package/dist/training/candidates/index.js

@@ -0,0 +1,6 @@
+export { snapshotCandidate } from './snapshot.js';
+export { candidateComponents, deriveCandidate } from './derive.js';
+export { materializeCandidate } from './materialize.js';
+export { validateCandidate, assertOriginalPolicy } from './validation.js';
+export { deriveAuthoredCandidate } from './authored.js';
+//# sourceMappingURL=index.js.map

package/dist/training/candidates/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/training/candidates/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAG1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC"}

package/dist/training/candidates/materialize.d.ts

@@ -0,0 +1,2 @@
+import type { CandidateManifest, MaterializationReceipt } from './types.js';
+export declare function materializeCandidate(candidate: CandidateManifest, freshRoot: string): Promise<MaterializationReceipt[]>;

package/dist/training/candidates/materialize.js

@@ -0,0 +1,39 @@
+import { mkdir, open, readdir, realpath } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { assertPlainDirectory } from './filesystem.js';
+import { digestBytes } from './identity.js';
+import { validateCandidate } from './validation.js';
+export async function materializeCandidate(candidate, freshRoot) {
+    validateCandidate(candidate);
+    await mkdir(freshRoot, { recursive: true, mode: 0o700 });
+    await assertPlainDirectory(freshRoot);
+    if ((await readdir(freshRoot)).length)
+        throw new Error('Candidate installation requires an empty trial-owned directory');
+    const actualRoot = await realpath(freshRoot);
+    const receipts = [];
+    for (const resource of candidate.resources) {
+        for (const destination of resource.destinations) {
+            const path = resolve(actualRoot, destination.path);
+            await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+            const file = await open(path, 'wx', 0o600);
+            try {
+                await file.writeFile(resource.content, 'utf8');
+                await file.sync();
+            }
+            finally {
+                await file.close();
+            }
+            const check = await open(path, 'r');
+            try {
+                if (digestBytes(await check.readFile()) !== resource.digest)
+                    throw new Error('Installed candidate bytes do not match their manifest');
+            }
+            finally {
+                await check.close();
+            }
+            receipts.push({ resourceId: resource.id, destination: { ...destination }, digest: resource.digest, evidence: 'installed' });
+        }
+    }
+    return receipts;
+}
+//# sourceMappingURL=materialize.js.map

package/dist/training/candidates/materialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialize.js","sourceRoot":"","sources":["../../../src/training/candidates/materialize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAA4B,EAAE,SAAiB;IACxF,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACzH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QAC3C,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;oBAClE,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,QAAQ,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACxI,CAAC;oBAAS,CAAC;gBAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/training/candidates/snapshot.d.ts

@@ -0,0 +1,5 @@
+import type { CandidateManifest, ResourceMapping } from './types.js';
+export declare function snapshotCandidate(options: {
+    sourceRoot: string;
+    resources: ResourceMapping[];
+}): Promise<CandidateManifest>;