taskflow-mcp-core 0.3.0-beta.1.1 → 1.0.0

package/dist/control/schema/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvF,OAAO,EAAE,6BAA6B,EAAgC,MAAM,aAAa,CAAC;AAE1F,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAC3C;IACC,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAClC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC3C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CAC7C,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AASF,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAG7G,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAG3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAChD;IACC,iBAAiB,EAAE,IAAI,CAAC,OAAO,EAAE;IACjC,eAAe,EAAE,qBAAqB;IACtC,iBAAiB,EAAE,uBAAuB;IAC1C,UAAU,EAAE,IAAI,CAAC,MAAM,CACtB;QACC,eAAe,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC7D,SAAS,EAAE,UAAU,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;KAC3D,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;IACD,WAAW,EAAE,IAAI,CAAC,MAAM,CACvB;QACC,YAAY,EAAE,6BAA6B;QAC3C,2BAA2B,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;KACxE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B;CACD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAYF,8EAA8E;AAC9E,6CAA6C;AAC7C,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAC7C;IACC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC7C,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC3C,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;CACtD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAQF,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CACvC;IACC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC;IACxD,eAAe,EAAE,UAAU;IAC3B,KAAK,EAAE,UAAU;IACjB,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;IACrC,YAAY,EAAE,eAAe;IAC7B,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC5C,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC1C,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC3C,SAAS,EAAE,sBAAsB;IACjC,SAAS,EAAE,mBAAmB;CAC9B,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC"}

package/dist/control/schema/header.d.ts

@@ -0,0 +1,79 @@
+/**
+ * ControlDomain / ControlStore / Registry / Bootstrap wire types (🟥 NEW).
+ *
+ * Decisions: P3 (domain + registry identity), P14 (store header), P13
+ * (bootstrap manifest + layout). The store header is the authoritative
+ * identity source; the registry is a rebuildable non-authoritative projection.
+ */
+import { Type } from "typebox";
+import { CONTROL_WIRE_SCHEMA_VERSION } from "./common.ts";
+/** 1:1 with a project ledger; stable across daemon restarts and mode switches. */
+export declare const ControlDomainIdSchema: Type.TString;
+export type ControlDomainId = string;
+/** Stable project UUID; lives in the ControlStore header and the registry. */
+export declare const ProjectIdSchema: Type.TString;
+export type ProjectId = string;
+/** Directory binding evidence for swap/move detection (P3 move/rebind). */
+export declare const DirectoryBindingSchema: Type.TObject<{
+    canonicalPath: Type.TString;
+    device: Type.TString;
+    inode: Type.TString;
+}>;
+export type DirectoryBinding = {
+    canonicalPath: string;
+    device: string;
+    inode: string;
+};
+export declare const ControlStoreHeaderSchema: Type.TObject<{
+    projectId: Type.TString;
+    controlDomainId: Type.TString;
+    schemaVersion: Type.TUnion<[Type.TLiteral<1>, Type.TLiteral<2>]>;
+    directoryBinding: Type.TObject<{
+        canonicalPath: Type.TString;
+        device: Type.TString;
+        inode: Type.TString;
+    }>;
+}>;
+export type ControlStoreHeader = {
+    projectId: ProjectId;
+    controlDomainId: ControlDomainId;
+    schemaVersion: 1 | typeof CONTROL_WIRE_SCHEMA_VERSION;
+    directoryBinding: DirectoryBinding;
+};
+export declare const MountStateSchema: Type.TUnion<[Type.TLiteral<"unmounted">, Type.TLiteral<"mounting">, Type.TLiteral<"mounted">, Type.TLiteral<"drained">]>;
+export type MountState = "unmounted" | "mounting" | "mounted" | "drained";
+export declare const ControlRegistryEntrySchema: Type.TObject<{
+    projectId: Type.TString;
+    controlDomainId: Type.TString;
+    storePath: Type.TString;
+    directoryBinding: Type.TObject<{
+        canonicalPath: Type.TString;
+        device: Type.TString;
+        inode: Type.TString;
+    }>;
+    mountState: Type.TUnion<[Type.TLiteral<"unmounted">, Type.TLiteral<"mounting">, Type.TLiteral<"mounted">, Type.TLiteral<"drained">]>;
+    summary: Type.TOptional<Type.TString>;
+}>;
+export type ControlRegistryEntry = {
+    projectId: ProjectId;
+    controlDomainId: ControlDomainId;
+    storePath: string;
+    directoryBinding: DirectoryBinding;
+    mountState: MountState;
+    summary?: string;
+};
+export declare const ControlStoreStatusSchema: Type.TUnion<[Type.TLiteral<"healthy">, Type.TLiteral<"recovering">, Type.TLiteral<"fail-closed">]>;
+export type ControlStoreStatus = "healthy" | "recovering" | "fail-closed";
+export declare const BootstrapManifestSchema: Type.TObject<{
+    controlBinaryPath: Type.TString;
+    controlHome: Type.TString;
+    singletonEndpoint: Type.TString;
+    fencingEpoch: Type.TInteger;
+}>;
+export type BootstrapManifest = {
+    controlBinaryPath: string;
+    controlHome: string;
+    singletonEndpoint: string;
+    fencingEpoch: number;
+};
+//# sourceMappingURL=header.d.ts.map

package/dist/control/schema/header.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"header.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/header.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAc,MAAM,aAAa,CAAC;AAMtE,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,cAAa,CAAC;AAChD,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC;AAErC,8EAA8E;AAC9E,eAAO,MAAM,eAAe,cAAa,CAAC;AAC1C,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B,2EAA2E;AAC3E,eAAO,MAAM,sBAAsB;;;;EAOlC,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACd,CAAC;AAMF,eAAO,MAAM,wBAAwB;;;;;;;;;EAQpC,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,CAAC,GAAG,OAAO,2BAA2B,CAAC;IACtD,gBAAgB,EAAE,gBAAgB,CAAC;CACnC,CAAC;AAMF,eAAO,MAAM,gBAAgB,0HAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;EAUtC,CAAC;AACF,MAAM,MAAM,oBAAoB,GAAG;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,eAAe,EAAE,eAAe,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,UAAU,EAAE,UAAU,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAMF,eAAO,MAAM,wBAAwB,oGAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,YAAY,GAAG,aAAa,CAAC;AAM1E,eAAO,MAAM,uBAAuB;;;;;EAQnC,CAAC;AACF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;CACrB,CAAC"}

package/dist/control/schema/header.js

@@ -0,0 +1,66 @@
+/**
+ * ControlDomain / ControlStore / Registry / Bootstrap wire types (🟥 NEW).
+ *
+ * Decisions: P3 (domain + registry identity), P14 (store header), P13
+ * (bootstrap manifest + layout). The store header is the authoritative
+ * identity source; the registry is a rebuildable non-authoritative projection.
+ */
+import { Type } from "typebox";
+import { CONTROL_WIRE_SCHEMA_VERSION, UuidSchema } from "./common.js";
+// ---------------------------------------------------------------------------
+// Scalars (P3: UUID 标量约定)
+// ---------------------------------------------------------------------------
+/** 1:1 with a project ledger; stable across daemon restarts and mode switches. */
+export const ControlDomainIdSchema = UuidSchema;
+/** Stable project UUID; lives in the ControlStore header and the registry. */
+export const ProjectIdSchema = UuidSchema;
+/** Directory binding evidence for swap/move detection (P3 move/rebind). */
+export const DirectoryBindingSchema = Type.Object({
+    canonicalPath: Type.String({ minLength: 1 }),
+    device: Type.String({ minLength: 1 }),
+    inode: Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// ControlStoreHeader (P14) — authoritative identity source
+// ---------------------------------------------------------------------------
+export const ControlStoreHeaderSchema = Type.Object({
+    projectId: ProjectIdSchema,
+    controlDomainId: ControlDomainIdSchema,
+    schemaVersion: Type.Union([Type.Literal(1), Type.Literal(CONTROL_WIRE_SCHEMA_VERSION)]),
+    directoryBinding: DirectoryBindingSchema,
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// ControlRegistryEntry (P3) — non-authoritative discovery/projection
+// ---------------------------------------------------------------------------
+export const MountStateSchema = Type.Union([
+    Type.Literal("unmounted"),
+    Type.Literal("mounting"),
+    Type.Literal("mounted"),
+    Type.Literal("drained"),
+]);
+export const ControlRegistryEntrySchema = Type.Object({
+    projectId: ProjectIdSchema,
+    controlDomainId: ControlDomainIdSchema,
+    storePath: Type.String({ minLength: 1 }),
+    directoryBinding: DirectoryBindingSchema,
+    mountState: MountStateSchema,
+    summary: Type.Optional(Type.String()),
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// ControlStoreStatus (P14) — store health/recovery state
+// ---------------------------------------------------------------------------
+export const ControlStoreStatusSchema = Type.Union([
+    Type.Literal("healthy"),
+    Type.Literal("recovering"),
+    Type.Literal("fail-closed"),
+]);
+// ---------------------------------------------------------------------------
+// BootstrapManifest (P13) — install/start contract
+// ---------------------------------------------------------------------------
+export const BootstrapManifestSchema = Type.Object({
+    controlBinaryPath: Type.String({ minLength: 1 }),
+    controlHome: Type.String({ minLength: 1 }),
+    singletonEndpoint: Type.String({ minLength: 1 }),
+    fencingEpoch: Type.Integer({ minimum: 0 }),
+}, { additionalProperties: false });
+//# sourceMappingURL=header.js.map

package/dist/control/schema/header.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"header.js","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/header.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtE,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAGhD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAG1C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAChD;IACC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CACpC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAOF,8EAA8E;AAC9E,2DAA2D;AAC3D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAClD;IACC,SAAS,EAAE,eAAe;IAC1B,eAAe,EAAE,qBAAqB;IACtC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACvF,gBAAgB,EAAE,sBAAsB;CACxC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAQF,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;CACvB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC,MAAM,CACpD;IACC,SAAS,EAAE,eAAe;IAC1B,eAAe,EAAE,qBAAqB;IACtC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,gBAAgB,EAAE,sBAAsB;IACxC,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACrC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAUF,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,KAAK,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IAC1B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;CAC3B,CAAC,CAAC;AAGH,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CACjD;IACC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAChD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC1C,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;CAC1C,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC"}

package/dist/control/schema/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * taskflow-control wire schema barrel — the single source of truth for the
+ * 0.3-C frozen TypeBox contracts (wire-freeze §3).
+ *
+ * REUSE (TE, import read-only): EffectDeclSchema / EffectIRSchema come from
+ * `taskflow-core/effects/schema`; SecretRef / ServiceRef / labels from
+ * `taskflow-core/effects/types`; canonical-hash from
+ * `taskflow-core/flowir/canonical-hash`. The `resources/*` shapes that
+ * taskflow-core deliberately does not export are mirrored in
+ * `./te-mirrors.ts` (TE remains the authority).
+ *
+ * Every top-level document carries `schemaVersion` where the ADR pins it
+ * (ControlStoreHeader, ControlEvent, BoundPlan, BoundFragment, Receipt) and
+ * closed `additionalProperties: false` objects throughout.
+ */
+export { CONTROL_WIRE_SCHEMA_VERSION, UuidSchema, Sha256HexSchema, CanonicalHashRefSchema, StringEnum, } from "./common.ts";
+export type { ControlWireSchemaVersion } from "./common.ts";
+export * from "./te-mirrors.ts";
+export * from "./header.ts";
+export * from "./commands.ts";
+export * from "./plan.ts";
+export * from "./run.ts";
+export * from "./approval.ts";
+export * from "./coordinator.ts";
+export * from "./policy.ts";
+export * from "./evidence.ts";
+export * from "./transport.ts";
+export { EffectDeclSchema, EffectIRSchema } from "taskflow-core/effects/schema";
+export type { EffectDecl, EffectIR, EffectKind, ConfidentialityLabel, IntegrityLabel, SecretRef, ServiceRef } from "taskflow-core/effects/types";
+export { hashFlowIR, hashNode, canonicalizeFlowIR, canonicalizeNode } from "taskflow-core/flowir/canonical-hash";
+//# sourceMappingURL=index.d.ts.map

package/dist/control/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACN,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,UAAU,GACV,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAI/B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAChF,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,oBAAoB,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACjJ,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/control/schema/index.js

@@ -0,0 +1,31 @@
+/**
+ * taskflow-control wire schema barrel — the single source of truth for the
+ * 0.3-C frozen TypeBox contracts (wire-freeze §3).
+ *
+ * REUSE (TE, import read-only): EffectDeclSchema / EffectIRSchema come from
+ * `taskflow-core/effects/schema`; SecretRef / ServiceRef / labels from
+ * `taskflow-core/effects/types`; canonical-hash from
+ * `taskflow-core/flowir/canonical-hash`. The `resources/*` shapes that
+ * taskflow-core deliberately does not export are mirrored in
+ * `./te-mirrors.ts` (TE remains the authority).
+ *
+ * Every top-level document carries `schemaVersion` where the ADR pins it
+ * (ControlStoreHeader, ControlEvent, BoundPlan, BoundFragment, Receipt) and
+ * closed `additionalProperties: false` objects throughout.
+ */
+export { CONTROL_WIRE_SCHEMA_VERSION, UuidSchema, Sha256HexSchema, CanonicalHashRefSchema, StringEnum, } from "./common.js";
+export * from "./te-mirrors.js";
+export * from "./header.js";
+export * from "./commands.js";
+export * from "./plan.js";
+export * from "./run.js";
+export * from "./approval.js";
+export * from "./coordinator.js";
+export * from "./policy.js";
+export * from "./evidence.js";
+export * from "./transport.js";
+// REUSE re-exports from taskflow-core (TE schemas are the authority; the
+// control wire references them as read-only evidence).
+export { EffectDeclSchema, EffectIRSchema } from "taskflow-core/effects/schema";
+export { hashFlowIR, hashNode, canonicalizeFlowIR, canonicalizeNode } from "taskflow-core/flowir/canonical-hash";
+//# sourceMappingURL=index.js.map

package/dist/control/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACN,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,UAAU,GACV,MAAM,aAAa,CAAC;AAGrB,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAE/B,yEAAyE;AACzE,uDAAuD;AACvD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEhF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/control/schema/plan.d.ts

@@ -0,0 +1,291 @@
+/**
+ * BoundPlan / BoundFragment / SpawnTemplate wire types (🟥 NEW).
+ *
+ * Decisions: P1/P7 (immutable BoundPlan template, evidence-not-bearer), P7
+ * (BoundFragment dual hashes + parent chain + authorityEpoch), P8
+ * (enforcementCapabilities required — no holes), P6 (single hash family).
+ */
+import { Type } from "typebox";
+import { CONTROL_WIRE_SCHEMA_VERSION } from "./common.ts";
+import { type PathRef } from "./te-mirrors.ts";
+import { type EnforcementCapabilities, type PolicyBundle } from "./policy.ts";
+export declare const SpawnTemplateSchema: Type.TObject<{
+    allowedAgentClasses: Type.TArray<Type.TString>;
+    allowedProviderClasses: Type.TArray<Type.TString>;
+    maxToolCallsPerStep: Type.TInteger;
+    maxEffectsPerNode: Type.TInteger;
+    maxChildren: Type.TInteger;
+    maxDepth: Type.TInteger;
+    budgetShare: Type.TNumber;
+}>;
+export type SpawnTemplate = {
+    allowedAgentClasses: string[];
+    allowedProviderClasses: string[];
+    maxToolCallsPerStep: number;
+    maxEffectsPerNode: number;
+    maxChildren: number;
+    maxDepth: number;
+    budgetShare: number;
+};
+export declare const PlanBindingSchema: Type.TObject<{
+    name: Type.TString;
+    path: Type.TUnion<[Type.TObject<{
+        subpath: Type.TOptional<Type.TUnion<[Type.TObject<{
+            literalPath: Type.TString;
+            argPath: Type.TOptional<Type.TNever>;
+            segments: Type.TOptional<Type.TNever>;
+        }>, Type.TObject<{
+            argPath: Type.TString;
+            literalPath: Type.TOptional<Type.TNever>;
+            segments: Type.TOptional<Type.TNever>;
+        }>, Type.TObject<{
+            segments: Type.TArray<Type.TUnion<[Type.TObject<{
+                segment: Type.TString;
+                argSegment: Type.TOptional<Type.TNever>;
+            }>, Type.TObject<{
+                argSegment: Type.TString;
+                segment: Type.TOptional<Type.TNever>;
+            }>]>>;
+            literalPath: Type.TOptional<Type.TNever>;
+            argPath: Type.TOptional<Type.TNever>;
+        }>]>>;
+        access: Type.TOptional<Type.TUnion<[Type.TLiteral<"read-only">, Type.TLiteral<"read-write">]>>;
+        maxLifetime: Type.TOptional<Type.TUnion<Type.TObject<{
+            scope: Type.TLiteral<"external" | "phase" | "run">;
+        }>[]>>;
+        intent: Type.TUnion<[Type.TLiteral<"existing-file">, Type.TLiteral<"existing-directory">, Type.TLiteral<"create-file">, Type.TLiteral<"create-directory">, Type.TLiteral<"executable">]>;
+        workspace: Type.TString;
+        handle: Type.TOptional<Type.TNever>;
+    }>, Type.TObject<{
+        subpath: Type.TOptional<Type.TUnion<[Type.TObject<{
+            literalPath: Type.TString;
+            argPath: Type.TOptional<Type.TNever>;
+            segments: Type.TOptional<Type.TNever>;
+        }>, Type.TObject<{
+            argPath: Type.TString;
+            literalPath: Type.TOptional<Type.TNever>;
+            segments: Type.TOptional<Type.TNever>;
+        }>, Type.TObject<{
+            segments: Type.TArray<Type.TUnion<[Type.TObject<{
+                segment: Type.TString;
+                argSegment: Type.TOptional<Type.TNever>;
+            }>, Type.TObject<{
+                argSegment: Type.TString;
+                segment: Type.TOptional<Type.TNever>;
+            }>]>>;
+            literalPath: Type.TOptional<Type.TNever>;
+            argPath: Type.TOptional<Type.TNever>;
+        }>]>>;
+        access: Type.TOptional<Type.TUnion<[Type.TLiteral<"read-only">, Type.TLiteral<"read-write">]>>;
+        maxLifetime: Type.TOptional<Type.TUnion<Type.TObject<{
+            scope: Type.TLiteral<"external" | "phase" | "run">;
+        }>[]>>;
+        intent: Type.TUnion<[Type.TLiteral<"existing-file">, Type.TLiteral<"existing-directory">, Type.TLiteral<"create-file">, Type.TLiteral<"create-directory">, Type.TLiteral<"executable">]>;
+        handle: Type.TObject<{
+            producerPhaseId: Type.TString;
+            exportName: Type.TString;
+        }>;
+        workspace: Type.TOptional<Type.TNever>;
+    }>]>;
+}>;
+export type PlanBinding = {
+    name: string;
+    path: PathRef;
+};
+export declare const SavedFlowPinSchema: Type.TObject<{
+    flowId: Type.TString;
+    irHash: Type.TString;
+    boundPlanHash: Type.TString;
+}>;
+export type SavedFlowPin = {
+    flowId: string;
+    irHash: string;
+    boundPlanHash: string;
+};
+export declare const GrantRefSchema: Type.TObject<{
+    grantId: Type.TString;
+    bindingId: Type.TOptional<Type.TString>;
+}>;
+export type GrantRef = {
+    grantId: string;
+    bindingId?: string;
+};
+export declare const ClaimSchema: Type.TObject<{
+    name: Type.TString;
+    value: Type.TUnion<[Type.TString, Type.TBoolean, Type.TNumber]>;
+}>;
+export type Claim = {
+    name: string;
+    value: string | boolean | number;
+};
+export declare const BoundPlanSchema: Type.TObject<{
+    schemaVersion: Type.TLiteral<2>;
+    projectId: Type.TString;
+    controlDomainId: Type.TString;
+    planId: Type.TString;
+    bindings: Type.TArray<Type.TObject<{
+        name: Type.TString;
+        path: Type.TUnion<[Type.TObject<{
+            subpath: Type.TOptional<Type.TUnion<[Type.TObject<{
+                literalPath: Type.TString;
+                argPath: Type.TOptional<Type.TNever>;
+                segments: Type.TOptional<Type.TNever>;
+            }>, Type.TObject<{
+                argPath: Type.TString;
+                literalPath: Type.TOptional<Type.TNever>;
+                segments: Type.TOptional<Type.TNever>;
+            }>, Type.TObject<{
+                segments: Type.TArray<Type.TUnion<[Type.TObject<{
+                    segment: Type.TString;
+                    argSegment: Type.TOptional<Type.TNever>;
+                }>, Type.TObject<{
+                    argSegment: Type.TString;
+                    segment: Type.TOptional<Type.TNever>;
+                }>]>>;
+                literalPath: Type.TOptional<Type.TNever>;
+                argPath: Type.TOptional<Type.TNever>;
+            }>]>>;
+            access: Type.TOptional<Type.TUnion<[Type.TLiteral<"read-only">, Type.TLiteral<"read-write">]>>;
+            maxLifetime: Type.TOptional<Type.TUnion<Type.TObject<{
+                scope: Type.TLiteral<"external" | "phase" | "run">;
+            }>[]>>;
+            intent: Type.TUnion<[Type.TLiteral<"existing-file">, Type.TLiteral<"existing-directory">, Type.TLiteral<"create-file">, Type.TLiteral<"create-directory">, Type.TLiteral<"executable">]>;
+            workspace: Type.TString;
+            handle: Type.TOptional<Type.TNever>;
+        }>, Type.TObject<{
+            subpath: Type.TOptional<Type.TUnion<[Type.TObject<{
+                literalPath: Type.TString;
+                argPath: Type.TOptional<Type.TNever>;
+                segments: Type.TOptional<Type.TNever>;
+            }>, Type.TObject<{
+                argPath: Type.TString;
+                literalPath: Type.TOptional<Type.TNever>;
+                segments: Type.TOptional<Type.TNever>;
+            }>, Type.TObject<{
+                segments: Type.TArray<Type.TUnion<[Type.TObject<{
+                    segment: Type.TString;
+                    argSegment: Type.TOptional<Type.TNever>;
+                }>, Type.TObject<{
+                    argSegment: Type.TString;
+                    segment: Type.TOptional<Type.TNever>;
+                }>]>>;
+                literalPath: Type.TOptional<Type.TNever>;
+                argPath: Type.TOptional<Type.TNever>;
+            }>]>>;
+            access: Type.TOptional<Type.TUnion<[Type.TLiteral<"read-only">, Type.TLiteral<"read-write">]>>;
+            maxLifetime: Type.TOptional<Type.TUnion<Type.TObject<{
+                scope: Type.TLiteral<"external" | "phase" | "run">;
+            }>[]>>;
+            intent: Type.TUnion<[Type.TLiteral<"existing-file">, Type.TLiteral<"existing-directory">, Type.TLiteral<"create-file">, Type.TLiteral<"create-directory">, Type.TLiteral<"executable">]>;
+            handle: Type.TObject<{
+                producerPhaseId: Type.TString;
+                exportName: Type.TString;
+            }>;
+            workspace: Type.TOptional<Type.TNever>;
+        }>]>;
+    }>>;
+    spawnTemplate: Type.TObject<{
+        allowedAgentClasses: Type.TArray<Type.TString>;
+        allowedProviderClasses: Type.TArray<Type.TString>;
+        maxToolCallsPerStep: Type.TInteger;
+        maxEffectsPerNode: Type.TInteger;
+        maxChildren: Type.TInteger;
+        maxDepth: Type.TInteger;
+        budgetShare: Type.TNumber;
+    }>;
+    savedFlowPins: Type.TArray<Type.TObject<{
+        flowId: Type.TString;
+        irHash: Type.TString;
+        boundPlanHash: Type.TString;
+    }>>;
+    grantRefs: Type.TArray<Type.TObject<{
+        grantId: Type.TString;
+        bindingId: Type.TOptional<Type.TString>;
+    }>>;
+    claims: Type.TArray<Type.TObject<{
+        name: Type.TString;
+        value: Type.TUnion<[Type.TString, Type.TBoolean, Type.TNumber]>;
+    }>>;
+    enforcementCapabilities: Type.TObject<{
+        resolution: import("typebox").TUnsafe<string>;
+        mutationMediation: import("typebox").TUnsafe<string>;
+        processIsolation: import("typebox").TUnsafe<string>;
+        revocation: Type.TUnion<[Type.TLiteral<"admission-only">, Type.TLiteral<"per-mutation">, Type.TObject<{
+            mode: Type.TLiteral<"bounded-latency">;
+            maxLatencyMs: Type.TInteger;
+        }>]>;
+        baselinePolicyId: Type.TString;
+        hostProbeSha256: Type.TString;
+    }>;
+    dynamicPolicy: Type.TObject<{
+        hostCeiling: Type.TObject<{
+            maxActiveRuns: Type.TOptional<Type.TInteger>;
+            maxTokens: Type.TOptional<Type.TInteger>;
+            maxUSD: Type.TOptional<Type.TNumber>;
+        }>;
+        userCeiling: Type.TOptional<Type.TObject<{
+            maxActiveRuns: Type.TOptional<Type.TInteger>;
+            maxTokens: Type.TOptional<Type.TInteger>;
+            maxUSD: Type.TOptional<Type.TNumber>;
+        }>>;
+        projectCeiling: Type.TOptional<Type.TObject<{
+            maxActiveRuns: Type.TOptional<Type.TInteger>;
+            maxTokens: Type.TOptional<Type.TInteger>;
+            maxUSD: Type.TOptional<Type.TNumber>;
+        }>>;
+        invocationCeiling: Type.TOptional<Type.TObject<{
+            maxActiveRuns: Type.TOptional<Type.TInteger>;
+            maxTokens: Type.TOptional<Type.TInteger>;
+            maxUSD: Type.TOptional<Type.TNumber>;
+        }>>;
+        authorizationContextHash: Type.TString;
+    }>;
+    boundPlanHash: Type.TString;
+}>;
+export type BoundPlan = {
+    schemaVersion: typeof CONTROL_WIRE_SCHEMA_VERSION;
+    projectId: string;
+    controlDomainId: string;
+    planId: string;
+    bindings: PlanBinding[];
+    spawnTemplate: SpawnTemplate;
+    savedFlowPins: SavedFlowPin[];
+    grantRefs: GrantRef[];
+    claims: Claim[];
+    enforcementCapabilities: EnforcementCapabilities;
+    dynamicPolicy: PolicyBundle;
+    boundPlanHash: string;
+};
+export declare const BoundFragmentSchema: Type.TObject<{
+    schemaVersion: Type.TLiteral<2>;
+    projectId: Type.TString;
+    controlDomainId: Type.TString;
+    fragmentId: Type.TString;
+    parentBoundPlanHash: Type.TString;
+    parentBoundFragmentHash: Type.TOptional<Type.TString>;
+    sourceEventId: Type.TString;
+    sourceCommitSeq: Type.TInteger;
+    fragmentIRHash: Type.TString;
+    fragmentPolicyHash: Type.TString;
+    capabilitySetHash: Type.TString;
+    authorityEpoch: Type.TInteger;
+    boundFragmentHash: Type.TString;
+    executionSemanticHash: Type.TString;
+}>;
+export type BoundFragment = {
+    schemaVersion: typeof CONTROL_WIRE_SCHEMA_VERSION;
+    projectId: string;
+    controlDomainId: string;
+    fragmentId: string;
+    parentBoundPlanHash: string;
+    parentBoundFragmentHash?: string;
+    sourceEventId: string;
+    sourceCommitSeq: number;
+    fragmentIRHash: string;
+    fragmentPolicyHash: string;
+    capabilitySetHash: string;
+    authorityEpoch: number;
+    boundFragmentHash: string;
+    executionSemanticHash: string;
+};
+//# sourceMappingURL=plan.d.ts.map

package/dist/control/schema/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/plan.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAsC,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAiC,KAAK,uBAAuB,EAAsB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAMjI,eAAO,MAAM,mBAAmB;;;;;;;;EAW/B,CAAC;AACF,MAAM,MAAM,aAAa,GAAG;IAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACpB,CAAC;AAMF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AACF,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE1D,eAAO,MAAM,kBAAkB;;;;EAO9B,CAAC;AACF,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,eAAO,MAAM,cAAc;;;EAM1B,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,eAAO,MAAM,WAAW;;;EAMvB,CAAC;AACF,MAAM,MAAM,KAAK,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;CAAE,CAAC;AAMvE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB3B,CAAC;AACF,MAAM,MAAM,SAAS,GAAG;IACvB,aAAa,EAAE,OAAO,2BAA2B,CAAC;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,aAAa,EAAE,YAAY,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;CACtB,CAAC;AAMF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAkB/B,CAAC;AACF,MAAM,MAAM,aAAa,GAAG;IAC3B,aAAa,EAAE,OAAO,2BAA2B,CAAC;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;CAC9B,CAAC"}

package/dist/control/schema/plan.js

@@ -0,0 +1,80 @@
+/**
+ * BoundPlan / BoundFragment / SpawnTemplate wire types (🟥 NEW).
+ *
+ * Decisions: P1/P7 (immutable BoundPlan template, evidence-not-bearer), P7
+ * (BoundFragment dual hashes + parent chain + authorityEpoch), P8
+ * (enforcementCapabilities required — no holes), P6 (single hash family).
+ */
+import { Type } from "typebox";
+import { CONTROL_WIRE_SCHEMA_VERSION, CanonicalHashRefSchema, UuidSchema } from "./common.js";
+import { PathRefSchema } from "./te-mirrors.js";
+import { EnforcementCapabilitiesSchema, PolicyBundleSchema } from "./policy.js";
+// ---------------------------------------------------------------------------
+// SpawnTemplate (P7 §7.4) — dynamic expansion ceilings
+// ---------------------------------------------------------------------------
+export const SpawnTemplateSchema = Type.Object({
+    allowedAgentClasses: Type.Array(Type.String({ minLength: 1 })),
+    allowedProviderClasses: Type.Array(Type.String({ minLength: 1 })),
+    maxToolCallsPerStep: Type.Integer({ minimum: 0 }),
+    maxEffectsPerNode: Type.Integer({ minimum: 0 }),
+    maxChildren: Type.Integer({ minimum: 1 }),
+    maxDepth: Type.Integer({ minimum: 1 }),
+    budgetShare: Type.Number({ minimum: 0, maximum: 1 }),
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// Plan bindings / saved-flow pins / grants / claims
+// ---------------------------------------------------------------------------
+export const PlanBindingSchema = Type.Object({
+    name: Type.String({ minLength: 1 }),
+    path: PathRefSchema,
+}, { additionalProperties: false });
+export const SavedFlowPinSchema = Type.Object({
+    flowId: Type.String({ minLength: 1 }),
+    irHash: CanonicalHashRefSchema,
+    boundPlanHash: CanonicalHashRefSchema,
+}, { additionalProperties: false });
+export const GrantRefSchema = Type.Object({
+    grantId: Type.String({ minLength: 1 }),
+    bindingId: Type.Optional(Type.String({ minLength: 1 })),
+}, { additionalProperties: false });
+export const ClaimSchema = Type.Object({
+    name: Type.String({ minLength: 1 }),
+    value: Type.Union([Type.String(), Type.Boolean(), Type.Number()]),
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// BoundPlan (P1/P7/P8) — immutable template; evidence-not-bearer
+// ---------------------------------------------------------------------------
+export const BoundPlanSchema = Type.Object({
+    schemaVersion: Type.Literal(CONTROL_WIRE_SCHEMA_VERSION),
+    projectId: UuidSchema,
+    controlDomainId: UuidSchema,
+    planId: UuidSchema,
+    bindings: Type.Array(PlanBindingSchema),
+    spawnTemplate: SpawnTemplateSchema,
+    savedFlowPins: Type.Array(SavedFlowPinSchema),
+    grantRefs: Type.Array(GrantRefSchema),
+    claims: Type.Array(ClaimSchema),
+    enforcementCapabilities: EnforcementCapabilitiesSchema,
+    dynamicPolicy: PolicyBundleSchema,
+    boundPlanHash: CanonicalHashRefSchema,
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// BoundFragment (P7 §7.2) — dynamic IR product under attenuated authority
+// ---------------------------------------------------------------------------
+export const BoundFragmentSchema = Type.Object({
+    schemaVersion: Type.Literal(CONTROL_WIRE_SCHEMA_VERSION),
+    projectId: UuidSchema,
+    controlDomainId: UuidSchema,
+    fragmentId: UuidSchema,
+    parentBoundPlanHash: CanonicalHashRefSchema,
+    parentBoundFragmentHash: Type.Optional(CanonicalHashRefSchema),
+    sourceEventId: UuidSchema,
+    sourceCommitSeq: Type.Integer({ minimum: 1 }),
+    fragmentIRHash: CanonicalHashRefSchema,
+    fragmentPolicyHash: CanonicalHashRefSchema,
+    capabilitySetHash: CanonicalHashRefSchema,
+    authorityEpoch: Type.Integer({ minimum: 0 }),
+    boundFragmentHash: CanonicalHashRefSchema,
+    executionSemanticHash: CanonicalHashRefSchema,
+}, { additionalProperties: false });
+//# sourceMappingURL=plan.js.map

package/dist/control/schema/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/plan.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAgB,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAgC,kBAAkB,EAAqB,MAAM,aAAa,CAAC;AAEjI,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAC7C;IACC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9D,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjD,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC/C,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACzC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;CACpD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAWF,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAC3C;IACC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACnC,IAAI,EAAE,aAAa;CACnB,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAGF,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAC5C;IACC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrC,MAAM,EAAE,sBAAsB;IAC9B,aAAa,EAAE,sBAAsB;CACrC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAGF,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CACxC;IACC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;CACvD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAGF,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CACrC;IACC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;CACjE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAGF,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CACzC;IACC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC;IACxD,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,UAAU;IAC3B,MAAM,EAAE,UAAU;IAClB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACvC,aAAa,EAAE,mBAAmB;IAClC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC7C,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;IACrC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;IAC/B,uBAAuB,EAAE,6BAA6B;IACtD,aAAa,EAAE,kBAAkB;IACjC,aAAa,EAAE,sBAAsB;CACrC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAgBF,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAC7C;IACC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC;IACxD,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,UAAU;IAC3B,UAAU,EAAE,UAAU;IACtB,mBAAmB,EAAE,sBAAsB;IAC3C,uBAAuB,EAAE,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC9D,aAAa,EAAE,UAAU;IACzB,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC7C,cAAc,EAAE,sBAAsB;IACtC,kBAAkB,EAAE,sBAAsB;IAC1C,iBAAiB,EAAE,sBAAsB;IACzC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC5C,iBAAiB,EAAE,sBAAsB;IACzC,qBAAqB,EAAE,sBAAsB;CAC7C,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC"}