taskflow-mcp-core 0.3.0-beta.1.1 → 1.0.0

package/dist/control/store/journal.d.ts

@@ -0,0 +1,270 @@
+import { Type } from "typebox";
+import type { CommandRecord, ControlEvent, Receipt, ArtifactRef, BuildInfoWire, ReceiptAssurance } from "../schema/index.ts";
+import type { ApprovalJournalState } from "../approval-service.ts";
+export declare const ApprovalOutboxSchema: Type.TUnion<[Type.TObject<{
+    kind: Type.TLiteral<"approval.release">;
+    intentId: Type.TString;
+    approvalRequestId: Type.TString;
+    runId: Type.TString;
+    reservationId: Type.TString;
+    evidence: Type.TObject<{
+        proofId: Type.TString;
+        projectId: Type.TString;
+        projectControlDomainId: Type.TString;
+        runId: Type.TString;
+        projectAdmitCommitSeq: Type.TInteger;
+        providerNoLiveProcessTree: Type.TBoolean;
+        noAmbiguousJobs: Type.TBoolean;
+        noPendingResourceIntents: Type.TBoolean;
+        reconcileTimeoutOnly: Type.TBoolean;
+    }>;
+    complete: Type.TBoolean;
+}>, Type.TObject<{
+    kind: Type.TLiteral<"approval.readmission">;
+    intentId: Type.TString;
+    approvalRequestId: Type.TString;
+    runId: Type.TString;
+    reservation: Type.TObject<{
+        reservationId: Type.TString;
+        state: import("typebox").TUnsafe<string>;
+        slots: Type.TLiteral<1>;
+        projectId: Type.TString;
+        projectControlDomainId: Type.TString;
+        runId: Type.TString;
+        projectAdmitCommitSeq: Type.TOptional<Type.TInteger>;
+        attemptId: Type.TOptional<Type.TString>;
+        providerJobHandle: Type.TOptional<Type.TString>;
+        coordinatorEpoch: Type.TInteger;
+        reservedExpiresAt: Type.TOptional<Type.TInteger>;
+        renewedAt: Type.TOptional<Type.TInteger>;
+    }>;
+    owner: Type.TObject<{
+        runId: Type.TString;
+        phaseId: Type.TString;
+        attemptId: Type.TString;
+        unitId: Type.TString;
+        ancestry: Type.TArray<Type.TString>;
+    }>;
+    fragment: Type.TObject<{
+        schemaVersion: Type.TLiteral<2>;
+        projectId: Type.TString;
+        controlDomainId: Type.TString;
+        fragmentId: Type.TString;
+        parentBoundPlanHash: Type.TString;
+        parentBoundFragmentHash: Type.TOptional<Type.TString>;
+        sourceEventId: Type.TString;
+        sourceCommitSeq: Type.TInteger;
+        fragmentIRHash: Type.TString;
+        fragmentPolicyHash: Type.TString;
+        capabilitySetHash: Type.TString;
+        authorityEpoch: Type.TInteger;
+        boundFragmentHash: Type.TString;
+        executionSemanticHash: Type.TString;
+    }>;
+    policyHash: Type.TString;
+    authorizationContextHash: Type.TString;
+    projectAdmitCommitSeq: Type.TInteger;
+    complete: Type.TBoolean;
+}>]>;
+export declare const ProjectStateSchema: Type.TObject<{
+    run: Type.TObject<{
+        runId: Type.TString;
+        projectId: Type.TString;
+        controlDomainId: Type.TString;
+        status: import("typebox").TUnsafe<string>;
+        stage: import("typebox").TUnsafe<string>;
+        slot: import("typebox").TUnsafe<string>;
+        needsOperator: Type.TBoolean;
+        runVersion: Type.TInteger;
+        boundFragmentHash: Type.TOptional<Type.TString>;
+        reservationId: Type.TOptional<Type.TString>;
+        owner: Type.TOptional<Type.TObject<{
+            runId: Type.TString;
+            phaseId: Type.TString;
+            attemptId: Type.TString;
+            unitId: Type.TString;
+            ancestry: Type.TArray<Type.TString>;
+        }>>;
+        requiresReadmission: Type.TOptional<Type.TBoolean>;
+        projectAdmitCommitSeq: Type.TOptional<Type.TInteger>;
+        boundPlanHash: Type.TString;
+        policyHash: Type.TString;
+        authorityEpoch: Type.TInteger;
+    }>;
+    approvals: Type.TArray<Type.TObject<{
+        approvalRequestId: Type.TString;
+        runId: Type.TString;
+        nodeInstanceId: Type.TString;
+        boundPlanHash: Type.TOptional<Type.TString>;
+        boundFragmentHash: Type.TOptional<Type.TString>;
+        expectedRunVersion: Type.TInteger;
+        allowedDecisions: Type.TArray<import("typebox").TUnsafe<string>>;
+        owner: Type.TString;
+        audience: Type.TOptional<Type.TArray<Type.TString>>;
+        requiredPrincipals: Type.TOptional<Type.TArray<Type.TString>>;
+        deadline: Type.TInteger;
+        timeoutPolicy: import("typebox").TUnsafe<string>;
+        status: import("typebox").TUnsafe<string>;
+        createdAt: Type.TInteger;
+        decidedAt: Type.TOptional<Type.TInteger>;
+        decisionCommandId: Type.TOptional<Type.TString>;
+        decisionEventId: Type.TOptional<Type.TString>;
+        decisionCommitSeq: Type.TOptional<Type.TInteger>;
+        editArtifactRef: Type.TOptional<Type.TObject<{
+            digest: Type.TString;
+            size: Type.TInteger;
+            mediaType: Type.TString;
+            storageClass: Type.TString;
+            redactionClass: Type.TString;
+        }>>;
+        editKind: Type.TOptional<import("typebox").TUnsafe<string>>;
+    }>>;
+    outbox: Type.TArray<Type.TUnion<[Type.TObject<{
+        kind: Type.TLiteral<"approval.release">;
+        intentId: Type.TString;
+        approvalRequestId: Type.TString;
+        runId: Type.TString;
+        reservationId: Type.TString;
+        evidence: Type.TObject<{
+            proofId: Type.TString;
+            projectId: Type.TString;
+            projectControlDomainId: Type.TString;
+            runId: Type.TString;
+            projectAdmitCommitSeq: Type.TInteger;
+            providerNoLiveProcessTree: Type.TBoolean;
+            noAmbiguousJobs: Type.TBoolean;
+            noPendingResourceIntents: Type.TBoolean;
+            reconcileTimeoutOnly: Type.TBoolean;
+        }>;
+        complete: Type.TBoolean;
+    }>, Type.TObject<{
+        kind: Type.TLiteral<"approval.readmission">;
+        intentId: Type.TString;
+        approvalRequestId: Type.TString;
+        runId: Type.TString;
+        reservation: Type.TObject<{
+            reservationId: Type.TString;
+            state: import("typebox").TUnsafe<string>;
+            slots: Type.TLiteral<1>;
+            projectId: Type.TString;
+            projectControlDomainId: Type.TString;
+            runId: Type.TString;
+            projectAdmitCommitSeq: Type.TOptional<Type.TInteger>;
+            attemptId: Type.TOptional<Type.TString>;
+            providerJobHandle: Type.TOptional<Type.TString>;
+            coordinatorEpoch: Type.TInteger;
+            reservedExpiresAt: Type.TOptional<Type.TInteger>;
+            renewedAt: Type.TOptional<Type.TInteger>;
+        }>;
+        owner: Type.TObject<{
+            runId: Type.TString;
+            phaseId: Type.TString;
+            attemptId: Type.TString;
+            unitId: Type.TString;
+            ancestry: Type.TArray<Type.TString>;
+        }>;
+        fragment: Type.TObject<{
+            schemaVersion: Type.TLiteral<2>;
+            projectId: Type.TString;
+            controlDomainId: Type.TString;
+            fragmentId: Type.TString;
+            parentBoundPlanHash: Type.TString;
+            parentBoundFragmentHash: Type.TOptional<Type.TString>;
+            sourceEventId: Type.TString;
+            sourceCommitSeq: Type.TInteger;
+            fragmentIRHash: Type.TString;
+            fragmentPolicyHash: Type.TString;
+            capabilitySetHash: Type.TString;
+            authorityEpoch: Type.TInteger;
+            boundFragmentHash: Type.TString;
+            executionSemanticHash: Type.TString;
+        }>;
+        policyHash: Type.TString;
+        authorizationContextHash: Type.TString;
+        projectAdmitCommitSeq: Type.TInteger;
+        complete: Type.TBoolean;
+    }>]>>;
+}>;
+export declare const AdmissionDecisionSchema: Type.TObject<{
+    reservationId: Type.TString;
+    projectId: Type.TString;
+    projectControlDomainId: Type.TString;
+    runId: Type.TString;
+    status: Type.TUnion<[Type.TLiteral<"admitted">, Type.TLiteral<"abandoned">]>;
+    decisionCommitSeq: Type.TInteger;
+    runVersion: Type.TInteger;
+}>;
+export declare const EvidenceMetadataSchema: Type.TObject<{
+    runId: Type.TString;
+    buildInfo: Type.TObject<{
+        packageVersion: Type.TString;
+        gitCommit: Type.TString;
+        schemaVersion: Type.TInteger;
+        buildTime: Type.TOptional<Type.TInteger>;
+    }>;
+    assurance: Type.TObject<{
+        journalContinuity: Type.TBoolean;
+        providerOutcome: import("typebox").TUnsafe<string>;
+        artifactIntegrity: import("typebox").TUnsafe<string>;
+        provenance: Type.TObject<{
+            confidentiality: import("typebox").TUnsafe<string>;
+            integrity: import("typebox").TUnsafe<string>;
+        }>;
+        enforcement: Type.TObject<{
+            capabilities: Type.TObject<{
+                resolution: import("typebox").TUnsafe<string>;
+                mutationMediation: import("typebox").TUnsafe<string>;
+                processIsolation: import("typebox").TUnsafe<string>;
+                revocation: Type.TUnion<[Type.TLiteral<"admission-only">, Type.TLiteral<"per-mutation">, Type.TObject<{
+                    mode: Type.TLiteral<"bounded-latency">;
+                    maxLatencyMs: Type.TInteger;
+                }>]>;
+                baselinePolicyId: Type.TString;
+                hostProbeSha256: Type.TString;
+            }>;
+            observedRevocationLatencyMs: Type.TOptional<Type.TInteger>;
+        }>;
+    }>;
+}>;
+export interface AdmissionBinding {
+    reservationId: string;
+    projectId: string;
+    projectControlDomainId: string;
+    runId: string;
+}
+export interface AdmissionDecision extends AdmissionBinding {
+    status: "admitted" | "abandoned";
+    decisionCommitSeq: number;
+    runVersion: number;
+}
+export type LegacyJournalBatch = {
+    recordKind: "commit-batch";
+    commitSeq: number;
+    command: CommandRecord;
+    events: ControlEvent[];
+};
+export type LifecycleBatch = {
+    recordKind: "lifecycle-batch";
+    schemaVersion: 2;
+    commitSeq: number;
+    previousHash: string;
+    contentHash: string;
+    command?: CommandRecord;
+    events: ControlEvent[];
+    projection?: ApprovalJournalState;
+    receipt?: Receipt;
+    responseJson?: string;
+    admission?: AdmissionDecision;
+    receiptRef?: ArtifactRef;
+    manifestProofRef?: ArtifactRef;
+    evidenceMetadata?: {
+        runId: string;
+        buildInfo: BuildInfoWire;
+        assurance: ReceiptAssurance;
+    };
+};
+export type JournalBatch = LegacyJournalBatch | LifecycleBatch;
+export declare const JOURNAL_GENESIS: string;
+export declare function journalHash(record: Omit<LifecycleBatch, "contentHash"> | LegacyJournalBatch): string;
+export declare function validJournalBatch(value: unknown): value is JournalBatch;
+//# sourceMappingURL=journal.d.ts.map

package/dist/control/store/journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/store/journal.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC7H,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAQnE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAM/B,CAAC;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGpB,CAAC;AAKZ,eAAO,MAAM,uBAAuB;;;;;;;;EAGzB,CAAC;AACZ,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAyG,CAAC;AAM7I,MAAM,WAAW,gBAAgB;IAAG,aAAa,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC7H,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IAAG,MAAM,EAAE,UAAU,GAAG,WAAW,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAC/I,MAAM,MAAM,kBAAkB,GAAG;IAAE,UAAU,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,YAAY,EAAE,CAAA;CAAE,CAAC;AACnI,MAAM,MAAM,cAAc,GAAG;IAC5B,UAAU,EAAE,iBAAiB,CAAC;IAAC,aAAa,EAAE,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAC9G,OAAO,CAAC,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,YAAY,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAAC,UAAU,CAAC,EAAE,WAAW,CAAC;IAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAAC,gBAAgB,CAAC,EAAE;QAAC,KAAK,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,aAAa,CAAC;QAAA,SAAS,EAAC,gBAAgB,CAAA;KAAC,CAAC;CAC5S,CAAC;AACF,MAAM,MAAM,YAAY,GAAG,kBAAkB,GAAG,cAAc,CAAC;AAC/D,eAAO,MAAM,eAAe,QAAiB,CAAC;AAC9C,wBAAgB,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,GAAG,kBAAkB,GAAG,MAAM,CAEpG;AACD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAKvE"}

package/dist/control/store/journal.js

@@ -0,0 +1,50 @@
+/** Versioned project journal. V1 bytes remain immutable; V2 chains every batch. */
+import { createHash } from "node:crypto";
+import { canonicalJson } from "taskflow-core/flowir/hash";
+import { Type } from "typebox";
+import { Value } from "typebox/value";
+import { ApprovalRequestSchema, CommandRecordSchema, ControlEventSchema, RunSnapshotSchema, ReceiptSchema, UuidSchema, Sha256HexSchema, ConcurrencyReservationSchema, BoundFragmentSchema, ExecutionOwnerSchema, ArtifactRefSchema, BuildInfoWireSchema, ReceiptAssuranceSchema } from "../schema/index.js";
+const options = { additionalProperties: false };
+const QuiescenceSchema = Type.Object({
+    proofId: Type.String({ minLength: 1 }), projectId: UuidSchema, projectControlDomainId: UuidSchema, runId: UuidSchema,
+    projectAdmitCommitSeq: Type.Integer({ minimum: 1 }), providerNoLiveProcessTree: Type.Boolean(),
+    noAmbiguousJobs: Type.Boolean(), noPendingResourceIntents: Type.Boolean(), reconcileTimeoutOnly: Type.Boolean(),
+}, options);
+export const ApprovalOutboxSchema = Type.Union([
+    Type.Object({ kind: Type.Literal("approval.release"), intentId: UuidSchema, approvalRequestId: UuidSchema, runId: UuidSchema,
+        reservationId: UuidSchema, evidence: QuiescenceSchema, complete: Type.Boolean() }, options),
+    Type.Object({ kind: Type.Literal("approval.readmission"), intentId: UuidSchema, approvalRequestId: UuidSchema, runId: UuidSchema,
+        reservation: ConcurrencyReservationSchema, owner: ExecutionOwnerSchema, fragment: BoundFragmentSchema,
+        policyHash: Sha256HexSchema, authorizationContextHash: Sha256HexSchema, projectAdmitCommitSeq: Type.Integer({ minimum: 1 }), complete: Type.Boolean() }, options),
+]);
+export const ProjectStateSchema = Type.Object({
+    run: Type.Object({ ...RunSnapshotSchema.properties, boundPlanHash: Type.String({ minLength: 1 }), policyHash: Sha256HexSchema, authorityEpoch: Type.Integer({ minimum: 0 }) }, options),
+    approvals: Type.Array(ApprovalRequestSchema), outbox: Type.Array(ApprovalOutboxSchema),
+}, options);
+const LegacyBatchSchema = Type.Object({
+    recordKind: Type.Literal("commit-batch"), commitSeq: Type.Integer({ minimum: 1 }), command: CommandRecordSchema,
+    events: Type.Array(ControlEventSchema, { minItems: 1 }),
+}, options);
+export const AdmissionDecisionSchema = Type.Object({
+    reservationId: UuidSchema, projectId: UuidSchema, projectControlDomainId: UuidSchema, runId: UuidSchema,
+    status: Type.Union([Type.Literal("admitted"), Type.Literal("abandoned")]), decisionCommitSeq: Type.Integer({ minimum: 1 }), runVersion: Type.Integer({ minimum: 0 }),
+}, options);
+export const EvidenceMetadataSchema = Type.Object({ runId: UuidSchema, buildInfo: BuildInfoWireSchema, assurance: ReceiptAssuranceSchema }, options);
+const BatchSchema = Type.Object({
+    recordKind: Type.Literal("lifecycle-batch"), schemaVersion: Type.Literal(2), commitSeq: Type.Integer({ minimum: 1 }),
+    previousHash: Sha256HexSchema, contentHash: Sha256HexSchema, command: Type.Optional(CommandRecordSchema),
+    events: Type.Array(ControlEventSchema, { minItems: 1 }), projection: Type.Optional(ProjectStateSchema), receipt: Type.Optional(ReceiptSchema), responseJson: Type.Optional(Type.String()), admission: Type.Optional(AdmissionDecisionSchema), receiptRef: Type.Optional(ArtifactRefSchema), manifestProofRef: Type.Optional(ArtifactRefSchema), evidenceMetadata: Type.Optional(EvidenceMetadataSchema),
+}, options);
+export const JOURNAL_GENESIS = "0".repeat(64);
+export function journalHash(record) {
+    return createHash("sha256").update(canonicalJson(record)).digest("hex");
+}
+export function validJournalBatch(value) {
+    if (Value.Check(LegacyBatchSchema, value))
+        return true;
+    if (!Value.Check(BatchSchema, value) || value.events.some((event) => event.schemaVersion !== 2))
+        return false;
+    const { contentHash, ...body } = value;
+    return contentHash === journalHash(body);
+}
+//# sourceMappingURL=journal.js.map

package/dist/control/store/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../../taskflow-control/src/store/journal.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAI5S,MAAM,OAAO,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;AAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,sBAAsB,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU;IACpH,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,yBAAyB,EAAE,IAAI,CAAC,OAAO,EAAE;IAC9F,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,wBAAwB,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,oBAAoB,EAAE,IAAI,CAAC,OAAO,EAAE;CAC/G,EAAE,OAAO,CAAC,CAAC;AACZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU;QAC3H,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC;IAC5F,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU;QAC/H,WAAW,EAAE,4BAA4B,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB;QACrG,UAAU,EAAE,eAAe,EAAE,wBAAwB,EAAE,eAAe,EAAE,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC;CAClK,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,iBAAiB,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC;IACvL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;CACtF,EAAE,OAAO,CAAC,CAAC;AACZ,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC;IACrC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB;IAC/G,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;CACvD,EAAE,OAAO,CAAC,CAAC;AACZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,sBAAsB,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU;IACvG,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,CAAC;CAC9J,EAAE,OAAO,CAAC,CAAC;AACZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,UAAU,EAAC,SAAS,EAAC,mBAAmB,EAAC,SAAS,EAAC,sBAAsB,EAAC,EAAC,OAAO,CAAC,CAAC;AAC7I,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACpH,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACxG,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CACvY,EAAE,OAAO,CAAC,CAAC;AASZ,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC9C,MAAM,UAAU,WAAW,CAAC,MAAgE;IAC3F,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC/C,IAAI,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9G,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACvC,OAAO,WAAW,KAAK,WAAW,CAAC,IAA2C,CAAC,CAAC;AACjF,CAAC"}

package/dist/control/store/project-lifecycle.d.ts

@@ -0,0 +1,49 @@
+import { type ControlStoreHeader } from "../schema/header.ts";
+import { type Receipt } from "../schema/evidence.ts";
+import { type JournalBatch } from "./journal.ts";
+export type ProjectLifecycleOperation = "move-rebind" | "clone" | "adopt" | "export";
+export interface ProjectLifecycleAuthority<C> {
+    /** Implement using a verified operator context and CURRENT project policy.
+     * Path arguments are trusted launcher/operator configuration, not wire body. */
+    authorize(context: C, scope: {
+        operation: ProjectLifecycleOperation;
+        header: ControlStoreHeader;
+        destination?: string;
+    }): Promise<{
+        principal: string;
+        operator: boolean;
+    }> | {
+        principal: string;
+        operator: boolean;
+    };
+}
+export interface ForensicFile {
+    path: string;
+    sha256: string;
+    size: number;
+    bytesBase64?: string;
+}
+export interface ProjectForensicExport {
+    exportKind: "readonly" | "lossy";
+    executePromise: false;
+    header: ControlStoreHeader;
+    sourcePath: string;
+    integrity: "verified" | "damaged";
+    verificationScope: "captured-bytes-and-journal-structure";
+    diagnostics: string[];
+    files: ForensicFile[];
+    journal: JournalBatch[];
+    receipts: Receipt[];
+}
+/** Performs no source writes and does not call recovery/openControlStore. Damaged
+ * bytes remain available in readonly export; lossy export explicitly omits raw
+ * bytes. A concurrent change fails rather than claiming a coherent snapshot. */
+export declare function exportProjectEvidence<C>(storePath: string, kind: "readonly" | "lossy", context: C, authority: ProjectLifecycleAuthority<C>): Promise<ProjectForensicExport>;
+/** Same inode/device is necessary; a copied directory cannot adopt an identity
+ * using a caller's claim that the original is gone. Explicit adoption is only
+ * accepted for the same proven moved store until a stronger global fence exists. */
+export declare function rebindMovedProject<C>(storePath: string, context: C, authority: ProjectLifecycleAuthority<C>, operation?: "move-rebind" | "adopt"): Promise<ControlStoreHeader>;
+/** Copies no authoritative history. A copied ledger stays untouched as evidence;
+ * destination must be a separate empty path and receives two fresh UUIDs. */
+export declare function createProjectClone<C>(sourcePath: string, destinationPath: string, context: C, authority: ProjectLifecycleAuthority<C>): Promise<ControlStoreHeader>;
+//# sourceMappingURL=project-lifecycle.d.ts.map

package/dist/control/store/project-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-lifecycle.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/store/project-lifecycle.ts"],"names":[],"mappings":"AAOA,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAmD,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAGlG,MAAM,MAAM,yBAAyB,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AACrF,MAAM,WAAW,yBAAyB,CAAC,CAAC;IAC3C;oFACgF;IAChF,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE;QAAE,SAAS,EAAE,yBAAyB,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CACvN;AACD,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAClG,MAAM,WAAW,qBAAqB;IACrC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC;IAAC,cAAc,EAAE,KAAK,CAAC;IACxD,MAAM,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,UAAU,GAAG,SAAS,CAAC;IAClF,iBAAiB,EAAE,sCAAsC,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,OAAO,EAAE,YAAY,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;CACtJ;AAsGD;;gFAEgF;AAChF,wBAAsB,qBAAqB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CASjL;AAED;;oFAEoF;AACpF,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC,CAAC,EAAE,SAAS,GAAE,aAAa,GAAG,OAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuBnM;AAED;6EAC6E;AAC7E,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAWzK"}