tracegrove 0.0.0-stage → 0.3.0

package/dist/core/environmentPreflight.js

@@ -0,0 +1,179 @@
+/** Read-only, experimental preflight. A ready report is never an execution/authorization token. */
+import { PortableEnvironmentIntent, PortableEnvironmentProfile, PortableProbeObservation, PortablePreflightReport, digestOfValue, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+const recovery = {
+    capability: 'install_or_select_capability', workspace: 'select_workspace_or_build', startup: 'select_launch_adapter', deployment: 'verify_deployment_access',
+    endpoint: 'resolve_endpoint', readiness: 'verify_readiness', persona_credential: 'configure_existing_secret_reference', execution_credential: 'configure_existing_secret_reference',
+    authorization: 'request_owner_authorization', configuration: 'select_safe_configuration', network: 'select_enforceable_network_policy', data: 'select_owned_synthetic_fixture',
+    cleanup: 'reconcile_owned_cleanup', artifacts: 'select_exportable_artifact_destination', limits: 'lower_or_enforce_limits', replay: 'select_supported_replay_mode',
+};
+export function portableProbeRequests(profile, intent) {
+    const requests = [
+        { kind: 'authorization', policyRef: profile.executionPolicyRef, actorRef: intent.actorRef },
+        { kind: 'artifacts', artifacts: profile.artifacts }, { kind: 'limits', limits: profile.limits },
+        { kind: 'replay', mode: intent.replayMode, planRef: intent.replayPlanRef },
+    ];
+    // Playback reads saved evidence, never asks for live application credentials or startup access.
+    if (intent.replayMode === 'evidence_playback')
+        return requests;
+    requests.push({ kind: 'configuration', configurationRef: profile.configurationRef }, { kind: 'network', network: profile.network });
+    if (profile.target.mode === 'alongside_runner') {
+        requests.push({ kind: 'workspace', workspaceRef: profile.target.workspaceRef, sourceSelectionRef: profile.sourceSelectionRef, buildRef: profile.buildRef }, { kind: 'startup', hostPlanRef: profile.target.hostPlanRef, launchRecipeRef: profile.target.launchRecipeRef, dependencyPlanRefs: profile.dependencyPlanRefs });
+    }
+    else
+        requests.push({ kind: 'deployment', deploymentRef: profile.target.deploymentRef, sourceSelectionRef: profile.sourceSelectionRef, buildRef: profile.buildRef });
+    requests.push(...profile.capabilities.map(requirement => ({ kind: 'capability', requirement })), ...profile.endpoints.map(endpoint => ({ kind: 'endpoint', endpoint })), { kind: 'readiness', readiness: profile.readiness }, ...profile.personaCredentials.map(c => ({ kind: 'persona_credential', ...c })), ...profile.executionSecretRefs.map(secretRef => ({ kind: 'execution_credential', secretRef })), { kind: 'data', data: profile.data }, { kind: 'cleanup', ownership: profile.ownership });
+    return requests;
+}
+/** Host ports must check actual enforceability, not merely whether a configuration declares a policy. */
+export async function preflightPortableEnvironment(intentValue, ports, options = {}) {
+    const parsed = PortableEnvironmentIntent.safeParse(intentValue);
+    const report = { schemaVersion: 'workflow.portable-preflight/v1', profileRef: null, binding: null, actorRef: null,
+        status: 'blocked', exitCode: 2, checks: [], errors: [], execution: 'not_started', verificationVerdict: 'not_evaluated' };
+    if (!parsed.success) {
+        report.errors.push('invalid_environment_intent');
+        return report;
+    }
+    const intent = parsed.data;
+    report.profileRef = structuredClone(intent.profileRef);
+    report.binding = structuredClone(intent.binding);
+    report.actorRef = structuredClone(intent.actorRef);
+    const controller = new AbortController();
+    const timeoutMs = options.timeoutMs ?? 5000;
+    if (!Number.isInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 30000) {
+        report.errors.push('preflight_deadline');
+        return report;
+    }
+    let timedOut = false;
+    const deadlineAt = performance.now() + timeoutMs;
+    const timer = setTimeout(() => { timedOut = true; controller.abort(); }, timeoutMs);
+    const cancel = () => controller.abort();
+    options.signal?.addEventListener('abort', cancel, { once: true });
+    if (options.signal?.aborted)
+        controller.abort();
+    const interruptedNow = () => {
+        if (performance.now() >= deadlineAt) {
+            timedOut = true;
+            controller.abort();
+        }
+        return controller.signal.aborted;
+    };
+    const bounded = async (call) => {
+        if (interruptedNow())
+            return { kind: 'aborted' };
+        let abort;
+        const interrupted = new Promise(resolve => { abort = () => resolve({ kind: 'aborted' }); controller.signal.addEventListener('abort', abort, { once: true }); });
+        try {
+            const result = await Promise.race([interrupted, Promise.resolve().then(() => interruptedNow() ? undefined : call()).then(value => ({ kind: 'value', value }), () => ({ kind: 'failed' }))]);
+            return interruptedNow() ? { kind: 'aborted' } : result;
+        }
+        finally {
+            controller.signal.removeEventListener('abort', abort);
+        }
+    };
+    const interrupted = () => { report.errors.push(timedOut ? 'preflight_deadline' : 'preflight_cancelled'); };
+    try {
+        const resolved = await bounded(() => ports.resolveProfile(structuredClone(intent.profileRef), controller.signal));
+        if (resolved.kind === 'aborted') {
+            interrupted();
+            return report;
+        }
+        if (resolved.kind === 'failed') {
+            report.errors.push('profile_unavailable');
+            return report;
+        }
+        const profileResult = PortableEnvironmentProfile.safeParse(resolved.value);
+        if (!profileResult.success) {
+            report.errors.push('invalid_environment_profile');
+            return report;
+        }
+        const profile = profileResult.data;
+        if (!verifySelfDigest(profile) || !sameRef(profile.ref, intent.profileRef)) {
+            report.errors.push('profile_identity_mismatch');
+            return report;
+        }
+        if (!sameScope(profile.scope, intent.binding.scope)) {
+            report.errors.push('scope_mismatch');
+            return report;
+        }
+        if (profile.sourceSelectionRef && (!intent.binding.sourceSelectionRef || !sameRef(profile.sourceSelectionRef, intent.binding.sourceSelectionRef))) {
+            report.errors.push('source_binding_mismatch');
+            return report;
+        }
+        if (!profile.allowedReplayModes.includes(intent.replayMode)) {
+            report.errors.push('unsupported_replay_mode');
+            return report;
+        }
+        let validUntil = Infinity;
+        for (const request of portableProbeRequests(profile, intent)) {
+            if (interruptedNow()) {
+                interrupted();
+                return report;
+            }
+            if (Date.now() >= validUntil) {
+                report.errors.push('preflight_observations_expired');
+                return report;
+            }
+            const required = request.kind !== 'capability' || request.requirement.required;
+            const result = await bounded(() => ports.probe(structuredClone(request), structuredClone(intent), controller.signal));
+            if (result.kind === 'aborted') {
+                interrupted();
+                return report;
+            }
+            const probe = result.kind === 'value' ? PortableProbeObservation.safeParse(result.value) : null;
+            let state = 'temporarily_unavailable';
+            let code = 'probe_unavailable';
+            let evidenceRefs = [];
+            if (probe?.success) {
+                const observation = probe.data;
+                const now = Date.now();
+                if (!sameRef(observation.profileRef, intent.profileRef) || !sameRef(observation.actorRef, intent.actorRef) ||
+                    digestOfValue(observation.binding).hex !== digestOfValue(intent.binding).hex ||
+                    observation.requestDigest.hex !== digestOfValue(request).hex) {
+                    state = 'unknown';
+                    code = 'probe_binding_mismatch';
+                }
+                else if (Date.parse(observation.observedAt) > now || Date.parse(observation.expiresAt) <= now || Date.parse(observation.expiresAt) <= Date.parse(observation.observedAt)) {
+                    state = 'unknown';
+                    code = 'probe_expired_or_future';
+                }
+                else if (observation.state === 'supported' && !observation.evidenceRefs.length) {
+                    state = 'unknown';
+                    code = 'probe_evidence_missing';
+                }
+                else {
+                    state = observation.state;
+                    code = state === 'supported' ? 'observed_supported' : `${request.kind}_${state}`;
+                    evidenceRefs = observation.evidenceRefs;
+                    if (required && state === 'supported')
+                        validUntil = Math.min(validUntil, Date.parse(observation.expiresAt));
+                }
+            }
+            else if (result.kind === 'value') {
+                state = 'unknown';
+                code = 'invalid_probe_observation';
+            }
+            report.checks.push({ request, required, state, evidenceRefs: structuredClone(evidenceRefs), code, recovery: state === 'supported' ? 'none' : state === 'denied' ? 'request_owner_authorization' : recovery[request.kind] });
+            // Do not inspect credential or target metadata under a denied/unknown actor authorization.
+            if (request.kind === 'authorization' && state !== 'supported')
+                return report;
+        }
+        if (interruptedNow()) {
+            interrupted();
+            return report;
+        }
+        if (Date.now() >= validUntil) {
+            report.errors.push('preflight_observations_expired');
+            return report;
+        }
+        if (report.checks.every(check => !check.required || check.state === 'supported')) {
+            report.status = 'ready';
+            report.exitCode = 0;
+        }
+        return PortablePreflightReport.parse(report);
+    }
+    finally {
+        clearTimeout(timer);
+        options.signal?.removeEventListener('abort', cancel);
+    }
+}
+//# sourceMappingURL=environmentPreflight.js.map

package/dist/core/environmentPreflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environmentPreflight.js","sourceRoot":"","sources":["../../src/core/environmentPreflight.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,uBAAuB,EAC/G,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EACd,MAAM,sBAAsB,CAAC;AAQpE,MAAM,QAAQ,GAAgG;IAC5G,UAAU,EAAE,8BAA8B,EAAE,SAAS,EAAE,2BAA2B,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,0BAA0B;IAC5J,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,qCAAqC,EAAE,oBAAoB,EAAE,qCAAqC;IACnL,aAAa,EAAE,6BAA6B,EAAE,aAAa,EAAE,2BAA2B,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,gCAAgC;IAC9K,OAAO,EAAE,yBAAyB,EAAE,SAAS,EAAE,wCAAwC,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,8BAA8B;CACnK,CAAC;AACF,MAAM,UAAU,qBAAqB,CAAC,OAAmC,EAAE,MAAiC;IAC1G,MAAM,QAAQ,GAA2B;QACvC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,kBAAkB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;QAC3F,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;QAC/F,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE;KAC3E,CAAC;IACF,gGAAgG;IAChG,IAAI,MAAM,CAAC,UAAU,KAAK,mBAAmB;QAAE,OAAO,QAAQ,CAAC;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACpI,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EACxJ,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACnK,CAAC;;QAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtK,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,WAAW,EAAE,CAAC,CAAC,EACtG,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,QAAQ,EAAE,CAAC,CAAC,EAC/E,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EACnD,GAAG,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,oBAA6B,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EACvF,GAAG,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,sBAA+B,EAAE,SAAS,EAAE,CAAC,CAAC,EACvG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,WAAoB,EAAE,KAA+B,EACtG,UAAwD,EAAE;IAC1D,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,MAAM,GAA4B,EAAE,aAAa,EAAE,gCAAgC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI;QACxI,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,CAAC;IAC3H,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAAC,MAAM,CAAC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAAC,MAAM,CAAC,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzL,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IACpI,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3G,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,GAAG,EAAE;QAC1B,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAC7E,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;IACnC,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,EAAE,IAA4B,EAAE,EAAE;QACrD,IAAI,cAAc,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC;QAC1D,IAAI,KAAkB,CAAC;QACvB,MAAM,WAAW,GAAG,IAAI,OAAO,CAAsB,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrL,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9M,OAAO,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAClE,CAAC;gBAAS,CAAC;YAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3G,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAClH,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,WAAW,EAAE,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QAClE,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QAC7F,MAAM,aAAa,GAAG,0BAA0B,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACjG,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QAC/I,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QAC7G,IAAI,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACpN,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QAC9H,IAAI,UAAU,GAAG,QAAQ,CAAC;QAC1B,KAAK,MAAM,OAAO,IAAI,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7D,IAAI,cAAc,EAAE,EAAE,CAAC;gBAAC,WAAW,EAAE,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YACvD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;gBAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YACtG,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;YAC/E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACtH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAAC,WAAW,EAAE,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YAChE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChG,IAAI,KAAK,GAAsC,yBAAyB,CAAC;YAAC,IAAI,IAAI,GAAG,mBAAmB,CAAC;YAAC,IAAI,YAAY,GAAU,EAAE,CAAC;YACvI,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;gBACnB,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC;gBAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;oBACxG,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG;oBAC5E,WAAW,CAAC,aAAa,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;oBAAC,KAAK,GAAG,SAAS,CAAC;oBAAC,IAAI,GAAG,wBAAwB,CAAC;gBAAC,CAAC;qBAClH,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;oBACzK,KAAK,GAAG,SAAS,CAAC;oBAAC,IAAI,GAAG,yBAAyB,CAAC;gBACtD,CAAC;qBAAM,IAAI,WAAW,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;oBAAC,KAAK,GAAG,SAAS,CAAC;oBAAC,IAAI,GAAG,wBAAwB,CAAC;gBAAC,CAAC;qBACpI,CAAC;oBAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;oBAAC,IAAI,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;oBAAC,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;oBAC1J,IAAI,QAAQ,IAAI,KAAK,KAAK,WAAW;wBAAE,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;gBAAC,CAAC;YAClH,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAAC,KAAK,GAAG,SAAS,CAAC;gBAAC,IAAI,GAAG,2BAA2B,CAAC;YAAC,CAAC;YAC9F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5N,2FAA2F;YAC3F,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,KAAK,WAAW;gBAAE,OAAO,MAAM,CAAC;QAC/E,CAAC;QACD,IAAI,cAAc,EAAE,EAAE,CAAC;YAAC,WAAW,EAAE,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACvD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACtG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;YAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;QAAC,CAAC;QACnI,OAAO,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;AAC1F,CAAC"}

package/dist/core/errors.d.ts

@@ -0,0 +1,22 @@
+export type ReasonCode = string;
+export declare function isInfrastructureStepFailure(code: string | null): boolean;
+export declare class Blocked extends Error {
+    readonly reasons: Array<{
+        code: ReasonCode;
+        detail: string;
+        owner: string;
+        action: string;
+    }>;
+    constructor(reasons: Array<{
+        code: ReasonCode;
+        detail: string;
+        owner?: string;
+        action?: string;
+    }>);
+}
+export declare class Conflict extends Error {
+    constructor(message: string);
+}
+export declare class InfrastructureFailure extends Error {
+    constructor(message: string);
+}

package/dist/core/errors.js

@@ -0,0 +1,29 @@
+/** Shared by live execution and independent bundle reduction. */
+const INFRASTRUCTURE_STEP_FAILURES = new Set([
+    'qualification_authority_unavailable',
+    'transport_failure', 'deadline_exceeded', 'native_job_unavailable', 'native_job_queue_unavailable',
+    'native_job_request_too_large', 'native_job_response_invalid', 'native_job_identity_missing', 'native_job_identity_mismatch', 'native_job_secret_echo',
+    'mcp_driver_unavailable', 'mcp_origin_not_admitted', 'mcp_endpoint_invalid', 'mcp_request_too_large', 'mcp_capability_missing', 'mcp_response_invalid', 'mcp_protocol_failure', 'mcp_secret_echo',
+]);
+export function isInfrastructureStepFailure(code) { return code !== null && INFRASTRUCTURE_STEP_FAILURES.has(code); }
+export class Blocked extends Error {
+    reasons;
+    constructor(reasons) {
+        super(`blocked: ${reasons.map((r) => `${r.code} (${r.detail})`).join('; ')}`);
+        this.name = 'Blocked';
+        this.reasons = reasons.map((r) => ({ code: r.code, detail: r.detail, owner: r.owner ?? 'operator', action: r.action ?? 'resolve the prerequisite and plan again' }));
+    }
+}
+export class Conflict extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'Conflict';
+    }
+}
+export class InfrastructureFailure extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InfrastructureFailure';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAEA,iEAAiE;AACjE,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,qCAAqC;IACrC,mBAAmB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,8BAA8B;IAClG,8BAA8B,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,wBAAwB;IACtJ,wBAAwB,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,iBAAiB;CAClM,CAAC,CAAC;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAmB,IAAa,OAAO,IAAI,KAAK,IAAI,IAAI,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE7I,MAAM,OAAO,OAAQ,SAAQ,KAAK;IACvB,OAAO,CAA6E;IAC7F,YAAY,OAAqF;QAC/F,KAAK,CAAC,YAAY,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,yCAAyC,EAAE,CAAC,CAAC,CAAC;IACvK,CAAC;CACF;AAED,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF"}

package/dist/core/events.d.ts

@@ -0,0 +1,14 @@
+import { StepEvent, type Ref } from '../protocol/index.ts';
+export declare class EventLog {
+    private readonly executionId;
+    private readonly attemptId;
+    private readonly generation;
+    private readonly sink?;
+    readonly events: StepEvent[];
+    private sequence;
+    private readonly started;
+    constructor(executionId: string, attemptId: string, generation: number, sink?: ((event: StepEvent) => void) | undefined);
+    emit(kind: string, stepId: string | null, payload: Record<string, unknown>, correlation?: Partial<StepEvent['correlation']>): StepEvent;
+    static refOf(event: StepEvent): Ref;
+    toJsonl(): string;
+}

package/dist/core/events.js

@@ -0,0 +1,37 @@
+import { digestOfValue, parseAs, StepEvent } from "../protocol/index.js";
+import { monotonicMs, newId, nowIso } from "./clock.js";
+export class EventLog {
+    executionId;
+    attemptId;
+    generation;
+    sink;
+    events = [];
+    sequence = 0;
+    started = monotonicMs();
+    constructor(executionId, attemptId, generation, sink) {
+        this.executionId = executionId;
+        this.attemptId = attemptId;
+        this.generation = generation;
+        this.sink = sink;
+    }
+    emit(kind, stepId, payload, correlation = {}) {
+        const event = parseAs(StepEvent, {
+            executionId: this.executionId, attemptId: this.attemptId, generation: this.generation,
+            sequence: this.sequence++, eventId: newId('evt'), stepId, kind, at: nowIso(),
+            monotonicOffsetMs: monotonicMs() - this.started,
+            correlation: { traceId: null, requestId: null, turnId: null, jobId: null, nativeRunId: null, providerRequestId: null, ...correlation },
+            payloadDigest: digestOfValue(payload),
+            redactedPayload: payload,
+        }, 'step event');
+        this.events.push(event);
+        this.sink?.(event);
+        return event;
+    }
+    static refOf(event) {
+        return { id: event.eventId, revision: '1', digest: event.payloadDigest };
+    }
+    toJsonl() {
+        return this.events.map((event) => JSON.stringify(event)).join('\n') + (this.events.length ? '\n' : '');
+    }
+}
+//# sourceMappingURL=events.js.map

package/dist/core/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/core/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAY,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAExD,MAAM,OAAO,QAAQ;IAIU;IAAsC;IAAoC;IAAqC;IAHnI,MAAM,GAAgB,EAAE,CAAC;IAC1B,QAAQ,GAAG,CAAC,CAAC;IACJ,OAAO,GAAG,WAAW,EAAE,CAAC;IACzC,YAA6B,WAAmB,EAAmB,SAAiB,EAAmB,UAAkB,EAAmB,IAAiC;QAAhJ,gBAAW,GAAX,WAAW,CAAQ;QAAmB,cAAS,GAAT,SAAS,CAAQ;QAAmB,eAAU,GAAV,UAAU,CAAQ;QAAmB,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAEjL,IAAI,CAAC,IAAY,EAAE,MAAqB,EAAE,OAAgC,EAAE,cAAiD,EAAE;QAC7H,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;YACrF,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE;YAC5E,iBAAiB,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,OAAO;YAC/C,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE;YACtI,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC;YACrC,eAAe,EAAE,OAAO;SACzB,EAAE,YAAY,CAAC,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAgB;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;CACF"}

package/dist/core/executionInspection.d.ts

@@ -0,0 +1,90 @@
+import { z } from 'zod';
+import { VerifiedBundleSnapshot } from './bundle.ts';
+export declare const ExecutionInspection: z.ZodObject<{
+    campaignId: z.ZodString;
+    outcome: z.ZodEnum<{
+        blocked: "blocked";
+        cancelled: "cancelled";
+        passed: "passed";
+        assertion_failed: "assertion_failed";
+        infrastructure_failed: "infrastructure_failed";
+        inconclusive: "inconclusive";
+    }>;
+    coverage: z.ZodObject<{
+        selected: z.ZodNumber;
+        required: z.ZodNumber;
+        attempted: z.ZodNumber;
+        observed: z.ZodNumber;
+        passed: z.ZodNumber;
+        blocked: z.ZodNumber;
+        excluded: z.ZodNumber;
+        requiredCells: z.ZodArray<z.ZodObject<{
+            selectionCellId: z.ZodString;
+            outcome: z.ZodString;
+        }, z.core.$strict>>;
+        expectedSteps: z.ZodNumber;
+        completedSteps: z.ZodNumber;
+        requiredAssertions: z.ZodNumber;
+        passedRequiredAssertions: z.ZodNumber;
+    }, z.core.$strict>;
+    cells: z.ZodArray<z.ZodObject<{
+        cell: z.ZodString;
+        outcome: z.ZodEnum<{
+            blocked: "blocked";
+            cancelled: "cancelled";
+            passed: "passed";
+            assertion_failed: "assertion_failed";
+            infrastructure_failed: "infrastructure_failed";
+            inconclusive: "inconclusive";
+        }>;
+        reasonCodes: z.ZodArray<z.ZodString>;
+        steps: z.ZodArray<z.ZodString>;
+        assertions: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    verified: z.ZodLiteral<true>;
+    manifestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    executionId: z.ZodNullable<z.ZodString>;
+    schemaVersion: z.ZodLiteral<"tracegrove.execution-inspection/v1">;
+}, z.core.$strict>;
+export declare const FailedStepInspection: z.ZodObject<{
+    failed: z.ZodArray<z.ZodObject<{
+        cell: z.ZodString;
+        step: z.ZodString;
+        result: z.ZodEnum<{
+            failed: "failed";
+            cancelled: "cancelled";
+            completed: "completed";
+            not_run: "not_run";
+        }>;
+        reason: z.ZodNullable<z.ZodString>;
+        output: z.ZodNullable<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    }, z.core.$strict>>;
+    verified: z.ZodLiteral<true>;
+    manifestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    executionId: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type ExecutionInspection = z.infer<typeof ExecutionInspection>;
+/** Reports the independently reduced evidence, never raw producer labels. Nonsealed files are ignored. */
+export declare function inspectExecution(snapshot: VerifiedBundleSnapshot, executionId?: string | null): ExecutionInspection;
+/** Observation payloads are exposed only by the explicit failed-step inspection path. */
+export declare function inspectFailedSteps(snapshot: VerifiedBundleSnapshot, executionId?: string | null): {
+    failed: {
+        cell: string;
+        step: string;
+        result: "failed" | "cancelled" | "completed" | "not_run";
+        reason: string | null;
+        output: unknown;
+    }[];
+    verified: true;
+    manifestDigest: {
+        algorithm: "sha256";
+        hex: string;
+    };
+    executionId: string | null;
+};

package/dist/core/executionInspection.js

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+import { CampaignResult, DigestSchema, ExecutionReceipt } from "../protocol/index.js";
+import { VerifiedBundleSnapshot } from "./bundle.js";
+const Cell = z.object({ cell: z.string(), outcome: ExecutionReceipt.shape.outcome, reasonCodes: ExecutionReceipt.shape.reasonCodes,
+    steps: z.array(z.string()), assertions: z.array(z.string()) }).strict();
+const Step = ExecutionReceipt.shape.steps.element;
+const binding = { verified: z.literal(true), manifestDigest: DigestSchema, executionId: z.string().nullable() };
+export const ExecutionInspection = z.object({ schemaVersion: z.literal('tracegrove.execution-inspection/v1'), ...binding,
+    campaignId: z.string(), outcome: CampaignResult.shape.outcome,
+    coverage: CampaignResult.shape.coverage, cells: z.array(Cell),
+}).strict();
+export const FailedStepInspection = z.object({ ...binding,
+    failed: z.array(z.object({ cell: z.string(), step: Step.shape.stepId, result: Step.shape.result, reason: Step.shape.reasonCode, output: Step.shape.output }).strict()),
+}).strict();
+/** Reports the independently reduced evidence, never raw producer labels. Nonsealed files are ignored. */
+export function inspectExecution(snapshot, executionId = null) {
+    const { campaign, receipts } = snapshot.records;
+    return ExecutionInspection.parse({ schemaVersion: 'tracegrove.execution-inspection/v1', verified: true,
+        manifestDigest: snapshot.manifestDigest, executionId, campaignId: campaign.campaignId, outcome: campaign.outcome, coverage: campaign.coverage,
+        cells: receipts.map(({ selectionCellId, outcome, reasonCodes, steps, assertions }) => ({ cell: selectionCellId, outcome, reasonCodes,
+            steps: steps.map(s => `${s.stepId}:${s.result}`), assertions: assertions.map(a => `${a.assertionId}:${a.result}`) })),
+    });
+}
+/** Observation payloads are exposed only by the explicit failed-step inspection path. */
+export function inspectFailedSteps(snapshot, executionId = null) {
+    return FailedStepInspection.parse({ verified: true, manifestDigest: snapshot.manifestDigest, executionId,
+        failed: snapshot.records.receipts.flatMap(r => r.steps.filter(s => s.result !== 'completed').slice(0, 1)
+            .map(s => ({ cell: r.selectionCellId, step: s.stepId, result: s.result, reason: s.reasonCode, output: s.output }))),
+    });
+}
+//# sourceMappingURL=executionInspection.js.map

package/dist/core/executionInspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionInspection.js","sourceRoot":"","sources":["../../src/core/executionInspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,WAAW;IAChI,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1E,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;AAChH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAAC,EAAE,GAAG,OAAO;IACtH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO;IAC7D,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;CAC9D,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO;IACvD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;CACvK,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,0GAA0G;AAC1G,MAAM,UAAU,gBAAgB,CAAC,QAAgC,EAAE,cAA6B,IAAI;IAClG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC;IAChD,OAAO,mBAAmB,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,oCAAoC,EAAE,QAAQ,EAAE,IAAI;QACpG,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC7I,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW;YAClI,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;KACxH,CAAC,CAAC;AACL,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,QAAgC,EAAE,cAA6B,IAAI;IACpG,OAAO,oBAAoB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,WAAW;QACtG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACrG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;KACtH,CAAC,CAAC;AACL,CAAC"}

package/dist/core/executionOwnership.d.ts

@@ -0,0 +1,72 @@
+/** Durable local inventory under the existing ledger's exclusive writer. No provider recovery or PID-based deletion. */
+import { z } from 'zod';
+import { type Ref } from '../protocol/index.ts';
+import type { LocalLedger } from './ledger.ts';
+import type { LedgerReadView } from './ledgerRecords.ts';
+declare const Binding: z.ZodObject<{
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    campaignId: z.ZodString;
+    requestDigest: z.ZodString;
+    scope: z.ZodObject<{
+        ownerId: z.ZodString;
+        tenantId: z.ZodNullable<z.ZodString>;
+        visibility: z.ZodEnum<{
+            public: "public";
+            owner_private: "owner_private";
+            tenant_private: "tenant_private";
+        }>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ExecutionOwnershipBinding = z.infer<typeof Binding>;
+type Binding = ExecutionOwnershipBinding;
+/** Only the trusted executor constructs this writer; returned snapshots grant no effect authority. */
+export declare class ExecutionOwnership {
+    private readonly ledger;
+    private readonly binding;
+    constructor(ledger: LocalLedger, binding: Binding);
+    initialize(): void;
+    private read;
+    private change;
+    reserve(key: string, kind: 'host' | 'fixture', cellId: string, planRef: Ref): void;
+    observed(key: string, physicalIds: string[]): void;
+    cleaning(key: string): void;
+    removed(key: string): void;
+}
+/** Read the same validated inventory without giving the reader any mutation methods. */
+export declare function readExecutionOwnership(ledger: LedgerReadView, expected: Binding): {
+    row: import("./ledgerRecords.ts").JournalEntry;
+    inventory: {
+        binding: {
+            executionId: string;
+            attemptId: string;
+            generation: number;
+            campaignId: string;
+            requestDigest: string;
+            scope: {
+                ownerId: string;
+                tenantId: string | null;
+                visibility: "public" | "owner_private" | "tenant_private";
+            };
+        };
+        resources: {
+            key: string;
+            kind: "fixture" | "host";
+            cellId: string;
+            planRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            };
+            state: "observed" | "reserved" | "cleanup_pending" | "removed";
+            physicalIds: string[];
+        }[];
+    };
+};
+/** An interrupted attempt never automatically replays an uncertain acquisition, including legacy missing inventory. */
+export declare function assertInterruptedOwnershipResolved(ledger: LedgerReadView, expected: Binding): void;
+export {};

package/dist/core/executionOwnership.js

@@ -0,0 +1,82 @@
+/** Durable local inventory under the existing ledger's exclusive writer. No provider recovery or PID-based deletion. */
+import { z } from 'zod';
+import { digestOfValue, RefSchema, ScopeSchema } from "../protocol/index.js";
+import { Conflict } from "./errors.js";
+const Binding = z.object({ executionId: z.string(), attemptId: z.string(), generation: z.number().int().positive(),
+    campaignId: z.string(), requestDigest: z.string().regex(/^[a-f0-9]{64}$/), scope: ScopeSchema }).strict();
+const Resource = z.object({ key: z.string(), kind: z.enum(['host', 'fixture']), cellId: z.string(), planRef: RefSchema,
+    state: z.enum(['reserved', 'observed', 'cleanup_pending', 'removed']),
+    physicalIds: z.array(z.string()).max(64),
+}).strict();
+const Inventory = z.object({ binding: Binding, resources: z.array(Resource).max(10000) }).strict();
+const aggregate = (executionId) => `ownership:${executionId}`;
+const equal = (a, b) => digestOfValue(a).hex === digestOfValue(b).hex;
+/** Only the trusted executor constructs this writer; returned snapshots grant no effect authority. */
+export class ExecutionOwnership {
+    ledger;
+    binding;
+    constructor(ledger, binding) {
+        this.ledger = ledger;
+        this.binding = structuredClone(Binding.parse(binding));
+    }
+    initialize() {
+        this.ledger.append(aggregate(this.binding.executionId), 0, 'ownership.initialized', { binding: this.binding, resources: [] });
+    }
+    read() {
+        return readExecutionOwnership(this.ledger, this.binding);
+    }
+    change(type, update) {
+        const { row, inventory } = this.read();
+        update(inventory.resources);
+        this.ledger.append(row.aggregateId, row.version, type, Inventory.parse(inventory));
+    }
+    reserve(key, kind, cellId, planRef) {
+        this.change('ownership.reserved', resources => {
+            if (resources.some(r => r.key === key))
+                throw new Conflict('ownership_resource_already_reserved');
+            resources.push({ key, kind, cellId, planRef, state: 'reserved', physicalIds: [] });
+        });
+    }
+    observed(key, physicalIds) {
+        this.change('ownership.observed', resources => {
+            const item = resources.find(r => r.key === key);
+            if (!item || item.state !== 'reserved' || !physicalIds.length)
+                throw new Conflict('ownership_acknowledgement_invalid');
+            item.state = 'observed';
+            item.physicalIds = physicalIds;
+        });
+    }
+    cleaning(key) {
+        this.change('ownership.cleanup_pending', resources => {
+            const item = resources.find(r => r.key === key);
+            if (!item || item.state !== 'observed')
+                throw new Conflict('ownership_cleanup_not_observed');
+            item.state = 'cleanup_pending';
+        });
+    }
+    removed(key) {
+        this.change('ownership.removed', resources => {
+            const item = resources.find(r => r.key === key);
+            if (!item || item.state !== 'cleanup_pending')
+                throw new Conflict('ownership_cleanup_acknowledgement_invalid');
+            item.state = 'removed';
+        });
+    }
+}
+/** Read the same validated inventory without giving the reader any mutation methods. */
+export function readExecutionOwnership(ledger, expected) {
+    const row = ledger.current(aggregate(expected.executionId));
+    if (!row)
+        throw new Conflict('ownership_inventory_missing; reconcile the interrupted attempt before retrying');
+    const inventory = Inventory.parse(row.data);
+    if (!equal(inventory.binding, expected))
+        throw new Conflict('ownership_binding_mismatch');
+    return { row, inventory };
+}
+/** An interrupted attempt never automatically replays an uncertain acquisition, including legacy missing inventory. */
+export function assertInterruptedOwnershipResolved(ledger, expected) {
+    const { inventory } = readExecutionOwnership(ledger, expected);
+    if (inventory.resources.some(r => r.state !== 'removed'))
+        throw new Conflict('ownership_reconciliation_required; interrupted resources remain unresolved; no acquisition was replayed');
+}
+//# sourceMappingURL=executionOwnership.js.map

package/dist/core/executionOwnership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionOwnership.js","sourceRoot":"","sources":["../../src/core/executionOwnership.ts"],"names":[],"mappings":"AAAA,wHAAwH;AACxH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAY,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAG5G,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS;IACpH,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;IACrE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACzC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACnG,MAAM,SAAS,GAAG,CAAC,WAAmB,EAAE,EAAE,CAAC,aAAa,WAAW,EAAE,CAAC;AACtE,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAExF,sGAAsG;AACtG,MAAM,OAAO,kBAAkB;IAEA;IADZ,OAAO,CAAU;IAClC,YAA6B,MAAmB,EAAE,OAAgB;QAArC,WAAM,GAAN,MAAM,CAAa;QAAsB,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAAC,CAAC;IAC/H,UAAU;QACR,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAChI,CAAC;IACO,IAAI;QACV,OAAO,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IACO,MAAM,CAAC,IAAY,EAAE,MAAuD;QAClF,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAC,GAAW,EAAE,IAAwB,EAAE,MAAc,EAAE,OAAY;QACzE,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,SAAS,CAAC,EAAE;YAC5C,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,qCAAqC,CAAC,CAAC;YAClG,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC;IACD,QAAQ,CAAC,GAAW,EAAE,WAAqB;QACzC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,SAAS,CAAC,EAAE;YAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,WAAW,CAAC,MAAM;gBAAE,MAAM,IAAI,QAAQ,CAAC,mCAAmC,CAAC,CAAC;YACvH,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;YAAC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IACD,QAAQ,CAAC,GAAW;QAClB,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,SAAS,CAAC,EAAE;YACnD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;YAC7F,IAAI,CAAC,KAAK,GAAG,iBAAiB,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAW;QACjB,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAAE;YAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,iBAAiB;gBAAE,MAAM,IAAI,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YAC/G,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,UAAU,sBAAsB,CAAC,MAAsB,EAAE,QAAiB;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,gFAAgF,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IAC1F,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC5B,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,kCAAkC,CAAC,MAAsB,EAAE,QAAiB;IAC1F,MAAM,EAAE,SAAS,EAAE,GAAG,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/D,IAAI,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,yGAAyG,CAAC,CAAC;AAC1L,CAAC"}