tracegrove 0.0.0-stage → 0.3.0

package/dist/core/localPromotionState.d.ts

@@ -0,0 +1,387 @@
+import { z } from 'zod';
+import type { StoredScenario } from './localScenarioState.ts';
+export declare const StoredPromotion: z.ZodObject<{
+    receipt: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"workflow.scenario-promotion/v1">;
+        ref: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        scope: z.ZodObject<{
+            ownerId: z.ZodString;
+            tenantId: z.ZodNullable<z.ZodString>;
+            visibility: z.ZodEnum<{
+                public: "public";
+                owner_private: "owner_private";
+                tenant_private: "tenant_private";
+            }>;
+        }, z.core.$strict>;
+        intent: z.ZodObject<{
+            scenarioId: z.ZodString;
+            definitionRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            reviewToken: z.ZodObject<{
+                id: z.ZodString;
+                scope: z.ZodObject<{
+                    ownerId: z.ZodString;
+                    tenantId: z.ZodNullable<z.ZodString>;
+                    visibility: z.ZodEnum<{
+                        public: "public";
+                        owner_private: "owner_private";
+                        tenant_private: "tenant_private";
+                    }>;
+                }, z.core.$strict>;
+                expectedEditRevision: z.ZodNumber;
+                expectedSourcePlanRef: z.ZodObject<{
+                    id: z.ZodString;
+                    revision: z.ZodString;
+                    digest: z.ZodObject<{
+                        algorithm: z.ZodLiteral<"sha256">;
+                        hex: z.ZodString;
+                    }, z.core.$strict>;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            selectionManifestRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+            idempotencyKey: z.ZodString;
+        }, z.core.$strict>;
+        reviewRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        sourceValidationRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        reviewStorageVersion: z.ZodNumber;
+        actorId: z.ZodString;
+        authorizationPolicyRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        promotedAt: z.ZodString;
+    }, z.core.$strict>;
+    approved: z.ZodObject<{
+        plan: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<"workflow.source-plan/v1">;
+            ref: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            scope: z.ZodObject<{
+                ownerId: z.ZodString;
+                tenantId: z.ZodNullable<z.ZodString>;
+                visibility: z.ZodEnum<{
+                    public: "public";
+                    owner_private: "owner_private";
+                    tenant_private: "tenant_private";
+                }>;
+            }, z.core.$strict>;
+            revisionMatrixRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            changeModelRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            disposition: z.ZodEnum<{
+                scenario_set: "scenario_set";
+                no_e2e_warranted: "no_e2e_warranted";
+                surface_unresolved: "surface_unresolved";
+            }>;
+            dispositionReasonRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+            candidates: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                sourceElementIds: z.ZodArray<z.ZodString>;
+                caseRef: z.ZodNullable<z.ZodObject<{
+                    id: z.ZodString;
+                    revision: z.ZodString;
+                    digest: z.ZodObject<{
+                        algorithm: z.ZodLiteral<"sha256">;
+                        hex: z.ZodString;
+                    }, z.core.$strict>;
+                }, z.core.$strict>>;
+                disposition: z.ZodEnum<{
+                    blocked: "blocked";
+                    excluded: "excluded";
+                    runnable: "runnable";
+                    not_derivable: "not_derivable";
+                }>;
+                reasonRefs: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    revision: z.ZodString;
+                    digest: z.ZodObject<{
+                        algorithm: z.ZodLiteral<"sha256">;
+                        hex: z.ZodString;
+                    }, z.core.$strict>;
+                }, z.core.$strict>>;
+                capabilityRefs: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    revision: z.ZodString;
+                    digest: z.ZodObject<{
+                        algorithm: z.ZodLiteral<"sha256">;
+                        hex: z.ZodString;
+                    }, z.core.$strict>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            validFlowRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+            withheldFlows: z.ZodArray<z.ZodObject<{
+                flowRef: z.ZodObject<{
+                    id: z.ZodString;
+                    revision: z.ZodString;
+                    digest: z.ZodObject<{
+                        algorithm: z.ZodLiteral<"sha256">;
+                        hex: z.ZodString;
+                    }, z.core.$strict>;
+                }, z.core.$strict>;
+                reasonRefs: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    revision: z.ZodString;
+                    digest: z.ZodObject<{
+                        algorithm: z.ZodLiteral<"sha256">;
+                        hex: z.ZodString;
+                    }, z.core.$strict>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            invalidFlows: z.ZodArray<z.ZodObject<{
+                flowRef: z.ZodObject<{
+                    id: z.ZodString;
+                    revision: z.ZodString;
+                    digest: z.ZodObject<{
+                        algorithm: z.ZodLiteral<"sha256">;
+                        hex: z.ZodString;
+                    }, z.core.$strict>;
+                }, z.core.$strict>;
+                diagnosticRefs: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    revision: z.ZodString;
+                    digest: z.ZodObject<{
+                        algorithm: z.ZodLiteral<"sha256">;
+                        hex: z.ZodString;
+                    }, z.core.$strict>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            coverageObligationRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+            gapRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        review: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<"workflow.plan-review/v1">;
+            ref: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            scope: z.ZodObject<{
+                ownerId: z.ZodString;
+                tenantId: z.ZodNullable<z.ZodString>;
+                visibility: z.ZodEnum<{
+                    public: "public";
+                    owner_private: "owner_private";
+                    tenant_private: "tenant_private";
+                }>;
+            }, z.core.$strict>;
+            sourcePlanRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            editRevision: z.ZodNumber;
+            decision: z.ZodEnum<{
+                approved: "approved";
+                rejected: "rejected";
+            }>;
+            reviewerActorId: z.ZodString;
+            policyRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            reasonRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        validation: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<"workflow.source-validation/v1">;
+            sourcePlanRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            changeModelRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            revisionMatrixRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            policyRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            verifiedCitationRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+            runnableElementIds: z.ZodArray<z.ZodString>;
+            retainedDiagnosticRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+            ref: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            scope: z.ZodObject<{
+                ownerId: z.ZodString;
+                tenantId: z.ZodNullable<z.ZodString>;
+                visibility: z.ZodEnum<{
+                    public: "public";
+                    owner_private: "owner_private";
+                    tenant_private: "tenant_private";
+                }>;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        storageVersion: z.ZodNumber;
+        projection: z.ZodObject<{
+            id: z.ZodString;
+            scope: z.ZodObject<{
+                ownerId: z.ZodString;
+                tenantId: z.ZodNullable<z.ZodString>;
+                visibility: z.ZodEnum<{
+                    public: "public";
+                    owner_private: "owner_private";
+                    tenant_private: "tenant_private";
+                }>;
+            }, z.core.$strict>;
+            editRevision: z.ZodNumber;
+            sourcePlanRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            currentReviewRef: z.ZodNullable<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare function validateStoredPromotion(entry: StoredScenario, keys: Set<string>): void;

package/dist/core/localPromotionState.js

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+import { ScenarioPromotion, digestOfValue, sameRef } from "../protocol/index.js";
+import { ApprovedPlanReview, deriveScenarioPromotion, normalizePromotionIntent } from "./sourcePromotion.js";
+import { Conflict } from "./errors.js";
+export const StoredPromotion = z.object({ receipt: ScenarioPromotion, approved: ApprovedPlanReview }).strict();
+export function validateStoredPromotion(entry, keys) {
+    if (!entry.promotion)
+        return;
+    const { receipt, approved } = entry.promotion;
+    const intent = normalizePromotionIntent(receipt.intent);
+    if (keys.has(intent.idempotencyKey) || intent.scenarioId !== entry.projection.id)
+        throw new Conflict('promotion identity or scoped idempotency key changed');
+    keys.add(intent.idempotencyKey);
+    const definition = entry.definitions.find(d => sameRef(d.ref, intent.definitionRef));
+    const selections = intent.selectionManifestRefs.map(ref => entry.selections.find(s => sameRef(s.ref, ref)));
+    if (!definition || selections.some(s => !s))
+        throw new Conflict('promoted immutable definition or selection is missing');
+    const expected = deriveScenarioPromotion(intent, definition, selections, approved, { actorId: receipt.actorId, policyRef: receipt.authorizationPolicyRef }, receipt.promotedAt);
+    if (digestOfValue(expected.promotion).hex !== digestOfValue(receipt).hex)
+        throw new Conflict('stored promotion manifest or reviewed source bindings changed');
+}
+//# sourceMappingURL=localPromotionState.js.map

package/dist/core/localPromotionState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localPromotionState.js","sourceRoot":"","sources":["../../src/core/localPromotionState.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAE7G,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC/G,MAAM,UAAU,uBAAuB,CAAC,KAAqB,EAAE,IAAiB;IAC9E,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO;IAC7B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IAAC,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,sDAAsD,CAAC,CAAC;IAC7J,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5G,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,uDAAuD,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAC/E,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/F,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,+DAA+D,CAAC,CAAC;AAChK,CAAC"}

package/dist/core/localQualificationResults.d.ts

@@ -0,0 +1,39 @@
+import { QualificationRound, QualificationRoundAdmission, type Ref, type Scope } from '../protocol/index.ts';
+import { LocalLedger } from './ledger.ts';
+import { type QualificationResultPorts, type QualificationRoundInput } from './qualification.ts';
+import type { ReplayAssessmentPorts } from './replayAssessment.ts';
+export interface LocalQualificationResultAuthority extends QualificationResultPorts {
+    /** Explicit write permission; read and issuer authentication do not imply retention permission. */
+    authorizeRetention(scope: Scope): Promise<void>;
+}
+export type RetainedQualificationRound = {
+    round: QualificationRound;
+    bundleDir: string;
+    replayed: boolean;
+};
+export interface LocalQualificationReplaySnapshot extends Pick<ReplayAssessmentPorts, 'resolveRound' | 'authenticateEvidence'> {
+    /** Synchronous final check; no await is allowed between this check and the owner's journal publication. */
+    assertCurrent(): void;
+}
+/** Durable local terminal-round index. Reuses the immutable result sink; never records readiness or activates coverage. */
+export declare class LocalQualificationResults {
+    private readonly ledger;
+    private readonly authority;
+    private readonly scope;
+    private readonly aggregate;
+    private readonly sink;
+    constructor(ledger: LocalLedger, scope: Scope, authority: LocalQualificationResultAuthority);
+    private scoped;
+    private history;
+    private find;
+    private intact;
+    replayPorts(): Pick<ReplayAssessmentPorts, 'resolveRound' | 'authenticateEvidence'>;
+    replaySnapshot(ledger: LocalLedger): Promise<LocalQualificationReplaySnapshot>;
+    private checked;
+    retain(input: QualificationRoundInput): Promise<RetainedQualificationRound>;
+    /** ReplayAssessmentPorts.resolveRound: null is pending only for an authentic registered admission. */
+    resolveRound(raw: QualificationRoundAdmission): Promise<{
+        roundRef: Ref;
+        bundleDir: string;
+    } | null>;
+}

package/dist/core/localQualificationResults.js

@@ -0,0 +1,160 @@
+import { z } from 'zod';
+import { DigestSchema, QualificationRound, QualificationRoundAdmission, RefSchema, ScopeSchema, digestOfValue, sameDigest, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { LocalLedger } from "./ledger.js";
+import { LocalResultSink } from "./resultSink.js";
+import { readQualificationEvidence } from "./qualification.js";
+import { Conflict } from "./errors.js";
+import { readVerifiedBundle } from "./bundle.js";
+const IndexedRound = z.object({ round: QualificationRound, resultRef: RefSchema, manifestDigest: DigestSchema }).strict();
+/** Durable local terminal-round index. Reuses the immutable result sink; never records readiness or activates coverage. */
+export class LocalQualificationResults {
+    ledger;
+    authority;
+    scope;
+    aggregate;
+    sink;
+    constructor(ledger, scope, authority) {
+        this.ledger = ledger;
+        this.authority = authority;
+        this.scope = ScopeSchema.parse(scope);
+        this.aggregate = `qualification-results:${digestOfValue(this.scope).hex}`;
+        this.sink = new LocalResultSink(ledger, this.scope, { authorize: async (requested, action) => {
+                if (action === 'ingest')
+                    await this.authority.authorizeRetention(requested);
+                else
+                    await this.authority.authorize(requested);
+            } });
+    }
+    scoped(scope) {
+        if (!sameScope(scope, this.scope))
+            throw new Conflict('qualification result belongs to another scope');
+    }
+    history() {
+        const entries = this.ledger.history(this.aggregate);
+        if (entries.length > 500)
+            throw new Conflict('qualification result history requires archival indexing');
+        const admissions = new Set();
+        const results = new Set();
+        return entries.map(entry => {
+            const record = IndexedRound.parse(entry.data);
+            const round = record.round;
+            const identity = JSON.stringify([round.admissionRef.id, round.admissionRef.revision]);
+            if (entry.type !== 'workflow.qualification.retained' || !verifySelfDigest(round) || !sameScope(round.scope, this.scope) ||
+                admissions.has(identity) || results.has(record.resultRef.id))
+                throw new Conflict('qualification result index is inconsistent');
+            admissions.add(identity);
+            results.add(record.resultRef.id);
+            return record;
+        });
+    }
+    find(history, admissionRef) {
+        const record = history.find(item => item.round.admissionRef.id === admissionRef.id && item.round.admissionRef.revision === admissionRef.revision);
+        if (record && !sameRef(record.round.admissionRef, admissionRef))
+            throw new Conflict('qualification admission identity changed');
+        return record;
+    }
+    intact(record, bundleDir) {
+        if (!sameDigest(readVerifiedBundle(bundleDir).manifestDigest, record.manifestDigest))
+            throw new Conflict('qualification archive changed during authorization');
+    }
+    replayPorts() {
+        return { resolveRound: admission => this.resolveRound(admission), authenticateEvidence: async (admission, bundle) => {
+                this.scoped(admission.scope);
+                this.scoped(bundle.request.requestedScope);
+                await this.authority.authorize(structuredClone(this.scope));
+                await this.authority.authenticateEvidence(structuredClone(admission), structuredClone(bundle));
+            } };
+    }
+    async replaySnapshot(ledger) {
+        if (ledger !== this.ledger)
+            throw new Conflict('activation must use the result owner ledger');
+        await this.authority.authorize(structuredClone(this.scope));
+        this.history();
+        const version = this.ledger.version(this.aggregate);
+        const captured = new Map();
+        return { ...this.replayPorts(), resolveRound: async (admission) => {
+                const location = await this.resolveRound(admission);
+                if (location) {
+                    const record = this.find(this.history(), admission.ref);
+                    if (!record)
+                        throw new Conflict('qualification result disappeared during activation');
+                    this.intact(record, location.bundleDir);
+                    captured.set(location.bundleDir, record.manifestDigest);
+                }
+                return location;
+            }, assertCurrent: () => {
+                if (this.ledger.version(this.aggregate) !== version)
+                    throw new Conflict('qualification result index changed during activation');
+                for (const [path, digest] of captured) {
+                    if (!sameDigest(readVerifiedBundle(path).manifestDigest, digest))
+                        throw new Conflict('qualification archive changed during activation');
+                }
+            } };
+    }
+    async checked(record) {
+        const retained = await this.sink.get(record.resultRef.id);
+        if (!sameRef(retained.receipt.ref, record.resultRef) || !sameDigest(retained.receipt.manifestDigest, record.manifestDigest))
+            throw new Conflict('qualification result differs from retained evidence');
+        const evidence = await readQualificationEvidence(this.authority, { admissionRef: record.round.admissionRef, scope: this.scope, bundleDir: retained.bundleDir });
+        if (!sameDigest(evidence.bundle.manifestDigest, record.manifestDigest) || !sameRef(evidence.round.ref, record.round.ref))
+            throw new Conflict('qualification round differs from authenticated evidence');
+        await this.authority.authorize(structuredClone(this.scope));
+        this.intact(record, retained.bundleDir);
+        return { round: structuredClone(record.round), bundleDir: retained.bundleDir };
+    }
+    async retain(input) {
+        const scope = ScopeSchema.parse(input.scope);
+        this.scoped(scope);
+        const admissionRef = RefSchema.parse(input.admissionRef);
+        const bundleDir = z.string().min(1).max(2048).parse(input.bundleDir);
+        await this.authority.authorizeRetention(structuredClone(scope));
+        const evidence = await readQualificationEvidence(this.authority, { admissionRef, bundleDir, scope });
+        const previous = this.find(this.history(), evidence.admission.ref);
+        if (previous) {
+            if (!sameDigest(previous.manifestDigest, evidence.bundle.manifestDigest) || !sameRef(previous.round.ref, evidence.round.ref))
+                throw new Conflict('qualification round already retains different evidence');
+            return { ...await this.checked(previous), replayed: true };
+        }
+        if (this.history().length === 500)
+            throw new Conflict('qualification result history is full');
+        // Immutable archive and its generic result receipt precede qualification publication.
+        // A crash between them leaves retained integrity-checked bytes, never a phantom qualifying round.
+        const retained = await this.sink.ingest(bundleDir, { expectedManifestDigest: evidence.bundle.manifestDigest });
+        if (!sameDigest(retained.receipt.manifestDigest, evidence.bundle.manifestDigest))
+            throw new Conflict('qualification input changed during retention');
+        const record = IndexedRound.parse({ round: evidence.round, resultRef: retained.receipt.ref, manifestDigest: evidence.bundle.manifestDigest });
+        const checked = await this.checked(record);
+        await this.authority.authorizeRetention(structuredClone(scope));
+        this.intact(record, checked.bundleDir);
+        const history = this.history();
+        const raced = this.find(history, evidence.admission.ref);
+        if (raced) {
+            if (digestOfValue(raced).hex !== digestOfValue(record).hex)
+                throw new Conflict('qualification publication conflicts with retained evidence');
+            return { ...checked, replayed: true };
+        }
+        if (history.length === 500)
+            throw new Conflict('qualification result history is full');
+        this.ledger.append(this.aggregate, history.length, 'workflow.qualification.retained', record);
+        return { ...checked, replayed: false };
+    }
+    /** ReplayAssessmentPorts.resolveRound: null is pending only for an authentic registered admission. */
+    async resolveRound(raw) {
+        const admission = QualificationRoundAdmission.parse(raw);
+        this.scoped(admission.scope);
+        if (!verifySelfDigest(admission))
+            throw new Conflict('qualification admission seal changed');
+        await this.authority.authorize(structuredClone(this.scope));
+        const actual = QualificationRoundAdmission.parse(await this.authority.resolveAdmission(structuredClone(admission.ref), structuredClone(this.scope)));
+        if (!verifySelfDigest(actual) || !sameScope(actual.scope, this.scope) || !sameRef(actual.ref, admission.ref))
+            throw new Conflict('qualification admission is not authentically registered');
+        const record = this.find(this.history(), admission.ref);
+        if (!record) {
+            await this.authority.authorize(structuredClone(this.scope));
+            return null;
+        }
+        const checked = await this.checked(record);
+        return { roundRef: checked.round.ref, bundleDir: checked.bundleDir };
+    }
+}
+//# sourceMappingURL=localQualificationResults.js.map

package/dist/core/localQualificationResults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localQualificationResults.js","sourceRoot":"","sources":["../../src/core/localQualificationResults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,SAAS,EAAE,WAAW,EAC5F,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAwB,MAAM,sBAAsB,CAAC;AACtH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAA+D,MAAM,oBAAoB,CAAC;AAC5H,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAY1H,2HAA2H;AAC3H,MAAM,OAAO,yBAAyB;IAIP;IAAoD;IAHhE,KAAK,CAAQ;IACb,SAAS,CAAS;IAClB,IAAI,CAAkB;IACvC,YAA6B,MAAmB,EAAE,KAAY,EAAmB,SAA4C;QAAhG,WAAM,GAAN,MAAM,CAAa;QAAiC,cAAS,GAAT,SAAS,CAAmC;QAC3H,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,SAAS,GAAG,yBAAyB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;QACjH,IAAI,CAAC,IAAI,GAAG,IAAI,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;gBAC3F,IAAI,MAAM,KAAK,QAAQ;oBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;;oBACvE,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACjD,CAAC,EAAE,CAAC,CAAC;IACP,CAAC;IACO,MAAM,CAAC,KAAY;QACzB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACzG,CAAC;IACO,OAAO;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QACxG,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QAAC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QACxE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YACzB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtF,IAAI,KAAK,CAAC,IAAI,KAAK,iCAAiC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;gBACnH,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC;YACnI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IACO,IAAI,CAAC,OAAuB,EAAE,YAAiB;QACrD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,YAAY,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC;QAClJ,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,0CAA0C,CAAC,CAAC;QAChI,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,MAAM,CAAC,MAAoB,EAAE,SAAiB;QACpD,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IACjK,CAAC;IACD,WAAW;QACT,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;gBAClH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBACzE,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC5D,MAAM,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YACjG,CAAC,EAAE,CAAC;IACN,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,MAAmB;QACtC,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC;QAC9F,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmE,CAAC;QAC5F,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;gBAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACpD,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;oBACxD,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;oBACtF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;oBAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;gBACnG,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE;gBACrB,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,OAAO;oBAAE,MAAM,IAAI,QAAQ,CAAC,sDAAsD,CAAC,CAAC;gBAChI,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACtC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC;wBAAE,MAAM,IAAI,QAAQ,CAAC,iDAAiD,CAAC,CAAC;gBAC1I,CAAC;YACH,CAAC,EAAE,CAAC;IACN,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,MAAoB;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,qDAAqD,CAAC,CAAC;QACvM,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QAChK,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QACxM,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;IACjF,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/H,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACrG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,wDAAwD,CAAC,CAAC;YAC3M,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC7D,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QAC9F,sFAAsF;QACtF,kGAAkG;QAClG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAC/G,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,8CAA8C,CAAC,CAAC;QACrJ,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAC9I,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzF,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,4DAA4D,CAAC,CAAC;YAC7I,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QACvF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,iCAAiC,EAAE,MAAM,CAAC,CAAC;QAC9F,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,sGAAsG;IACtG,KAAK,CAAC,YAAY,CAAC,GAAgC;QACjD,MAAM,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QAC7F,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrJ,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QAC5L,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACvE,CAAC;CACF"}

package/dist/core/localReviewStore.d.ts

@@ -0,0 +1,28 @@
+import { PlanRevisionToken, ScenarioDefinition, SourcePlan, type Ref, type Scope } from '../protocol/index.ts';
+import { LocalLedger } from './ledger.ts';
+import type { PlanReviewPorts, ReviewSnapshot } from './review.ts';
+import { type ApprovedPlanSnapshot } from './sourcePromotion.ts';
+export type LocalReviewAuthority = Pick<PlanReviewPorts, 'authorize' | 'validateSources'>;
+/** Protected single-writer host storage, not a filesystem ACL or distributed authorization service. */
+export declare class LocalReviewStore {
+    private readonly ledger;
+    private readonly id;
+    private readonly authority;
+    private readonly scope;
+    private readonly aggregateId;
+    constructor(ledger: LocalLedger, id: string, scope: Scope, authority: LocalReviewAuthority);
+    private scoped;
+    private checked;
+    private current;
+    private write;
+    initialize(raw: unknown): Promise<ReviewSnapshot>;
+    /** Stage immutable drafts without changing editable revision or retaining approval for an edit. */
+    stage(raw: unknown): Promise<void>;
+    read(id: string, scope: Scope): Promise<ReviewSnapshot>;
+    resolvePlan(ref: Ref, scope: Scope): Promise<SourcePlan>;
+    /** Requires current review authority but creates no review or approval. The runtime fence is never serialized. */
+    approvedSnapshot(ledger: LocalLedger, input: PlanRevisionToken, expectedReview: Ref): Promise<ApprovedPlanSnapshot>;
+    /** Compose with the scenario host's other definition checks; an edited/rejected plan cannot remain current approval. */
+    definitionSnapshot(ledger: LocalLedger, raw: ScenarioDefinition): Promise<ApprovedPlanSnapshot>;
+    ports(): PlanReviewPorts;
+}