tracegrove 0.0.0-stage → 0.3.0

package/dist/hosts/runtime.d.ts

@@ -0,0 +1,5 @@
+import { RuntimeObservation } from '../protocol/index.ts';
+export declare function parseRuntimeVersion(output: string): Pick<RuntimeObservation, 'family' | 'version' | 'runtime'>;
+/** Synchronous compiler companion; uses the same bounded interpreter probe as launch. */
+export declare function observeApplicationRuntimeSync(command: string, cwd: string, path: string): RuntimeObservation;
+export declare function observeApplicationRuntime(command: string, cwd: string, path: string, signal?: AbortSignal): Promise<RuntimeObservation>;

package/dist/hosts/runtime.js

@@ -0,0 +1,60 @@
+/** Observe the executable used for launch; controller Node is not application identity. */
+import { execFile, execFileSync } from 'node:child_process';
+import { accessSync, constants, readFileSync } from 'node:fs';
+import { delimiter, isAbsolute, resolve } from 'node:path';
+import { promisify } from 'node:util';
+import { RuntimeObservation, sha256Hex } from "../protocol/index.js";
+import { Blocked, InfrastructureFailure } from "../core/errors.js";
+const execute = promisify(execFile);
+export function parseRuntimeVersion(output) {
+    const node = /^v(\d+)\.(\d+)\.(\d+)$/.exec(output.trim());
+    if (node)
+        return { family: 'node', version: output.trim().slice(1), runtime: `node${node[1]}` };
+    const python = /^Python (\d+)\.(\d+)\.(\d+)$/.exec(output.trim());
+    if (python)
+        return { family: 'python', version: output.trim().slice(7), runtime: `python${python[1]}.${python[2]}` };
+    throw new Blocked([{ code: 'application_runtime_unrecognized', detail: 'launch executable did not report a supported Node or Python version',
+            action: 'use the application interpreter directly; command wrappers require a qualified host adapter' }]);
+}
+function resolveExecutable(command, cwd, path) {
+    const candidates = isAbsolute(command) || command.includes('/')
+        ? [resolve(cwd, command)] : path.split(delimiter).filter(Boolean).map(dir => resolve(cwd, dir, command));
+    for (const candidate of candidates) {
+        try {
+            accessSync(candidate, constants.X_OK);
+            return candidate;
+        }
+        catch { /* try the next PATH entry */ }
+    }
+    throw new Blocked([{ code: 'launch_executable_missing', detail: command, action: 'install the interpreter or provide its executable path' }]);
+}
+const probeOptions = (cwd, path) => ({ cwd, env: { PATH: path }, timeout: 2000, maxBuffer: 4096, encoding: 'utf8' });
+const observation = (stdout, executable) => RuntimeObservation.parse({
+    ...parseRuntimeVersion(stdout), executable, executableSha256: sha256Hex(readFileSync(executable)),
+});
+/** Synchronous compiler companion; uses the same bounded interpreter probe as launch. */
+export function observeApplicationRuntimeSync(command, cwd, path) {
+    const executable = resolveExecutable(command, cwd, path);
+    let stdout;
+    try {
+        stdout = execFileSync(executable, ['--version'], probeOptions(cwd, path));
+    }
+    catch {
+        throw new InfrastructureFailure('application runtime version probe failed or exceeded its limit');
+    }
+    return observation(stdout, executable);
+}
+export async function observeApplicationRuntime(command, cwd, path, signal) {
+    const executable = resolveExecutable(command, cwd, path);
+    let stdout;
+    try {
+        // No issued credentials, inherited NODE_OPTIONS or PYTHON* settings enter this probe.
+        ({ stdout } = await execute(executable, ['--version'], { ...probeOptions(cwd, path), ...(signal ? { signal } : {}) }));
+    }
+    catch {
+        // Candidate output/error messages may contain private values; never echo them.
+        throw new InfrastructureFailure('application runtime version probe failed or exceeded its limit');
+    }
+    return observation(stdout, executable);
+}
+//# sourceMappingURL=runtime.js.map

package/dist/hosts/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/hosts/runtime.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpC,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAChG,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACrH,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,kCAAkC,EAAE,MAAM,EAAE,qEAAqE;YAC1I,MAAM,EAAE,6FAA6F,EAAE,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,GAAW,EAAE,IAAY;IACnE,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC7D,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3G,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC,CAAC,CAAC;AAChJ,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAe,EAAE,CAAC,CAAC;AAC9I,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,UAAkB,EAAsB,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC;IACvG,GAAG,mBAAmB,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;CAClG,CAAC,CAAC;AAEH,yFAAyF;AACzF,MAAM,UAAU,6BAA6B,CAAC,OAAe,EAAE,GAAW,EAAE,IAAY;IACtF,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAClF,MAAM,CAAC;QAAC,MAAM,IAAI,qBAAqB,CAAC,gEAAgE,CAAC,CAAC;IAAC,CAAC;IAC5G,OAAO,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAe,EAAE,GAAW,EAAE,IAAY,EAAE,MAAoB;IAC9G,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,sFAAsF;QACtF,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzH,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,MAAM,IAAI,qBAAqB,CAAC,gEAAgE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC"}

package/dist/hosts/sourceIdentity.d.ts

@@ -0,0 +1,54 @@
+import { z } from 'zod';
+export declare const SourceIdentity: z.ZodObject<{
+    hex: z.ZodString;
+    entries: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const SnapshotLaunchObservation: z.ZodObject<{
+    kind: z.ZodLiteral<"host.source">;
+    snapshotRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    identity: z.ZodObject<{
+        hex: z.ZodString;
+        entries: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    gitSource: z.ZodOptional<z.ZodObject<{
+        algorithm: z.ZodEnum<{
+            sha256: "sha256";
+            sha1: "sha1";
+        }>;
+        commit: z.ZodString;
+        tree: z.ZodString;
+        proofDigest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+        verification: z.ZodLiteral<"actual_file_bytes">;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type SnapshotLaunchObservation = z.infer<typeof SnapshotLaunchObservation>;
+export declare const SnapshotLaunchFailure: z.ZodObject<{
+    kind: z.ZodLiteral<"host.source_failed">;
+    stage: z.ZodEnum<{
+        read: "read";
+        identity: "identity";
+        template: "template";
+        copy: "copy";
+        objects: "objects";
+    }>;
+}, z.core.$strict>;
+export declare function identityFromEntries(entries: SourceIdentity['entries']): SourceIdentity;
+type SourceIdentity = z.infer<typeof SourceIdentity>;
+export declare function sourceIdentityDigest(root: string, files: string[]): SourceIdentity;
+export {};

package/dist/hosts/sourceIdentity.js

@@ -0,0 +1,27 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { isAbsolute, relative, resolve } from 'node:path';
+import { z } from 'zod';
+import { digestOfBytes, sha256Hex } from "../protocol/canonical.js";
+import { HexSha256, RefSchema } from "../protocol/primitives.js";
+import { Blocked } from "../core/errors.js";
+import { GitCommitObservation } from "../protocol/schemas/gitSources.js";
+export const SourceIdentity = z.object({ hex: HexSha256, entries: z.array(z.object({ path: z.string(), sha256: HexSha256 }).strict()).min(1).max(256) }).strict();
+export const SnapshotLaunchObservation = z.object({ kind: z.literal('host.source'), snapshotRef: RefSchema, identity: SourceIdentity, gitSource: GitCommitObservation.optional() }).strict();
+export const SnapshotLaunchFailure = z.object({ kind: z.literal('host.source_failed'), stage: z.enum(['read', 'template', 'copy', 'objects', 'identity']) }).strict();
+export function identityFromEntries(entries) {
+    const sorted = [...entries].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+    return { hex: digestOfBytes(sorted.map(entry => `${entry.path}\n${entry.sha256}\n`).join('')).hex, entries: sorted };
+}
+export function sourceIdentityDigest(root, files) {
+    const entries = files.map(path => {
+        const absolute = resolve(root, path);
+        const within = relative(root, absolute);
+        if (within.startsWith('..') || isAbsolute(within))
+            throw new Blocked([{ code: 'identity_file_outside_root', detail: path }]);
+        if (!existsSync(absolute))
+            throw new Blocked([{ code: 'identity_file_missing', detail: path, owner: 'operator', action: 'materialize the pinned source before launching' }]);
+        return { path, sha256: sha256Hex(readFileSync(absolute)) };
+    });
+    return identityFromEntries(entries);
+}
+//# sourceMappingURL=sourceIdentity.js.map

package/dist/hosts/sourceIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceIdentity.js","sourceRoot":"","sources":["../../src/hosts/sourceIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAClK,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,oBAAoB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE7L,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEtK,MAAM,UAAU,mBAAmB,CAAC,OAAkC;IACpE,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACvH,CAAC;AAGD,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,KAAe;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7H,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC,CAAC,CAAC;QAC7K,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC"}

package/dist/hosts/types.d.ts

@@ -0,0 +1,39 @@
+import type { HostCapabilityObservation, HostLease, HostPlan, IdentityAttestation, Scope } from '../protocol/index.ts';
+export type HostStartContext = {
+    hostPlan: HostPlan;
+    projectRoot: string;
+    workspaceDir: string;
+    scope: Scope;
+    campaignId: string;
+    executionId: string;
+    attemptId: string;
+    generation: number;
+    actorId: string;
+    credentialNames: string[];
+    signal: AbortSignal;
+    mockResponses: import('../protocol/index.ts').MockResponses | null;
+};
+export type HostSession = {
+    origin: string;
+    lease: HostLease;
+    observation: HostCapabilityObservation;
+    attestations: IdentityAttestation[];
+    /** credential name -> secret; kept in memory for this attempt only */
+    credentials: Map<string, string>;
+    boundaryMode: 'real' | 'stubbed';
+    interceptorRefs: import('../protocol/index.ts').Ref[];
+    ownedResources: Array<{
+        entityKey: string;
+        physicalId: string;
+        boundaryId: string;
+    }>;
+    dataDir: string | null;
+    nativeJobs?: import('../adapters/job/types.ts').NativeJobSession;
+    stop(reason: string): Promise<{
+        confirmed: boolean;
+        detail: string;
+    }>;
+};
+export interface ExecutorHost {
+    start(context: HostStartContext): Promise<HostSession>;
+}

package/dist/hosts/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/hosts/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/hosts/types.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,56 @@
+export * from './protocol/index.ts';
+export { loadProject, localScope, CorpusStore, ProjectLoader } from './core/corpus.ts';
+export { plan, runnerCapabilitiesFor, type Blocker } from './core/planner.ts';
+export { FrozenBundle, PlanBlocker, readFrozenBundle, FROZEN_BUNDLE_MAX_BYTES } from './core/frozenBundle.ts';
+export { FrozenPlanInspection, inspectFrozenPlan } from './core/planInspection.ts';
+export { ExecutionInspection, FailedStepInspection, inspectExecution, inspectFailedSteps } from './core/executionInspection.ts';
+export { exportVerifiedBundle as exportCapturedBundle } from './core/bundleExport.ts';
+export { executeBundle, EXIT_CODES, type RunSummary, type RunOptions } from './core/executor.ts';
+export { LocalLedger } from './core/ledger.ts';
+export { LocalDeliveryJournal, type DeliveryCodec, type DeliveryState } from './core/deliveryJournal.ts';
+export { LocalReviewStore, type LocalReviewAuthority } from './core/localReviewStore.ts';
+export { deriveCleanupExpectation } from './core/ownership.ts';
+export { signCleanupFollowup, verifyCleanupFollowup, cleanupExpectationDigest, type CleanupObserver } from './core/cleanupAttestation.ts';
+export { CoordinationSnapshotSchema, CoordinationCommandSchema, transitionCoordination, commitCoordination, type CoordinationSnapshot, type CoordinationCommand, type CoordinationFence, type CoordinationStore } from './core/coordination.ts';
+export { startController, delegateRun } from './core/controller.ts';
+export { searchCases, getCase } from './core/lookup.ts';
+export { createRerun } from './core/rerun.ts';
+export { editPlan, reviewPlan, type PlanReviewPorts, type ReviewSnapshot } from './core/review.ts';
+export { promoteScenario, ApprovedPlanReview, type ApprovedPlanSnapshot, type ScenarioPromotionPorts } from './core/sourcePromotion.ts';
+export { ReviewedSourceDocuments, validateReviewedSourceDocuments, validateReviewedSourceSelection } from './core/sourceReviewEvidence.ts';
+export type { LocalScenarioPromotionAuthority } from './core/localScenarioPromotion.ts';
+export { registerQualificationRound, invalidateScenario, qualificationStrataDigest, ScenarioRevisionToken, type ScenarioPorts, type ScenarioSnapshot } from './core/scenario.ts';
+export { LocalScenarioStore, type LocalScenarioAuthority } from './core/localScenarioStore.ts';
+export type { LocalScenarioActivationAuthority } from './core/localScenarioActivation.ts';
+export { validateScenarioStructure, type ScenarioStructurePorts } from './core/scenarioStructure.ts';
+export type { LocalScenarioStructureAuthority } from './core/localScenarioStructure.ts';
+export { prepareQualificationExecution } from './core/qualificationBundle.ts';
+export { QualificationExecutionContext, localQualificationExecutionOwner, type QualificationExecutionOwner } from './core/qualificationExecution.ts';
+export { reduceQualificationRound, type QualificationResultPorts } from './core/qualification.ts';
+export { LocalQualificationResults, type LocalQualificationResultAuthority, type RetainedQualificationRound } from './core/localQualificationResults.ts';
+export { assessScenarioReplay, type ReplayAssessmentPorts } from './core/replayAssessment.ts';
+export { activateScenario, type ScenarioActivationPorts } from './core/scenarioActivation.ts';
+export { SourceCitation, verifySourceCitation, SOURCE_FILE_MAX_BYTES, type SourceCitationPorts } from './core/source-citation.ts';
+export { validatePlanSources, MAX_SOURCE_DIFF_BYTES, type SourceAnalysisPorts } from './core/source-analysis.ts';
+export { resolveGitSources, GitSourceReader, GIT_RESOLVER_REF, type GitSourceAuthorization } from './core/gitSources.ts';
+export { snapshotRepository, snapshotSourceSelection } from './core/snapshotRepository.ts';
+export { materializeGitSnapshot } from './core/gitSnapshot.ts';
+export { readGitSnapshotManifest, readGitSnapshotTree } from './source/snapshotTree.ts';
+export { verifyGitSnapshotCommit, verifyGitSnapshotProofMetadata } from './source/gitObjectProof.ts';
+export { exportVerifiedBundle, verifyBundle, readVerifiedBundle, readVerifiedVideo, VerifiedBundleSnapshot, writeExecutionBundle, BUNDLE_LIMITS, type VerifiedBundleRecords } from './core/bundle.ts';
+export { LocalResultSink, type ResultSink, type ResultSinkAuthority, type RetainedResult, type ResultPage, type ResultIngestOptions } from './core/resultSink.ts';
+export { compileCase } from './core/compiler.ts';
+export { evaluatePredicate, evaluateAssertions, reduceCell, reduceCampaign, REDUCER_REF } from './core/reducer.ts';
+export { materializeLogicalPayload } from './core/generators.ts';
+export { Blocked, Conflict, InfrastructureFailure } from './core/errors.ts';
+export { HTTP_RUNNER_CAPABILITIES } from './adapters/http/capabilities.ts';
+export { NATIVE_JOB_RUNNER_CAPABILITIES } from './adapters/job/capabilities.ts';
+export { NativeJobDriver, NativeJobError } from './adapters/job/driver.ts';
+export type { NativeJobSession } from './adapters/job/types.ts';
+export { BrowserDriver, BrowserStepError } from './adapters/browser/driver.ts';
+export { LocalProcessHost, sourceIdentityDigest } from './hosts/local.ts';
+export { MockLoopbackHost } from './hosts/mock.ts';
+export type { ExecutorHost, HostSession, HostStartContext } from './hosts/types.ts';
+export * from './core/capabilityBoundary.ts';
+export * from './core/capabilityLifecycle.ts';
+export * from './core/environmentPreflight.ts';

package/dist/index.js

@@ -0,0 +1,52 @@
+export * from "./protocol/index.js";
+export { loadProject, localScope, CorpusStore, ProjectLoader } from "./core/corpus.js";
+export { plan, runnerCapabilitiesFor } from "./core/planner.js";
+export { FrozenBundle, PlanBlocker, readFrozenBundle, FROZEN_BUNDLE_MAX_BYTES } from "./core/frozenBundle.js";
+export { FrozenPlanInspection, inspectFrozenPlan } from "./core/planInspection.js";
+export { ExecutionInspection, FailedStepInspection, inspectExecution, inspectFailedSteps } from "./core/executionInspection.js";
+export { exportVerifiedBundle as exportCapturedBundle } from "./core/bundleExport.js";
+export { executeBundle, EXIT_CODES } from "./core/executor.js";
+export { LocalLedger } from "./core/ledger.js";
+export { LocalDeliveryJournal } from "./core/deliveryJournal.js";
+export { LocalReviewStore } from "./core/localReviewStore.js";
+export { deriveCleanupExpectation } from "./core/ownership.js";
+export { signCleanupFollowup, verifyCleanupFollowup, cleanupExpectationDigest } from "./core/cleanupAttestation.js";
+export { CoordinationSnapshotSchema, CoordinationCommandSchema, transitionCoordination, commitCoordination } from "./core/coordination.js";
+export { startController, delegateRun } from "./core/controller.js";
+export { searchCases, getCase } from "./core/lookup.js";
+export { createRerun } from "./core/rerun.js";
+export { editPlan, reviewPlan } from "./core/review.js";
+export { promoteScenario, ApprovedPlanReview } from "./core/sourcePromotion.js";
+export { ReviewedSourceDocuments, validateReviewedSourceDocuments, validateReviewedSourceSelection } from "./core/sourceReviewEvidence.js";
+export { registerQualificationRound, invalidateScenario, qualificationStrataDigest, ScenarioRevisionToken } from "./core/scenario.js";
+export { LocalScenarioStore } from "./core/localScenarioStore.js";
+export { validateScenarioStructure } from "./core/scenarioStructure.js";
+export { prepareQualificationExecution } from "./core/qualificationBundle.js";
+export { QualificationExecutionContext, localQualificationExecutionOwner } from "./core/qualificationExecution.js";
+export { reduceQualificationRound } from "./core/qualification.js";
+export { LocalQualificationResults } from "./core/localQualificationResults.js";
+export { assessScenarioReplay } from "./core/replayAssessment.js";
+export { activateScenario } from "./core/scenarioActivation.js";
+export { SourceCitation, verifySourceCitation, SOURCE_FILE_MAX_BYTES } from "./core/source-citation.js";
+export { validatePlanSources, MAX_SOURCE_DIFF_BYTES } from "./core/source-analysis.js";
+export { resolveGitSources, GitSourceReader, GIT_RESOLVER_REF } from "./core/gitSources.js";
+export { snapshotRepository, snapshotSourceSelection } from "./core/snapshotRepository.js";
+export { materializeGitSnapshot } from "./core/gitSnapshot.js";
+export { readGitSnapshotManifest, readGitSnapshotTree } from "./source/snapshotTree.js";
+export { verifyGitSnapshotCommit, verifyGitSnapshotProofMetadata } from "./source/gitObjectProof.js";
+export { exportVerifiedBundle, verifyBundle, readVerifiedBundle, readVerifiedVideo, VerifiedBundleSnapshot, writeExecutionBundle, BUNDLE_LIMITS } from "./core/bundle.js";
+export { LocalResultSink } from "./core/resultSink.js";
+export { compileCase } from "./core/compiler.js";
+export { evaluatePredicate, evaluateAssertions, reduceCell, reduceCampaign, REDUCER_REF } from "./core/reducer.js";
+export { materializeLogicalPayload } from "./core/generators.js";
+export { Blocked, Conflict, InfrastructureFailure } from "./core/errors.js";
+export { HTTP_RUNNER_CAPABILITIES } from "./adapters/http/capabilities.js";
+export { NATIVE_JOB_RUNNER_CAPABILITIES } from "./adapters/job/capabilities.js";
+export { NativeJobDriver, NativeJobError } from "./adapters/job/driver.js";
+export { BrowserDriver, BrowserStepError } from "./adapters/browser/driver.js";
+export { LocalProcessHost, sourceIdentityDigest } from "./hosts/local.js";
+export { MockLoopbackHost } from "./hosts/mock.js";
+export * from "./core/capabilityBoundary.js";
+export * from "./core/capabilityLifecycle.js";
+export * from "./core/environmentPreflight.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAgB,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAC9G,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAChI,OAAO,EAAE,oBAAoB,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAoC,MAAM,oBAAoB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAA0C,MAAM,2BAA2B,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAA6B,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,wBAAwB,EAAwB,MAAM,8BAA8B,CAAC;AAC1I,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,kBAAkB,EAAuG,MAAM,wBAAwB,CAAC;AAChP,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAA6C,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAA0D,MAAM,2BAA2B,CAAC;AACxI,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AAE3I,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,qBAAqB,EAA6C,MAAM,oBAAoB,CAAC;AACjL,OAAO,EAAE,kBAAkB,EAA+B,MAAM,8BAA8B,CAAC;AAE/F,OAAO,EAAE,yBAAyB,EAA+B,MAAM,6BAA6B,CAAC;AAErG,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,gCAAgC,EAAoC,MAAM,kCAAkC,CAAC;AACrJ,OAAO,EAAE,wBAAwB,EAAiC,MAAM,yBAAyB,CAAC;AAClG,OAAO,EAAE,yBAAyB,EAA2E,MAAM,qCAAqC,CAAC;AACzJ,OAAO,EAAE,oBAAoB,EAA8B,MAAM,4BAA4B,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAgC,MAAM,8BAA8B,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,qBAAqB,EAA4B,MAAM,2BAA2B,CAAC;AAClI,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAA4B,MAAM,2BAA2B,CAAC;AACjH,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAA+B,MAAM,sBAAsB,CAAC;AACzH,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,aAAa,EAA8B,MAAM,kBAAkB,CAAC;AACtM,OAAO,EAAE,eAAe,EAA6G,MAAM,sBAAsB,CAAC;AAClK,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnH,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE3E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC"}

package/dist/integrations/awr/attachment.d.ts

@@ -0,0 +1,34 @@
+import { LocalLedger } from '../../core/ledger.ts';
+import { LocalResultSink } from '../../core/resultSink.ts';
+import { type Scope } from '../../protocol/index.ts';
+import { LocalAwrOutbox } from './outbox.ts';
+import { AwrDestination } from './contracts.ts';
+import { PreparedReportAttachment, ReportAttachmentAcknowledgement, ReportWorkTarget } from './attachmentContracts.ts';
+export interface ReportAttachmentAuthority {
+    authorize(scope: Scope, destination: AwrDestination, target: ReportWorkTarget, action: 'prepare' | 'read' | 'attach'): Promise<void>;
+}
+export interface ReportAttachmentTransport {
+    readReceipt(intent: PreparedReportAttachment): Promise<unknown>;
+    attach(intent: PreparedReportAttachment): Promise<unknown>;
+}
+export type ReportAttachmentState = {
+    prepared: PreparedReportAttachment;
+    attempts: number;
+    acknowledgement: ReportAttachmentAcknowledgement | null;
+    status: 'prepared' | 'acknowledgement_unknown' | 'attached';
+    recordedArtifactStatus: ReportAttachmentAcknowledgement['data']['status'] | null;
+    nativeAcceptance: 'not_requested';
+};
+/** Attach the already-imported private report. No publishing, completion or product execution authority. */
+export declare class LocalReportAttachmentOutbox {
+    private readonly sink;
+    private readonly awr;
+    private readonly authority;
+    private readonly scope;
+    private readonly journal;
+    constructor(ledger: LocalLedger, sink: LocalResultSink, awr: LocalAwrOutbox, scope: Scope, authority: ReportAttachmentAuthority);
+    private authorize;
+    prepare(resultId: string, rawTarget: ReportWorkTarget): Promise<ReportAttachmentState>;
+    inspect(resultId: string): Promise<ReportAttachmentState>;
+    deliver(resultId: string, transport: ReportAttachmentTransport): Promise<ReportAttachmentState>;
+}

package/dist/integrations/awr/attachment.js

@@ -0,0 +1,120 @@
+import { canonicalizeAgentWorkJson } from '@useorgx/agent-work-receipt';
+import { LocalDeliveryJournal } from "../../core/deliveryJournal.js";
+import { LocalLedger } from "../../core/ledger.js";
+import { LocalResultSink } from "../../core/resultSink.js";
+import { Conflict } from "../../core/errors.js";
+import { nowIso } from "../../core/clock.js";
+import { ScopeSchema, WorkflowEvidenceProjection, digestOfBytes, digestOfValue, freeze, sameDigest, sameRef, sameScope } from "../../protocol/index.js";
+import { LocalAwrOutbox } from "./outbox.js";
+import { AwrDestination } from "./contracts.js";
+import { HostedReceiptReadback, PreparedReportAttachment, ReportAttachmentAcknowledgement, ReportWorkTarget } from "./attachmentContracts.js";
+const identity = (scope, resultId) => `report-attachment-${digestOfValue({ scope, resultId }).hex}`;
+const receiptDigest = (state) => digestOfBytes(canonicalizeAgentWorkJson(state.prepared.receipt));
+function asState(state) {
+    const { prepared, attempts, acknowledgement } = state;
+    return { prepared, attempts, acknowledgement, status: acknowledgement ? 'attached' : attempts ? 'acknowledgement_unknown' : 'prepared',
+        recordedArtifactStatus: acknowledgement?.data.status ?? null, nativeAcceptance: 'not_requested' };
+}
+function checkAck(intent, ack) {
+    const row = ack.data;
+    if (row.id !== intent.payload.artifact_id || row.workspace_id !== intent.destination.workspaceId || row.entity_type !== intent.target.entityType || row.entity_id !== intent.target.entityId ||
+        row.artifact_url !== intent.payload.artifact_url || !sameDigest(digestOfValue(row.metadata.tracegrove), digestOfValue(intent.payload.metadata.tracegrove)))
+        throw new Conflict('Artifact acknowledgement differs from the frozen work, scope, or evidence');
+}
+/** Attach the already-imported private report. No publishing, completion or product execution authority. */
+export class LocalReportAttachmentOutbox {
+    sink;
+    awr;
+    authority;
+    scope;
+    journal;
+    constructor(ledger, sink, awr, scope, authority) {
+        this.sink = sink;
+        this.awr = awr;
+        this.authority = authority;
+        this.scope = ScopeSchema.parse(scope);
+        this.journal = new LocalDeliveryJournal(ledger, this.scope, { prepared: 'workflow.report.prepared', attempted: 'workflow.report.attempted', acknowledged: 'workflow.report.attached' }, {
+            prepared: raw => {
+                if (raw && typeof raw === 'object' && 'schemaVersion' in raw && raw.schemaVersion === 'workflow.report-attachment/v1') {
+                    throw new Conflict('Legacy attachment has no atomic work snapshot. Preserve its journal and reconcile with the original sender; it cannot be upgraded or resent as scoped evidence.');
+                }
+                return PreparedReportAttachment.parse(raw);
+            }, acknowledgement: raw => ReportAttachmentAcknowledgement.parse(raw), checkAcknowledgement: checkAck,
+        });
+    }
+    async authorize(intent, action) {
+        await this.authority.authorize(structuredClone(this.scope), structuredClone(intent.destination), structuredClone(intent.target), action);
+    }
+    async prepare(resultId, rawTarget) {
+        const target = ReportWorkTarget.parse(rawTarget);
+        const source = await this.awr.inspect(resultId);
+        if (!source.acknowledgement)
+            throw new Conflict('Receipt import must be acknowledged before report attachment');
+        if (target.workspaceId !== source.prepared.destination.workspaceId)
+            throw new Conflict('Work snapshot belongs to another destination workspace');
+        await this.authority.authorize(structuredClone(this.scope), structuredClone(source.prepared.destination), structuredClone(target), 'prepare');
+        const result = await this.sink.get(resultId);
+        if (!sameScope(result.receipt.scope, this.scope) || !sameRef(result.receipt.ref, source.prepared.resultRef))
+            throw new Conflict('Retained result belongs to another delivery scope or ref');
+        const projection = WorkflowEvidenceProjection.parse(source.prepared.receipt.extensions?.['org.tracegrove.workflow']);
+        if (!projection.workBinding || projection.workBinding.workId !== target.entityId)
+            throw new Conflict('Attachment target must match the campaign’s frozen work binding');
+        const id = identity(this.scope, resultId);
+        const existing = this.journal.read(id);
+        if (existing) {
+            if (!sameDigest(digestOfValue(existing.prepared.target), digestOfValue(target)))
+                throw new Conflict('Attachment is already bound to another work target');
+            return asState(existing);
+        }
+        const digest = receiptDigest(source);
+        const hostedReceiptId = source.acknowledgement.receipt_id;
+        const key = digestOfValue({ result: result.receipt.ref, delivery: source.prepared.ref, hostedReceiptId, target }).hex;
+        const artifactId = `${key.slice(0, 8)}-${key.slice(8, 12)}-4${key.slice(13, 16)}-a${key.slice(17, 20)}-${key.slice(20, 32)}`;
+        const intent = PreparedReportAttachment.parse(freeze({ schemaVersion: 'workflow.report-attachment/v2', ref: { id, revision: '1' },
+            scope: this.scope, resultRef: result.receipt.ref, deliveryRef: source.prepared.ref, destination: source.prepared.destination, target,
+            hostedReceiptId, receiptDigest: digest, idempotencyKey: `tracegrove-report-${key}`, preparedAt: nowIso(),
+            payload: { artifact_id: artifactId, entity_type: target.entityType, entity_id: target.entityId,
+                expected_scope: { workspace_id: target.workspaceId, expected_updated_at: target.expectedUpdatedAt },
+                name: `Workflow evidence: ${projection.campaignId}`, artifact_type: 'proof.link',
+                artifact_url: `${source.prepared.destination.origin}/work-ledger/receipts/${hostedReceiptId}`,
+                description: `Retained workflow evidence. Product outcome: ${projection.productOutcome}. Imported evidence awaits review.`,
+                preview_markdown: `Product outcome: **${projection.productOutcome}**\n\nPlanned lanes: ${projection.plannedLanes.join(', ')}.\n\nThis imported report does not approve or complete work.`,
+                status: 'in_review', created_by_type: 'agent', metadata: { tracegrove: { schemaVersion: 'workflow.report-attachment/v2',
+                        resultRef: result.receipt.ref, deliveryRef: source.prepared.ref, requestRef: projection.requestRef,
+                        hostedReceiptId, receiptDigest: digest, claim: 'external_unverified', nativeAcceptance: 'not_requested' } } },
+        }));
+        await this.authorize(intent, 'prepare');
+        if (this.journal.read(id))
+            return this.prepare(resultId, target);
+        return asState(this.journal.prepare(intent));
+    }
+    async inspect(resultId) {
+        const state = this.journal.read(identity(this.scope, resultId));
+        if (!state || state.prepared.resultRef.id !== resultId)
+            throw new Conflict('No prepared report attachment for this result');
+        await this.authorize(state.prepared, 'read');
+        return asState(state);
+    }
+    async deliver(resultId, transport) {
+        return this.journal.whileIdle(identity(this.scope, resultId), async () => {
+            const state = await this.inspect(resultId);
+            const intent = state.prepared;
+            await this.authorize(intent, 'attach');
+            if (state.acknowledgement)
+                return state;
+            const source = await this.awr.inspect(resultId);
+            const result = await this.sink.get(resultId);
+            if (!sameScope(result.receipt.scope, this.scope) || !sameRef(result.receipt.ref, intent.resultRef) || !sameRef(source.prepared.ref, intent.deliveryRef) ||
+                source.acknowledgement?.receipt_id !== intent.hostedReceiptId || !sameDigest(receiptDigest(source), intent.receiptDigest))
+                throw new Conflict('Imported report differs from the frozen attachment');
+            const readback = HostedReceiptReadback.parse(await transport.readReceipt(structuredClone(intent)));
+            if (readback.data.receipt_id !== intent.hostedReceiptId || !sameDigest(digestOfBytes(canonicalizeAgentWorkJson(readback.data.receipt)), intent.receiptDigest))
+                throw new Conflict('Hosted receipt readback differs from the exact imported report');
+            await this.authorize(intent, 'attach');
+            const attempt = this.journal.attempt(intent.ref.id);
+            const acknowledgement = await transport.attach(structuredClone(intent));
+            return asState(this.journal.acknowledge(intent.ref.id, attempt.version, acknowledgement));
+        });
+    }
+}
+//# sourceMappingURL=attachment.js.map

package/dist/integrations/awr/attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.js","sourceRoot":"","sources":["../../../src/integrations/awr/attachment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAsB,MAAM,+BAA+B,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAc,MAAM,yBAAyB,CAAC;AACpK,OAAO,EAAE,cAAc,EAAyB,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAM9I,MAAM,QAAQ,GAAG,CAAC,KAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,qBAAqB,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;AACnH,MAAM,aAAa,GAAG,CAAC,KAAuB,EAAE,EAAE,CAAC,aAAa,CAAC,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACpH,SAAS,OAAO,CAAC,KAA+E;IAC9F,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;IACtD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,UAAU;QACpI,sBAAsB,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;AACtG,CAAC;AACD,SAAS,QAAQ,CAAC,MAAgC,EAAE,GAAoC;IACtF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;IACrB,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,WAAW,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ;QACxL,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,2EAA2E,CAAC,CAAC;AAClQ,CAAC;AAED,4GAA4G;AAC5G,MAAM,OAAO,2BAA2B;IAGY;IAAwC;IAAoD;IAF7H,KAAK,CAAQ;IACb,OAAO,CAAkF;IAC1G,YAAY,MAAmB,EAAmB,IAAqB,EAAmB,GAAmB,EAAE,KAAY,EAAmB,SAAoC;QAAhI,SAAI,GAAJ,IAAI,CAAiB;QAAmB,QAAG,GAAH,GAAG,CAAgB;QAAiC,cAAS,GAAT,SAAS,CAA2B;QAChL,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,2BAA2B,EAAE,YAAY,EAAE,0BAA0B,EAAE,EAAE;YACtL,QAAQ,EAAE,GAAG,CAAC,EAAE;gBACd,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,KAAK,+BAA+B,EAAE,CAAC;oBACtH,MAAM,IAAI,QAAQ,CAAC,iKAAiK,CAAC,CAAC;gBACxL,CAAC;gBACD,OAAO,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,oBAAoB,EAAE,QAAQ;SACtG,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,SAAS,CAAC,MAAgC,EAAE,MAAqC;QAC7F,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3I,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,SAA2B;QACzD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClG,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,MAAM,IAAI,QAAQ,CAAC,8DAA8D,CAAC,CAAC;QAChH,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW;YAAE,MAAM,IAAI,QAAQ,CAAC,wDAAwD,CAAC,CAAC;QACjJ,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9I,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,0DAA0D,CAAC,CAAC;QAC5L,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACrH,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,iEAAiE,CAAC,CAAC;QACxK,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YAC1J,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC;QAChG,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC;QACtH,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7H,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,+BAAwC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;YACxI,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM;YACpI,eAAe,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,qBAAqB,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;YACxG,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC5F,cAAc,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,mBAAmB,EAAE,MAAM,CAAC,iBAAiB,EAAE;gBACnG,IAAI,EAAE,sBAAsB,UAAU,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,YAAqB;gBACzF,YAAY,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,yBAAyB,eAAe,EAAE;gBAC7F,WAAW,EAAE,gDAAgD,UAAU,CAAC,cAAc,oCAAoC;gBAC1H,gBAAgB,EAAE,sBAAsB,UAAU,CAAC,cAAc,wBAAwB,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,8DAA8D;gBACzL,MAAM,EAAE,WAAoB,EAAE,eAAe,EAAE,OAAgB,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,+BAAwC;wBAChJ,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU;wBAClG,eAAe,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,qBAA8B,EAAE,gBAAgB,EAAE,eAAwB,EAAE,EAAE,EAAE;SACpI,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QAC7L,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,SAAoC;QAClE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAAC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAClH,IAAI,KAAK,CAAC,eAAe;gBAAE,OAAO,KAAK,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAAC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9F,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC;gBACnJ,MAAM,CAAC,eAAe,EAAE,UAAU,KAAK,MAAM,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACxM,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnG,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,yBAAyB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,gEAAgE,CAAC,CAAC;YACpP,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpD,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YACxE,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}