tracegrove 0.0.0-stage → 0.3.0

package/dist/integrations/awr/jsonHttp.js

@@ -0,0 +1,69 @@
+import { Blocked, Conflict, InfrastructureFailure } from "../../core/errors.js";
+import { AwrDestination } from "./contracts.js";
+/** Authenticated same-origin JSON only. Never persists credentials, raw responses or provider errors. */
+export class OrgxJsonHttpClient {
+    credential;
+    fetcher;
+    constructor(credential, fetcher = fetch) {
+        this.credential = credential;
+        this.fetcher = fetcher;
+    }
+    async request(input) {
+        const origin = AwrDestination.shape.origin.parse(input.origin);
+        const url = new URL(input.path, origin);
+        if (url.origin !== origin || url.username || url.password || url.hash)
+            throw new InfrastructureFailure('OrgX request must stay on the configured origin');
+        const unavailable = () => new InfrastructureFailure(`OrgX ${input.operation} acknowledgement unavailable; retry the saved delivery with the same key`);
+        let response;
+        try {
+            const token = await this.credential();
+            if (!token || /[\r\n]/.test(token))
+                throw new Error('Credential unavailable');
+            response = await this.fetcher(url.href, {
+                method: input.method, redirect: 'error', signal: AbortSignal.timeout(15_000),
+                headers: { authorization: `Bearer ${token}`, ...(input.body === undefined ? {} : { 'content-type': 'application/json' }),
+                    ...(input.idempotencyKey ? { 'idempotency-key': input.idempotencyKey } : {}) },
+                ...(input.body === undefined ? {} : { body: JSON.stringify(input.body) }),
+            });
+        }
+        catch {
+            throw unavailable();
+        }
+        if (!response.ok) {
+            await response.body?.cancel().catch(() => { });
+            if (response.status === 409)
+                throw new Conflict(`OrgX ${input.operation} conflicts with the saved scope, version, or retry input. Preserve the delivery and reconcile its native receipt before preparing a new request.`);
+            if ([400, 401, 403, 404, 422].includes(response.status))
+                throw new Blocked([{ code: 'orgx_delivery_rejected',
+                        detail: `OrgX ${input.operation} was rejected (HTTP ${response.status}).`,
+                        action: 'Check credentials, workspace access, work snapshot, and server contract. Preserve the saved delivery; do not remove its scope assertion or replace its retry key.' }]);
+            throw unavailable();
+        }
+        try {
+            if (!response.body)
+                throw new Error('Response unavailable');
+            const reader = response.body.getReader();
+            const chunks = [];
+            let size = 0;
+            try {
+                for (;;) {
+                    const part = await reader.read();
+                    if (part.done)
+                        break;
+                    size += part.value.length;
+                    if (size > input.maximumBytes)
+                        throw new Error('Oversize response');
+                    chunks.push(part.value);
+                }
+            }
+            finally {
+                await reader.cancel().catch(() => { });
+            }
+            return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        }
+        catch {
+            throw unavailable();
+        }
+    }
+}
+//# sourceMappingURL=jsonHttp.js.map

package/dist/integrations/awr/jsonHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonHttp.js","sourceRoot":"","sources":["../../../src/integrations/awr/jsonHttp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,yGAAyG;AACzG,MAAM,OAAO,kBAAkB;IACA;IAAoD;IAAjF,YAA6B,UAAiC,EAAmB,UAAwB,KAAK;QAAjF,eAAU,GAAV,UAAU,CAAuB;QAAmB,YAAO,GAAP,OAAO,CAAsB;IAAG,CAAC;IAClH,KAAK,CAAC,OAAO,CAAC,KAC4E;QACxF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,qBAAqB,CAAC,iDAAiD,CAAC,CAAC;QAC1J,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,qBAAqB,CAAC,QAAQ,KAAK,CAAC,SAAS,0EAA0E,CAAC,CAAC;QACvJ,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACrH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;gBACtC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC5E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;oBACtH,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBAChF,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC,SAAS,kJAAkJ,CAAC,CAAC;YAC3N,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB;wBAC1G,MAAM,EAAE,QAAQ,KAAK,CAAC,SAAS,uBAAuB,QAAQ,CAAC,MAAM,IAAI;wBACzE,MAAM,EAAE,mKAAmK,EAAE,CAAC,CAAC,CAAC;YAClL,MAAM,WAAW,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YACxF,IAAI,CAAC;gBACH,SAAS,CAAC;oBAAC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAAC,IAAI,IAAI,CAAC,IAAI;wBAAE,MAAM;oBAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC3F,IAAI,IAAI,GAAG,KAAK,CAAC,YAAY;wBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;YACnG,CAAC;oBAAS,CAAC;gBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACpD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/integrations/awr/outbox.d.ts

@@ -0,0 +1,28 @@
+import { LocalLedger } from '../../core/ledger.ts';
+import { LocalResultSink } from '../../core/resultSink.ts';
+import { type Scope } from '../../protocol/index.ts';
+import { AwrAcknowledgement, AwrDestination, PreparedAwrDelivery } from './contracts.ts';
+export interface AwrDeliveryAuthority {
+    authorize(scope: Scope, destination: AwrDestination, action: 'prepare' | 'read' | 'deliver'): Promise<void>;
+}
+export interface AwrTransport {
+    import(delivery: PreparedAwrDelivery): Promise<unknown>;
+}
+export type AwrDeliveryState = {
+    prepared: PreparedAwrDelivery;
+    attempts: number;
+    status: 'prepared' | 'acknowledgement_unknown' | 'imported_unverified';
+    acknowledgement: AwrAcknowledgement | null;
+};
+/** Durable immutable intent plus idempotent network reconciliation. Never invokes execution. */
+export declare class LocalAwrOutbox {
+    private readonly sink;
+    private readonly authority;
+    private readonly scope;
+    private readonly journal;
+    constructor(ledger: LocalLedger, sink: LocalResultSink, scope: Scope, authority: AwrDeliveryAuthority);
+    private load;
+    prepare(resultId: string, destination: AwrDestination): Promise<AwrDeliveryState>;
+    inspect(resultId: string): Promise<AwrDeliveryState>;
+    deliver(resultId: string, transport: AwrTransport): Promise<AwrDeliveryState>;
+}

package/dist/integrations/awr/outbox.js

@@ -0,0 +1,88 @@
+import { canonicalizeAgentWorkJson, verifyAgentWorkReceiptIntegrity } from '@useorgx/agent-work-receipt';
+import { LocalLedger } from "../../core/ledger.js";
+import { LocalDeliveryJournal } from "../../core/deliveryJournal.js";
+import { LocalResultSink } from "../../core/resultSink.js";
+import { Conflict } from "../../core/errors.js";
+import { nowIso } from "../../core/clock.js";
+import { ScopeSchema, digestOfValue, freeze, sameDigest, sameRef, sameScope } from "../../protocol/index.js";
+import { AwrAcknowledgement, AwrDestination, PreparedAwrDelivery, checkedAwrDocument } from "./contracts.js";
+import { projectAwr } from "./projection.js";
+const identity = (scope, resultId) => `awr-delivery-${digestOfValue({ scope, resultId }).hex}`;
+/** Durable immutable intent plus idempotent network reconciliation. Never invokes execution. */
+export class LocalAwrOutbox {
+    sink;
+    authority;
+    scope;
+    journal;
+    constructor(ledger, sink, scope, authority) {
+        this.sink = sink;
+        this.authority = authority;
+        this.scope = ScopeSchema.parse(scope);
+        this.journal = new LocalDeliveryJournal(ledger, this.scope, { prepared: 'workflow.awr.prepared', attempted: 'workflow.awr.attempted', acknowledged: 'workflow.awr.imported' }, {
+            prepared: raw => { const intent = PreparedAwrDelivery.parse(raw); checkedAwrDocument(intent.receipt); return intent; },
+            acknowledgement: raw => AwrAcknowledgement.parse(raw),
+            checkAcknowledgement: (prepared, ack) => { if (ack.external_receipt_id !== prepared.receipt.receipt_id)
+                throw new Conflict('Delivery response belongs to another receipt'); },
+        });
+    }
+    load(resultId) {
+        const state = this.journal.read(identity(this.scope, resultId));
+        if (!state)
+            return null;
+        const { prepared, attempts, acknowledgement } = state;
+        if (prepared.resultRef.id !== resultId)
+            throw new Conflict('Delivery intent refers to another retained result');
+        return { prepared, attempts, acknowledgement, status: acknowledgement ? 'imported_unverified' : attempts ? 'acknowledgement_unknown' : 'prepared' };
+    }
+    async prepare(resultId, destination) {
+        destination = AwrDestination.parse(destination);
+        await this.authority.authorize(structuredClone(this.scope), structuredClone(destination), 'prepare');
+        const result = await this.sink.get(resultId);
+        const existing = this.load(resultId);
+        if (!sameScope(result.receipt.scope, this.scope))
+            throw new Conflict('Retained result belongs to another delivery scope');
+        if (existing) {
+            if (!sameDigest(digestOfValue(existing.prepared.destination), digestOfValue(destination)))
+                throw new Conflict('Result delivery is already bound to another destination');
+            return existing;
+        }
+        const preparedAt = nowIso();
+        const receipt = await projectAwr(result, preparedAt);
+        const prepared = PreparedAwrDelivery.parse(freeze({ schemaVersion: 'workflow.awr-delivery/v1',
+            ref: { id: identity(this.scope, resultId), revision: '1' }, scope: this.scope, resultRef: result.receipt.ref,
+            destination, receipt, preparedAt, idempotencyKey: `tracegrove-awr-${digestOfValue({ receipt: canonicalizeAgentWorkJson(receipt), destination }).hex}` }));
+        await this.authority.authorize(structuredClone(this.scope), structuredClone(destination), 'prepare');
+        if (this.load(resultId))
+            return this.prepare(resultId, destination);
+        this.journal.prepare(prepared);
+        return this.load(resultId);
+    }
+    async inspect(resultId) {
+        const state = this.load(resultId);
+        if (!state)
+            throw new Conflict('No prepared delivery for this result');
+        await this.authority.authorize(structuredClone(this.scope), structuredClone(state.prepared.destination), 'read');
+        return state;
+    }
+    async deliver(resultId, transport) {
+        return this.journal.whileIdle(identity(this.scope, resultId), async () => {
+            let state = await this.inspect(resultId);
+            await this.authority.authorize(structuredClone(this.scope), structuredClone(state.prepared.destination), 'deliver');
+            if (state.acknowledgement)
+                return state;
+            const result = await this.sink.get(resultId);
+            if (!sameScope(result.receipt.scope, this.scope) || !sameRef(result.receipt.ref, state.prepared.resultRef))
+                throw new Conflict('Retained result differs from the frozen delivery');
+            const integrity = await verifyAgentWorkReceiptIntegrity(state.prepared.receipt);
+            if (integrity.content_hash.state !== 'verified')
+                throw new Conflict('Prepared AWR content hash differs');
+            await this.authority.authorize(structuredClone(this.scope), structuredClone(state.prepared.destination), 'deliver');
+            state = this.load(resultId);
+            const attempt = this.journal.attempt(state.prepared.ref.id);
+            const acknowledgement = await transport.import(structuredClone(state.prepared));
+            this.journal.acknowledge(state.prepared.ref.id, attempt.version, acknowledgement);
+            return this.load(resultId);
+        });
+    }
+}
+//# sourceMappingURL=outbox.js.map

package/dist/integrations/awr/outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../../src/integrations/awr/outbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAc,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC7G,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAK7C,MAAM,QAAQ,GAAG,CAAC,KAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,gBAAgB,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;AAE9G,gGAAgG;AAChG,MAAM,OAAO,cAAc;IAGyB;IAAsD;IAFvF,KAAK,CAAQ;IACb,OAAO,CAAgE;IACxF,YAAY,MAAmB,EAAmB,IAAqB,EAAE,KAAY,EAAmB,SAA+B;QAArF,SAAI,GAAJ,IAAI,CAAiB;QAAiC,cAAS,GAAT,SAAS,CAAsB;QACrI,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EACxD,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,EAAE,wBAAwB,EAAE,YAAY,EAAE,uBAAuB,EAAE,EAAE;YACjH,QAAQ,EAAE,GAAG,CAAC,EAAE,GAAG,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC;YACtH,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;YACrD,oBAAoB,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,mBAAmB,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU;gBAAE,MAAM,IAAI,QAAQ,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC;SAC9K,CAAC,CAAC;IACP,CAAC;IACO,IAAI,CAAC,QAAgB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACzF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;QACtD,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,mDAAmD,CAAC,CAAC;QAChH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACtJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,WAA2B;QACzD,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,mDAAmD,CAAC,CAAC;QAC1H,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;YACzK,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;QAAC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,0BAAmC;YACpG,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;YAC5G,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,aAAa,CAAC,EAAE,OAAO,EAAE,yBAAyB,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5J,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;QACrG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QAC1G,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACjH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,SAAuB;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAK,IAAI,EAAE;YACvE,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;YACpH,IAAI,KAAK,CAAC,eAAe;gBAAE,OAAO,KAAK,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,kDAAkD,CAAC,CAAC;YACnL,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChF,IAAI,SAAS,CAAC,YAAY,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,IAAI,QAAQ,CAAC,mCAAmC,CAAC,CAAC;YACzG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;YACpH,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5D,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChF,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/integrations/awr/projection.d.ts

@@ -0,0 +1,4 @@
+import { type AgentWorkReceipt } from '@useorgx/agent-work-receipt';
+import type { RetainedResult } from '../../core/resultSink.ts';
+/** Redacted export effort, not an assertion of target success or native work acceptance. */
+export declare function projectAwr(result: RetainedResult, preparedAt: string): Promise<AgentWorkReceipt>;

package/dist/integrations/awr/projection.js

@@ -0,0 +1,54 @@
+import { withAgentWorkReceiptContentHash } from '@useorgx/agent-work-receipt';
+import { VerifiedBundleSnapshot } from "../../core/bundle.js";
+import { Conflict } from "../../core/errors.js";
+import { WorkflowEvidenceProjection, digestOfValue, sameDigest } from "../../protocol/index.js";
+import { checkedAwrDocument } from "./contracts.js";
+const external = (ref, type) => ({ system: 'tracegrove', type, id: ref.id, version: ref.revision,
+    digest: { algorithm: 'sha256', value: ref.digest.hex, encoding: 'hex' } });
+/** Redacted export effort, not an assertion of target success or native work acceptance. */
+export async function projectAwr(result, preparedAt) {
+    const records = VerifiedBundleSnapshot.open(result.bundleDir).records;
+    if (!sameDigest(records.manifestDigest, result.receipt.manifestDigest))
+        throw new Conflict('Retained archive changed before projection');
+    const manifest = { system: 'tracegrove', type: 'bundle-manifest', id: records.campaign.campaignId,
+        digest: { algorithm: 'sha256', value: records.manifestDigest.hex, encoding: 'hex' } };
+    const projection = WorkflowEvidenceProjection.parse({
+        schemaVersion: 'workflow.evidence-projection/v1', campaignId: records.campaign.campaignId,
+        campaignRef: records.campaign.ref, requestRef: records.request.ref, selectionRef: records.selection.ref,
+        manifestDigest: records.manifestDigest, productOutcome: records.campaign.outcome, plannedLanes: result.receipt.plannedLanes,
+        workBinding: records.request.workBinding, issuerStatus: 'unverified', qualificationStatus: 'not_evaluated',
+        nativeAcceptance: 'not_requested', nativeOutcome: 'not_observed', media: 'withheld', payloads: 'withheld',
+        attempts: records.receipts.map(attempt => ({ receiptRef: attempt.ref, executionId: attempt.executionId, attemptId: attempt.attemptId,
+            caseRef: attempt.caseRef, outcome: attempt.outcome, expectedTargetDigest: digestOfValue(attempt.environment.expected),
+            observedTargetDigest: attempt.environment.observed ? digestOfValue(attempt.environment.observed) : null,
+            provenance: attempt.environment.provenance, finalizedAt: attempt.finalizedAt,
+            estimatedCents: attempt.accounting.estimatedCents, reconciledCents: attempt.accounting.reconciledCents,
+            unknownChargeCount: attempt.accounting.unknownCharges.length })),
+    });
+    const receipt = {
+        schema_version: 'agent-work-receipt/v0.2', receipt_id: `tracegrove-export-${digestOfValue({ result: result.receipt.ref, preparedAt }).hex}`,
+        actor: { type: 'service', id: 'tracegrove-result-exporter', runtime: { name: 'tracegrove' } },
+        intent: { summary: 'Export retained workflow evidence for review.', request_ref: external(records.request.ref, 'workflow-request'),
+            acceptance_criteria: ['Preserve the verified campaign verdict and evidence identity without claiming native acceptance.'] },
+        authority: { mode: 'unknown', status: 'unknown', scope: { actions: ['export_retained_evidence'], resources: [external(result.receipt.ref, 'retained-result')] },
+            constraints: ['Consumer authorization is checked separately by the delivery host; this receipt grants no authority.'] },
+        actions: [{ id: 'export', type: 'evidence_export', summary: 'Prepared a redacted, digest-bound projection of retained evidence.', status: 'completed',
+                started_at: preparedAt, completed_at: preparedAt }],
+        artifacts: [{ id: 'bundle-manifest', kind: 'workflow_evidence', name: 'Retained workflow bundle manifest', role: 'report', ref: manifest, digest: manifest.digest }],
+        evidence: [{ id: 'retention', kind: 'local_bundle_integrity', summary: 'The retained archive was captured and re-reduced before this export.',
+                ref: external(result.receipt.ref, 'retained-result'), observed_at: preparedAt }],
+        outcome: { status: 'succeeded', summary: `Evidence export prepared. Target campaign outcome: ${records.campaign.outcome}. Native acceptance remains pending.`,
+            acceptance: { status: 'pending' } },
+        verification: { status: 'unverified', method: 'local_bundle_integrity_only', checks: [], evidence_ids: ['retention'],
+            notes: 'Bundle integrity is not independent issuer authentication, target success, qualification, or OrgX native verification.' },
+        cost: { currency: 'USD', total: 0, estimated: true, metadata: { status: 'unknown', zero_is_schema_placeholder: true,
+                notes: 'This required numeric placeholder is not a measured zero cost or campaign-cost total.' } },
+        lineage: { run_ref: external(records.campaign.ref, 'workflow-campaign'), parent_receipt_refs: [],
+            references: [{ relationship: 'produced_from', ref: external(records.selection.ref, 'workflow-selection') },
+                ...(records.request.workBinding ? [{ relationship: 'reports_on', ref: { system: 'orgx', type: 'work', id: records.request.workBinding.workId } }] : [])] },
+        human_interventions: [], timestamps: { started_at: preparedAt, completed_at: preparedAt, issued_at: preparedAt },
+        extensions: { 'org.tracegrove.workflow': projection },
+    };
+    return checkedAwrDocument(await withAgentWorkReceiptContentHash(checkedAwrDocument(receipt)));
+}
+//# sourceMappingURL=projection.js.map

package/dist/integrations/awr/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../src/integrations/awr/projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAA0D,MAAM,6BAA6B,CAAC;AACtI,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,UAAU,EAAY,MAAM,yBAAyB,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAE,IAAY,EAA8B,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ;IACvI,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAE7E,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAsB,EAAE,UAAkB;IACzE,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC;IACzI,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;QAC/F,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAc,EAAE,EAAE,CAAC;IACjG,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC;QAClD,aAAa,EAAE,iCAAiC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;QACzF,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG;QACvG,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;QAC3H,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,eAAe;QAC1G,gBAAgB,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU;QACzG,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;YAClI,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;YACrH,oBAAoB,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YACvG,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW;YAC5E,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,eAAe;YACtG,kBAAkB,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;KACnE,CAAC,CAAC;IACH,MAAM,OAAO,GAAqB;QAChC,cAAc,EAAE,yBAAyB,EAAE,UAAU,EAAE,qBAAqB,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE;QAC3I,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;QAC7F,MAAM,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC;YAChI,mBAAmB,EAAE,CAAC,kGAAkG,CAAC,EAAE;QAC7H,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,EAAE;YAC7J,WAAW,EAAE,CAAC,sGAAsG,CAAC,EAAE;QACzH,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,oEAAoE,EAAE,MAAM,EAAE,WAAW;gBACnJ,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;QACrD,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpK,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,sEAAsE;gBAC3I,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;QAClF,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,sDAAsD,OAAO,CAAC,QAAQ,CAAC,OAAO,sCAAsC;YAC3J,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;QACrC,YAAY,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,6BAA6B,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC;YAClH,KAAK,EAAE,wHAAwH,EAAE;QACnI,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,IAAI;gBACjH,KAAK,EAAE,uFAAuF,EAAE,EAAE;QACpG,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,EAAE,mBAAmB,EAAE,EAAE;YAC9F,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE;gBACxG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC9J,mBAAmB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE;QAChH,UAAU,EAAE,EAAE,yBAAyB,EAAE,UAAU,EAAE;KACtD,CAAC;IACF,OAAO,kBAAkB,CAAC,MAAM,+BAA+B,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC"}

package/dist/protocol/canonical.d.ts

@@ -0,0 +1,41 @@
+export declare const CANONICAL_MAX_DEPTH = 64;
+export declare const CANONICAL_MAX_NODES = 250000;
+import type { Digest, Ref, Scope } from './primitives.ts';
+export declare class CanonicalError extends Error {
+    constructor(message: string);
+}
+export declare function canonicalize(value: unknown): string;
+export declare function canonicalBytes(value: unknown): Buffer;
+export declare function sha256Hex(bytes: Buffer | string): string;
+export declare function digestOfBytes(bytes: Buffer | string): Digest;
+export declare function digestOfValue(value: unknown): Digest;
+/** Returns a structural copy with `ref.digest` removed, for self-digest computation. */
+export declare function withoutOwnDigest<T extends {
+    ref?: {
+        digest?: unknown;
+    };
+}>(doc: T): T;
+/** Digest of a document excluding its own `ref.digest`. */
+export declare function selfDigest(doc: {
+    ref?: {
+        digest?: unknown;
+    };
+}): Digest;
+/** Fill `ref.digest` from content. The result is the frozen immutable definition. */
+export declare function freeze<T extends {
+    ref: {
+        id: string;
+        revision: string;
+        digest?: unknown;
+    };
+}>(doc: T): T & {
+    ref: Ref;
+};
+/** True when the embedded digest equals the recomputed self digest. */
+export declare function verifySelfDigest(doc: {
+    ref: Ref;
+}): boolean;
+export declare function sameDigest(a: Digest | null | undefined, b: Digest | null | undefined): boolean;
+export declare function refKey(ref: Ref): string;
+export declare function sameRef(a: Ref, b: Ref): boolean;
+export declare function sameScope(a: Scope, b: Scope): boolean;

package/dist/protocol/canonical.js

@@ -0,0 +1,114 @@
+/**
+ * CanonicalCodec: schema-validated values <-> canonical JSON bytes and SHA-256 digests.
+ *
+ * Rules (shared conformance vectors live in tests/canonical.test.ts):
+ * - Object keys sorted by UTF-16 code unit order; no whitespace; UTF-8 bytes.
+ * - Arrays keep their order (semantic order is part of identity).
+ * - `undefined` members are dropped (JSON semantics). `null` is retained.
+ * - NaN, +/-Infinity, bigint, symbol, function and non-plain objects are rejected.
+ * - Depth and node limits bound the work an untrusted document can cause.
+ * - A document is hashed WITHOUT its own `ref.digest` field (schema-declared exclusion).
+ */
+import { createHash } from 'node:crypto';
+export const CANONICAL_MAX_DEPTH = 64;
+export const CANONICAL_MAX_NODES = 250_000;
+export class CanonicalError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CanonicalError';
+    }
+}
+function canonicalizeValue(value, depth, counter) {
+    if (++counter.nodes > CANONICAL_MAX_NODES)
+        throw new CanonicalError('canonical node limit exceeded');
+    if (depth > CANONICAL_MAX_DEPTH)
+        throw new CanonicalError('canonical depth limit exceeded');
+    if (value === null)
+        return 'null';
+    switch (typeof value) {
+        case 'string':
+            return JSON.stringify(value);
+        case 'boolean':
+            return value ? 'true' : 'false';
+        case 'number':
+            if (!Number.isFinite(value))
+                throw new CanonicalError('non-finite number is not canonical JSON');
+            if (Object.is(value, -0))
+                return '0';
+            return JSON.stringify(value);
+        case 'bigint':
+        case 'symbol':
+        case 'function':
+            throw new CanonicalError(`unsupported value type ${typeof value}`);
+        case 'undefined':
+            throw new CanonicalError('undefined cannot be canonicalized at top level');
+        case 'object': {
+            if (Array.isArray(value)) {
+                const items = value.map((item) => item === undefined ? 'null' : canonicalizeValue(item, depth + 1, counter));
+                return `[${items.join(',')}]`;
+            }
+            const proto = Object.getPrototypeOf(value);
+            if (proto !== Object.prototype && proto !== null) {
+                throw new CanonicalError('non-plain object is not canonical JSON');
+            }
+            const record = value;
+            const keys = Object.keys(record)
+                .filter((key) => record[key] !== undefined)
+                .sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));
+            const parts = keys.map((key) => `${JSON.stringify(key)}:${canonicalizeValue(record[key], depth + 1, counter)}`);
+            return `{${parts.join(',')}}`;
+        }
+        default:
+            throw new CanonicalError('unsupported value');
+    }
+}
+export function canonicalize(value) {
+    return canonicalizeValue(value, 0, { nodes: 0 });
+}
+export function canonicalBytes(value) {
+    return Buffer.from(canonicalize(value), 'utf8');
+}
+export function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+export function digestOfBytes(bytes) {
+    return { algorithm: 'sha256', hex: sha256Hex(bytes) };
+}
+export function digestOfValue(value) {
+    return digestOfBytes(canonicalBytes(value));
+}
+/** Returns a structural copy with `ref.digest` removed, for self-digest computation. */
+export function withoutOwnDigest(doc) {
+    if (!doc || typeof doc !== 'object' || !('ref' in doc) || !doc.ref || typeof doc.ref !== 'object') {
+        return doc;
+    }
+    const { digest: _omit, ...restRef } = doc.ref;
+    return { ...doc, ref: restRef };
+}
+/** Digest of a document excluding its own `ref.digest`. */
+export function selfDigest(doc) {
+    return digestOfValue(withoutOwnDigest(doc));
+}
+/** Fill `ref.digest` from content. The result is the frozen immutable definition. */
+export function freeze(doc) {
+    const digest = selfDigest(doc);
+    return { ...doc, ref: { id: doc.ref.id, revision: doc.ref.revision, digest } };
+}
+/** True when the embedded digest equals the recomputed self digest. */
+export function verifySelfDigest(doc) {
+    const expected = selfDigest(doc);
+    return doc.ref.digest.algorithm === 'sha256' && doc.ref.digest.hex === expected.hex;
+}
+export function sameDigest(a, b) {
+    return !!a && !!b && a.algorithm === b.algorithm && a.hex === b.hex;
+}
+export function refKey(ref) {
+    return `${ref.id}@${ref.revision}#${ref.digest.hex}`;
+}
+export function sameRef(a, b) {
+    return a.id === b.id && a.revision === b.revision && sameDigest(a.digest, b.digest);
+}
+export function sameScope(a, b) {
+    return a.ownerId === b.ownerId && a.tenantId === b.tenantId && a.visibility === b.visibility;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/protocol/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/protocol/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAI3C,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAID,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa,EAAE,OAAgB;IACxE,IAAI,EAAE,OAAO,CAAC,KAAK,GAAG,mBAAmB;QAAE,MAAM,IAAI,cAAc,CAAC,+BAA+B,CAAC,CAAC;IACrG,IAAI,KAAK,GAAG,mBAAmB;QAAE,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;IAC5F,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ;YACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,yCAAyC,CAAC,CAAC;YACjG,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC;YACrC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU;YACb,MAAM,IAAI,cAAc,CAAC,0BAA0B,OAAO,KAAK,EAAE,CAAC,CAAC;QACrE,KAAK,WAAW;YACd,MAAM,IAAI,cAAc,CAAC,gDAAgD,CAAC,CAAC;QAC7E,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/B,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAC1E,CAAC;gBACF,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAChC,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACjD,MAAM,IAAI,cAAc,CAAC,wCAAwC,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;iBAC7B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;iBAC1C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CACxF,CAAC;YACF,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,CAAC;QACD;YACE,MAAM,IAAI,cAAc,CAAC,mBAAmB,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,iBAAiB,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAsB;IAClD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAA2C,GAAM;IAC/E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAClG,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,CAAC,GAA8B,CAAC;IACzE,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,EAAO,CAAC;AACvC,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,GAAmC;IAC5D,OAAO,aAAa,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,MAAM,CACpB,GAAM;IAEN,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;AACjF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAA4B,EAAE,CAA4B;IACnF,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAQ;IAC7B,OAAO,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,CAAM,EAAE,CAAM;IACpC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAQ,EAAE,CAAQ;IAC1C,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC;AAC/F,CAAC"}