tracegrove 0.0.0-stage → 0.3.1

package/dist/core/cleanupAttestation.js

@@ -0,0 +1,57 @@
+import { sign, verify } from 'node:crypto';
+import { canonicalBytes, sha256Hex } from "../protocol/canonical.js";
+import { CleanupExpectationSchema, CleanupFollowupSchema, SignedCleanupFollowupSchema, } from "../protocol/schemas/cleanup.js";
+import { Conflict } from "./errors.js";
+const domain = 'tracegrove.signed-cleanup-followup/v1\0';
+const digest = (value) => `sha256:${sha256Hex(canonicalBytes(value))}`;
+const signedBytes = (value) => Buffer.concat([Buffer.from(domain, 'utf8'), canonicalBytes(value)]);
+export function cleanupExpectationDigest(raw) {
+    return digest(CleanupExpectationSchema.parse(raw));
+}
+/** Only an independent collector holding its protected signing key may issue this follow-up. */
+export function signCleanupFollowup(raw, keyId, privateKey) {
+    if (privateKey.type !== 'private' || privateKey.asymmetricKeyType !== 'ed25519') {
+        throw new Conflict('Cleanup follow-up requires an Ed25519 private key');
+    }
+    const unsigned = {
+        schemaVersion: 'workflow.signed-cleanup-followup/v1', algorithm: 'ed25519',
+        keyId, followup: CleanupFollowupSchema.parse(raw),
+    };
+    return SignedCleanupFollowupSchema.parse({ ...unsigned,
+        signature: sign(null, signedBytes(unsigned), privateKey).toString('base64url') });
+}
+/**
+ * Integrity and expectation validation only. The storage owner must recheck the
+ * current lease, manifest and time under its admission lock before releasing it.
+ * Signature trust does not establish provider qualification or authorize effects.
+ */
+export function verifyCleanupFollowup(raw, expectedRaw, input) {
+    if (!Number.isSafeInteger(input.observedAt) || input.observedAt < 0)
+        throw new Conflict('Cleanup clock is invalid');
+    const envelope = SignedCleanupFollowupSchema.parse(raw);
+    const expected = CleanupExpectationSchema.parse(expectedRaw);
+    const observer = input.trustedObservers.get(envelope.keyId);
+    const { signature, ...unsigned } = envelope;
+    const proof = envelope.followup;
+    if (!observer || observer.publicKey.type !== 'public' || observer.publicKey.asymmetricKeyType !== 'ed25519' ||
+        observer.scopeId !== expected.scopeId || observer.observerId !== proof.observerId ||
+        observer.observerId === expected.workerId ||
+        !verify(null, signedBytes(unsigned), observer.publicKey, Buffer.from(signature, 'base64url'))) {
+        throw new Conflict('Cleanup observer or signature is not trusted');
+    }
+    for (const key of ['scopeId', 'attemptId', 'workerId', 'generation', 'coordinationVersion']) {
+        if (proof[key] !== expected[key])
+            throw new Conflict('Cleanup follow-up has a stale or different binding');
+    }
+    if (proof.expectationDigest !== cleanupExpectationDigest(expected) || expected.unresolvedEffectIds.length) {
+        throw new Conflict('Cleanup ownership/effect closure is unresolved or changed');
+    }
+    if (proof.observedAt > input.observedAt || proof.expiresAt <= input.observedAt) {
+        throw new Conflict('Cleanup follow-up is expired or from the future');
+    }
+    if (proof.evidence.length !== expected.resources.length || expected.resources.some(resource => !proof.evidence.some(item => item.entityKey === resource.entityKey && item.kind === resource.check))) {
+        throw new Conflict('Cleanup follow-up does not cover every owned resource');
+    }
+    return { followup: proof, proofDigest: digest(envelope), expectation: expected };
+}
+//# sourceMappingURL=cleanupAttestation.js.map

package/dist/core/cleanupAttestation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanupAttestation.js","sourceRoot":"","sources":["../../src/core/cleanupAttestation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EACL,wBAAwB,EAAE,qBAAqB,EAAE,2BAA2B,GAE7E,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,MAAM,GAAG,yCAAyC,CAAC;AACzD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,UAAU,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAChF,MAAM,WAAW,GAAG,CAAC,KAA+C,EAAE,EAAE,CACtE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtE,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,OAAO,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,KAAa,EAAE,UAAqB;IACpF,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAChF,MAAM,IAAI,QAAQ,CAAC,mDAAmD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,aAAa,EAAE,qCAA8C,EAAE,SAAS,EAAE,SAAkB;QAC5F,KAAK,EAAE,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC;KAClD,CAAC;IACF,OAAO,2BAA2B,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ;QACpD,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAY,EAAE,WAAoB,EAAE,KAEzE;IACC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IACpH,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAChC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,iBAAiB,KAAK,SAAS;QACzG,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACjF,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,QAAQ;QACzC,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,QAAQ,CAAC,8CAA8C,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,qBAAqB,CAAU,EAAE,CAAC;QACrG,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,wBAAwB,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC;QAC1G,MAAM,IAAI,QAAQ,CAAC,2DAA2D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAC/E,MAAM,IAAI,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAC5F,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,QAAQ,CAAC,uDAAuD,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AACnF,CAAC"}

package/dist/core/clock.d.ts

@@ -0,0 +1,4 @@
+export declare function nowIso(): string;
+export declare function isoPlusMs(ms: number): string;
+export declare function monotonicMs(): number;
+export declare function newId(prefix: string): string;

package/dist/core/clock.js

@@ -0,0 +1,14 @@
+import { randomBytes } from 'node:crypto';
+export function nowIso() {
+    return new Date().toISOString();
+}
+export function isoPlusMs(ms) {
+    return new Date(Date.now() + ms).toISOString();
+}
+export function monotonicMs() {
+    return Number(process.hrtime.bigint() / 1000000n);
+}
+export function newId(prefix) {
+    return `${prefix}_${randomBytes(8).toString('hex')}`;
+}
+//# sourceMappingURL=clock.js.map

package/dist/core/clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clock.js","sourceRoot":"","sources":["../../src/core/clock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,UAAU,MAAM;IACpB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACjD,CAAC;AACD,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,QAAU,CAAC,CAAC;AACtD,CAAC;AACD,MAAM,UAAU,KAAK,CAAC,MAAc;IAClC,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACvD,CAAC"}

package/dist/core/compiler.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Compilation freezes the complete ordered step set, the variable dependency graph and the
+ * expected assertion instances for a case against a runner's advertised capabilities.
+ * Cycles, duplicate IDs, unknown references, unsupported operations/oracles and oversize
+ * flows reject admission before any effect. No prefix slicing.
+ */
+import type { Assertion, CaseSpec, RunnerCapabilities, SeedRecipe, Step } from '../protocol/index.ts';
+export type CompiledCase = {
+    caseId: string;
+    orderedStepIds: string[];
+    stepsById: Map<string, Step>;
+    assertionsById: Map<string, Assertion>;
+    /** Fixture outputs referenced by steps: entityKey -> outputName[] */
+    fixtureInputs: Map<string, Set<string>>;
+    credentialNames: Set<string>;
+};
+export declare function compileCase(spec: CaseSpec, capabilities: RunnerCapabilities, recipe: SeedRecipe | null): CompiledCase;
+export declare function applyTemplate(template: string, variables: Record<string, unknown>): string;
+export declare function applyTemplateDeep(value: unknown, variables: Record<string, unknown>): unknown;

package/dist/core/compiler.js

@@ -0,0 +1,200 @@
+import { Blocked } from "./errors.js";
+const TEMPLATE = /\{([A-Za-z_][A-Za-z0-9_]*)\}/g;
+function templateNames(value, into) {
+    if (typeof value === 'string') {
+        for (const match of value.matchAll(TEMPLATE))
+            into.add(match[1]);
+    }
+    else if (Array.isArray(value)) {
+        for (const item of value)
+            templateNames(item, into);
+    }
+    else if (value && typeof value === 'object') {
+        for (const item of Object.values(value))
+            templateNames(item, into);
+    }
+}
+export function compileCase(spec, capabilities, recipe) {
+    const reasons = [];
+    const stepsById = new Map();
+    const captureNames = new Map();
+    const fixtureInputs = new Map();
+    const credentialNames = new Set();
+    if (spec.capture.video === 'required' && !capabilities.captureFormats.includes('video/webm'))
+        reasons.push({ code: 'required_video_unsupported', detail: 'runner does not advertise video capture' });
+    const browserSteps = spec.steps.filter(step => step.kind.startsWith('ui.'));
+    const jobSteps = spec.steps.filter(step => step.kind === 'job.submit' || step.kind === 'job.observe' || step.kind === 'job.cancel');
+    const mcpSteps = spec.steps.filter(step => step.kind === 'mcp.call');
+    if (mcpSteps.length > (spec.effects.maxMcpCalls ?? 0))
+        reasons.push({ code: 'mcp_call_limit', detail: 'MCP calls exceed the explicitly declared effect ceiling' });
+    for (const step of mcpSteps) {
+        if (!spec.effects.allowedHosts.length)
+            reasons.push({ code: 'mcp_origin_not_admitted', detail: `${step.id}: no application host is allowed` });
+        if (!spec.effects.allowedMcpTools?.includes(step.command.tool))
+            reasons.push({ code: 'mcp_tool_not_admitted', detail: `${step.id}: tool is outside the effect envelope` });
+        if (spec.effects.mode !== 'designated_writes')
+            reasons.push({ code: 'mcp_effect_not_admitted', detail: `${step.id}: MCP tool annotations cannot establish read-only authority` });
+        if (step.retry.attempts !== 1)
+            reasons.push({ code: 'mcp_retry_unsupported', detail: `${step.id}: MCP tool effects require single-attempt admission` });
+        if (!spec.effects.allowedMethods.includes('POST') || !spec.effects.allowedResourcePrefixes.some(prefix => step.command.endpoint === prefix || step.command.endpoint.startsWith(`${prefix}/`)))
+            reasons.push({ code: 'mcp_endpoint_not_admitted', detail: `${step.id}: endpoint is outside the effect envelope` });
+    }
+    if (jobSteps.filter(step => step.kind === 'job.submit').length > spec.effects.maxJobs)
+        reasons.push({ code: 'job_effect_limit', detail: 'job submissions exceed the declared effect ceiling' });
+    for (const step of jobSteps) {
+        if (!spec.effects.allowedJobQueues?.includes(step.command.queue))
+            reasons.push({ code: 'job_queue_not_admitted', detail: `${step.id}: native queue is outside the effect envelope` });
+        if (step.retry.attempts !== 1)
+            reasons.push({ code: 'job_retry_unsupported', detail: `${step.id}: native jobs require single-attempt admission` });
+        if (spec.effects.mode === 'read_only' && step.kind !== 'job.observe')
+            reasons.push({ code: 'job_write_not_admitted', detail: `${step.id}: mutation requires designated_writes` });
+    }
+    if (browserSteps.some(step => step.retry.attempts !== 1))
+        reasons.push({ code: 'browser_retry_unsupported', detail: 'browser effects require a single attempt; replay requires a new admission' });
+    if (browserSteps.length > spec.limits.maxBrowserActions)
+        reasons.push({ code: 'browser_action_limit', detail: 'browser steps exceed the case action budget' });
+    if (browserSteps.length && spec.capture.trace === 'required')
+        reasons.push({ code: 'browser_trace_unavailable', detail: 'required browser traces are not implemented' });
+    if (browserSteps.length && spec.capture.redactionPolicyRef)
+        reasons.push({ code: 'browser_redaction_unavailable', detail: 'the declared browser redaction policy has no executable adapter' });
+    if (spec.steps.length > capabilities.maxStepsPerCase) {
+        reasons.push({ code: 'step_limit_exceeded', detail: `${spec.steps.length} steps exceed runner ceiling ${capabilities.maxStepsPerCase}; no prefix execution` });
+    }
+    const supported = new Set(capabilities.operations);
+    for (const step of spec.steps) {
+        if (stepsById.has(step.id))
+            reasons.push({ code: 'duplicate_step_id', detail: step.id });
+        stepsById.set(step.id, step);
+        if (!supported.has(step.kind))
+            reasons.push({ code: 'unsupported_operation', detail: `${step.id}: ${step.kind} is not advertised by the runner` });
+        const captures = new Set();
+        if ('captures' in step)
+            for (const capture of step.captures)
+                captures.add(capture.name);
+        captureNames.set(step.id, captures);
+    }
+    const ordered = spec.steps.map((step) => step.id);
+    // Variables must resolve from literals, fixture outputs, prior captures, credentials or runtime bindings.
+    const seen = new Set();
+    for (const step of spec.steps) {
+        const declared = new Set(Object.keys(step.inputs));
+        const used = new Set();
+        if (step.kind === 'http.request') {
+            templateNames(step.path, used);
+            templateNames(step.body, used);
+            templateNames(step.headers, used);
+        }
+        if (step.kind === 'observe')
+            templateNames(step.readback.path, used);
+        if (step.kind === 'ui.navigate')
+            templateNames(step.path, used);
+        if (step.kind === 'ui.action')
+            templateNames(step.command, used);
+        if (step.kind === 'ui.observe')
+            templateNames(step.target, used);
+        if (step.kind === 'job.submit' || step.kind === 'job.observe' || step.kind === 'job.cancel')
+            templateNames(step.command, used);
+        if (step.kind === 'mcp.call')
+            templateNames(step.command.arguments, used);
+        for (const name of used)
+            if (!declared.has(name))
+                reasons.push({ code: 'undeclared_variable', detail: `${step.id} uses {${name}} without declaring it in inputs` });
+        for (const [name, source] of Object.entries(step.inputs)) {
+            switch (source.kind) {
+                case 'capture': {
+                    if (!seen.has(source.stepId))
+                        reasons.push({ code: 'capture_before_producer', detail: `${step.id}.${name} captures from ${source.stepId}, which is not an earlier step` });
+                    else if (!captureNames.get(source.stepId)?.has(source.name))
+                        reasons.push({ code: 'unknown_capture', detail: `${step.id}.${name}: step ${source.stepId} declares no capture ${source.name}` });
+                    break;
+                }
+                case 'fixture': {
+                    if (!recipe) {
+                        reasons.push({ code: 'fixture_without_recipe', detail: `${step.id}.${name} needs fixture ${source.entityKey} but the case has no fixture plan` });
+                        break;
+                    }
+                    const entity = recipe.entities.find((e) => e.entityKey === source.entityKey);
+                    if (!entity)
+                        reasons.push({ code: 'unknown_fixture_entity', detail: `${step.id}.${name}: ${source.entityKey}` });
+                    else if (!entity.outputNames.includes(source.outputName))
+                        reasons.push({ code: 'unknown_fixture_output', detail: `${step.id}.${name}: ${source.entityKey}.${source.outputName}` });
+                    if (!fixtureInputs.has(source.entityKey))
+                        fixtureInputs.set(source.entityKey, new Set());
+                    fixtureInputs.get(source.entityKey).add(source.outputName);
+                    break;
+                }
+                case 'credential':
+                    if (step.kind === 'mcp.call')
+                        reasons.push({ code: 'mcp_credential_expansion_unsupported', detail: `${step.id}: use MCP auth rather than expanding credentials into tool arguments` });
+                    if (step.kind.startsWith('ui.'))
+                        reasons.push({ code: 'browser_credential_expansion_unsupported', detail: `${step.id}: credentials cannot be filled into recorded browser steps` });
+                    credentialNames.add(source.name);
+                    break;
+                case 'literal':
+                case 'runtime': break;
+            }
+        }
+        seen.add(step.id);
+    }
+    const oracles = new Set(capabilities.oracles);
+    const assertionsById = new Map();
+    for (const assertion of [...spec.preconditions, ...spec.assertions]) {
+        if (assertionsById.has(assertion.id))
+            reasons.push({ code: 'duplicate_assertion_id', detail: assertion.id });
+        assertionsById.set(assertion.id, assertion);
+        const oracleId = `${assertion.oracle.name}/${assertion.oracle.version}`;
+        if (!oracles.has(oracleId))
+            reasons.push({ code: 'unsupported_oracle', detail: `${assertion.id}: ${oracleId}` });
+        if (!stepsById.has(assertion.stepId))
+            reasons.push({ code: 'assertion_unknown_step', detail: `${assertion.id} -> ${assertion.stepId}` });
+        const assertedStep = stepsById.get(assertion.stepId);
+        if (assertion.oracle.name === 'browser.observation' && !assertedStep?.kind.startsWith('ui.'))
+            reasons.push({ code: 'oracle_step_mismatch', detail: `${assertion.id}: browser oracle needs a browser step` });
+        if (assertion.oracle.name === 'http.observation' && (assertedStep?.kind.startsWith('ui.') || assertedStep?.kind.startsWith('job.') || assertedStep?.kind === 'mcp.call'))
+            reasons.push({ code: 'oracle_step_mismatch', detail: `${assertion.id}: HTTP oracle needs an HTTP step` });
+        if (assertion.oracle.name === 'mcp.observation' && assertedStep?.kind !== 'mcp.call')
+            reasons.push({ code: 'oracle_step_mismatch', detail: `${assertion.id}: MCP oracle needs an MCP call` });
+        if (assertion.oracle.name === 'job.observation' && !assertedStep?.kind.startsWith('job.'))
+            reasons.push({ code: 'oracle_step_mismatch', detail: `${assertion.id}: job oracle needs a native job step` });
+    }
+    if (spec.assertions.filter((a) => a.required).length === 0)
+        reasons.push({ code: 'no_required_assertion', detail: 'a case needs at least one required assertion' });
+    if (reasons.length > 0)
+        throw new Blocked(reasons.map((r) => ({ ...r, owner: 'case author', action: 'fix the case definition and review it again' })));
+    return { caseId: spec.ref.id, orderedStepIds: ordered, stepsById, assertionsById, fixtureInputs, credentialNames };
+}
+export function applyTemplate(template, variables) {
+    return template.replace(TEMPLATE, (_m, name) => {
+        const value = variables[name];
+        if (value === undefined)
+            throw new Blocked([{ code: 'unresolved_variable', detail: name }]);
+        return encodeURIComponent(String(value));
+    });
+}
+export function applyTemplateDeep(value, variables) {
+    if (typeof value === 'string') {
+        const whole = value.match(/^\{([A-Za-z_][A-Za-z0-9_]*)\}$/);
+        if (whole) {
+            const v = variables[whole[1]];
+            if (v === undefined)
+                throw new Blocked([{ code: 'unresolved_variable', detail: whole[1] }]);
+            return v;
+        }
+        return value.replace(TEMPLATE, (_m, name) => {
+            const v = variables[name];
+            if (v === undefined)
+                throw new Blocked([{ code: 'unresolved_variable', detail: name }]);
+            return String(v);
+        });
+    }
+    if (Array.isArray(value))
+        return value.map((item) => applyTemplateDeep(item, variables));
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value))
+            out[k] = applyTemplateDeep(v, variables);
+        return out;
+    }
+    return value;
+}
+//# sourceMappingURL=compiler.js.map

package/dist/core/compiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.js","sourceRoot":"","sources":["../../src/core/compiler.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAYtC,MAAM,QAAQ,GAAG,+BAA+B,CAAC;AAEjD,SAAS,aAAa,CAAC,KAAc,EAAE,IAAiB;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;IAC7E,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;YAAE,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAc,EAAE,YAAgC,EAAE,MAAyB;IACrG,MAAM,OAAO,GAA4C,EAAE,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC1C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC,CAAC;IACtM,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACpI,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACrE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC,CAAC;IACnK,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAC/I,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAC3K,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,6DAA6D,EAAE,CAAC,CAAC;QAClL,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,qDAAqD,EAAE,CAAC,CAAC;QACxJ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,2CAA2C,EAAE,CAAC,CAAC;IACpT,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC,CAAC;IAChM,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,+CAA+C,EAAE,CAAC,CAAC;QACtL,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,gDAAgD,EAAE,CAAC,CAAC;QACnJ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,uCAAuC,EAAE,CAAC,CAAC;IACpL,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,2EAA2E,EAAE,CAAC,CAAC;IACnM,IAAI,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC,CAAC;IAC/J,IAAI,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC,CAAC;IACzK,IAAI,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC,CAAC;IAE/L,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,eAAe,EAAE,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,gCAAgC,YAAY,CAAC,eAAe,uBAAuB,EAAE,CAAC,CAAC;IACjK,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACzF,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,kCAAkC,EAAE,CAAC,CAAC;QACnJ,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,IAAI,UAAU,IAAI,IAAI;YAAE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;gBAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxF,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClD,0GAA0G;IAC1G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QACxI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;YAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;YAAE,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;YAAE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/H,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1E,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,UAAU,IAAI,kCAAkC,EAAE,CAAC,CAAC;QACpK,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAoC,EAAE,CAAC;YAC5F,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,kBAAkB,MAAM,CAAC,MAAM,gCAAgC,EAAE,CAAC,CAAC;yBACtK,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,UAAU,MAAM,CAAC,MAAM,wBAAwB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC/L,MAAM;gBACR,CAAC;gBACD,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,IAAI,CAAC,MAAM,EAAE,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,kBAAkB,MAAM,CAAC,SAAS,mCAAmC,EAAE,CAAC,CAAC;wBAAC,MAAM;oBAAC,CAAC;oBAC1K,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC7E,IAAI,CAAC,MAAM;wBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,KAAK,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;yBAC5G,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;oBACnL,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;wBAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;oBACzF,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAE,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBAC5D,MAAM;gBACR,CAAC;gBACD,KAAK,YAAY;oBACf,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;wBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sCAAsC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,sEAAsE,EAAE,CAAC,CAAC;oBACvL,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0CAA0C,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,4DAA4D,EAAE,CAAC,CAAC;oBACpL,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBAC1C,KAAK,SAAS,CAAC;gBACf,KAAK,SAAS,CAAC,CAAC,MAAM;YACxB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAqB,CAAC;IACpD,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7G,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,KAAK,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzI,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAC7M,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,IAAI,KAAK,UAAU,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,kCAAkC,EAAE,CAAC,CAAC;QACpR,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,YAAY,EAAE,IAAI,KAAK,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC9L,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,sCAAsC,EAAE,CAAC,CAAC;IAC3M,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC,CAAC;IACpK,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC,CAAC,CAAC,CAAC;IACvJ,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,SAAkC;IAChF,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE;QACrD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5F,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,SAAkC;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5D,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAW,EAAE,CAAC,CAAC,CAAC;YACtG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE;YAClD,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACxF,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACzF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAChH,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/controller.d.ts

@@ -0,0 +1,7 @@
+import { type RunSummary } from './executor.ts';
+import type { FrozenBundle } from './planner.ts';
+export declare function startController(stateDir: string, projectRoot: string): Promise<{
+    endpoint: string;
+    close(): Promise<void>;
+}>;
+export declare function delegateRun(stateDir: string, bundle: FrozenBundle, signal?: AbortSignal): Promise<RunSummary>;

package/dist/core/controller.js

@@ -0,0 +1,132 @@
+/** One local authority for CLI/viewer coexistence. The OS owner holds the private
+ * bearer file; callers cannot supply an actor or a different project root. */
+import { randomBytes, timingSafeEqual } from 'node:crypto';
+import { createServer } from 'node:http';
+import { chmodSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { once } from 'node:events';
+import { localScope } from "./corpus.js";
+import { executeBundle } from "./executor.js";
+import { LocalLedger } from "./ledger.js";
+import { Conflict } from "./errors.js";
+import { sha256Hex } from "../protocol/index.js";
+const MAX_BYTES = 8 * 1024 * 1024;
+function equal(a, b) {
+    const left = Buffer.from(a);
+    const right = Buffer.from(b);
+    return left.length === right.length && timingSafeEqual(left, right);
+}
+async function body(req) {
+    let bytes = 0;
+    const chunks = [];
+    for await (const chunk of req) {
+        bytes += chunk.length;
+        if (bytes > MAX_BYTES)
+            throw new Error('controller request too large');
+        chunks.push(Buffer.from(chunk));
+    }
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+}
+export async function startController(stateDir, projectRoot) {
+    stateDir = resolve(stateDir);
+    projectRoot = resolve(projectRoot);
+    const ledger = LocalLedger.open(stateDir);
+    chmodSync(ledger.dir, 0o700);
+    const token = randomBytes(32).toString('hex');
+    const tokenPath = join(ledger.dir, 'controller.token');
+    writeFileSync(tokenPath, token, { mode: 0o600 });
+    chmodSync(tokenPath, 0o600);
+    let queue = Promise.resolve();
+    let closing = false;
+    const active = new Set();
+    const server = createServer(async (req, res) => {
+        res.setHeader('content-type', 'application/json');
+        if (!equal(req.headers.authorization ?? '', `Bearer ${token}`) || req.headers.origin) {
+            res.writeHead(403);
+            res.end(JSON.stringify({ error: 'controller_access_denied' }));
+            return;
+        }
+        if (req.method === 'GET' && req.url === '/status') {
+            res.end(JSON.stringify({ projectRoot, running: active.size, closing }));
+            return;
+        }
+        if (req.method !== 'POST' || req.url !== '/run' || closing) {
+            res.writeHead(409);
+            res.end(JSON.stringify({ error: 'controller_command_unavailable' }));
+            return;
+        }
+        try {
+            const value = await body(req);
+            const bundle = value?.bundle;
+            if (!bundle || bundle.schemaVersion !== 'workflow.frozen-request-bundle/v1' || resolve(bundle.projectRoot) !== projectRoot) {
+                throw new Conflict('controller_project_mismatch');
+            }
+            const abort = new AbortController();
+            res.once('close', () => { if (!res.writableEnded)
+                abort.abort(new Error('delegated_client_disconnected')); });
+            // Queue owns the writer for the entire admitted attempt, including cleanup.
+            const task = queue.then(async () => {
+                if (closing)
+                    throw new Conflict('controller_closing');
+                active.add(abort);
+                try {
+                    return await executeBundle({ bundle, stateDir, ledger, scope: localScope(), signal: abort.signal });
+                }
+                finally {
+                    active.delete(abort);
+                }
+            });
+            queue = task.catch(() => undefined);
+            const result = await task;
+            res.end(JSON.stringify(result));
+        }
+        catch (error) {
+            res.writeHead(409);
+            res.end(JSON.stringify({ error: error instanceof Error ? error.message : 'controller_request_failed' }));
+        }
+    });
+    server.requestTimeout = 30_000;
+    try {
+        server.listen(0, '127.0.0.1');
+        await once(server, 'listening');
+        const address = server.address();
+        if (!address || typeof address === 'string')
+            throw new Error('controller_address_missing');
+        const endpoint = `http://127.0.0.1:${address.port}`;
+        ledger.publishController(endpoint, sha256Hex(token));
+        return { endpoint, async close() {
+                closing = true;
+                for (const abort of active)
+                    abort.abort(new Error('controller_closing'));
+                await queue;
+                await new Promise((done) => server.close(() => done()));
+                rmSync(tokenPath, { force: true });
+                ledger.close();
+            } };
+    }
+    catch (error) {
+        server.close();
+        rmSync(tokenPath, { force: true });
+        ledger.close();
+        throw error;
+    }
+}
+export async function delegateRun(stateDir, bundle, signal) {
+    const dir = join(resolve(stateDir), 'ledger');
+    const lock = JSON.parse(readFileSync(join(dir, 'lock.json'), 'utf8'));
+    if (!lock.endpoint || !/^http:\/\/127\.0\.0\.1:[0-9]+$/.test(lock.endpoint))
+        throw new Conflict('controller_endpoint_unavailable');
+    const token = readFileSync(join(dir, 'controller.token'), 'utf8');
+    if (!lock.tokenDigest || !equal(sha256Hex(token), lock.tokenDigest))
+        throw new Conflict('controller_token_mismatch');
+    const response = await fetch(`${lock.endpoint}/run`, {
+        method: 'POST', headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },
+        body: JSON.stringify({ bundle }), redirect: 'error',
+        signal: AbortSignal.any([AbortSignal.timeout((bundle.request?.limits.deadlineMs ?? 60_000) + 60_000), ...(signal ? [signal] : [])]),
+    });
+    const result = await response.json();
+    if (!response.ok)
+        throw new Conflict(result.error ?? 'controller_request_failed');
+    return result;
+}
+//# sourceMappingURL=controller.js.map

package/dist/core/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/core/controller.ts"],"names":[],"mappings":"AAAA;8EAC8E;AAC9E,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAwB,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAmB,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAiB,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,SAAS,KAAK,CAAC,CAAS,EAAE,CAAS;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AACD,KAAK,UAAU,IAAI,CAAC,GAAoB;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IAAC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC3C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACtB,IAAI,KAAK,GAAG,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,WAAmB;IACzE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACvD,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAChD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,UAAU,KAAK,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACrF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO;QAC7F,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO;QAClF,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3D,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO;QACnG,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAA8B,CAAC;YAC3D,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,CAAC;YAC7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,mCAAmC,IAAI,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,WAAW,EAAE,CAAC;gBAC3H,MAAM,IAAI,QAAQ,CAAC,6BAA6B,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa;gBAAE,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9G,4EAA4E;YAC5E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACjC,IAAI,OAAO;oBAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC;gBACtD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAClB,IAAI,CAAC;oBAAC,OAAO,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBAAC,CAAC;wBACpG,CAAC;oBAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC9B,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK;gBAC5B,OAAO,GAAG,IAAI,CAAC;gBACf,KAAK,MAAM,KAAK,IAAI,MAAM;oBAAE,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBACzE,MAAM,KAAK,CAAC;gBACZ,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC9D,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrD,CAAC,EAAE,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,MAAoB,EAAE,MAAoB;IAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAa,CAAC;IAClF,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,iCAAiC,CAAC,CAAC;IACnI,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,MAAM,EAAE;QACnD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QACjG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO;QACnD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;KACpI,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAqC,CAAC;IACxE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,2BAA2B,CAAC,CAAC;IAClF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/coordination.d.ts

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+export declare const CoordinationSnapshotSchema: z.ZodObject<{
+    scopeId: z.ZodString;
+    version: z.ZodNumber;
+    generation: z.ZodNumber;
+    budgetCents: z.ZodNumber;
+    leases: z.ZodArray<z.ZodObject<{
+        attemptId: z.ZodString;
+        workerId: z.ZodString;
+        personaId: z.ZodString;
+        generation: z.ZodNumber;
+        expiresAt: z.ZodNumber;
+        reservedCents: z.ZodNumber;
+        state: z.ZodEnum<{
+            active: "active";
+            reconciling: "reconciling";
+            released: "released";
+        }>;
+        effectIds: z.ZodArray<z.ZodString>;
+        cleanupProof: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type CoordinationSnapshot = z.infer<typeof CoordinationSnapshotSchema>;
+export type CoordinationFence = {
+    attemptId: string;
+    workerId: string;
+    generation: number;
+};
+export declare const CoordinationCommandSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"reserve">;
+    attemptId: z.ZodString;
+    workerId: z.ZodString;
+    personaId: z.ZodString;
+    reservedCents: z.ZodNumber;
+    ttlMs: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"heartbeat">;
+    attemptId: z.ZodString;
+    workerId: z.ZodString;
+    generation: z.ZodNumber;
+    ttlMs: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"effect">;
+    attemptId: z.ZodString;
+    workerId: z.ZodString;
+    generation: z.ZodNumber;
+    effectId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"recover">;
+    attemptId: z.ZodString;
+    workerId: z.ZodString;
+    ttlMs: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"release">;
+    attemptId: z.ZodString;
+    workerId: z.ZodString;
+    generation: z.ZodNumber;
+    cleanupProof: z.ZodString;
+}, z.core.$strict>], "type">;
+export type CoordinationCommand = z.infer<typeof CoordinationCommandSchema>;
+/** Pure transition only. The trusted storage owner supplies time, CAS and cleanup proof admission. */
+export declare function transitionCoordination(raw: unknown, scopeId: string, expectedVersion: number, input: CoordinationCommand, observedAt: number): CoordinationSnapshot;
+/** One aggregate per shared budget/persona domain; CAS must be atomic across all processes. */
+export interface CoordinationStore {
+    read(scopeId: string): Promise<{
+        snapshot: unknown;
+        observedAt: number;
+    }>;
+    compareAndSwap(scopeId: string, expectedVersion: number, next: CoordinationSnapshot): Promise<boolean>;
+}
+/** Not a distributed admission adapter: time, owner authentication and protected output fencing are adapter obligations. */
+export declare function commitCoordination(store: CoordinationStore, scopeId: string, command: CoordinationCommand): Promise<CoordinationSnapshot>;