tracegrove 0.0.0-stage → 0.3.1

package/dist/core/executionPreparation.d.ts

@@ -0,0 +1,362 @@
+import { ActionRegistry, AuthRecipe, CaseFixturePlan, CaseSpec, EnvironmentPlan, FidelityPlan, HostPlan, LogicalPayload, Persona, SeedRecipe, SelectionManifest, SurfaceBinding, type Ref, type Scope, type RunRequest, type RunnerCapabilities } from '../protocol/index.ts';
+import { type CompiledCase } from './compiler.ts';
+import type { FrozenBundle } from './planner.ts';
+export declare class DocStore {
+    private readonly docs;
+    constructor(documents: Record<string, unknown>);
+    get<T>(schema: {
+        safeParse: (v: unknown) => {
+            success: boolean;
+            data?: T;
+        };
+    }, ref: Ref, label: string): T;
+    runnerCapabilities(expected: Ref): RunnerCapabilities;
+}
+export type PreparedCell = {
+    cell: SelectionManifest['cells'][number];
+    spec: CaseSpec;
+    compiled: CompiledCase;
+    persona: Persona;
+    authRecipe: AuthRecipe;
+    binding: SurfaceBinding;
+    environmentPlan: EnvironmentPlan;
+    hostPlan: HostPlan;
+    fixture: {
+        plan: CaseFixturePlan;
+        recipe: SeedRecipe;
+        payload: LogicalPayload;
+        registry: ActionRegistry;
+    } | null;
+    fidelityCell: FidelityPlan['cells'][number];
+};
+export declare function checkedFrozenRequest(bundle: FrozenBundle, scope: Scope): RunRequest;
+/** Static executable closure preparation. No host, fixture, provider or effect is invoked. */
+export declare function prepareFrozenCells(bundle: FrozenBundle, scope: Scope, request: RunRequest): {
+    docs: DocStore;
+    selection: {
+        policyRef: {
+            id: string;
+            revision: string;
+            digest: {
+                algorithm: "sha256";
+                hex: string;
+            };
+        } | null;
+        cells: {
+            selectionCellId: string;
+            required: boolean;
+            caseRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            };
+            personaRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            };
+            surfaceBindingRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            };
+            variantRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            } | null;
+            sourceSelectionRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            } | null;
+            environmentRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            };
+            expectedTarget: {
+                componentProfileRef: {
+                    id: string;
+                    revision: string;
+                    digest: {
+                        algorithm: "sha256";
+                        hex: string;
+                    };
+                };
+                requiredComponents: string[];
+                excludedComponents: {
+                    component: string;
+                    reason: string;
+                }[];
+                components: {
+                    componentId: string;
+                    kind: "schema" | "application" | "service" | "worker" | "flag_set" | "protocol_server" | "host" | "widget" | "mobile_binary" | "device_runtime" | "model_endpoint" | "other";
+                    identity: {
+                        kind: "source_digest";
+                        sourceDigest: {
+                            algorithm: "sha256";
+                            hex: string;
+                        };
+                        runtime: string;
+                    } | {
+                        kind: "declared_release";
+                        release: string;
+                    } | null;
+                }[];
+                repositories: {
+                    repositoryRole: string;
+                    canonicalUrl: string;
+                    requestedRef: string;
+                    resolvedCommit: string;
+                    origin: "remote_object" | "snapshot_bundle";
+                    sourceObjectsRef: {
+                        id: string;
+                        revision: string;
+                        digest: {
+                            algorithm: "sha256";
+                            hex: string;
+                        };
+                    } | null;
+                    lockfileDigest: {
+                        algorithm: "sha256";
+                        hex: string;
+                    };
+                    dirty: false;
+                }[];
+                corpus: {
+                    id: string;
+                    revision: string;
+                    digest: {
+                        algorithm: "sha256";
+                        hex: string;
+                    };
+                };
+                runner: {
+                    id: string;
+                    revision: string;
+                    digest: {
+                        algorithm: "sha256";
+                        hex: string;
+                    };
+                };
+                evaluator: {
+                    id: string;
+                    revision: string;
+                    digest: {
+                        algorithm: "sha256";
+                        hex: string;
+                    };
+                };
+                frontendRelease: string | null;
+                backendRelease: string | null;
+                workerRelease: string | null;
+                schemaFingerprint: {
+                    algorithm: "sha256";
+                    hex: string;
+                } | null;
+                featureFlagsDigest: {
+                    algorithm: "sha256";
+                    hex: string;
+                } | null;
+                capabilityVersionsDigest: {
+                    algorithm: "sha256";
+                    hex: string;
+                } | null;
+                browserVersion: string | null;
+                containerImageDigest: string | null;
+                modelConfigDigest: {
+                    algorithm: "sha256";
+                    hex: string;
+                } | null;
+            };
+            executionHostRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            };
+        }[];
+        excludedCells: {
+            cellKey: string;
+            reason: string;
+        }[];
+        schemaVersion: "workflow.selection/v1";
+        ref: {
+            id: string;
+            revision: string;
+            digest: {
+                algorithm: "sha256";
+                hex: string;
+            };
+        };
+        scope: {
+            ownerId: string;
+            tenantId: string | null;
+            visibility: "public" | "owner_private" | "tenant_private";
+        };
+    };
+    fidelityPlan: {
+        profileRef: {
+            id: string;
+            revision: string;
+            digest: {
+                algorithm: "sha256";
+                hex: string;
+            };
+        };
+        selectionManifestRef: {
+            id: string;
+            revision: string;
+            digest: {
+                algorithm: "sha256";
+                hex: string;
+            };
+        };
+        cells: {
+            selectionCellId: string;
+            lane: "recorded_replay" | "mock_contract" | "hybrid_live_product" | "full_live_sandbox" | "full_live_canary";
+            boundaryProfileRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            } | null;
+            boundaries: {
+                boundaryId: string;
+                adapterRef: {
+                    id: string;
+                    revision: string;
+                    digest: {
+                        algorithm: "sha256";
+                        hex: string;
+                    };
+                } | null;
+                mode: "real" | "stubbed" | "recorded_replay" | "synthetic_runtime";
+                required: boolean;
+                exclusionReasonRef: {
+                    id: string;
+                    revision: string;
+                    digest: {
+                        algorithm: "sha256";
+                        hex: string;
+                    };
+                } | null;
+                accountClass: "local" | "test_sandbox" | "designated_production" | "none";
+                readbackOracleRef: {
+                    id: string;
+                    revision: string;
+                    digest: {
+                        algorithm: "sha256";
+                        hex: string;
+                    };
+                } | null;
+                interceptorRef: {
+                    id: string;
+                    revision: string;
+                    digest: {
+                        algorithm: "sha256";
+                        hex: string;
+                    };
+                } | null;
+            }[];
+            claimBoundaryIds: string[];
+        }[];
+        schemaVersion: "workflow.fidelity-plan/v1";
+        ref: {
+            id: string;
+            revision: string;
+            digest: {
+                algorithm: "sha256";
+                hex: string;
+            };
+        };
+        scope: {
+            ownerId: string;
+            tenantId: string | null;
+            visibility: "public" | "owner_private" | "tenant_private";
+        };
+    };
+    campaignFixturePlan: {
+        kind: "campaign";
+        selectionManifestRef: {
+            id: string;
+            revision: string;
+            digest: {
+                algorithm: "sha256";
+                hex: string;
+            };
+        };
+        cells: {
+            selectionCellId: string;
+            caseFixturePlanRef: {
+                id: string;
+                revision: string;
+                digest: {
+                    algorithm: "sha256";
+                    hex: string;
+                };
+            } | null;
+        }[];
+        schemaVersion: "workflow.fixture-plan/v1";
+        ref: {
+            id: string;
+            revision: string;
+            digest: {
+                algorithm: "sha256";
+                hex: string;
+            };
+        };
+        scope: {
+            ownerId: string;
+            tenantId: string | null;
+            visibility: "public" | "owner_private" | "tenant_private";
+        };
+    } | null;
+    intelligencePolicy: {
+        stages: Record<"analysis" | "drafting" | "discovery" | "diagnosis" | "evaluation" | "benchmark", {
+            allowed: boolean;
+            maxCalls: number;
+            maxTokens: number;
+            costCeilingCents: number;
+        }>;
+        replayInference: "none";
+        schemaVersion: "workflow.intelligence-policy/v1";
+        ref: {
+            id: string;
+            revision: string;
+            digest: {
+                algorithm: "sha256";
+                hex: string;
+            };
+        };
+        scope: {
+            ownerId: string;
+            tenantId: string | null;
+            visibility: "public" | "owner_private" | "tenant_private";
+        };
+    };
+    prepared: PreparedCell[];
+};

package/dist/core/executionPreparation.js

@@ -0,0 +1,93 @@
+import { ActionRegistry, AuthRecipe, CampaignFixturePlan, CaseFixturePlan, CaseSpec, EnvironmentPlan, FidelityPlan, HostPlan, IntelligencePolicy, LogicalPayload, Persona, SeedRecipe, SelectionManifest, SurfaceBinding, digestOfValue, refKey, sameDigest, verifySelfDigest } from "../protocol/index.js";
+import { compileCase } from "./compiler.js";
+import { Blocked } from "./errors.js";
+import { frozenRunnerCapabilities } from "./runnerCapabilities.js";
+import { repositorySelectionProblems } from "./repositorySelectionEvidence.js";
+export class DocStore {
+    docs = new Map();
+    constructor(documents) {
+        for (const [key, doc] of Object.entries(documents))
+            this.docs.set(key, doc);
+    }
+    get(schema, ref, label) {
+        const doc = this.docs.get(refKey(ref));
+        if (!doc)
+            throw new Blocked([{ code: 'unresolved_ref', detail: `${label}: ${refKey(ref)} is not in the frozen bundle`, owner: 'operator', action: 'plan again; the bundle must carry the executable closure' }]);
+        if (!verifySelfDigest(doc) || !sameDigest(doc.ref.digest, ref.digest)) {
+            throw new Blocked([{ code: 'digest_mismatch', detail: `${label}: ${refKey(ref)} bytes do not hash to the referenced digest`, owner: 'operator', action: 'plan again from reviewed definitions' }]);
+        }
+        const result = schema.safeParse(doc);
+        if (!result.success || result.data === undefined)
+            throw new Blocked([{ code: 'schema_violation', detail: `${label}: ${refKey(ref)}` }]);
+        return result.data;
+    }
+    runnerCapabilities(expected) { return frozenRunnerCapabilities(Object.fromEntries(this.docs), expected); }
+}
+export function checkedFrozenRequest(bundle, scope) {
+    if (!bundle.request)
+        throw new Blocked(bundle.blockers.map((b) => ({ code: b.code, detail: b.detail, owner: b.owner, action: b.action })));
+    const request = bundle.request;
+    if (!verifySelfDigest(request))
+        throw new Blocked([{ code: 'request_digest_mismatch', detail: 'the frozen request was modified after planning', owner: 'operator', action: 'plan again' }]);
+    if (digestOfValue(request.requestedScope).hex !== digestOfValue(scope).hex) {
+        throw new Blocked([{ code: 'scope_mismatch', detail: 'request scope differs from the authenticated controller owner' }]);
+    }
+    return request;
+}
+/** Static executable closure preparation. No host, fixture, provider or effect is invoked. */
+export function prepareFrozenCells(bundle, scope, request) {
+    const docs = new DocStore(bundle.documents);
+    const selection = docs.get(SelectionManifest, request.selectionManifestRef, 'selection');
+    if (digestOfValue(selection.scope).hex !== digestOfValue(scope).hex)
+        throw new Blocked([{ code: 'selection_scope_mismatch', detail: 'selection is outside the admitted owner scope' }]);
+    const selectedCases = [...new Set(selection.cells.map((cell) => refKey(cell.caseRef)))].sort();
+    const requestedCases = request.caseRefs.map(refKey).sort();
+    if (digestOfValue(selectedCases).hex !== digestOfValue(requestedCases).hex)
+        throw new Blocked([{ code: 'request_selection_mismatch', detail: 'request cases must exactly match the frozen selection' }]);
+    const fidelityPlan = docs.get(FidelityPlan, request.fidelityPlanRef, 'fidelity plan');
+    if (!sameDigest(fidelityPlan.selectionManifestRef.digest, selection.ref.digest))
+        throw new Blocked([{ code: 'fidelity_plan_foreign_selection', detail: 'fidelity plan binds a different selection manifest' }]);
+    const campaignFixturePlan = request.fixturePlanRef ? docs.get(CampaignFixturePlan, request.fixturePlanRef, 'fixture plan') : null;
+    if (campaignFixturePlan && !sameDigest(campaignFixturePlan.selectionManifestRef.digest, selection.ref.digest))
+        throw new Blocked([{ code: 'fixture_plan_foreign_selection', detail: 'fixture plan binds a different selection manifest' }]);
+    const intelligencePolicy = docs.get(IntelligencePolicy, request.intelligencePolicyRef, 'intelligence policy');
+    const requiredCells = selection.cells.filter((c) => c.required);
+    if (requiredCells.length === 0)
+        throw new Blocked([{ code: 'empty_required_matrix', detail: 'no required cell selected' }]);
+    // Resolve and compile every cell before any effect.
+    const prepared = selection.cells.map((cell) => {
+        const spec = docs.get(CaseSpec, cell.caseRef, 'case');
+        const persona = docs.get(Persona, cell.personaRef, 'persona');
+        const authRecipe = docs.get(AuthRecipe, persona.authRecipeRef, 'auth recipe');
+        const binding = docs.get(SurfaceBinding, cell.surfaceBindingRef, 'surface binding');
+        const environmentPlan = docs.get(EnvironmentPlan, cell.environmentRef, 'environment plan');
+        const hostPlan = docs.get(HostPlan, cell.executionHostRef, 'host plan');
+        const sourceProblems = repositorySelectionProblems(request, cell, hostPlan, bundle.documents);
+        if (sourceProblems.length)
+            throw new Blocked(sourceProblems.map(detail => ({ code: 'repository_source_binding_invalid', detail })));
+        const capabilities = docs.runnerCapabilities(cell.expectedTarget.runner);
+        const fidelityCell = fidelityPlan.cells.find((f) => f.selectionCellId === cell.selectionCellId);
+        if (!fidelityCell)
+            throw new Blocked([{ code: 'fidelity_cell_missing', detail: cell.selectionCellId }]);
+        for (const required of spec.requiredBoundaries) {
+            const rule = fidelityCell.boundaries.find((b) => b.boundaryId === required.boundaryId);
+            if (!rule || rule.mode !== required.mode)
+                throw new Blocked([{ code: 'fidelity_mode_mismatch', detail: `${spec.ref.id} requires ${required.boundaryId}=${required.mode}`, owner: 'operator', action: 'a live-required case cannot run under a substituted boundary' }]);
+        }
+        let fixture = null;
+        const fixtureCell = campaignFixturePlan?.cells.find((f) => f.selectionCellId === cell.selectionCellId) ?? null;
+        if (spec.fixturePlanRef) {
+            if (!fixtureCell?.caseFixturePlanRef || !sameDigest(fixtureCell.caseFixturePlanRef.digest, spec.fixturePlanRef.digest))
+                throw new Blocked([{ code: 'fixture_plan_missing', detail: `${spec.ref.id} requires its fixture plan in the campaign plan`, owner: 'operator', action: 'a null fixture plan cannot skip required starting state' }]);
+            const plan = docs.get(CaseFixturePlan, spec.fixturePlanRef, 'case fixture plan');
+            const recipe = docs.get(SeedRecipe, plan.seedRecipeRef, 'seed recipe');
+            const payload = docs.get(LogicalPayload, plan.logicalPayloadRef, 'logical payload');
+            const registry = docs.get(ActionRegistry, recipe.actionRegistryRef, 'action registry');
+            fixture = { plan, recipe, payload, registry };
+        }
+        const compiled = compileCase(spec, capabilities, fixture?.recipe ?? null);
+        return { cell, spec, compiled, persona, authRecipe, binding, environmentPlan, hostPlan, fixture, fidelityCell };
+    });
+    return { docs, selection, fidelityPlan, campaignFixturePlan, intelligencePolicy, prepared };
+}
+//# sourceMappingURL=executionPreparation.js.map

package/dist/core/executionPreparation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionPreparation.js","sourceRoot":"","sources":["../../src/core/executionPreparation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,mBAAmB,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAChH,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EACnH,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAkE,MAAM,sBAAsB,CAAC;AACrI,OAAO,EAAE,WAAW,EAAqB,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAE/E,MAAM,OAAO,QAAQ;IACF,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IACnD,YAAY,SAAkC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,GAAG,CAAI,MAAqE,EAAE,GAAQ,EAAE,KAAa;QACnG,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,0DAA0D,EAAE,CAAC,CAAC,CAAC;QACjN,IAAI,CAAC,gBAAgB,CAAC,GAAmB,CAAC,IAAI,CAAC,UAAU,CAAE,GAAoB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACxG,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,6CAA6C,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC,CAAC,CAAC;QACrM,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxI,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IACD,kBAAkB,CAAC,QAAa,IAAwB,OAAO,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;CACpI;AAeD,MAAM,UAAU,oBAAoB,CAAC,MAAoB,EAAE,KAAY;IACrE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3I,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,gDAAgD,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC5L,IAAI,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;QAC3E,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAC,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,MAAoB,EAAE,KAAY,EAAE,OAAmB;IACxF,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAoB,iBAAiB,EAAE,OAAO,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;IAC5G,IAAI,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG;QAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC,CAAC,CAAC;IACxL,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/F,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,cAAc,CAAC,CAAC,GAAG;QAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC,CAAC,CAAC;IACzM,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAe,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACpG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC,CAAC,CAAC;IAChN,MAAM,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAsB,mBAAmB,EAAE,OAAO,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvJ,IAAI,mBAAmB,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC,CAAC,CAAC;IAC5O,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAqB,kBAAkB,EAAE,OAAO,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;IAClI,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;IAE5H,oDAAoD;IACpD,MAAM,QAAQ,GAAmB,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAW,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAU,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAa,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAiB,cAAc,EAAE,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;QACpG,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAkB,eAAe,EAAE,IAAI,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAC5G,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAW,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAClF,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9F,IAAI,cAAc,CAAC,MAAM;YAAE,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,mCAAmC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACpI,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe,CAAC,CAAC;QAChG,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QACxG,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC;YACvF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,aAAa,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,8DAA8D,EAAE,CAAC,CAAC,CAAC;QAC1Q,CAAC;QACD,IAAI,OAAO,GAA4B,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC;QAC/G,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,EAAE,kBAAkB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,iDAAiD,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC,CAAC,CAAC;YAC7U,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAkB,eAAe,EAAE,IAAI,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;YAClG,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAa,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YACnF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAiB,cAAc,EAAE,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;YACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAiB,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;YACvG,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAClH,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;AAC9F,CAAC"}

package/dist/core/executionReadback.d.ts

@@ -0,0 +1,15 @@
+/** Shared trusted-ledger binding checks. Integrity readback does not grant new effect authority. */
+import { type Ref, type Scope } from '../protocol/index.ts';
+import type { VerifiedBundleRecords } from './bundle.ts';
+import type { LedgerReadView } from './ledgerRecords.ts';
+export declare function checkCommittedExecutionBinding(ledger: LedgerReadView, checked: VerifiedBundleRecords, expected: {
+    executionId: string;
+    attemptId: string;
+    generation: number;
+    attemptNumber: number;
+    requestDigest: string;
+    scope: Scope;
+    campaignId: string;
+    requestRef?: Ref;
+    selectionRef?: Ref;
+}): void;

package/dist/core/executionReadback.js

@@ -0,0 +1,21 @@
+/** Shared trusted-ledger binding checks. Integrity readback does not grant new effect authority. */
+import { digestOfValue, sameRef, sameScope } from "../protocol/index.js";
+import { Conflict } from "./errors.js";
+export function checkCommittedExecutionBinding(ledger, checked, expected) {
+    const { executionId, attemptId, generation, attemptNumber, scope } = expected;
+    if (!/^[A-Za-z0-9_-]+$/.test(executionId) || !Number.isInteger(generation) || generation < 1 || !Number.isInteger(attemptNumber) || attemptNumber < 1)
+        throw new Conflict('committed_execution_binding_invalid');
+    const finalized = ledger.current(`execution:${executionId}`);
+    const idempotency = ledger.current(`idempotency:${checked.request.idempotencyKey}`);
+    const finalizedRefs = ledger.history(`execution:${executionId}`).filter(row => row.type === 'cell.finalized').map(row => row.data.receiptRef);
+    if (idempotency?.data.executionId !== executionId || idempotency.data.attemptNumber !== attemptNumber ||
+        checked.request.ref.digest.hex !== expected.requestDigest || expected.requestRef && !sameRef(checked.request.ref, expected.requestRef) ||
+        expected.selectionRef && !sameRef(checked.selection.ref, expected.selectionRef) || !sameScope(checked.campaign.scope, scope) ||
+        checked.campaign.campaignId !== checked.request.campaignId || checked.request.campaignId !== expected.campaignId || !checked.receipts.length ||
+        checked.receipts.some(receipt => receipt.executionId !== executionId || receipt.attemptId !== attemptId || receipt.attemptNumber !== attemptNumber ||
+            receipt.environment.generation !== generation || !sameScope(receipt.scope, scope) || receipt.idempotencyKey !== checked.request.idempotencyKey) ||
+        digestOfValue(finalizedRefs.map(ref => digestOfValue(ref).hex).sort()).hex !== digestOfValue(checked.receipts.map(receipt => digestOfValue(receipt.ref).hex).sort()).hex ||
+        finalized?.type === 'finalized' && (digestOfValue(finalized.data.campaignResultRef).hex !== digestOfValue(checked.campaign.ref).hex || finalized.data.outcome !== checked.campaign.outcome))
+        throw new Conflict('committed_execution_binding_mismatch; no acquisition was replayed');
+}
+//# sourceMappingURL=executionReadback.js.map

package/dist/core/executionReadback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionReadback.js","sourceRoot":"","sources":["../../src/core/executionReadback.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAwB,MAAM,sBAAsB,CAAC;AAE/F,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,UAAU,8BAA8B,CAAC,MAAsB,EAAE,OAA8B,EAAE,QAGtG;IACC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAC9E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC;QACnJ,MAAM,IAAI,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACpF,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9I,IAAI,WAAW,EAAE,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,WAAW,CAAC,IAAI,CAAC,aAAa,KAAK,aAAa;QACjG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,UAAU,CAAC;QACtI,QAAQ,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAC5H,OAAO,CAAC,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM;QAC5I,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,aAAa;YAChJ,OAAO,CAAC,WAAW,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QACjJ,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG;QACxK,SAAS,EAAE,IAAI,KAAK,WAAW,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC7L,MAAM,IAAI,QAAQ,CAAC,mEAAmE,CAAC,CAAC;AAC5F,CAAC"}

package/dist/core/executor.d.ts

@@ -0,0 +1,46 @@
+import { ExecutionReceipt, selfDigest, type CampaignResult, type Scope } from '../protocol/index.ts';
+import type { ExecutorHost } from '../hosts/types.ts';
+import type { LocalLedger } from './ledger.ts';
+import type { FrozenBundle } from './planner.ts';
+import { type QualificationExecutionOwner } from './qualificationExecution.ts';
+export declare const EXIT_CODES: {
+    readonly passed: 0;
+    readonly assertion_failed: 1;
+    readonly blocked: 2;
+    readonly inconclusive: 2;
+    readonly infrastructure_failed: 3;
+    readonly cancelled: 4;
+};
+export type RunSummary = {
+    executionId: string;
+    attemptId: string;
+    generation: number;
+    campaignId: string;
+    outcome: CampaignResult['outcome'];
+    exitCode: number;
+    reasonCodes: string[];
+    receipts: ExecutionReceipt[];
+    campaign: CampaignResult;
+    executionDir: string;
+    redelivered: boolean;
+};
+export type RunOptions = {
+    bundle: FrozenBundle;
+    stateDir: string;
+    ledger: LocalLedger;
+    scope: Scope;
+    signal?: AbortSignal;
+    onEvent?: (event: {
+        kind: string;
+        stepId: string | null;
+        redactedPayload: Record<string, unknown>;
+        at: string;
+    }) => void;
+    hosts?: {
+        local?: ExecutorHost;
+        mock?: ExecutorHost;
+    };
+    qualification?: QualificationExecutionOwner;
+};
+export declare function executeBundle(options: RunOptions): Promise<RunSummary>;
+export { selfDigest };