tracegrove 0.0.0-stage → 0.3.1

package/dist/core/localReviewStore.js

@@ -0,0 +1,167 @@
+import { z } from 'zod';
+import { IdString, PlanEditProjection, PlanReview, PlanRevisionToken, PlanSourceValidation, RefSchema, ScenarioDefinition, ScopeSchema, SourcePlan, digestOfValue, refKey, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { LocalLedger } from "./ledger.js";
+import { Conflict } from "./errors.js";
+import { validateApprovedPlanReview, validatePromotedCases } from "./sourcePromotion.js";
+const State = z.object({ schemaVersion: z.literal('workflow.local-review-state/v1'), projection: PlanEditProjection,
+    plans: z.array(SourcePlan).min(1).max(500), reviews: z.array(PlanReview).max(500), validations: z.array(PlanSourceValidation).max(500),
+}).strict();
+/** Protected single-writer host storage, not a filesystem ACL or distributed authorization service. */
+export class LocalReviewStore {
+    ledger;
+    id;
+    authority;
+    scope;
+    aggregateId;
+    constructor(ledger, id, scope, authority) {
+        this.ledger = ledger;
+        this.id = id;
+        this.authority = authority;
+        IdString.parse(id);
+        this.scope = ScopeSchema.parse(scope);
+        this.aggregateId = `workflow-review:${digestOfValue({ id, scope: this.scope }).hex}`;
+    }
+    scoped(id, scope) {
+        if (id !== this.id || !sameScope(scope, this.scope))
+            throw new Conflict('local review identity or scope mismatch');
+    }
+    checked(raw) {
+        const state = State.parse(raw);
+        this.scoped(state.projection.id, state.projection.scope);
+        const documents = [...state.plans, ...state.reviews, ...state.validations];
+        const identities = new Set();
+        for (const document of documents) {
+            if (!verifySelfDigest(document) || !sameScope(document.scope, this.scope))
+                throw new Conflict('local review document digest or scope mismatch');
+            const identity = JSON.stringify([document.ref.id, document.ref.revision]);
+            if (identities.has(identity))
+                throw new Conflict('local review immutable identity was reused');
+            identities.add(identity);
+        }
+        const current = state.plans.find(plan => sameRef(plan.ref, state.projection.sourcePlanRef));
+        if (!current || state.plans.some(plan => plan.ref.id !== current.ref.id))
+            throw new Conflict('local review plan identity is missing or substituted');
+        if (state.projection.currentReviewRef) {
+            const review = state.reviews.find(review => sameRef(review.ref, state.projection.currentReviewRef));
+            if (!review || !sameRef(review.sourcePlanRef, current.ref) || review.editRevision !== state.projection.editRevision) {
+                throw new Conflict('local review projection retains a stale or missing review');
+            }
+        }
+        for (const review of state.reviews) {
+            const plan = state.plans.find(plan => sameRef(plan.ref, review.sourcePlanRef));
+            if (!plan)
+                throw new Conflict('local review references a missing plan');
+            if (review.decision === 'approved' && !state.validations.some(check => review.reasonRefs.some(ref => sameRef(ref, check.ref)) &&
+                sameRef(check.sourcePlanRef, plan.ref) && sameRef(check.changeModelRef, plan.changeModelRef) &&
+                sameRef(check.revisionMatrixRef, plan.revisionMatrixRef) && sameRef(check.policyRef, review.policyRef))) {
+                throw new Conflict('approved local review lacks its atomically stored source validation');
+            }
+        }
+        return state;
+    }
+    current() {
+        const entry = this.ledger.current(this.aggregateId);
+        if (!entry || !entry.type.startsWith('workflow.review.'))
+            throw new Conflict('local review is not initialized');
+        return { version: entry.version, state: this.checked(entry.data.state) };
+    }
+    write(version, state, event) {
+        this.ledger.append(this.aggregateId, version, event, { state: this.checked(state) });
+    }
+    async initialize(raw) {
+        const plan = SourcePlan.parse(raw);
+        await this.authority.authorize(structuredClone(this.scope), 'edit');
+        const state = { schemaVersion: 'workflow.local-review-state/v1', plans: [plan], reviews: [], validations: [],
+            projection: { id: this.id, scope: this.scope, editRevision: 1, sourcePlanRef: plan.ref, currentReviewRef: null } };
+        this.write(0, state, 'workflow.review.created');
+        return this.read(this.id, this.scope);
+    }
+    /** Stage immutable drafts without changing editable revision or retaining approval for an edit. */
+    async stage(raw) {
+        const plan = SourcePlan.parse(raw);
+        await this.authority.authorize(structuredClone(this.scope), 'edit');
+        const { version, state } = this.current();
+        const existing = state.plans.find(p => p.ref.id === plan.ref.id && p.ref.revision === plan.ref.revision);
+        if (existing && sameRef(existing.ref, plan.ref) && verifySelfDigest(plan))
+            return;
+        if (existing)
+            throw new Conflict('staged revision changes an immutable plan identity');
+        state.plans.push(plan);
+        this.write(version, state, 'workflow.review.draft-staged');
+    }
+    async read(id, scope) {
+        this.scoped(id, scope);
+        const { version, state } = this.current();
+        return { storageVersion: version, projection: structuredClone(state.projection) };
+    }
+    async resolvePlan(ref, scope) {
+        this.scoped(this.id, scope);
+        const plan = this.current().state.plans.find(plan => sameRef(plan.ref, ref));
+        if (!plan)
+            throw new Conflict('local review plan reference is not stored');
+        return structuredClone(plan);
+    }
+    /** Requires current review authority but creates no review or approval. The runtime fence is never serialized. */
+    async approvedSnapshot(ledger, input, expectedReview) {
+        if (ledger !== this.ledger)
+            throw new Conflict('source-backed lifecycle must use the review owner ledger');
+        const token = PlanRevisionToken.parse(input);
+        const reviewRef = RefSchema.parse(expectedReview);
+        this.scoped(token.id, token.scope);
+        await this.authority.authorize(structuredClone(this.scope), 'review');
+        const { version, state } = this.current();
+        const plan = state.plans.find(p => sameRef(p.ref, state.projection.sourcePlanRef));
+        const review = state.reviews.find(r => state.projection.currentReviewRef && sameRef(r.ref, state.projection.currentReviewRef));
+        const validation = review && [...review.reasonRefs].reverse().map(ref => state.validations.find(v => sameRef(v.ref, ref))).find(Boolean);
+        if (!plan || !review || review.decision !== 'approved' || !validation)
+            throw new Conflict('promotion requires a current approved review and persisted source validation');
+        const documents = validateApprovedPlanReview({ storageVersion: version, projection: state.projection, plan, review, validation }, token, reviewRef);
+        return { documents: structuredClone(documents), assertCurrent: () => {
+                if (this.current().version !== version)
+                    throw new Conflict('approved review changed before the lifecycle write');
+            } };
+    }
+    /** Compose with the scenario host's other definition checks; an edited/rejected plan cannot remain current approval. */
+    async definitionSnapshot(ledger, raw) {
+        const definition = ScenarioDefinition.parse(raw);
+        if (!verifySelfDigest(definition) || !definition.sourcePlanRef)
+            throw new Conflict('review-backed scenario needs a sealed source plan binding');
+        const { state } = this.current();
+        const snapshot = await this.approvedSnapshot(ledger, { id: this.id, scope: definition.scope,
+            expectedEditRevision: state.projection.editRevision, expectedSourcePlanRef: definition.sourcePlanRef }, definition.reviewRef);
+        validatePromotedCases(definition, snapshot.documents);
+        return snapshot;
+    }
+    ports() {
+        return { authorize: (scope, action) => { this.scoped(this.id, scope); return this.authority.authorize(structuredClone(scope), action); },
+            validateSources: (plan, policy) => this.authority.validateSources(structuredClone(plan), structuredClone(policy)),
+            resolvePlan: (ref, scope) => this.resolvePlan(ref, scope), read: (id, scope) => this.read(id, scope),
+            compareAndSwap: async (version, raw, review, validation) => {
+                const next = PlanEditProjection.parse(raw);
+                this.scoped(next.id, next.scope);
+                const actor = await this.authority.authorize(structuredClone(this.scope), review ? 'review' : 'edit');
+                const { version: actual, state } = this.current();
+                if (actual !== version)
+                    return false;
+                const before = state.projection;
+                if (!sameRef(next.sourcePlanRef, before.sourcePlanRef)) {
+                    if (review || validation || next.currentReviewRef || next.editRevision !== before.editRevision + 1)
+                        throw new Conflict('local plan edit must advance revision and clear review');
+                }
+                else {
+                    if (!review || next.editRevision !== before.editRevision || !next.currentReviewRef || !sameRef(next.currentReviewRef, review.ref) ||
+                        (review.decision === 'rejected' && validation))
+                        throw new Conflict('local review transition is inconsistent');
+                    if (review.reviewerActorId !== actor.actorId || !sameRef(review.policyRef, actor.policyRef))
+                        throw new Conflict('local review actor or policy changed before commit');
+                    state.reviews.push(review);
+                    if (validation)
+                        state.validations.push(validation);
+                }
+                state.projection = next;
+                this.write(actual, state, review ? 'workflow.review.decided' : 'workflow.review.edited');
+                return true;
+            } };
+    }
+}
+//# sourceMappingURL=localReviewStore.js.map

package/dist/core/localReviewStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localReviewStore.js","sourceRoot":"","sources":["../../src/core/localReviewStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAC/J,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAwB,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAA6B,MAAM,sBAAsB,CAAC;AAEpH,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE,UAAU,EAAE,kBAAkB;IACjH,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACvI,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,uGAAuG;AACvG,MAAM,OAAO,gBAAgB;IAGE;IAAsC;IAA2C;IAF7F,KAAK,CAAQ;IACb,WAAW,CAAS;IACrC,YAA6B,MAAmB,EAAmB,EAAU,EAAE,KAAY,EAAmB,SAA+B;QAAhH,WAAM,GAAN,MAAM,CAAa;QAAmB,OAAE,GAAF,EAAE,CAAQ;QAAiC,cAAS,GAAT,SAAS,CAAsB;QAC3I,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW,GAAG,mBAAmB,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACvF,CAAC;IAEO,MAAM,CAAC,EAAU,EAAE,KAAY;QACrC,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,yCAAyC,CAAC,CAAC;IACrH,CAAC;IACO,OAAO,CAAC,GAAY;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,gDAAgD,CAAC,CAAC;YAChJ,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1E,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC;YAC/F,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,sDAAsD,CAAC,CAAC;QACrJ,IAAI,KAAK,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAiB,CAAC,CAAC,CAAC;YACrG,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBACpH,MAAM,IAAI,QAAQ,CAAC,2DAA2D,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;YAC/E,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,QAAQ,CAAC,wCAAwC,CAAC,CAAC;YACxE,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBACzH,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC;gBAC5F,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBAC5G,MAAM,IAAI,QAAQ,CAAC,qEAAqE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACO,OAAO;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAChH,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3E,CAAC;IACO,KAAK,CAAC,OAAe,EAAE,KAAY,EAAE,KAAa;QACxD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAY;QAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,KAAK,GAAU,EAAE,aAAa,EAAE,gCAAgC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE;YACjH,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;QACrH,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,yBAAyB,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,mGAAmG;IACnG,KAAK,CAAC,KAAK,CAAC,GAAY;QACtB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzG,IAAI,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO;QAClF,IAAI,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;QACvF,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,KAAY;QACjC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAClE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;IACpF,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,GAAQ,EAAE,KAAY;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,2CAA2C,CAAC,CAAC;QAC3E,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,kHAAkH;IAClH,KAAK,CAAC,gBAAgB,CAAC,MAAmB,EAAE,KAAwB,EAAE,cAAmB;QACvF,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,0DAA0D,CAAC,CAAC;QAC3G,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACpI,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/H,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzI,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,QAAQ,CAAC,8EAA8E,CAAC,CAAC;QAC1K,MAAM,SAAS,GAAG,0BAA0B,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACpJ,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE;gBAClE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,KAAK,OAAO;oBAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACnH,CAAC,EAAE,CAAC;IACN,CAAC;IACD,wHAAwH;IACxH,KAAK,CAAC,kBAAkB,CAAC,MAAmB,EAAE,GAAuB;QACnE,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa;YAAE,MAAM,IAAI,QAAQ,CAAC,2DAA2D,CAAC,CAAC;QAChJ,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK;YACzF,oBAAoB,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,qBAAqB,EAAE,UAAU,CAAC,aAAa,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAChI,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,QAAQ,CAAC;IACzE,CAAC;IAED,KAAK;QACH,OAAO,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACtI,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;YACjH,WAAW,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC;YACpG,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;gBACzD,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACtG,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,IAAI,MAAM,KAAK,OAAO;oBAAE,OAAO,KAAK,CAAC;gBACxF,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;gBAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBACvD,IAAI,MAAM,IAAI,UAAU,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,GAAG,CAAC;wBAAE,MAAM,IAAI,QAAQ,CAAC,wDAAwD,CAAC,CAAC;gBACnL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC;wBAC7H,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,UAAU,CAAC;wBAAE,MAAM,IAAI,QAAQ,CAAC,yCAAyC,CAAC,CAAC;oBAClH,IAAI,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC;wBAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;oBACtK,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAAC,IAAI,UAAU;wBAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACjF,CAAC;gBACD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;gBAClH,OAAO,IAAI,CAAC;YACd,CAAC,EAAE,CAAC;IACR,CAAC;CACF"}

package/dist/core/localScenarioActivation.d.ts

@@ -0,0 +1,6 @@
+import type { LocalQualificationResults } from './localQualificationResults.ts';
+import type { LocalScenarioOwner } from './localScenarioOwner.ts';
+import type { ScenarioActivationPorts } from './scenarioActivation.ts';
+export type LocalScenarioActivationAuthority = Pick<ScenarioActivationPorts, 'resolvePolicy' | 'authorizeActivation'>;
+/** Internal composition over the existing scenario owner; no separate transaction or activation journal. */
+export declare function localScenarioActivationPorts(owner: LocalScenarioOwner, results: LocalQualificationResults, authority: LocalScenarioActivationAuthority): ScenarioActivationPorts;

package/dist/core/localScenarioActivation.js

@@ -0,0 +1,70 @@
+import { IdString, ScenarioActivation, ScenarioActivationIntent, ScenarioProjection, ScenarioReplayAssessment, digestOfValue, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { storedDefinition } from "./localScenarioState.js";
+import { ActivationActor, deriveScenarioActivation } from "./activationDecision.js";
+import { assessScenarioReplay } from "./replayAssessment.js";
+import { validateScenarioSnapshot } from "./scenario.js";
+import { Conflict } from "./errors.js";
+/** Internal composition over the existing scenario owner; no separate transaction or activation journal. */
+export function localScenarioActivationPorts(owner, results, authority) {
+    const scoped = (scope) => { if (!sameScope(scope, owner.scope))
+        throw new Conflict('activation belongs to another scope'); };
+    const ports = { ...owner.readPorts, ...results.replayPorts(),
+        authorize: async (scope) => { scoped(scope); await owner.authorizeRead(structuredClone(scope)); },
+        resolvePolicy: async (ref, scope) => { scoped(scope); return authority.resolvePolicy(structuredClone(ref), structuredClone(scope)); },
+        authorizeActivation: async (scope, digest) => { scoped(scope); return authority.authorizeActivation(structuredClone(scope), structuredClone(digest)); },
+        readActivation: async (key, scope) => {
+            IdString.parse(key);
+            scoped(scope);
+            await owner.authorizeRead(structuredClone(scope));
+            const records = owner.current().state.scenarios.flatMap(scenario => scenario.activations);
+            return structuredClone(records.find(record => record.activation.intent.idempotencyKey === key)?.activation ?? null);
+        },
+        compareAndSwapActivation: async (rawIntent, rawNext, rawActivation, rawReport) => {
+            const intent = ScenarioActivationIntent.parse(rawIntent);
+            const next = ScenarioProjection.parse(rawNext);
+            const activation = ScenarioActivation.parse(rawActivation);
+            const submitted = ScenarioReplayAssessment.parse(rawReport);
+            scoped(intent.snapshot.scope);
+            scoped(next.scope);
+            scoped(activation.scope);
+            if (intent.snapshot.id !== owner.id || next.id !== owner.id || !verifySelfDigest(activation))
+                throw new Conflict('activation scenario identity or seal changed');
+            await owner.authorizeRead(structuredClone(owner.scope));
+            const { version, state } = owner.current();
+            const entry = owner.entry(state);
+            if (state.scenarios.some(scenario => scenario.activations.some(a => a.activation.intent.idempotencyKey === intent.idempotencyKey)))
+                return false;
+            validateScenarioSnapshot({ projection: entry.projection, admissions: entry.admissions }, intent.snapshot);
+            const evidence = await results.replaySnapshot(owner.ledger);
+            // Raw retained evidence and current policy are re-read inside the commit boundary.
+            // The submitted report, actor and projection never grant authority by themselves.
+            let report;
+            try {
+                report = await assessScenarioReplay({ ...ports, ...evidence }, intent.snapshot);
+            }
+            catch (error) {
+                if (error instanceof Conflict && owner.current().version !== version)
+                    return false;
+                throw error;
+            }
+            if (digestOfValue(report).hex !== digestOfValue(submitted).hex)
+                throw new Conflict('activation selected evidence changed before commit');
+            const definition = storedDefinition(entry, entry.projection.definitionRef);
+            const reviewed = await owner.checkDefinition(definition);
+            const actor = ActivationActor.parse(await ports.authorizeActivation(structuredClone(owner.scope), digestOfValue(intent)));
+            const expected = deriveScenarioActivation(intent, entry.projection, definition, report, actor, activation.activatedAt);
+            if (digestOfValue(next).hex !== digestOfValue(expected.next).hex || digestOfValue(activation).hex !== digestOfValue(expected.activation).hex)
+                throw new Conflict('activation actor, intent, assessments or projection differ from current authority');
+            if (owner.current().version !== version)
+                return false;
+            evidence.assertCurrent(); // Synchronous with the single journal append below.
+            reviewed?.assertCurrent();
+            entry.projection = next;
+            entry.activations.push({ activation, report });
+            owner.write(version, state, 'workflow.scenario.activated');
+            return true;
+        },
+    };
+    return ports;
+}
+//# sourceMappingURL=localScenarioActivation.js.map

package/dist/core/localScenarioActivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localScenarioActivation.js","sourceRoot":"","sources":["../../src/core/localScenarioActivation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,wBAAwB,EAC3G,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAc,MAAM,sBAAsB,CAAC;AAEvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAGzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,4GAA4G;AAC5G,MAAM,UAAU,4BAA4B,CAAC,KAAyB,EAAE,OAAkC,EACxG,SAA2C;IAC3C,MAAM,MAAM,GAAG,CAAC,KAAY,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpI,MAAM,KAAK,GAA4B,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE;QACnF,SAAS,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrI,mBAAmB,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,mBAAmB,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACvJ,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACnC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YACtF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC1F,OAAO,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,KAAK,GAAG,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC;QACtH,CAAC;QACD,wBAAwB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE;YAC/E,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzG,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAAC,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YACjK,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACxD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7E,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACjJ,wBAAwB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1G,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5D,mFAAmF;YACnF,kFAAkF;YAClF,IAAI,MAAgC,CAAC;YACrC,IAAI,CAAC;gBAAC,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,QAAQ,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YACxF,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,KAAK,OAAO;oBAAE,OAAO,KAAK,CAAC;gBACnF,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,SAAS,CAAC,CAAC,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACzI,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,mBAAmB,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1H,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;YACvH,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,mFAAmF,CAAC,CAAC;YACtP,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAC;YACtD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,oDAAoD;YAC9E,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC1B,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;YAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACxE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,6BAA6B,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/localScenarioOwner.d.ts

@@ -0,0 +1,20 @@
+import type { Scope, ScenarioDefinition } from '../protocol/index.ts';
+import type { LocalLedger } from './ledger.ts';
+import type { LocalScenarioState, StoredScenario } from './localScenarioState.ts';
+import type { ScenarioReadPorts } from './scenario.ts';
+import type { ApprovedPlanSnapshot } from './sourcePromotion.ts';
+/** Internal single-writer repository access shared by lifecycle transaction adapters. */
+export interface LocalScenarioOwner {
+    id: string;
+    scope: Scope;
+    ledger: LocalLedger;
+    readPorts: ScenarioReadPorts;
+    authorizeRead(scope: Scope): Promise<void>;
+    checkDefinition(definition: ScenarioDefinition): Promise<ApprovedPlanSnapshot | null>;
+    current(): {
+        version: number;
+        state: LocalScenarioState;
+    };
+    entry(state: LocalScenarioState): StoredScenario;
+    write(version: number, state: LocalScenarioState, event: string): void;
+}

package/dist/core/localScenarioOwner.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=localScenarioOwner.js.map

package/dist/core/localScenarioOwner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localScenarioOwner.js","sourceRoot":"","sources":["../../src/core/localScenarioOwner.ts"],"names":[],"mappings":""}

package/dist/core/localScenarioPromotion.d.ts

@@ -0,0 +1,9 @@
+import { type ScenarioPromotionPorts } from './sourcePromotion.ts';
+import type { LocalReviewStore } from './localReviewStore.ts';
+import type { LocalScenarioOwner } from './localScenarioOwner.ts';
+export type LocalScenarioPromotionAuthority = Pick<ScenarioPromotionPorts, 'authorizePromotion'>;
+type Owner = LocalScenarioOwner & {
+    authorizeInitialization(): Promise<void>;
+};
+export declare function localScenarioPromotionPorts(owner: Owner, review: LocalReviewStore, authority: LocalScenarioPromotionAuthority): ScenarioPromotionPorts;
+export {};

package/dist/core/localScenarioPromotion.js

@@ -0,0 +1,49 @@
+import { IdString, ScenarioPromotion, ScenarioProjection, digestOfValue, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { deriveScenarioPromotion, normalizePromotionIntent, PromotionActor } from "./sourcePromotion.js";
+import { Conflict } from "./errors.js";
+export function localScenarioPromotionPorts(owner, review, authority) {
+    const scoped = (scope) => { if (!sameScope(scope, owner.scope))
+        throw new Conflict('promotion scope mismatch'); };
+    return { authorizePromotion: async (scope, digest) => { scoped(scope); return authority.authorizePromotion(structuredClone(scope), structuredClone(digest)); },
+        resolveApprovedReview: async (token, reviewRef) => (await review.approvedSnapshot(owner.ledger, token, reviewRef)).documents,
+        validateDefinition: definition => owner.readPorts.validateDefinition(definition),
+        readPromotion: async (key, scope) => {
+            IdString.parse(key);
+            scoped(scope);
+            await owner.authorizeRead(structuredClone(scope));
+            return structuredClone(owner.current().state.scenarios.find(s => s.promotion?.receipt.intent.idempotencyKey === key)?.promotion?.receipt ?? null);
+        },
+        compareAndSwapPromotion: async (rawIntent, rawDefinition, rawSelections, rawReceipt, rawApproved) => {
+            const intent = normalizePromotionIntent(rawIntent);
+            scoped(intent.reviewToken.scope);
+            const receipt = ScenarioPromotion.parse(rawReceipt);
+            if (intent.scenarioId !== owner.id || !verifySelfDigest(receipt))
+                throw new Conflict('promotion scenario identity or seal changed');
+            await owner.authorizeInitialization();
+            const { version, state } = owner.current();
+            if (state.scenarios.some(s => s.promotion?.receipt.intent.idempotencyKey === intent.idempotencyKey))
+                return false;
+            if (state.scenarios.some(s => s.projection.id === owner.id))
+                throw new Conflict('promotion cannot overwrite an existing scenario');
+            const approved = await review.approvedSnapshot(owner.ledger, intent.reviewToken, rawDefinition.reviewRef);
+            if (digestOfValue(approved.documents).hex !== digestOfValue(rawApproved).hex)
+                throw new Conflict('approved source snapshot changed before promotion');
+            await owner.readPorts.validateDefinition(structuredClone(rawDefinition));
+            await owner.authorizeInitialization();
+            const actor = PromotionActor.parse(await authority.authorizePromotion(structuredClone(owner.scope), digestOfValue(intent)));
+            const expected = deriveScenarioPromotion(intent, rawDefinition, rawSelections, approved.documents, actor, receipt.promotedAt);
+            if (digestOfValue(expected.promotion).hex !== digestOfValue(receipt).hex)
+                throw new Conflict('promotion manifest differs from current source or actor authority');
+            if (owner.current().version !== version)
+                return false;
+            approved.assertCurrent(); // Synchronous with the single scenario-registry publication below.
+            state.scenarios.push({ projection: ScenarioProjection.parse({ id: owner.id, scope: owner.scope, aggregateVersion: 1,
+                    definitionRef: expected.definition.ref, state: 'proposed', invalidationEpoch: 0, latestRoundSequence: 0,
+                    qualificationRoundRefs: [], activationDecisionRef: null }), definitions: [expected.definition], selections: expected.selections,
+                admissions: [], activations: [], structuralValidations: [], promotion: { receipt, approved: approved.documents } });
+            owner.write(version, state, 'workflow.scenario.promoted');
+            return true;
+        },
+    };
+}
+//# sourceMappingURL=localScenarioPromotion.js.map

package/dist/core/localScenarioPromotion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localScenarioPromotion.js","sourceRoot":"","sources":["../../src/core/localScenarioPromotion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACnI,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,cAAc,EAA+B,MAAM,sBAAsB,CAAC;AAGtI,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIvC,MAAM,UAAU,2BAA2B,CAAC,KAAY,EAAE,MAAwB,EAAE,SAA0C;IAC5H,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;IACtI,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5J,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS;QAC5H,kBAAkB,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAC,UAAU,CAAC;QAChF,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAClC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YACtF,OAAO,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,KAAK,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;QACpJ,CAAC;QACD,uBAAuB,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE;YAClG,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACrF,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC;YACpI,MAAM,KAAK,CAAC,uBAAuB,EAAE,CAAC;YACtC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClH,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,iDAAiD,CAAC,CAAC;YACnI,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;YAC1G,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,WAAW,CAAC,CAAC,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,mDAAmD,CAAC,CAAC;YACtJ,MAAM,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;YACzE,MAAM,KAAK,CAAC,uBAAuB,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5H,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAC9H,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,mEAAmE,CAAC,CAAC;YAClK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAC;YACtD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,mEAAmE;YAC7F,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC;oBACjH,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC;oBACvG,sBAAsB,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/H,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACtH,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QACzE,CAAC;KACF,CAAC;AACJ,CAAC"}