tracegrove 0.0.0-stage → 0.3.1

package/dist/core/qualificationExecution.js

@@ -0,0 +1,54 @@
+import { z } from 'zod';
+import { QualificationRoundAdmission, ScenarioDefinition, SelectionManifest, RunRequest, refKey, sameRef, sameScope, verifySelfDigest, digestOfValue } from "../protocol/index.js";
+import { checkAdmission } from "./localScenarioState.js";
+import { Conflict } from "./errors.js";
+import { ApprovedPlanReview, validateApprovedPlanReview, validatePromotedCases } from "./sourcePromotion.js";
+export const QualificationExecutionContext = z.object({ admission: QualificationRoundAdmission, definition: ScenarioDefinition,
+    selection: SelectionManifest, matrix: SelectionManifest, sourceReview: ApprovedPlanReview.optional() }).strict();
+export function localQualificationExecutionOwner(store, authorizeEffects) {
+    return { resolve: (ref, scope, ledger) => store.executionContext(ref, scope, ledger), authorizeEffects };
+}
+export function validateQualificationExecution(request, selection, raw) {
+    const context = QualificationExecutionContext.parse(raw);
+    const { admission, definition, matrix } = context;
+    for (const document of [admission, definition, selection, context.selection, matrix]) {
+        if (!verifySelfDigest(document) || !sameScope(document.scope, request.requestedScope))
+            throw new Conflict('qualification document seal or scope mismatch');
+    }
+    checkAdmission({ definitions: [definition], selections: [matrix, context.selection] }, admission);
+    if (definition.sourcePlanRef) {
+        if (!context.sourceReview)
+            throw new Conflict('source-backed qualification needs current review owner evidence');
+        const approved = context.sourceReview;
+        validateApprovedPlanReview(approved, { id: approved.projection.id, scope: definition.scope,
+            expectedEditRevision: approved.projection.editRevision, expectedSourcePlanRef: definition.sourcePlanRef }, definition.reviewRef);
+        validatePromotedCases(definition, approved);
+    }
+    else if (context.sourceReview)
+        throw new Conflict('unbound source review in qualification context');
+    if (admission.attempts.some(a => [a.executionId, a.attemptId].some(id => !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(id) || id === '.' || id === '..')))
+        throw new Conflict('qualification allocation IDs must be safe local path segments');
+    const nullableEqual = (a, b) => a === null ? b === null : b !== null && sameRef(a, b);
+    const unique = (values) => new Set(values).size === values.length;
+    if (request.purpose !== 'qualification' || !request.qualificationRoundRef || !sameRef(request.qualificationRoundRef, admission.ref) ||
+        request.campaignId !== admission.campaignId || request.scenarioRefs.length !== 1 || !sameRef(request.scenarioRefs[0], definition.ref) ||
+        !nullableEqual(request.sourcePlanRef, definition.sourcePlanRef) || !nullableEqual(request.reviewRef, definition.reviewRef) ||
+        !sameRef(request.selectionManifestRef, selection.ref) || !sameRef(selection.ref, context.selection.ref) || !sameRef(selection.ref, admission.selectionManifestRef) ||
+        admission.attempts.length !== selection.cells.length || !unique(admission.attempts.map(a => a.selectionCellId)) ||
+        !unique(admission.attempts.map(a => a.executionId)) || !unique(admission.attempts.map(a => a.attemptId)) || !unique(admission.stateLeaseRefs.map(r => r.id)) ||
+        digestOfValue([...new Set(request.caseRefs.map(refKey))].sort()).hex !== digestOfValue([...new Set(definition.caseRefs.map(refKey))].sort()).hex)
+        throw new Conflict('qualification request differs from its registered closure or allocations');
+    return context;
+}
+export async function authorizeQualificationExecution(owner, request, selection, ledger, cellId) {
+    if (!request.qualificationRoundRef)
+        throw new Conflict('qualification execution requires a registered round');
+    const context = validateQualificationExecution(request, selection, await owner.resolve(structuredClone(request.qualificationRoundRef), structuredClone(request.requestedScope), ledger));
+    await owner.authorizeEffects(structuredClone(request), structuredClone(context.admission), cellId);
+    // Effect authorization may yield while invalidation or source/lease revocation is committed.
+    const current = validateQualificationExecution(request, selection, await owner.resolve(structuredClone(request.qualificationRoundRef), structuredClone(request.requestedScope), ledger));
+    if (digestOfValue(current).hex !== digestOfValue(context).hex)
+        throw new Conflict('qualification authority changed before effects');
+    return current;
+}
+//# sourceMappingURL=qualificationExecution.js.map

package/dist/core/qualificationExecution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qualificationExecution.js","sourceRoot":"","sources":["../../src/core/qualificationExecution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EACjH,gBAAgB,EAAE,aAAa,EAAwB,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7G,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,2BAA2B,EAAE,UAAU,EAAE,kBAAkB;IAC5H,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAOnH,MAAM,UAAU,gCAAgC,CAAC,KAAyB,EACxE,gBAAiE;IACjE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC;AAC3G,CAAC;AACD,MAAM,UAAU,8BAA8B,CAAC,OAAmB,EAAE,SAA4B,EAAE,GAAY;IAC5G,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC5G,KAAK,MAAM,QAAQ,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IAC7J,CAAC;IACD,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAClG,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,MAAM,IAAI,QAAQ,CAAC,iEAAiE,CAAC,CAAC;QACjH,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;QACtC,0BAA0B,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK;YACxF,oBAAoB,EAAE,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE,qBAAqB,EAAE,UAAU,CAAC,aAAa,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QACnI,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;SAAM,IAAI,OAAO,CAAC,YAAY;QAAE,MAAM,IAAI,QAAQ,CAAC,gDAAgD,CAAC,CAAC;IACtG,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,+DAA+D,CAAC,CAAC;IACtO,MAAM,aAAa,GAAG,CAAC,CAAa,EAAE,CAAa,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,CAAC,MAAgB,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC;IAC5E,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,SAAS,CAAC,GAAG,CAAC;QAC/H,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAE,EAAE,UAAU,CAAC,GAAG,CAAC;QACtI,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC;QAC1H,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,oBAAoB,CAAC;QAClK,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC/G,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5J,aAAa,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,0EAA0E,CAAC,CAAC;IACrP,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAAkC,EAAE,OAAmB,EAAE,SAA4B,EACzI,MAAmB,EAAE,MAAqB;IAC1C,IAAI,CAAC,OAAO,CAAC,qBAAqB;QAAE,MAAM,IAAI,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,8BAA8B,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACzL,MAAM,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACnG,6FAA6F;IAC7F,MAAM,OAAO,GAAG,8BAA8B,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACzL,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,gDAAgD,CAAC,CAAC;IACpI,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/recoveryStatus.d.ts

@@ -0,0 +1,6 @@
+import { RecoveryStatusReport, type Scope } from '../protocol/index.ts';
+export declare function inspectRecoveryStatus(options: {
+    stateDir: string;
+    executionId: string;
+    scope: Scope;
+}): RecoveryStatusReport;

package/dist/core/recoveryStatus.js

@@ -0,0 +1,123 @@
+/** Read-only, checkpoint-bound diagnostics. Recorded cleanup is not a new absence observation. */
+import { lstatSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { z } from 'zod';
+import { RecoveryStatusReport } from "../protocol/index.js";
+import { requireRealDirectory } from "./atomicFiles.js";
+import { readVerifiedBundle } from "./bundle.js";
+import { checkCommittedExecutionBinding } from "./executionReadback.js";
+import { readExecutionOwnership } from "./executionOwnership.js";
+import { inspectLedger, LedgerInspectionError } from "./ledgerInspection.js";
+const guidance = {
+    ledger_snapshot_unavailable: 'Select an existing readable owned state directory. Inspection creates no state or locks.',
+    ledger_snapshot_changed: 'The checkpoint changed during inspection. Repeat this read-only command; no recovery action was admitted.',
+    ledger_snapshot_invalid: 'Preserve the journal and seek trusted reconciliation of its incomplete or invalid records; do not edit or truncate it.',
+    execution_missing: 'Select an execution recorded in this state directory.',
+    execution_binding_invalid: 'Preserve the records and check the execution, scope and attempt binding with the trusted owner.',
+    ownership_missing: 'Legacy or missing ownership inventory requires trusted reconciliation; absence of inventory does not prove cleanup.',
+    ownership_invalid: 'Preserve the ownership records and obtain trusted binding reconciliation; no resource was discharged.',
+    ownership_unresolved: 'Recorded acquisitions remain unresolved. Preserve their evidence; a trusted reconciliation path must establish cleanup before replay.',
+    execution_in_flight: 'A final or interrupted transition is not recorded. Inspect through the current trusted owner; do not break locks or infer process absence.',
+    interrupted_without_manifest: 'No committed bundle is available. Preserve incomplete records; use the original frozen request through normal admission only if another attempt is intended.',
+    committed_evidence_invalid: 'Preserve the existing execution and reconcile its missing or corrupt evidence. Do not replay the acquisition.',
+    committed_binding_mismatch: 'The committed evidence does not match this ledger attempt. Preserve both for trusted reconciliation; do not replay it.',
+    committed_readback_available: 'The checkpoint contains matching committed evidence and recorded removals. Normal run admission must recheck it and sync before finalizing; inspection did neither.',
+    finalized_evidence_verified: 'The finalized records match verified historical evidence. Inspection performed no new execution and grants no retry authority.',
+    recovery_inspection_failed: 'Preserve the existing state and inspect it with its trusted owner. No cleanup, lock recovery or execution was attempted.',
+};
+function empty() {
+    return { schemaVersion: 'tracegrove.recovery-status/v1', exitCode: 2, code: 'recovery_inspection_failed', recovery: guidance.recovery_inspection_failed,
+        checkpoint: null, writerLock: 'unknown', recordedPhase: null, resources: null, bundle: 'not_checked', historicalOutcome: null,
+        actionAuthority: 'none', execution: 'not_started_by_inspection', verificationVerdict: 'not_evaluated' };
+}
+const Admission = z.object({ requestDigest: z.string().regex(/^[a-f0-9]{64}$/), attemptId: z.string().min(1).max(256),
+    generation: z.number().int().positive(), attemptNumber: z.number().int().positive() });
+export function inspectRecoveryStatus(options) {
+    const report = empty();
+    try {
+        if (!/^[A-Za-z0-9_-]{1,256}$/.test(options.executionId))
+            return RecoveryStatusReport.parse({ ...report,
+                code: 'execution_binding_invalid', recovery: guidance.execution_binding_invalid });
+        const view = inspectLedger(options.stateDir);
+        report.checkpoint = { ...view.head };
+        report.writerLock = view.writerLock;
+        const finish = (code, exitCode = 2) => {
+            view.assertUnchanged();
+            return RecoveryStatusReport.parse({ ...report, code, exitCode, recovery: guidance[code] });
+        };
+        const executionId = options.executionId;
+        const history = view.history(`execution:${executionId}`);
+        const state = history.at(-1);
+        if (!state)
+            return finish('execution_missing');
+        const admitted = history.find(row => row.type === 'admitted');
+        const admission = Admission.safeParse(admitted?.data);
+        if (!admission.success)
+            return finish('execution_binding_invalid');
+        report.recordedPhase = ['admitted', 'cell.finalized', 'interrupted', 'finalized'].includes(state.type) ? state.type : 'other';
+        const ownership = view.current(`ownership:${executionId}`);
+        if (!ownership)
+            return finish('ownership_missing');
+        const campaign = z.object({ binding: z.object({ campaignId: z.string().min(1) }) }).safeParse(ownership.data);
+        if (!campaign.success)
+            return finish('ownership_invalid');
+        const expected = { executionId, attemptId: admission.data.attemptId, generation: admission.data.generation,
+            requestDigest: admission.data.requestDigest, campaignId: campaign.data.binding.campaignId, scope: options.scope };
+        let inventory;
+        try {
+            inventory = readExecutionOwnership(view, expected).inventory;
+        }
+        catch {
+            return finish('ownership_invalid');
+        }
+        const counts = () => ({ reserved: 0, observed: 0, cleanup_pending: 0, removed: 0 });
+        report.resources = { host: counts(), fixture: counts() };
+        for (const resource of inventory.resources)
+            report.resources[resource.kind][resource.state]++;
+        // These are journal states only. Never infer removal from a PID, path or elapsed time.
+        const unresolved = inventory.resources.some(resource => resource.state !== 'removed');
+        if (unresolved && state.type !== 'finalized')
+            return finish('ownership_unresolved');
+        if (state.type !== 'finalized' && state.type !== 'interrupted')
+            return finish('execution_in_flight');
+        const dir = join(resolve(options.stateDir), 'executions', executionId);
+        try {
+            requireRealDirectory(dir);
+            lstatSync(join(dir, 'manifest.json'));
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                report.bundle = 'absent';
+                return finish(state.type === 'finalized' ? 'committed_evidence_invalid' : 'interrupted_without_manifest');
+            }
+            report.bundle = 'invalid';
+            return finish('committed_evidence_invalid');
+        }
+        let checked;
+        try {
+            checked = readVerifiedBundle(dir);
+        }
+        catch {
+            report.bundle = 'invalid';
+            return finish('committed_evidence_invalid');
+        }
+        try {
+            checkCommittedExecutionBinding(view, checked, { ...expected, attemptNumber: admission.data.attemptNumber });
+        }
+        catch {
+            report.bundle = 'invalid';
+            return finish('committed_binding_mismatch');
+        }
+        report.bundle = 'verified_bound';
+        report.historicalOutcome = checked.campaign.outcome;
+        // Finalized records may preserve failed/unconfirmed cleanup: show it rather than imply readiness.
+        if (unresolved)
+            return finish('ownership_unresolved');
+        return finish(state.type === 'finalized' ? 'finalized_evidence_verified' : 'committed_readback_available', 0);
+    }
+    catch (error) {
+        const code = error instanceof LedgerInspectionError ? error.code : 'recovery_inspection_failed';
+        return RecoveryStatusReport.parse({ ...empty(), code, recovery: guidance[code] });
+    }
+}
+//# sourceMappingURL=recoveryStatus.js.map

package/dist/core/recoveryStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryStatus.js","sourceRoot":"","sources":["../../src/core/recoveryStatus.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAc,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAG7E,MAAM,QAAQ,GAAyB;IACrC,2BAA2B,EAAE,0FAA0F;IACvH,uBAAuB,EAAE,2GAA2G;IACpI,uBAAuB,EAAE,wHAAwH;IACjJ,iBAAiB,EAAE,uDAAuD;IAC1E,yBAAyB,EAAE,iGAAiG;IAC5H,iBAAiB,EAAE,qHAAqH;IACxI,iBAAiB,EAAE,uGAAuG;IAC1H,oBAAoB,EAAE,uIAAuI;IAC7J,mBAAmB,EAAE,4IAA4I;IACjK,4BAA4B,EAAE,8JAA8J;IAC5L,0BAA0B,EAAE,+GAA+G;IAC3I,0BAA0B,EAAE,wHAAwH;IACpJ,4BAA4B,EAAE,qKAAqK;IACnM,2BAA2B,EAAE,gIAAgI;IAC7J,0BAA0B,EAAE,0HAA0H;CACvJ,CAAC;AACF,SAAS,KAAK;IACZ,OAAO,EAAE,aAAa,EAAE,+BAA+B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,QAAQ,EAAE,QAAQ,CAAC,0BAA0B;QACrJ,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,IAAI;QAC7H,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,eAAe,EAAE,CAAC;AAC5G,CAAC;AACD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEzF,MAAM,UAAU,qBAAqB,CAAC,OAAgE;IACpG,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM;gBACpG,IAAI,EAAE,2BAA2B,EAAE,QAAQ,EAAE,QAAQ,CAAC,yBAAyB,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAC1E,MAAM,MAAM,GAAG,CAAC,IAAU,EAAE,WAAkB,CAAC,EAAE,EAAE;YACjD,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,OAAO,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACnE,MAAM,CAAC,aAAa,GAAG,CAAC,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAA0D,CAAC,CAAC,CAAC,OAAO,CAAC;QACpL,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,WAAW,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9G,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU;YACxG,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACpH,IAAI,SAAiE,CAAC;QACtE,IAAI,CAAC;YAAC,SAAS,GAAG,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC;QAAC,CAAC;QACrE,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QACzD,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9F,uFAAuF;QACvF,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QACtF,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACpF,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACrG,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,CAAC;YAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;QAAC,CAAC;QACzE,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAAC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC;YACtI,CAAC;YACD,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;YAAC,OAAO,MAAM,CAAC,4BAA4B,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,OAA8C,CAAC;QACnD,IAAI,CAAC;YAAC,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAC1C,MAAM,CAAC;YAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;YAAC,OAAO,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAAC,CAAC;QACjF,IAAI,CAAC;YAAC,8BAA8B,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAAC,CAAC;QACpH,MAAM,CAAC;YAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;YAAC,OAAO,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAAC,CAAC;QACjF,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAC;QAAC,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtF,kGAAkG;QAClG,IAAI,UAAU;YAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;IAChH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B,CAAC;QAChG,OAAO,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC"}

package/dist/core/reducer.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Trusted reducer: derives expected assertion instances from the frozen case, evaluates them
+ * against recorded step observations, computes coverage and the per-cell/campaign outcomes.
+ * Producer flags are redundant checks, never authority.
+ */
+import { AssertionObservation, BrowserObservation, CampaignResult, Coverage, type CaseSpec, type EnvironmentBinding, type ExecutionReceipt, type Outcome, type PredicateT, type Ref, type SelectionManifest, type StepObservation, type TargetTuple, type Scope } from '../protocol/index.ts';
+export declare const REDUCER_REF: Ref;
+export declare function getPath(value: unknown, path: string): {
+    present: boolean;
+    value: unknown;
+};
+export type ObservationView = {
+    status?: number | undefined;
+    body?: unknown;
+    browser?: BrowserObservation;
+    stepResult?: StepObservation['result'] | undefined;
+};
+export declare function evaluatePredicate(predicate: PredicateT, view: ObservationView): {
+    pass: boolean;
+    actual: unknown;
+    reason: string | null;
+};
+export declare function evaluateAssertions(spec: CaseSpec, environmentClass: EnvironmentBinding['class'], steps: StepObservation[], producerRef: Ref, from: string, to: string): AssertionObservation[];
+export type CellReductionInput = {
+    spec: CaseSpec;
+    expectedStepIds: string[];
+    steps: StepObservation[];
+    assertions: AssertionObservation[];
+    cancelled: boolean;
+    fixtureState: 'verified' | 'failed' | 'blocked' | 'cancelled' | 'unknown' | 'not_required';
+    identityMatched: boolean | null;
+    fidelityMatched: boolean;
+    requiredCapabilitiesObserved: boolean;
+    artifactsVerified: boolean;
+    unknownMutations: number;
+    criticalCleanupConfirmed: boolean;
+    infrastructureFailure: boolean;
+    blockedReasons: string[];
+};
+export declare function reduceCell(input: CellReductionInput): {
+    outcome: Outcome;
+    reasonCodes: string[];
+    proofEligible: boolean;
+    coverage: Coverage;
+};
+export declare function reduceCampaign(input: {
+    scope: Scope;
+    campaignId: string;
+    requestRef: Ref;
+    selection: SelectionManifest;
+    receipts: ExecutionReceipt[];
+}): CampaignResult;
+export declare function compareTargets(expected: TargetTuple, observed: TargetTuple | null): {
+    matched: boolean | null;
+    mismatches: string[];
+};

package/dist/core/reducer.js

@@ -0,0 +1,355 @@
+/**
+ * Trusted reducer: derives expected assertion instances from the frozen case, evaluates them
+ * against recorded step observations, computes coverage and the per-cell/campaign outcomes.
+ * Producer flags are redundant checks, never authority.
+ */
+import { AssertionObservation, BrowserObservation, NativeJobObservation, McpToolObservation, CampaignResult, Coverage, digestOfValue, freeze, parseAs, } from "../protocol/index.js";
+import { nowIso } from "./clock.js";
+import { isInfrastructureStepFailure } from "./errors.js";
+export const REDUCER_REF = (() => {
+    const base = { id: 'tracegrove.reducer', revision: '0.1.0' };
+    return { ...base, digest: digestOfValue(base) };
+})();
+export function getPath(value, path) {
+    let current = value;
+    for (const segment of path.split('.')) {
+        const match = segment.match(/^([A-Za-z_][A-Za-z0-9_]*)(?:\[([0-9]+)\])?$/);
+        if (!match)
+            return { present: false, value: undefined };
+        const key = match[1];
+        if (!current || typeof current !== 'object' || !(key in current))
+            return { present: false, value: undefined };
+        current = current[key];
+        if (match[2] !== undefined) {
+            if (!Array.isArray(current))
+                return { present: false, value: undefined };
+            const index = Number(match[2]);
+            if (index >= current.length)
+                return { present: false, value: undefined };
+            current = current[index];
+        }
+    }
+    return { present: current !== undefined, value: current };
+}
+function jsonEqual(a, b) {
+    return digestOfValue(a).hex === digestOfValue(b).hex;
+}
+export function evaluatePredicate(predicate, view) {
+    switch (predicate.kind) {
+        case 'status_equals': return { pass: view.status === predicate.value, actual: view.status ?? null, reason: view.status === predicate.value ? null : `status ${view.status ?? 'none'} != ${predicate.value}` };
+        case 'json_path_equals': {
+            const got = getPath(view, predicate.path);
+            const pass = got.present && jsonEqual(got.value, predicate.value);
+            return { pass, actual: got.present ? got.value : null, reason: pass ? null : `${predicate.path} ${got.present ? 'differs' : 'absent'}` };
+        }
+        case 'json_path_present': {
+            const got = getPath(view, predicate.path);
+            return { pass: got.present, actual: got.present ? got.value : null, reason: got.present ? null : `${predicate.path} absent` };
+        }
+        case 'json_path_absent': {
+            const got = getPath(view, predicate.path);
+            return { pass: !got.present, actual: got.present ? got.value : null, reason: got.present ? null : `${predicate.path} present` };
+        }
+        case 'json_path_count': {
+            const got = getPath(view, predicate.path);
+            const count = Array.isArray(got.value) ? got.value.length : got.present ? 1 : 0;
+            return { pass: count === predicate.count, actual: count, reason: count === predicate.count ? null : `count ${count} != ${predicate.count}` };
+        }
+        case 'step_result': return { pass: view.stepResult === predicate.value, actual: view.stepResult ?? null, reason: view.stepResult === predicate.value ? null : `step ${view.stepResult ?? 'unobserved'} != ${predicate.value}` };
+        case 'all': {
+            const results = predicate.predicates.map((p) => evaluatePredicate(p, view));
+            const failed = results.find((r) => !r.pass);
+            return { pass: !failed, actual: results.map((r) => r.actual), reason: failed ? failed.reason : null };
+        }
+    }
+}
+export function evaluateAssertions(spec, environmentClass, steps, producerRef, from, to) {
+    const byStep = new Map(steps.map((s) => [s.stepId, s]));
+    const expected = [...spec.preconditions, ...spec.assertions];
+    return expected.map((assertion) => {
+        const oracleRef = { id: assertion.oracle.name, revision: assertion.oracle.version, digest: digestOfValue(assertion.oracle) };
+        const applicable = assertion.environmentClasses.includes(environmentClass);
+        const step = byStep.get(assertion.stepId);
+        let result;
+        let reasonCode = null;
+        let actual = null;
+        if (!applicable) {
+            result = 'not_applicable';
+        }
+        else if (!step || step.result === 'not_run' || step.result === 'cancelled') {
+            result = 'not_observed';
+            reasonCode = step ? `step_${step.result}` : 'step_missing';
+        }
+        else if (step.result === 'failed' && isInfrastructureStepFailure(step.reasonCode)) {
+            result = 'not_observed';
+            reasonCode = step.reasonCode;
+        }
+        else if (assertion.oracle.name === 'step.result') {
+            const evaluation = evaluatePredicate(assertion.predicate, { stepResult: step.result });
+            result = evaluation.pass ? 'pass' : 'fail';
+            actual = evaluation.actual;
+            reasonCode = evaluation.reason;
+        }
+        else if (assertion.oracle.name === 'browser.observation') {
+            const browser = BrowserObservation.safeParse(step.output);
+            if (!browser.success || browser.data.textTruncated) {
+                result = 'not_observed';
+                reasonCode = 'invalid_or_truncated_browser_observation';
+            }
+            else {
+                const evaluation = evaluatePredicate(assertion.predicate, { browser: browser.data });
+                result = evaluation.pass ? 'pass' : 'fail';
+                actual = evaluation.actual;
+                reasonCode = evaluation.reason;
+            }
+        }
+        else if (assertion.oracle.name === 'mcp.observation') {
+            const mcp = McpToolObservation.safeParse(step.output);
+            const expected = spec.steps.find(item => item.id === assertion.stepId);
+            if (!mcp.success || expected?.kind !== 'mcp.call' || mcp.data.tool !== expected.command.tool || mcp.data.endpoint !== expected.command.endpoint) {
+                result = 'not_observed';
+                reasonCode = 'invalid_mcp_observation';
+            }
+            else {
+                const evaluation = evaluatePredicate(assertion.predicate, { body: mcp.data });
+                result = evaluation.pass ? 'pass' : 'fail';
+                actual = evaluation.actual;
+                reasonCode = evaluation.reason;
+            }
+        }
+        else if (assertion.oracle.name === 'job.observation') {
+            const job = NativeJobObservation.safeParse(step.output);
+            if (!job.success) {
+                result = 'not_observed';
+                reasonCode = 'invalid_native_job_observation';
+            }
+            else {
+                const evaluation = evaluatePredicate(assertion.predicate, { body: job.data });
+                result = evaluation.pass ? 'pass' : 'fail';
+                actual = evaluation.actual;
+                reasonCode = evaluation.reason;
+            }
+        }
+        else {
+            const output = (step.output ?? null);
+            if (!output) {
+                result = 'not_observed';
+                reasonCode = 'no_observation_recorded';
+            }
+            else {
+                const evaluation = evaluatePredicate(assertion.predicate, { status: output.status, body: output.body });
+                result = evaluation.pass ? 'pass' : 'fail';
+                actual = evaluation.actual;
+                reasonCode = evaluation.reason;
+            }
+        }
+        return parseAs(AssertionObservation, {
+            assertionId: assertion.id,
+            required: assertion.required,
+            oracleRef,
+            result,
+            reasonCode,
+            actual: actual ?? null,
+            evidenceRefs: [],
+            producerRef,
+            inputDigest: digestOfValue({ assertion, stepOutput: step?.outputDigest ?? null }),
+            observedFrom: from,
+            observedTo: to,
+            judge: null,
+        }, `assertion ${assertion.id}`);
+    });
+}
+export function reduceCell(input) {
+    const reasons = [...input.blockedReasons];
+    const observedSteps = new Set(input.steps.map((s) => s.stepId));
+    const missingSteps = input.expectedStepIds.filter((id) => !observedSteps.has(id));
+    const completedSteps = input.steps.filter((s) => s.result === 'completed').length;
+    const requiredAssertions = input.assertions.filter((a) => a.required && a.result !== 'not_applicable');
+    const passedRequired = requiredAssertions.filter((a) => a.result === 'pass').length;
+    const failedRequired = requiredAssertions.filter((a) => a.result === 'fail');
+    const unobservedRequired = requiredAssertions.filter((a) => a.result === 'not_observed');
+    if (missingSteps.length > 0)
+        reasons.push(`missing_step_observation:${missingSteps.join('/')}`);
+    if (requiredAssertions.length === 0)
+        reasons.push('zero_required_assertions');
+    let outcome;
+    if (failedRequired.length > 0) {
+        outcome = 'assertion_failed';
+        reasons.push(...failedRequired.map((a) => `assertion_failed:${a.assertionId}`));
+    }
+    else if (input.blockedReasons.length > 0) {
+        outcome = 'blocked';
+    }
+    else if (input.cancelled) {
+        outcome = 'cancelled';
+        reasons.push('cancelled_before_completion');
+    }
+    else if (input.fixtureState !== 'verified' && input.fixtureState !== 'not_required') {
+        outcome = 'blocked';
+        reasons.push(`fixture_${input.fixtureState}`);
+    }
+    else if (input.infrastructureFailure) {
+        outcome = 'infrastructure_failed';
+    }
+    else if (unobservedRequired.length > 0 || missingSteps.length > 0 || completedSteps !== input.expectedStepIds.length) {
+        outcome = 'inconclusive';
+        reasons.push(...unobservedRequired.map((a) => `required_not_observed:${a.assertionId}`));
+    }
+    else if (input.identityMatched !== true) {
+        outcome = 'inconclusive';
+        reasons.push(input.identityMatched === null ? 'required_identity_unknown' : 'identity_mismatch');
+    }
+    else if (!input.fidelityMatched) {
+        outcome = 'inconclusive';
+        reasons.push('boundary_fidelity_mismatch');
+    }
+    else if (!input.requiredCapabilitiesObserved) {
+        outcome = 'blocked';
+        reasons.push('required_capability_not_observed');
+    }
+    else if (!input.artifactsVerified) {
+        outcome = 'inconclusive';
+        reasons.push('required_artifacts_unverified');
+    }
+    else if (input.unknownMutations > 0 || !input.criticalCleanupConfirmed) {
+        outcome = 'inconclusive';
+        reasons.push(input.unknownMutations > 0 ? 'unknown_mutations_remain' : 'critical_cleanup_unconfirmed');
+    }
+    else if (requiredAssertions.length === 0) {
+        outcome = 'inconclusive';
+    }
+    else {
+        outcome = 'passed';
+    }
+    // Evidence/cleanup failures stay recorded even on assertion failure.
+    if (outcome === 'assertion_failed') {
+        if (!input.artifactsVerified)
+            reasons.push('required_artifacts_unverified');
+        if (!input.criticalCleanupConfirmed)
+            reasons.push('critical_cleanup_unconfirmed');
+    }
+    const proofEligible = outcome === 'passed';
+    const coverage = parseAs(Coverage, {
+        selected: 1, required: 1, attempted: 1, observed: 1,
+        passed: outcome === 'passed' ? 1 : 0, blocked: outcome === 'blocked' ? 1 : 0, excluded: 0,
+        requiredCells: [],
+        expectedSteps: input.expectedStepIds.length,
+        completedSteps,
+        requiredAssertions: requiredAssertions.length,
+        passedRequiredAssertions: passedRequired,
+    }, 'coverage');
+    return { outcome, reasonCodes: [...new Set(reasons)], proofEligible, coverage };
+}
+export function reduceCampaign(input) {
+    const byCell = new Map();
+    for (const receipt of input.receipts) {
+        const list = byCell.get(receipt.selectionCellId) ?? [];
+        list.push(receipt);
+        byCell.set(receipt.selectionCellId, list);
+    }
+    const missing = [];
+    const cellReceiptRefs = [];
+    const requiredCells = [];
+    const outcomes = [];
+    let duplicate = false;
+    for (const cell of input.selection.cells) {
+        const list = byCell.get(cell.selectionCellId) ?? [];
+        if (list.length === 0) {
+            missing.push(cell.selectionCellId);
+            if (cell.required)
+                requiredCells.push({ selectionCellId: cell.selectionCellId, outcome: 'missing' });
+            continue;
+        }
+        if (list.length > 1)
+            duplicate = true;
+        const receipt = list[0];
+        // The receipt must bind its own cell's case/persona/binding, never another cell's defaults.
+        const bound = receipt.caseRef.digest.hex === cell.caseRef.digest.hex && receipt.personaRef.digest.hex === cell.personaRef.digest.hex && receipt.surfaceBindingRef.digest.hex === cell.surfaceBindingRef.digest.hex;
+        const outcome = bound ? receipt.outcome : 'inconclusive';
+        cellReceiptRefs.push({ selectionCellId: cell.selectionCellId, receiptRef: receipt.ref });
+        if (cell.required) {
+            requiredCells.push({ selectionCellId: cell.selectionCellId, outcome: bound ? outcome : 'relabeled_receipt' });
+            outcomes.push(outcome);
+        }
+    }
+    const unknownCells = [...byCell.keys()].filter((id) => !input.selection.cells.some((cell) => cell.selectionCellId === id));
+    const requiredCount = input.selection.cells.filter((c) => c.required).length;
+    let outcome;
+    if (requiredCount === 0)
+        outcome = 'inconclusive';
+    else if (duplicate || unknownCells.length > 0)
+        outcome = 'inconclusive';
+    else if (outcomes.some((o) => o === 'assertion_failed'))
+        outcome = 'assertion_failed';
+    else if (missing.length > 0 && requiredCells.some((c) => c.outcome === 'missing'))
+        outcome = 'inconclusive';
+    else if (outcomes.some((o) => o === 'blocked'))
+        outcome = 'blocked';
+    else if (outcomes.some((o) => o === 'infrastructure_failed'))
+        outcome = 'infrastructure_failed';
+    else if (outcomes.some((o) => o === 'cancelled'))
+        outcome = 'cancelled';
+    else if (outcomes.some((o) => o === 'inconclusive'))
+        outcome = 'inconclusive';
+    else
+        outcome = 'passed';
+    const receiptsForCoverage = input.receipts;
+    const coverage = parseAs(Coverage, {
+        selected: input.selection.cells.length,
+        required: requiredCount,
+        attempted: cellReceiptRefs.length,
+        observed: cellReceiptRefs.length,
+        passed: receiptsForCoverage.filter((r) => r.outcome === 'passed').length,
+        blocked: receiptsForCoverage.filter((r) => r.outcome === 'blocked').length,
+        excluded: input.selection.excludedCells.length,
+        requiredCells,
+        expectedSteps: receiptsForCoverage.reduce((n, r) => n + r.coverage.expectedSteps, 0),
+        completedSteps: receiptsForCoverage.reduce((n, r) => n + r.coverage.completedSteps, 0),
+        requiredAssertions: receiptsForCoverage.reduce((n, r) => n + r.coverage.requiredAssertions, 0),
+        passedRequiredAssertions: receiptsForCoverage.reduce((n, r) => n + r.coverage.passedRequiredAssertions, 0),
+    }, 'campaign coverage');
+    const result = freeze({
+        schemaVersion: 'workflow.campaign-result/v1',
+        ref: { id: `${input.campaignId}.result`, revision: '1' },
+        scope: input.scope,
+        campaignId: input.campaignId,
+        requestRef: input.requestRef,
+        selectionManifestRef: input.selection.ref,
+        cellReceiptRefs,
+        missingCellIds: missing,
+        coverage,
+        outcome,
+        proofEligible: outcome === 'passed',
+        finalizedAt: nowIso(),
+    });
+    return parseAs(CampaignResult, result, 'campaign result');
+}
+export function compareTargets(expected, observed) {
+    if (!observed)
+        return { matched: null, mismatches: ['no observed target'] };
+    const mismatches = [];
+    for (const field of Object.keys(expected)) {
+        if (field !== 'components' && !jsonEqual(expected[field], observed[field]))
+            mismatches.push(`${field}: identity differs`);
+    }
+    for (const componentId of expected.requiredComponents) {
+        const exp = expected.components.find((c) => c.componentId === componentId);
+        const obs = observed.components.find((c) => c.componentId === componentId);
+        if (!exp || !exp.identity) {
+            mismatches.push(`${componentId}: expected identity missing`);
+            continue;
+        }
+        if (!obs || !obs.identity) {
+            mismatches.push(`${componentId}: not observed`);
+            continue;
+        }
+        if (exp.kind !== obs.kind)
+            mismatches.push(`${componentId}: component kind differs`);
+        if (digestOfValue(exp.identity).hex !== digestOfValue(obs.identity).hex)
+            mismatches.push(`${componentId}: identity differs`);
+    }
+    if (mismatches.some((m) => m.endsWith('not observed')))
+        return { matched: null, mismatches };
+    return { matched: mismatches.length === 0, mismatches };
+}
+//# sourceMappingURL=reducer.js.map