tracegrove 0.0.0-stage → 0.3.1

package/dist/core/review.js

@@ -0,0 +1,65 @@
+import { z } from 'zod';
+import { IdString, PlanEditProjection, PlanReview, PlanRevisionToken, PositiveInt, RefSchema, ScopeSchema, SourcePlan, PlanSourceValidation, freeze, parseAs, refKey, refList, selfDigest, sameDigest, sameRef, sameScope, verifySelfDigest, } from "../protocol/index.js";
+import { Blocked, Conflict } from "./errors.js";
+import { newId } from "./clock.js";
+async function current(ports, token) {
+    const snapshot = await ports.read(token.id, structuredClone(token.scope));
+    const projection = PlanEditProjection.parse(snapshot.projection);
+    PositiveInt.parse(snapshot.storageVersion);
+    if (projection.id !== token.id || !sameScope(projection.scope, token.scope))
+        throw new Conflict('plan scope mismatch');
+    if (projection.editRevision !== token.expectedEditRevision || refKey(projection.sourcePlanRef) !== refKey(token.expectedSourcePlanRef)) {
+        throw new Conflict('stale plan edit revision or specification digest; preserve the draft and reload');
+    }
+    return { storageVersion: snapshot.storageVersion, projection };
+}
+async function resolved(ports, ref, scope) {
+    const plan = parseAs(SourcePlan, await ports.resolvePlan(structuredClone(ref), structuredClone(scope)), 'source plan');
+    if (refKey(plan.ref) !== refKey(ref) || !sameDigest(selfDigest(plan), ref.digest) || !sameScope(plan.scope, scope)) {
+        throw new Conflict('resolved plan digest or scope mismatch');
+    }
+    return plan;
+}
+/** Every specification edit clears review; observation refreshes do not call this operation. */
+export async function editPlan(ports, token, nextRef) {
+    token = PlanRevisionToken.parse(token);
+    nextRef = RefSchema.parse(nextRef);
+    await ports.authorize(ScopeSchema.parse(token.scope), 'edit');
+    const snapshot = await current(ports, token);
+    if (nextRef.id !== snapshot.projection.sourcePlanRef.id || nextRef.revision === snapshot.projection.sourcePlanRef.revision) {
+        throw new Conflict('edit requires a new immutable revision of the same plan');
+    }
+    await resolved(ports, nextRef, token.scope);
+    const next = PlanEditProjection.parse({ ...snapshot.projection, editRevision: snapshot.projection.editRevision + 1, sourcePlanRef: nextRef, currentReviewRef: null });
+    if (!await ports.compareAndSwap(snapshot.storageVersion, structuredClone(next), null, null))
+        throw new Conflict('plan changed during edit; preserve the draft and reload');
+    return next;
+}
+/** Review identity/policy come only from authenticated host admission, never request fields. */
+export async function reviewPlan(ports, token, decision, reasonRefs) {
+    token = PlanRevisionToken.parse(token);
+    decision = z.enum(['approved', 'rejected']).parse(decision);
+    reasonRefs = refList().parse(reasonRefs);
+    const admission = z.object({ actorId: IdString, policyRef: RefSchema }).strict().parse(await ports.authorize(ScopeSchema.parse(token.scope), 'review'));
+    const snapshot = await current(ports, token);
+    const plan = await resolved(ports, snapshot.projection.sourcePlanRef, token.scope);
+    if (decision === 'approved' && typeof ports.validateSources !== 'function')
+        throw new Blocked([{ code: 'source_validation_unavailable',
+                detail: 'Approval requires a registered source checker', owner: 'review host', action: 'wire validatePlanSources and atomic validation/review persistence' }]);
+    const validation = decision === 'approved' ? PlanSourceValidation.parse(await ports.validateSources(structuredClone(plan), structuredClone(admission.policyRef))) : null;
+    if (validation && (!verifySelfDigest(validation) || !sameScope(validation.scope, token.scope) || !sameRef(validation.sourcePlanRef, plan.ref)
+        || !sameRef(validation.changeModelRef, plan.changeModelRef) || !sameRef(validation.revisionMatrixRef, plan.revisionMatrixRef)
+        || !sameRef(validation.policyRef, admission.policyRef)))
+        throw new Conflict('source validation does not bind this reviewed plan and policy');
+    const review = PlanReview.parse(freeze({
+        schemaVersion: 'workflow.plan-review/v1', ref: { id: newId('review'), revision: '1' },
+        scope: snapshot.projection.scope, sourcePlanRef: snapshot.projection.sourcePlanRef,
+        editRevision: snapshot.projection.editRevision, decision,
+        reviewerActorId: admission.actorId, policyRef: admission.policyRef, reasonRefs: validation ? [...reasonRefs, validation.ref] : reasonRefs,
+    }));
+    const next = { ...snapshot.projection, currentReviewRef: review.ref };
+    if (!await ports.compareAndSwap(snapshot.storageVersion, structuredClone(next), structuredClone(review), validation ? structuredClone(validation) : null))
+        throw new Conflict('plan changed during review; reload before reviewing');
+    return review;
+}
+//# sourceMappingURL=review.js.map

package/dist/core/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/core/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAChG,UAAU,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,GAEjI,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAgBnC,KAAK,UAAU,OAAO,CAAC,KAAsB,EAAE,KAAwB;IACrE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACvH,IAAI,UAAU,CAAC,YAAY,KAAK,KAAK,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACvI,MAAM,IAAI,QAAQ,CAAC,iFAAiF,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAsB,EAAE,GAAQ,EAAE,KAAY;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,MAAM,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACvH,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACnH,MAAM,IAAI,QAAQ,CAAC,wCAAwC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAsB,EAAE,KAAwB,EAAE,OAAY;IAC3F,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QAC3H,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IACtK,IAAI,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAC3K,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAsB,EAAE,KAAwB,EAAE,QAAiC,EAAE,UAAiB;IAEtG,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,UAAU,GAAG,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxJ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACnF,IAAI,QAAQ,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,UAAU;QAAE,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,+BAA+B;gBACpI,MAAM,EAAE,+CAA+C,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC,CAAC,CAAC;IACjK,MAAM,UAAU,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzK,IAAI,UAAU,IAAI,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC;WACtI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC;WAC1H,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,+DAA+D,CAAC,CAAC;IACjJ,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;QACrC,aAAa,EAAE,yBAAyB,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;QACrF,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,aAAa;QAClF,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ;QACxD,eAAe,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU;KAC1I,CAAC,CAAC,CAAC;IACJ,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IACtE,IAAI,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IACrO,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/runnerCapabilities.d.ts

@@ -0,0 +1,22 @@
+import { RunnerProfile, type Ref, type RunnerCapabilities } from '../protocol/index.ts';
+import { Blocked } from './errors.ts';
+export declare function runnerCapabilitiesFor(profile: RunnerProfile): RunnerCapabilities;
+/** A diagnostic, never a substitute identity or evidence-verification result. */
+export type RunnerCompatibilityDiagnostic = {
+    schemaVersion: 'tracegrove.runner-compatibility/v1';
+    code: 'runner_profile_missing' | 'runner_capability_revision_unsupported' | 'runner_capability_digest_mismatch';
+    profileEvidence: 'present' | 'missing_or_invalid';
+    verification: 'not_completed';
+    requestedRunner: Ref;
+    availableProfiles: Array<{
+        profile: Ref;
+        reproducedRunner: Ref;
+    }>;
+    action: string;
+};
+export declare class RunnerCompatibilityError extends Blocked {
+    readonly diagnostic: RunnerCompatibilityDiagnostic;
+    constructor(diagnostic: RunnerCompatibilityDiagnostic);
+}
+/** Planner, executor, and verifier share one reproduction rule; step names cannot select a runner. */
+export declare function frozenRunnerCapabilities(documents: Record<string, unknown>, expected: Ref): RunnerCapabilities;

package/dist/core/runnerCapabilities.js

@@ -0,0 +1,44 @@
+import { RunnerProfile, digestOfValue, refKey, verifySelfDigest } from "../protocol/index.js";
+import { HTTP_RUNNER_CAPABILITIES } from "../adapters/http/capabilities.js";
+import { BROWSER_RUNNER_CAPABILITIES } from "../adapters/browser/capabilities.js";
+import { NATIVE_JOB_RUNNER_CAPABILITIES } from "../adapters/job/capabilities.js";
+import { MCP_RUNNER_CAPABILITIES } from "../adapters/mcp/capabilities.js";
+import { Blocked } from "./errors.js";
+export function runnerCapabilitiesFor(profile) {
+    const caps = { ...(profile.adapter === 'mcp' ? MCP_RUNNER_CAPABILITIES : profile.adapter === 'native_job' ? NATIVE_JOB_RUNNER_CAPABILITIES : profile.adapter === 'browser' ? BROWSER_RUNNER_CAPABILITIES : HTTP_RUNNER_CAPABILITIES),
+        maxStepsPerCase: profile.maxStepsPerCase, cancellation: profile.cancellation };
+    const base = { ...caps, ref: { id: caps.ref.id, revision: caps.ref.revision } };
+    return { ...caps, ref: { ...base.ref, digest: digestOfValue(base) } };
+}
+export class RunnerCompatibilityError extends Blocked {
+    diagnostic;
+    constructor(diagnostic) {
+        super([{ code: diagnostic.code,
+                detail: diagnostic.code === 'runner_profile_missing' ? 'no valid frozen profile for the requested runner identity'
+                    : `frozen profile present; requested ${diagnostic.requestedRunner.id}@${diagnostic.requestedRunner.revision} cannot be reproduced exactly by this verifier; see docs/verified-bundles.md#runner-compatibility`,
+                action: diagnostic.action }]);
+        this.diagnostic = diagnostic;
+    }
+}
+/** Planner, executor, and verifier share one reproduction rule; step names cannot select a runner. */
+export function frozenRunnerCapabilities(documents, expected) {
+    const related = [];
+    for (const document of Object.values(documents)) {
+        const profile = RunnerProfile.safeParse(document);
+        if (!profile.success || !verifySelfDigest(profile.data))
+            continue;
+        const capabilities = runnerCapabilitiesFor(profile.data);
+        if (refKey(capabilities.ref) === refKey(expected))
+            return capabilities;
+        if (capabilities.ref.id === expected.id)
+            related.push({ profile: profile.data.ref, reproducedRunner: capabilities.ref });
+    }
+    const code = related.length === 0 ? 'runner_profile_missing'
+        : related.some(candidate => candidate.reproducedRunner.revision === expected.revision) ? 'runner_capability_digest_mismatch'
+            : 'runner_capability_revision_unsupported';
+    throw new RunnerCompatibilityError({ schemaVersion: 'tracegrove.runner-compatibility/v1', code,
+        profileEvidence: related.length ? 'present' : 'missing_or_invalid', verification: 'not_completed', requestedRunner: expected,
+        availableProfiles: related.sort((a, b) => refKey(a.profile).localeCompare(refKey(b.profile))).slice(0, 32),
+        action: 'Preserve the original bundle. Do not edit or reseal runner references. Inspect it with its recorded compatible verifier and dependency closure, or perform a new authorized execution to qualify the current runtime. See docs/verified-bundles.md#runner-compatibility.' });
+}
+//# sourceMappingURL=runnerCapabilities.js.map

package/dist/core/runnerCapabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runnerCapabilities.js","sourceRoot":"","sources":["../../src/core/runnerCapabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAqC,MAAM,sBAAsB,CAAC;AACjI,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,MAAM,UAAU,qBAAqB,CAAC,OAAsB;IAC1D,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAClO,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IACjF,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChF,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACxE,CAAC;AAaD,MAAM,OAAO,wBAAyB,SAAQ,OAAO;IAC9B;IAArB,YAAqB,UAAyC;QAC5D,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI;gBAC5B,MAAM,EAAE,UAAU,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC,CAAC,2DAA2D;oBAChH,CAAC,CAAC,qCAAqC,UAAU,CAAC,eAAe,CAAC,EAAE,IAAI,UAAU,CAAC,eAAe,CAAC,QAAQ,mGAAmG;gBAChN,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAJb,eAAU,GAAV,UAAU,CAA+B;IAK9D,CAAC;CACF;AAED,sGAAsG;AACtG,MAAM,UAAU,wBAAwB,CAAC,SAAkC,EAAE,QAAa;IACxF,MAAM,OAAO,GAAuD,EAAE,CAAC;IACvE,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QAClE,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,YAAY,CAAC;QACvE,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,wBAAwB;QAC1D,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mCAAmC;YAC5H,CAAC,CAAC,wCAAwC,CAAC;IAC7C,MAAM,IAAI,wBAAwB,CAAC,EAAE,aAAa,EAAE,oCAAoC,EAAE,IAAI;QAC5F,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,QAAQ;QAC5H,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1G,MAAM,EAAE,0QAA0Q,EAAE,CAAC,CAAC;AAC1R,CAAC"}

package/dist/core/scenario.d.ts

@@ -0,0 +1,32 @@
+import { QualificationRoundAdmission, QualificationRoundIntent, ScenarioDefinition, ScenarioProjection, ScenarioRevisionToken, SelectionManifest, type Ref, type Scope } from '../protocol/index.ts';
+export { ScenarioRevisionToken, QualificationRoundIntent } from '../protocol/index.ts';
+export interface ScenarioSnapshot {
+    projection: ScenarioProjection;
+    admissions: QualificationRoundAdmission[];
+}
+export interface ScenarioPorts {
+    authorize(scope: Scope, action: 'register_round' | 'invalidate'): Promise<void>;
+    read(id: string, scope: Scope): Promise<ScenarioSnapshot>;
+    resolveDefinition(ref: Ref, scope: Scope): Promise<unknown>;
+    resolveSelection(ref: Ref, scope: Scope): Promise<unknown>;
+    /** Registered host resolves and validates review, replay, matrix, policy and target closure. */
+    validateDefinition(definition: ScenarioDefinition): Promise<void>;
+    /** Atomic owner verifies/reserves lease authority and publishes admission + projection, or neither. */
+    compareAndSwap(expectedAggregateVersion: number, projection: ScenarioProjection, admission: QualificationRoundAdmission | null): Promise<boolean>;
+}
+export declare const qualificationStrataDigest: (selection: SelectionManifest) => {
+    algorithm: "sha256";
+    hex: string;
+};
+export type ScenarioReadPorts = Pick<ScenarioPorts, 'read' | 'resolveDefinition' | 'resolveSelection' | 'validateDefinition'>;
+export declare function validateScenarioSnapshot(raw: unknown, token: ScenarioRevisionToken): ScenarioSnapshot;
+export declare function readScenarioSnapshot(ports: ScenarioReadPorts, token: ScenarioRevisionToken): Promise<ScenarioSnapshot>;
+export declare function validateScenarioDefinition(raw: unknown, ref: Ref, scope: Scope): ScenarioDefinition;
+export declare function resolveScenarioDefinition(ports: ScenarioReadPorts, ref: Ref, scope: Scope): Promise<ScenarioDefinition>;
+export declare function validateQualificationSelection(raw: unknown, ref: Ref, scope: Scope): SelectionManifest;
+export declare function resolveQualificationSelection(ports: ScenarioReadPorts, ref: Ref, scope: Scope): Promise<SelectionManifest>;
+export declare function validateQualificationMatrix(scenario: ScenarioDefinition, matrix: SelectionManifest, selected: SelectionManifest): void;
+/** Registers the complete pending round before execution; never activates coverage or admits effects. */
+export declare function registerQualificationRound(ports: ScenarioPorts, input: ScenarioRevisionToken, requested: QualificationRoundIntent): Promise<QualificationRoundAdmission>;
+/** Semantic replacement retains history, advances the epoch and clears activation authority. */
+export declare function invalidateScenario(ports: ScenarioPorts, input: ScenarioRevisionToken, nextRef: Ref): Promise<ScenarioProjection>;

package/dist/core/scenario.js

@@ -0,0 +1,119 @@
+import { z } from 'zod';
+import { QualificationRoundAdmission, QualificationRoundIntent, RefSchema, ScenarioDefinition, ScenarioProjection, ScenarioRevisionToken, SelectionManifest, digestOfValue, freeze, refKey, sameDigest, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { Conflict } from "./errors.js";
+import { newId } from "./clock.js";
+export { ScenarioRevisionToken, QualificationRoundIntent } from "../protocol/index.js";
+const Snapshot = z.object({ projection: ScenarioProjection, admissions: z.array(QualificationRoundAdmission).max(500) }).strict();
+const refKeys = (refs) => [...new Set(refs.map(refKey))].sort();
+const compareIds = (a, b) => a < b ? -1 : a > b ? 1 : 0;
+export const qualificationStrataDigest = (selection) => digestOfValue({
+    cells: [...selection.cells].sort((a, b) => compareIds(a.selectionCellId, b.selectionCellId)),
+    excludedCells: [...selection.excludedCells].sort((a, b) => compareIds(a.cellKey, b.cellKey)), policyRef: selection.policyRef,
+});
+export function validateScenarioSnapshot(raw, token) {
+    const snapshot = Snapshot.parse(raw);
+    const p = snapshot.projection;
+    if (p.id !== token.id || !sameScope(p.scope, token.scope) || p.aggregateVersion !== token.expectedAggregateVersion ||
+        !sameRef(p.definitionRef, token.expectedDefinitionRef) || p.invalidationEpoch !== token.expectedInvalidationEpoch ||
+        p.latestRoundSequence !== token.expectedLatestRoundSequence)
+        throw new Conflict('stale scenario version, definition, epoch or latest round');
+    const history = [...snapshot.admissions].sort((a, b) => a.roundSequence - b.roundSequence);
+    if (history.length !== p.latestRoundSequence || history.some((a, index) => !verifySelfDigest(a) || !sameScope(a.scope, p.scope) ||
+        a.scenarioRef.id !== p.definitionRef.id || a.roundSequence !== index + 1 || a.invalidationEpoch > p.invalidationEpoch ||
+        (index > 0 && a.invalidationEpoch < history[index - 1].invalidationEpoch))) {
+        throw new Conflict('scenario admission history is incomplete or substituted');
+    }
+    const unique = (values) => new Set(values).size === values.length;
+    if (!unique(history.map(a => a.campaignId)) || !unique(history.flatMap(a => a.attempts.map(attempt => attempt.executionId))) ||
+        !unique(history.flatMap(a => a.attempts.map(attempt => attempt.attemptId))) ||
+        !unique(history.flatMap(a => a.stateLeaseRefs.map(ref => ref.id))))
+        throw new Conflict('scenario history reuses campaign, attempt or leased-state identities');
+    return snapshot;
+}
+export async function readScenarioSnapshot(ports, token) {
+    return validateScenarioSnapshot(await ports.read(token.id, structuredClone(token.scope)), token);
+}
+export function validateScenarioDefinition(raw, ref, scope) {
+    const value = ScenarioDefinition.parse(raw);
+    if (!sameRef(value.ref, ref) || !sameScope(value.scope, scope) || !verifySelfDigest(value))
+        throw new Conflict('scenario definition digest or scope mismatch');
+    if (refKeys(value.caseRefs).length !== value.caseRefs.length)
+        throw new Conflict('duplicate scenario case reference');
+    return value;
+}
+export async function resolveScenarioDefinition(ports, ref, scope) {
+    const value = validateScenarioDefinition(await ports.resolveDefinition(structuredClone(ref), structuredClone(scope)), ref, scope);
+    await ports.validateDefinition(structuredClone(value));
+    return value;
+}
+export function validateQualificationSelection(raw, ref, scope) {
+    const value = SelectionManifest.parse(raw);
+    if (!sameRef(value.ref, ref) || !sameScope(value.scope, scope) || !verifySelfDigest(value))
+        throw new Conflict('qualification selection digest or scope mismatch');
+    if (!value.cells.length || new Set(value.cells.map(c => c.selectionCellId)).size !== value.cells.length ||
+        new Set(value.excludedCells.map(c => c.cellKey)).size !== value.excludedCells.length ||
+        value.excludedCells.some(c => !c.reason.trim()))
+        throw new Conflict('qualification selection is empty, duplicated or lacks exclusion reasons');
+    return value;
+}
+export async function resolveQualificationSelection(ports, ref, scope) {
+    return validateQualificationSelection(await ports.resolveSelection(structuredClone(ref), structuredClone(scope)), ref, scope);
+}
+export function validateQualificationMatrix(scenario, matrix, selected) {
+    if (!matrix.policyRef || !sameRef(matrix.policyRef, scenario.qualificationPolicyRef) ||
+        !sameDigest(qualificationStrataDigest(matrix), qualificationStrataDigest(selected)) ||
+        !sameDigest(digestOfValue(refKeys(matrix.cells.filter(c => c.required).map(c => c.caseRef))), digestOfValue(refKeys(scenario.caseRefs))) ||
+        matrix.cells.some(c => !scenario.caseRefs.some(ref => sameRef(ref, c.caseRef))))
+        throw new Conflict('qualification must retain the exact required case/persona/target matrix and policy');
+}
+/** Registers the complete pending round before execution; never activates coverage or admits effects. */
+export async function registerQualificationRound(ports, input, requested) {
+    const token = ScenarioRevisionToken.parse(input);
+    const intent = QualificationRoundIntent.parse(requested);
+    await ports.authorize(structuredClone(token.scope), 'register_round');
+    const snapshot = await readScenarioSnapshot(ports, token);
+    const p = snapshot.projection;
+    if (!['validating', 'active'].includes(p.state))
+        throw new Conflict('scenario must be structurally validated and not retired before round registration');
+    const scenario = await resolveScenarioDefinition(ports, p.definitionRef, token.scope);
+    const matrix = await resolveQualificationSelection(ports, scenario.qualificationMatrixRef, token.scope);
+    const selected = await resolveQualificationSelection(ports, intent.selectionManifestRef, token.scope);
+    validateQualificationMatrix(scenario, matrix, selected);
+    const usedLeases = new Set(snapshot.admissions.flatMap(a => a.stateLeaseRefs.map(ref => ref.id)));
+    if (new Set(intent.stateLeaseRefs.map(ref => ref.id)).size !== intent.stateLeaseRefs.length || intent.stateLeaseRefs.some(ref => usedLeases.has(ref.id))) {
+        throw new Conflict('qualification round needs fresh, nonduplicated leased state');
+    }
+    if (snapshot.admissions.length >= 500)
+        throw new Conflict('scenario admission history needs an authoritative archival index before more rounds');
+    const admission = QualificationRoundAdmission.parse(freeze({ schemaVersion: 'workflow.qualification-admission/v1',
+        ref: { id: newId('qualification-admission'), revision: '1' }, scope: token.scope, scenarioRef: scenario.ref,
+        replayContractRef: scenario.replayContractRef, qualificationPolicyRef: scenario.qualificationPolicyRef,
+        qualificationMatrixRef: scenario.qualificationMatrixRef, targetProfileRef: scenario.qualificationTargetProfileRef,
+        strataDigest: qualificationStrataDigest(matrix), invalidationEpoch: p.invalidationEpoch, roundSequence: p.latestRoundSequence + 1,
+        campaignId: newId('qualification-campaign'), selectionManifestRef: selected.ref,
+        attempts: selected.cells.map(cell => ({ selectionCellId: cell.selectionCellId, executionId: newId('execution'), attemptId: newId('attempt') })),
+        stateLeaseRefs: intent.stateLeaseRefs,
+    }));
+    const next = ScenarioProjection.parse({ ...p, aggregateVersion: p.aggregateVersion + 1, latestRoundSequence: admission.roundSequence });
+    if (!await ports.compareAndSwap(p.aggregateVersion, structuredClone(next), structuredClone(admission)))
+        throw new Conflict('scenario changed during round registration');
+    return admission;
+}
+/** Semantic replacement retains history, advances the epoch and clears activation authority. */
+export async function invalidateScenario(ports, input, nextRef) {
+    const token = ScenarioRevisionToken.parse(input);
+    nextRef = RefSchema.parse(nextRef);
+    await ports.authorize(structuredClone(token.scope), 'invalidate');
+    const { projection: p } = await readScenarioSnapshot(ports, token);
+    if (p.state === 'retired')
+        throw new Conflict('retired coverage cannot be resurrected');
+    if (nextRef.id !== p.definitionRef.id || nextRef.revision === p.definitionRef.revision)
+        throw new Conflict('semantic replacement needs a new immutable revision of the same scenario');
+    await resolveScenarioDefinition(ports, nextRef, token.scope);
+    const next = ScenarioProjection.parse({ ...p, definitionRef: nextRef, aggregateVersion: p.aggregateVersion + 1,
+        invalidationEpoch: p.invalidationEpoch + 1, state: 'degraded', activationDecisionRef: null });
+    if (!await ports.compareAndSwap(p.aggregateVersion, structuredClone(next), null))
+        throw new Conflict('scenario changed during invalidation');
+    return next;
+}
+//# sourceMappingURL=scenario.js.map

package/dist/core/scenario.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenario.js","sourceRoot":"","sources":["../../src/core/scenario.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,SAAS,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,EACtI,iBAAiB,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAC5E,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAYvF,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAClI,MAAM,OAAO,GAAG,CAAC,IAAW,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvE,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,SAA4B,EAAE,EAAE,CAAC,aAAa,CAAC;IACvF,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;IAC5F,aAAa,EAAE,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS;CAC7H,CAAC,CAAC;AAGH,MAAM,UAAU,wBAAwB,CAAC,GAAY,EAAE,KAA4B;IACjF,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;IAC9B,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,gBAAgB,KAAK,KAAK,CAAC,wBAAwB;QAC9G,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,iBAAiB,KAAK,KAAK,CAAC,yBAAyB;QACjH,CAAC,CAAC,mBAAmB,KAAK,KAAK,CAAC,2BAA2B;QAAE,MAAM,IAAI,QAAQ,CAAC,2DAA2D,CAAC,CAAC;IACjJ,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;QAC3H,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC,aAAa,KAAK,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB;QACrH,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,iBAAiB,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAgB,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACxH,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3E,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,sEAAsE,CAAC,CAAC;IACnK,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAwB,EAAE,KAA4B;IAC/F,OAAO,wBAAwB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACnG,CAAC;AACD,MAAM,UAAU,0BAA0B,CAAC,GAAY,EAAE,GAAQ,EAAE,KAAY;IAC7E,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,8CAA8C,CAAC,CAAC;IAC/J,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IACtH,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAwB,EAAE,GAAQ,EAAE,KAAY;IAC9F,MAAM,KAAK,GAAG,0BAA0B,CAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAClI,MAAM,KAAK,CAAC,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,OAAO,KAAK,CAAC;AACvE,CAAC;AACD,MAAM,UAAU,8BAA8B,CAAC,GAAY,EAAE,GAAQ,EAAE,KAAY;IACjF,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,kDAAkD,CAAC,CAAC;IACnK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;QACnG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,aAAa,CAAC,MAAM;QACpF,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,yEAAyE,CAAC,CAAC;IACnJ,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAAwB,EAAE,GAAQ,EAAE,KAAY;IAClG,OAAO,8BAA8B,CAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AAChI,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,QAA4B,EAAE,MAAyB,EAAE,QAA2B;IAC9H,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,sBAAsB,CAAC;QAChF,CAAC,UAAU,CAAC,yBAAyB,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACnF,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,oFAAoF,CAAC,CAAC;AAChM,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAoB,EAAE,KAA4B,EAAE,SAAmC;IACtI,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;IAC9B,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,mFAAmF,CAAC,CAAC;IACzJ,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,KAAK,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,QAAQ,CAAC,sBAAsB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtG,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,cAAc,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACzJ,MAAM,IAAI,QAAQ,CAAC,6DAA6D,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,IAAI,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,qFAAqF,CAAC,CAAC;IACjJ,MAAM,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,qCAAqC;QAC/G,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,yBAAyB,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG;QAC3G,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;QACtG,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,QAAQ,CAAC,6BAA6B;QACjH,YAAY,EAAE,yBAAyB,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC,mBAAmB,GAAG,CAAC;QACjI,UAAU,EAAE,KAAK,CAAC,wBAAwB,CAAC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,GAAG;QAC/E,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/I,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC,CAAC,CAAC;IACJ,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,GAAG,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC;IACxI,IAAI,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC;IACzK,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAoB,EAAE,KAA4B,EAAE,OAAY;IACvG,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,wCAAwC,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ;QAAE,MAAM,IAAI,QAAQ,CAAC,0EAA0E,CAAC,CAAC;IACvL,MAAM,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,GAAG,CAAC;QAC5G,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,sCAAsC,CAAC,CAAC;IAC7I,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/scenarioActivation.d.ts

@@ -0,0 +1,16 @@
+import { ScenarioActivation, ScenarioActivationIntent, ScenarioProjection, type Digest, type Ref, type Scope, type ScenarioReplayAssessment } from '../protocol/index.ts';
+import { type ReplayAssessmentPorts } from './replayAssessment.ts';
+export interface ScenarioActivationPorts extends ReplayAssessmentPorts {
+    /** Authenticated explicit activation of this intent, not a caller-provided actor or approval flag. */
+    authorizeActivation(scope: Scope, intentDigest: Digest): Promise<{
+        actorId: string;
+        policyRef: Ref;
+    }>;
+    readActivation(idempotencyKey: string, scope: Scope): Promise<unknown | null>;
+    /** One transaction: compare every intent binding, validating state, latest sequence, immutable
+     * selected result refs and current authorization; enforce unique scoped idempotency; publish
+     * all assessment/finding documents, decision and projection, or none. False publishes nothing. */
+    compareAndSwapActivation(intent: ScenarioActivationIntent, next: ScenarioProjection, activation: ScenarioActivation, evidence: ScenarioReplayAssessment): Promise<boolean>;
+}
+/** Returns an immutable activation receipt, not a claim that coverage remains active on a later retry. */
+export declare function activateScenario(ports: ScenarioActivationPorts, input: ScenarioActivationIntent): Promise<ScenarioActivation>;

package/dist/core/scenarioActivation.js

@@ -0,0 +1,47 @@
+import { ScenarioActivation, ScenarioActivationIntent, ScenarioProjection, digestOfValue, refKey, sameDigest, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { assessScenarioReplay } from "./replayAssessment.js";
+import { readScenarioSnapshot, resolveScenarioDefinition } from "./scenario.js";
+import { Conflict } from "./errors.js";
+import { ActivationActor, assertActivationBindings, deriveScenarioActivation } from "./activationDecision.js";
+import { nowIso } from "./clock.js";
+const compare = (a, b) => a < b ? -1 : a > b ? 1 : 0;
+async function priorActivation(ports, intent, digest) {
+    const stored = await ports.readActivation(intent.idempotencyKey, structuredClone(intent.snapshot.scope));
+    if (stored === null)
+        return null;
+    const prior = ScenarioActivation.parse(stored);
+    if (!verifySelfDigest(prior) || !sameScope(prior.scope, intent.snapshot.scope) ||
+        prior.ref.id !== `scenario-activation-${digest.hex}` || prior.ref.revision !== '1' ||
+        !sameDigest(prior.intentDigest, digest) || !sameDigest(digestOfValue(prior.intent), digest)) {
+        throw new Conflict('activation idempotency key belongs to different or corrupt intent');
+    }
+    return prior;
+}
+/** Returns an immutable activation receipt, not a claim that coverage remains active on a later retry. */
+export async function activateScenario(ports, input) {
+    const parsed = ScenarioActivationIntent.parse(input);
+    const intent = { ...parsed, roundRefs: [...parsed.roundRefs].sort((a, b) => compare(refKey(a), refKey(b))) };
+    if (new Set(intent.roundRefs.map(refKey)).size !== intent.roundRefs.length)
+        throw new Conflict('activation selects duplicate rounds');
+    const intentDigest = digestOfValue(intent);
+    const actor = ActivationActor.parse(await ports.authorizeActivation(structuredClone(intent.snapshot.scope), structuredClone(intentDigest)));
+    const prior = await priorActivation(ports, intent, intentDigest);
+    if (prior)
+        return prior;
+    const { projection } = await readScenarioSnapshot(ports, intent.snapshot);
+    if (projection.state !== 'validating')
+        throw new Conflict('explicit activation requires a validating scenario');
+    const scenario = await resolveScenarioDefinition(ports, projection.definitionRef, intent.snapshot.scope);
+    assertActivationBindings(intent, scenario);
+    // Re-derive from authenticated raw evidence; a submitted readiness boolean is never accepted.
+    const report = await assessScenarioReplay(ports, intent.snapshot);
+    const { activation, next } = deriveScenarioActivation(intent, projection, scenario, report, actor, nowIso());
+    if (!await ports.compareAndSwapActivation(structuredClone(intent), structuredClone(next), structuredClone(activation), structuredClone(report))) {
+        const raced = await priorActivation(ports, intent, intentDigest);
+        if (raced)
+            return raced;
+        throw new Conflict('scenario or selected evidence changed during activation');
+    }
+    return activation;
+}
+//# sourceMappingURL=scenarioActivation.js.map

package/dist/core/scenarioActivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenarioActivation.js","sourceRoot":"","sources":["../../src/core/scenarioActivation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,aAAa,EACtF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAoE,MAAM,sBAAsB,CAAC;AAC3J,OAAO,EAAE,oBAAoB,EAA8B,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC9G,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAYpC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAErE,KAAK,UAAU,eAAe,CAAC,KAA8B,EAAE,MAAgC,EAAE,MAAc;IAC7G,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACzG,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1E,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,uBAAuB,MAAM,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG;QAClF,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,QAAQ,CAAC,mEAAmE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAA8B,EAAE,KAA+B;IACpG,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7G,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IACtI,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,mBAAmB,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5I,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACjE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,KAAK,KAAK,YAAY;QAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IAChH,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,KAAK,EAAE,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzG,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,8FAA8F;IAC9F,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,wBAAwB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7G,IAAI,CAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChJ,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACjE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}