tracegrove 0.0.0-stage → 0.3.1

package/dist/core/sourcePromotion.js

@@ -0,0 +1,92 @@
+import { z } from 'zod';
+import { IdString, PlanEditProjection, PlanRevisionToken, PositiveInt, RefSchema, ScenarioDefinition, ScenarioPromotion, ScenarioPromotionIntent, SelectionManifest, digestOfValue, freeze, refKey, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { validateQualificationMatrix, validateQualificationSelection, validateScenarioDefinition } from "./scenario.js";
+import { Conflict } from "./errors.js";
+import { nowIso } from "./clock.js";
+import { ReviewedSourceDocuments, validateReviewedSourceDocuments } from "./sourceReviewEvidence.js";
+export const PromotionActor = z.object({ actorId: IdString, policyRef: RefSchema }).strict();
+export const ApprovedPlanReview = ReviewedSourceDocuments.extend({ storageVersion: PositiveInt, projection: PlanEditProjection }).strict();
+export function normalizePromotionIntent(raw) {
+    const parsed = ScenarioPromotionIntent.parse(raw);
+    if (new Set(parsed.selectionManifestRefs.map(refKey)).size !== parsed.selectionManifestRefs.length)
+        throw new Conflict('promotion selects duplicate manifests');
+    return { ...parsed, selectionManifestRefs: [...parsed.selectionManifestRefs].sort((a, b) => refKey(a) < refKey(b) ? -1 : refKey(a) > refKey(b) ? 1 : 0) };
+}
+export function validateApprovedPlanReview(raw, token, reviewRef) {
+    const approved = ApprovedPlanReview.parse(raw);
+    const { projection: p, plan, review, validation } = approved;
+    validateReviewedSourceDocuments({ plan, review, validation }, token.scope);
+    if (p.id !== token.id || !sameScope(p.scope, token.scope) || p.editRevision !== token.expectedEditRevision ||
+        !sameRef(p.sourcePlanRef, token.expectedSourcePlanRef) || !sameRef(plan.ref, p.sourcePlanRef) || !p.currentReviewRef ||
+        !sameRef(p.currentReviewRef, review.ref) || !sameRef(review.ref, reviewRef) || review.decision !== 'approved' ||
+        review.editRevision !== p.editRevision)
+        throw new Conflict('promotion requires the exact current approved review and persisted source validation');
+    return approved;
+}
+export function validatePromotedCases(definition, approved) {
+    const { plan, validation } = approved;
+    if (!definition.sourcePlanRef || !sameRef(definition.sourcePlanRef, plan.ref) || !sameRef(definition.reviewRef, approved.review.ref) ||
+        plan.disposition !== 'scenario_set' || new Set(plan.candidates.map(c => c.id)).size !== plan.candidates.length)
+        throw new Conflict('scenario does not bind an approved source scenario set');
+    for (const caseRef of definition.caseRefs) {
+        const candidates = plan.candidates.filter(c => c.caseRef && sameRef(c.caseRef, caseRef) && c.disposition === 'runnable');
+        if (!candidates.length || candidates.some(c => !c.sourceElementIds.length || c.sourceElementIds.some(id => !validation.runnableElementIds.includes(id))))
+            throw new Conflict('promoted cases need approved runnable candidates and independently validated source elements');
+    }
+}
+function promotionInputs(intent, rawDefinition, rawSelections) {
+    const scope = intent.reviewToken.scope;
+    const definition = validateScenarioDefinition(rawDefinition, intent.definitionRef, scope);
+    const selections = rawSelections.map(s => { const parsed = SelectionManifest.parse(s); return validateQualificationSelection(parsed, parsed.ref, scope); });
+    if (digestOfValue(selections.map(s => refKey(s.ref)).sort()).hex !== digestOfValue(intent.selectionManifestRefs.map(refKey).sort()).hex)
+        throw new Conflict('promotion manifests differ from the frozen intent');
+    const matrix = selections.find(s => sameRef(s.ref, definition.qualificationMatrixRef));
+    if (!matrix)
+        throw new Conflict('promotion requires its frozen qualification matrix');
+    for (const selection of selections)
+        validateQualificationMatrix(definition, matrix, selection);
+    return { definition, selections };
+}
+export function deriveScenarioPromotion(intent, rawDefinition, rawSelections, rawApproved, actor, promotedAt) {
+    const { definition, selections } = promotionInputs(intent, rawDefinition, rawSelections);
+    const scope = intent.reviewToken.scope;
+    const approved = validateApprovedPlanReview(rawApproved, intent.reviewToken, definition.reviewRef);
+    validatePromotedCases(definition, approved);
+    const promotion = ScenarioPromotion.parse(freeze({ schemaVersion: 'workflow.scenario-promotion/v1',
+        ref: { id: `scenario-promotion-${digestOfValue(intent).hex}`, revision: '1' }, scope, intent,
+        reviewRef: approved.review.ref, sourceValidationRef: approved.validation.ref, reviewStorageVersion: approved.storageVersion,
+        actorId: actor.actorId, authorizationPolicyRef: actor.policyRef, promotedAt }));
+    return { promotion, definition, selections, approved };
+}
+/** Promotion registers a proposed scenario only. It does not approve the source plan, execute cases or activate coverage. */
+export async function promoteScenario(ports, rawIntent, rawDefinition, rawSelections) {
+    const intent = normalizePromotionIntent(rawIntent);
+    const { definition, selections } = promotionInputs(intent, structuredClone(rawDefinition), structuredClone(rawSelections));
+    const digest = digestOfValue(intent);
+    const actor = PromotionActor.parse(await ports.authorizePromotion(structuredClone(intent.reviewToken.scope), structuredClone(digest)));
+    const prior = async () => {
+        const raw = await ports.readPromotion(intent.idempotencyKey, structuredClone(intent.reviewToken.scope));
+        if (raw === null)
+            return null;
+        const record = ScenarioPromotion.parse(raw);
+        if (!verifySelfDigest(record) || !sameScope(record.scope, intent.reviewToken.scope) ||
+            record.ref.id !== `scenario-promotion-${digest.hex}` || record.ref.revision !== '1' ||
+            digestOfValue(record.intent).hex !== digest.hex)
+            throw new Conflict('promotion idempotency key belongs to another intent');
+        return record;
+    };
+    const existing = await prior();
+    if (existing)
+        return existing;
+    const approved = await ports.resolveApprovedReview(structuredClone(intent.reviewToken), structuredClone(definition.reviewRef));
+    await ports.validateDefinition(structuredClone(definition));
+    const candidate = deriveScenarioPromotion(intent, definition, selections, approved, actor, nowIso());
+    if (!await ports.compareAndSwapPromotion(intent, candidate.definition, candidate.selections, candidate.promotion, candidate.approved)) {
+        const raced = await prior();
+        if (raced)
+            return raced;
+        throw new Conflict('scenario or reviewed plan changed during promotion');
+    }
+    return candidate.promotion;
+}
+//# sourceMappingURL=sourcePromotion.js.map

package/dist/core/sourcePromotion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourcePromotion.js","sourceRoot":"","sources":["../../src/core/sourcePromotion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAC9E,kBAAkB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,iBAAiB,EACjF,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAqC,MAAM,sBAAsB,CAAC;AACvI,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AACxH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAErG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7F,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAY3I,MAAM,UAAU,wBAAwB,CAAC,GAA4B;IACnE,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,qBAAqB,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,uCAAuC,CAAC,CAAC;IAChK,OAAO,EAAE,GAAG,MAAM,EAAE,qBAAqB,EAAE,CAAC,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5J,CAAC;AACD,MAAM,UAAU,0BAA0B,CAAC,GAAY,EAAE,KAAwB,EAAE,SAAc;IAC/F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IAC7G,+BAA+B,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,KAAK,CAAC,oBAAoB;QACtG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;QACpH,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU;QAC7G,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QAAE,MAAM,IAAI,QAAQ,CAAC,sFAAsF,CAAC,CAAC;IACvJ,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,UAA8B,EAAE,QAAiC;IACrG,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;QAChI,IAAI,CAAC,WAAW,KAAK,cAAc,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,wDAAwD,CAAC,CAAC;IACjM,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;QACzH,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,8FAA8F,CAAC,CAAC;IAC/Q,CAAC;AACH,CAAC;AACD,SAAS,eAAe,CAAC,MAA+B,EAAE,aAAsB,EAAE,aAAwB;IACxG,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;IACvC,MAAM,UAAU,GAAG,0BAA0B,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5J,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,mDAAmD,CAAC,CAAC;IACjN,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IACtF,KAAK,MAAM,SAAS,IAAI,UAAU;QAAE,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACpC,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,MAA+B,EAAE,aAAsB,EAAE,aAAwB,EAAE,WAAoB,EAC7I,KAAqC,EAAE,UAAkB;IACzD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;IACvC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IACnG,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,gCAAgC;QAChG,GAAG,EAAE,EAAE,EAAE,EAAE,sBAAsB,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM;QAC5F,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,mBAAmB,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,oBAAoB,EAAE,QAAQ,CAAC,cAAc;QAC3H,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,sBAAsB,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAClF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACzD,CAAC;AACD,6HAA6H;AAC7H,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA6B,EAAE,SAAkC,EACrG,aAAiC,EAAE,aAAkC;IACrE,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvI,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACxG,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;YAC/E,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,sBAAsB,MAAM,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG;YACnF,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAAE,MAAM,IAAI,QAAQ,CAAC,qDAAqD,CAAC,CAAC;QAC/H,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,KAAK,EAAE,CAAC;IAAC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/H,MAAM,KAAK,CAAC,kBAAkB,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,MAAM,KAAK,CAAC,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtI,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAAC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,SAAS,CAAC,SAAS,CAAC;AAC7B,CAAC"}

package/dist/core/sourceReviewEvidence.d.ts

@@ -0,0 +1,271 @@
+import { z } from 'zod';
+import { SourceSelection, type Scope } from '../protocol/index.ts';
+/** Sealed historical evidence. Current approval is established separately by its owning review store. */
+export declare const ReviewedSourceDocuments: z.ZodObject<{
+    plan: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"workflow.source-plan/v1">;
+        ref: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        scope: z.ZodObject<{
+            ownerId: z.ZodString;
+            tenantId: z.ZodNullable<z.ZodString>;
+            visibility: z.ZodEnum<{
+                public: "public";
+                owner_private: "owner_private";
+                tenant_private: "tenant_private";
+            }>;
+        }, z.core.$strict>;
+        revisionMatrixRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        changeModelRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        disposition: z.ZodEnum<{
+            scenario_set: "scenario_set";
+            no_e2e_warranted: "no_e2e_warranted";
+            surface_unresolved: "surface_unresolved";
+        }>;
+        dispositionReasonRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        candidates: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            sourceElementIds: z.ZodArray<z.ZodString>;
+            caseRef: z.ZodNullable<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+            disposition: z.ZodEnum<{
+                blocked: "blocked";
+                excluded: "excluded";
+                runnable: "runnable";
+                not_derivable: "not_derivable";
+            }>;
+            reasonRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+            capabilityRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        validFlowRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        withheldFlows: z.ZodArray<z.ZodObject<{
+            flowRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            reasonRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        invalidFlows: z.ZodArray<z.ZodObject<{
+            flowRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            diagnosticRefs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        coverageObligationRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        gapRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    review: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"workflow.plan-review/v1">;
+        ref: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        scope: z.ZodObject<{
+            ownerId: z.ZodString;
+            tenantId: z.ZodNullable<z.ZodString>;
+            visibility: z.ZodEnum<{
+                public: "public";
+                owner_private: "owner_private";
+                tenant_private: "tenant_private";
+            }>;
+        }, z.core.$strict>;
+        sourcePlanRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        editRevision: z.ZodNumber;
+        decision: z.ZodEnum<{
+            approved: "approved";
+            rejected: "rejected";
+        }>;
+        reviewerActorId: z.ZodString;
+        policyRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        reasonRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    validation: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"workflow.source-validation/v1">;
+        sourcePlanRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        changeModelRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        revisionMatrixRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        policyRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        verifiedCitationRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        runnableElementIds: z.ZodArray<z.ZodString>;
+        retainedDiagnosticRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        ref: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        scope: z.ZodObject<{
+            ownerId: z.ZodString;
+            tenantId: z.ZodNullable<z.ZodString>;
+            visibility: z.ZodEnum<{
+                public: "public";
+                owner_private: "owner_private";
+                tenant_private: "tenant_private";
+            }>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ReviewedSourceDocuments = z.infer<typeof ReviewedSourceDocuments>;
+export declare function validateReviewedSourceDocuments(raw: unknown, scope: Scope): ReviewedSourceDocuments;
+/** Join reviewed source to executable source without changing the original frozen trial request. */
+export declare function validateReviewedSourceSelection(approved: ReviewedSourceDocuments, selection: SourceSelection): void;

package/dist/core/sourceReviewEvidence.js

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+import { PlanReview, PlanSourceValidation, SourcePlan, SourceSelection, sameRef, sameScope, verifySelfDigest } from "../protocol/index.js";
+import { Conflict } from "./errors.js";
+/** Sealed historical evidence. Current approval is established separately by its owning review store. */
+export const ReviewedSourceDocuments = z.object({ plan: SourcePlan, review: PlanReview, validation: PlanSourceValidation }).strict();
+export function validateReviewedSourceDocuments(raw, scope) {
+    const documents = ReviewedSourceDocuments.parse(raw);
+    const { plan, review, validation } = documents;
+    if ([plan, review, validation].some(d => !verifySelfDigest(d) || !sameScope(d.scope, scope)) ||
+        review.decision !== 'approved' || !sameRef(review.sourcePlanRef, plan.ref) ||
+        !sameRef(validation.sourcePlanRef, plan.ref) || !sameRef(validation.changeModelRef, plan.changeModelRef) ||
+        !sameRef(validation.revisionMatrixRef, plan.revisionMatrixRef) || !sameRef(validation.policyRef, review.policyRef) ||
+        !review.reasonRefs.some(r => sameRef(r, validation.ref)))
+        throw new Conflict('reviewed source evidence requires sealed matching plan, approved review and source validation');
+    return documents;
+}
+/** Join reviewed source to executable source without changing the original frozen trial request. */
+export function validateReviewedSourceSelection(approved, selection) {
+    const { plan, review, validation } = approved;
+    validateReviewedSourceDocuments({ plan, review, validation }, selection.scope);
+    if (!verifySelfDigest(selection) || !selection.revisionMatrixRef || !sameRef(approved.plan.revisionMatrixRef, selection.revisionMatrixRef))
+        throw new Conflict('reviewed source plan selects a different executable revision matrix');
+}
+//# sourceMappingURL=sourceReviewEvidence.js.map

package/dist/core/sourceReviewEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceReviewEvidence.js","sourceRoot":"","sources":["../../src/core/sourceReviewEvidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAc,MAAM,sBAAsB,CAAC;AACvJ,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,yGAAyG;AACzG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAGrI,MAAM,UAAU,+BAA+B,CAAC,GAAY,EAAE,KAAY;IACxE,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;IACrG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACxF,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC;QAC1E,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC;QACxG,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;QAClH,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,+FAA+F,CAAC,CAAC;IAClL,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,+BAA+B,CAAC,QAAiC,EAAE,SAA0B;IAC3G,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IAC9C,+BAA+B,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/E,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,CAAC;QACxI,MAAM,IAAI,QAAQ,CAAC,qEAAqE,CAAC,CAAC;AAC9F,CAAC"}

package/dist/core/targetObservation.d.ts

@@ -0,0 +1,3 @@
+import type { IdentityAttestation, LaunchRecipe, Scope, TargetTuple } from '../protocol/index.ts';
+/** Repository observations require supervisor-verified Git bytes, never requested target metadata. */
+export declare function targetFromComponentAttestations(expected: TargetTuple, attestations: IdentityAttestation[], launch: LaunchRecipe | null, scope: Scope): TargetTuple;

package/dist/core/targetObservation.js

@@ -0,0 +1,26 @@
+import { snapshotAttestationProblems } from "./snapshotEvidence.js";
+import { snapshotRepository } from "./snapshotRepository.js";
+/** Repository observations require supervisor-verified Git bytes, never requested target metadata. */
+export function targetFromComponentAttestations(expected, attestations, launch, scope) {
+    const sourceAttestation = launch && attestations.find(value => value.componentId === launch.componentId);
+    const pin = launch?.sourceSnapshot;
+    const repositories = pin?.repositoryRole && sourceAttestation?.evidence.gitSource &&
+        snapshotAttestationProblems(launch, sourceAttestation, scope).length === 0 ? [snapshotRepository(pin)] : [];
+    return {
+        // These are immutable execution/selection bindings, not measured target attributes.
+        componentProfileRef: expected.componentProfileRef,
+        requiredComponents: expected.requiredComponents,
+        excludedComponents: expected.excludedComponents,
+        corpus: expected.corpus, runner: expected.runner, evaluator: expected.evaluator,
+        components: expected.components.map(component => {
+            const attestation = attestations.find(value => value.componentId === component.componentId);
+            const pinUnobserved = attestation && launch?.sourceSnapshot && launch.componentId === component.componentId && snapshotAttestationProblems(launch, attestation, scope).length > 0;
+            return { componentId: component.componentId, kind: attestation?.kind ?? component.kind, identity: pinUnobserved ? null : attestation?.identity ?? null };
+        }),
+        repositories,
+        frontendRelease: null, backendRelease: null, workerRelease: null,
+        schemaFingerprint: null, featureFlagsDigest: null, capabilityVersionsDigest: null,
+        browserVersion: null, containerImageDigest: null, modelConfigDigest: null,
+    };
+}
+//# sourceMappingURL=targetObservation.js.map

package/dist/core/targetObservation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"targetObservation.js","sourceRoot":"","sources":["../../src/core/targetObservation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,sGAAsG;AACtG,MAAM,UAAU,+BAA+B,CAAC,QAAqB,EAAE,YAAmC,EAAE,MAA2B,EAAE,KAAY;IACnJ,MAAM,iBAAiB,GAAG,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC,CAAC;IACzG,MAAM,GAAG,GAAG,MAAM,EAAE,cAAc,CAAC;IACnC,MAAM,YAAY,GAAG,GAAG,EAAE,cAAc,IAAI,iBAAiB,EAAE,QAAQ,CAAC,SAAS;QAC/E,2BAA2B,CAAC,MAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/G,OAAO;QACL,oFAAoF;QACpF,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC/E,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;YAC9C,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,CAAC,CAAC;YAC5F,MAAM,aAAa,GAAG,WAAW,IAAI,MAAM,EAAE,cAAc,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,2BAA2B,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAClL,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC3J,CAAC,CAAC;QACF,YAAY;QACZ,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;QAChE,iBAAiB,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI;QACjF,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI;KAC1E,CAAC;AACJ,CAAC"}

package/dist/hosts/launchTemplates.d.ts

@@ -0,0 +1,2 @@
+/** One qualified Django bootstrap shared by authoring and the source-owning supervisor. */
+export declare function djangoBootstrap(port: string): string;

package/dist/hosts/launchTemplates.js

@@ -0,0 +1,5 @@
+/** One qualified Django bootstrap shared by authoring and the source-owning supervisor. */
+export function djangoBootstrap(port) {
+    return `import os, subprocess, sys; subprocess.run([sys.executable, 'manage.py', 'migrate', '--noinput'], check=True); os.execv(sys.executable, [sys.executable, 'manage.py', 'runserver', '127.0.0.1:${port}', '--noreload'])`;
+}
+//# sourceMappingURL=launchTemplates.js.map

package/dist/hosts/launchTemplates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchTemplates.js","sourceRoot":"","sources":["../../src/hosts/launchTemplates.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,iMAAiM,IAAI,mBAAmB,CAAC;AAClO,CAAC"}

package/dist/hosts/local.d.ts

@@ -0,0 +1,17 @@
+import { HostCapabilityObservation, HostLease } from '../protocol/index.ts';
+import type { ExecutorHost, HostSession, HostStartContext } from './types.ts';
+export { sourceIdentityDigest } from './sourceIdentity.ts';
+export declare function buildCapabilityObservation(input: {
+    hostPlanRef: HostLease['hostPlanRef'];
+    leaseRef: HostLease['ref'] | null;
+    scope: HostStartContext['scope'];
+    executionId: string;
+    supported: string[];
+    unsupported: string[];
+}): HostCapabilityObservation;
+export declare function buildLease(context: HostStartContext, pid: number | null): HostLease;
+/** Reserve a free loopback port. The app binds it moments later; a race is reported as a startup failure. */
+export declare function freeLoopbackPort(): Promise<number>;
+export declare class LocalProcessHost implements ExecutorHost {
+    start(context: HostStartContext): Promise<HostSession>;
+}