tracegrove 0.0.0-stage → 0.3.1

package/dist/protocol/schemas/scenario.js

@@ -0,0 +1,53 @@
+import { z } from 'zod';
+import { DigestSchema, IdString, IsoDateTime, NonNegInt, PositiveInt, RefSchema, ScopeSchema, refList } from "../primitives.js";
+export const ScenarioDefinition = z.object({ schemaVersion: z.literal('workflow.scenario/v1'), ref: RefSchema, scope: ScopeSchema,
+    sourcePlanRef: RefSchema.nullable(), reviewRef: RefSchema, caseRefs: refList().min(1), replayContractRef: RefSchema,
+    qualificationPolicyRef: RefSchema, qualificationMatrixRef: RefSchema, qualificationTargetProfileRef: RefSchema,
+}).strict();
+export const ScenarioProjection = z.object({ id: IdString, scope: ScopeSchema, aggregateVersion: PositiveInt, definitionRef: RefSchema,
+    state: z.enum(['proposed', 'validating', 'active', 'degraded', 'retired']), invalidationEpoch: NonNegInt,
+    latestRoundSequence: NonNegInt, qualificationRoundRefs: refList(), activationDecisionRef: RefSchema.nullable(),
+}).strict();
+export const QualificationRoundAdmission = z.object({ schemaVersion: z.literal('workflow.qualification-admission/v1'), ref: RefSchema,
+    scope: ScopeSchema, scenarioRef: RefSchema, replayContractRef: RefSchema, qualificationPolicyRef: RefSchema,
+    qualificationMatrixRef: RefSchema, targetProfileRef: RefSchema, strataDigest: DigestSchema,
+    invalidationEpoch: NonNegInt, roundSequence: PositiveInt, campaignId: IdString, selectionManifestRef: RefSchema,
+    attempts: z.array(z.object({ selectionCellId: IdString, executionId: IdString, attemptId: IdString }).strict()).min(1).max(500),
+    stateLeaseRefs: refList().min(1),
+}).strict();
+export const QualificationRound = z.object({ schemaVersion: z.literal('workflow.qualification-round/v1'), ref: RefSchema,
+    scope: ScopeSchema, admissionRef: RefSchema, campaignResultRef: RefSchema, terminalReceiptRefs: refList().min(1),
+}).strict();
+export const QualificationPolicy = z.object({ schemaVersion: z.literal('workflow.qualification-policy/v1'), ref: RefSchema,
+    scope: ScopeSchema, requiredLevel: z.enum(['environment', 'revision']), minimumIndependentRounds: z.number().int().min(2).max(20),
+}).strict();
+export const ReplayFindingCode = z.enum(['campaign_not_passed', 'non_live_provenance', 'target_identity_unproven', 'revision_identity_unproven']);
+export const ReplayFinding = z.object({ schemaVersion: z.literal('workflow.replay-finding/v1'), ref: RefSchema,
+    scope: ScopeSchema, roundRef: RefSchema, code: ReplayFindingCode,
+}).strict();
+export const ReplayAssessment = z.object({ schemaVersion: z.literal('workflow.replay-assessment/v1'), ref: RefSchema,
+    scope: ScopeSchema, roundRef: RefSchema, level: z.enum(['structural', 'mock', 'environment', 'revision']),
+    qualifies: z.boolean(), reasonRefs: refList(),
+}).strict();
+export const ScenarioRevisionToken = z.object({ id: IdString, scope: ScopeSchema, expectedAggregateVersion: PositiveInt,
+    expectedDefinitionRef: RefSchema, expectedInvalidationEpoch: NonNegInt, expectedLatestRoundSequence: NonNegInt }).strict();
+export const ScenarioStructuralValidation = z.object({ schemaVersion: z.literal('workflow.scenario-structure/v1'), ref: RefSchema,
+    scope: ScopeSchema, snapshot: ScenarioRevisionToken, requestRef: RefSchema, qualificationMatrixRef: RefSchema,
+    executableClosureDigest: DigestSchema, actorId: IdString, authorizationPolicyRef: RefSchema, validatedAt: IsoDateTime,
+}).strict();
+export const QualificationRoundIntent = z.object({ selectionManifestRef: RefSchema, stateLeaseRefs: refList().min(1) }).strict();
+export const ScenarioReplayAssessment = z.object({ snapshot: ScenarioRevisionToken, policyRef: RefSchema,
+    requiredRounds: z.number().int().min(2).max(20), latestAdmissionRef: RefSchema.nullable(),
+    rounds: z.array(z.object({ admissionRef: RefSchema, assessment: ReplayAssessment.nullable() }).strict()).max(500),
+    qualifyingRoundRefs: refList(), qualifies: z.boolean(), findings: z.array(ReplayFinding).max(2000),
+    reasonCodes: z.array(z.enum(['scenario_not_validating', 'insufficient_independent_rounds', 'no_current_epoch_rounds', 'latest_round_pending', 'latest_round_not_qualified'])).max(4),
+}).strict();
+export const ScenarioActivationIntent = z.object({ snapshot: ScenarioRevisionToken, replayContractRef: RefSchema,
+    qualificationPolicyRef: RefSchema, qualificationMatrixRef: RefSchema, targetProfileRef: RefSchema,
+    roundRefs: refList().min(2), idempotencyKey: IdString,
+}).strict();
+export const ScenarioActivation = z.object({ schemaVersion: z.literal('workflow.scenario-activation/v1'), ref: RefSchema,
+    scope: ScopeSchema, intent: ScenarioActivationIntent, intentDigest: DigestSchema, actorId: IdString,
+    authorizationPolicyRef: RefSchema, assessmentRefs: refList().min(2), activatedAt: IsoDateTime,
+}).strict();
+//# sourceMappingURL=scenario.js.map

package/dist/protocol/schemas/scenario.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenario.js","sourceRoot":"","sources":["../../../src/protocol/schemas/scenario.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhI,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW;IAC/H,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS;IACnH,sBAAsB,EAAE,SAAS,EAAE,sBAAsB,EAAE,SAAS,EAAE,6BAA6B,EAAE,SAAS;CAC/G,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS;IACpI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS;IACxG,mBAAmB,EAAE,SAAS,EAAE,sBAAsB,EAAE,OAAO,EAAE,EAAE,qBAAqB,EAAE,SAAS,CAAC,QAAQ,EAAE;CAC/G,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,EAAE,GAAG,EAAE,SAAS;IACnI,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,sBAAsB,EAAE,SAAS;IAC3G,sBAAsB,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY;IAC1F,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,SAAS;IAC/G,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/H,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,EAAE,GAAG,EAAE,SAAS;IACtH,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjH,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,EAAE,GAAG,EAAE,SAAS;IACxH,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAClI,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAElJ,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAAE,GAAG,EAAE,SAAS;IAC5G,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB;CACjE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,EAAE,GAAG,EAAE,SAAS;IAClH,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IACzG,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;CAC9C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,wBAAwB,EAAE,WAAW;IACrH,qBAAqB,EAAE,SAAS,EAAE,yBAAyB,EAAE,SAAS,EAAE,2BAA2B,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE7H,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE,GAAG,EAAE,SAAS;IAC/H,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,qBAAqB,EAAE,UAAU,EAAE,SAAS,EAAE,sBAAsB,EAAE,SAAS;IAC7G,uBAAuB,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW;CACtH,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEjI,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,SAAS,EAAE,SAAS;IACtG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,SAAS,CAAC,QAAQ,EAAE;IACzF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjH,mBAAmB,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAClG,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,yBAAyB,EAAE,iCAAiC,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACrL,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,SAAS;IAC9G,sBAAsB,EAAE,SAAS,EAAE,sBAAsB,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS;IACjG,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ;CACtD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,EAAE,GAAG,EAAE,SAAS;IACtH,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,wBAAwB,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ;IACnG,sBAAsB,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW;CAC9F,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/protocol/schemas/source.d.ts

@@ -0,0 +1,300 @@
+import { z } from 'zod';
+export declare const RevisionMatrix: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"workflow.revisions/v1">;
+    repositories: z.ZodArray<z.ZodObject<{
+        repositoryRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        requestedRef: z.ZodString;
+        requestedBaseRef: z.ZodString;
+        headCommit: z.ZodString;
+        baseCommit: z.ZodString;
+        mergeBaseCommit: z.ZodNullable<z.ZodString>;
+        mergeBaseAbsentReason: z.ZodNullable<z.ZodString>;
+        diffRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        changedFileRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        resolverRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    resolvedAt: z.ZodString;
+    ref: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    scope: z.ZodObject<{
+        ownerId: z.ZodString;
+        tenantId: z.ZodNullable<z.ZodString>;
+        visibility: z.ZodEnum<{
+            public: "public";
+            owner_private: "owner_private";
+            tenant_private: "tenant_private";
+        }>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type RevisionMatrix = z.infer<typeof RevisionMatrix>;
+export declare const ChangeElement: z.ZodObject<{
+    id: z.ZodString;
+    boundary: z.ZodString;
+    behavior: z.ZodString;
+    citationRefs: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    derivation: z.ZodEnum<{
+        pattern: "pattern";
+        ast: "ast";
+        declared: "declared";
+        probe: "probe";
+        agent: "agent";
+    }>;
+    confidence: z.ZodNullable<z.ZodNumber>;
+    verification: z.ZodEnum<{
+        confirmed: "confirmed";
+        contradicted: "contradicted";
+        unverified: "unverified";
+    }>;
+    verifierRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    verificationEvidenceRefs: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ChangeElement = z.infer<typeof ChangeElement>;
+export declare const ChangeModel: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"workflow.change-model/v1">;
+    revisionMatrixRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    elements: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        boundary: z.ZodString;
+        behavior: z.ZodString;
+        citationRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        derivation: z.ZodEnum<{
+            pattern: "pattern";
+            ast: "ast";
+            declared: "declared";
+            probe: "probe";
+            agent: "agent";
+        }>;
+        confidence: z.ZodNullable<z.ZodNumber>;
+        verification: z.ZodEnum<{
+            confirmed: "confirmed";
+            contradicted: "contradicted";
+            unverified: "unverified";
+        }>;
+        verifierRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        verificationEvidenceRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    extractorReports: z.ZodArray<z.ZodObject<{
+        extractorRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        sourceRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        status: z.ZodEnum<{
+            failed: "failed";
+            complete: "complete";
+            partial: "partial";
+            unsupported: "unsupported";
+        }>;
+        diagnosticRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    unresolvedQuestions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        sourceRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        reason: z.ZodString;
+    }, z.core.$strict>>;
+    generationRef: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    ref: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    scope: z.ZodObject<{
+        ownerId: z.ZodString;
+        tenantId: z.ZodNullable<z.ZodString>;
+        visibility: z.ZodEnum<{
+            public: "public";
+            owner_private: "owner_private";
+            tenant_private: "tenant_private";
+        }>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ChangeModel = z.infer<typeof ChangeModel>;
+/** Source checks are evidence for review, never runtime PASS or activation. */
+export declare const PlanSourceValidation: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"workflow.source-validation/v1">;
+    sourcePlanRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    changeModelRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    revisionMatrixRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    policyRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    verifiedCitationRefs: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    runnableElementIds: z.ZodArray<z.ZodString>;
+    retainedDiagnosticRefs: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    ref: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    scope: z.ZodObject<{
+        ownerId: z.ZodString;
+        tenantId: z.ZodNullable<z.ZodString>;
+        visibility: z.ZodEnum<{
+            public: "public";
+            owner_private: "owner_private";
+            tenant_private: "tenant_private";
+        }>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type PlanSourceValidation = z.infer<typeof PlanSourceValidation>;

package/dist/protocol/schemas/source.js

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+import { IdString, IsoDateTime, RefSchema, ScopeSchema, ShortText, idList, refList } from "../primitives.js";
+const commit = z.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/);
+const document = { ref: RefSchema, scope: ScopeSchema };
+export const RevisionMatrix = z.object({
+    ...document, schemaVersion: z.literal('workflow.revisions/v1'),
+    repositories: z.array(z.object({ repositoryRef: RefSchema, requestedRef: ShortText, requestedBaseRef: ShortText,
+        headCommit: commit, baseCommit: commit, mergeBaseCommit: commit.nullable(), mergeBaseAbsentReason: ShortText.nullable(),
+        diffRef: RefSchema, changedFileRefs: refList(), resolverRef: RefSchema }).strict()).min(1).max(100), resolvedAt: IsoDateTime,
+}).strict();
+export const ChangeElement = z.object({ id: IdString, boundary: ShortText, behavior: ShortText, citationRefs: refList(),
+    derivation: z.enum(['ast', 'declared', 'probe', 'pattern', 'agent']), confidence: z.number().min(0).max(1).nullable(),
+    verification: z.enum(['confirmed', 'contradicted', 'unverified']), verifierRef: RefSchema, verificationEvidenceRefs: refList(),
+}).strict();
+export const ChangeModel = z.object({ ...document, schemaVersion: z.literal('workflow.change-model/v1'), revisionMatrixRef: RefSchema,
+    elements: z.array(ChangeElement).max(500), extractorReports: z.array(z.object({ extractorRef: RefSchema, sourceRefs: refList(),
+        status: z.enum(['complete', 'partial', 'failed', 'unsupported']), diagnosticRefs: refList() }).strict()).max(500),
+    unresolvedQuestions: z.array(z.object({ id: IdString, sourceRefs: refList(), reason: ShortText }).strict()).max(500), generationRef: RefSchema.nullable(),
+}).strict();
+/** Source checks are evidence for review, never runtime PASS or activation. */
+export const PlanSourceValidation = z.object({ ...document, schemaVersion: z.literal('workflow.source-validation/v1'),
+    sourcePlanRef: RefSchema, changeModelRef: RefSchema, revisionMatrixRef: RefSchema, policyRef: RefSchema,
+    verifiedCitationRefs: refList(), runnableElementIds: idList(), retainedDiagnosticRefs: refList(),
+}).strict();
+//# sourceMappingURL=source.js.map

package/dist/protocol/schemas/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../../src/protocol/schemas/source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE7G,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACnE,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACxD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,GAAG,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAC9D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS;QAC7G,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,qBAAqB,EAAE,SAAS,CAAC,QAAQ,EAAE;QACvH,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,WAAW;CAC/H,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE;IACrH,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,EAAE,OAAO,EAAE;CAC/H,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,iBAAiB,EAAE,SAAS;IACnI,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE;QAC5H,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnH,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE;CAC1J,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,+EAA+E;AAC/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC;IACnH,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IACvG,oBAAoB,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,sBAAsB,EAAE,OAAO,EAAE;CACjG,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/source/git.d.ts

@@ -0,0 +1,36 @@
+import { GitCommitProof } from '../protocol/schemas/gitSources.ts';
+export type GitChange = {
+    path: string;
+    oldMode: string;
+    newMode: string;
+    oldId: string;
+    newId: string;
+    status: 'A' | 'D' | 'M' | 'T';
+};
+/** Read-only Git object commands. Never inherit Git routing/config variables or perform lazy fetches. */
+export declare class GitRepository {
+    readonly root: string;
+    private readonly verified;
+    constructor(root: string);
+    run(args: string[], maxBuffer: number): Buffer;
+    commit(revision: string): string;
+    private object;
+    private revisionObjects;
+    private verifyRevision;
+    commitProof(id: string): GitCommitProof;
+    mergeBase(base: string, head: string): {
+        commit: string | null;
+        reason: string | null;
+    };
+    diff(base: string, head: string, raw?: boolean): Buffer;
+    changes(base: string, head: string): GitChange[];
+    blob(id: string): Buffer;
+    /** Complete regular-file tree, rehashed from objects; never reads the checkout. */
+    snapshot(commit: string): Array<{
+        path: string;
+        mode: '100644' | '100755';
+        bytes: Buffer;
+        objectId: string;
+    }>;
+    file(commit: string, path: string): Buffer;
+}

package/dist/source/git.js

@@ -0,0 +1,159 @@
+import { execFileSync } from 'node:child_process';
+import { realpathSync } from 'node:fs';
+import { devNull } from 'node:os';
+import { resolve } from 'node:path';
+import { Conflict } from "../core/errors.js";
+import { GitObjectId, GitRevision, RepositoryPath } from "../protocol/primitives.js";
+import { GIT_SNAPSHOT_LIMITS } from "../protocol/schemas/gitSources.js";
+import { assertSnapshotPaths } from "./snapshotPaths.js";
+import { gitObjectId } from "./gitObjectProof.js";
+import { GitCommitProof } from "../protocol/schemas/gitSources.js";
+/** Read-only Git object commands. Never inherit Git routing/config variables or perform lazy fetches. */
+export class GitRepository {
+    root;
+    verified = new Set();
+    constructor(root) {
+        this.root = realpathSync(resolve(root));
+        const bare = this.run(['rev-parse', '--is-bare-repository'], 1024).toString().trim() === 'true';
+        const actual = this.run(['rev-parse', bare ? '--absolute-git-dir' : '--show-toplevel'], 8192).toString().trim();
+        if (realpathSync(actual) !== this.root)
+            throw new Conflict('repository binding must name its exact worktree or bare root');
+    }
+    run(args, maxBuffer) {
+        try {
+            return execFileSync('git', ['-C', this.root, '--no-replace-objects', '--literal-pathspecs', ...args], {
+                encoding: 'buffer', maxBuffer, timeout: 10_000, stdio: ['ignore', 'pipe', 'pipe'],
+                env: { PATH: process.env.PATH, SystemRoot: process.env.SystemRoot, GIT_CONFIG_NOSYSTEM: '1', GIT_CONFIG_GLOBAL: devNull,
+                    GIT_NO_LAZY_FETCH: '1', GIT_TERMINAL_PROMPT: '0', GIT_OPTIONAL_LOCKS: '0', LC_ALL: 'C' },
+            });
+        }
+        catch {
+            // Git stderr can contain private source or paths; retain a bounded operation label only.
+            throw new Conflict(`Git ${args[0]} failed: required objects may be unavailable, unsupported or exceed the read/time bound`);
+        }
+    }
+    commit(revision) {
+        GitRevision.parse(revision);
+        const id = GitObjectId.parse(this.run(['rev-parse', '--verify', '--end-of-options', `${revision}^{commit}`], 1024).toString().trim());
+        this.verifyRevision(id);
+        return id;
+    }
+    object(type, id, bound) {
+        GitObjectId.parse(id);
+        const bytes = this.run(['cat-file', type, id], bound);
+        const actual = gitObjectId(type, bytes, id.length === 40 ? 'sha1' : 'sha256');
+        if (actual !== id)
+            throw new Conflict(`Git ${type} bytes disagree with the immutable object identity`);
+        return bytes;
+    }
+    revisionObjects(id) {
+        GitObjectId.parse(id);
+        const commit = this.object('commit', id, 1_048_576);
+        const root = /^tree ([a-f0-9]{40}|[a-f0-9]{64})\n/.exec(commit.toString('utf8'))?.[1];
+        if (!root)
+            throw new Conflict('Git commit has no valid root tree');
+        const listing = this.run(['ls-tree', '-r', '-t', '--format=%(objecttype) %(objectname)', id], 4 * 1024 * 1024).toString('utf8').trim();
+        const trees = new Set([root]);
+        for (const entry of listing ? listing.split('\n') : []) {
+            const match = /^(tree|blob|commit) ([a-f0-9]{40}|[a-f0-9]{64})$/.exec(entry);
+            if (!match)
+                throw new Conflict('unsupported Git tree identity listing');
+            if (match[1] === 'tree')
+                trees.add(match[2]);
+        }
+        if (trees.size > 8192)
+            throw new Conflict('selected Git tree closure exceeds supported coverage');
+        return { commit, trees };
+    }
+    verifyRevision(id) {
+        GitObjectId.parse(id);
+        if (this.verified.has(id))
+            return;
+        const { trees } = this.revisionObjects(id);
+        for (const tree of trees)
+            this.object('tree', tree, 4 * 1024 * 1024);
+        this.verified.add(id);
+    }
+    commitProof(id) {
+        const { commit, trees } = this.revisionObjects(id);
+        return GitCommitProof.parse({ commitBase64: commit.toString('base64'),
+            trees: [...trees].sort().map(objectId => ({ objectId, base64: this.object('tree', objectId, 4 * 1024 * 1024).toString('base64') })) });
+    }
+    mergeBase(base, head) {
+        // Require an unambiguous observed merge base; missing history never becomes an invented empty base.
+        let bytes;
+        try {
+            bytes = this.run(['merge-base', '--all', base, head], 8192);
+        }
+        catch {
+            // A missing base cannot be silently accepted: policy-specific alternatives remain a host obligation.
+            throw new Conflict('merge base unavailable; resolve complete history or use a registered alternative revision policy');
+        }
+        const commits = bytes.toString().trim().split('\n').filter(Boolean).map(value => GitObjectId.parse(value));
+        if (commits.length !== 1)
+            throw new Conflict('ambiguous merge base requires a registered revision policy');
+        return { commit: commits[0], reason: null };
+    }
+    diff(base, head, raw = false) {
+        this.verifyRevision(base);
+        this.verifyRevision(head);
+        return this.run(['diff', '--no-ext-diff', '--no-textconv', '--no-renames', '--no-color', '--ignore-submodules=none',
+            ...(raw ? ['--raw', '--no-abbrev', '-z'] : ['--patch', '--binary', '--full-index', '--src-prefix=a/', '--dst-prefix=b/']),
+            base, head, '--'], 4 * 1024 * 1024);
+    }
+    changes(base, head) {
+        const fields = new TextDecoder('utf-8', { fatal: true }).decode(this.diff(base, head, true)).split('\0');
+        if (fields.pop() !== '')
+            throw new Conflict('unterminated Git change list');
+        if (fields.length % 2 || fields.length > 1000)
+            throw new Conflict('Git change list exceeds supported complete coverage');
+        const changes = [];
+        for (let index = 0; index < fields.length; index += 2) {
+            const match = /^:([0-7]{6}) ([0-7]{6}) ([a-f0-9]{40}|[a-f0-9]{64}) ([a-f0-9]{40}|[a-f0-9]{64}) ([ADMT])$/.exec(fields[index]);
+            if (!match)
+                throw new Conflict('unsupported Git change record');
+            const [, oldMode, newMode, oldId, newId, status] = match;
+            if (![oldMode, newMode].every(mode => ['000000', '100644', '100755'].includes(mode))) {
+                throw new Conflict('changed symlink, submodule or unsupported file mode needs an explicit source adapter');
+            }
+            changes.push({ path: RepositoryPath.parse(fields[index + 1]), oldMode: oldMode, newMode: newMode, oldId: oldId, newId: newId, status: status });
+        }
+        return changes;
+    }
+    blob(id) {
+        return this.object('blob', id, 1_048_576);
+    }
+    /** Complete regular-file tree, rehashed from objects; never reads the checkout. */
+    snapshot(commit) {
+        this.verifyRevision(commit);
+        const listing = new TextDecoder('utf-8', { fatal: true }).decode(this.run(['ls-tree', '-r', '-z', '--full-tree', commit], 4 * 1024 * 1024));
+        const records = listing.split('\0');
+        if (records.pop() !== '' || !records.length || records.length > GIT_SNAPSHOT_LIMITS.files)
+            throw new Conflict('Git snapshot requires a complete nonempty bounded tree');
+        let total = 0;
+        const entries = records.map(record => {
+            const match = /^(100644|100755) blob ([a-f0-9]{40}|[a-f0-9]{64})\t(.+)$/.exec(record);
+            if (!match)
+                throw new Conflict('Git snapshot refuses symlinks, submodules and unsupported modes');
+            const path = RepositoryPath.parse(match[3]);
+            const bytes = this.blob(match[2]);
+            total += bytes.length;
+            if (total > GIT_SNAPSHOT_LIMITS.totalBytes)
+                throw new Conflict('complete Git snapshot exceeds the total byte bound');
+            return { path, mode: match[1], bytes, objectId: match[2] };
+        });
+        assertSnapshotPaths(entries.map(entry => entry.path));
+        return entries;
+    }
+    file(commit, path) {
+        this.verifyRevision(commit);
+        RepositoryPath.parse(path);
+        const tree = this.run(['ls-tree', '-z', commit, '--', path], 16_384);
+        const record = new TextDecoder('utf-8', { fatal: true }).decode(tree);
+        const match = /^(100644|100755) blob ([a-f0-9]{40}|[a-f0-9]{64})\t([^\0]+)\0$/.exec(record);
+        if (!match || match[3] !== path)
+            throw new Conflict('selected source is missing or is not a regular Git blob');
+        return this.blob(match[2]);
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/source/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/source/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAInE,yGAAyG;AACzG,MAAM,OAAO,aAAa;IACf,IAAI,CAAS;IACL,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,YAAY,IAAY;QACtB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,sBAAsB,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;QAChG,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChH,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,8DAA8D,CAAC,CAAC;IAC7H,CAAC;IACD,GAAG,CAAC,IAAc,EAAE,SAAiB;QACnC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC,EAAE;gBACpG,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjF,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,OAAO;oBACrH,iBAAiB,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;aAC3F,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,yFAAyF;YACzF,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,yFAAyF,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IACD,MAAM,CAAC,QAAgB;QACrB,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,QAAQ,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACtI,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IACrC,CAAC;IACO,MAAM,CAAC,IAAgC,EAAE,EAAU,EAAE,KAAa;QACxE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9E,IAAI,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,oDAAoD,CAAC,CAAC;QACvG,OAAO,KAAK,CAAC;IACf,CAAC;IACO,eAAe,CAAC,EAAU;QAChC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,mCAAmC,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,sCAAsC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACvI,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7E,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,QAAQ,CAAC,uCAAuC,CAAC,CAAC;YACxE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,sDAAsD,CAAC,CAAC;QAClG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IACO,cAAc,CAAC,EAAU;QAC/B,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO;QACzD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IACD,WAAW,CAAC,EAAU;QACpB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACnD,OAAO,cAAc,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3I,CAAC;IACD,SAAS,CAAC,IAAY,EAAE,IAAY;QAClC,oGAAoG;QACpG,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QACpE,MAAM,CAAC;YACL,qGAAqG;YACrG,MAAM,IAAI,QAAQ,CAAC,kGAAkG,CAAC,CAAC;QACzH,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,4DAA4D,CAAC,CAAC;QAC3G,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,GAAG,GAAG,KAAK;QAC1C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,0BAA0B;YACjH,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;YACzH,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,IAAY,EAAE,IAAY;QAChC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzG,IAAI,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,8BAA8B,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,qDAAqD,CAAC,CAAC;QACzH,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,2FAA2F,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC;YAC/H,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;YAChE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;YACzD,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAK,CAAC,CAAC,EAAE,CAAC;gBACtF,MAAM,IAAI,QAAQ,CAAC,sFAAsF,CAAC,CAAC;YAC7G,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,EAAE,OAAQ,EAAE,KAAK,EAAE,KAAM,EAAE,KAAK,EAAE,KAAM,EAAE,MAAM,EAAE,MAA6B,EAAE,CAAC,CAAC;QAC7K,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,EAAU;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IACD,mFAAmF;IACnF,QAAQ,CAAC,MAAc;QACrB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;QAC5I,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,wDAAwD,CAAC,CAAC;QACxK,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YACnC,MAAM,KAAK,GAAG,0DAA0D,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,QAAQ,CAAC,iEAAiE,CAAC,CAAC;YAClG,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1D,IAAI,KAAK,GAAG,mBAAmB,CAAC,UAAU;gBAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACrH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAwB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;QACrF,CAAC,CAAC,CAAC;QACH,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,MAAc,EAAE,IAAY;QAC/B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,gEAAgE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QAC/G,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/source/gitObjectProof.d.ts

@@ -0,0 +1,12 @@
+import { type GitCommitObservation } from '../protocol/index.ts';
+import type { SnapshotFile } from './snapshotTree.ts';
+export declare function gitObjectId(type: 'commit' | 'tree' | 'blob', bytes: Uint8Array, algorithm: 'sha1' | 'sha256'): string;
+type GitObjectBinding = Omit<GitCommitObservation, 'verification'>;
+/** Structural object/manifest links only: cannot certify SHA-256 file bytes without reading them. */
+export declare function verifyGitSnapshotProofMetadata(snapshot: unknown): {
+    verification: 'object_links_only';
+    binding: GitObjectBinding;
+};
+/** Hashes every actual file through its Git blob identity and the full tree/commit object closure. */
+export declare function verifyGitSnapshotCommit(snapshot: unknown, files: SnapshotFile[]): GitCommitObservation;
+export {};