ws-spec-kit 0.1.0-beta.0

package/dist/application/decide.js

@@ -0,0 +1,168 @@
+import { transitionStage, transitionWorkItem } from "../domain/states.js";
+import { ApprovalError, decideArtifactApproval } from "../engine/approvals.js";
+import { mutateControlPlane } from "../engine/scheduler.js";
+import { validate } from "../schemas/index.js";
+import { readWorkflowTrustRequest } from "../storage/workflow-trust.js";
+import { loadWorkflowPackage } from "../workflow-package/loader.js";
+import { recordWorkflowTrust } from "../workflow-package/trust.js";
+import { acquireApplication } from "./acquire.js";
+import { adoptVerifiedExternalAction, approveExternalAction, markExternalActionFailed, reconcileExternalAction, rejectExternalAction } from "./external-action.js";
+import { readControlPlane } from "../storage/control-plane.js";
+export class ApplicationDecisionError extends Error {
+    code;
+    constructor(code, message) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.name = "ApplicationDecisionError";
+    }
+}
+async function resetExpiredApproval(input) {
+    await mutateControlPlane({
+        cwd: input.root,
+        workItemId: input.workItemId,
+        eventType: "projection.invalidated",
+        idempotencyKey: `approval-reset:${input.requestId}`,
+        actor: input.actor,
+        operationInput: { requestId: input.requestId, reason: "expired" },
+        mutate: (current) => {
+            const approval = current.approvals[input.requestId];
+            if (approval?.status !== "expired")
+                throw new ApplicationDecisionError("WSSPEC_APPROVAL_NOT_PENDING", "审批请求未处于 expired 状态。 ");
+            const stage = current.stages[approval.stageId];
+            if (stage?.status !== "awaiting_approval")
+                throw new ApplicationDecisionError("WSSPEC_APPROVAL_NOT_PENDING", "审批 Step 状态不一致。 ");
+            const revision = transitionStage(stage, { type: "transition", to: "revision_required" });
+            return {
+                projection: {
+                    ...current,
+                    workItem: transitionWorkItem(current.workItem, { type: "transition", to: "active" }),
+                    stages: { ...current.stages, [approval.stageId]: transitionStage(revision, { type: "transition", to: "ready" }) },
+                },
+                value: undefined,
+            };
+        },
+    });
+}
+export async function decideApplication(input, dependencies) {
+    validate("builtin.application-decision-input.v1", input);
+    if (input.kind === "workflow_trust") {
+        if (dependencies.terminal.isTTY !== true) {
+            throw new ApplicationDecisionError("WSSPEC_INTERACTIVE_TTY_REQUIRED", "Workflow Package 信任决定必须来自真实交互式 TTY。 ");
+        }
+        const request = await readWorkflowTrustRequest(input.root, input.requestId);
+        if (request === undefined)
+            throw new ApplicationDecisionError("WSSPEC_WORKFLOW_TRUST_REQUEST_INVALID", "Workflow 信任请求不存在。 ");
+        const pkg = await loadWorkflowPackage({ root: input.root, ref: request.packageRef });
+        await recordWorkflowTrust({
+            root: input.root,
+            pkg,
+            decision: input.decision,
+            actor: input.actor,
+            requestId: input.requestId,
+            expectedPackageDigest: input.expectedPackageDigest,
+            expectedCapabilityDigest: input.expectedCapabilityDigest,
+        });
+        return input.decision === "trusted"
+            ? { action: "blocked", problems: [{ code: "WSSPEC_WORKFLOW_TRUST_RECORDED", message: "已记录 Workflow 信任决定，请重新执行 start。", retryable: true }] }
+            : { action: "blocked", problems: [{ code: "WSSPEC_WORKFLOW_TRUST_REJECTED", message: "Workflow Package 已被拒绝。", retryable: false }] };
+    }
+    if (input.kind === "external_reconciliation") {
+        const projection = await readControlPlane(input.root, input.workItemId);
+        const state = projection.externalActions[input.requestId];
+        if (state === undefined)
+            throw new ApplicationDecisionError("WSSPEC_EXTERNAL_REQUEST_NOT_FOUND", "外部动作请求不存在。 ");
+        if (state.request.requestDigest !== input.expectedDigest) {
+            throw new ApplicationDecisionError("WSSPEC_EXTERNAL_REQUEST_DIGEST_MISMATCH", "协调恢复决定未绑定当前 Request 摘要。 ");
+        }
+        if (input.decision === "mark_failed") {
+            await markExternalActionFailed({
+                root: input.root,
+                workItemId: input.workItemId,
+                requestId: input.requestId,
+                expectedRequestDigest: input.expectedDigest,
+                evidence: input.evidence,
+                actor: input.actor,
+                now: dependencies.now().toISOString(),
+                terminal: dependencies.terminal,
+            });
+        }
+        else if (input.decision === "adopt_verified") {
+            await adoptVerifiedExternalAction({
+                root: input.root,
+                workItemId: input.workItemId,
+                requestId: input.requestId,
+                expectedRequestDigest: input.expectedDigest,
+                externalStableId: input.externalStableId,
+                contentDigest: input.contentDigest,
+                evidence: input.evidence,
+                actor: input.actor,
+                now: dependencies.now().toISOString(),
+                terminal: dependencies.terminal,
+                executor: dependencies.externalExecutor(state.request.provider, state.request.action),
+            });
+        }
+        else {
+            await reconcileExternalAction({
+                root: input.root,
+                workItemId: input.workItemId,
+                requestId: input.requestId,
+                executor: dependencies.externalExecutor(state.request.provider, state.request.action),
+                now: dependencies.now().toISOString(),
+            });
+        }
+        return acquireApplication({ root: input.root, workItemId: input.workItemId, actor: input.actor }, dependencies);
+    }
+    if (input.kind === "external_action") {
+        if (input.decision === "rejected") {
+            await rejectExternalAction({
+                root: input.root,
+                workItemId: input.workItemId,
+                requestId: input.requestId,
+                expectedRequestDigest: input.expectedDigest,
+                actor: input.actor,
+                rejectedAt: dependencies.now().toISOString(),
+                terminal: dependencies.terminal,
+            });
+            return acquireApplication({ root: input.root, workItemId: input.workItemId, actor: input.actor }, dependencies);
+        }
+        const projection = await readControlPlane(input.root, input.workItemId);
+        const state = projection.externalActions[input.requestId];
+        if (state === undefined)
+            throw new ApplicationDecisionError("WSSPEC_EXTERNAL_REQUEST_NOT_FOUND", "外部动作请求不存在。 ");
+        const decidedAt = dependencies.now().toISOString();
+        await approveExternalAction({
+            root: input.root,
+            workItemId: input.workItemId,
+            requestId: input.requestId,
+            expectedRequestDigest: input.expectedDigest,
+            actor: input.actor,
+            approvalDigest: input.expectedDigest,
+            profile: state.request.profile,
+            profileDigest: state.request.profileDigest,
+            workspaceDigest: state.request.workspaceDigest,
+            configDigest: state.request.configDigest,
+            decidedAt,
+            expiresAt: state.request.expiresAt,
+            terminal: dependencies.terminal,
+        });
+        return acquireApplication({ root: input.root, workItemId: input.workItemId, actor: input.actor }, dependencies);
+    }
+    try {
+        await decideArtifactApproval({
+            cwd: input.root,
+            workItemId: input.workItemId,
+            requestId: input.requestId,
+            decision: input.decision === "approved" ? "approve" : "reject",
+            terminal: dependencies.terminal,
+            actor: input.actor,
+            expectedDigest: input.expectedDigest,
+        });
+    }
+    catch (error) {
+        if (!(error instanceof ApprovalError) || error.code !== "WSSPEC_APPROVAL_EXPIRED")
+            throw error;
+        await resetExpiredApproval(input);
+    }
+    return acquireApplication({ root: input.root, workItemId: input.workItemId, actor: input.actor }, dependencies);
+}
+//# sourceMappingURL=decide.js.map

package/dist/application/decide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decide.js","sourceRoot":"","sources":["../../src/application/decide.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAA4B,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACnK,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAM/D,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC5B;IAArB,YAAqB,IAAwB,EAAE,OAAe;QAC5D,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QADV,SAAI,GAAJ,IAAI,CAAoB;QAE3C,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAmD;IACrF,MAAM,kBAAkB,CAAC;QACvB,GAAG,EAAE,KAAK,CAAC,IAAI;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,wBAAwB;QACnC,cAAc,EAAE,kBAAkB,KAAK,CAAC,SAAS,EAAE;QACnD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QACjE,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,QAAQ,EAAE,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,wBAAwB,CAAC,6BAA6B,EAAE,sBAAsB,CAAC,CAAC;YAC9H,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,KAAK,EAAE,MAAM,KAAK,mBAAmB;gBAAE,MAAM,IAAI,wBAAwB,CAAC,6BAA6B,EAAE,iBAAiB,CAAC,CAAC;YAChI,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACzF,OAAO;gBACL,UAAU,EAAE;oBACV,GAAG,OAAO;oBACV,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;oBACpF,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;iBAClH;gBACD,KAAK,EAAE,SAAS;aACjB,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAoB,EAAE,YAAgC;IAC5F,QAAQ,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,EAAE,sCAAsC,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,wBAAwB,CAAC,uCAAuC,EAAE,oBAAoB,CAAC,CAAC;QAC7H,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACrF,MAAM,mBAAmB,CAAC;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;SACzD,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,OAAO,EAAE,gCAAgC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE;YAC3I,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACzI,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,wBAAwB,CAAC,mCAAmC,EAAE,aAAa,CAAC,CAAC;QAChH,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACzD,MAAM,IAAI,wBAAwB,CAAC,yCAAyC,EAAE,0BAA0B,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACrC,MAAM,wBAAwB,CAAC;gBAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,qBAAqB,EAAE,KAAK,CAAC,cAAc;gBAC3C,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;gBACrC,QAAQ,EAAE,YAAY,CAAC,QAAQ;aAChC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAC/C,MAAM,2BAA2B,CAAC;gBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,qBAAqB,EAAE,KAAK,CAAC,cAAc;gBAC3C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;gBACrC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;aACtF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,uBAAuB,CAAC;gBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,YAAY,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACrF,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;IAClH,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,oBAAoB,CAAC;gBACzB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,qBAAqB,EAAE,KAAK,CAAC,cAAc;gBAC3C,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;gBAC5C,QAAQ,EAAE,YAAY,CAAC,QAAQ;aAChC,CAAC,CAAC;YACH,OAAO,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,wBAAwB,CAAC,mCAAmC,EAAE,aAAa,CAAC,CAAC;QAChH,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,qBAAqB,CAAC;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,qBAAqB,EAAE,KAAK,CAAC,cAAc;YAC3C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,cAAc,EAAE,KAAK,CAAC,cAAoC;YAC1D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;YAC9B,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;YAC1C,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe;YAC9C,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;YACxC,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,QAAQ,EAAE,YAAY,CAAC,QAAQ;SAChC,CAAC,CAAC;QACH,OAAO,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;IAClH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,sBAAsB,CAAC;YAC3B,GAAG,EAAE,KAAK,CAAC,IAAI;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YAC9D,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;YAAE,MAAM,KAAK,CAAC;QAC/F,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;AAClH,CAAC"}

package/dist/application/doctor-connectors.d.ts

@@ -0,0 +1,34 @@
+import type { ConnectorEnvironmentKey, ConnectorExecutable, ConnectorManifest, DoctorAuthUnavailableReasonCode } from "../registry/connectors/types.js";
+export type ConnectorHealthStatus = "available" | "unauthenticated" | "unsupported_version" | "missing_binary";
+interface ConnectorHealthBase {
+    provider: string;
+    diagnostic?: string;
+}
+export type ConnectorHealth = ConnectorHealthBase & {
+    status: "available";
+    version: string;
+    reasonCode?: never;
+} | ConnectorHealthBase & {
+    status: "unauthenticated";
+    version: string;
+    reasonCode?: never;
+} | ConnectorHealthBase & {
+    status: "unauthenticated";
+    version?: never;
+    reasonCode: DoctorAuthUnavailableReasonCode;
+} | ConnectorHealthBase & {
+    status: "unsupported_version";
+    version?: string;
+    reasonCode?: never;
+} | ConnectorHealthBase & {
+    status: "missing_binary";
+    version?: never;
+    reasonCode?: never;
+};
+export interface DoctorConnectorsInput {
+    manifests: readonly ConnectorManifest[];
+    environment?: Readonly<Partial<Record<ConnectorEnvironmentKey, string | undefined>>>;
+    locateExecutable(executable: ConnectorExecutable): Promise<string | undefined>;
+}
+export declare function doctorConnectors(input: DoctorConnectorsInput): Promise<ConnectorHealth[]>;
+export {};

package/dist/application/doctor-connectors.js

@@ -0,0 +1,99 @@
+import { ProcessJsonError, spawnParsedText } from "../adapters/process/spawn-json.js";
+import { defineConnectorManifest } from "../registry/connectors/manifest.js";
+import { compareSemVer, extractSemVer, parseSemVer } from "../registry/connectors/semver.js";
+async function probeVersion(executable, probe, manifest, environment) {
+    const request = { executable, argv: probe.argv, input: { operation: "version" }, timeoutMs: manifest.timeoutMs, maxStdoutBytes: manifest.maxStdoutBytes, environment };
+    return (await spawnParsedText(request, (value) => {
+        const actual = extractSemVer(value);
+        const minimum = parseSemVer(manifest.minimumVersion);
+        return {
+            ...(actual === undefined ? {} : { version: actual.source }),
+            supported: actual !== undefined && minimum !== undefined && compareSemVer(actual, minimum) >= 0,
+        };
+    })).value;
+}
+function providerEnvironment(manifest, environment) {
+    return Object.fromEntries(manifest.envPolicy.allow.flatMap((name) => {
+        const value = environment?.[name];
+        return value === undefined ? [] : [[name, value]];
+    }));
+}
+async function probeAuth(executable, probe, manifest, environment) {
+    const request = { executable, argv: probe.argv, input: { operation: "auth" }, timeoutMs: manifest.timeoutMs, maxStdoutBytes: manifest.maxStdoutBytes, environment };
+    let exitCode = 0;
+    try {
+        await spawnParsedText(request, (value) => value);
+    }
+    catch (error) {
+        if (!(error instanceof ProcessJsonError) || error.code !== "WSSPEC_PROCESS_EXIT_NONZERO" || error.exitCode === undefined)
+            throw error;
+        exitCode = error.exitCode;
+    }
+    if (probe.outcomes.authenticated.includes(exitCode))
+        return true;
+    if (probe.outcomes.unauthenticated.includes(exitCode))
+        return false;
+    throw new ProcessJsonError("WSSPEC_PROCESS_EXIT_NONZERO", "认证探测返回未登记结果。", "", exitCode);
+}
+export async function doctorConnectors(input) {
+    const health = [];
+    for (const candidate of input.manifests) {
+        const provider = typeof candidate?.id === "string" && /^[a-z][a-z0-9.-]*$/u.test(candidate.id) ? candidate.id : "invalid-provider";
+        let manifest;
+        try {
+            manifest = defineConnectorManifest(candidate);
+        }
+        catch {
+            health.push({ provider, status: "unsupported_version", diagnostic: "Connector manifest invalid." });
+            continue;
+        }
+        let executable;
+        try {
+            executable = await input.locateExecutable(manifest.executable);
+        }
+        catch {
+            health.push({ provider: manifest.id, status: "missing_binary", diagnostic: "Executable locator failed." });
+            continue;
+        }
+        if (executable === undefined) {
+            health.push({ provider: manifest.id, status: "missing_binary" });
+            continue;
+        }
+        if (manifest.doctor.auth.kind === "unavailable") {
+            health.push({
+                provider: manifest.id,
+                status: "unauthenticated",
+                reasonCode: manifest.doctor.auth.reasonCode,
+                diagnostic: "Authentication probe unavailable in side-effect-free Doctor.",
+            });
+            continue;
+        }
+        const environment = providerEnvironment(manifest, input.environment);
+        let versionResult;
+        try {
+            versionResult = await probeVersion(executable, manifest.doctor.version, manifest, environment);
+        }
+        catch {
+            health.push({ provider: manifest.id, status: "unsupported_version", diagnostic: "Version probe failed." });
+            continue;
+        }
+        if (!versionResult.supported) {
+            health.push({ provider: manifest.id, status: "unsupported_version", ...(versionResult.version === undefined ? {} : { version: versionResult.version }) });
+            continue;
+        }
+        const supportedVersion = versionResult.version;
+        if (manifest.doctor.auth.kind === "none") {
+            health.push({ provider: manifest.id, status: "available", version: supportedVersion });
+            continue;
+        }
+        try {
+            const authenticated = await probeAuth(executable, manifest.doctor.auth, manifest, environment);
+            health.push({ provider: manifest.id, status: authenticated ? "available" : "unauthenticated", version: supportedVersion });
+        }
+        catch {
+            health.push({ provider: manifest.id, status: "unauthenticated", version: supportedVersion, diagnostic: "Authentication probe failed." });
+        }
+    }
+    return health;
+}
+//# sourceMappingURL=doctor-connectors.js.map

package/dist/application/doctor-connectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-connectors.js","sourceRoot":"","sources":["../../src/application/doctor-connectors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAmC7F,KAAK,UAAU,YAAY,CAAC,UAAkB,EAAE,KAAyB,EAAE,QAA2B,EAAE,WAA6B;IACnI,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC;IACvK,OAAO,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACrD,OAAO;YACL,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3D,SAAS,EAAE,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;SAChG,CAAC;IACJ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAID,SAAS,mBAAmB,CAAC,QAA2B,EAAE,WAAiD;IACzG,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAClE,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,UAAkB,EAAE,KAAiD,EAAE,QAA2B,EAAE,WAA6B;IACxJ,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC;IACpK,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC;QAAC,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IACzD,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,6BAA6B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QACtI,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAA4B;IACjE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,SAAS,EAAE,EAAE,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACnI,IAAI,QAA2B,CAAC;QAChC,IAAI,CAAC;YAAC,QAAQ,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QACtD,MAAM,CAAC;YACL,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACpG,SAAS;QACX,CAAC;QACD,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YAAC,UAAU,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QACvE,MAAM,CAAC;YACL,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC3G,SAAS;QACX,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACjE,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,QAAQ,CAAC,EAAE;gBACrB,MAAM,EAAE,iBAAiB;gBACzB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;gBAC3C,UAAU,EAAE,8DAA8D;aAC3E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,aAAiC,CAAC;QACtC,IAAI,CAAC;YAAC,aAAa,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAAC,CAAC;QACvG,MAAM,CAAC;YACL,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3G,SAAS;QACX,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,CAAC,aAAa,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1J,SAAS;QACX,CAAC;QACD,MAAM,gBAAgB,GAAG,aAAa,CAAC,OAAQ,CAAC;QAChD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACvF,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC/F,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7H,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/application/external-action.d.ts

@@ -0,0 +1,164 @@
+import { type ExternalActionGrant, type ExternalEffectKind, type ExternalActionName, type ExternalActionRequest, type ExternalActionState, type ExternalActionTarget } from "../engine/external-effects/authorization.js";
+import { type RuntimeProjection } from "../storage/control-plane.js";
+import { loadApplicationState } from "./state.js";
+export { ExternalAuthorizationError as ExternalActionError } from "../engine/external-effects/authorization.js";
+export type { ExternalActionGrant, ExternalActionName, ExternalActionRequest, ExternalActionState, ExternalEffectKind, ExternalWriteReceipt } from "../engine/external-effects/authorization.js";
+export interface ExternalActionPrepareInput {
+    root: string;
+    workItemId: string;
+    stepId: string;
+    attemptId: string;
+    provider: string;
+    action: ExternalActionName;
+    securityClass: "local-write" | "external-write";
+    target: ExternalActionTarget;
+    externalEffectKind?: ExternalEffectKind;
+    payload: unknown;
+    expectedContentDigest: `sha256:${string}`;
+    bindingDigest: `sha256:${string}`;
+    inputDigest: `sha256:${string}`;
+    artifactDigests: `sha256:${string}`[];
+    idempotencyKey?: string;
+    sideEffects: string[];
+    createdAt: string;
+    expiresAt: string;
+    actor: string;
+}
+export interface ExternalActionApprovalSummary {
+    provider: string;
+    action: ExternalActionName;
+    target: ExternalActionTarget;
+    digest: `sha256:${string}`;
+    sideEffects: string[];
+}
+export interface ExternalActionRejection {
+    requestId: string;
+    requestDigest: `sha256:${string}`;
+    actor: string;
+    rejectedAt: string;
+}
+export declare function externalActionRejectionKey(requestId: string): string;
+export type ExternalReadBack = {
+    outcome: "verified";
+    targetStableId: string;
+    contentDigest: `sha256:${string}`;
+    checkedAt: string;
+} | {
+    outcome: "failed";
+    checkedAt: string;
+    reason?: string;
+} | {
+    outcome: "unknown";
+    checkedAt: string;
+    reason?: string;
+};
+export interface ExternalActionExecutor {
+    execute(input: {
+        root: string;
+        request: ExternalActionRequest;
+        grant: ExternalActionGrant;
+        payload: unknown;
+        markDispatched(): Promise<void>;
+    }): Promise<{
+        targetStableId: string;
+        externalEffectId?: string;
+        publishedContentDigest: `sha256:${string}`;
+        readBackContentDigest: `sha256:${string}`;
+        verifiedAt: string;
+    }>;
+    reconcile(input: {
+        root: string;
+        request: ExternalActionRequest;
+        grant: ExternalActionGrant;
+    }): Promise<ExternalReadBack>;
+    adopt?(input: {
+        root: string;
+        request: ExternalActionRequest;
+        grant: ExternalActionGrant;
+        externalStableId: string;
+        contentDigest: `sha256:${string}`;
+    }): Promise<ExternalReadBack>;
+}
+export declare function assertCurrentExternalActionContext(state: Awaited<ReturnType<typeof loadApplicationState>>, projection: RuntimeProjection, request: ExternalActionRequest): Promise<void>;
+export declare function externalActionApprovalSummary(request: ExternalActionRequest): ExternalActionApprovalSummary;
+export declare function prepareExternalAction(input: ExternalActionPrepareInput): Promise<ExternalActionState>;
+export declare function approveExternalAction(input: {
+    root: string;
+    workItemId: string;
+    requestId: string;
+    expectedRequestDigest: string;
+    actor: string;
+    approvalDigest: `sha256:${string}`;
+    profile: string;
+    profileDigest: `sha256:${string}`;
+    workspaceDigest: `sha256:${string}`;
+    configDigest: `sha256:${string}`;
+    decidedAt: string;
+    expiresAt: string;
+    terminal: {
+        isTTY?: boolean;
+    };
+}): Promise<Extract<ExternalActionState, {
+    status: "approved";
+}>>;
+export declare function rejectExternalAction(input: {
+    root: string;
+    workItemId: string;
+    requestId: string;
+    expectedRequestDigest: string;
+    actor: string;
+    rejectedAt: string;
+    terminal: {
+        isTTY?: boolean;
+    };
+}): Promise<ExternalActionRejection>;
+export declare function executeExternalAction(input: {
+    root: string;
+    workItemId: string;
+    requestId: string;
+    payload: unknown;
+    executor: ExternalActionExecutor;
+    now: string;
+}): Promise<Extract<ExternalActionState, {
+    status: "executing" | "verified" | "reconciliation_required";
+}>>;
+export declare function reconcileExternalAction(input: {
+    root: string;
+    workItemId: string;
+    requestId: string;
+    executor: ExternalActionExecutor;
+    now: string;
+}): Promise<Extract<ExternalActionState, {
+    status: "verified" | "failed" | "reconciliation_required";
+}>>;
+export declare function markExternalActionFailed(input: {
+    root: string;
+    workItemId: string;
+    requestId: string;
+    expectedRequestDigest: string;
+    evidence: string;
+    actor: string;
+    now: string;
+    terminal: {
+        isTTY?: boolean;
+    };
+}): Promise<Extract<ExternalActionState, {
+    status: "failed";
+}>>;
+export declare function adoptVerifiedExternalAction(input: {
+    root: string;
+    workItemId: string;
+    requestId: string;
+    expectedRequestDigest: string;
+    externalStableId: string;
+    contentDigest: string;
+    evidence: string;
+    actor: string;
+    now: string;
+    terminal: {
+        isTTY?: boolean;
+    };
+    executor: ExternalActionExecutor;
+}): Promise<Extract<ExternalActionState, {
+    status: "verified";
+}>>;