ws-spec-kit 0.1.0-beta.0

package/dist/engine/expressions/parser.js

@@ -0,0 +1,173 @@
+import { ExpressionError } from "./ast.js";
+const maximumExpressionLength = 1024;
+const forbiddenSegments = new Set(["__proto__", "constructor", "prototype"]);
+const roots = new Set(["artifacts", "bindings", "steps"]);
+function sourceBody(source) {
+    if (source.length > maximumExpressionLength) {
+        throw new ExpressionError("WSSPEC_EXPRESSION_LIMIT_EXCEEDED", "表达式超过最大长度。");
+    }
+    const trimmed = source.trim();
+    if (trimmed.startsWith("${") || trimmed.endsWith("}")) {
+        if (!trimmed.startsWith("${") || !trimmed.endsWith("}")) {
+            throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "表达式模板边界不完整。");
+        }
+        return trimmed.slice(2, -1).trim();
+    }
+    return trimmed;
+}
+function tokenize(source) {
+    const tokens = [];
+    for (let index = 0; index < source.length;) {
+        const character = source[index];
+        if (/\s/u.test(character)) {
+            index += 1;
+            continue;
+        }
+        const pair = source.slice(index, index + 2);
+        if (pair === "==" || pair === "!=" || pair === "&&" || pair === "||") {
+            tokens.push({ kind: "operator", value: pair });
+            index += 2;
+            continue;
+        }
+        if (character === "." || character === "(" || character === ")") {
+            tokens.push({ kind: "operator", value: character });
+            index += 1;
+            continue;
+        }
+        if (character === "\"" || character === "'") {
+            const quote = character;
+            let value = "";
+            index += 1;
+            let closed = false;
+            while (index < source.length) {
+                const next = source[index++];
+                if (next === quote) {
+                    closed = true;
+                    break;
+                }
+                if (next === "\\") {
+                    const escaped = source[index++];
+                    if (escaped === undefined || !["\\", "\"", "'", "n", "r", "t"].includes(escaped)) {
+                        throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "字符串转义不在有限语法内。");
+                    }
+                    value += escaped === "n" ? "\n" : escaped === "r" ? "\r" : escaped === "t" ? "\t" : escaped;
+                }
+                else
+                    value += next;
+            }
+            if (!closed)
+                throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "字符串没有结束引号。");
+            tokens.push({ kind: "literal", value });
+            continue;
+        }
+        const number = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?/u.exec(source.slice(index));
+        if (number !== null) {
+            const value = Number(number[0]);
+            if (!Number.isFinite(value))
+                throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "数字字面量无效。");
+            tokens.push({ kind: "literal", value });
+            index += number[0].length;
+            continue;
+        }
+        const identifier = /^[A-Za-z_][A-Za-z0-9_-]*/u.exec(source.slice(index));
+        if (identifier !== null) {
+            const value = identifier[0];
+            if (value === "true")
+                tokens.push({ kind: "literal", value: true });
+            else if (value === "false")
+                tokens.push({ kind: "literal", value: false });
+            else if (value === "null")
+                tokens.push({ kind: "literal", value: null });
+            else
+                tokens.push({ kind: "identifier", value });
+            index += value.length;
+            continue;
+        }
+        throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "表达式含有未允许的语法。");
+    }
+    tokens.push({ kind: "end" });
+    return tokens;
+}
+class Parser {
+    tokens;
+    #index = 0;
+    constructor(tokens) {
+        this.tokens = tokens;
+    }
+    parse() {
+        const value = this.or();
+        if (this.current().kind !== "end")
+            throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "表达式包含未允许的后续语法。");
+        return value;
+    }
+    or() {
+        let left = this.and();
+        while (this.take("||"))
+            left = { kind: "binary", op: "||", left, right: this.and() };
+        return left;
+    }
+    and() {
+        let left = this.equality();
+        while (this.take("&&"))
+            left = { kind: "binary", op: "&&", left, right: this.equality() };
+        return left;
+    }
+    equality() {
+        let left = this.primary();
+        while (true) {
+            if (this.take("=="))
+                left = { kind: "binary", op: "==", left, right: this.primary() };
+            else if (this.take("!="))
+                left = { kind: "binary", op: "!=", left, right: this.primary() };
+            else
+                return left;
+        }
+    }
+    primary() {
+        const token = this.current();
+        if (token.kind === "literal") {
+            this.#index += 1;
+            return { kind: "literal", value: token.value };
+        }
+        if (this.take("(")) {
+            const value = this.or();
+            if (!this.take(")"))
+                throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "括号没有闭合。");
+            return value;
+        }
+        if (token.kind !== "identifier")
+            throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "表达式缺少允许的值。");
+        if (!roots.has(token.value))
+            throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "表达式引用了未知标识。");
+        this.#index += 1;
+        const segments = [];
+        while (this.take(".")) {
+            const segment = this.current();
+            if (segment.kind !== "identifier" || forbiddenSegments.has(segment.value)) {
+                throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "表达式路径包含禁止的属性。");
+            }
+            segments.push(segment.value);
+            this.#index += 1;
+        }
+        if (segments.length === 0)
+            throw new ExpressionError("WSSPEC_EXPRESSION_FORBIDDEN", "表达式路径必须包含属性。");
+        return { kind: "path", root: token.value, segments };
+    }
+    current() { return this.tokens[this.#index]; }
+    take(value) {
+        const token = this.current();
+        if (token.kind !== "operator" || token.value !== value)
+            return false;
+        this.#index += 1;
+        return true;
+    }
+}
+export function parseExpression(source) {
+    if (typeof source !== "string")
+        throw new ExpressionError("WSSPEC_EXPRESSION_INVALID", "表达式必须是字符串。");
+    const body = sourceBody(source);
+    if (body === "")
+        throw new ExpressionError("WSSPEC_EXPRESSION_INVALID", "表达式不能为空。");
+    return new Parser(tokenize(body)).parse();
+}
+//# sourceMappingURL=parser.js.map

package/dist/engine/expressions/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../../src/engine/expressions/parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAsB,MAAM,UAAU,CAAC;AAE/D,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAC7E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAQ1D,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,MAAM,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,YAAY,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,aAAa,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC;QAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,SAAS;QACvE,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,SAAS;QAC5E,CAAC;QACD,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,SAAS,CAAC;YACxB,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAE,CAAC;gBAC9B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBAC7C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;oBAChC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBACjF,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,eAAe,CAAC,CAAC;oBAC5E,CAAC;oBACD,KAAK,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC9F,CAAC;;oBAAM,KAAK,IAAI,IAAI,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,YAAY,CAAC,CAAC;YACpF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,SAAS;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAC;YAClG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAAC,SAAS;QAC/E,CAAC;QACD,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;iBAC/D,IAAI,KAAK,KAAK,OAAO;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;iBACtE,IAAI,KAAK,KAAK,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;;gBACpE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YAChD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YAAC,SAAS;QAClC,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,cAAc,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,MAAM;IAGmB;IAF7B,MAAM,GAAG,CAAC,CAAC;IAEX,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEzD,KAAK;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,KAAK;YAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,CAAC;QAC9G,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,EAAE;QACR,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,GAAG;QACT,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;iBACjF,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;;gBACtF,OAAO,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,OAAO;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACnG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;YACzF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,YAAY,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,aAAa,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,eAAe,CAAC,CAAC;YAC5E,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,cAAc,CAAC,CAAC;QACpG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAA2C,EAAE,QAAQ,EAAE,CAAC;IAC7F,CAAC;IAEO,OAAO,KAAY,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC,CAAC,CAAC;IAEtD,IAAI,CAAC,KAAqD;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACrE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,UAAU,CAAC,CAAC;IACpF,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;AAC5C,CAAC"}

package/dist/engine/external-effects/authorization.d.ts

@@ -0,0 +1,146 @@
+export type ExternalActionName = "git.commit" | "issue.update" | "knowledge.publish" | "issue.close";
+export type ExternalTargetKind = "repository" | "issue" | "knowledge";
+export type ExternalEffectKind = "issue.comment";
+export type GovernedActionSecurityClass = "local-write" | "external-write";
+export interface ExternalActionTarget {
+    kind: ExternalTargetKind;
+    stableId: string;
+}
+export interface ExternalActionRequest {
+    version: 1;
+    requestId: string;
+    workItemId: string;
+    stepId: string;
+    attemptId: string;
+    provider: string;
+    action: ExternalActionName;
+    securityClass: GovernedActionSecurityClass;
+    target: ExternalActionTarget;
+    externalEffectKind?: ExternalEffectKind;
+    payloadDigest: `sha256:${string}`;
+    expectedContentDigest: `sha256:${string}`;
+    payloadArtifactDigest: `sha256:${string}`;
+    bindingDigest: `sha256:${string}`;
+    inputDigest: `sha256:${string}`;
+    artifactDigests: `sha256:${string}`[];
+    idempotencyKey: string;
+    profile: string;
+    profileDigest: `sha256:${string}`;
+    workspaceDigest: `sha256:${string}`;
+    configDigest: `sha256:${string}`;
+    sideEffects: string[];
+    createdAt: string;
+    expiresAt: string;
+    requestDigest: `sha256:${string}`;
+}
+export interface ExternalActionGrant {
+    version: 1;
+    grantId: string;
+    requestId: string;
+    requestDigest: `sha256:${string}`;
+    workItemId: string;
+    stepId: string;
+    attemptId: string;
+    provider: string;
+    action: ExternalActionName;
+    securityClass: GovernedActionSecurityClass;
+    target: ExternalActionTarget;
+    externalEffectKind?: ExternalEffectKind;
+    payloadDigest: `sha256:${string}`;
+    expectedContentDigest: `sha256:${string}`;
+    payloadArtifactDigest: `sha256:${string}`;
+    bindingDigest: `sha256:${string}`;
+    inputDigest: `sha256:${string}`;
+    artifactDigests: `sha256:${string}`[];
+    idempotencyKey: string;
+    actor: string;
+    approvalDigest: `sha256:${string}`;
+    profile: string;
+    profileDigest: `sha256:${string}`;
+    workspaceDigest: `sha256:${string}`;
+    configDigest: `sha256:${string}`;
+    decidedAt: string;
+    expiresAt: string;
+    grantDigest: `sha256:${string}`;
+}
+export interface ExternalWriteReceipt {
+    version: 1;
+    kind: "external-write-receipt";
+    requestId: string;
+    requestDigest: `sha256:${string}`;
+    grantDigest: `sha256:${string}`;
+    workItemId: string;
+    stepId: string;
+    attemptId: string;
+    provider: string;
+    action: ExternalActionName;
+    target: ExternalActionTarget;
+    externalEffectKind?: ExternalEffectKind;
+    externalEffectId?: string;
+    payloadDigest: `sha256:${string}`;
+    expectedContentDigest: `sha256:${string}`;
+    bindingDigest: `sha256:${string}`;
+    inputDigest: `sha256:${string}`;
+    artifactDigests: `sha256:${string}`[];
+    idempotencyKey: string;
+    publishedContentDigest: `sha256:${string}`;
+    readBackContentDigest: `sha256:${string}`;
+    status: "verified";
+    verifiedAt: string;
+}
+export type ExternalActionState = {
+    status: "prepared";
+    request: ExternalActionRequest;
+} | {
+    status: "approved";
+    request: ExternalActionRequest;
+    grant: ExternalActionGrant;
+} | {
+    status: "executing";
+    request: ExternalActionRequest;
+    grant: ExternalActionGrant;
+    dispatch: "not_sent" | "sent_or_unknown";
+    startedAt: string;
+    executionOwner?: string;
+    dispatchedAt?: string;
+} | {
+    status: "reconciliation_required";
+    request: ExternalActionRequest;
+    grant: ExternalActionGrant;
+    reason: string;
+    requiredAt: string;
+    lastCheckedAt?: string;
+} | {
+    status: "verified";
+    request: ExternalActionRequest;
+    grant: ExternalActionGrant;
+    receipt: ExternalWriteReceipt;
+} | {
+    status: "failed";
+    request: ExternalActionRequest;
+    grant: ExternalActionGrant;
+    reason: string;
+    failedAt: string;
+};
+export declare class ExternalAuthorizationError extends Error {
+    readonly code: `WSSPEC_${string}`;
+    constructor(code: `WSSPEC_${string}`, message: string);
+}
+export declare function createExternalActionRequest(input: Omit<ExternalActionRequest, "requestId" | "payloadDigest" | "idempotencyKey" | "requestDigest"> & {
+    payload: unknown;
+    idempotencyKey?: string;
+}): ExternalActionRequest;
+export declare function createExternalActionGrant(input: {
+    request: ExternalActionRequest;
+    actor: string;
+    approvalDigest: `sha256:${string}`;
+    profile: string;
+    profileDigest: `sha256:${string}`;
+    workspaceDigest: `sha256:${string}`;
+    configDigest: `sha256:${string}`;
+    decidedAt: string;
+    expiresAt: string;
+}): ExternalActionGrant;
+export declare function assertGrantAuthorizes(request: ExternalActionRequest, grant: ExternalActionGrant, now: Date): void;
+export declare function transitionExternalAction(current: ExternalActionState, next: ExternalActionState): ExternalActionState;
+export declare function assertExternalActionProjection(actions: Readonly<Record<string, ExternalActionState>>, idempotency: Readonly<Record<string, string>>): void;

package/dist/engine/external-effects/authorization.js

@@ -0,0 +1,222 @@
+import { canonicalDigest, externalIdempotencyKey } from "./idempotency.js";
+import { validate } from "../../schemas/index.js";
+import { inspectDecodedCredentialSurface } from "../../registry/connectors/secret-detector.js";
+export class ExternalAuthorizationError extends Error {
+    code;
+    constructor(code, message) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.name = "ExternalAuthorizationError";
+    }
+}
+function timestamp(value, code) {
+    const parsed = Date.parse(value);
+    if (!Number.isFinite(parsed))
+        throw new ExternalAuthorizationError(code, "外部动作时间无效。");
+    return parsed;
+}
+function nonEmpty(value, code) {
+    if (value === "" || value.includes("\0"))
+        throw new ExternalAuthorizationError(code, "外部动作身份字段无效。");
+    return value;
+}
+function assertCredentialFreeMetadata(values) {
+    for (const value of values) {
+        const inspected = inspectDecodedCredentialSurface(value);
+        if (!inspected.ok && (inspected.reason === "credential" || inspected.reason === "decode-limit")) {
+            throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_REQUEST_INVALID", "外部动作审批元数据不能包含凭据样式内容。");
+        }
+    }
+}
+export function createExternalActionRequest(input) {
+    nonEmpty(input.workItemId, "WSSPEC_EXTERNAL_REQUEST_INVALID");
+    nonEmpty(input.stepId, "WSSPEC_EXTERNAL_REQUEST_INVALID");
+    nonEmpty(input.attemptId, "WSSPEC_EXTERNAL_REQUEST_INVALID");
+    nonEmpty(input.provider, "WSSPEC_EXTERNAL_REQUEST_INVALID");
+    nonEmpty(input.target.stableId, "WSSPEC_EXTERNAL_REQUEST_INVALID");
+    assertCredentialFreeMetadata([input.provider, input.target.stableId, ...input.sideEffects]);
+    const localGit = input.action === "git.commit" && input.securityClass === "local-write" && input.target.kind === "repository";
+    const external = input.action !== "git.commit" && input.securityClass === "external-write"
+        && (input.action === "knowledge.publish") === (input.target.kind === "knowledge")
+        && input.target.kind !== "repository";
+    if (!localGit && !external) {
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_TARGET_INVALID", "外部动作与稳定目标类型不一致。");
+    }
+    if (input.externalEffectKind !== undefined
+        && (input.externalEffectKind !== "issue.comment" || input.action !== "issue.update" || input.target.kind !== "issue")) {
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_TARGET_INVALID", "外部 effect 类型与动作或稳定目标不一致。");
+    }
+    if (timestamp(input.expiresAt, "WSSPEC_EXTERNAL_REQUEST_INVALID") <= timestamp(input.createdAt, "WSSPEC_EXTERNAL_REQUEST_INVALID")) {
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_REQUEST_INVALID", "外部动作请求有效期无效。");
+    }
+    const payloadDigest = canonicalDigest(input.payload);
+    const derivedKey = externalIdempotencyKey({ ...input, payloadDigest });
+    const idempotencyKey = input.idempotencyKey ?? derivedKey;
+    const requestId = `external-request-${canonicalDigest({ idempotencyKey }, "WSSPEC_EXTERNAL_REQUEST_INVALID").slice("sha256:".length)}`;
+    const unsigned = {
+        version: 1,
+        requestId,
+        workItemId: input.workItemId,
+        stepId: input.stepId,
+        attemptId: input.attemptId,
+        provider: input.provider,
+        action: input.action,
+        securityClass: input.securityClass,
+        target: { ...input.target },
+        ...(input.externalEffectKind === undefined ? {} : { externalEffectKind: input.externalEffectKind }),
+        payloadDigest,
+        expectedContentDigest: input.expectedContentDigest,
+        payloadArtifactDigest: input.payloadArtifactDigest,
+        bindingDigest: input.bindingDigest,
+        inputDigest: input.inputDigest,
+        artifactDigests: [...input.artifactDigests].sort(),
+        idempotencyKey,
+        profile: input.profile,
+        profileDigest: input.profileDigest,
+        workspaceDigest: input.workspaceDigest,
+        configDigest: input.configDigest,
+        sideEffects: [...input.sideEffects],
+        createdAt: input.createdAt,
+        expiresAt: input.expiresAt,
+    };
+    return { ...unsigned, requestDigest: canonicalDigest(unsigned, "WSSPEC_EXTERNAL_REQUEST_INVALID") };
+}
+export function createExternalActionGrant(input) {
+    const request = input.request;
+    if (timestamp(input.decidedAt, "WSSPEC_EXTERNAL_GRANT_INVALID") >= timestamp(request.expiresAt, "WSSPEC_EXTERNAL_REQUEST_EXPIRED")) {
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_REQUEST_EXPIRED", "外部动作请求已过期。");
+    }
+    if (timestamp(input.expiresAt, "WSSPEC_EXTERNAL_GRANT_INVALID") <= timestamp(input.decidedAt, "WSSPEC_EXTERNAL_GRANT_INVALID")
+        || timestamp(input.expiresAt, "WSSPEC_EXTERNAL_GRANT_INVALID") > timestamp(request.expiresAt, "WSSPEC_EXTERNAL_GRANT_INVALID")) {
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_GRANT_INVALID", "外部动作 Grant 有效期无效。");
+    }
+    if (input.approvalDigest !== request.requestDigest || input.profile !== request.profile || input.profileDigest !== request.profileDigest
+        || input.workspaceDigest !== request.workspaceDigest || input.configDigest !== request.configDigest) {
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_GRANT_MISMATCH", "Grant 上下文与外部动作请求不一致。");
+    }
+    const unsigned = {
+        version: 1,
+        grantId: `external-grant-${request.requestDigest.slice("sha256:".length)}`,
+        requestId: request.requestId,
+        requestDigest: request.requestDigest,
+        workItemId: request.workItemId,
+        stepId: request.stepId,
+        attemptId: request.attemptId,
+        provider: request.provider,
+        action: request.action,
+        securityClass: request.securityClass,
+        target: { ...request.target },
+        ...(request.externalEffectKind === undefined ? {} : { externalEffectKind: request.externalEffectKind }),
+        payloadDigest: request.payloadDigest,
+        expectedContentDigest: request.expectedContentDigest,
+        payloadArtifactDigest: request.payloadArtifactDigest,
+        bindingDigest: request.bindingDigest,
+        inputDigest: request.inputDigest,
+        artifactDigests: [...request.artifactDigests],
+        idempotencyKey: request.idempotencyKey,
+        actor: nonEmpty(input.actor, "WSSPEC_EXTERNAL_GRANT_INVALID"),
+        approvalDigest: input.approvalDigest,
+        profile: input.profile,
+        profileDigest: input.profileDigest,
+        workspaceDigest: input.workspaceDigest,
+        configDigest: input.configDigest,
+        decidedAt: input.decidedAt,
+        expiresAt: input.expiresAt,
+    };
+    return { ...unsigned, grantDigest: canonicalDigest(unsigned, "WSSPEC_EXTERNAL_GRANT_INVALID") };
+}
+export function assertGrantAuthorizes(request, grant, now) {
+    const { grantDigest, ...unsigned } = grant;
+    const exact = grant.requestId === request.requestId && grant.requestDigest === request.requestDigest
+        && grant.workItemId === request.workItemId && grant.stepId === request.stepId && grant.attemptId === request.attemptId
+        && grant.provider === request.provider && grant.action === request.action && grant.securityClass === request.securityClass
+        && grant.target.kind === request.target.kind && grant.target.stableId === request.target.stableId
+        && grant.externalEffectKind === request.externalEffectKind
+        && grant.payloadDigest === request.payloadDigest && grant.payloadArtifactDigest === request.payloadArtifactDigest
+        && grant.expectedContentDigest === request.expectedContentDigest
+        && grant.bindingDigest === request.bindingDigest && grant.inputDigest === request.inputDigest
+        && JSON.stringify(grant.artifactDigests) === JSON.stringify(request.artifactDigests)
+        && grant.idempotencyKey === request.idempotencyKey && grant.approvalDigest === request.requestDigest
+        && grant.profile === request.profile && grant.profileDigest === request.profileDigest
+        && grant.workspaceDigest === request.workspaceDigest && grant.configDigest === request.configDigest
+        && grantDigest === canonicalDigest(unsigned, "WSSPEC_EXTERNAL_GRANT_INVALID");
+    if (!exact)
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_GRANT_MISMATCH", "Grant 不能授权当前外部动作请求。");
+    if (now.getTime() >= timestamp(grant.expiresAt, "WSSPEC_EXTERNAL_GRANT_INVALID")) {
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_GRANT_EXPIRED", "外部动作 Grant 已过期。");
+    }
+}
+export function transitionExternalAction(current, next) {
+    const allowed = (current.status === "prepared" && (next.status === "approved" || next.status === "reconciliation_required"))
+        || (current.status === "approved" && (next.status === "executing" || next.status === "reconciliation_required"))
+        || (current.status === "executing" && (next.status === "executing" || next.status === "verified" || next.status === "reconciliation_required"))
+        || (current.status === "reconciliation_required" && (next.status === "reconciliation_required" || next.status === "verified" || next.status === "failed"));
+    if (!allowed || current.request.requestId !== next.request.requestId || current.request.requestDigest !== next.request.requestDigest) {
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_STATE_TRANSITION_INVALID", `禁止外部动作状态跃迁 ${current.status} -> ${next.status}。`);
+    }
+    return next;
+}
+export function assertExternalActionProjection(actions, idempotency) {
+    const expectedIdempotency = {};
+    for (const [requestId, state] of Object.entries(actions)) {
+        const request = validate("builtin.external-action-request.v1", state.request);
+        const { requestDigest, ...unsignedRequest } = request;
+        const expectedRequestId = `external-request-${canonicalDigest({ idempotencyKey: request.idempotencyKey }).slice("sha256:".length)}`;
+        if (requestId !== request.requestId || request.requestId !== expectedRequestId
+            || request.requestDigest !== canonicalDigest(unsignedRequest, "WSSPEC_EXTERNAL_REQUEST_INVALID")
+            || request.idempotencyKey !== externalIdempotencyKey(request)) {
+            throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_PROJECTION_INVALID", "外部动作请求投影身份或摘要无效。");
+        }
+        if (expectedIdempotency[request.idempotencyKey] !== undefined) {
+            throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_PROJECTION_INVALID", "外部动作投影包含重复幂等身份。");
+        }
+        expectedIdempotency[request.idempotencyKey] = request.requestId;
+        if (state.status === "prepared")
+            continue;
+        const grant = validate("builtin.external-action-grant.v1", state.grant);
+        assertGrantAuthorizes(request, grant, new Date(grant.decidedAt));
+        if (state.status === "approved")
+            continue;
+        if (state.status === "executing") {
+            if (state.executionOwner !== undefined && state.executionOwner === "") {
+                throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_PROJECTION_INVALID", "外部动作执行 owner 无效。");
+            }
+            if (state.dispatch === "sent_or_unknown" && state.dispatchedAt === undefined) {
+                throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_PROJECTION_INVALID", "外部动作 dispatch 投影缺少时间证据。");
+            }
+            continue;
+        }
+        if (state.status === "reconciliation_required") {
+            if (state.reason === "" || !Number.isFinite(Date.parse(state.requiredAt))) {
+                throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_PROJECTION_INVALID", "协调恢复投影无效。");
+            }
+            continue;
+        }
+        if (state.status === "failed") {
+            if (state.reason === "" || !Number.isFinite(Date.parse(state.failedAt))) {
+                throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_PROJECTION_INVALID", "外部动作失败投影无效。");
+            }
+            continue;
+        }
+        const receipt = validate("builtin.external-write-receipt.v1", state.receipt);
+        if (receipt.requestId !== request.requestId || receipt.requestDigest !== request.requestDigest
+            || receipt.grantDigest !== grant.grantDigest || receipt.workItemId !== request.workItemId
+            || receipt.stepId !== request.stepId || receipt.attemptId !== request.attemptId
+            || receipt.provider !== request.provider || receipt.action !== request.action
+            || receipt.target.kind !== request.target.kind || receipt.target.stableId !== request.target.stableId
+            || receipt.externalEffectKind !== request.externalEffectKind
+            || (request.externalEffectKind === "issue.comment") !== (receipt.externalEffectId !== undefined)
+            || receipt.payloadDigest !== request.payloadDigest || receipt.expectedContentDigest !== request.expectedContentDigest
+            || receipt.bindingDigest !== request.bindingDigest
+            || receipt.inputDigest !== request.inputDigest || JSON.stringify(receipt.artifactDigests) !== JSON.stringify(request.artifactDigests)
+            || receipt.idempotencyKey !== request.idempotencyKey
+            || receipt.publishedContentDigest !== request.expectedContentDigest
+            || receipt.readBackContentDigest !== request.expectedContentDigest) {
+            throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_PROJECTION_INVALID", "外部写入 Receipt 未绑定当前请求和 Grant。");
+        }
+    }
+    if (JSON.stringify(Object.entries(idempotency).sort()) !== JSON.stringify(Object.entries(expectedIdempotency).sort())) {
+        throw new ExternalAuthorizationError("WSSPEC_EXTERNAL_PROJECTION_INVALID", "外部动作幂等索引与请求投影不一致。");
+    }
+}
+//# sourceMappingURL=authorization.js.map

package/dist/engine/external-effects/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../src/engine/external-effects/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,+BAA+B,EAAE,MAAM,8CAA8C,CAAC;AAyG/F,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC9B;IAArB,YAAqB,IAAwB,EAAE,OAAe;QAC5D,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QADV,SAAI,GAAJ,IAAI,CAAoB;QAE3C,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,IAAwB;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,0BAA0B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAwB;IACvD,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,0BAA0B,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACpG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAyB;IAC7D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,YAAY,IAAI,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,0BAA0B,CAAC,iCAAiC,EAAE,sBAAsB,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAG3C;IACC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;IAC1D,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;IAC7D,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAC;IAC5D,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAC;IACnE,4BAA4B,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC;IAC9H,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,aAAa,KAAK,gBAAgB;WACrF,CAAC,KAAK,CAAC,MAAM,KAAK,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC;WAC9E,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC;IACxC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,0BAA0B,CAAC,gCAAgC,EAAE,iBAAiB,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS;WACrC,CAAC,KAAK,CAAC,kBAAkB,KAAK,eAAe,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QACxH,MAAM,IAAI,0BAA0B,CAAC,gCAAgC,EAAE,0BAA0B,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,iCAAiC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,iCAAiC,CAAC,EAAE,CAAC;QACnI,MAAM,IAAI,0BAA0B,CAAC,iCAAiC,EAAE,cAAc,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IACvE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,UAAU,CAAC;IAC1D,MAAM,SAAS,GAAG,oBAAoB,eAAe,CAAC,EAAE,cAAc,EAAE,EAAE,iCAAiC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IACvI,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,CAAU;QACnB,SAAS;QACT,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE;QAC3B,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACnG,aAAa;QACb,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE;QAClD,cAAc;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC,QAAQ,EAAE,iCAAiC,CAAC,EAAE,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAUzC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,+BAA+B,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,iCAAiC,CAAC,EAAE,CAAC;QACnI,MAAM,IAAI,0BAA0B,CAAC,iCAAiC,EAAE,YAAY,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,+BAA+B,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,+BAA+B,CAAC;WACzH,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,+BAA+B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,+BAA+B,CAAC,EAAE,CAAC;QACjI,MAAM,IAAI,0BAA0B,CAAC,+BAA+B,EAAE,mBAAmB,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;WACnI,KAAK,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QACtG,MAAM,IAAI,0BAA0B,CAAC,gCAAgC,EAAE,sBAAsB,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,CAAU;QACnB,OAAO,EAAE,kBAAkB,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;QAC1E,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;QAC7B,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvG,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;QAC7C,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,+BAA+B,CAAC;QAC7D,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA8B,EAAE,KAA0B,EAAE,GAAS;IACzG,MAAM,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;WAC/F,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;WACnH,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;WACvH,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM,CAAC,QAAQ;WAC9F,KAAK,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB;WACvD,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB;WAC9G,KAAK,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB;WAC7D,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;WAC1F,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC;WACjF,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,aAAa;WACjG,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;WAClF,KAAK,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;WAChG,WAAW,KAAK,eAAe,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;IAChF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,0BAA0B,CAAC,gCAAgC,EAAE,qBAAqB,CAAC,CAAC;IAC1G,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,+BAA+B,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,0BAA0B,CAAC,+BAA+B,EAAE,iBAAiB,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAA4B,EAAE,IAAyB;IAC9F,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,yBAAyB,CAAC,CAAC;WACvH,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,yBAAyB,CAAC,CAAC;WAC7G,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,yBAAyB,CAAC,CAAC;WAC5I,CAAC,OAAO,CAAC,MAAM,KAAK,yBAAyB,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,yBAAyB,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC7J,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrI,MAAM,IAAI,0BAA0B,CAAC,0CAA0C,EAAE,cAAc,OAAO,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACtI,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAsD,EACtD,WAA6C;IAE7C,MAAM,mBAAmB,GAA2B,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,QAAQ,CAAwB,oCAAoC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACrG,MAAM,EAAE,aAAa,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,CAAC;QACtD,MAAM,iBAAiB,GAAG,oBAAoB,eAAe,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACpI,IAAI,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,iBAAiB;eACzE,OAAO,CAAC,aAAa,KAAK,eAAe,CAAC,eAAe,EAAE,iCAAiC,CAAC;eAC7F,OAAO,CAAC,cAAc,KAAK,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,0BAA0B,CAAC,oCAAoC,EAAE,kBAAkB,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,mBAAmB,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9D,MAAM,IAAI,0BAA0B,CAAC,oCAAoC,EAAE,iBAAiB,CAAC,CAAC;QAChG,CAAC;QACD,mBAAmB,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;QAChE,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAsB,kCAAkC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7F,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS;QAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;gBACtE,MAAM,IAAI,0BAA0B,CAAC,oCAAoC,EAAE,kBAAkB,CAAC,CAAC;YACjG,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,iBAAiB,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,0BAA0B,CAAC,oCAAoC,EAAE,yBAAyB,CAAC,CAAC;YACxG,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,0BAA0B,CAAC,oCAAoC,EAAE,WAAW,CAAC,CAAC;YAC1F,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,0BAA0B,CAAC,oCAAoC,EAAE,aAAa,CAAC,CAAC;YAC5F,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAuB,mCAAmC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnG,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;eACzF,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;eACtF,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;eAC5E,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;eAC1E,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM,CAAC,QAAQ;eAClG,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB;eACzD,CAAC,OAAO,CAAC,kBAAkB,KAAK,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;eAC7F,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB;eAClH,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;eAC/C,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC;eAClI,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;eACjD,OAAO,CAAC,sBAAsB,KAAK,OAAO,CAAC,qBAAqB;eAChE,OAAO,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACrE,MAAM,IAAI,0BAA0B,CAAC,oCAAoC,EAAE,8BAA8B,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACtH,MAAM,IAAI,0BAA0B,CAAC,oCAAoC,EAAE,mBAAmB,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}

package/dist/engine/external-effects/idempotency.d.ts

@@ -0,0 +1,14 @@
+export declare class ExternalIdempotencyError extends Error {
+    readonly code: `WSSPEC_${string}`;
+    constructor(code: `WSSPEC_${string}`, message: string);
+}
+export declare function canonicalDigest(value: unknown, code?: `WSSPEC_${string}`): `sha256:${string}`;
+export interface ExternalIdempotencyIdentity {
+    workItemId: string;
+    stepId: string;
+    target: {
+        stableId: string;
+    };
+    payloadDigest: string;
+}
+export declare function externalIdempotencyKey(input: ExternalIdempotencyIdentity): string;

package/dist/engine/external-effects/idempotency.js

@@ -0,0 +1,26 @@
+import * as canonicalizeModule from "canonicalize";
+import { sha256 } from "../../domain/digests.js";
+const canonicalize = canonicalizeModule.default;
+export class ExternalIdempotencyError extends Error {
+    code;
+    constructor(code, message) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.name = "ExternalIdempotencyError";
+    }
+}
+export function canonicalDigest(value, code = "WSSPEC_EXTERNAL_PAYLOAD_INVALID") {
+    const encoded = canonicalize(value);
+    if (encoded === undefined)
+        throw new ExternalIdempotencyError(code, "外部动作输入无法规范化。");
+    return sha256(encoded);
+}
+export function externalIdempotencyKey(input) {
+    return `external:${canonicalDigest({
+        workItemId: input.workItemId,
+        stepId: input.stepId,
+        targetStableId: input.target.stableId,
+        payloadDigest: input.payloadDigest,
+    }, "WSSPEC_EXTERNAL_IDEMPOTENCY_INVALID").slice("sha256:".length)}`;
+}
+//# sourceMappingURL=idempotency.js.map

package/dist/engine/external-effects/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../../src/engine/external-effects/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,kBAAkB,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAA4D,CAAC;AAErG,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC5B;IAArB,YAAqB,IAAwB,EAAE,OAAe;QAC5D,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QADV,SAAI,GAAJ,IAAI,CAAoB;QAE3C,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,OAA2B,iCAAiC;IAC1G,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,wBAAwB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC,OAAO,CAAuB,CAAC;AAC/C,CAAC;AASD,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,OAAO,YAAY,eAAe,CAAC;QACjC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;QACrC,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,EAAE,qCAAqC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AACtE,CAAC"}

package/dist/engine/external-effects/reconciliation.d.ts

@@ -0,0 +1,11 @@
+export type ExternalDeliveryStatus = "missing" | "prepared" | "approved" | "executing" | "reconciliation_required" | "verified" | "failed" | "absent" | "skipped" | "warning";
+export declare function evaluateExternalDelivery(input: {
+    issueUpdate: ExternalDeliveryStatus;
+    knowledge: ExternalDeliveryStatus;
+    knowledgeRequired: boolean;
+    issueClose: ExternalDeliveryStatus;
+}): {
+    allowed: boolean;
+    warnings: `WSSPEC_${string}`[];
+    blockers: `WSSPEC_${string}`[];
+};