datatug / datatug-core / 38532428008

100%

push

github

feat(detective): bind private session references in operation payloads (#368)

Native Check operations currently cannot carry a private session input identity into their saved run or idempotency payload. Add a metadata-only `SessionInputReference` for the full private namespace and exact input bindings, plus an explicit `ActionOperationPayload` envelope that includes trusted bridge fields without making them bindable from public action JSON.

References are bounded, validated, independently copied and canonically ordered. `EvaluateCheck` propagates an owned reference; unsupported query-validator combinations fail before execution. Historical selections may retain different bag versions, while conflicting immutable entry revisions are rejected. A golden JSON/digest fixture proves nil-reference requests retain their existing wire form and operation identity.

Validation: focused `go test ./pkg/apicontract ./pkg/detective -coverprofile=…` passed with 100.0% statement coverage in each package; focused `go vet` and `git diff --check` passed. Tests cover malformed identities/digests/bounds, raw-content rejection, strict public decoding, reference isolation, ownership during execution, deterministic ordering and digest sensitivity to namespace/binding/Case changes.

This is the bounded Core provider foundation. Session dispatch pins, native reconciliation/fences, outbox delivery, redaction and consumer capability activation remain in the paired adapter work; this PR enables none of those flows. Full CI and independent code review remain landing gates.

Source commits:

- c702d542d1e9 feat(detective): bind private session references in operation payloads
- 45a7fcbb55c2 fix(detective): reject conflicting Case input versions

Pull request: datatug/datatug-core#368
Review: /private/tmp/context-bag-native-contracts-review-sol61.md

131 of 0 new or added lines in 0 files covered. (NaN%)

16460 of 16460 relevant lines covered (100.0%)

1.0 hits per line