refactor(mcp): make analysis states unrepresentable (#468)

* refactor(config): parse capability settings into exact states

* refactor(runtime): encode replay and process outcomes exactly

* refactor: make analysis states unrepresentable

* refactor(mcp): register canonical schemas with SDK

* fix: preserve capability and catalog invariants

* fix(build): remove stale compiled modules

* fix(replay): update real verifier policy dependency

* fix(package): verify the complete MCP catalog

* fix(test): supply complete replay reload policy

* refactor(contracts): centralize output schema lookup

* refactor(mcp): delegate protocol boundaries to SDK

* fix(browser): approve real source capture

* fix(mcp): preserve catalog guidance

src/application/JavaScriptReplayPermission.ts

@@ -1,12 +1,10 @@
-import type { z } from "zod";
-
-import type { controlledReplayInputSchema } from "../domain/javascriptReplay.js";
-import type { JavaScriptReplayPolicy } from "./JavaScriptReplayPlanning.js";
+import type { ControlledReplayInput } from "../domain/javascriptReplay.js";
+import type { EnabledJavaScriptReplayPolicy } from "./JavaScriptReplayPlanning.js";
 
 /** Build the exact permission request for one controlled replay operation. */
 export const replayPermissionRequest = (
-  input: z.output<typeof controlledReplayInputSchema>,
-  policy: JavaScriptReplayPolicy,
+  input: ControlledReplayInput,
+  policy: EnabledJavaScriptReplayPolicy,
 ) => ({
   capability: "javascript_replay" as const,
   roots: [...input.left.modules, ...(input.right?.modules ?? [])].map(
@@ -22,5 +20,5 @@ export const replayPermissionRequest = (
   environment_names: [],
   network: "none" as const,
   mount: true,
-  operation_identity: `run_controlled_replay:${input.plan_digest ?? "plan"}`,
+  operation_identity: `run_controlled_replay:${input.mode === "plan" ? "plan" : input.plan_digest}`,
 });