…pping

Brings OGAR to full CONTRACT + LIFECYCLE parity with arago's HIRO ActionHandler
(the operator's "switch from Python to OGAR running it here" goal), grounded in
the real arago sources (github.com/arago/ActionHandlers config format,
python-hiro-stonebranch-actionhandler daemon, HIRO 7 Action API action-ws
protocol) + the vendored OGIT NTO/Automation ontology.

do_arm additions (string-keyed; no new codebook mint needed):
- assemble_action_handler(entities) walks the OGIT `provides` graph
  (ActionHandler -> ActionApplicability -> ActionCapability) into
  ActionHandlerSpec / ApplicabilitySlot / CapabilitySlot.
- ActionParam { name, mandatory, default } — the arago Parameter I/O tuple.
- Parity points proven by tests: arago ModelFilter{Var,Mode,Value} ->
  KausalSpec::StateGuard (environmentFilter); Capability declares the
  mandatory/optional/result param slots (resultParameters = the output sig).

docs/ARAGO-ACTIONHANDLER-PARITY.md — the scorecard:
- config+ontology contract: full parity [G] (the assembly).
- action-ws protocol <-> ActionInvocation Rubicon lifecycle: submitAction ->
  ack -> execute -> sendActionResult -> ack maps onto Pending -> (commit_via:
  RBAC ^ guard ^ MUL) -> Committed -> Lance-append, field-for-field.
- the switch path: an OGAR action-ws adapter replaces the Python daemon; the
  only unbuilt pieces are B1 (the ExecTarget executor) and B2 (the action-ws
  adapter + deployed-YAML instance lift) — glue over existing types, not new IR.
- PROBE-OGAR-ACTIONHANDLER-RUN certifies B1/B2 (replay a real arago submitAction
  corpus; assert sendActionResult matches bit-for-bit).

27 do_arm tests green (4 new), clippy-clean. Ledger D-ACTIONHANDLER-PARITY;
EPIPHANIES E-ARAGO-ACTIONHANDLER-PARITY.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EYvNjD8M8LMNYbRy3gq2FP

The socket-free heart of the action-ws adapter (parity brick B2-core): the
typed protocol messages + the submitAction -> ActionInvocation ->
sendActionResult binding, no live WebSocket, no command execution. Builds on
the contract parity (#121); together they make the Python->OGAR switch a
transport/runner/parser job over existing types, not new IR.

crates/ogar-from-schema/src/action_ws.rs:
- SubmitAction / Acknowledged / SendActionResult — the typed action-ws messages
  (serde-gated for the wire).
- acknowledge(submit) — the 200 receipt.
- bind_parameters(supplied, ActionParam[]) — validates inputs against the
  capability signature (mandatory present, defaults filled) — the same check
  arago's Python handler runs before executing.
- submit_to_invocation(submit, def) — builds the Pending ActionInvocation
  (capability->predicate match, id->idempotency_key, host->object_instance,
  handler/scope->lokal); rejects capability mismatch.
- invocation_to_result(committed_inv, result) — only a Committed invocation
  (the Rubicon crossing) yields the sendActionResult.

7 new tests incl. full_action_ws_roundtrip (submit -> ack -> bind -> invoke ->
commit -> result, id-correlated). 34 do_arm/action_ws tests green under default
AND serde features; action_ws clippy-clean.

Docs: ARAGO-ACTIONHANDLER-PARITY scorecard updated (B2-core shipped; remaining
B1 executor + B2-transport live-WS + B2-lift YAML); D-ACTIONHANDLER-PARITY row.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EYvNjD8M8LMNYbRy3gq2FP