@ashlr/hub 3.12.0 → 3.14.0

package/dist/core/goals/open-goals.js

@@ -0,0 +1,33 @@
+/**
+ * Statuses that occupy focus capacity. `planning` counts: a goal with no
+ * milestones yet is still open work the fleet has committed to.
+ */
+export const OPEN_GOAL_STATUSES = Object.freeze(['active', 'planning']);
+export function isOpenGoal(goal) {
+    return goal.status === 'active' || goal.status === 'planning';
+}
+export function summarizeOpenGoals(read) {
+    const openGoals = read.goals.filter(isOpenGoal);
+    let active = 0;
+    let planning = 0;
+    let paused = 0;
+    for (const g of read.goals) {
+        if (g.status === 'active')
+            active += 1;
+        else if (g.status === 'planning')
+            planning += 1;
+        else if (g.status === 'paused')
+            paused += 1;
+    }
+    return {
+        open: openGoals.length,
+        active,
+        planning,
+        paused,
+        total: read.goals.length,
+        complete: read.complete,
+        unreadable: read.complete ? 0 : (typeof read.unreadable === 'number' ? read.unreadable : null),
+        openGoals,
+    };
+}
+//# sourceMappingURL=open-goals.js.map

package/dist/core/goals/open-goals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-goals.js","sourceRoot":"","sources":["../../../src/core/goals/open-goals.ts"],"names":[],"mappings":"AAoBA;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAiB,CAAC,CAAC;AAE/G,MAAM,UAAU,UAAU,CAAC,IAA0B;IACnD,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC;AAChE,CAAC;AAyBD,MAAM,UAAU,kBAAkB,CAAC,IAAkB;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,CAAC,CAAC;aAClC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;YAAE,QAAQ,IAAI,CAAC,CAAC;aAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,MAAM;QACtB,MAAM;QACN,QAAQ;QACR,MAAM;QACN,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9F,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/core/inbox/merge.d.ts

@@ -400,6 +400,11 @@ export interface VerifyProposalResult {
      * verification INFRASTRUCTURE, not the diff, is suspect.
      */
     failureCategory?: VerifyFailureCategory;
+    /**
+     * 3.14: digest of the sibling mirror pins (`file:../<sibling>`) the run
+     * verified against — the same before and after it ran; absent when none.
+     */
+    siblingPins?: string;
 }
 export declare function verifyResultFromProposalResult(result: VerifyProposalResult, source?: ProposalVerifyResult['source'], verifiedAt?: string, diffHash?: string): ProposalVerifyResult;
 export declare function hasCurrentVerificationBinding(proposal: Proposal): proposal is Proposal & {

package/dist/core/inbox/merge.js

@@ -120,7 +120,7 @@ import { judgeDecisionReasonCode } from '../fleet/judge-decision-metadata.js';
 import { edvConfirmationWeight } from '../portfolio/edv-verify.js';
 import { detectVerifyCommands, runVerifyCommandAsync, runVerifySubprocessAsync, } from '../run/verify-commands.js';
 import { VerificationCapacityError, withRepoLease, withVerificationSlot, } from '../sandbox/execution-leases.js';
-import { isMirrorPath, mirrorLeaseKey } from '../fleet/mirrors.js';
+import { isMirrorPath, mirrorLeaseKey, mirrorSiblingPins } from '../fleet/mirrors.js';
 import { isWebApp, verifyInBrowser, } from '../run/browser-verify.js';
 import { parseFailedTestIds } from '../run/completeness-gate.js';
 import { buildAutonomyEvidencePack, evidenceVerifierManifestMatchesProposal, persistAutonomyEvidencePack, readAutonomyEvidencePack, sealAutonomyEvidencePackV3, verifyAutonomyEvidencePackV3, } from '../autonomy/evidence-pack.js';
@@ -409,8 +409,19 @@ export function linkVerifyNodeModules(repo, worktreeDir) {
     linkNodeModules(repo, worktreeDir);
     const grants = [];
     const rootInstall = join(repo, 'node_modules');
-    if (existsSync(rootInstall))
+    if (existsSync(rootInstall)) {
         grants.push(rootInstall);
+        // 3.14: a fleet mirror installed against pinned `file:../<sibling>`
+        // snapshots (fleet/mirrors.ts "SIBLING DEPENDENCIES"): npm links them
+        // through `~/.ashlr/fleet/mirrors/<sibling>`, so the confined suite reads
+        // the pin snapshot too. Only paths under ~/.ashlr/fleet; never a checkout.
+        try {
+            const pins = mirrorSiblingPins(repo);
+            if (pins.ok)
+                grants.push(...pins.readPaths);
+        }
+        catch { /* best effort: a missing grant fails closed as a denied read */ }
+    }
     try {
         if (!declaresJsWorkspace(repo))
             return grants;
@@ -1558,6 +1569,7 @@ export function verifyResultFromProposalResult(result, source = 'auto-merge', ve
         ...(result.baseBranch ? { baseBranch: result.baseBranch } : {}),
         ...(result.baseHead ? { baseHead: result.baseHead } : {}),
         ...(diffHash ? { diffHash } : {}),
+        ...(result.siblingPins ? { siblingPins: result.siblingPins } : {}),
         verifiedAt,
         source,
     };
@@ -1584,6 +1596,11 @@ function hasVerificationDiffBinding(proposal) {
 export function hasCurrentVerificationBinding(proposal) {
     if (!hasVerificationDiffBinding(proposal) || !proposal.repo)
         return false;
+    // 3.14: a sibling mirror pin that moved since verification (or can no
+    // longer be read) makes the proof stale, exactly like a moved base.
+    const pins = mirrorSiblingPins(proposal.repo);
+    if (!pins.ok || (pins.digest ?? undefined) !== proposal.verifyResult.siblingPins)
+        return false;
     const base = defaultBranch(proposal.repo);
     return proposal.verifyResult.baseBranch === base &&
         resolveDefaultBranchHead(proposal.repo, base) === proposal.verifyResult.baseHead;
@@ -1859,6 +1876,15 @@ export async function openStandingVerificationConfinement(worktree, opts = {}) {
                 callerGrants.push(real);
             if (!readOnly.includes(real))
                 readOnly.push(real);
+            // 3.14: a caller grant that is itself a symlink (a fleet mirror's
+            // `../<sibling>` link to its pin — fleet/mirrors.ts) is passed on as
+            // well, so the profile lets the run traverse the link (metadata on the
+            // link inode only; sandbox/confine.ts). Its target is `real`, above.
+            try {
+                if (callerPaths.has(p) && p !== real && lstatSync(p).isSymbolicLink() && !readOnly.includes(p))
+                    readOnly.push(p);
+            }
+            catch { /* vanished: nothing to traverse */ }
         }
         const overlay = {
             ...base,
@@ -1934,6 +1960,36 @@ function verificationSlotKey(repo) {
  * NEVER throws — any error resolves to ok:false with a detail.
  */
 export async function verifyProposal(proposal, cfg) {
+    // 3.14: a fleet mirror with `file:../<sibling>` dependencies verifies
+    // against pinned sibling snapshots (fleet/mirrors.ts). The pins must be
+    // intact before the run and unchanged after it; their digest is recorded
+    // on the result, so G3 and the verification binding cover them.
+    const before = proposal.repo ? mirrorSiblingPins(proposal.repo) : null;
+    if (before && !before.ok) {
+        return {
+            ok: false,
+            ran: [],
+            detail: `sibling dependencies are not at their pinned commits: ${before.reason}`,
+            failureCategory: 'infra',
+        };
+    }
+    const result = await verifyProposalAgainstCurrentPins(proposal, cfg);
+    const digest = before?.ok ? before.digest : null;
+    if (digest === null)
+        return result;
+    const after = mirrorSiblingPins(proposal.repo);
+    if (!after.ok || after.digest !== digest) {
+        return {
+            ...result,
+            ok: false,
+            detail: `the sibling dependency pins changed while verification ran (${after.ok ? 'a sibling was re-pinned' : after.reason}); re-verification required`,
+            failureCategory: 'infra',
+            siblingPins: digest,
+        };
+    }
+    return { ...result, siblingPins: digest };
+}
+async function verifyProposalAgainstCurrentPins(proposal, cfg) {
     const repo = proposal.repo;
     if (!repo || !isRepo(repo)) {
         return { ok: false, ran: [], detail: `not a git repository: ${repo ?? '(none)'}` };