@aviaratech/ai-delivery 0.1.0

package/dist/utils/atomicJson.js

@@ -0,0 +1,78 @@
+import { randomUUID } from 'node:crypto';
+import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+/** Create a private directory hierarchy and durably publish every new directory entry. */
+export function ensurePrivateDirectoryDurably(path) {
+    ensureDirectoryDurably(path, 0o700);
+}
+/** Publish a complete JSON file with a same-directory durable rename. */
+export function writeJsonFileAtomically(path, value) {
+    writeJsonAtomically({ directoryMode: 0o777, mode: 0o666, path, value });
+}
+/** Publish private JSON evidence with the same durable rename contract. */
+export function writePrivateJsonFileAtomically(path, value) {
+    writeJsonAtomically({ directoryMode: 0o700, mode: 0o600, path, value });
+}
+function ensureDirectoryDurably(directory, mode) {
+    const missing = [];
+    let candidate = directory;
+    while (!existsSync(candidate)) {
+        missing.push(candidate);
+        const parent = dirname(candidate);
+        if (parent === candidate)
+            break;
+        candidate = parent;
+    }
+    for (const path of missing.reverse()) {
+        mkdirSync(path, { mode });
+        fsyncDirectory(dirname(path));
+    }
+}
+function fsyncDirectory(directory) {
+    const descriptor = openSync(directory, 'r');
+    try {
+        fsyncSync(descriptor);
+    }
+    finally {
+        closeSync(descriptor);
+    }
+}
+function writeJsonAtomically({ directoryMode, mode, path, value, }) {
+    const directory = dirname(path);
+    ensureDirectoryDurably(directory, directoryMode);
+    const temporaryPath = join(directory, `.${String(process.pid)}.${randomUUID()}.tmp`);
+    let creationDescriptor;
+    let fileDescriptor;
+    let directoryDescriptor;
+    try {
+        creationDescriptor = openSync(temporaryPath, 'wx', mode);
+        closeSync(creationDescriptor);
+        creationDescriptor = undefined;
+        writeFileSync(temporaryPath, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+        fileDescriptor = openSync(temporaryPath, 'r');
+        fsyncSync(fileDescriptor);
+        closeSync(fileDescriptor);
+        fileDescriptor = undefined;
+        renameSync(temporaryPath, path);
+        directoryDescriptor = openSync(directory, 'r');
+        fsyncSync(directoryDescriptor);
+        closeSync(directoryDescriptor);
+        directoryDescriptor = undefined;
+    }
+    catch (error) {
+        if (creationDescriptor !== undefined)
+            closeSync(creationDescriptor);
+        if (fileDescriptor !== undefined)
+            closeSync(fileDescriptor);
+        if (directoryDescriptor !== undefined)
+            closeSync(directoryDescriptor);
+        try {
+            unlinkSync(temporaryPath);
+        }
+        catch {
+            // The temporary file was never created or has already been renamed.
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=atomicJson.js.map

package/dist/utils/atomicJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomicJson.js","sourceRoot":"","sources":["../../src/utils/atomicJson.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,0FAA0F;AAC1F,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,KAAc;IAClE,mBAAmB,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,8BAA8B,CAAC,IAAY,EAAE,KAAc;IACzE,mBAAmB,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAiB,EAAE,IAAY;IAC7D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,SAAS,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1B,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,EAC3B,aAAa,EACb,IAAI,EACJ,IAAI,EACJ,KAAK,GAMN;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,sBAAsB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IACrF,IAAI,kBAAsC,CAAC;IAC3C,IAAI,cAAkC,CAAC;IACvC,IAAI,mBAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,kBAAkB,GAAG,QAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC9B,kBAAkB,GAAG,SAAS,CAAC;QAC/B,aAAa,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5E,cAAc,GAAG,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC9C,SAAS,CAAC,cAAc,CAAC,CAAC;QAC1B,SAAS,CAAC,cAAc,CAAC,CAAC;QAC1B,cAAc,GAAG,SAAS,CAAC;QAC3B,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAChC,mBAAmB,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC/C,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC/B,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC/B,mBAAmB,GAAG,SAAS,CAAC;IAClC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,kBAAkB,KAAK,SAAS;YAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACpE,IAAI,cAAc,KAAK,SAAS;YAAE,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5D,IAAI,mBAAmB,KAAK,SAAS;YAAE,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,UAAU,CAAC,aAAa,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/utils/filesystem.d.ts

@@ -0,0 +1,9 @@
+export declare const ISSUE_CLI_DATA_DIR = ".issue-cli";
+/**
+ * Ensure the `.issue-cli` runtime directory exists.
+ * All agent runtime data (worktrees, metrics, audit logs) lives here.
+ *
+ * @param projectRoot - Project root directory (defaults to cwd)
+ * @returns Absolute path to the data directory
+ */
+export declare function ensureDataDirectory(projectRoot?: string): string;

package/dist/utils/filesystem.js

@@ -0,0 +1,19 @@
+import { existsSync, mkdirSync } from 'node:fs';
+import { resolve } from 'node:path';
+export const ISSUE_CLI_DATA_DIR = '.issue-cli';
+/**
+ * Ensure the `.issue-cli` runtime directory exists.
+ * All agent runtime data (worktrees, metrics, audit logs) lives here.
+ *
+ * @param projectRoot - Project root directory (defaults to cwd)
+ * @returns Absolute path to the data directory
+ */
+export function ensureDataDirectory(projectRoot) {
+    const root = projectRoot ?? process.cwd();
+    const dataDir = resolve(root, ISSUE_CLI_DATA_DIR);
+    if (!existsSync(dataDir)) {
+        mkdirSync(dataDir, { recursive: true });
+    }
+    return dataDir;
+}
+//# sourceMappingURL=filesystem.js.map

package/dist/utils/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../src/utils/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAoB;IACtD,MAAM,IAAI,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAElD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/utils/lockfile.d.ts

@@ -0,0 +1,12 @@
+interface WithLockOptions<T> {
+    onTimeout?: () => void;
+    operation: () => Promise<T> | T;
+    projectRoot?: string;
+    timeout?: number;
+}
+/**
+ * Execute a function with exclusive file lock
+ * Prevents concurrent modifications to the worktree registry
+ */
+export declare function withLock<T>(filePath: string, { onTimeout, operation, projectRoot, timeout }: WithLockOptions<T>): Promise<T>;
+export {};

package/dist/utils/lockfile.js

@@ -0,0 +1,78 @@
+import { resolve } from 'node:path';
+import * as lockfile from 'proper-lockfile';
+import { logDebug, logWarn } from '../logger.js';
+const LOCK_OPTIONS = {
+    realpath: false,
+    retries: 0,
+    stale: 10000, // 10 seconds - auto-release stale locks
+};
+const LOCK_RETRY_DELAY_MS = 200;
+/**
+ * Execute a function with exclusive file lock
+ * Prevents concurrent modifications to the worktree registry
+ */
+export async function withLock(filePath, { onTimeout, operation, projectRoot, timeout }) {
+    const root = projectRoot ?? process.cwd();
+    const lockPath = resolve(root, filePath);
+    let release = null;
+    const timeoutInterval = typeof timeout === 'number' && timeout > 0 ? timeout : null;
+    const maxAttempts = timeoutInterval !== null ? Math.ceil(timeoutInterval / LOCK_RETRY_DELAY_MS) : null;
+    let attempts = 0;
+    let nextTimeoutAt = timeoutInterval === null ? null : Date.now() + timeoutInterval;
+    let warned = false;
+    try {
+        for (;;) {
+            // Enforce hard timeout by breaking after max attempts
+            if (maxAttempts !== null && attempts >= maxAttempts) {
+                const timeoutLabel = timeoutInterval === null ? 'unknown' : String(timeoutInterval);
+                throw new Error(`Lock acquisition timeout after ${timeoutLabel}ms on ${lockPath}. Another process may be holding the lock.`);
+            }
+            attempts += 1;
+            const attemptLabel = maxAttempts !== null ? `${String(attempts)}/${String(maxAttempts)}` : String(attempts);
+            logDebug(`Acquiring lock on ${lockPath}... (attempt ${attemptLabel})`);
+            try {
+                release = await lockfile.lock(lockPath, LOCK_OPTIONS);
+                logDebug(`Lock acquired on ${lockPath}`);
+                break;
+            }
+            catch (error) {
+                if (!isLockError(error)) {
+                    throw error;
+                }
+                if (!warned) {
+                    logWarn(`Unable to acquire lock on ${lockPath} - another agent is modifying it. Retrying...`);
+                    warned = true;
+                }
+                if (nextTimeoutAt !== null && timeoutInterval !== null && Date.now() >= nextTimeoutAt) {
+                    onTimeout?.();
+                    nextTimeoutAt = Date.now() + timeoutInterval;
+                }
+                await delay(LOCK_RETRY_DELAY_MS);
+            }
+        }
+        return await operation();
+    }
+    finally {
+        if (release !== null) {
+            try {
+                await release();
+                logDebug(`Lock released on ${lockPath}`);
+            }
+            catch (error) {
+                // Lock release failure is non-fatal - stale lock will auto-expire
+                logDebug(`Failed to release lock on ${lockPath}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function isLockError(error) {
+    if (typeof error !== 'object' || error === null) {
+        return false;
+    }
+    const code = error.code;
+    return code === 'ELOCKED';
+}
+//# sourceMappingURL=lockfile.js.map

package/dist/utils/lockfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.js","sourceRoot":"","sources":["../../src/utils/lockfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,YAAY,GAAG;IACnB,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,KAAK,EAAE,wCAAwC;CACvD,CAAC;AAEF,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAShC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,QAAgB,EAChB,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAsB;IAElE,MAAM,IAAI,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEzC,IAAI,OAAO,GAAiC,IAAI,CAAC;IACjD,MAAM,eAAe,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,MAAM,WAAW,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,aAAa,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;IACnF,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,IAAI,CAAC;QACH,SAAS,CAAC;YACR,sDAAsD;YACtD,IAAI,WAAW,KAAK,IAAI,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;gBACpD,MAAM,YAAY,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;gBACpF,MAAM,IAAI,KAAK,CACb,kCAAkC,YAAY,SAAS,QAAQ,4CAA4C,CAC5G,CAAC;YACJ,CAAC;YAED,QAAQ,IAAI,CAAC,CAAC;YACd,MAAM,YAAY,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5G,QAAQ,CAAC,qBAAqB,QAAQ,gBAAgB,YAAY,GAAG,CAAC,CAAC;YAEvE,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACtD,QAAQ,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;gBACzC,MAAM;YACR,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,CAAC,6BAA6B,QAAQ,+CAA+C,CAAC,CAAC;oBAC9F,MAAM,GAAG,IAAI,CAAC;gBAChB,CAAC;gBAED,IAAI,aAAa,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,aAAa,EAAE,CAAC;oBACtF,SAAS,EAAE,EAAE,CAAC;oBACd,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;gBAC/C,CAAC;gBAED,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,OAAO,EAAE,CAAC;gBAChB,QAAQ,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,kEAAkE;gBAClE,QAAQ,CAAC,6BAA6B,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,OAAO,IAAI,KAAK,SAAS,CAAC;AAC5B,CAAC"}

package/dist/verification.d.ts

@@ -0,0 +1,24 @@
+import { type RepositoryApprovalBinding, type RepositoryClassificationReceipt, type RepositoryDeliveryEvidence, type RepositoryMergeReadback, type RepositoryStageAggregate, type RepositoryStageReceipt } from './delivery/index.js';
+export interface VerificationRun {
+    aggregate: RepositoryStageAggregate;
+    classification: RepositoryClassificationReceipt;
+    completedAt: string;
+    manifestId: string;
+    schemaVersion: 'ai-delivery.run@1';
+    stageReceipts: RepositoryStageReceipt[];
+}
+export declare function verifyIssue(input: {
+    admittedResourceClasses?: readonly string[];
+    issueNumber: number;
+    repoRoot: string;
+}): Promise<VerificationRun>;
+export declare function createIssuePhaseEvidence(input: {
+    approval?: RepositoryApprovalBinding;
+    issueNumber: number;
+    mergeReadback?: RepositoryMergeReadback;
+    phase: 'verify' | 'publish' | 'merge';
+    repoRoot: string;
+}): Promise<RepositoryDeliveryEvidence>;
+export declare function loadVerifiedRun(repoRoot: string, issueNumber: number): VerificationRun;
+/** Recover an exact merged run after worktree removal interrupted terminal recording. */
+export declare function loadRemovedMergedRun(primaryRepoRoot: string, issueNumber: number): VerificationRun;

package/dist/verification.js

@@ -0,0 +1,227 @@
+import { spawnSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+import { loadDeliveryConfig } from './config/deliveryConfig.js';
+import { classifyRepositoryExactRange, createRepositoryDeliveryEvidence, createRepositoryStageAggregate, createRepositoryStageInput, createRepositoryStageReceipt, digestValue, loadRepositoryStageCheckpoint, loadSelectedRepositoryPolicy, RepositoryClassificationReceiptSchema, RepositoryStageAggregateSchema, RepositoryStageReceiptSchema, writeRepositoryCommandOutput, writeRepositoryDeliveryEvidence, writeRepositoryStageAggregate, writeRepositoryStageCheckpoint, } from './delivery/index.js';
+import { DeliveryError } from './errors.js';
+import { assertClean, changedPaths, coordinate, defaultBaseRef, git, gitCommonDir, gitRoot } from './git.js';
+import { getIssueWorktreeStrict } from './services/worktreeRegistry.js';
+import { writePrivateJsonFileAtomically } from './utils/atomicJson.js';
+function primaryRoot(worktreeRoot) {
+    const common = gitCommonDir(worktreeRoot);
+    if (basename(common) !== '.git')
+        throw new DeliveryError('Expected a conventional non-bare Git repository.');
+    return dirname(common);
+}
+function assertRegisteredIssue(worktreeRoot, issueNumber, allowMerged = false) {
+    const row = getIssueWorktreeStrict(issueNumber, primaryRoot(worktreeRoot));
+    if (row.path !== worktreeRoot ||
+        row.branch !== `issue/${issueNumber}` ||
+        (row.status !== 'active' && row.status !== 'pr-published' && !(allowMerged && row.status === 'merged'))) {
+        throw new DeliveryError('Verification requires the exact registered issue worktree.');
+    }
+    assertClean(worktreeRoot);
+}
+function manifestPath(common, headSha) {
+    return join(common, 'ai-delivery', 'runs', `${headSha}.json`);
+}
+function parseRun(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw new DeliveryError('Invalid run manifest.');
+    const input = value;
+    const classification = RepositoryClassificationReceiptSchema.parse(input.classification);
+    const aggregate = RepositoryStageAggregateSchema.parse(input.aggregate);
+    const stageReceipts = RepositoryStageReceiptSchema.array().parse(input.stageReceipts);
+    const content = {
+        aggregate,
+        classification,
+        completedAt: input.completedAt,
+        schemaVersion: input.schemaVersion,
+        stageReceipts,
+    };
+    if (input.schemaVersion !== 'ai-delivery.run@1' ||
+        typeof input.completedAt !== 'string' ||
+        input.manifestId !== digestValue(content))
+        throw new DeliveryError('Run manifest identity is invalid.');
+    return { ...content, completedAt: input.completedAt, manifestId: input.manifestId };
+}
+function loadRun(common, headSha) {
+    let raw;
+    try {
+        raw = JSON.parse(readFileSync(manifestPath(common, headSha), 'utf8'));
+    }
+    catch {
+        throw new DeliveryError('Exact-head verification run is missing or corrupt.');
+    }
+    return parseRun(raw);
+}
+function stageEnvironmentDigest() {
+    return digestValue({
+        arch: process.arch,
+        node: process.version,
+        path: process.env.PATH ?? '',
+        platform: process.platform,
+    });
+}
+function runStageCommand(repoRoot, argv) {
+    const [executable, ...args] = argv;
+    if (!executable)
+        throw new DeliveryError('Policy selected an empty stage command.');
+    const result = spawnSync(executable, args, {
+        cwd: repoRoot,
+        encoding: 'buffer',
+        maxBuffer: 8 * 1024 * 1024,
+        timeout: 600_000,
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    const output = Buffer.concat([Buffer.from(result.stdout ?? ''), Buffer.from(result.stderr ?? '')]);
+    if (result.error || result.status !== 0 || output.length > 8 * 1024 * 1024) {
+        const reason = result.error?.message ?? `exit ${String(result.status)}`;
+        throw new DeliveryError(`Selected policy stage command failed (${reason}).`);
+    }
+    return output;
+}
+export async function verifyIssue(input) {
+    const root = gitRoot(input.repoRoot);
+    assertRegisteredIssue(root, input.issueNumber);
+    const common = gitCommonDir(root);
+    const loaded = loadDeliveryConfig(root);
+    const selected = await loadSelectedRepositoryPolicy({
+        repoRoot: root,
+        policySourcePath: loaded.config.policy.module,
+    });
+    const base = coordinate(root, defaultBaseRef(root));
+    const head = coordinate(root);
+    const classification = classifyRepositoryExactRange({
+        base,
+        changedPaths: changedPaths(root, base.sha, head.sha),
+        configDigest: loaded.configDigest,
+        head,
+        policy: selected.policy,
+        policySourcePath: loaded.config.policy.module,
+        repoRoot: root,
+        repository: loaded.config.repository,
+    });
+    const receipts = [];
+    const admitted = new Set(input.admittedResourceClasses ?? ['source_only']);
+    const environmentDigest = stageEnvironmentDigest();
+    for (const stage of classification.requiredStages) {
+        if (!admitted.has(stage.resourceClass)) {
+            throw new DeliveryError(`Stage '${stage.id}' requires explicit ${stage.resourceClass} admission.`);
+        }
+        const stageInput = createRepositoryStageInput({
+            classification,
+            environmentDigest,
+            semanticInputs: stage.semanticInputKeys.map((key) => ({
+                digest: digestValue({ key, evidenceId: classification.policyEvidence.evidenceId }),
+                key,
+            })),
+            stageId: stage.id,
+            upstream: stage.dependsOn.map((stageId) => {
+                const receipt = receipts.find((value) => value.input.stageId === stageId);
+                if (!receipt)
+                    throw new DeliveryError(`Missing upstream stage '${stageId}'.`);
+                return { receiptId: receipt.receiptId, stageId };
+            }),
+        });
+        const cached = loadRepositoryStageCheckpoint({
+            classification,
+            configDigest: loaded.configDigest,
+            gitCommonDir: common,
+            policySourcePath: loaded.config.policy.module,
+            repoRoot: root,
+            stageInput,
+        });
+        if (cached) {
+            receipts.push(cached);
+            continue;
+        }
+        const startedAt = new Date().toISOString();
+        const commands = stage.commands.map((command) => ({
+            exitCode: 0,
+            label: command.label,
+            outputDigest: writeRepositoryCommandOutput({ bytes: runStageCommand(root, command.argv), gitCommonDir: common }),
+        }));
+        const artifacts = stage.attestationKey === undefined
+            ? []
+            : classification.policyEvidence.artifacts
+                .filter((artifact) => artifact.path === stage.attestationKey)
+                .map((artifact) => ({ digest: artifact.digest, path: artifact.path }));
+        if (stage.attestationKey !== undefined && artifacts.length === 0) {
+            throw new DeliveryError(`Selected attestation '${stage.attestationKey}' lacks a bound artifact.`);
+        }
+        const receipt = createRepositoryStageReceipt({
+            artifacts,
+            classification,
+            commands,
+            completedAt: new Date().toISOString(),
+            stageInput,
+            startedAt,
+        });
+        writeRepositoryStageCheckpoint({ gitCommonDir: common, receipt, repoRoot: root });
+        receipts.push(receipt);
+    }
+    const aggregate = createRepositoryStageAggregate({ classification, receipts });
+    writeRepositoryStageAggregate({ gitCommonDir: common, aggregate });
+    const content = {
+        aggregate,
+        classification,
+        completedAt: new Date().toISOString(),
+        schemaVersion: 'ai-delivery.run@1',
+        stageReceipts: receipts,
+    };
+    const run = { ...content, manifestId: digestValue(content) };
+    writePrivateJsonFileAtomically(manifestPath(common, head.sha), run);
+    return run;
+}
+export async function createIssuePhaseEvidence(input) {
+    const root = gitRoot(input.repoRoot);
+    assertRegisteredIssue(root, input.issueNumber);
+    const loaded = loadDeliveryConfig(root);
+    const selected = await loadSelectedRepositoryPolicy({
+        repoRoot: root,
+        policySourcePath: loaded.config.policy.module,
+    });
+    const run = loadRun(gitCommonDir(root), coordinate(root).sha);
+    const evidence = createRepositoryDeliveryEvidence({
+        aggregate: run.aggregate,
+        ...(input.approval === undefined ? {} : { approval: input.approval }),
+        approvalRoles: {
+            authorIdentity: loaded.config.roles.author.identity,
+            reviewerIdentity: loaded.config.roles.reviewer.identity,
+        },
+        classification: run.classification,
+        configDigest: loaded.configDigest,
+        currentBase: coordinate(root, run.classification.base.sha),
+        currentHead: coordinate(root),
+        gitCommonDir: gitCommonDir(root),
+        ...(input.mergeReadback === undefined ? {} : { mergeReadback: input.mergeReadback }),
+        phase: input.phase,
+        policy: selected.policy,
+        policySourcePath: loaded.config.policy.module,
+        repoRoot: root,
+        stageReceipts: run.stageReceipts,
+    });
+    writeRepositoryDeliveryEvidence({ evidence, gitCommonDir: gitCommonDir(root) });
+    return evidence;
+}
+export function loadVerifiedRun(repoRoot, issueNumber) {
+    const root = gitRoot(repoRoot);
+    assertRegisteredIssue(root, issueNumber, true);
+    return loadRun(gitCommonDir(root), coordinate(root).sha);
+}
+/** Recover an exact merged run after worktree removal interrupted terminal recording. */
+export function loadRemovedMergedRun(primaryRepoRoot, issueNumber) {
+    const root = gitRoot(primaryRepoRoot);
+    const row = getIssueWorktreeStrict(issueNumber, root);
+    if (row.status !== 'merged' || row.path !== join(root, '.worktrees', `issue-${issueNumber}`)) {
+        throw new DeliveryError('Removed-run recovery requires the exact registered merged issue.');
+    }
+    const headSha = git(root, 'rev-parse', `refs/heads/${row.branch}`);
+    const run = loadRun(gitCommonDir(root), headSha);
+    if (run.classification.head.sha !== headSha) {
+        throw new DeliveryError('Recovered merged run disagrees with the registered branch.');
+    }
+    return run;
+}
+//# sourceMappingURL=verification.js.map

package/dist/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../src/verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,4BAA4B,EAC5B,gCAAgC,EAChC,8BAA8B,EAC9B,0BAA0B,EAC1B,4BAA4B,EAC5B,WAAW,EACX,6BAA6B,EAC7B,4BAA4B,EAC5B,qCAAqC,EACrC,8BAA8B,EAC9B,4BAA4B,EAC5B,4BAA4B,EAC5B,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,GAO/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC7G,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AAWvE,SAAS,WAAW,CAAC,YAAoB;IACvC,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,kDAAkD,CAAC,CAAC;IAC7G,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,qBAAqB,CAAC,YAAoB,EAAE,WAAmB,EAAE,WAAW,GAAG,KAAK;IAC3F,MAAM,GAAG,GAAG,sBAAsB,CAAC,WAAW,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3E,IACE,GAAG,CAAC,IAAI,KAAK,YAAY;QACzB,GAAG,CAAC,MAAM,KAAK,SAAS,WAAW,EAAE;QACrC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,EACvG,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,4DAA4D,CAAC,CAAC;IACxF,CAAC;IACD,WAAW,CAAC,YAAY,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,OAAe;IACnD,OAAO,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,cAAc,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,4BAA4B,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG;QACd,SAAS;QACT,cAAc;QACd,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,aAAa;KACd,CAAC;IACF,IACE,KAAK,CAAC,aAAa,KAAK,mBAAmB;QAC3C,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,OAAO,CAAC;QAEzC,MAAM,IAAI,aAAa,CAAC,mCAAmC,CAAC,CAAC;IAC/D,OAAO,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAqB,CAAC;AACzG,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,OAAe;IAC9C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAY,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,oDAAoD,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAuB;IAChE,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACnC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE;QACzC,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;QAC1B,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACnG,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,aAAa,CAAC,yCAAyC,MAAM,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAIjC;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC;QAClD,QAAQ,EAAE,IAAI;QACd,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;KAC9C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,cAAc,GAAG,4BAA4B,CAAC;QAClD,IAAI;QACJ,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QACpD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,IAAI;QACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QAC7C,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;KACrC,CAAC,CAAC;IACH,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3E,MAAM,iBAAiB,GAAG,sBAAsB,EAAE,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,cAAc,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,aAAa,CAAC,UAAU,KAAK,CAAC,EAAE,uBAAuB,KAAK,CAAC,aAAa,aAAa,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,UAAU,GAAG,0BAA0B,CAAC;YAC5C,cAAc;YACd,iBAAiB;YACjB,cAAc,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACpD,MAAM,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;gBAClF,GAAG;aACJ,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;gBAC1E,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,aAAa,CAAC,2BAA2B,OAAO,IAAI,CAAC,CAAC;gBAC9E,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YACnD,CAAC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,cAAc;YACd,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY,EAAE,MAAM;YACpB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;YAC7C,QAAQ,EAAE,IAAI;YACd,UAAU;SACX,CAAC,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAChD,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,4BAA4B,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;SACjH,CAAC,CAAC,CAAC;QACJ,MAAM,SAAS,GACb,KAAK,CAAC,cAAc,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,cAAc,CAAC,cAAc,CAAC,SAAS;iBACpC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,cAAc,CAAC;iBAC5D,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,aAAa,CAAC,yBAAyB,KAAK,CAAC,cAAc,2BAA2B,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,OAAO,GAAG,4BAA4B,CAAC;YAC3C,SAAS;YACT,cAAc;YACd,QAAQ;YACR,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,UAAU;YACV,SAAS;SACV,CAAC,CAAC;QACH,8BAA8B,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,SAAS,GAAG,8BAA8B,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/E,6BAA6B,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG;QACd,SAAS;QACT,cAAc;QACd,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,aAAa,EAAE,mBAA4B;QAC3C,aAAa,EAAE,QAAQ;KACxB,CAAC;IACF,MAAM,GAAG,GAAoB,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9E,8BAA8B,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAM9C;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC;QAClD,QAAQ,EAAE,IAAI;QACd,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;KAC9C,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,gCAAgC,CAAC;QAChD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrE,aAAa,EAAE;YACb,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;YACnD,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ;SACxD;QACD,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1D,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC;QAChC,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;QACpF,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QAC7C,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC,CAAC;IACH,+BAA+B,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,WAAmB;IACnE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,eAAuB,EAAE,WAAmB;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,sBAAsB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,aAAa,CAAC,kEAAkE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,4DAA4D,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/worktree.d.ts

@@ -0,0 +1,44 @@
+import { type WorktreeEntry } from './services/worktreeRegistry.js';
+export declare function prepareIssueWorktree(input: {
+    baseRef?: string;
+    identity: string;
+    issueNumber: number;
+    repoRoot: string;
+}): Promise<WorktreeEntry>;
+export declare function prepareStandaloneWorktree(input: {
+    baseRef?: string;
+    branch: string;
+    identity: string;
+    name: string;
+    repoRoot: string;
+}): Promise<WorktreeEntry>;
+/** Register the exact head of an in-repository PR after its selected-App fetch. */
+export declare function preparePrWorktree(input: {
+    headSha: string;
+    identity: string;
+    prNumber: number;
+    repoRoot: string;
+}): Promise<WorktreeEntry>;
+/** Remove only a clean registered PR or standalone worktree; issue cleanup remains receipt-bound. */
+export declare function cleanupNonIssueWorktree(input: {
+    name?: string;
+    prNumber?: number;
+    repoRoot: string;
+}): Promise<void>;
+export interface MergeCleanupAttestation {
+    baseBranch: string;
+    baseSha: string;
+    headBranch: string;
+    headSha: string;
+    mergeSha: string;
+    mergeTree: string;
+    remoteBaseSha: string;
+    remoteHeadSha: string | null;
+    strategy: 'merge' | 'squash' | 'rebase';
+}
+export declare function cleanupMergedIssueWorktree(input: {
+    issueNumber: number;
+    repoRoot: string;
+    merge?: MergeCleanupAttestation;
+    afterRemoval?: () => Promise<void>;
+}): Promise<void>;