@aviaratech/ai-delivery 0.1.0

package/dist/delivery/stage.js

@@ -0,0 +1,218 @@
+import { join } from 'node:path';
+import { z } from 'zod';
+import { assertArtifact, assertPrivateFile, DigestSchema, digestBytes, digestValue, isUniqueSorted, stableJson, StageIdSchema, writeCreateOnly, } from './common.js';
+import { assertRepositoryClassificationCurrent, RepositoryClassificationReceiptSchema } from './policy.js';
+const SemanticInputSchema = z.object({ digest: DigestSchema, key: z.string().min(1) }).strict();
+const UpstreamSchema = z.object({ receiptId: DigestSchema, stageId: StageIdSchema }).strict();
+export const RepositoryStageInputSchema = z
+    .object({
+    classificationReceiptId: DigestSchema,
+    definitionHash: DigestSchema,
+    environmentDigest: DigestSchema,
+    inputId: DigestSchema,
+    policyDigest: DigestSchema,
+    schemaVersion: z.literal('ai-delivery.stage-input@1'),
+    semanticInputs: z.array(SemanticInputSchema).min(1),
+    stageId: StageIdSchema,
+    upstream: z.array(UpstreamSchema),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const { inputId, ...content } = value;
+    if (inputId !== digestValue(content) ||
+        !isUniqueSorted(value.semanticInputs.map((x) => x.key)) ||
+        !isUniqueSorted(value.upstream.map((x) => x.stageId)))
+        ctx.addIssue({ code: 'custom', message: 'Stage input identity or inventory is invalid.' });
+});
+export const RepositoryStageReceiptSchema = z
+    .object({
+    artifacts: z.array(z.object({ digest: DigestSchema, path: z.string().min(1) }).strict()),
+    commands: z.array(z
+        .object({ exitCode: z.number().int().nonnegative(), label: z.string().min(1), outputDigest: DigestSchema })
+        .strict()),
+    completedAt: z.iso.datetime(),
+    input: RepositoryStageInputSchema,
+    receiptId: DigestSchema,
+    result: z.literal('passed'),
+    schemaVersion: z.literal('ai-delivery.stage-receipt@1'),
+    startedAt: z.iso.datetime(),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const { receiptId, ...content } = value;
+    if (receiptId !== digestValue(content) ||
+        Date.parse(value.completedAt) < Date.parse(value.startedAt) ||
+        value.commands.some((command) => command.exitCode !== 0) ||
+        !isUniqueSorted(value.artifacts.map((a) => a.path)))
+        ctx.addIssue({ code: 'custom', message: 'Stage receipt has incomplete or corrupt proof.' });
+});
+export const RepositoryStageAggregateSchema = z
+    .object({
+    aggregateId: DigestSchema,
+    classificationReceiptId: DigestSchema,
+    policyDigest: DigestSchema,
+    result: z.literal('passed'),
+    schemaVersion: z.literal('ai-delivery.stage-aggregate@1'),
+    stages: z
+        .array(z.object({ inputId: DigestSchema, receiptId: DigestSchema, stageId: StageIdSchema }).strict())
+        .min(1),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const { aggregateId, ...content } = value;
+    if (aggregateId !== digestValue(content) ||
+        new Set(value.stages.map((x) => x.stageId)).size !== value.stages.length)
+        ctx.addIssue({ code: 'custom', message: 'Stage aggregate identity or inventory is invalid.' });
+});
+export function createRepositoryStageInput(input) {
+    const classification = RepositoryClassificationReceiptSchema.parse(input.classification);
+    const definition = classification.requiredStages.find((stage) => stage.id === input.stageId);
+    if (definition === undefined)
+        throw new Error('Stage is absent from selected policy.');
+    const semanticInputs = [...input.semanticInputs]
+        .sort((a, b) => a.key.localeCompare(b.key))
+        .map((x) => SemanticInputSchema.parse(x));
+    const upstream = [...input.upstream]
+        .sort((a, b) => a.stageId.localeCompare(b.stageId))
+        .map((x) => UpstreamSchema.parse(x));
+    if (stableJson(semanticInputs.map((x) => x.key)) !== stableJson(definition.semanticInputKeys) ||
+        stableJson(upstream.map((x) => x.stageId)) !== stableJson([...definition.dependsOn].sort()))
+        throw new Error('Stage input lacks required semantic or upstream proof.');
+    const content = {
+        classificationReceiptId: classification.receiptId,
+        definitionHash: digestValue(definition),
+        environmentDigest: DigestSchema.parse(input.environmentDigest),
+        policyDigest: classification.policyDigest,
+        schemaVersion: 'ai-delivery.stage-input@1',
+        semanticInputs,
+        stageId: definition.id,
+        upstream,
+    };
+    return RepositoryStageInputSchema.parse({ ...content, inputId: digestValue(content) });
+}
+export function createRepositoryStageReceipt(input) {
+    const classification = RepositoryClassificationReceiptSchema.parse(input.classification);
+    const stageInput = RepositoryStageInputSchema.parse(input.stageInput);
+    const definition = classification.requiredStages.find((stage) => stage.id === stageInput.stageId);
+    if (definition === undefined ||
+        stageInput.classificationReceiptId !== classification.receiptId ||
+        stageInput.policyDigest !== classification.policyDigest ||
+        stageInput.definitionHash !== digestValue(definition) ||
+        stableJson(stageInput.semanticInputs.map((x) => x.key)) !== stableJson(definition.semanticInputKeys) ||
+        stableJson(stageInput.upstream.map((x) => x.stageId)) !== stableJson([...definition.dependsOn].sort()) ||
+        input.commands.length !== definition.commands.length ||
+        input.commands.some((command, index) => command.label !== definition.commands[index]?.label || command.exitCode !== 0) ||
+        (definition.attestationKey !== undefined && input.artifacts.length === 0))
+        throw new Error('Stage receipt does not prove selected definition.');
+    const content = {
+        artifacts: [...input.artifacts].sort((a, b) => a.path.localeCompare(b.path)),
+        commands: input.commands.map((x) => ({ ...x })),
+        completedAt: input.completedAt,
+        input: stageInput,
+        result: 'passed',
+        schemaVersion: 'ai-delivery.stage-receipt@1',
+        startedAt: input.startedAt,
+    };
+    return RepositoryStageReceiptSchema.parse({ ...content, receiptId: digestValue(content) });
+}
+export function createRepositoryStageAggregate(input) {
+    const classification = RepositoryClassificationReceiptSchema.parse(input.classification);
+    if (input.receipts.length !== classification.requiredStages.length)
+        throw new Error('Aggregate requires every selected stage.');
+    const receipts = input.receipts.map((receipt) => RepositoryStageReceiptSchema.parse(receipt));
+    const byStage = new Map(receipts.map((receipt) => [receipt.input.stageId, receipt]));
+    if (byStage.size !== receipts.length)
+        throw new Error('Aggregate contains duplicate stages.');
+    for (const definition of classification.requiredStages) {
+        const receipt = byStage.get(definition.id);
+        if (receipt === undefined ||
+            receipt.input.classificationReceiptId !== classification.receiptId ||
+            receipt.input.policyDigest !== classification.policyDigest ||
+            receipt.input.definitionHash !== digestValue(definition) ||
+            stableJson(receipt.input.upstream) !==
+                stableJson(definition.dependsOn
+                    .map((stageId) => ({ stageId, receiptId: byStage.get(stageId)?.receiptId }))
+                    .sort((a, b) => a.stageId.localeCompare(b.stageId))) ||
+            createRepositoryStageReceipt({
+                artifacts: receipt.artifacts,
+                classification,
+                commands: receipt.commands,
+                completedAt: receipt.completedAt,
+                stageInput: receipt.input,
+                startedAt: receipt.startedAt,
+            }).receiptId !== receipt.receiptId)
+            throw new Error('Aggregate contains missing, foreign or stale stage proof.');
+    }
+    const content = {
+        classificationReceiptId: classification.receiptId,
+        policyDigest: classification.policyDigest,
+        result: 'passed',
+        schemaVersion: 'ai-delivery.stage-aggregate@1',
+        stages: classification.requiredStages.map((stage) => {
+            const receipt = byStage.get(stage.id);
+            return { inputId: receipt.input.inputId, receiptId: receipt.receiptId, stageId: stage.id };
+        }),
+    };
+    return RepositoryStageAggregateSchema.parse({ ...content, aggregateId: digestValue(content) });
+}
+function storeRoot(gitCommonDir) {
+    return join(gitCommonDir, 'ai-delivery', 'verification@1');
+}
+function outputPath(gitCommonDir, digest) {
+    return join(storeRoot(gitCommonDir), 'command-output', `${DigestSchema.parse(digest).slice(7)}.bin`);
+}
+function checkpointPath(gitCommonDir, stageInput) {
+    return join(storeRoot(gitCommonDir), 'stages', stageInput.stageId, `${stageInput.inputId.slice(7)}.json`);
+}
+export function writeRepositoryCommandOutput(input) {
+    if (input.bytes.length > 8 * 1024 * 1024)
+        throw new Error('Command output exceeds bounded evidence limit.');
+    const digest = digestBytes(input.bytes);
+    writeCreateOnly(outputPath(input.gitCommonDir, digest), input.bytes);
+    return digest;
+}
+export function assertRepositoryStageProof(input) {
+    const receipt = RepositoryStageReceiptSchema.parse(input.receipt);
+    for (const artifact of receipt.artifacts)
+        assertArtifact(input.repoRoot, artifact);
+    for (const command of receipt.commands)
+        if (digestBytes(assertPrivateFile(outputPath(input.gitCommonDir, command.outputDigest))) !== command.outputDigest)
+            throw new Error('Command output bytes are missing or corrupt.');
+}
+export function writeRepositoryStageCheckpoint(input) {
+    const receipt = RepositoryStageReceiptSchema.parse(input.receipt);
+    assertRepositoryStageProof({ ...input, receipt });
+    return writeCreateOnly(checkpointPath(input.gitCommonDir, receipt.input), Buffer.from(stableJson(receipt), 'utf8'));
+}
+export function loadRepositoryStageCheckpoint(input) {
+    const stageInput = RepositoryStageInputSchema.parse(input.stageInput);
+    assertRepositoryClassificationCurrent(input);
+    let bytes;
+    try {
+        bytes = assertPrivateFile(checkpointPath(input.gitCommonDir, stageInput));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+    const receipt = RepositoryStageReceiptSchema.parse(JSON.parse(bytes.toString('utf8')));
+    if (!bytes.equals(Buffer.from(stableJson(receipt), 'utf8')) ||
+        receipt.input.inputId !== stageInput.inputId ||
+        createRepositoryStageReceipt({
+            artifacts: receipt.artifacts,
+            classification: input.classification,
+            commands: receipt.commands,
+            completedAt: receipt.completedAt,
+            stageInput,
+            startedAt: receipt.startedAt,
+        }).receiptId !== receipt.receiptId)
+        throw new Error('Stage checkpoint is corrupt or belongs to another input.');
+    assertRepositoryStageProof({ gitCommonDir: input.gitCommonDir, receipt, repoRoot: input.repoRoot });
+    return receipt;
+}
+export function writeRepositoryStageAggregate(input) {
+    const aggregate = RepositoryStageAggregateSchema.parse(input.aggregate);
+    return writeCreateOnly(join(storeRoot(input.gitCommonDir), 'aggregates', `${aggregate.aggregateId.slice(7)}.json`), Buffer.from(stableJson(aggregate), 'utf8'));
+}
+//# sourceMappingURL=stage.js.map

package/dist/delivery/stage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stage.js","sourceRoot":"","sources":["../../src/delivery/stage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,cAAc,EACd,UAAU,EACV,aAAa,EACb,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qCAAqC,EAAE,qCAAqC,EAAE,MAAM,aAAa,CAAC;AAG3G,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAChG,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9F,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,uBAAuB,EAAE,YAAY;IACrC,cAAc,EAAE,YAAY;IAC5B,iBAAiB,EAAE,YAAY;IAC/B,OAAO,EAAE,YAAY;IACrB,YAAY,EAAE,YAAY;IAC1B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;IACrD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CAClC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACtC,IACE,OAAO,KAAK,WAAW,CAAC,OAAO,CAAC;QAChC,CAAC,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAErD,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACxF,QAAQ,EAAE,CAAC,CAAC,KAAK,CACf,CAAC;SACE,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;SAC1G,MAAM,EAAE,CACZ;IACD,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,0BAA0B;IACjC,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACxC,IACE,SAAS,KAAK,WAAW,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QAC3D,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC;QACxD,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEnD,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;AAChG,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,WAAW,EAAE,YAAY;IACzB,uBAAuB,EAAE,YAAY;IACrC,YAAY,EAAE,YAAY;IAC1B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC;IACzD,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SACpG,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1C,IACE,WAAW,KAAK,WAAW,CAAC,OAAO,CAAC;QACpC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM;QAExE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC,CAAC;AACnG,CAAC,CAAC,CAAC;AAGL,MAAM,UAAU,0BAA0B,CAAC,KAM1C;IACC,MAAM,cAAc,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzF,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7F,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACvF,MAAM,cAAc,GAAG,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;SACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IACE,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC;QACzF,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAE3F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG;QACd,uBAAuB,EAAE,cAAc,CAAC,SAAS;QACjD,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC;QACvC,iBAAiB,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC9D,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,aAAa,EAAE,2BAAoC;QACnD,cAAc;QACd,OAAO,EAAE,UAAU,CAAC,EAAE;QACtB,QAAQ;KACT,CAAC;IACF,OAAO,0BAA0B,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAO5C;IACC,MAAM,cAAc,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzF,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC;IAClG,IACE,UAAU,KAAK,SAAS;QACxB,UAAU,CAAC,uBAAuB,KAAK,cAAc,CAAC,SAAS;QAC/D,UAAU,CAAC,YAAY,KAAK,cAAc,CAAC,YAAY;QACvD,UAAU,CAAC,cAAc,KAAK,WAAW,CAAC,UAAU,CAAC;QACrD,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC;QACpG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACtG,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ,CAAC,MAAM;QACpD,KAAK,CAAC,QAAQ,CAAC,IAAI,CACjB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,CAClG;QACD,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;QAEzE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG;QACd,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5E,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,QAAiB;QACzB,aAAa,EAAE,6BAAsC;QACrD,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,OAAO,4BAA4B,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAG9C;IACC,MAAM,cAAc,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzF,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,cAAc,CAAC,MAAM;QAChE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9F,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,cAAc,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC3C,IACE,OAAO,KAAK,SAAS;YACrB,OAAO,CAAC,KAAK,CAAC,uBAAuB,KAAK,cAAc,CAAC,SAAS;YAClE,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,cAAc,CAAC,YAAY;YAC1D,OAAO,CAAC,KAAK,CAAC,cAAc,KAAK,WAAW,CAAC,UAAU,CAAC;YACxD,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAChC,UAAU,CACR,UAAU,CAAC,SAAS;qBACjB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;qBAC3E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CACtD;YACH,4BAA4B,CAAC;gBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc;gBACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,OAAO,CAAC,KAAK;gBACzB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YAElC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,OAAO,GAAG;QACd,uBAAuB,EAAE,cAAc,CAAC,SAAS;QACjD,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,MAAM,EAAE,QAAiB;QACzB,aAAa,EAAE,+BAAwC;QACvD,MAAM,EAAE,cAAc,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC7F,CAAC,CAAC;KACH,CAAC;IACF,OAAO,8BAA8B,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,SAAS,CAAC,YAAoB;IACrC,OAAO,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;AAC7D,CAAC;AACD,SAAS,UAAU,CAAC,YAAoB,EAAE,MAAc;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,gBAAgB,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACvG,CAAC;AACD,SAAS,cAAc,CAAC,YAAoB,EAAE,UAAgC;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC5G,CAAC;AACD,MAAM,UAAU,4BAA4B,CAAC,KAA8C;IACzF,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,0BAA0B,CAAC,KAI1C;IACC,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS;QAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnF,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ;QACpC,IAAI,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,YAAY;YAC/G,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;AACtE,CAAC;AACD,MAAM,UAAU,8BAA8B,CAAC,KAI9C;IACC,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACtH,CAAC;AACD,MAAM,UAAU,6BAA6B,CAAC,KAO7C;IACC,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtE,qCAAqC,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,iBAAiB,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvF,IACE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;QAC5C,4BAA4B,CAAC;YAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU;YACV,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QAElC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,0BAA0B,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpG,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,6BAA6B,CAAC,KAG7C;IACC,MAAM,SAAS,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,OAAO,eAAe,CACpB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAC3F,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAC3C,CAAC;AACJ,CAAC"}

package/dist/dispatch.d.ts

@@ -0,0 +1,15 @@
+import { loadDeliveryContext, type UpdateIssueInput } from './issue.js';
+import { type AiDeliveryMcpToolName } from './mcp/tools.js';
+export interface ExecutionContext {
+    identity?: string;
+    personalAuth?: boolean;
+    repo?: string;
+    repoRoot: string;
+    runtimeEntryPath?: string;
+}
+/** @internal Preserve every accepted tracking field when completing a partially created issue. */
+export declare function resumedIssueUpdate(input: Record<string, unknown>): UpdateIssueInput;
+export declare function contextFor(input: ExecutionContext, commandName: string, role?: 'author' | 'reviewer'): Promise<import("./issue.js").DeliveryContext>;
+/** @internal Keep CLI and MCP start routing on the same native lifecycle owner. */
+export declare function startTrackedIssue(context: Awaited<ReturnType<typeof loadDeliveryContext>>, input: Record<string, unknown>): Promise<Record<string, unknown>>;
+export declare function executeTool(name: AiDeliveryMcpToolName, raw: unknown, execution: ExecutionContext): Promise<unknown>;

package/dist/dispatch.js

@@ -0,0 +1,397 @@
+import { readFileSync } from 'node:fs';
+import { loadDeliveryConfig } from './config/deliveryConfig.js';
+import { DeliveryError } from './errors.js';
+import { defaultBaseRef, gitExitCode, gitRoot, primaryGitRoot } from './git.js';
+import { evaluateCommandIdentityPolicy } from './github/commandIdentityPolicy.js';
+import { resolveNativeRelationshipTargets } from './github/relationships.js';
+import { cachedIssueInfo, CreatedTrackingIssueError, createIssue, developIssue, issueInfo, loadDeliveryContext, readyCheck, resumeCreatedIssue, updateIssue, } from './issue.js';
+import { finishIssue, mergePr, prInfo, publishPr, submitFormalReview } from './pr.js';
+import { parseReviewArtifact, reviewArtifactApproval, savePrepublicationArtifact } from './review.js';
+import { evaluateAgentReadiness } from './services/agentReadinessService.js';
+import { assertDeliveryRuntimeAdmitted } from './services/deliveryAdmission.js';
+import { getIssueWorktreeStrict, listWorktreesStrict } from './services/worktreeRegistry.js';
+import { createIssuePhaseEvidence, loadVerifiedRun, verifyIssue } from './verification.js';
+import { prepareStandaloneWorktree } from './worktree.js';
+import { getAiDeliveryMcpTool } from './mcp/tools.js';
+const MUTATING_TOOLS = new Set([
+    'issue_create',
+    'issue_start',
+    'issue_update',
+    'issue_develop',
+    'issue_verify',
+    'issue_pr_create',
+    'issue_pr_review',
+    'issue_pr_merge',
+    'issue_finish',
+    'issue_worktree_create',
+]);
+function requiredNumber(input, key) {
+    const value = input[key];
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value <= 0)
+        throw new DeliveryError(`${key} must be positive.`);
+    return value;
+}
+function optionalString(input, key) {
+    return typeof input[key] === 'string' ? input[key] : undefined;
+}
+function requireString(input, key) {
+    const value = optionalString(input, key);
+    if (!value?.trim())
+        throw new DeliveryError(`${key} is required.`);
+    return value;
+}
+/** @internal Preserve every accepted tracking field when completing a partially created issue. */
+export function resumedIssueUpdate(input) {
+    return {
+        issueNumber: requiredNumber(input, 'issueNumber'),
+        ...(input.body === undefined ? {} : { body: requireString(input, 'body') }),
+        ...(input.issueType === undefined ? {} : { issueType: requireString(input, 'issueType') }),
+        ...(input.points === undefined ? {} : { points: Number(input.points) }),
+        ...(input.priority === undefined ? {} : { priority: requireString(input, 'priority') }),
+        ...(input.title === undefined ? {} : { title: requireString(input, 'title') }),
+        ...(input.labels === undefined ? {} : { labels: input.labels }),
+        ...(input.milestone === undefined ? {} : { milestone: Number(input.milestone) }),
+        ...(input.parentIssueNumber === undefined ? {} : { parentIssueNumber: Number(input.parentIssueNumber) }),
+        ...(input.blockedBy === undefined ? {} : { blockedBy: input.blockedBy }),
+    };
+}
+function identityFor(input, commandName) {
+    const config = loadDeliveryConfig(gitRoot(input.repoRoot)).config;
+    const identity = input.identity ?? '';
+    const policy = evaluateCommandIdentityPolicy({
+        commandName,
+        deliveryConfig: config,
+        identity,
+        ...(input.personalAuth === undefined ? {} : { personalAuth: input.personalAuth }),
+    });
+    if (policy.error)
+        throw new DeliveryError(policy.error);
+    return identity || config.roles.author.identity;
+}
+function assertRepositorySelector(input, execution) {
+    const selector = input.repo ?? execution.repo;
+    if (selector === undefined)
+        return;
+    const configured = loadDeliveryConfig(gitRoot(execution.repoRoot)).config.repository;
+    if (typeof selector !== 'string' || selector.toLowerCase() !== configured.toLowerCase()) {
+        throw new DeliveryError('Repository selector must match the configured repository for this Git checkout.');
+    }
+}
+export async function contextFor(input, commandName, role = 'author') {
+    assertRepositorySelector({}, input);
+    const identity = identityFor(input, commandName);
+    return loadDeliveryContext({
+        identity,
+        ...(input.personalAuth === undefined ? {} : { personalAuth: input.personalAuth }),
+        repoRoot: input.repoRoot,
+        role,
+    });
+}
+/** @internal Keep CLI and MCP start routing on the same native lifecycle owner. */
+export async function startTrackedIssue(context, input) {
+    const knownIssue = input.issueNumber === undefined ? undefined : requiredNumber(input, 'issueNumber');
+    if (input.resumeCreated === true && (knownIssue === undefined || input.develop !== true)) {
+        throw new DeliveryError('Resume of a known created issue requires issueNumber and develop=true.');
+    }
+    if (knownIssue !== undefined && input.resumeCreated !== true) {
+        const row = await developIssue(context, knownIssue);
+        const title = (await issueInfo(context, knownIssue)).title;
+        return {
+            issueNumber: knownIssue,
+            mode: 'existing-issue',
+            title,
+            branch: row.branch,
+            path: row.path,
+            worktreePath: row.path,
+        };
+    }
+    const request = optionalString(input, 'request');
+    const title = optionalString(input, 'title') ?? requireString(input, 'request');
+    const points = input.points === undefined ? 2 : requiredNumber(input, 'points');
+    const tracking = {
+        body: optionalString(input, 'body') ?? request ?? title,
+        title,
+        points,
+        ...(input.issueType === undefined ? {} : { issueType: requireString(input, 'issueType') }),
+        ...(input.priority === undefined ? {} : { priority: requireString(input, 'priority') }),
+        ...(input.blockedBy === undefined ? {} : { blockedBy: input.blockedBy }),
+        ...(input.labels === undefined ? {} : { labels: input.labels }),
+        ...(input.milestone === undefined ? {} : { milestone: Number(input.milestone) }),
+        ...(input.parentIssueNumber === undefined ? {} : { parentIssueNumber: Number(input.parentIssueNumber) }),
+    };
+    if (input.develop === true)
+        await preflightStartDevelopment(context, tracking);
+    const repository = `${context.repo.owner}/${context.repo.repo}`;
+    const createdNotStarted = (createdIssue, phase, error) => ({
+        schemaVersion: 'ai-delivery.issue-start-registration@1',
+        status: 'created-not-started',
+        provider: 'github',
+        repository,
+        identity: context.config.roles.author.identity,
+        createdIssue,
+        failure: { phase, message: error instanceof Error ? error.message : String(error) },
+        safeResume: {
+            tool: 'issue_start',
+            arguments: {
+                ...tracking,
+                ...(input.repo === undefined ? {} : { repo: input.repo }),
+                issueNumber: createdIssue.number,
+                develop: true,
+                resumeCreated: true,
+            },
+        },
+    });
+    let created;
+    if (knownIssue !== undefined) {
+        const existing = (await context.clients.rest.issues.get({ ...context.repo, issue_number: knownIssue })).data;
+        if (existing.number !== knownIssue || 'pull_request' in existing) {
+            throw new DeliveryError('Known-created issue readback disagrees with the requested issue.');
+        }
+        created = { number: existing.number, title: existing.title, url: existing.html_url };
+        try {
+            await resumeCreatedIssue(context, resumedIssueUpdate(input));
+        }
+        catch (error) {
+            return createdNotStarted(created, 'tracking', error);
+        }
+    }
+    else {
+        try {
+            created = (await createIssue(context, tracking)).created;
+        }
+        catch (error) {
+            if (input.develop === true && error instanceof CreatedTrackingIssueError) {
+                return createdNotStarted(error.created, 'tracking', error);
+            }
+            throw error;
+        }
+    }
+    if (input.develop === true) {
+        try {
+            const row = await developIssue(context, created.number);
+            return {
+                schemaVersion: 'ai-delivery.issue-start-registration@1',
+                status: 'started',
+                provider: 'github',
+                repository,
+                identity: context.config.roles.author.identity,
+                issue: created,
+                branch: row.branch,
+                worktreePath: row.path,
+            };
+        }
+        catch (error) {
+            return createdNotStarted(created, 'development', error);
+        }
+    }
+    return { issueNumber: created.number, issueUrl: created.url, mode: 'created-issue', title: created.title };
+}
+async function preflightStartDevelopment(context, tracking) {
+    const targets = await resolveNativeRelationshipTargets({
+        blockers: tracking.blockedBy ?? [],
+        ...(tracking.parentIssueNumber === undefined ? {} : { parentIssueNumber: tracking.parentIssueNumber }),
+        repo: context.repo,
+        rest: context.clients.rest,
+    });
+    const readiness = evaluateAgentReadiness({
+        blockedBy: targets.unresolvedBlockers,
+        body: tracking.body ?? '',
+        ...(tracking.points === undefined ? {} : { points: tracking.points }),
+        repoRoot: context.root,
+        title: tracking.title,
+    });
+    if (!readiness.ready) {
+        throw new DeliveryError(`New issue is not ready: ${readiness.failures.map((failure) => failure.message).join('; ')}`);
+    }
+    listWorktreesStrict(context.root);
+    if (gitExitCode(context.root, 'rev-parse', '--verify', defaultBaseRef(context.root)) !== 0) {
+        throw new DeliveryError('Default base ref is missing before tracked issue creation.');
+    }
+}
+function scratchStart(input, execution, identity) {
+    const title = (optionalString(input, 'title') ?? requireString(input, 'request'))
+        .replace(/\s+/gu, ' ')
+        .trim()
+        .slice(0, 90)
+        .trim();
+    const branchOverride = optionalString(input, 'branch');
+    const source = (branchOverride ?? optionalString(input, 'request') ?? title).replace(/\//gu, '-');
+    const slug = source
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/gu, '-')
+        .replace(/^-+|-+$/gu, '')
+        .slice(0, 56)
+        .replace(/-+$/gu, '') || 'scratch';
+    const branch = branchOverride ?? `scratch/${slug}`;
+    const name = `scratch-${slug}`;
+    return prepareStandaloneWorktree({ branch, identity, name, repoRoot: execution.repoRoot }).then((row) => ({
+        mode: 'scratch',
+        title,
+        branch: row.branch,
+        worktreePath: row.path,
+    }));
+}
+export async function executeTool(name, raw, execution) {
+    const definition = getAiDeliveryMcpTool(name);
+    if (!definition)
+        throw new DeliveryError(`Unknown ai-delivery tool ${name}.`);
+    const input = definition.inputSchema.parse(raw);
+    assertRepositorySelector(input, execution);
+    if (MUTATING_TOOLS.has(name) && input.dryRun !== true) {
+        assertDeliveryRuntimeAdmitted(execution);
+    }
+    switch (name) {
+        case 'issue_create': {
+            const context = await contextFor(execution, 'create');
+            return createIssue(context, input);
+        }
+        case 'issue_start': {
+            const identity = identityFor(execution, 'start');
+            if (input.resumeCreated === true && (input.issueNumber === undefined || input.develop !== true)) {
+                throw new DeliveryError('Resume of a known created issue requires issueNumber and develop=true.');
+            }
+            if (input.scratch === true) {
+                if (input.issueNumber !== undefined || input.develop === true || input.resumeCreated === true) {
+                    throw new DeliveryError('Scratch worktree cannot claim a tracked issue.');
+                }
+                return scratchStart(input, execution, identity);
+            }
+            const context = await contextFor(execution, 'start');
+            return startTrackedIssue(context, input);
+        }
+        case 'issue_update': {
+            const context = await contextFor(execution, 'update');
+            return updateIssue(context, input);
+        }
+        case 'issue_info': {
+            if (input.cached === true)
+                return cachedIssueInfo(execution.repoRoot, requiredNumber(input, 'issueNumber'));
+            const context = await contextFor(execution, 'info');
+            return issueInfo(context, requiredNumber(input, 'issueNumber'));
+        }
+        case 'issue_ready_check': {
+            const context = await contextFor(execution, 'ready:check');
+            return readyCheck(context, requiredNumber(input, 'issueNumber'));
+        }
+        case 'issue_develop': {
+            const context = await contextFor(execution, 'develop');
+            const issueNumber = requiredNumber(input, 'issueNumber');
+            const result = await developIssue(context, issueNumber);
+            if (input.assignee !== undefined)
+                await context.clients.rest.issues.addAssignees({
+                    ...context.repo,
+                    issue_number: issueNumber,
+                    assignees: [requireString(input, 'assignee')],
+                });
+            return result;
+        }
+        case 'issue_verify': {
+            const issueNumber = requiredNumber(input, 'issueNumber');
+            const root = primaryGitRoot(execution.repoRoot);
+            const row = getIssueWorktreeStrict(issueNumber, root);
+            const run = await verifyIssue({
+                issueNumber,
+                repoRoot: row.path,
+                ...(input.admit === undefined
+                    ? {}
+                    : { admittedResourceClasses: ['source_only', ...input.admit] }),
+            });
+            let approval;
+            if (input.prepublicationReview !== undefined) {
+                const artifact = parseReviewArtifact(readFileSync(requireString(input, 'prepublicationReview'), 'utf8'));
+                const config = loadDeliveryConfig(row.path).config;
+                savePrepublicationArtifact({
+                    artifact,
+                    classification: run.classification,
+                    config,
+                    issueNumber,
+                    repoRoot: row.path,
+                });
+                approval = reviewArtifactApproval({ artifact, classification: run.classification, config, issueNumber });
+            }
+            const evidence = await createIssuePhaseEvidence({
+                ...(approval === undefined ? {} : { approval }),
+                issueNumber,
+                phase: 'verify',
+                repoRoot: row.path,
+            });
+            return {
+                classificationReceiptId: run.classification.receiptId,
+                aggregateId: run.aggregate.aggregateId,
+                evidenceId: evidence.evidenceId,
+                manifestId: run.manifestId,
+            };
+        }
+        case 'issue_pr_create': {
+            const context = await contextFor(execution, 'pr:create');
+            const issueNumber = requiredNumber(input, 'issueNumber');
+            if (input.dryRun === true) {
+                const row = getIssueWorktreeStrict(issueNumber, context.root);
+                const run = loadVerifiedRun(row.path, issueNumber);
+                return { dryRun: true, headSha: run.classification.head.sha, risk: run.classification.risk };
+            }
+            return publishPr(context, {
+                issueNumber,
+                ...(input.body === undefined ? {} : { body: requireString(input, 'body') }),
+                ...(input.title === undefined ? {} : { title: requireString(input, 'title') }),
+                draft: input.draft !== false,
+            });
+        }
+        case 'issue_pr_info': {
+            const context = await contextFor(execution, 'pr:info');
+            return prInfo(context, {
+                ...(input.issueNumber === undefined ? {} : { issueNumber: Number(input.issueNumber) }),
+                ...(input.prNumber === undefined ? {} : { prNumber: Number(input.prNumber) }),
+            });
+        }
+        case 'issue_pr_review': {
+            const identity = optionalString(input, 'identity') ?? execution.identity;
+            const context = await contextFor({ ...execution, ...(identity === undefined ? {} : { identity }) }, 'pr:review', 'reviewer');
+            if (input.dryRun === true) {
+                const issueNumber = requiredNumber(input, 'issueNumber');
+                const row = getIssueWorktreeStrict(issueNumber, context.root);
+                const run = loadVerifiedRun(row.path, issueNumber);
+                const artifact = parseReviewArtifact(requireString(input, 'artifact'));
+                reviewArtifactApproval({
+                    artifact,
+                    classification: run.classification,
+                    config: context.config,
+                    issueNumber,
+                    prNumber: requiredNumber(input, 'prNumber'),
+                });
+                return { dryRun: true, artifactId: artifact.artifactId };
+            }
+            return submitFormalReview(context, {
+                artifact: requireString(input, 'artifact'),
+                issueNumber: requiredNumber(input, 'issueNumber'),
+                prNumber: requiredNumber(input, 'prNumber'),
+            });
+        }
+        case 'issue_pr_merge':
+        case 'issue_finish': {
+            const context = await contextFor(execution, name === 'issue_finish' ? 'finish' : 'pr:merge');
+            const issueNumber = requiredNumber(input, 'issueNumber');
+            const prNumber = requiredNumber(input, 'prNumber');
+            if (input.dryRun === true) {
+                const row = getIssueWorktreeStrict(issueNumber, context.root);
+                const run = loadVerifiedRun(row.path, issueNumber);
+                return { dryRun: true, headSha: run.classification.head.sha, prNumber };
+            }
+            const strategy = input.strategy;
+            return name === 'issue_finish'
+                ? finishIssue(context, { issueNumber, prNumber, ...(strategy === undefined ? {} : { strategy }) })
+                : mergePr(context, { issueNumber, prNumber, ...(strategy === undefined ? {} : { strategy }) });
+        }
+        case 'issue_worktree_create': {
+            const identity = identityFor(execution, 'worktree:create');
+            return prepareStandaloneWorktree({
+                branch: requireString(input, 'branch'),
+                identity,
+                name: requireString(input, 'name'),
+                repoRoot: execution.repoRoot,
+            });
+        }
+    }
+}
+//# sourceMappingURL=dispatch.js.map