@canhta/dsh-autopilot 0.1.0-alpha.1

package/lib/code-host/index.d.ts

@@ -0,0 +1,2 @@
+export * from './model.js';
+export { CodeHost, default } from './registry.js';

package/lib/code-host/index.js

@@ -0,0 +1,3 @@
+export * from './model.js';
+export { CodeHost, default } from './registry.js';
+//# sourceMappingURL=index.js.map

package/lib/code-host/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/code-host/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA"}

package/lib/code-host/model.d.ts

@@ -0,0 +1,118 @@
+declare const codeHostProviderIdBrand: unique symbol;
+declare const codeHostBindingIdBrand: unique symbol;
+declare const codeHostRepositoryIdBrand: unique symbol;
+declare const pullRequestIdBrand: unique symbol;
+export type CodeHostProviderId = string & {
+    readonly [codeHostProviderIdBrand]: true;
+};
+export type CodeHostBindingId = string & {
+    readonly [codeHostBindingIdBrand]: true;
+};
+export type CodeHostRepositoryId = string & {
+    readonly [codeHostRepositoryIdBrand]: true;
+};
+export type PullRequestId = string & {
+    readonly [pullRequestIdBrand]: true;
+};
+export declare const codeHostProviderId: (value: string) => CodeHostProviderId;
+export declare const codeHostBindingId: (value: string) => CodeHostBindingId;
+export declare const codeHostRepositoryId: (value: string) => CodeHostRepositoryId;
+export declare const pullRequestId: (value: string) => PullRequestId;
+export declare const CODE_HOST_INTERFACE_VERSION: 1;
+export declare const codeHostCapabilities: readonly ['repository', 'branch', 'pull-request', 'reconciliation'];
+export type CodeHostCapability = (typeof codeHostCapabilities)[number];
+/** Provider-owned publication target selected before a run allocates execution resources. */
+export interface CodeHostBinding {
+    readonly providerId: CodeHostProviderId;
+    readonly bindingId: CodeHostBindingId;
+    readonly repositoryId: CodeHostRepositoryId;
+    readonly repository: string;
+}
+export interface CodeHostTreeEntry {
+    readonly path: string;
+    readonly mode: '100644' | '100755';
+    readonly type: 'blob';
+    readonly sha: string;
+}
+export interface CodeHostFile {
+    readonly path: string;
+    readonly content: string;
+}
+/** Complete bounded publication input, reconstructed from the durable intent and verified local Git state. */
+export interface CodeHostPublication {
+    readonly bindingId: CodeHostBindingId;
+    readonly repositoryId: CodeHostRepositoryId;
+    readonly repository: string;
+    readonly baseBranch: string;
+    readonly headBranch: string;
+    readonly baseHead: string;
+    readonly localHead: string;
+    readonly tree: readonly CodeHostTreeEntry[];
+    readonly files: readonly CodeHostFile[];
+    readonly title: string;
+    readonly body: string;
+    readonly marker: string;
+}
+export interface PullRequestReceipt {
+    readonly id: PullRequestId;
+    readonly number: number;
+    readonly url: string;
+    readonly state: 'open' | 'merged' | 'closed-unmerged';
+    readonly baseBranch: string;
+    readonly headBranch: string;
+    readonly remoteHead: string;
+}
+export type CodeHostBranchObservation = {
+    readonly kind: 'missing';
+} | {
+    readonly kind: 'base';
+    readonly remoteHead: string;
+} | {
+    readonly kind: 'published';
+    readonly remoteHead: string;
+} | {
+    readonly kind: 'conflict';
+    readonly remoteHead: string;
+};
+export type CodeHostPullRequestObservation = {
+    readonly kind: 'missing';
+} | {
+    readonly kind: 'matching';
+    readonly receipt: PullRequestReceipt;
+} | {
+    readonly kind: 'conflict';
+    readonly reason: string;
+};
+export interface CodeHostReconciliation {
+    readonly baseHead: string;
+    readonly branch: CodeHostBranchObservation;
+    readonly pullRequest: CodeHostPullRequestObservation;
+}
+export interface CodeHostProviderRequest {
+    readonly publication: CodeHostPublication;
+    readonly signal: AbortSignal;
+}
+export interface CodeHostProvider {
+    readonly id: CodeHostProviderId;
+    readonly interfaceVersion: typeof CODE_HOST_INTERFACE_VERSION;
+    readonly displayName: string;
+    readonly configurationNamespace: string;
+    readonly capabilities: readonly CodeHostCapability[];
+    reconcile(request: CodeHostProviderRequest): Promise<CodeHostReconciliation>;
+    createBranch(request: CodeHostProviderRequest): Promise<void>;
+    publishChanges(request: CodeHostProviderRequest): Promise<void>;
+    createPullRequest(request: CodeHostProviderRequest): Promise<PullRequestReceipt>;
+}
+export interface CodeHostPublisher {
+    reconcile(publication: CodeHostPublication, signal?: AbortSignal): Promise<CodeHostReconciliation>;
+    createBranch(publication: CodeHostPublication, signal?: AbortSignal): Promise<void>;
+    publishChanges(publication: CodeHostPublication, signal?: AbortSignal): Promise<void>;
+    createPullRequest(publication: CodeHostPublication, signal?: AbortSignal): Promise<PullRequestReceipt>;
+}
+export type CodeHostProviderErrorCode = 'authentication' | 'permission' | 'invalid-configuration' | 'not-found' | 'conflict' | 'rate-limit' | 'timeout' | 'transient' | 'unsupported-capability' | 'ambiguous-acknowledgement' | 'invalid-response' | 'provider-unavailable';
+export declare class CodeHostProviderError extends Error {
+    readonly code: CodeHostProviderErrorCode;
+    readonly retryAfterMs?: number | undefined;
+    constructor(code: CodeHostProviderErrorCode, message: string, retryAfterMs?: number | undefined);
+}
+export {};

package/lib/code-host/model.js

@@ -0,0 +1,23 @@
+const ID_PATTERN = /^[a-z0-9][a-z0-9._:-]{0,255}$/;
+function opaqueId(kind, value) {
+    if (!ID_PATTERN.test(value))
+        throw new TypeError(`${kind} must match ${String(ID_PATTERN)}`);
+    return value;
+}
+export const codeHostProviderId = (value) => opaqueId('code-host provider id', value);
+export const codeHostBindingId = (value) => opaqueId('code-host binding id', value);
+export const codeHostRepositoryId = (value) => opaqueId('code-host repository id', value);
+export const pullRequestId = (value) => opaqueId('pull-request id', value);
+export const CODE_HOST_INTERFACE_VERSION = 1;
+export const codeHostCapabilities = ['repository', 'branch', 'pull-request', 'reconciliation'];
+export class CodeHostProviderError extends Error {
+    code;
+    retryAfterMs;
+    constructor(code, message, retryAfterMs) {
+        super(message);
+        this.code = code;
+        this.retryAfterMs = retryAfterMs;
+        this.name = 'CodeHostProviderError';
+    }
+}
+//# sourceMappingURL=model.js.map

package/lib/code-host/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/code-host/model.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,GAAG,+BAA+B,CAAA;AAElD,SAAS,QAAQ,CAAmB,IAAY,EAAE,KAAa;IAC7D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,eAAe,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IAC5F,OAAO,KAAU,CAAA;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAsB,EAAE,CACtE,QAAQ,CAAqB,uBAAuB,EAAE,KAAK,CAAC,CAAA;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAqB,EAAE,CACpE,QAAQ,CAAoB,sBAAsB,EAAE,KAAK,CAAC,CAAA;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAwB,EAAE,CAC1E,QAAQ,CAAuB,yBAAyB,EAAE,KAAK,CAAC,CAAA;AAClE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAiB,EAAE,CAAC,QAAQ,CAAgB,iBAAiB,EAAE,KAAK,CAAC,CAAA;AAEhH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAU,CAAA;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,CAAU,CAAA;AAwGvG,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAEnC,IAAI;IAEJ,YAAY;IAHvB,YACW,IAA+B,EACxC,OAAe,EACN,YAAqB;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAA;oBAJL,IAAI;4BAEJ,YAAY;QAGrB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;IACrC,CAAC;CACF"}

package/lib/code-host/registry.d.ts

@@ -0,0 +1,23 @@
+import { type Context, Service } from '@deepseek-ai/cordis';
+import { type CodeHostBinding, type CodeHostProvider, type CodeHostProviderId, type CodeHostPublisher } from './model.js';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        codeHost: CodeHost;
+    }
+}
+/** Generation-fenced normalized code-host seam used only by the Host publication owner. */
+export declare class CodeHost extends Service {
+    private readonly providers;
+    private readonly bindings;
+    constructor(ctx: Context);
+    /** Register one complete provider generation; the disposer fences new calls, aborts active work, and drains it. */
+    register(provider: CodeHostProvider): () => Promise<void>;
+    /** Register the single provider-owned target snapshot used for future execution claims. */
+    registerBinding(binding: CodeHostBinding): () => void;
+    /** Return the current provider-owned target, or fail before a run can snapshot an unavailable binding. */
+    binding(id: CodeHostProviderId): CodeHostBinding;
+    /** Retain one provider generation for a publication sequence; provider withdrawal fences every late result. */
+    withProvider<T>(id: CodeHostProviderId, operation: (publisher: CodeHostPublisher) => Promise<T>): Promise<T>;
+    private invoke;
+}
+export default CodeHost;

package/lib/code-host/registry.js

@@ -0,0 +1,90 @@
+import { Service } from '@deepseek-ai/cordis';
+import { ZodError } from 'zod';
+import { GenerationRegistry } from '../providers/generation-registry.js';
+import { CODE_HOST_INTERFACE_VERSION, CodeHostProviderError, codeHostCapabilities, } from './model.js';
+import { pullRequestReceiptSchema, reconciliationSchema } from './validation.js';
+/** Generation-fenced normalized code-host seam used only by the Host publication owner. */
+export class CodeHost extends Service {
+    providers = new GenerationRegistry();
+    bindings = new Map();
+    constructor(ctx) {
+        super(ctx, 'codeHost');
+    }
+    /** Register one complete provider generation; the disposer fences new calls, aborts active work, and drains it. */
+    register(provider) {
+        if (provider.interfaceVersion !== CODE_HOST_INTERFACE_VERSION) {
+            throw new TypeError(`code-host provider "${provider.id}" uses interface version ${String(provider.interfaceVersion)}; expected ${String(CODE_HOST_INTERFACE_VERSION)}`);
+        }
+        if (this.providers.has(provider.id))
+            throw new Error(`code-host provider "${provider.id}" is already registered`);
+        const missing = codeHostCapabilities.filter((capability) => !provider.capabilities.includes(capability));
+        if (missing.length > 0) {
+            throw new TypeError(`code-host provider "${provider.id}" is missing capabilities: ${missing.join(', ')}`);
+        }
+        return this.providers.register(provider.id, provider);
+    }
+    /** Register the single provider-owned target snapshot used for future execution claims. */
+    registerBinding(binding) {
+        if (this.bindings.has(binding.providerId)) {
+            throw new Error(`code-host binding "${binding.providerId}" is already registered`);
+        }
+        const retained = structuredClone(binding);
+        this.bindings.set(binding.providerId, retained);
+        let disposed = false;
+        return () => {
+            if (disposed)
+                return;
+            disposed = true;
+            if (this.bindings.get(binding.providerId) === retained)
+                this.bindings.delete(binding.providerId);
+        };
+    }
+    /** Return the current provider-owned target, or fail before a run can snapshot an unavailable binding. */
+    binding(id) {
+        const binding = this.bindings.get(id);
+        if (binding === undefined) {
+            throw new CodeHostProviderError('provider-unavailable', `code-host binding "${id}" is unavailable`);
+        }
+        return structuredClone(binding);
+    }
+    /** Retain one provider generation for a publication sequence; provider withdrawal fences every late result. */
+    async withProvider(id, operation) {
+        const registered = this.providers.require(id, () => new CodeHostProviderError('provider-unavailable', `code-host provider "${id}" is unavailable`));
+        const publisher = {
+            reconcile: (publication, signal) => this.invoke(registered, 'reconcile', publication, signal, reconciliationSchema.parse),
+            createBranch: (publication, signal) => this.invoke(registered, 'createBranch', publication, signal),
+            publishChanges: (publication, signal) => this.invoke(registered, 'publishChanges', publication, signal),
+            createPullRequest: (publication, signal) => this.invoke(registered, 'createPullRequest', publication, signal, pullRequestReceiptSchema.parse),
+        };
+        return await this.providers.retain(registered, () => operation(publisher));
+    }
+    async invoke(registered, operation, publication, callerSignal, validate) {
+        callerSignal?.throwIfAborted();
+        const request = {
+            publication: structuredClone(publication),
+            signal: this.providers.signal(registered, callerSignal),
+        };
+        try {
+            const value = await registered.provider[operation](request);
+            this.providers.assertCurrent(registered, () => withdrawn(registered.provider.id, operation));
+            callerSignal?.throwIfAborted();
+            return validate === undefined ? value : validate(value);
+        }
+        catch (error) {
+            if (!registered.accepting)
+                throw withdrawn(registered.provider.id, operation);
+            callerSignal?.throwIfAborted();
+            if (error instanceof CodeHostProviderError)
+                throw error;
+            if (error instanceof ZodError) {
+                throw new CodeHostProviderError('invalid-response', `code-host provider "${registered.provider.id}" returned an invalid ${operation} result`);
+            }
+            throw new CodeHostProviderError('transient', `code-host provider "${registered.provider.id}" failed ${operation}`);
+        }
+    }
+}
+function withdrawn(id, operation) {
+    return new CodeHostProviderError(operation === 'reconcile' ? 'provider-unavailable' : 'ambiguous-acknowledgement', `code-host provider "${id}" was withdrawn`);
+}
+export default CodeHost;
+//# sourceMappingURL=registry.js.map

package/lib/code-host/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/code-host/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAA;AAC9B,OAAO,EAAE,kBAAkB,EAA2B,MAAM,qCAAqC,CAAA;AACjG,OAAO,EACL,2BAA2B,EAG3B,qBAAqB,EAKrB,oBAAoB,GACrB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAQhF,2FAA2F;AAC3F,MAAM,OAAO,QAAS,SAAQ,OAAO;IAClB,SAAS,GAAG,IAAI,kBAAkB,EAAwC,CAAA;IAC1E,QAAQ,GAAG,IAAI,GAAG,EAAuC,CAAA;IAE1E,YAAY,GAAY;QACtB,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACxB,CAAC;IAED,mHAAmH;IACnH,QAAQ,CAAC,QAA0B;QACjC,IAAI,QAAQ,CAAC,gBAAgB,KAAK,2BAA2B,EAAE,CAAC;YAC9D,MAAM,IAAI,SAAS,CACjB,uBAAuB,QAAQ,CAAC,EAAE,4BAA4B,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,cAAc,MAAM,CAAC,2BAA2B,CAAC,EAAE,CACnJ,CAAA;QACH,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,EAAE,yBAAyB,CAAC,CAAA;QACjH,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAA;QACxG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,uBAAuB,QAAQ,CAAC,EAAE,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3G,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;IACvD,CAAC;IAED,2FAA2F;IAC3F,eAAe,CAAC,OAAwB;QACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,UAAU,yBAAyB,CAAC,CAAA;QACpF,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QAC/C,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAClG,CAAC,CAAA;IACH,CAAC;IAED,0GAA0G;IAC1G,OAAO,CAAC,EAAsB;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,qBAAqB,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,kBAAkB,CAAC,CAAA;QACrG,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;IAED,+GAA+G;IAC/G,KAAK,CAAC,YAAY,CAAI,EAAsB,EAAE,SAAuD;QACnG,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CACvC,EAAE,EACF,GAAG,EAAE,CAAC,IAAI,qBAAqB,CAAC,sBAAsB,EAAE,uBAAuB,EAAE,kBAAkB,CAAC,CACrG,CAAA;QACD,MAAM,SAAS,GAAsB;YACnC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CACjC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC;YACvF,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC;YACnG,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,CAAC;YACvG,iBAAiB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CACzC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,EAAE,wBAAwB,CAAC,KAAK,CAAC;SACpG,CAAA;QACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;IAC5E,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,UAAgD,EAChD,SAA8G,EAC9G,WAAgC,EAChC,YAA0B,EAC1B,QAAgC;QAEhC,YAAY,EAAE,cAAc,EAAE,CAAA;QAC9B,MAAM,OAAO,GAA4B;YACvC,WAAW,EAAE,eAAe,CAAC,WAAW,CAAC;YACzC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC;SACxD,CAAA;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAA;YAC3D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAA;YAC5F,YAAY,EAAE,cAAc,EAAE,CAAA;YAC9B,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,SAAS;gBAAE,MAAM,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;YAC7E,YAAY,EAAE,cAAc,EAAE,CAAA;YAC9B,IAAI,KAAK,YAAY,qBAAqB;gBAAE,MAAM,KAAK,CAAA;YACvD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,qBAAqB,CAC7B,kBAAkB,EAClB,uBAAuB,UAAU,CAAC,QAAQ,CAAC,EAAE,yBAAyB,SAAS,SAAS,CACzF,CAAA;YACH,CAAC;YACD,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,uBAAuB,UAAU,CAAC,QAAQ,CAAC,EAAE,YAAY,SAAS,EAAE,CAAC,CAAA;QACpH,CAAC;IACH,CAAC;CACF;AAED,SAAS,SAAS,CAChB,EAAsB,EACtB,SAA8G;IAE9G,OAAO,IAAI,qBAAqB,CAC9B,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,2BAA2B,EAChF,uBAAuB,EAAE,iBAAiB,CAC3C,CAAA;AACH,CAAC;AAED,eAAe,QAAQ,CAAA"}

package/lib/code-host/validation.d.ts

@@ -0,0 +1,51 @@
+import { z } from 'zod';
+declare const receiptSchema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<import("./model.js").PullRequestId, string>>;
+    number: z.ZodNumber;
+    url: z.ZodURL;
+    state: z.ZodEnum<{
+        "closed-unmerged": "closed-unmerged";
+        merged: "merged";
+        open: "open";
+    }>;
+    baseBranch: z.ZodString;
+    headBranch: z.ZodString;
+    remoteHead: z.ZodString;
+}, z.core.$strip>;
+export declare const reconciliationSchema: z.ZodObject<{
+    baseHead: z.ZodString;
+    branch: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"missing">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"base">;
+        remoteHead: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"published">;
+        remoteHead: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"conflict">;
+        remoteHead: z.ZodString;
+    }, z.core.$strip>], "kind">;
+    pullRequest: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"missing">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"matching">;
+        receipt: z.ZodObject<{
+            id: z.ZodPipe<z.ZodString, z.ZodTransform<import("./model.js").PullRequestId, string>>;
+            number: z.ZodNumber;
+            url: z.ZodURL;
+            state: z.ZodEnum<{
+                "closed-unmerged": "closed-unmerged";
+                merged: "merged";
+                open: "open";
+            }>;
+            baseBranch: z.ZodString;
+            headBranch: z.ZodString;
+            remoteHead: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"conflict">;
+        reason: z.ZodString;
+    }, z.core.$strip>], "kind">;
+}, z.core.$strip>;
+export { receiptSchema as pullRequestReceiptSchema };

package/lib/code-host/validation.js

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+import { pullRequestId } from './model.js';
+const sha = z.string().regex(/^[a-f0-9]{40}$/);
+const receiptSchema = z.object({
+    id: z.string().min(1).max(256).transform(pullRequestId),
+    number: z.number().int().positive().safe(),
+    url: z.url().max(4096),
+    state: z.enum(['open', 'merged', 'closed-unmerged']),
+    baseBranch: z.string().min(1).max(256),
+    headBranch: z.string().min(1).max(256),
+    remoteHead: sha,
+});
+const branchSchema = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('missing') }),
+    z.object({ kind: z.literal('base'), remoteHead: sha }),
+    z.object({ kind: z.literal('published'), remoteHead: sha }),
+    z.object({ kind: z.literal('conflict'), remoteHead: sha }),
+]);
+const pullRequestSchema = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('missing') }),
+    z.object({ kind: z.literal('matching'), receipt: receiptSchema }),
+    z.object({ kind: z.literal('conflict'), reason: z.string().min(1).max(4096) }),
+]);
+export const reconciliationSchema = z.object({
+    baseHead: sha,
+    branch: branchSchema,
+    pullRequest: pullRequestSchema,
+});
+export { receiptSchema as pullRequestReceiptSchema };
+//# sourceMappingURL=validation.js.map

package/lib/code-host/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/code-host/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE1C,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;AAC9C,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;IAC1C,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,UAAU,EAAE,GAAG;CAChB,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IACxC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IACtD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;CAC3D,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACrD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IACxC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACjE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;CAC/E,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,GAAG;IACb,MAAM,EAAE,YAAY;IACpB,WAAW,EAAE,iBAAiB;CAC/B,CAAC,CAAA;AAEF,OAAO,EAAE,aAAa,IAAI,wBAAwB,EAAE,CAAA"}

package/lib/code-host.d.ts

@@ -0,0 +1,2 @@
+export * from './code-host/index.js';
+export { default } from './code-host/index.js';

package/lib/code-host.js

@@ -0,0 +1,3 @@
+export * from './code-host/index.js';
+export { default } from './code-host/index.js';
+//# sourceMappingURL=code-host.js.map

package/lib/code-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-host.js","sourceRoot":"","sources":["../src/code-host.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA"}

package/lib/config/index.d.ts

@@ -0,0 +1,2 @@
+export * from './settings.js';
+export { default } from './settings.js';

package/lib/config/index.js

@@ -0,0 +1,3 @@
+export * from './settings.js';
+export { default } from './settings.js';
+//# sourceMappingURL=index.js.map

package/lib/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA"}

package/lib/config/settings.d.ts

@@ -0,0 +1,51 @@
+import { type Context, Service } from '@deepseek-ai/cordis';
+import { type NotificationEvent } from '../notification.js';
+export interface NotificationSubscription {
+    providerId: string;
+    destinationId: string;
+    events: NotificationEvent['type'][];
+    summaryDisclosure: 'redacted' | 'full';
+}
+export interface AutopilotSettings {
+    trackerProvider: string;
+    codeHostProvider: string;
+    allowWorkflowChanges: boolean;
+    notificationSubscriptions: NotificationSubscription[];
+    runUrlTemplate: string;
+    issueUrlTemplate: string;
+    maxQueued: number;
+    maxRunning: number;
+    maxBriefBytes: number;
+    reconcileIntervalSeconds: number;
+    executionMode: 'disabled' | 'native';
+    targetRepository: string;
+    targetBaseBranch: string;
+    managedWorktreeRoot: string;
+    runtimeStorePath: string;
+    autoCleanupEnabled: boolean;
+    cleanupRetentionDays: number;
+    deploymentTokenCap: number;
+    perRunTokenCap: number;
+    runTokenAllowance: number;
+}
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        autopilotConfig: AutopilotConfig;
+    }
+}
+/** Own and validate the one root Autopilot Settings namespace. */
+export declare class AutopilotConfig extends Service {
+    static readonly inject: string[];
+    private settings?;
+    constructor(ctx: Context);
+    /** Return the current validated Settings snapshot; the caller receives no credential values and performs no I/O. */
+    get(): AutopilotSettings;
+    /**
+     * Observe successfully persisted Settings changes until the returned disposer is called.
+     * The Settings service serializes callbacks; callback failures propagate according to its watcher contract.
+     */
+    watch(callback: (next: AutopilotSettings, previous: AutopilotSettings) => void | Promise<void>): () => void;
+}
+/** Validate execution routing and budget settings before any resource is acquired. */
+export declare function validateExecutionSettings(settings: AutopilotSettings): void;
+export default AutopilotConfig;

package/lib/config/settings.js

@@ -0,0 +1,195 @@
+import { isAbsolute } from 'node:path';
+import { Service } from '@deepseek-ai/cordis';
+import s from '@deepseek-ai/schemastery';
+import { codeHostProviderId } from '../code-host.js';
+import { notificationDestinationId, notificationProviderId } from '../notification.js';
+import { trackerProviderId } from '../tracker.js';
+const autopilotSettingsSchema = s.object({
+    trackerProvider: s.string().default('jira'),
+    codeHostProvider: s.string().default(''),
+    allowWorkflowChanges: s.boolean().default(false),
+    notificationSubscriptions: s
+        .array(s.object({
+        providerId: s.string().required(),
+        destinationId: s.string().required(),
+        events: s.array(s.union(['started', 'blocked', 'paused', 'failed', 'completed'])).default([]),
+        summaryDisclosure: s.union(['redacted', 'full']).default('redacted'),
+    }))
+        .default([]),
+    runUrlTemplate: s.string().default(''),
+    issueUrlTemplate: s.string().default(''),
+    maxQueued: s.number().min(1).max(100).default(20),
+    maxRunning: s.number().min(1).max(100).default(1),
+    maxBriefBytes: s
+        .number()
+        .min(1024)
+        .max(32 * 1024)
+        .default(32 * 1024),
+    reconcileIntervalSeconds: s
+        .number()
+        .min(5)
+        .max(24 * 60 * 60)
+        .default(5 * 60),
+    executionMode: s.union(['disabled', 'native']).default('disabled'),
+    targetRepository: s.string().default(''),
+    targetBaseBranch: s.string().default(''),
+    managedWorktreeRoot: s.string().default(''),
+    runtimeStorePath: s.string().default(''),
+    autoCleanupEnabled: s.boolean().default(true),
+    cleanupRetentionDays: s.number().min(0).max(3650).default(7),
+    deploymentTokenCap: s.number().min(0).default(0),
+    perRunTokenCap: s.number().min(0).default(0),
+    runTokenAllowance: s.number().min(0).default(0),
+});
+/** Own and validate the one root Autopilot Settings namespace. */
+export class AutopilotConfig extends Service {
+    static inject = ['settings'];
+    settings;
+    constructor(ctx) {
+        super(ctx, 'autopilotConfig');
+        this.settings = ctx.settings.register('dsh-autopilot', autopilotSettingsSchema, {
+            validate: (value) => {
+                validateSettings(value);
+                const current = this.settings?.get();
+                if (current === undefined)
+                    return;
+                if (current.trackerProvider !== value.trackerProvider) {
+                    const admission = ctx.get('admission');
+                    if (admission === undefined) {
+                        throw new Error('Cannot change tracker provider because durable run status is unavailable.');
+                    }
+                    const blocker = admission.trackerSwitchBlocker(current.trackerProvider);
+                    if (blocker !== undefined)
+                        throw new Error(blocker);
+                }
+                if (current.codeHostProvider !== value.codeHostProvider) {
+                    const admission = ctx.get('admission');
+                    if (admission === undefined) {
+                        throw new Error('Cannot change code-host provider because durable run status is unavailable.');
+                    }
+                    const blocker = admission.codeHostSwitchBlocker(current.codeHostProvider);
+                    if (blocker !== undefined)
+                        throw new Error(blocker);
+                }
+                if (current.targetRepository !== value.targetRepository ||
+                    current.targetBaseBranch !== value.targetBaseBranch ||
+                    current.managedWorktreeRoot !== value.managedWorktreeRoot ||
+                    current.allowWorkflowChanges !== value.allowWorkflowChanges) {
+                    const admission = ctx.get('admission');
+                    if (admission === undefined) {
+                        throw new Error('Cannot change execution routing because durable run status is unavailable.');
+                    }
+                    const blocker = admission.executionRoutingSwitchBlocker();
+                    if (blocker !== undefined)
+                        throw new Error(blocker);
+                }
+            },
+        });
+    }
+    /** Return the current validated Settings snapshot; the caller receives no credential values and performs no I/O. */
+    get() {
+        if (this.settings === undefined)
+            throw new Error('Autopilot Settings are not initialized');
+        return this.settings.get();
+    }
+    /**
+     * Observe successfully persisted Settings changes until the returned disposer is called.
+     * The Settings service serializes callbacks; callback failures propagate according to its watcher contract.
+     */
+    watch(callback) {
+        if (this.settings === undefined)
+            throw new Error('Autopilot Settings are not initialized');
+        return this.settings.watch(callback);
+    }
+}
+function validateSettings(value) {
+    trackerProviderId(value.trackerProvider);
+    if (value.codeHostProvider !== '')
+        codeHostProviderId(value.codeHostProvider);
+    if (value.notificationSubscriptions.length > 32)
+        throw new TypeError('too many notification subscriptions');
+    const notificationKeys = new Set();
+    for (const subscription of value.notificationSubscriptions) {
+        notificationProviderId(subscription.providerId);
+        notificationDestinationId(subscription.destinationId);
+        if (subscription.events.length === 0 || new Set(subscription.events).size !== subscription.events.length) {
+            throw new TypeError('notification events must be non-empty and unique');
+        }
+        const key = `${subscription.providerId}\0${subscription.destinationId}`;
+        if (notificationKeys.has(key))
+            throw new TypeError('notification destinations must be unique');
+        notificationKeys.add(key);
+    }
+    if (value.notificationSubscriptions.length > 0) {
+        validateUrlTemplate(value.runUrlTemplate, '{runId}', 'run URL');
+        validateUrlTemplate(value.issueUrlTemplate, '{displayKey}', 'issue URL');
+    }
+    if (value.runtimeStorePath !== '' && !isAbsolute(value.runtimeStorePath)) {
+        throw new TypeError('runtimeStorePath must be an absolute path');
+    }
+    for (const [name, candidate] of [
+        ['maxQueued', value.maxQueued],
+        ['maxRunning', value.maxRunning],
+        ['maxBriefBytes', value.maxBriefBytes],
+        ['reconcileIntervalSeconds', value.reconcileIntervalSeconds],
+        ['cleanupRetentionDays', value.cleanupRetentionDays],
+        ['deploymentTokenCap', value.deploymentTokenCap],
+        ['perRunTokenCap', value.perRunTokenCap],
+        ['runTokenAllowance', value.runTokenAllowance],
+    ]) {
+        if (!Number.isInteger(candidate))
+            throw new TypeError(`${name} must be an integer`);
+    }
+    if (value.executionMode === 'native')
+        validateExecutionSettings(value);
+}
+function validateUrlTemplate(template, placeholder, subject) {
+    if (template.length > 4096)
+        throw new TypeError(`${subject} template is too long`);
+    if (template.split(placeholder).length !== 2)
+        throw new TypeError(`${subject} template must contain ${placeholder} once`);
+    let url;
+    try {
+        url = new URL(template.replace(placeholder, 'validated-id'));
+    }
+    catch {
+        throw new TypeError(`${subject} template must produce an absolute URL`);
+    }
+    if (url.protocol !== 'https:' || url.username !== '' || url.password !== '') {
+        throw new TypeError(`${subject} template must use HTTPS without embedded credentials`);
+    }
+}
+/** Validate execution routing and budget settings before any resource is acquired. */
+export function validateExecutionSettings(settings) {
+    if (settings.executionMode !== 'native') {
+        throw new Error('dispatch is disabled; enable native execution first');
+    }
+    if (!isAbsolute(settings.targetRepository) || !isAbsolute(settings.managedWorktreeRoot)) {
+        throw new TypeError('target repository and managed worktree root must be absolute paths');
+    }
+    if (settings.codeHostProvider === '')
+        throw new TypeError('codeHostProvider is required for execution');
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/.test(settings.targetBaseBranch) ||
+        settings.targetBaseBranch.includes('..') ||
+        settings.targetBaseBranch.includes('//') ||
+        settings.targetBaseBranch.endsWith('/') ||
+        settings.targetBaseBranch.endsWith('.lock')) {
+        throw new TypeError('target base branch is invalid');
+    }
+    for (const [name, value] of [
+        ['deploymentTokenCap', settings.deploymentTokenCap],
+        ['perRunTokenCap', settings.perRunTokenCap],
+        ['runTokenAllowance', settings.runTokenAllowance],
+    ]) {
+        if (!Number.isSafeInteger(value) || value <= 0)
+            throw new TypeError(`${name} must be a positive safe integer`);
+    }
+    if (settings.runTokenAllowance > settings.perRunTokenCap) {
+        throw new TypeError('run token allowance must not exceed the per-run token cap');
+    }
+    if (settings.runTokenAllowance > settings.deploymentTokenCap) {
+        throw new TypeError('run token allowance must not exceed the deployment token cap');
+    }
+}
+export default AutopilotConfig;
+//# sourceMappingURL=settings.js.map